last executing test programs: 3m8.335044063s ago: executing program 4 (id=1153): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) writev(r0, 0x0, 0x0) 3m7.436433387s ago: executing program 4 (id=1156): timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0x164, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x1) ioctl$TIOCSTI(r1, 0x5412, 0x0) r3 = syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2, 0x2}, &(0x7f00000001c0), &(0x7f0000000340)) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0xb3c0eb852d8432d2, 0x2, 0x0, 0x0, r3}, &(0x7f00000002c0), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_1\x00'}) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0x15, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) timerfd_create(0x0, 0x0) 3m3.752901984s ago: executing program 4 (id=1166): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100026bd7000fddbdf25040000000c0007800800"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c80)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0404190c4feefd25ad2983456cc952f1e6fc82"], 0xd) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x0, 0x2, 0x2, '\x00', 0xffffffffffffffe0}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0xfc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x1, 0x0, 0x13, 0x4, 0x0, 0x3, 0x0, 0x4, '\x00', 0xff, 0x2}) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000040)={0x17, 0x0, 0x0}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) io_uring_setup(0x2195, &(0x7f0000000080)={0x0, 0x7897, 0x400, 0x1, 0x232}) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="300000002c0001000000000000000000040000801c0011"], 0x30}], 0x1}, 0x0) 2m59.045048222s ago: executing program 4 (id=1178): r0 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(0xffffffffffffffff) r1 = dup(r0) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) 2m56.397487979s ago: executing program 4 (id=1181): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) writev(r0, &(0x7f0000000280), 0x0) 2m55.86071391s ago: executing program 4 (id=1183): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0xf0, 0x0) 2m40.505933448s ago: executing program 32 (id=1183): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0xf0, 0x0) 16.000670155s ago: executing program 3 (id=1661): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x10, &(0x7f0000000080)="922b22c0", 0x4) 15.831099435s ago: executing program 3 (id=1663): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r2 = syz_open_pts(r1, 0x101) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) write$UHID_INPUT(r3, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) 15.57060281s ago: executing program 3 (id=1664): r0 = socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r1, 0x0, 0x24005040) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d20000000000006040000000000f93132", 0x39}], 0x1) 13.19443409s ago: executing program 3 (id=1670): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002040)=@deltfilter={0xedc, 0x2d, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x12}, {0xd, 0xd}, {0xfff1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xe58, 0x2, [@TCA_U32_ACT={0xe4c, 0x7, [@m_skbedit={0xcc, 0x12, 0x0, 0x0, {{0xc}, {0x4}, {0x9f, 0x6, "a80ee92f3d22b735e6b10965e84069d6cd152c1a941610846e6a03d2f399f28e9dce26352da628afc51750213636db3634689c66eac5e1d2b48729ce0b62d7be0836e927e9c0ae5c03a9084eb966d536a1d0ed9d1c88d43b697453f89771eb1441f39f88638f3f2f4e08f469d9110180e314772698c78db10ecef2b8ac42076d9082f23c311b5812f75e9fcb2f4320ea8299deec23b0b4198ce94f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x198, 0xc, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1e, 0x4, 0x0, 0x9}, 0x12}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x4, 0x4, 0x2, 0x3}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x10000000, 0x6, 0x4}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x30000000, 0x8, 0x4}, 0x35}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3ff, 0x7, 0x1000, 0x6}, 0x64}}]}, {0xdf, 0x6, "b097046f8c00ce36a58f913bfc191376f4e944b786c82b8ba8c55a71938eecb0ec0ae403cddd530c8dde59470eb07bec10694538fe135be76b71f52afa45a8b0dbe781ba4b19800805e359ccb84cb5a6351e3b1464d0ac1b2b564eae207241de14c3d281a878e6f7615c3c74901512952029d745c404b11e00f866b98459e8bffbc29aa0486db41151d2f8c754f1a345eae3aca3006736693183b1a299454add4e1ab1d2dd7af6a3c7358264ff3ae7377778aa05226501e188124ac89a4d26a2170b0828e550cd7d49331427b1520a4e87558c42848ad0ec91c8f8"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0x114, 0x10, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x7ff, 0x3, 0xfff, 0x7}, 0x5f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x8, 0xffffffffffffffff, 0xea, 0x14000}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x8001, 0x4, 0x200, 0x1}, 0x8}}]}, {0x93, 0x6, "4b7d662a5a2cc6abc02990106f9a95beef09495a1d763914d0eba3503993fbe295d2c33bcf4412c5dc3bff2c8c225fd6df5be611ceea29b14195c68d23bab97aeaa92be60d75e2a9375b0fe891180d3e69338d85ab92781af71f89a059ece8c8bbd46e76ad21f603213f83a1c12b1950814cec85b96725b72000312dc2bc8f6aaa90a23903243df5f14a2b8fbf8cd4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x3}}}}, @m_csum={0xf4, 0x8, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x3ff, 0x6, 0xffffffff, 0x81}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0x400, 0x8, 0x0, 0x8001}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x43ad, 0x2, 0x4ad3, 0x3ff}, 0x1d}}]}, {0x72, 0x6, "c4406b43baa784b410dba05d655694edc350d6dc51e702a20ce6ee5727186822200cb40bf4b39ea7ef0491c18f0b08ed7d7b61d7e340bdb5df298f9066c180c236bc57b7824e337f3ba2cb5ad8f8fcbb5bdba03175232fd801123007ec68994db96ce057b4cb6dcd3607811cb268"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x828, 0x1e, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x8, 0x5, 0x8, 0x2}, 0xd}}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x7bd, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x108, 0x13, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xfffffffe, 0x6, 0xffffffff, 0xffff06be}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3a5, 0x359d, 0xffffffffffffffff, 0x2, 0x4}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x0, 0x7fffffff, 0x2}, 0x4}}]}, {0x82, 0x6, "f820f805bf24a4f3b81f4772238cd414f112e0cf95b80f4211d3faf8f53e76a594b101c0b93526a56f01fceb395c74506ce9a38ae4ec5f44403fe8a58b7cdb07d748388c000fa601d5f42ad7874381daada96fa4cf16bb6dd90e9237f3d93dd954b29d3fdaefe64d1d1f90fe4c3f34b8496adef9f5a7dd049d12a97cb6da"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0xac, 0x7, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xa1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x40, 0x10000, 0x6, 0x6, 0x5}}]}, {0x56, 0x6, "23ef3a563fd788ce7bc906ab634de7d6a12e6695c335162e55fd8ea7763fa1c60af545b087c24f7d1fdb00f58d448f7ed0c1bc2b7d3cab2a4091db29869b7181196c02cfdb40d2528ae06771e7b2b39c9dd1"}, {0xc, 0x7, {0x26657bafeda078ea}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_LINK={0x8, 0x3, 0x414df975}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x7}]}}, @TCA_CHAIN={0x8, 0xb, 0xab}]}, 0xedc}, 0x1, 0x0, 0x0, 0x400c890}, 0xbeac10588807b056) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x11) r3 = inotify_init() readv(r3, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a80)=ANY=[@ANYBLOB="2400000070000100000000000004000007000000", @ANYRES32=0x0], 0x24}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x20000010) close(0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r5 = syz_open_pts(r4, 0x141601) fcntl$setstatus(r5, 0x4, 0x102800) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) 11.973328263s ago: executing program 5 (id=1672): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000480)={0x4, "408ec0d74b134a47eb1a17b89514e835a19d00f2af82ae41af04db9a632d8e0a", 0x2, 0x1}) 10.565707556s ago: executing program 3 (id=1674): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYBLOB], 0x14}}, 0x0) 10.447581963s ago: executing program 0 (id=1675): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r2 = syz_open_pts(r1, 0x101) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) write$UHID_INPUT(r3, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) 10.447174363s ago: executing program 5 (id=1676): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xd, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x54) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x4047b013}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x11) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.069415295s ago: executing program 2 (id=1677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) 10.069040915s ago: executing program 0 (id=1678): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(0x0, 0x3, 0x88c02) syz_usb_disconnect(r0) r2 = dup(r1) ioctl$sock_SIOCINQ(r2, 0x541b, 0x0) 8.394008374s ago: executing program 2 (id=1680): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="0400af8a7a40", @ANYBLOB="01002cbd7000ffdbdf25040000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$inet6(0xa, 0x805, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) getsockopt$bt_hci(r4, 0x84, 0x7b, 0x0, &(0x7f0000000040)=0x700) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000000)='./file1/file3\x00', 0x1, 0x43) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 8.245572543s ago: executing program 3 (id=1681): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000fce2ad0f3041fb151c84478d177643916ef6cb18077c35958978f449a5122c01e2f060788f6885596353efaa011fd4a75f55a9718ab96df7f76f664b61465f0865bca505f77eb85e9d8864fdf85aa04071b29de975f92fbb8cd529621b3fa705f3d5ed4c2cee1ba7b83532e9575ac6c099b8234460cb85a9677008ffbfd45a3f847bd0277317fea"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000006, 0xc3072, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x44) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, 0x0) socket$isdn(0x22, 0x3, 0x26) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x2000000, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r2, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}}, 0x28}}, 0x0) 8.193112966s ago: executing program 5 (id=1682): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x4000, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff9a, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x6}, 0xffffffff, 0xfffffffc, 0x0, 0x1, 0x6}, {{@in=@private=0xa010101, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x5}}, 0xe4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r4, &(0x7f0000000300)=""/154, 0x9a) 7.159365237s ago: executing program 2 (id=1684): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002040)=@deltfilter={0xedc, 0x2d, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x12}, {0xd, 0xd}, {0xfff1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xe58, 0x2, [@TCA_U32_ACT={0xe4c, 0x7, [@m_skbedit={0xcc, 0x12, 0x0, 0x0, {{0xc}, {0x4}, {0x9f, 0x6, "a80ee92f3d22b735e6b10965e84069d6cd152c1a941610846e6a03d2f399f28e9dce26352da628afc51750213636db3634689c66eac5e1d2b48729ce0b62d7be0836e927e9c0ae5c03a9084eb966d536a1d0ed9d1c88d43b697453f89771eb1441f39f88638f3f2f4e08f469d9110180e314772698c78db10ecef2b8ac42076d9082f23c311b5812f75e9fcb2f4320ea8299deec23b0b4198ce94f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x198, 0xc, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1e, 0x4, 0x0, 0x9}, 0x12}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x4, 0x4, 0x2, 0x3}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x10000000, 0x6, 0x4}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x30000000, 0x8, 0x4}, 0x35}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x3ff, 0x7, 0x1000, 0x6}, 0x64}}]}, {0xdf, 0x6, "b097046f8c00ce36a58f913bfc191376f4e944b786c82b8ba8c55a71938eecb0ec0ae403cddd530c8dde59470eb07bec10694538fe135be76b71f52afa45a8b0dbe781ba4b19800805e359ccb84cb5a6351e3b1464d0ac1b2b564eae207241de14c3d281a878e6f7615c3c74901512952029d745c404b11e00f866b98459e8bffbc29aa0486db41151d2f8c754f1a345eae3aca3006736693183b1a299454add4e1ab1d2dd7af6a3c7358264ff3ae7377778aa05226501e188124ac89a4d26a2170b0828e550cd7d49331427b1520a4e87558c42848ad0ec91c8f8"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0x114, 0x10, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x7ff, 0x3, 0xfff, 0x7}, 0x5f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x8, 0xffffffffffffffff, 0xea, 0x14000}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x8001, 0x4, 0x200, 0x1}, 0x8}}]}, {0x93, 0x6, "4b7d662a5a2cc6abc02990106f9a95beef09495a1d763914d0eba3503993fbe295d2c33bcf4412c5dc3bff2c8c225fd6df5be611ceea29b14195c68d23bab97aeaa92be60d75e2a9375b0fe891180d3e69338d85ab92781af71f89a059ece8c8bbd46e76ad21f603213f83a1c12b1950814cec85b96725b72000312dc2bc8f6aaa90a23903243df5f14a2b8fbf8cd4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x3}}}}, @m_csum={0xf4, 0x8, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x3ff, 0x6, 0xffffffff, 0x81}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3ff, 0x400, 0x8, 0x0, 0x8001}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x43ad, 0x2, 0x4ad3, 0x3ff}, 0x1d}}]}, {0x72, 0x6, "c4406b43baa784b410dba05d655694edc350d6dc51e702a20ce6ee5727186822200cb40bf4b39ea7ef0491c18f0b08ed7d7b61d7e340bdb5df298f9066c180c236bc57b7824e337f3ba2cb5ad8f8fcbb5bdba03175232fd801123007ec68994db96ce057b4cb6dcd3607811cb268"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0x828, 0x1e, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x8, 0x5, 0x8, 0x2}, 0xd}}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x7bd, 0x6, "965210937004475b30aced0c72407ce3893609d1d7aecd8ad1b84a429065d90ca17e34db0102aab0cd0e2e51da723641383efce4d2bfe6b9c6dedb2a011d0353684ead2f13e1d30e85b9bdeebb73d0a0ce7aa0351a51ceeae89bed9f723a9e1c90aac8d565f5ec81c105e7354475cf17855cb5c888f930f89e4fae34260a0da71cee7a98f9a836175a53ef6ea6d3d26840e083e8e32ac16e351e145a658dd584d471d09260cd4e6dbddbd0f9d3f4bf7e67eb604439ef2e1f3802a9385e8c7ee536b63959da09e04f9be3c242ec86df8e4bc638c75ffe63012f679b0bd8f3305e3e4eb0ace2415dd5116547387cda56827c346441491afc6d298bc728005e66afa4089410210c98081fced7cc8eebe1babdce89bd51b65d5c850c7841f05b30ee5df85ac658088eceae6d01e083bae245525de5f223b833db992b2c1f49bbffee253ceb72eb5eb78e20aa4382b4d8e692ad69749f0bf6109b29678d26792d93c647e5dabbb728bc5cd9ff65a6b8554b0de1d0150b900c79a0929ca5449a9a0abddbd63392196ffcd304843d065b3f7330c829a3868cac46de075ee4b1feb1dbbfe5bb425acc24e7764d5faea4c1270d97ba91c98814ae01cda860a62bd2cbf07bd9438b92b95d1f07204b33b025c725cc9fa396910ea577ae85a364def45495914f781bf8dd3c914811668f33ef139c136f43da365e24995d8f9df0592b7f52f7db9d2450d36b5f3e54a3c7e426c442f17a55cc6b862e4810e21602508822aeb6b97a94e1135183e5689d2f9183aa54fd3728038e467c6d37fd391dcf724fc8664be8a65c0888cf1bd2afd9045b73f703a472abc1a1363d929997c8ec3da9af7ce5befce4a45352414717740066f6111cfc51b7b26a84b38e152341f50c9162ec8c16ac170e3abd47aec1ee7fb7d1dc42fbd7ba05510029c2b2e0ae3f235f92db7f7558b66760bbcb98c44d9f25cf52a93a85f15cab9a0ed0123afe20df60449e4183662e7d0130c2d29096eaa1a1e376d88f0c148cea55be56ce7f5aba326f42bb193c8f3945bdd10175120bb1c7bcd672d260fe239faac66725c1f4c0c497708540d53a04ac9157386097c34eeafdb9e23ce15e40028a9740fddb2670a4a979a7b3afa675677de4f3a458efd667b1f97cf241f4df7753b34c03a90884b308924ce8d4e6d0a4527f9c447299aac8d1459ab029ef7704f5f8a699d8d962c2239c0b3883cdcd393f5c61706456d81f636d4a6e7b4e9b01afd74dbf58645c97e46f1557170fbaf85261fb1604c5b0eed7b44a7208cfcf41165673dbe0383bb7bf017fe64aa663098f4a6df663631709f14045f31464ad78fbe53325eac7cdb9959a8f1440a98568f7e8cf78e1b6752a6d266f578ef63af7a1c25f78d43185ab5fbe4c0b21258488be5a4294d4db992d63376c5ea0c83c8023c530e52710bd8d86a292b42c2c230b15f82515ca821cce5b52014ec8eae9057a3ab7df8b698f3f65d7fc6dce9bbb6009aae274ad00ed9671481d3d44bd4cec15038758824d446cf8007298ea1f3070bf6519dc37981b20c778d6261f330a6901e11c8d9e9d19fcc0ade3bf01fd5ad6424a9b6e7dfe9ea5b39df2d7a40afb1649217364c1ec7987d51de7df4f8fa01ee617757d50db0fb0941c9719e55e8c2830509b18e676147955239cf0cf11579f5de8064cdf3cab33ba63742ba7ebdca19c28e235e3a00dc786d6fe42d8b8b7ffb942fca72650bdded692eb46c6aa2d38f60c0c116dee48d817f93c1b6e9c31f83f50834df88c0261ee5a9607107326ad4b713bf1d3f83a2c09e2adc4140729f74cbb897d854ddf0f36c1278310d8c732db28322336a9e3606c9cd5677d46eb19c74cca4dca2c0b73b53d6608815a86101e607962ce68335cd92c6259cd7e020abd17799963341401436bd3d2960dbedb37278bdad1f85cb2914db9ac6123df9bc03a41b351ec8716b6a2e9c51d4200e56e83487795eda3471e5a50a17e197279fa3dc6cc5398532b81520f29d32f06f3d2331b1e85d48f1743e0056cffb603dea7cd940db2903fe5bff0d4c6e046154d980381df2542fecfcfc69cf7f875241bfefd99468cbbbf7135d044799073ba67d70701550c82e7a24eece9035681a3809af12310d61edd1f8c616c44eb3ede474fb22c64863343c1626d41e0ad747cb6f7b8679e54eb012b6c4ed5c228c18024dd80e17344520774a9c5d6682d9640bf1aaba014daacd45186dbf4645eb83e8ddc27c49e7e4fd86a310249882e06e2456a60f44d3d68959694458a022209fe26cfeefca1aa21c19ba3d51fffffba18d4d35c3d555dedc6b805929c82964a2959d57819cd1ce12bededb210b861d8a2098f51f8f577838414903c98955fcb06887d8295491998044c2cf3eafa4804a0c658eb0f52b6a1f5578f190624a00a2004c0c35a32abcb8dff93a2afd5c43b1d58973472feddc3e7b26cc19e4102f48b6e3d71615b330642948e1cb094093092a17f4c8552311b327cbee605cf62e3a9d3d1350a0987ea98324329523b5642de3b3055fe0ba03166fd25d698e9cc8a1519dedaee4b3f62b287026a90ad7be0c13967d92707c40231dd07950c9d135ace36cc27bc0e022284eb4bc3f763018fb07ddd5f74bd2a80b0c6c4c80959fb55b32eb6a651c84677949e7841099e0a4b014be2596b81ef8930f85ccb592fd8c7ecf4fc058073ff414e3355dafa19c88164f1a69fc6e4f92754e12b54bb9212e7e9c06a08b3c75eabe05d40f395651362d6c39ff71bf97d2e9947b700c5810807dfd7ede3c6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x108, 0x13, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xfffffffe, 0x6, 0xffffffff, 0xffff06be}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3a5, 0x359d, 0xffffffffffffffff, 0x2, 0x4}, 0x101}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x0, 0x7fffffff, 0x2}, 0x4}}]}, {0x82, 0x6, "f820f805bf24a4f3b81f4772238cd414f112e0cf95b80f4211d3faf8f53e76a594b101c0b93526a56f01fceb395c74506ce9a38ae4ec5f44403fe8a58b7cdb07d748388c000fa601d5f42ad7874381daada96fa4cf16bb6dd90e9237f3d93dd954b29d3fdaefe64d1d1f90fe4c3f34b8496adef9f5a7dd049d12a97cb6da"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0xac, 0x7, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x1}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xa1}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x40, 0x10000, 0x6, 0x6, 0x5}}]}, {0x56, 0x6, "23ef3a563fd788ce7bc906ab634de7d6a12e6695c335162e55fd8ea7763fa1c60af545b087c24f7d1fdb00f58d448f7ed0c1bc2b7d3cab2a4091db29869b7181196c02cfdb40d2528ae06771e7b2b39c9dd1"}, {0xc, 0x7, {0x26657bafeda078ea}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_LINK={0x8, 0x3, 0x414df975}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @TCA_RATE={0x6, 0x5, {0x3, 0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x7}]}}, @TCA_CHAIN={0x8, 0xb, 0xab}]}, 0xedc}, 0x1, 0x0, 0x0, 0x400c890}, 0xbeac10588807b056) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x11) r3 = inotify_init() readv(r3, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a80)=ANY=[@ANYBLOB="2400000070000100000000000004000007000000", @ANYRES32=0x0], 0x24}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x20000010) close(0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r5 = syz_open_pts(r4, 0x141601) fcntl$setstatus(r5, 0x4, 0x102800) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) 7.122753579s ago: executing program 1 (id=1685): socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f0000001b80)=[{&(0x7f0000000a40)=""/65, 0x41}, {0x0}], 0x2, 0x0, 0x0) 6.176951545s ago: executing program 5 (id=1686): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000021b40)=ANY=[@ANYBLOB="140000001000010040000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d0800034085"], 0xa0}}, 0x0) 5.977741437s ago: executing program 1 (id=1687): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x9a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c28fab6114aaaaaaaabb00dd6001010000641100fe8000000200000000000000000000bbfe8000000000000000000000000000aa00004e2300649078020000000100007b100000006b92a13774ec4d0e9c7a8e7d7d3de18707fbab6e3dffd37a67ee45cc2f77f830"], 0x0) r0 = dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0xfbffff7f, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={0x1, @null, @bpq0, 0xffffffff, 'syz1\x00', @null, 0xfff, 0x3, [@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 5.745272961s ago: executing program 5 (id=1688): ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000480)={0x4, "408ec0d74b134a47eb1a17b89514e835a19d00f2af82ae41af04db9a632d8e0a", 0x2, 0x1}) 2.972451854s ago: executing program 0 (id=1689): ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) 2.940762566s ago: executing program 2 (id=1690): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0, 0x0, 0x6}, 0x18) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0xc}, &(0x7f0000010080), &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x20000800000001, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000004b680)=""/102394, 0x18ffa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000bd2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0x8) read$FUSE(r4, &(0x7f00000026c0)={0x2020}, 0x2020) ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x12a0, 0x1160, 0x11, 0x148, 0x0, 0x10, 0x1208, 0x2a8, 0x2a8, 0x1208, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@private, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_team\x00'}, 0x10, 0x10f0, 0x1160, 0x1c, {0x6}, [@common=@unspec=@cgroup1={{0x1030}, {0x4, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x4e21, 0x4e21, 0x4e22, 0x4e24, 0x4e23, 0x4e20, 0x4e22, 0x4e21, 0x4e22, 0x4e22, 0x4e24, 0x4e23, 0x4e23, 0x4e20, 0x4e24], [0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1]}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, "3027851d572baec918d14e79584558b361139090a42fe5fdfaacee38e43f6e7bf8a58e41363c09ee585cd87590517c3539bccbf5de93ba4d0b7ca0972c475b6f"}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x1, 0x1}, {0x4, 0x6, 0x3}, {0xffffffffffffffff, 0x3, 0x4}, 0x3, 0x3}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x1300) mount(0x0, 0x0, 0x0, 0x5, 0x0) socket(0x10, 0x3, 0x0) 2.940449846s ago: executing program 5 (id=1691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) 2.933820487s ago: executing program 1 (id=1692): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xd, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x54) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x4047b013}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x11) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.845305112s ago: executing program 0 (id=1693): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = openat$bsg(0xffffff9c, 0x0, 0x2100, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xbe13, 0x0, 0x1, 0x7e98, '\x00', 0x0, r1, 0x1, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) read(r0, &(0x7f0000000080)=""/241, 0xf1) read$FUSE(r0, 0x0, 0x0) ioctl$TCSETAF(r0, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "9f762f0bc5e584a2"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x101000) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000140)={"524ebce3", 0x3, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "69a2dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x2, 0x6, 0xe30, 0x3ff, "c2a0da87bde1036300", 0x8, 0x8f, 0x9, 0x2, 0x0, 0x0, 0xfc}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x11) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 2.119627875s ago: executing program 1 (id=1694): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x81) syz_io_uring_setup(0x34ff, &(0x7f0000000340)={0x0, 0x8008, 0x1000}, 0x0, &(0x7f0000000200)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) r2 = semget(0x3, 0x2, 0x284) semctl$IPC_RMID(r2, 0x0, 0x0) r3 = semget(0x2, 0x4, 0x200) semget(0x3, 0x1, 0x654) semctl$IPC_RMID(r3, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4008af21, &(0x7f0000000240)={0x0, 0x820000, 0x0, 0x0, 0x0}) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) 1.841418351s ago: executing program 0 (id=1695): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="0400af8a7a40", @ANYBLOB="01002cbd7000ffdbdf25040000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$inet6(0xa, 0x805, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) getsockopt$bt_hci(r4, 0x84, 0x7b, 0x0, &(0x7f0000000040)=0x700) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mknod(&(0x7f0000000000)='./file1/file3\x00', 0x1, 0x43) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 1.781699435s ago: executing program 1 (id=1696): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x4000, 0x0, 0x0, 0xa, 0x0, 0x30}, {0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff9a, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x6}, 0xffffffff, 0xfffffffc, 0x0, 0x1, 0x6}, {{@in=@private=0xa010101, 0x0, 0x6c}, 0xa, @in=@loopback, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x5}}, 0xe4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) getdents64(r5, &(0x7f0000000300)=""/154, 0x9a) 1.750950547s ago: executing program 2 (id=1697): socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8949, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r3, &(0x7f0000001b80)=[{&(0x7f0000000a40)=""/65, 0x41}, {0x0}], 0x2, 0x0, 0x0) 676.1885ms ago: executing program 0 (id=1698): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = dup(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=0x0) ioprio_set$pid(0x2, r1, 0x4007) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002fc0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122"], 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) 239.787446ms ago: executing program 1 (id=1699): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffe, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x80c4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a310000000014000780050015007f0000000800124000200000050005000a000000050001000600000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) madvise(&(0x7f00000ec000/0x1000)=nil, 0x1000, 0x9) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0xfffffffffffffe32, &(0x7f0000002740)={&(0x7f0000000180)={0x34, r3, 0x1, 0x70bd2b, 0x0, {0x4e}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4000040) times(0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) setuid(0xee00) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 0s ago: executing program 2 (id=1700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x8}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000001080)={0x6, 0x88, 0x9, 0x5, 0xfe, 0x9, 0x2, 0x80, 0x1, 0x71, 0xc, 0x6, 0x0, 0x1}, 0xd) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x1010, 0xffffffffffffffff, 0xced7e000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$pppl2tp(0x18, 0x1, 0x1) epoll_create1(0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x3, {0x0, 0xff, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x48005) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r7, {0xfff2, 0x4}, {0xfff1, 0x4}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) kernel console output (not intermixed with test programs): exists on: batadv_slave_1 [ 78.681117][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.691459][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.703591][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.715500][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.726139][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.741292][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.790731][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.831624][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.091328][ T4250] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.302868][ T4250] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.415262][ T4252] Bluetooth: hci0: command 0x0419 tx timeout [ 79.441735][ T4250] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.495662][ T4252] Bluetooth: hci2: command 0x0419 tx timeout [ 79.504489][ T4260] Bluetooth: hci4: command 0x0419 tx timeout [ 79.504508][ T4252] Bluetooth: hci3: command 0x0419 tx timeout [ 79.510571][ T4260] Bluetooth: hci1: command 0x0419 tx timeout [ 79.527101][ T4250] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.549090][ T4251] device veth0_macvtap entered promiscuous mode [ 79.567164][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.585420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.615217][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.664080][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.733488][ T4251] device veth1_macvtap entered promiscuous mode [ 79.804042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.860379][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.892123][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.912881][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.950661][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.981576][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.019932][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.043252][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.064318][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.075667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.108220][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.141166][ T4342] device pim6reg1 entered promiscuous mode [ 80.168447][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.192974][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.217038][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.229229][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.246579][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.423319][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.451540][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.481554][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.502857][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.594139][ T4358] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.089717][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.178089][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.254657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.263052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.271280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.280868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 81.345441][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.364995][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.734554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.764582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.814716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.866471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 82.194933][ T4251] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.203698][ T4251] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.303822][ T4251] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.379023][ T4251] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.641000][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.653111][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.990710][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.091636][ T4376] netlink: 1456 bytes leftover after parsing attributes in process `syz.0.11'. [ 83.154762][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.162851][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.263475][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.356539][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.380901][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.457580][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.479660][ T4380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13'. [ 83.566974][ T4380] device bond0 entered promiscuous mode [ 83.582358][ T4383] 9pnet_fd: Insufficient options for proto=fd [ 83.589128][ T4380] device bond_slave_0 entered promiscuous mode [ 83.599434][ T4380] device bond_slave_1 entered promiscuous mode [ 83.616142][ T4380] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 83.634600][ T4380] bridge0: port 3(macvlan2) entered blocking state [ 83.648871][ T4380] bridge0: port 3(macvlan2) entered disabled state [ 83.680100][ T4380] device macvlan2 entered promiscuous mode [ 83.693081][ T4380] bridge0: port 3(macvlan2) entered blocking state [ 83.700031][ T4380] bridge0: port 3(macvlan2) entered forwarding state [ 85.066237][ T4392] ufs: You didn't specify the type of your ufs filesystem [ 85.066237][ T4392] [ 85.066237][ T4392] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 85.066237][ T4392] [ 85.066237][ T4392] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 85.097246][ T4392] ufs: ufstype=old is supported read-only [ 85.104171][ T4392] ufs: ufs_fill_super(): bad magic number [ 85.486546][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.512029][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.611907][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.684308][ T4405] netlink: 'syz.3.18': attribute type 4 has an invalid length. [ 85.759203][ T4405] netlink: 'syz.3.18': attribute type 4 has an invalid length. [ 86.365895][ T4413] can0: slcan on ttyS3. [ 86.561949][ T4418] tmpfs: Unknown parameter 'quota' [ 86.777825][ T126] cfg80211: failed to load regulatory.db [ 87.026009][ T4409] can0 (unregistered): slcan off ttyS3. [ 88.964421][ T4296] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.304501][ T4337] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.322943][ T4296] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 90.333315][ T4296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.341590][ T4296] usb 3-1: Product: syz [ 90.346802][ T4296] usb 3-1: Manufacturer: syz [ 90.351567][ T4296] usb 3-1: SerialNumber: syz [ 90.391090][ T4296] usb 3-1: config 0 descriptor?? [ 90.413894][ T4296] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 002 [ 90.494401][ T4337] usb 4-1: Using ep0 maxpacket: 8 [ 90.502023][ T4337] usb 4-1: config 0 has an invalid interface number: 76 but max is 0 [ 90.560933][ T4337] usb 4-1: config 0 has no interface number 0 [ 90.607099][ T4337] usb 4-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=39.91 [ 90.615469][ T4445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.664930][ T4337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.676182][ T4445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.717680][ T4337] usb 4-1: Product: syz [ 90.723017][ T4445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.732194][ T4337] usb 4-1: Manufacturer: syz [ 90.735295][ T4445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.748743][ T4337] usb 4-1: SerialNumber: syz [ 90.785666][ T4337] usb 4-1: config 0 descriptor?? [ 90.839181][ T27] audit: type=1326 audit(1740271936.876:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad6b8d169 code=0x7ffc0000 [ 90.928549][ T4469] Zero length message leads to an empty skb [ 90.942620][ T27] audit: type=1326 audit(1740271936.936:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad6b8d169 code=0x7ffc0000 [ 90.946868][ T4337] gspca_main: touptek-2.14.0 probing 0547:6801 [ 91.174067][ T4296] i2c i2c-1: failure reading functionality [ 91.199915][ T27] audit: type=1326 audit(1740271936.976:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ad6b8d169 code=0x7ffc0000 [ 91.308743][ T4296] i2c i2c-1: connected i2c-tiny-usb device [ 91.446979][ T27] audit: type=1326 audit(1740271936.976:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad6b8d169 code=0x7ffc0000 [ 91.458158][ T4296] usb 3-1: USB disconnect, device number 2 [ 91.628318][ T27] audit: type=1326 audit(1740271936.976:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad6b8d169 code=0x7ffc0000 [ 91.754299][ T27] audit: type=1326 audit(1740271936.986:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f2ad6b8d169 code=0x7ffc0000 [ 91.822671][ T27] audit: type=1326 audit(1740271936.986:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad6b8d169 code=0x7ffc0000 [ 91.845256][ T27] audit: type=1326 audit(1740271936.986:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4462 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad6b8d169 code=0x7ffc0000 [ 92.137022][ T4345] usb 4-1: USB disconnect, device number 2 [ 93.335051][ T4493] can0: slcan on ttyS3. [ 93.924379][ T4488] can0 (unregistered): slcan off ttyS3. [ 94.812789][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 95.548132][ T4521] netlink: 44 bytes leftover after parsing attributes in process `syz.4.45'. [ 97.319863][ T4539] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 97.407902][ T4540] can0: slcan on ttyS3. [ 97.994969][ T4536] can0 (unregistered): slcan off ttyS3. [ 98.776843][ T4553] misc userio: Invalid payload size [ 103.841306][ T4597] can0: slcan on ttyS3. [ 104.641871][ T4577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.63'. [ 104.650808][ T4577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.63'. [ 104.686643][ T4587] can0 (unregistered): slcan off ttyS3. [ 105.487560][ T4618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 106.315162][ T4614] netlink: 'syz.3.71': attribute type 11 has an invalid length. [ 108.004267][ T4296] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 108.121104][ T4637] ======================================================= [ 108.121104][ T4637] WARNING: The mand mount option has been deprecated and [ 108.121104][ T4637] and is ignored by this kernel. Remove the mand [ 108.121104][ T4637] option from the mount to silence this warning. [ 108.121104][ T4637] ======================================================= [ 108.174425][ T4296] usb 5-1: device descriptor read/64, error -71 [ 108.344557][ T4637] fuse: Bad value for 'fd' [ 108.410953][ T4650] can0: slcan on ttyS3. [ 108.494255][ T4296] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.674414][ T4296] usb 5-1: device descriptor read/64, error -71 [ 108.794444][ T4296] usb usb5-port1: attempt power cycle [ 109.054363][ T126] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 109.134318][ T4648] can0 (unregistered): slcan off ttyS3. [ 109.323367][ T126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.324219][ T4296] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 109.368598][ T4296] usb 5-1: device descriptor read/8, error -71 [ 109.445708][ T126] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 109.521761][ T126] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 109.548019][ T126] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 109.571615][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 109.612509][ T126] usb 1-1: Product: syz [ 109.628480][ T126] usb 1-1: Manufacturer: syz [ 109.633152][ T126] usb 1-1: SerialNumber: syz [ 109.669520][ T126] usb 1-1: config 0 descriptor?? [ 109.694223][ T4296] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 109.709281][ T126] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 109.749470][ T126] radio-si470x: probe of 1-1:0.0 failed with error -5 [ 109.759286][ T126] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 109.964411][ T4296] usb 5-1: device not accepting address 5, error -71 [ 109.982007][ T4296] usb usb5-port1: unable to enumerate USB device [ 110.104176][ T4675] CUSE: unknown device info "IÝ" [ 110.109715][ T4675] CUSE: unknown device info "" [ 110.128596][ T4675] CUSE: unknown device info "€" [ 110.139361][ T4675] CUSE: DEVNAME unspecified [ 110.287711][ T4682] capability: warning: `syz.3.87' uses deprecated v2 capabilities in a way that may be insecure [ 111.328853][ T4692] netlink: 176 bytes leftover after parsing attributes in process `syz.4.90'. [ 111.482084][ T4345] usb 1-1: USB disconnect, device number 2 [ 112.370320][ T4707] can0: slcan on ttyS3. [ 112.490158][ T4709] Cannot find add_set index 0 as target [ 113.730308][ T4714] syz.4.97 (4714): drop_caches: 3 [ 114.009270][ T4703] can0 (unregistered): slcan off ttyS3. [ 114.364868][ T4723] xt_l2tp: invalid flags combination: c [ 115.955432][ T4727] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 116.050181][ T4260] block nbd1: Receive control failed (result -107) [ 116.068705][ T4736] nbd1: detected capacity change from 0 to 67108884 [ 116.070816][ T52] block nbd1: Dead connection, failed to find a fallback [ 116.082938][ T52] block nbd1: shutting down sockets [ 116.089430][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.098939][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 116.107432][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.116658][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 116.134566][ T1076] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.143664][ T1076] Buffer I/O error on dev nbd1, logical block 0, async page read [ 116.152782][ T1076] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.162049][ T1076] Buffer I/O error on dev nbd1, logical block 0, async page read [ 116.170045][ T1076] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.179864][ T1076] Buffer I/O error on dev nbd1, logical block 0, async page read [ 116.188646][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.197809][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 116.215902][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.225011][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 116.232914][ T52] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.242016][ T52] Buffer I/O error on dev nbd1, logical block 0, async page read [ 116.249877][ T4330] ldm_validate_partition_table(): Disk read failed. [ 116.308787][ T1076] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.318154][ T1076] Buffer I/O error on dev nbd1, logical block 0, async page read [ 116.326261][ T1076] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 116.335385][ T1076] Buffer I/O error on dev nbd1, logical block 0, async page read [ 116.388957][ T4330] Dev nbd1: unable to read RDB block 0 [ 116.424855][ T4330] nbd1: unable to read partition table [ 118.095028][ T4762] syz.4.108 (4762): drop_caches: 3 [ 118.414780][ T4772] can0: slcan on ttyS3. [ 119.658103][ T4787] No such timeout policy "syz0" [ 121.680712][ T4767] can0 (unregistered): slcan off ttyS3. [ 122.621301][ T4817] syz.0.122 (4817): drop_caches: 3 [ 124.743655][ T52] block nbd3: Send control failed (result -89) [ 124.750174][ T52] block nbd3: Request send failed, requeueing [ 124.758365][ T4260] block nbd3: Receive control failed (result -32) [ 124.758840][ T52] block nbd3: Dead connection, failed to find a fallback [ 124.772868][ T52] block nbd3: shutting down sockets [ 124.779129][ T52] blk_print_req_error: 8 callbacks suppressed [ 124.779147][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 124.805596][ T52] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 124.815279][ T4847] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 124.827738][ T52] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 124.837181][ T4847] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 124.848071][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 124.857663][ T52] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 124.867108][ T4847] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 124.877727][ T52] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 124.887263][ T4847] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 124.897438][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 124.907327][ T52] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 124.916878][ T4847] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 124.927402][ T52] I/O error, dev nbd3, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 124.937581][ T4847] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 124.947261][ T4847] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 126.418083][ T4872] syz.2.134 (4872): drop_caches: 3 [ 127.361099][ T4857] can0: slcan on ttyS3. [ 127.484235][ T4857] can0 (unregistered): slcan off ttyS3. [ 128.710371][ T4893] syz.4.141 uses obsolete (PF_INET,SOCK_PACKET) [ 129.748647][ T4900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.143'. [ 129.975583][ T4907] netlink: 84 bytes leftover after parsing attributes in process `syz.2.146'. [ 131.968579][ T4932] syz.1.150 (4932): drop_caches: 3 [ 132.665582][ T4933] netlink: 'syz.2.149': attribute type 11 has an invalid length. [ 132.914649][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.921011][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.997484][ T4941] can0: slcan on ttyS3. [ 134.154289][ T4938] can0 (unregistered): slcan off ttyS3. [ 135.146427][ T4962] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 135.324691][ T4969] tmpfs: Unknown parameter 'usrquota' [ 137.792824][ T4982] syz.0.163 (4982): drop_caches: 3 [ 139.675361][ T4295] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 139.878109][ T4295] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 139.900871][ T4295] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.966152][ T4295] usb 5-1: Product: syz [ 139.970692][ T4295] usb 5-1: Manufacturer: syz [ 139.975867][ T4295] usb 5-1: SerialNumber: syz [ 139.996617][ T4295] usb 5-1: config 0 descriptor?? [ 140.016528][ T4295] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 006 [ 140.301295][ T4991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.394493][ T4991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.839410][ T4295] i2c i2c-1: failure reading functionality [ 140.965400][ T4295] i2c i2c-1: connected i2c-tiny-usb device [ 141.095040][ T4295] usb 5-1: USB disconnect, device number 6 [ 141.578861][ T5008] can0: slcan on ttyS3. [ 142.456099][ T5000] can0 (unregistered): slcan off ttyS3. [ 142.464517][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 142.764843][ T14] usb 3-1: device descriptor read/64, error -71 [ 143.134283][ T14] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 143.411027][ T5041] syz.4.175 (5041): drop_caches: 3 [ 143.416410][ T14] usb 3-1: device descriptor read/64, error -71 [ 143.535194][ T14] usb usb3-port1: attempt power cycle [ 143.954378][ T14] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 144.174340][ T14] usb 3-1: device descriptor read/8, error -71 [ 144.823721][ T5058] Bluetooth: hci5: Frame reassembly failed (-84) [ 145.124138][ T4581] Bluetooth: hci5: Frame reassembly failed (-84) [ 145.154142][ T4581] Bluetooth: hci5: Frame reassembly failed (-84) [ 146.854376][ T4257] Bluetooth: hci5: command 0x1003 tx timeout [ 146.861881][ T4260] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 148.335768][ T5085] can0: slcan on ttyS3. [ 148.836499][ T5093] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 149.767092][ T5099] process 'syz.4.189' launched '/dev/fd/9' with NULL argv: empty string added [ 150.372432][ T5086] netlink: 'syz.0.187': attribute type 11 has an invalid length. [ 150.465566][ T5079] can0 (unregistered): slcan off ttyS3. [ 152.662289][ T5118] sched: RT throttling activated [ 153.732963][ T5042] dhcpcd-run-hook (5042) used greatest stack depth: 19616 bytes left [ 154.236810][ T5138] syz.2.199 (5138): drop_caches: 3 [ 154.267036][ T5140] tmpfs: Unknown parameter 'noswap' [ 154.428253][ T5140] netlink: 'syz.3.200': attribute type 1 has an invalid length. [ 154.707014][ T5140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.807443][ T5149] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 155.543341][ T5141] bond1: (slave gretap1): making interface the new active one [ 155.657927][ T5141] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 155.841670][ T5153] xt_cgroup: path and classid specified [ 156.196712][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 156.607407][ T5141] syz.3.200 (5141) used greatest stack depth: 19504 bytes left [ 158.414533][ T5181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.211'. [ 160.263680][ T5204] can0: slcan on ttyS3. [ 160.924660][ T5197] can0 (unregistered): slcan off ttyS3. [ 161.054234][ T4260] Bluetooth: hci5: sending frame failed (-49) [ 161.061776][ T4252] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 164.464014][ T5261] can0: slcan on ttyS3. [ 165.094352][ T5253] can0 (unregistered): slcan off ttyS3. [ 165.381646][ T5275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.237'. [ 165.534328][ T5287] capability: warning: `syz.0.239' uses 32-bit capabilities (legacy support in use) [ 168.053611][ T5277] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.061900][ T5277] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.780439][ T4260] Bluetooth: hci5: sending frame failed (-49) [ 168.788070][ T4252] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 168.937490][ T5332] Bluetooth: hci5: Frame reassembly failed (-84) [ 169.710590][ T5277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.886478][ T5277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.576621][ T5277] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.585861][ T5277] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.595601][ T5277] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.608596][ T5277] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.834769][ T5314] tipc: Started in network mode [ 170.839712][ T5314] tipc: Node identity faf960c94344, cluster identity 4711 [ 170.852658][ T5314] tipc: Enabled bearer , priority 0 [ 171.088232][ T5318] device syzkaller0 entered promiscuous mode [ 171.095807][ T5318] tipc: Resetting bearer [ 171.494863][ T5338] device pim6reg1 entered promiscuous mode [ 171.560832][ T5310] tipc: Resetting bearer [ 171.868819][ T5345] tipc: Node number set to 3116196041 [ 175.982724][ T5389] syz.4.256 (5389): drop_caches: 3 [ 177.506041][ T5401] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 178.726578][ T5310] tipc: Disabling bearer [ 181.395871][ T5428] syz.0.271 (5428): drop_caches: 3 [ 182.002332][ T5422] mmap: syz.1.270 (5422) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 186.146679][ T5482] syz.2.285 (5482): drop_caches: 3 [ 188.471946][ T5499] 9pnet_virtio: no channels available for device syz [ 188.956972][ T5505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.979151][ T5505] bond0: (slave rose0): Enslaving as an active interface with an up link [ 189.016776][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 193.765722][ T56] Bluetooth: hci5: Frame reassembly failed (-84) [ 193.774926][ T5541] Bluetooth: hci5: Frame reassembly failed (-84) [ 194.305061][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.316239][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.069502][ T5560] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 195.085670][ T5560] batman_adv: batadv0: Adding interface: gretap2 [ 195.092105][ T5560] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.117518][ T5560] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 195.814212][ T4252] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 196.374187][ T4252] Bluetooth: hci2: command 0x0406 tx timeout [ 196.374333][ T4257] Bluetooth: hci1: command 0x0406 tx timeout [ 196.381468][ T4252] Bluetooth: hci4: command 0x0406 tx timeout [ 196.387366][ T4263] Bluetooth: hci3: command 0x0406 tx timeout [ 196.394723][ T4252] Bluetooth: hci0: command 0x0406 tx timeout [ 196.687189][ T5571] sctp: failed to load transform for md5: -2 [ 197.171533][ T5597] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 198.939810][ T5620] can0: slcan on ttyS3. [ 199.031641][ T5619] syz.3.311 (5619): drop_caches: 3 [ 199.534523][ T5614] can0 (unregistered): slcan off ttyS3. [ 200.292069][ T5596] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 201.083894][ T4698] Bluetooth: hci5: Frame reassembly failed (-84) [ 201.150655][ T5654] Bluetooth: hci5: Frame reassembly failed (-84) [ 201.964345][ T27] audit: type=1326 audit(1740272047.996:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5658 comm="syz.1.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628698d169 code=0x7fc00000 [ 202.312382][ T5674] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 203.114263][ T4252] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 203.304635][ T5698] can0: slcan on ttyS3. [ 203.964311][ T5691] can0 (unregistered): slcan off ttyS3. [ 206.024257][ T5741] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 206.037479][ T5741] batman_adv: batadv0: Adding interface: gretap1 [ 206.043933][ T5741] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.069387][ T5741] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 206.666342][ T5742] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 207.326557][ T5712] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 207.783203][ T5758] tmpfs: Unknown parameter 'usrquota' [ 208.448801][ T5767] syz.4.340 (5767): drop_caches: 3 [ 209.763795][ T5780] can0: slcan on ttyS3. [ 210.334507][ T5771] can0 (unregistered): slcan off ttyS3. [ 210.875224][ T5794] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 212.350229][ T5817] loop7: detected capacity change from 0 to 16384 [ 215.100737][ T5850] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 217.103043][ T27] audit: type=1326 audit(1740272063.136:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.3.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d3b8d169 code=0x7fc00000 [ 217.406581][ T5887] syz.4.372 (5887): drop_caches: 3 [ 219.173645][ T5899] slcan: can't register candev [ 219.178775][ T5899] Falling back ldisc for ttyS3. [ 219.600860][ T5911] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 220.583038][ T5917] can0: slcan on ttyS3. [ 220.800194][ T5920] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 221.264940][ T5913] can0 (unregistered): slcan off ttyS3. [ 222.745075][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'. [ 224.901116][ T5978] can0: slcan on ttyS3. [ 225.494995][ T5972] can0 (unregistered): slcan off ttyS3. [ 229.733989][ T6034] syz.4.403 (6034): drop_caches: 3 [ 231.443974][ T6073] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 232.796862][ T27] audit: type=1326 audit(1740272078.836:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 232.949584][ T27] audit: type=1326 audit(1740272078.926:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 233.002514][ T27] audit: type=1326 audit(1740272078.926:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 233.090116][ T27] audit: type=1326 audit(1740272078.926:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 233.256493][ T27] audit: type=1326 audit(1740272078.926:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 233.596828][ T27] audit: type=1326 audit(1740272078.926:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 233.731789][ T27] audit: type=1326 audit(1740272078.926:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 233.774000][ T6106] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.888331][ T27] audit: type=1326 audit(1740272078.926:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 233.999413][ T27] audit: type=1326 audit(1740272078.926:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 234.021703][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.231712][ T27] audit: type=1326 audit(1740272078.926:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6088 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 234.941259][ T6095] syz.3.430 (6095): drop_caches: 3 [ 235.008125][ T6128] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 237.314194][ T5348] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 237.517065][ T5348] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.532155][ T5348] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 237.569558][ T5348] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 237.609189][ T5348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.626983][ T6161] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 237.897609][ T4300] usb 1-1: USB disconnect, device number 3 [ 238.436431][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 238.436448][ T27] audit: type=1326 audit(1740272084.476:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 238.708888][ T27] audit: type=1326 audit(1740272084.536:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 238.939309][ T27] audit: type=1326 audit(1740272084.536:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 239.489507][ T27] audit: type=1326 audit(1740272084.536:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 239.654518][ T27] audit: type=1326 audit(1740272085.436:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 239.831320][ T27] audit: type=1326 audit(1740272085.446:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 240.079969][ T27] audit: type=1326 audit(1740272085.446:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 240.080031][ T27] audit: type=1326 audit(1740272085.446:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 240.081585][ T27] audit: type=1326 audit(1740272085.446:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 240.081642][ T27] audit: type=1326 audit(1740272085.446:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 240.560438][ T6206] netlink: 56 bytes leftover after parsing attributes in process `syz.2.455'. [ 241.614322][ T6219] can0: slcan on ttyS3. [ 241.885177][ T6214] can0 (unregistered): slcan off ttyS3. [ 242.111265][ T6232] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 244.348615][ T27] kauditd_printk_skb: 60 callbacks suppressed [ 244.348633][ T27] audit: type=1326 audit(1740272090.386:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 244.361129][ T27] audit: type=1326 audit(1740272090.386:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 244.361638][ T27] audit: type=1326 audit(1740272090.396:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 244.364838][ T27] audit: type=1326 audit(1740272090.396:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 244.437799][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.529870][ T6268] tty tty23: ldisc open failed (-12), clearing slot 22 [ 244.772596][ T27] audit: type=1326 audit(1740272090.526:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 244.891110][ T27] audit: type=1326 audit(1740272090.526:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 245.012849][ T27] audit: type=1326 audit(1740272090.526:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 245.052975][ T6262] syz.0.460 (6262): drop_caches: 3 [ 245.131790][ T27] audit: type=1326 audit(1740272090.526:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 245.184338][ T27] audit: type=1326 audit(1740272090.526:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 245.400495][ T27] audit: type=1326 audit(1740272090.526:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.2.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7fc00000 [ 245.512231][ T6291] can0: slcan on ttyS3. [ 246.044730][ T6284] can0 (unregistered): slcan off ttyS3. [ 248.051159][ T6321] device pim6reg1 entered promiscuous mode [ 248.514544][ T6334] netlink: 'syz.4.489': attribute type 11 has an invalid length. [ 249.352412][ T6342] can0: slcan on ttyS3. [ 250.034844][ T6338] can0 (unregistered): slcan off ttyS3. [ 252.087975][ T6372] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 253.881002][ T6385] syz.2.503 (6385): drop_caches: 3 [ 254.641690][ T27] kauditd_printk_skb: 61 callbacks suppressed [ 254.641741][ T27] audit: type=1326 audit(1740272100.676:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.1.502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f628698d169 code=0x0 [ 255.737194][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.744931][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.022382][ T6401] can0: slcan on ttyS3. [ 257.096577][ T6397] can0 (unregistered): slcan off ttyS3. [ 257.979032][ T6424] netlink: 56 bytes leftover after parsing attributes in process `syz.1.517'. [ 258.729101][ T6430] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 259.675011][ T27] audit: type=1326 audit(1740272105.716:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6441 comm="syz.0.523" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ad6b8d169 code=0x0 [ 260.354312][ T6447] netlink: 'syz.2.520': attribute type 11 has an invalid length. [ 262.090443][ T6474] can0: slcan on ttyS3. [ 262.707839][ T6471] can0 (unregistered): slcan off ttyS3. [ 263.636737][ T6493] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 265.116080][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 265.365135][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 265.384405][ T14] usb 2-1: config 0 has an invalid interface number: 76 but max is 0 [ 265.425745][ T14] usb 2-1: config 0 has no interface number 0 [ 265.458288][ T14] usb 2-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=39.91 [ 265.824537][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.832826][ T14] usb 2-1: Product: syz [ 265.841901][ T14] usb 2-1: Manufacturer: syz [ 265.848443][ T14] usb 2-1: SerialNumber: syz [ 265.932924][ T14] usb 2-1: config 0 descriptor?? [ 266.028466][ T14] gspca_main: touptek-2.14.0 probing 0547:6801 [ 267.410222][ T14] usb 2-1: USB disconnect, device number 2 [ 268.284344][ T6512] netlink: 'syz.2.536': attribute type 11 has an invalid length. [ 270.721892][ T6537] can0: slcan on ttyS3. [ 270.836429][ T6540] misc userio: Invalid payload size [ 272.414406][ T6530] can0 (unregistered): slcan off ttyS3. [ 272.647270][ T6549] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 274.006210][ T6560] netlink: 'syz.1.549': attribute type 4 has an invalid length. [ 274.071739][ T6561] netlink: 'syz.1.549': attribute type 4 has an invalid length. [ 274.872236][ T6571] CUSE: unknown device info "IÝ" [ 274.877875][ T6571] CUSE: unknown device info "" [ 274.882764][ T6571] CUSE: unknown device info "€" [ 274.887879][ T6571] CUSE: DEVNAME unspecified [ 276.722763][ T6602] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 277.409878][ T6607] netlink: 'syz.1.565': attribute type 4 has an invalid length. [ 277.510892][ T6608] netlink: 'syz.1.565': attribute type 4 has an invalid length. [ 278.054241][ T6624] CUSE: unknown device info "IÝ" [ 278.060454][ T6624] CUSE: unknown device info "" [ 278.075337][ T6624] CUSE: unknown device info "€" [ 278.086314][ T6624] CUSE: DEVNAME unspecified [ 279.524743][ T4296] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 279.684803][ T4296] usb 2-1: device descriptor read/64, error -71 [ 280.069901][ T4296] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 280.275066][ T4296] usb 2-1: device descriptor read/64, error -71 [ 280.420948][ T4296] usb usb2-port1: attempt power cycle [ 281.169992][ T4296] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 281.475451][ T4296] usb 2-1: device descriptor read/8, error -71 [ 281.754853][ T4296] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 281.806167][ T4296] usb 2-1: device descriptor read/8, error -71 [ 281.901596][ T6657] netlink: 'syz.3.583': attribute type 4 has an invalid length. [ 281.914751][ T6657] netlink: 'syz.3.583': attribute type 4 has an invalid length. [ 282.382025][ T4296] usb usb2-port1: unable to enumerate USB device [ 285.925488][ T6705] block nbd0: shutting down sockets [ 286.192241][ T1076] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 286.204422][ T1076] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 286.214475][ T6704] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 286.227379][ T1076] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 286.244200][ T6704] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 286.255704][ T1076] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 286.276369][ T1076] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 286.287107][ T6704] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 286.302375][ T1076] I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 286.314196][ T6704] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 286.324633][ T1076] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 286.334496][ T1076] I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 286.344219][ T6704] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 286.354455][ T1076] I/O error, dev nbd0, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 286.364743][ T6704] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 286.374522][ T6704] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 286.951022][ T6714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.601'. [ 286.960352][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.601'. [ 295.148256][ T1076] block nbd1: Send control failed (result -89) [ 295.154759][ T1076] block nbd1: Request send failed, requeueing [ 295.163931][ T4265] block nbd1: Receive control failed (result -32) [ 295.163986][ T1076] block nbd1: Dead connection, failed to find a fallback [ 295.164073][ T1076] block nbd1: shutting down sockets [ 295.164121][ T1076] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 295.166668][ T1076] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 295.232569][ T6782] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 295.244367][ T1076] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 295.255222][ T6782] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 295.499857][ T1076] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 295.510889][ T1076] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 295.656449][ T6782] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 295.671510][ T1076] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 295.688475][ T6782] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 295.704547][ T1076] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 295.716120][ T1076] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 295.731973][ T6782] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 295.742128][ T1076] I/O error, dev nbd1, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 295.755216][ T6782] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 295.765952][ T6782] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 297.405815][ T6814] netlink: 'syz.2.638': attribute type 4 has an invalid length. [ 297.514850][ T6814] netlink: 'syz.2.638': attribute type 4 has an invalid length. [ 300.089921][ T52] block nbd4: Send control failed (result -89) [ 300.096836][ T52] block nbd4: Request send failed, requeueing [ 300.103114][ T4265] block nbd4: Receive control failed (result -32) [ 300.121114][ T52] block nbd4: Dead connection, failed to find a fallback [ 300.128989][ T52] block nbd4: shutting down sockets [ 300.134899][ T52] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 300.154481][ T6846] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 300.164921][ T6846] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 300.175920][ T52] blk_print_req_error: 2 callbacks suppressed [ 300.175936][ T52] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 300.193581][ T52] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 300.203668][ T6846] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 300.214884][ T52] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 300.224905][ T6846] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 300.242141][ T52] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 300.252502][ T1076] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 300.262744][ T6846] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 300.272790][ T1076] I/O error, dev nbd4, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 300.282748][ T6846] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 300.293451][ T6846] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 303.865769][ T6878] netlink: 52 bytes leftover after parsing attributes in process `syz.2.658'. [ 304.104600][ T6888] Unsupported ieee802154 address type: 0 [ 307.935701][ T6913] netlink: 52 bytes leftover after parsing attributes in process `syz.1.674'. [ 308.095941][ T6920] netlink: 'syz.0.672': attribute type 4 has an invalid length. [ 308.581466][ T6923] netlink: 'syz.0.672': attribute type 4 has an invalid length. [ 309.824817][ T27] audit: type=1326 audit(1740272155.836:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6936 comm="syz.3.681" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8d3b8d169 code=0x0 [ 310.948825][ T6950] syz.2.682 (6950): drop_caches: 3 [ 311.916294][ T6960] netlink: 'syz.3.688': attribute type 4 has an invalid length. [ 311.953637][ T6960] netlink: 'syz.3.688': attribute type 4 has an invalid length. [ 312.241497][ T6966] netlink: 32 bytes leftover after parsing attributes in process `syz.4.690'. [ 313.743703][ T27] audit: type=1326 audit(1740272159.776:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6988 comm="syz.3.698" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8d3b8d169 code=0x0 [ 314.186486][ T6998] Unsupported ieee802154 address type: 0 [ 314.671112][ T7000] syz.0.711 (7000): drop_caches: 3 [ 316.508003][ T7010] netlink: 'syz.1.701': attribute type 4 has an invalid length. [ 316.906439][ T7011] netlink: 'syz.1.701': attribute type 4 has an invalid length. [ 317.036332][ T7017] netlink: 32 bytes leftover after parsing attributes in process `syz.3.705'. [ 317.178521][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.184935][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.629761][ T27] audit: type=1326 audit(1740272164.666:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.3.715" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8d3b8d169 code=0x0 [ 318.737584][ T5347] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 319.426512][ T5347] usb 5-1: device descriptor read/64, error -71 [ 319.694220][ T5347] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 319.884410][ T5347] usb 5-1: device descriptor read/64, error -71 [ 320.005085][ T5347] usb usb5-port1: attempt power cycle [ 320.454333][ T5347] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 320.574505][ T5347] usb 5-1: device descriptor read/8, error -71 [ 320.784306][ T7057] tmpfs: Unknown parameter 'noswap' [ 321.013585][ T5347] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 321.070627][ T7058] netlink: 32 bytes leftover after parsing attributes in process `syz.3.721'. [ 321.259347][ T7057] netlink: 'syz.0.720': attribute type 1 has an invalid length. [ 321.323729][ T5347] usb 5-1: device descriptor read/8, error -71 [ 321.435654][ T7057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.463608][ T5347] usb usb5-port1: unable to enumerate USB device [ 321.680024][ T27] audit: type=1326 audit(1740272167.716:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7065 comm="syz.3.726" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8d3b8d169 code=0x0 [ 321.778655][ T7060] bond1: (slave gretap1): making interface the new active one [ 322.034353][ T7060] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 322.043211][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 322.404580][ T7079] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 323.682476][ T7082] Unsupported ieee802154 address type: 0 [ 324.574509][ T7092] netlink: 'syz.0.732': attribute type 4 has an invalid length. [ 325.038243][ T7088] netlink: 'syz.0.732': attribute type 4 has an invalid length. [ 325.986703][ T7105] overlayfs: failed to resolve './file1': -2 [ 326.166877][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.736'. [ 326.832608][ T27] audit: type=1326 audit(1740272172.866:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7113 comm="syz.2.741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x0 [ 326.854415][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.308683][ T7130] xt_cgroup: path and classid specified [ 329.663216][ T7142] netlink: 'syz.1.748': attribute type 4 has an invalid length. [ 329.746967][ T7143] netlink: 'syz.1.748': attribute type 4 has an invalid length. [ 329.895023][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.751'. [ 330.935762][ T27] audit: type=1326 audit(1740272176.716:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.0.756" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ad6b8d169 code=0x0 [ 333.557732][ T7193] netlink: 'syz.1.766': attribute type 4 has an invalid length. [ 334.112677][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.767'. [ 334.122405][ T7194] netlink: 'syz.1.766': attribute type 4 has an invalid length. [ 335.084748][ T7207] tmpfs: Unknown parameter 'noswap' [ 335.174492][ T7210] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 335.347006][ T7210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.485753][ T7207] bond1: (slave gretap2): making interface the new active one [ 335.520877][ T7207] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 335.574427][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 335.724715][ T7225] netlink: 'syz.3.778': attribute type 4 has an invalid length. [ 336.265870][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'. [ 338.518282][ T7258] netlink: 'syz.2.790': attribute type 4 has an invalid length. [ 338.975988][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 341.506030][ T7300] netlink: 'syz.1.803': attribute type 4 has an invalid length. [ 341.822353][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'. [ 343.296767][ T7328] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 343.325420][ T7333] netlink: 84 bytes leftover after parsing attributes in process `syz.3.815'. [ 343.389162][ T7336] netlink: 'syz.4.816': attribute type 4 has an invalid length. [ 343.541627][ T7341] netlink: 'syz.4.816': attribute type 4 has an invalid length. [ 344.244405][ T7351] xt_cgroup: path and classid specified [ 346.073953][ T7369] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 347.411904][ T7379] netlink: 84 bytes leftover after parsing attributes in process `syz.4.830'. [ 347.646221][ T7389] netlink: 'syz.2.832': attribute type 4 has an invalid length. [ 347.668342][ T7381] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 347.801926][ T7393] netlink: 'syz.2.832': attribute type 4 has an invalid length. [ 349.290910][ T7412] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 350.494445][ T7414] xt_cgroup: path and classid specified [ 351.257888][ T7419] netlink: 84 bytes leftover after parsing attributes in process `syz.0.844'. [ 352.587835][ T7440] netlink: 'syz.0.849': attribute type 4 has an invalid length. [ 352.618562][ T7440] netlink: 'syz.0.849': attribute type 4 has an invalid length. [ 353.401121][ T7453] netlink: 84 bytes leftover after parsing attributes in process `syz.0.855'. [ 353.733013][ T7456] can0: slcan on ttyS3. [ 354.118052][ T7450] can0 (unregistered): slcan off ttyS3. [ 354.980819][ T7468] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 356.161173][ T7486] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 356.256333][ T7494] netlink: 84 bytes leftover after parsing attributes in process `syz.2.866'. [ 356.913846][ T7501] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 357.345324][ T7504] can0: slcan on ttyS3. [ 357.685663][ T7502] can0 (unregistered): slcan off ttyS3. [ 361.246557][ T7526] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 361.610532][ T7540] netlink: 84 bytes leftover after parsing attributes in process `syz.3.879'. [ 361.689209][ T7542] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 362.072234][ T27] audit: type=1326 audit(1740272208.106:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7529 comm="syz.4.876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcc718d169 code=0x7fc00000 [ 362.577425][ T7562] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 362.747425][ T7563] can0: slcan on ttyS3. [ 363.324750][ T7558] can0 (unregistered): slcan off ttyS3. [ 364.127762][ T7583] netlink: 84 bytes leftover after parsing attributes in process `syz.4.891'. [ 364.402598][ T27] audit: type=1326 audit(1740272210.436:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7582 comm="syz.3.890" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8d3b8d169 code=0x0 [ 364.456679][ T7591] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 365.152655][ T7607] netlink: 'syz.2.897': attribute type 4 has an invalid length. [ 365.178296][ T7604] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 365.216089][ T7607] netlink: 'syz.2.897': attribute type 4 has an invalid length. [ 365.804514][ T7620] can0: slcan on ttyS3. [ 366.320631][ T7629] netlink: 84 bytes leftover after parsing attributes in process `syz.4.903'. [ 366.335054][ T7615] can0 (unregistered): slcan off ttyS3. [ 367.160223][ T7641] syz.2.905 (7641): drop_caches: 3 [ 367.200588][ T7650] netlink: 'syz.4.910': attribute type 4 has an invalid length. [ 367.225005][ T27] audit: type=1326 audit(1740272213.266:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.3.908" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8d3b8d169 code=0x0 [ 367.246670][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.296527][ T7650] netlink: 'syz.4.910': attribute type 4 has an invalid length. [ 367.359636][ T7655] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 368.233033][ T7670] netlink: 84 bytes leftover after parsing attributes in process `syz.0.916'. [ 368.850904][ T7677] can0: slcan on ttyS3. [ 369.467785][ T7669] can0 (unregistered): slcan off ttyS3. [ 370.416894][ T7707] syz.2.924 (7707): drop_caches: 3 [ 370.501526][ T7714] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 370.573860][ T27] audit: type=1326 audit(1740272216.606:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7712 comm="syz.3.927" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8d3b8d169 code=0x0 [ 370.650933][ T7720] netlink: 84 bytes leftover after parsing attributes in process `syz.0.930'. [ 370.914322][ T5346] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 370.965101][ T7723] can0: slcan on ttyS3. [ 371.198872][ T5346] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 371.239355][ T5346] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 373.171334][ T5346] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 373.181285][ T5346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.185262][ T7721] can0 (unregistered): slcan off ttyS3. [ 373.195901][ T7717] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 373.455657][ T7745] xt_cgroup: path and classid specified [ 373.666093][ T5345] usb 2-1: USB disconnect, device number 7 [ 374.128603][ T7752] netlink: 'syz.4.938': attribute type 4 has an invalid length. [ 374.281631][ T7755] netlink: 'syz.4.938': attribute type 4 has an invalid length. [ 374.446298][ T6172] udevd[6172]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 374.578538][ T7763] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 374.658971][ T7765] netlink: 84 bytes leftover after parsing attributes in process `syz.2.942'. [ 375.115685][ T7770] syz.3.943 (7770): drop_caches: 3 [ 376.006269][ T7780] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 376.914903][ T7788] can0: slcan on ttyS3. [ 377.929496][ T7799] netlink: 'syz.1.952': attribute type 4 has an invalid length. [ 377.977023][ T7799] netlink: 'syz.1.952': attribute type 4 has an invalid length. [ 378.134991][ T7784] can0 (unregistered): slcan off ttyS3. [ 378.593539][ T7811] xt_cgroup: path and classid specified [ 378.617010][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.624152][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.198458][ T7815] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 379.729205][ T7823] syz.1.957 (7823): drop_caches: 3 [ 379.890795][ T7831] netlink: 'syz.0.964': attribute type 4 has an invalid length. [ 379.969403][ T7831] netlink: 'syz.0.964': attribute type 4 has an invalid length. [ 380.402919][ T7838] can0: slcan on ttyS3. [ 380.604232][ T7845] xt_cgroup: path and classid specified [ 381.445344][ T7836] can0 (unregistered): slcan off ttyS3. [ 383.307591][ T7854] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 383.538606][ T7859] netlink: 56 bytes leftover after parsing attributes in process `syz.4.972'. [ 383.615295][ T7859] netlink: 24 bytes leftover after parsing attributes in process `syz.4.972'. [ 385.037356][ T7879] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 385.158787][ T7886] syz.3.976 (7886): drop_caches: 3 [ 385.597917][ T7890] can0: slcan on ttyS3. [ 386.747253][ T7885] can0 (unregistered): slcan off ttyS3. [ 386.895274][ T7906] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 386.980739][ T7901] xt_cgroup: path and classid specified [ 387.319318][ T7909] netlink: 'syz.2.984': attribute type 4 has an invalid length. [ 387.527111][ T7909] netlink: 'syz.2.984': attribute type 4 has an invalid length. [ 388.318994][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.986'. [ 388.574476][ T7921] netlink: 56 bytes leftover after parsing attributes in process `syz.2.987'. [ 388.609953][ T7921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.987'. [ 389.131495][ T7933] syz.3.990 (7933): drop_caches: 3 [ 389.849826][ T7949] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 390.020695][ T7953] can0: slcan on ttyS3. [ 390.322176][ T7965] netlink: 'syz.4.998': attribute type 4 has an invalid length. [ 390.917627][ T7969] netlink: 'syz.4.998': attribute type 4 has an invalid length. [ 391.064622][ T7945] can0 (unregistered): slcan off ttyS3. [ 391.311683][ T7980] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1001'. [ 391.339406][ T7980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1001'. [ 391.517636][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'. [ 391.605061][ T7975] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 392.350301][ T7998] syz.4.1004 (7998): drop_caches: 3 [ 393.307323][ T8012] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 393.795403][ T8021] can0: slcan on ttyS3. [ 394.605557][ T8019] can0 (unregistered): slcan off ttyS3. [ 394.671838][ T8027] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1014'. [ 394.691598][ T8027] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1014'. [ 395.034452][ T5349] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 395.258322][ T5349] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 395.290753][ T5349] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 395.332078][ T5349] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 395.365900][ T5349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.447529][ T8029] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 395.932896][ T8056] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 396.512033][ T27] audit: type=1326 audit(1740272242.546:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7ffc0000 [ 396.721685][ T27] audit: type=1326 audit(1740272242.646:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7ffc0000 [ 396.934179][ T27] audit: type=1326 audit(1740272242.936:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb98dd8d169 code=0x7ffc0000 [ 396.956408][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.936809][ T8066] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 398.054959][ T27] audit: type=1326 audit(1740272242.936:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7ffc0000 [ 398.170331][ T27] audit: type=1326 audit(1740272242.936:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.2.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb98dd8d169 code=0x7ffc0000 [ 398.192621][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.326640][ T8075] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1027'. [ 398.412850][ T8076] can0: slcan on ttyS3. [ 398.441314][ T8075] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1027'. [ 398.573413][ T26] usb 3-1: USB disconnect, device number 7 [ 399.211302][ T8068] can0 (unregistered): slcan off ttyS3. [ 402.449221][ T8124] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1039'. [ 402.490026][ T8121] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 402.515388][ T8124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1039'. [ 402.608368][ T8128] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 403.124481][ T8134] can0: slcan on ttyS3. [ 403.214049][ T8135] xt_cgroup: path and classid specified [ 403.944940][ T8130] can0 (unregistered): slcan off ttyS3. [ 406.227661][ T8175] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1051'. [ 406.264227][ T8175] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1051'. [ 406.583044][ T8184] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 407.606181][ T8192] slcan: can't register candev [ 407.611181][ T8192] Falling back ldisc for ttyS3. [ 408.642360][ T8205] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 408.978065][ T8215] netlink: 'syz.0.1062': attribute type 4 has an invalid length. [ 409.059761][ T8215] netlink: 'syz.0.1062': attribute type 4 has an invalid length. [ 409.209426][ T8222] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 409.281422][ T8229] xt_cgroup: path and classid specified [ 409.958737][ T8231] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1066'. [ 410.057212][ T8231] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1066'. [ 411.171451][ T8242] IPv6: NLM_F_CREATE should be specified when creating new route [ 411.432694][ T8249] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 412.018973][ T8260] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 412.188583][ T8262] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 413.306586][ T8279] xt_cgroup: path and classid specified [ 413.824976][ T8282] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1080'. [ 413.874796][ T8282] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1080'. [ 414.386139][ T8290] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 417.406536][ T4265] Bluetooth: unknown link type 108 [ 418.382023][ T8330] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1094'. [ 418.385090][ T8333] netlink: 'syz.1.1095': attribute type 4 has an invalid length. [ 418.391575][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'. [ 418.430608][ T8333] netlink: 'syz.1.1095': attribute type 4 has an invalid length. [ 419.674640][ T4265] Bluetooth: hci2: command 0x0409 tx timeout [ 419.883174][ T8346] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 421.067864][ T8367] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1107'. [ 421.077427][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 421.265834][ T8373] netlink: 'syz.4.1108': attribute type 4 has an invalid length. [ 421.299508][ T27] audit: type=1326 audit(1740272267.336:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.1.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f628698d169 code=0x7fc00000 [ 421.445168][ T8375] netlink: 'syz.4.1108': attribute type 4 has an invalid length. [ 422.994565][ T4375] Bluetooth: hci5: Frame reassembly failed (-84) [ 423.174911][ T8382] Bluetooth: hci5: Frame reassembly failed (-84) [ 423.877493][ T27] audit: type=1326 audit(1740272269.916:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.1.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6286984127 code=0x7fc00000 [ 423.932035][ T27] audit: type=1326 audit(1740272269.916:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.1.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6286929359 code=0x7fc00000 [ 424.000164][ T27] audit: type=1326 audit(1740272269.916:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.1.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f628692941f code=0x7fc00000 [ 424.058634][ T27] audit: type=1326 audit(1740272269.916:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.1.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f628698d169 code=0x7fc00000 [ 424.392597][ T8395] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 424.822429][ T8408] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1118'. [ 424.833144][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'. [ 425.014744][ T4265] Bluetooth: hci5: command 0x1003 tx timeout [ 425.019554][ T4252] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 426.730405][ T8422] tipc: Started in network mode [ 426.737632][ T8422] tipc: Node identity b293cb3121b2, cluster identity 4711 [ 427.782410][ T8422] tipc: Enabled bearer , priority 0 [ 427.864984][ T8417] tipc: Resetting bearer [ 428.982986][ T5348] tipc: Node number set to 2468465457 [ 429.476573][ T8440] overlayfs: failed to resolve './file1': -2 [ 429.763509][ T4263] Bluetooth: hci5: sending frame failed (-49) [ 429.773420][ T4252] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 429.788593][ T8455] Bluetooth: hci5: Frame reassembly failed (-84) [ 432.786258][ T8492] overlayfs: failed to resolve './file1': -2 [ 438.535141][ T8417] tipc: Disabling bearer [ 438.803332][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 438.852197][ T8518] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 440.074157][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.090962][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.456698][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 440.496905][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 440.813429][ T8550] Bluetooth: hci5: Frame reassembly failed (-84) [ 440.985547][ T8547] netlink: 'syz.1.1155': attribute type 10 has an invalid length. [ 441.095524][ T8547] device syz_tun entered promiscuous mode [ 441.200023][ T8547] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 442.777532][ T4263] Bluetooth: hci5: command 0x1003 tx timeout [ 442.864887][ T4252] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 443.216556][ T27] audit: type=1326 audit(1740272289.256:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8d3b8d169 code=0x7fc00000 [ 443.360055][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1164'. [ 443.429954][ T8578] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 444.241010][ T27] audit: type=1326 audit(1740272290.266:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.3.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff8d3b84127 code=0x7fc00000 [ 445.315880][ T4252] Bluetooth: unknown link type 108 [ 445.717180][ T8615] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1173'. [ 447.414659][ T4252] Bluetooth: hci1: command 0x0409 tx timeout [ 452.001537][ T8672] tipc: Enabling of bearer rejected, failed to enable media [ 471.054881][ T4263] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 471.079390][ T4263] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 471.867216][ T4263] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 472.043739][ T4263] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 472.055431][ T4263] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 472.065305][ T4263] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 472.685511][ T4337] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 473.243543][ T4337] usb 4-1: device descriptor read/64, error -71 [ 474.134467][ T4252] Bluetooth: hci5: command 0x0409 tx timeout [ 474.164631][ T4337] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 474.354669][ T4337] usb 4-1: device descriptor read/64, error -71 [ 474.476621][ T4337] usb usb4-port1: attempt power cycle [ 474.914817][ T4337] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 474.965314][ T4337] usb 4-1: device descriptor read/8, error -71 [ 475.083866][ T8904] chnl_net:caif_netlink_parms(): no params data found [ 475.244595][ T4337] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 475.324682][ T4337] usb 4-1: device descriptor read/8, error -71 [ 475.455189][ T4337] usb usb4-port1: unable to enumerate USB device [ 475.462516][ T8904] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.480328][ T8904] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.507376][ T8904] device bridge_slave_0 entered promiscuous mode [ 475.531018][ T8904] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.548803][ T8904] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.599652][ T8904] device bridge_slave_1 entered promiscuous mode [ 476.600338][ T4252] Bluetooth: hci5: command 0x041b tx timeout [ 476.858549][ T8904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.927386][ T8904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.160295][ T8904] team0: Port device team_slave_0 added [ 477.208044][ T8904] team0: Port device team_slave_1 added [ 477.327769][ T8904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.363320][ T8904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.389274][ C0] vkms_vblank_simulate: vblank timer overrun [ 477.666210][ T8976] Bluetooth: hci6: Frame reassembly failed (-84) [ 477.674991][ T4309] Bluetooth: hci6: Frame reassembly failed (-84) [ 477.862300][ T8904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.872854][ T4309] Bluetooth: hci6: Frame reassembly failed (-84) [ 478.145051][ T8904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.172574][ T8904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.251762][ T8904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.426614][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1268'. [ 478.443223][ T8985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1268'. [ 478.458734][ T8904] device hsr_slave_0 entered promiscuous mode [ 478.466784][ T8904] device hsr_slave_1 entered promiscuous mode [ 478.473616][ T8904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.482983][ T8904] Cannot create hsr debugfs directory [ 478.614783][ T4252] Bluetooth: hci5: command 0x040f tx timeout [ 478.624806][ T4472] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 478.647768][ T8991] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1270'. [ 478.664291][ T8991] 0ªX¹¦À: renamed from caif0 [ 478.674972][ T8991] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 478.751287][ T8904] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 478.760926][ T8904] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 478.777022][ T8904] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 478.784437][ T4472] usb 4-1: device descriptor read/64, error -71 [ 478.806935][ T8904] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 479.055173][ T4472] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 479.065624][ T8904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.113697][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 479.129523][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 479.182347][ T8904] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.214822][ T4472] usb 4-1: device descriptor read/64, error -71 [ 479.257938][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 479.310965][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 479.334879][ T4472] usb usb4-port1: attempt power cycle [ 479.349967][ T4368] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.357131][ T4368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.418190][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 479.621585][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 479.659741][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 479.760991][ T4252] Bluetooth: hci6: command 0x1003 tx timeout [ 479.768456][ T4263] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 479.978205][ T4472] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 480.413314][ T4368] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.420575][ T4368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.482181][ T4472] usb 4-1: device descriptor read/8, error -71 [ 480.666110][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 480.695350][ T4252] Bluetooth: hci5: command 0x0419 tx timeout [ 480.706176][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 480.735721][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 480.872191][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 480.931619][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 480.938569][ T4472] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 480.975328][ T4472] usb 4-1: device descriptor read/8, error -71 [ 480.982601][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 481.048224][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 481.202554][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 481.797334][ T4472] usb usb4-port1: unable to enumerate USB device [ 481.824916][ T27] audit: type=1326 audit(1740272327.866:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad6b8d169 code=0x7ffc0000 [ 481.847834][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.891778][ T27] audit: type=1326 audit(1740272327.896:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad6b8d169 code=0x7ffc0000 [ 482.049782][ T8904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 482.110442][ T27] audit: type=1326 audit(1740272327.896:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f2ad6b8d169 code=0x7ffc0000 [ 482.145431][ T27] audit: type=1326 audit(1740272327.896:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad6b8d169 code=0x7ffc0000 [ 482.145488][ T8904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 482.167702][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.168523][ T27] audit: type=1326 audit(1740272327.896:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9010 comm="syz.0.1277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad6b8d169 code=0x7ffc0000 [ 482.264310][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 482.272203][ T9019] overlayfs: missing 'lowerdir' [ 482.274460][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 482.317001][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 482.382469][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1279'. [ 482.408660][ T9017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1279'. [ 482.611903][ T4313] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.807984][ T4313] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.096717][ T4309] Bluetooth: hci1: Frame reassembly failed (-84) [ 484.244813][ T9039] Bluetooth: hci1: Frame reassembly failed (-84) [ 484.288273][ T4368] Bluetooth: hci1: Frame reassembly failed (-84) [ 484.872551][ T4313] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.991196][ T4313] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.186558][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 485.198165][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 485.219511][ T8904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.144686][ T4263] Bluetooth: hci1: command 0x1003 tx timeout [ 486.150587][ T4252] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 489.352694][ T4313] tipc: Left network mode [ 490.049691][ T9115] overlayfs: missing 'lowerdir' [ 490.554713][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 490.586509][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 490.736469][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 490.882078][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 491.309611][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 491.318863][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 491.333426][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 491.351579][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 491.443162][ T4263] Bluetooth: hci1: sending frame failed (-49) [ 491.451647][ T4252] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 491.482843][ T8904] device veth0_vlan entered promiscuous mode [ 491.506893][ T9132] Bluetooth: hci1: Frame reassembly failed (-84) [ 491.835208][ T8904] device veth1_vlan entered promiscuous mode [ 493.875862][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 493.885171][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 494.181227][ T8904] device veth0_macvtap entered promiscuous mode [ 494.319026][ T8904] device veth1_macvtap entered promiscuous mode [ 495.000431][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 495.034052][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 495.122811][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.212997][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.275012][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.286682][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.297302][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.324548][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.359249][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.447958][ T9189] overlayfs: missing 'lowerdir' [ 495.477813][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.713721][ T8904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.897920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 496.011421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 496.044606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 496.086608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 496.268686][ T4313] device hsr_slave_0 left promiscuous mode [ 496.304867][ T4313] device hsr_slave_1 left promiscuous mode [ 496.360743][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.402687][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.509718][ T4313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.879269][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.908607][ T4313] device bridge_slave_1 left promiscuous mode [ 497.912364][ T9212] Bluetooth: hci1: Frame reassembly failed (-84) [ 497.932683][ T11] Bluetooth: hci1: Frame reassembly failed (-84) [ 497.934833][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.128260][ T4313] device bridge_slave_0 left promiscuous mode [ 498.200084][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.632478][ T4313] device veth1_macvtap left promiscuous mode [ 498.645031][ T4313] device veth0_macvtap left promiscuous mode [ 498.651662][ T4313] device veth1_vlan left promiscuous mode [ 498.658693][ T4313] device veth0_vlan left promiscuous mode [ 498.721527][ T9215] overlayfs: missing 'lowerdir' [ 499.457686][ T4313] team0 (unregistering): Port device team_slave_1 removed [ 499.507834][ T4313] team0 (unregistering): Port device team_slave_0 removed [ 499.557886][ T4313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.609355][ T4313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.975103][ T4263] Bluetooth: hci1: command 0x1003 tx timeout [ 499.985074][ T4252] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 500.219544][ T4313] bond0 (unregistering): Released all slaves [ 500.342554][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.356784][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.371607][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.386728][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.405787][ T8904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.438670][ T8904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.483636][ T8904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.522573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 500.564544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 500.631744][ T8904] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.684648][ T8904] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.693414][ T8904] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.721586][ T8904] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.034926][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.043137][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.131231][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 501.348992][ T4362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.427746][ T4362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.461641][ T9251] overlayfs: missing 'lowerdir' [ 501.507219][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.580588][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.898758][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 502.413205][ T9257] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 506.586339][ T9312] overlayfs: missing 'lowerdir' [ 508.348554][ T9326] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 512.299584][ T9376] overlayfs: missing 'lowerdir' [ 513.494213][ T5349] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 513.700743][ T5349] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 513.724111][ T9394] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 513.756021][ T5349] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 513.759306][ T9397] overlayfs: missing 'lowerdir' [ 514.535172][ T5349] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 514.544334][ T5349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.803635][ T4472] usb 1-1: USB disconnect, device number 4 [ 516.496591][ T9437] overlayfs: missing 'lowerdir' [ 517.709411][ T9448] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 521.260418][ T5346] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 521.505413][ T9494] overlayfs: missing 'lowerdir' [ 522.755858][ T5346] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 522.765660][ T9501] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 522.786630][ T5346] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 522.832273][ T5346] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 522.852343][ T5346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.098346][ T9514] netlink: 'syz.3.1389': attribute type 13 has an invalid length. [ 523.113326][ T9514] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1389'. [ 523.127174][ T5346] usb 1-1: USB disconnect, device number 5 [ 523.149440][ T9514] syz_tun: refused to change device tx_queue_len [ 523.157845][ T9514] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 523.323245][ T9523] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 525.442029][ T9554] overlayfs: missing 'lowerdir' [ 525.569498][ T9557] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 525.578558][ T9557] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 526.445474][ T9563] fuse: Bad value for 'fd' [ 526.613640][ T9569] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 526.713312][ T9572] loop7: detected capacity change from 0 to 16384 [ 527.124894][ T26] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 527.427011][ T26] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 528.378356][ T26] usb 3-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 528.390872][ T26] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 528.405401][ T26] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 528.415273][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.505797][ T26] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 529.269875][ T4330] udevd[4330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 529.301181][ T26] usb 3-1: USB disconnect, device number 8 [ 529.965472][ T9610] overlayfs: missing 'lowerdir' [ 530.091498][ T9616] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 530.100661][ T9616] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 530.648790][ T9614] sp0: Synchronizing with TNC [ 530.683450][ T9612] [U] è [ 530.986539][ T9624] fuse: Bad value for 'fd' [ 531.699663][ T9636] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 533.553479][ T9650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1422'. [ 533.583637][ T9653] overlayfs: missing 'lowerdir' [ 533.593417][ T9650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1422'. [ 533.646408][ T9650] device batadv0 entered promiscuous mode [ 533.693399][ T9650] device batadv_slave_1 entered promiscuous mode [ 533.715993][ T9650] device batadv_slave_1 left promiscuous mode [ 533.763546][ T9650] device batadv0 left promiscuous mode [ 534.105575][ T14] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 534.186420][ T9666] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 534.195505][ T9666] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 535.000600][ T9671] fuse: Bad value for 'fd' [ 535.191286][ T9677] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 535.202627][ T14] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 535.257865][ T14] usb 6-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 536.604044][ T14] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 536.673207][ T14] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 536.693855][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.709099][ T9690] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 536.756014][ T9691] loop7: detected capacity change from 0 to 16384 [ 536.767331][ T9690] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 536.839802][ T14] snd-usb-audio: probe of 6-1:27.0 failed with error -2 [ 536.893887][ T4330] udevd[4330]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 536.916203][ T4337] usb 6-1: USB disconnect, device number 2 [ 537.162955][ T9703] 9pnet_fd: Insufficient options for proto=fd [ 537.539435][ T9714] overlayfs: missing 'lowerdir' [ 538.259276][ T9716] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 542.410431][ T9746] 9pnet_virtio: no channels available for device syz [ 542.419946][ T9746] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 542.453113][ T9751] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 542.531908][ T9751] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 542.844725][ T5348] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 543.066041][ T5348] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 543.114084][ T5348] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 543.170754][ T5348] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 543.271458][ T5348] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 543.286386][ T5348] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.353429][ T9777] overlayfs: missing 'lowerdir' [ 543.818666][ T9778] can0: slcan on ttyS3. [ 543.944400][ T5348] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 544.015400][ T4330] udevd[4330]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.188484][ T14] usb 1-1: USB disconnect, device number 6 [ 544.234130][ T9773] can0 (unregistered): slcan off ttyS3. [ 547.390493][ T9796] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 547.601743][ T9802] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 547.644654][ T9802] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 548.229351][ T9818] overlayfs: missing 'lowerdir' [ 551.374476][ T1197] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 551.558991][ T1197] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 551.583720][ T1197] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 551.630186][ T9848] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 551.644774][ T1197] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 551.694766][ T1197] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 551.724778][ T1197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.812492][ T1197] usb 1-1: invalid MIDI out EP 0 [ 551.919405][ T9833] can0: slcan on ttyS3. [ 551.971189][ T1197] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 552.029246][ T1197] usb 1-1: USB disconnect, device number 7 [ 552.134794][ T9829] can0 (unregistered): slcan off ttyS3. [ 552.316555][ T6172] udevd[6172]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.661852][ T9867] overlayfs: missing 'lowerdir' [ 553.275730][ T9882] overlayfs: missing 'workdir' [ 556.941654][ T9908] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 556.952010][ T9908] overlayfs: overlapping lowerdir path [ 557.096598][ T9909] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 557.401690][ T9918] overlayfs: missing 'lowerdir' [ 557.797453][ T9919] can0: slcan on ttyS3. [ 557.803485][ T27] audit: type=1326 audit(1740272403.816:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9897 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad6b8d169 code=0x7fc00000 [ 557.831507][ T27] audit: type=1326 audit(1740272403.816:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9897 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2ad6b8d169 code=0x7fc00000 [ 557.930974][ T9928] overlayfs: missing 'workdir' [ 557.940201][ T27] audit: type=1326 audit(1740272403.816:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9897 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad6b8d169 code=0x7fc00000 [ 557.978186][ T27] audit: type=1326 audit(1740272403.816:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9897 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad6b8d169 code=0x7fc00000 [ 558.214991][ T9913] can0 (unregistered): slcan off ttyS3. [ 558.609957][ T27] audit: type=1326 audit(1740272403.816:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9897 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad6b8d169 code=0x7fc00000 [ 558.635570][ T27] audit: type=1326 audit(1740272403.816:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9897 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad6b8d169 code=0x7fc00000 [ 558.673997][ T9789] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 558.781706][ T27] audit: type=1326 audit(1740272403.816:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9897 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad6b8d169 code=0x7fc00000 [ 558.817247][ T27] audit: type=1326 audit(1740272403.816:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9897 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad6b8d169 code=0x7fc00000 [ 558.876411][ T9789] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 558.894748][ T27] audit: type=1326 audit(1740272403.816:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9897 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad6b8d169 code=0x7fc00000 [ 559.045983][ T27] audit: type=1326 audit(1740272403.816:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9897 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad6b8d169 code=0x7fc00000 [ 559.080364][ T9789] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 559.131697][ T9789] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 560.434866][ T9789] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 560.464926][ T9789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.540661][ T9789] usb 3-1: invalid MIDI out EP 0 [ 560.601937][ T9789] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 560.658801][ T6172] udevd[6172]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.680850][ T9952] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 560.689182][ T9952] tipc: Enabled bearer , priority 10 [ 560.694024][ T5348] usb 3-1: USB disconnect, device number 9 [ 560.815202][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 560.931423][ T9959] overlayfs: missing 'lowerdir' [ 561.061477][ T9963] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 561.084661][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 561.583657][ T9974] overlayfs: missing 'workdir' [ 561.614726][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 561.762360][ T9975] can0: slcan on ttyS3. [ 562.415065][ T9968] can0 (unregistered): slcan off ttyS3. [ 562.775097][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 562.939861][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.946277][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.895612][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 564.224174][ T14] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 564.435812][ T14] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 564.454870][ T14] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 564.499094][ T14] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 564.530906][ T14] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 564.540562][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.607443][ T14] usb 2-1: invalid MIDI out EP 0 [ 564.701500][T10010] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 564.743673][ T14] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 564.817965][ T4366] udevd[4366]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.840449][ T14] usb 2-1: USB disconnect, device number 8 [ 564.923474][T10013] overlayfs: missing 'workdir' [ 564.934194][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 565.607356][T10031] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 565.974483][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 567.014199][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 567.812284][T10055] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 568.059891][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 568.136377][T10062] overlayfs: missing 'workdir' [ 568.240764][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1532'. [ 568.954023][ T14] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 569.094054][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 569.183829][T10084] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 569.937216][ T14] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 569.976498][ T14] usb 3-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 570.029965][ T14] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 570.121127][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.134035][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 570.318477][ T14] usb 3-1: invalid MIDI out EP 0 [ 571.276373][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 571.340936][ T14] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 571.376841][ T14] usb 3-1: USB disconnect, device number 10 [ 571.655451][ T6172] udevd[6172]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 571.712945][T10103] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 572.028664][T10114] overlayfs: missing 'workdir' [ 572.294201][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 573.445458][T10137] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 573.976308][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 575.014928][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 575.724049][ T14] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 575.939954][ T14] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 575.967292][ T14] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 575.998480][ T14] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 576.054220][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 576.057498][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.140968][ T14] usb 2-1: invalid MIDI out EP 0 [ 576.326645][ T14] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 576.391213][ T6172] udevd[6172]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 576.420280][ T14] usb 2-1: USB disconnect, device number 9 [ 577.094264][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 578.134198][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 579.174148][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 580.547566][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 580.884091][ T14] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 581.575956][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 581.659795][ T14] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 581.694101][ T14] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 581.745831][ T14] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 581.794306][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.390459][ T14] usb 2-1: invalid MIDI out EP 0 [ 582.417344][ T14] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 582.595024][ T4455] udevd[4455]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.614103][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 582.858519][ T1197] usb 2-1: USB disconnect, device number 10 [ 584.454352][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 584.503142][T10262] bridge0: port 3(hsr_slave_1) entered blocking state [ 584.510423][T10262] bridge0: port 3(hsr_slave_1) entered disabled state [ 585.226049][T10282] random: crng reseeded on system resumption [ 585.494250][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 587.502662][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 588.665929][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 589.734241][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 590.214350][T10311] bridge0: port 3(hsr_slave_1) entered blocking state [ 590.221216][T10311] bridge0: port 3(hsr_slave_1) entered disabled state [ 590.724717][ T26] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 590.774049][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 590.894485][T10314] xt_cgroup: path and classid specified [ 591.026391][ T26] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 591.055290][ T26] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 591.097493][ T26] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 591.205032][ T26] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 591.214935][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.503153][ T26] snd-usb-audio: probe of 3-1:27.0 failed with error -12 [ 591.539554][ T26] usb 3-1: USB disconnect, device number 11 [ 591.814090][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 592.714171][T10323] bridge0: port 3(hsr_slave_1) entered blocking state [ 592.721231][T10323] bridge0: port 3(hsr_slave_1) entered disabled state [ 593.430137][T10323] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 593.452603][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 593.461258][ T6172] udevd[6172]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 593.922508][T10334] netlink: 'syz.2.1600': attribute type 4 has an invalid length. [ 594.227046][T10344] netlink: 'syz.2.1600': attribute type 4 has an invalid length. [ 594.454062][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 595.494111][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 598.764310][T10368] block device autoloading is deprecated and will be removed. [ 599.033014][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 600.054712][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 601.094175][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 601.362491][T10423] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 601.369583][T10423] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 601.393093][T10423] vhci_hcd vhci_hcd.0: Device attached [ 602.144588][ T5348] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 602.335747][T10424] vhci_hcd: connection closed [ 602.350683][ T2888] vhci_hcd: stop threads [ 602.407589][ T2888] vhci_hcd: release socket [ 602.454668][ T2888] vhci_hcd: disconnect device [ 602.654038][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 602.774372][T10437] xt_cgroup: path and classid specified [ 603.734139][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 604.113677][T10470] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 604.254092][ T5347] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 604.546360][ T5347] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 605.344389][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 605.882926][ T5347] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 605.892853][ T5347] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 605.902750][ T5347] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 605.911906][ T5347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.977304][ T5347] snd-usb-audio: probe of 4-1:27.0 failed with error -12 [ 606.084031][T10494] xt_cgroup: path and classid specified [ 606.363961][ T5347] usb 4-1: USB disconnect, device number 11 [ 606.374439][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 606.611978][T10501] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 606.618559][T10501] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 606.646743][ T4465] udevd[4465]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 606.667783][T10501] vhci_hcd vhci_hcd.0: Device attached [ 607.324606][ T1197] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 607.344145][ T5348] vhci_hcd: vhci_device speed not set [ 607.414197][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 607.438993][T10502] vhci_hcd: connection reset by peer [ 607.448140][ T4440] vhci_hcd: stop threads [ 607.452452][ T4440] vhci_hcd: release socket [ 607.489490][ T4440] vhci_hcd: disconnect device [ 608.279802][T10542] netlink: 'syz.1.1647': attribute type 4 has an invalid length. [ 608.454100][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 609.494158][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 609.552792][T10546] netlink: 'syz.1.1647': attribute type 4 has an invalid length. [ 609.862378][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1654'. [ 609.878140][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1654'. [ 609.888918][T10561] netlink: 'syz.1.1654': attribute type 7 has an invalid length. [ 610.093977][ T5347] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 610.103834][T10564] can0: slcan on ttyS3. [ 610.189478][T10566] xt_cgroup: path and classid specified [ 610.396481][ T5347] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 610.534144][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 610.612092][ T5347] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 610.724593][ T5347] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 610.734694][T10562] can0 (unregistered): slcan off ttyS3. [ 610.775693][ T5347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.844400][T10556] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 611.105058][ T26] usb 1-1: USB disconnect, device number 8 [ 611.575099][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 612.434347][T10600] netlink: 'syz.3.1664': attribute type 4 has an invalid length. [ 612.534529][ T1197] vhci_hcd: vhci_device speed not set [ 612.614068][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 612.750274][T10597] netlink: 'syz.3.1664': attribute type 4 has an invalid length. [ 612.855225][T10609] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 613.654574][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 615.095211][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 615.429197][T10624] can0: slcan on ttyS3. [ 615.592953][T10626] xt_cgroup: path and classid specified [ 616.055236][T10617] can0 (unregistered): slcan off ttyS3. [ 616.134208][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 618.054202][T10645] Bluetooth: MGMT ver 1.22 [ 618.632446][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 619.024635][ T1197] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 619.286667][T10667] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 619.359104][ T1197] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 619.588257][ T1197] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 619.654283][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 619.876269][ T1197] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 619.950809][ T1197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.061322][T10649] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 620.694748][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 620.906843][T10679] can0: slcan on ttyS3. [ 620.934184][ T1197] usb 1-1: USB disconnect, device number 9 [ 621.207395][T10689] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1686'. [ 621.264620][T10678] can0 (unregistered): slcan off ttyS3. [ 623.835413][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 624.379081][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.396145][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.398223][T10708] xt_cgroup: path and classid specified [ 624.856751][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 625.876281][T10726] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 625.894063][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 626.934072][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 626.984517][ T26] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 627.308537][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 627.319316][ T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.350847][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 627.364764][ T26] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 627.374637][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.393106][ T26] usb 1-1: config 0 descriptor?? [ 627.417425][ T26] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 627.466204][T10738] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 627.491169][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1700'. [ 627.974063][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 629.014017][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 630.054041][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 631.094033][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 632.134036][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 633.174024][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 634.214018][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 635.254013][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 636.294031][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 637.334008][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 638.374043][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 639.414024][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 640.454046][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 641.494017][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 642.534022][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 643.574029][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 644.614016][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 645.654014][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 646.694016][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 647.734005][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 648.774024][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 649.813995][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 650.854038][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 651.894036][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 652.934032][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 653.974005][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 655.014007][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 656.053996][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 657.094004][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 658.134006][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 659.174045][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 660.216510][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 685.820343][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.826829][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 728.853963][ T4263] Bluetooth: hci5: command 0x0406 tx timeout [ 732.603838][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 732.610846][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10738/1:b..l [ 732.619343][ C1] (detected by 1, t=10502 jiffies, g=51181, q=550 ncpus=2) [ 732.626645][ C1] task:syz.2.1700 state:R running task stack:23624 pid:10738 ppid:4250 flags:0x00004000 [ 732.638523][ C1] Call Trace: [ 732.641842][ C1] [ 732.644790][ C1] __schedule+0x143f/0x4570 [ 732.649345][ C1] ? deref_stack_reg+0x17c/0x210 [ 732.654385][ C1] ? release_firmware_map_entry+0x18b/0x18b [ 732.660291][ C1] ? print_irqtrace_events+0x210/0x210 [ 732.665918][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 732.671232][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 732.676368][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 732.682098][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 732.687148][ C1] irqentry_exit+0x53/0x80 [ 732.691568][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 732.697558][ C1] RIP: 0010:lock_acquire+0x26f/0x5a0 [ 732.702878][ C1] Code: 2b 00 74 08 4c 89 f7 e8 9f 49 77 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 732.722516][ C1] RSP: 0018:ffffc90003596a00 EFLAGS: 00000206 [ 732.728595][ C1] RAX: 0000000000000001 RBX: 1ffff920006b2d4c RCX: 1ffff920006b2cec [ 732.736576][ C1] RDX: dffffc0000000000 RSI: ffffffff8b0c2ec0 RDI: ffffffff8b5f6d80 [ 732.744561][ C1] RBP: ffffc90003596b48 R08: dffffc0000000000 R09: fffffbfff2256c4d [ 732.752541][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920006b2d48 [ 732.760518][ C1] R13: dffffc0000000000 R14: ffffc90003596a60 R15: 0000000000000246 [ 732.768541][ C1] ? read_lock_is_recursive+0x10/0x10 [ 732.773964][ C1] ? slab_post_alloc_hook+0x52/0x3a0 [ 732.779317][ C1] ? page_ext_put+0x98/0xb0 [ 732.783836][ C1] ? raw_notifier_call_chain+0xd0/0x170 [ 732.789405][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 732.794443][ C1] ? netlink_unicast+0x7e2/0x970 [ 732.799415][ C1] ? page_ext_get+0x1c/0x2a0 [ 732.804025][ C1] page_ext_get+0x39/0x2a0 [ 732.808449][ C1] ? page_ext_get+0x1c/0x2a0 [ 732.813062][ C1] __page_table_check_zero+0x139/0x4b0 [ 732.818531][ C1] free_unref_page_prepare+0x12b6/0x15b0 [ 732.824316][ C1] free_unref_page+0x33/0x3e0 [ 732.829012][ C1] qlist_free_all+0x76/0xe0 [ 732.833527][ C1] kasan_quarantine_reduce+0x156/0x170 [ 732.839026][ C1] __kasan_slab_alloc+0x1f/0x70 [ 732.843916][ C1] slab_post_alloc_hook+0x52/0x3a0 [ 732.849080][ C1] kmem_cache_alloc_node+0x136/0x310 [ 732.854385][ C1] ? __alloc_skb+0xd3/0x2c0 [ 732.858899][ C1] __alloc_skb+0xd3/0x2c0 [ 732.863236][ C1] mpls_netconf_notify_devconf+0x42/0xf0 [ 732.868885][ C1] mpls_dev_notify+0x57a/0x790 [ 732.873664][ C1] raw_notifier_call_chain+0xd0/0x170 [ 732.879054][ C1] unregister_netdevice_many+0xe48/0x1710 [ 732.884781][ C1] ? __nla_validate+0x50/0x50 [ 732.889469][ C1] ? alloc_netdev_mqs+0xef0/0xef0 [ 732.894936][ C1] ? unregister_netdevice_queue+0x258/0x350 [ 732.900934][ C1] ? list_netdevice+0x650/0x650 [ 732.905800][ C1] ? __nla_parse+0x3c/0x50 [ 732.910223][ C1] ? list_netdevice+0x650/0x650 [ 732.915089][ C1] rtnl_dellink+0x4ef/0x890 [ 732.919602][ C1] ? rtnl_newlink+0x2060/0x2060 [ 732.924507][ C1] ? rtnl_newlink+0x2060/0x2060 [ 732.929369][ C1] rtnetlink_rcv_msg+0x822/0x1000 [ 732.934415][ C1] ? rtnetlink_rcv_msg+0x1fe/0x1000 [ 732.939630][ C1] ? rtnetlink_bind+0x80/0x80 [ 732.944309][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 732.950329][ C1] ? print_irqtrace_events+0x210/0x210 [ 732.955805][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 732.961014][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 732.966918][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 732.972192][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 732.978117][ C1] ? _raw_spin_unlock+0x40/0x40 [ 732.982994][ C1] ? __dev_queue_xmit+0x173c/0x3d50 [ 732.988221][ C1] ? rcu_preempt_deferred_qs_irqrestore+0x873/0xc50 [ 732.994826][ C1] ? __dev_queue_xmit+0x2d6/0x3d50 [ 732.999983][ C1] ? rcu_read_unlock_special+0x540/0x540 [ 733.005666][ C1] ? refcount_inc+0x80/0x80 [ 733.010182][ C1] ? __copy_skb_header+0x47b/0x600 [ 733.015310][ C1] netlink_rcv_skb+0x1cd/0x410 [ 733.020083][ C1] ? rtnetlink_bind+0x80/0x80 [ 733.024770][ C1] ? netlink_ack+0x12a0/0x12a0 [ 733.029540][ C1] ? __netlink_deliver_tap+0x748/0x780 [ 733.035021][ C1] ? __rcu_read_unlock+0x92/0x100 [ 733.040056][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 733.045355][ C1] netlink_unicast+0x7e2/0x970 [ 733.050151][ C1] ? netlink_detachskb+0x90/0x90 [ 733.055095][ C1] ? __virt_addr_valid+0x45b/0x530 [ 733.060220][ C1] ? __phys_addr_symbol+0x2b/0x70 [ 733.065256][ C1] ? __check_object_size+0x4dd/0xa30 [ 733.070550][ C1] ? bpf_lsm_netlink_send+0x5/0x10 [ 733.075675][ C1] netlink_sendmsg+0xa26/0xd60 [ 733.080456][ C1] ? netlink_getsockopt+0x580/0x580 [ 733.085664][ C1] ? aa_sock_msg_perm+0x91/0x150 [ 733.090626][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 733.095930][ C1] ? security_socket_sendmsg+0x7d/0xa0 [ 733.101404][ C1] ? netlink_getsockopt+0x580/0x580 [ 733.106613][ C1] ____sys_sendmsg+0x5d3/0x9a0 [ 733.111390][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 733.116432][ C1] __sys_sendmsg+0x2a9/0x390 [ 733.121030][ C1] ? ____sys_sendmsg+0x9a0/0x9a0 [ 733.126019][ C1] ? __fget_files+0x28/0x4a0 [ 733.130666][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 733.136697][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 733.142689][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 733.147896][ C1] ? syscall_enter_from_user_mode+0x2e/0x230 [ 733.153895][ C1] do_syscall_64+0x3b/0xb0 [ 733.158359][ C1] ? clear_bhb_loop+0x45/0xa0 [ 733.163069][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 733.168995][ C1] RIP: 0033:0x7fb98dd8d169 [ 733.173440][ C1] RSP: 002b:00007fb98eb5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.181863][ C1] RAX: ffffffffffffffda RBX: 00007fb98dfa6080 RCX: 00007fb98dd8d169 [ 733.189841][ C1] RDX: 0000000000000840 RSI: 00004000000002c0 RDI: 0000000000000007 [ 733.197820][ C1] RBP: 00007fb98de0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 733.205840][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.213821][ C1] R13: 0000000000000000 R14: 00007fb98dfa6080 R15: 00007ffd16941548 [ 733.221836][ C1] [ 733.224870][ C1] rcu: rcu_preempt kthread starved for 9966 jiffies! g51181 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 733.235994][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 733.245965][ C1] rcu: RCU grace-period kthread stack dump: [ 733.251858][ C1] task:rcu_preempt state:R running task stack:26712 pid:16 ppid:2 flags:0x00004000 [ 733.262645][ C1] Call Trace: [ 733.265967][ C1] [ 733.268914][ C1] __schedule+0x143f/0x4570 [ 733.273434][ C1] ? _raw_spin_unlock+0x40/0x40 [ 733.278326][ C1] ? release_firmware_map_entry+0x18b/0x18b [ 733.284242][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 733.289639][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 733.295539][ C1] ? _raw_spin_unlock+0x40/0x40 [ 733.300401][ C1] schedule+0xbf/0x180 [ 733.304482][ C1] schedule_timeout+0x1b9/0x300 [ 733.309346][ C1] ? console_conditional_schedule+0x40/0x40 [ 733.315255][ C1] ? update_process_times+0x1b0/0x1b0 [ 733.320639][ C1] ? prepare_to_swait_event+0x329/0x350 [ 733.326318][ C1] rcu_gp_fqs_loop+0x2d2/0x1150 [ 733.331183][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 733.337352][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 733.342560][ C1] ? rcu_gp_init+0x15f0/0x15f0 [ 733.347331][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 733.353235][ C1] ? finish_swait+0xcf/0x1e0 [ 733.357858][ C1] rcu_gp_kthread+0xa3/0x3b0 [ 733.362503][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 733.367638][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 733.373552][ C1] ? __kthread_parkme+0x168/0x1c0 [ 733.378627][ C1] kthread+0x28d/0x320 [ 733.382721][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 733.387842][ C1] ? kthread_blkcg+0xd0/0xd0 [ 733.392442][ C1] ret_from_fork+0x1f/0x30 [ 733.396880][ C1] [ 733.399901][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 733.406225][ C1] Sending NMI from CPU 1 to CPUs 0: [ 733.411493][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_idle_do_entry+0x10f/0x340