last executing test programs: 7m3.320261823s ago: executing program 3 (id=671): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000640)=""/102400, 0x19000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYBLOB]) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x40001, 0x1, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e56cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca3aad6b39905a9727d2001457df7be7e1aefebaf80e2697c143f28def4b73905ca14d90d1f600"}) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"a2e3ad21ed6b0af9fcfbf4c087f74f9b3e096eff7fc6e5539b9b18098b9b4a1b2352091b080d29428f0e1ac6e7049b3468959b189a242a9b60f3988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee8004983709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544aedea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7145b59d7bcddff754413d135273ea8e75f22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da062d00d519f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c73ca6bb3cc6651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7ec40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 7m2.54226593s ago: executing program 3 (id=674): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0xfa3, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000000)) 7m0.86187957s ago: executing program 3 (id=676): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000080)=@usbdevfs_connect={0xffffffff}) 6m59.780237186s ago: executing program 3 (id=678): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) 6m57.287317505s ago: executing program 3 (id=683): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) mount(0x0, 0x0, &(0x7f00000005c0)='vxfs\x00', 0x0, 0x0) r3 = io_uring_setup(0x341a, &(0x7f0000000080)={0x0, 0x4, 0x2, 0x0, 0x7fffc}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 6m53.948243643s ago: executing program 3 (id=685): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x400, 0x0) linkat(r2, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file1\x00', 0x0) getdents(r2, 0x0, 0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) rename(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) 6m53.579817491s ago: executing program 32 (id=685): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x400, 0x0) linkat(r2, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file1\x00', 0x0) getdents(r2, 0x0, 0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) rename(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) 21.41611983s ago: executing program 1 (id=1363): mknod(0x0, 0x8001420, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0xa) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) open(0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x2400ad00, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @dev}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x12) read$FUSE(r4, &(0x7f0000006500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000002400)=ANY=[@ANYBLOB="290000000400"/15], 0x29) write$FUSE_INTERRUPT(r4, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r7, r4, 0x0) 19.923323253s ago: executing program 2 (id=1366): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) acct(&(0x7f0000000140)='./file0\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x40) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40044102, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x800008ec0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) 18.096604029s ago: executing program 2 (id=1367): futex(&(0x7f00000001c0), 0xb, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x5, 0x0, {}, {0xee01}, 0x0, 0xfffffffffffffffb}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r2, 0x707, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={0x0}, 0x18) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000540)=""/2, 0x2}}, 0x120) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$TCFLSH(r1, 0x540b, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15.342824524s ago: executing program 2 (id=1372): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) 14.446741252s ago: executing program 5 (id=1374): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x1, 0x0, &(0x7f0000000040)='a', 0x0, 0x929, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="8c"}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x1) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000240)=[0x5, 0x80]) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f000063d000/0x4000)=nil, 0x4000, 0x4, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) write$binfmt_script(r3, &(0x7f0000000280), 0x208e24b) 12.376172912s ago: executing program 5 (id=1376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x84) socket$kcm(0x2, 0x3, 0x84) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205649, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) sendfile(r7, r6, 0x0, 0x80009) 12.302438086s ago: executing program 1 (id=1378): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_io_uring_setup(0x3f00, &(0x7f0000000300)={0x0, 0x362a, 0x40, 0x1, 0x103}, &(0x7f0000000040), &(0x7f0000000240)) r5 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x0, 0x100000, 0x0, r4}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000740)={0x48}) 11.227865503s ago: executing program 5 (id=1379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0xf2) fanotify_init(0x200, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x9, 0x270, 0xa, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x270, 0x0, {0x0, 0x28e}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x39, 0x3, [@ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @mcast2, @remote, @local, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1c}, @dev, @loopback, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xae9cf20772c2f5d8, 0x5, 0xd, 0x3, 'snmp_trap\x00', 'syz0\x00', {0x1000}}}}, {{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 11.052984949s ago: executing program 2 (id=1380): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x39) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$inet(0x2, 0xa, 0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000060000000c00000040"], 0x50) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) 9.432931625s ago: executing program 0 (id=1381): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004000e84f7e78bcf081750000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x9fe, 0x0, 0x101, 0xfff, 0xf}}) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)=0x6) readv(r1, &(0x7f0000000a00)=[{&(0x7f00000003c0)=""/126, 0x7e}, {&(0x7f0000000440)=""/197, 0xc5}, {&(0x7f0000000540)=""/244, 0xf4}, {&(0x7f00000001c0)=""/63, 0x3f}, {&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f0000000780)=""/232, 0xe8}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f0000000880)=""/182, 0xb6}, {&(0x7f0000000940)=""/130, 0x82}], 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x2, 0x2, 0xfffd}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0f00000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704f4ffefffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x301506, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0ff0800000053fe023af1000000", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1000000}, 0x50) 9.429186505s ago: executing program 1 (id=1382): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000280)=0x14) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0xfffffffffffffffd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @empty}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r3, 0x2}}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@fallback, 0xffffffffffffffff, 0x1f, 0x1c, 0x0, @void, @value}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r4 = socket$inet6(0xa, 0x6, 0x0) listen(r4, 0x101) r5 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x730a, 0x10100, 0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) rename(0x0, &(0x7f0000000200)='./bus\x00') r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000004800011d00000000", @ANYBLOB="0000000014000100ffe00000000000000000000000000001"], 0x38}}, 0x0) getsockopt$inet6_tcp_int(r8, 0x6, 0x10, 0x0, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x25}}) 9.423694936s ago: executing program 5 (id=1383): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r2 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x12ef, 0x1, 0x2}) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000020660800002ab91a00180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000001000000850000000600000095000000000000009ab30e81bcd85a9a83b805fdeb2147e3f870681826a1a628b6b306424ebb29"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8.590617676s ago: executing program 2 (id=1384): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'macvtap0\x00'}) unlink(&(0x7f0000000300)='.\x00') openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x4000) r4 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000440)) syz_io_uring_setup(0x131a, &(0x7f0000000200), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x7530}, 0x10) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x56}, 0x10) 8.532816565s ago: executing program 4 (id=1385): ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0x0, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000380), 0x4) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}}, 0xffffff81) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r6}, &(0x7f00000001c0)=""/51, 0x33, &(0x7f0000000340)={&(0x7f0000000280)={'crc32\x00'}, &(0x7f0000000040)="6b10b7101b8e055248", 0x9}) 8.024865457s ago: executing program 0 (id=1386): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$video4linux(&(0x7f0000000180), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000300)={0x0, 0x0, 0x3010, 0x0, 0x0, 0x0, 0x3544}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r5, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r5, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) socket(0x2000000000000021, 0x0, 0x10000000000002) 7.816125778s ago: executing program 1 (id=1387): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x4}, [{0x2, 0x4}], {}, [], {0x10, 0x2}}, 0x2c, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(0x0, 0x400, 0x0) linkat(r3, 0x0, 0xffffffffffffffff, 0x0, 0x0) getdents(r3, 0x0, 0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) rename(&(0x7f0000000500)='./file3\x00', &(0x7f0000000f40)='./file1\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) 7.810882974s ago: executing program 5 (id=1388): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x6) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000002c0)=0x2, 0x4) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x7, &(0x7f0000000040)=0x3ff, 0x4) sendmsg$802154_dgram(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) 6.977650095s ago: executing program 4 (id=1389): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101801) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x0, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x2902, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f00000002c0)={0xfffffffffffffffb, 0x8, 0x2, 0x3, 0x5}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) 5.351650602s ago: executing program 5 (id=1390): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) 4.40876705s ago: executing program 2 (id=1391): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) sendfile(r6, 0xffffffffffffffff, 0x0, 0x20000023896) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 4.244050441s ago: executing program 4 (id=1392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x60}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) mount(0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r5, 0xf518, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000240)) accept4$alg(r1, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) 4.162492669s ago: executing program 0 (id=1393): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0xf2) fanotify_init(0x200, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x9, 0x270, 0xa, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x270, 0x0, {0x0, 0x28e}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x39, 0x3, [@ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @mcast2, @remote, @local, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1c}, @dev, @loopback, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xae9cf20772c2f5d8, 0x5, 0xd, 0x3, 'snmp_trap\x00', 'syz0\x00', {0x1000}}}}, {{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 4.125656949s ago: executing program 1 (id=1394): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0xf5, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000280)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xd, 'veth1_to_batadv\x00'}) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040), 0xc) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r5, &(0x7f0000000440)=[{&(0x7f0000002680)="1e", 0x1}, {0x0}], 0x2) 2.896927682s ago: executing program 0 (id=1395): open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getattr(r1, &(0x7f0000000100)={0x38}, 0x38, 0x0) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="160000000000000000", @ANYRES32], 0x20) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000b00)={{0x2, 0x8200, @dev={0xac, 0x14, 0x14, 0x31}}, {0x0, @random}, 0x1c, {0x2, 0x4e22, @loopback}, 'veth1_to_hsr\x00'}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3, 0x48}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 2.895284959s ago: executing program 4 (id=1396): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x600000b, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x820000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000080)={0xc, r6}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r5, 0x3b70, &(0x7f00000001c0)={0x20, 0x0, 0x0}) 1.594465573s ago: executing program 4 (id=1397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BLKROGET(0xffffffffffffffff, 0x125e, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x802, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') read$char_usb(r3, &(0x7f0000000040)=""/4122, 0x101a) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) lseek(r4, 0x9, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cc, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r1) 616.611024ms ago: executing program 0 (id=1398): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x12ef, 0x1, 0x2}) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000020660800002ab91a00180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000001000000850000000600000095000000000000009ab30e81bcd85a9a83b805fdeb2147e3f870681826a1a628b6b306424ebb29"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 615.260249ms ago: executing program 1 (id=1399): socket(0x1d, 0x5, 0x3) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) r3 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$NBD_DO_IT(r3, 0xab03) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r4, 0x110, 0x12, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r6, 0x80044dfe, &(0x7f0000000040)) fsync(r6) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000000180)) r7 = syz_open_dev$vim2m(0x0, 0x81, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f041}) 614.064952ms ago: executing program 4 (id=1400): r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x50007a2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r1, 0x0, 0x69) close(r1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmsg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101091, 0x0) ioperm(0x4, 0x2, 0x100000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f0000000140)={'\x00', 0x6, 0x1}) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 0s ago: executing program 0 (id=1401): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000ef0db4ed344a8240000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000001c0000000000000000000000000001"], 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000240)={0xf, 0x1, 0x2, 0x0, 0xe}) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) kernel console output (not intermixed with test programs): atadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.141572][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.161999][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.169126][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.195976][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.219140][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.226438][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.252474][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.277250][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.284235][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.310653][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.333353][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.340643][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.367066][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.379413][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.386766][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.413188][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.426332][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.433763][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.459942][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.460028][ T53] Bluetooth: hci0: command tx timeout [ 70.528655][ T5817] hsr_slave_0: entered promiscuous mode [ 70.535982][ T5817] hsr_slave_1: entered promiscuous mode [ 70.544902][ T5824] Bluetooth: hci4: command tx timeout [ 70.544954][ T5840] Bluetooth: hci3: command tx timeout [ 70.556439][ T53] Bluetooth: hci1: command tx timeout [ 70.587367][ T5816] hsr_slave_0: entered promiscuous mode [ 70.594147][ T5816] hsr_slave_1: entered promiscuous mode [ 70.600751][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.608916][ T5816] Cannot create hsr debugfs directory [ 70.624669][ T5840] Bluetooth: hci2: command tx timeout [ 70.655439][ T5820] hsr_slave_0: entered promiscuous mode [ 70.663105][ T5820] hsr_slave_1: entered promiscuous mode [ 70.669683][ T5820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.677385][ T5820] Cannot create hsr debugfs directory [ 70.686721][ T5818] hsr_slave_0: entered promiscuous mode [ 70.693257][ T5818] hsr_slave_1: entered promiscuous mode [ 70.699821][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.708157][ T5818] Cannot create hsr debugfs directory [ 70.730558][ T5822] hsr_slave_0: entered promiscuous mode [ 70.736878][ T5822] hsr_slave_1: entered promiscuous mode [ 70.742980][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.751011][ T5822] Cannot create hsr debugfs directory [ 71.091083][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.113115][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.123255][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.141073][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.198450][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.212249][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.223570][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.233588][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.318607][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.336556][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.350713][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.373041][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.441996][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.453139][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.479752][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.490787][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.500765][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.535526][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.563600][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.574149][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.596469][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.611490][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.626955][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.652622][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.662390][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.672442][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.683203][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.690657][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.700338][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.707595][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.717259][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.724320][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.751817][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.758979][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.879721][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.917347][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.959948][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.033098][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.043821][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.051050][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.094364][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.101554][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.113949][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.121122][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.132268][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.139607][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.161691][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.230748][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.266003][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.285569][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.292662][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.309948][ T5818] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.332454][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.343924][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.351125][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.517305][ T5817] veth0_vlan: entered promiscuous mode [ 72.535554][ T5840] Bluetooth: hci0: command tx timeout [ 72.559385][ T5817] veth1_vlan: entered promiscuous mode [ 72.603633][ T5817] veth0_macvtap: entered promiscuous mode [ 72.618113][ T5840] Bluetooth: hci3: command tx timeout [ 72.623571][ T5840] Bluetooth: hci1: command tx timeout [ 72.629114][ T53] Bluetooth: hci4: command tx timeout [ 72.658145][ T5817] veth1_macvtap: entered promiscuous mode [ 72.691395][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.700429][ T5840] Bluetooth: hci2: command tx timeout [ 72.751546][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.800091][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.819211][ T5817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.830489][ T5817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.839585][ T5817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.849132][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.873767][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.912890][ T5818] veth0_vlan: entered promiscuous mode [ 72.929299][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.946411][ T5818] veth1_vlan: entered promiscuous mode [ 73.000317][ T5822] veth0_vlan: entered promiscuous mode [ 73.031832][ T5818] veth0_macvtap: entered promiscuous mode [ 73.073369][ T5818] veth1_macvtap: entered promiscuous mode [ 73.083403][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.090131][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.104380][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.117640][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.124684][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.155909][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.166572][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.178636][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.190482][ T5820] veth0_vlan: entered promiscuous mode [ 73.208477][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.217363][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.226384][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.236779][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.248677][ T5822] veth1_vlan: entered promiscuous mode [ 73.261469][ T5820] veth1_vlan: entered promiscuous mode [ 73.279120][ T5816] veth0_vlan: entered promiscuous mode [ 73.300350][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.303697][ T5816] veth1_vlan: entered promiscuous mode [ 73.314021][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.359895][ T5822] veth0_macvtap: entered promiscuous mode [ 73.398258][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.401165][ T5820] veth0_macvtap: entered promiscuous mode [ 73.447356][ T5820] veth1_macvtap: entered promiscuous mode [ 73.462934][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.473582][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.483749][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.495627][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.508208][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.526664][ T5822] veth1_macvtap: entered promiscuous mode [ 73.584236][ T5816] veth0_macvtap: entered promiscuous mode [ 73.594452][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.607227][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.618148][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.629169][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.640336][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.662610][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.679625][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.697009][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.712359][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.723218][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.738945][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.748961][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.764882][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.780451][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.812029][ T5816] veth1_macvtap: entered promiscuous mode [ 73.827329][ T5820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.836967][ T5820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.846007][ T5820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.855173][ T5820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.985628][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.003911][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.129202][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.193424][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.251597][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.341072][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.461156][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.599182][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.611581][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.616354][ T5840] Bluetooth: hci0: command tx timeout [ 74.622829][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.640024][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.676511][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.692744][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.695828][ T5840] Bluetooth: hci4: command tx timeout [ 74.704313][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.713067][ T5840] Bluetooth: hci1: command tx timeout [ 74.721978][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.729234][ T5840] Bluetooth: hci3: command tx timeout [ 74.738629][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.771533][ T5822] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.780890][ T53] Bluetooth: hci2: command tx timeout [ 74.788050][ T5822] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.840893][ T5822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.850040][ T5822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.915346][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.936496][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.978282][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.028604][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.084820][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.127810][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.170677][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.223259][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.271596][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.331734][ T2931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.405162][ T2931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.472912][ T5816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.483506][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.500535][ T5816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.509442][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.677226][ T5917] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.747611][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.764692][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.824015][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.842995][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.868699][ T2931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.878589][ T2931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.922338][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.961656][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.992218][ T2931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.004570][ T2931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.081048][ T2931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.111479][ T2931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.130537][ T5923] kvm: emulating exchange as write [ 76.467275][ T5930] cgroup: No subsys list or none specified [ 77.007970][ T5932] hub 9-0:1.0: USB hub found [ 77.015250][ T5932] hub 9-0:1.0: 1 port detected [ 77.046169][ T5918] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.279287][ T5840] Bluetooth: hci3: command tx timeout [ 77.285114][ T5840] Bluetooth: hci1: command tx timeout [ 77.291804][ T5840] Bluetooth: hci4: command tx timeout [ 77.297312][ T5840] Bluetooth: hci2: command tx timeout [ 77.302838][ T53] Bluetooth: hci0: command tx timeout [ 77.324119][ T29] audit: type=1326 audit(1733619523.760:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5927 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f417af7fed9 code=0x7ffc0000 [ 77.506054][ T5918] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.591805][ T29] audit: type=1326 audit(1733619523.770:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5927 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f417af7fed9 code=0x7ffc0000 [ 77.634722][ T5918] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 77.746659][ T29] audit: type=1326 audit(1733619523.770:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5927 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f417af7fed9 code=0x7ffc0000 [ 77.850208][ T5936] warning: `syz.3.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.861833][ T5918] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 77.871356][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 77.880193][ T5918] usb 5-1: SerialNumber: syz [ 77.934765][ T29] audit: type=1326 audit(1733619523.770:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5927 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f417af7fed9 code=0x7ffc0000 [ 78.850467][ T5943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.869100][ T29] audit: type=1326 audit(1733619523.770:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5927 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f417af7fed9 code=0x7ffc0000 [ 78.987487][ T5935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.577761][ T29] audit: type=1326 audit(1733619523.780:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5927 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f417af7fed9 code=0x7ffc0000 [ 79.733067][ T29] audit: type=1326 audit(1733619523.790:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5927 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f417af7fed9 code=0x7ffc0000 [ 79.915762][ T5918] usb 5-1: 0:2 : does not exist [ 79.921029][ T5918] usb 5-1: unit 255 not found! [ 79.944838][ T5918] usb 5-1: USB disconnect, device number 2 [ 80.137415][ T29] audit: type=1326 audit(1733619523.790:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5927 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f417af7fed9 code=0x7ffc0000 [ 80.215000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.014794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.075741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.084966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 81.094701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 81.103414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.112414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 81.121641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.130283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.139638][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.400094][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.401359][ T25] cfg80211: failed to load regulatory.db [ 82.407401][ T2931] wlan1: Trigger new scan to find an IBSS to join [ 83.177197][ T5978] Zero length message leads to an empty skb [ 85.659745][ T5999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 86.238476][ T11] wlan1: Trigger new scan to find an IBSS to join [ 87.236261][ T29] audit: type=1800 audit(1733619534.550:10): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.26" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 87.488876][ T1104] wlan1: Creating new IBSS network, BSSID ee:0a:6c:1e:94:80 [ 87.864040][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.955240][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.403656][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.526469][ T25] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 90.535755][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 90.544642][ T25] usb 5-1: SerialNumber: syz [ 91.831991][ T25] usb 5-1: 0:2 : does not exist [ 92.734169][ T25] usb 5-1: USB disconnect, device number 3 [ 93.700484][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.812514][ T6053] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.124830][ T6056] netlink: 60 bytes leftover after parsing attributes in process `syz.3.39'. [ 94.134185][ T6056] netlink: 'syz.3.39': attribute type 2 has an invalid length. [ 94.142167][ T6056] netlink: 'syz.3.39': attribute type 1 has an invalid length. [ 94.149919][ T6056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.39'. [ 98.117130][ T29] audit: type=1326 audit(1733619545.400:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6086 comm="syz.0.46" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f417af7fed9 code=0x0 [ 98.193492][ T6088] capability: warning: `syz.0.46' uses 32-bit capabilities (legacy support in use) [ 101.090371][ T6118] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 101.791834][ T6131] usb usb8: usbfs: process 6131 (syz.1.55) did not claim interface 0 before use [ 103.338525][ T6123] kvm: kvm [6122]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x86 [ 104.084321][ T6123] kvm: kvm [6122]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xe8 [ 104.183353][ T6123] kvm: kvm [6122]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x876 [ 104.192359][ T6123] kvm: kvm [6122]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x8da [ 104.217900][ T6123] kvm: kvm [6122]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xd5 [ 104.399285][ T29] audit: type=1326 audit(1733619551.710:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6147 comm="syz.0.59" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f417af7fed9 code=0x0 [ 105.154389][ T6168] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 107.230749][ T6191] netlink: 168 bytes leftover after parsing attributes in process `syz.0.69'. [ 111.019545][ T6200] program syz.1.73 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.481866][ T6226] netlink: 36 bytes leftover after parsing attributes in process `syz.0.76'. [ 118.597573][ T1086] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 119.942362][ T6267] debugfs: Directory 'netdev:nicvf0' with parent 'phy5' already present! [ 121.174116][ T6287] ISOFS: Unable to identify CD-ROM format. [ 124.219874][ T6321] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.270451][ T6321] team_slave_0: entered promiscuous mode [ 124.276519][ T6321] team_slave_1: entered promiscuous mode [ 124.283196][ T6321] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 124.301579][ T6321] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 124.353236][ T6325] bond0: entered promiscuous mode [ 125.061342][ T6328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.100'. [ 125.724115][ T6325] bond_slave_0: entered promiscuous mode [ 125.753295][ T6325] bond_slave_1: entered promiscuous mode [ 125.760078][ T6329] binder: 6313:6329 ioctl 4018620d 0 returned -22 [ 125.776344][ T6325] macvlan2: entered promiscuous mode [ 125.808875][ T6325] team0: entered promiscuous mode [ 130.846928][ T6367] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.883926][ T6367] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 130.913192][ T6367] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 130.960562][ T6367] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 131.090312][ T6367] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 131.225414][ T6367] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 131.321955][ T6367] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.407562][ T6367] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 131.478520][ T6367] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 131.556502][ T6367] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 131.563265][ T6367] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 131.615425][ T6367] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 131.882255][ T6367] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 131.890484][ T6367] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 131.990011][ T6367] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 132.969934][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.461341][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.469054][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.476130][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.485545][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.155413][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.162320][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 135.960590][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.968487][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.974655][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.215478][ T5824] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.221781][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 136.592247][ T6414] netlink: 772 bytes leftover after parsing attributes in process `syz.0.128'. [ 136.731508][ T6410] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 137.227590][ T6422] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 138.215818][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.223501][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.231303][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.294695][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 138.304060][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.858283][ T6425] binder: 6415:6425 ioctl 4018620d 0 returned -22 [ 143.118724][ T5874] IPVS: starting estimator thread 0... [ 144.448134][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'. [ 144.485852][ T6465] bridge0: entered promiscuous mode [ 144.503773][ T6465] macvtap1: entered promiscuous mode [ 144.510030][ T6465] macvtap1: entered allmulticast mode [ 144.515891][ T6457] IPVS: using max 24 ests per chain, 57600 per kthread [ 144.537181][ T6465] bridge0: entered allmulticast mode [ 144.770600][ T6468] bridge0: left allmulticast mode [ 144.827851][ T6468] bridge0: left promiscuous mode [ 149.351766][ T118] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 149.397905][ T118] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 149.482761][ T6506] evm: overlay not supported [ 150.298763][ T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 150.562179][ T5874] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 152.594105][ T5874] usb 1-1: device descriptor read/all, error -71 [ 153.844353][ T6546] veth1_to_bridge: entered promiscuous mode [ 153.850662][ T6546] veth1_to_bridge: entered allmulticast mode [ 153.895241][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.077134][ T5824] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 157.518283][ T6584] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 161.915953][ T6615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.179'. [ 163.306855][ T6630] [U] ^C [ 172.906870][ T6695] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 178.794357][ T6710] netlink: 'syz.1.202': attribute type 1 has an invalid length. [ 178.802889][ T6710] netlink: 'syz.1.202': attribute type 3 has an invalid length. [ 178.810772][ T6710] netlink: 216 bytes leftover after parsing attributes in process `syz.1.202'. [ 178.820086][ T6710] NCSI netlink: No device for ifindex 813332851 [ 180.626965][ T6725] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 180.815459][ T6729] kvm: pic: non byte read [ 181.434718][ T6729] kvm: pic: level sensitive irq not supported [ 181.465635][ T6729] kvm: pic: non byte read [ 181.479736][ T6729] kvm: pic: level sensitive irq not supported [ 181.479818][ T6729] kvm: pic: non byte read [ 181.565105][ T6729] kvm: pic: level sensitive irq not supported [ 181.565179][ T6729] kvm: pic: non byte read [ 181.959810][ T6742] o2cb: This node has not been configured. [ 181.965932][ T6742] o2cb: Cluster check failed. Fix errors before retrying. [ 181.973202][ T6742] (syz.2.210,6742,0):user_dlm_register:674 ERROR: status = -22 [ 181.980964][ T6742] (syz.2.210,6742,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 183.967650][ T6753] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.062861][ T1104] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 184.118959][ T6755] input: syz0 as /devices/virtual/input/input5 [ 184.140404][ T6753] Bluetooth: MGMT ver 1.23 [ 185.333299][ T6755] netlink: 'syz.2.214': attribute type 1 has an invalid length. [ 185.341833][ T6755] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.214'. [ 186.317436][ T6772] syz.4.218 uses obsolete (PF_INET,SOCK_PACKET) [ 188.864861][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 189.794218][ T6815] process 'syz.2.232' launched '/dev/fd/3' with NULL argv: empty string added [ 190.550043][ T6817] infiniband syz2: set active [ 190.555040][ T6817] infiniband syz2: added team_slave_1 [ 190.564228][ T6817] syz2: rxe_create_cq: returned err = -12 [ 190.570570][ T6817] infiniband syz2: Couldn't create ib_mad CQ [ 190.578093][ T6817] infiniband syz2: Couldn't open port 1 [ 190.611788][ T6817] RDS/IB: syz2: added [ 190.616503][ T6817] smc: adding ib device syz2 with port count 1 [ 190.622960][ T6817] smc: ib device syz2 port 1 has pnetid [ 192.602535][ T6830] input: syz0 as /devices/virtual/input/input6 [ 192.753108][ T6830] netlink: 'syz.1.234': attribute type 1 has an invalid length. [ 192.816775][ T6835] vlan2: entered promiscuous mode [ 192.834319][ T6830] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.234'. [ 192.935821][ T6835] dummy0: entered promiscuous mode [ 192.971844][ T6835] dummy0: left promiscuous mode [ 194.126381][ T6851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.541963][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.548970][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.135630][ T6851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.147914][ T6851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.363827][ T29] audit: type=1326 audit(1733619644.630:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6865 comm="syz.2.245" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f179137fed9 code=0x0 [ 197.945732][ T6882] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 200.760845][ T6908] xt_policy: neither incoming nor outgoing policy selected [ 201.664802][ T57] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 201.964893][ T57] usb 3-1: Using ep0 maxpacket: 32 [ 202.017300][ T57] usb 3-1: New USB device found, idVendor=2013, idProduct=0248, bcdDevice=75.43 [ 202.062747][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.115187][ T57] usb 3-1: Product: syz [ 202.238107][ T57] usb 3-1: Manufacturer: syz [ 202.243410][ T57] usb 3-1: SerialNumber: syz [ 202.250187][ T57] usb 3-1: config 0 descriptor?? [ 202.479088][ T57] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 202.543484][ T57] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 202.574629][ T57] dib0700: firmware download failed at 7 with -22 [ 202.664632][ T57] usb 3-1: USB disconnect, device number 2 [ 202.716238][ T6932] nlmon0: Master is either lo or non-ether device [ 204.411905][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'. [ 204.528951][ T6952] bridge_slave_1: left allmulticast mode [ 204.581881][ T6952] bridge_slave_1: left promiscuous mode [ 204.616929][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.648936][ T6952] bridge1: port 1(bridge_slave_1) entered blocking state [ 204.656835][ T6952] bridge1: port 1(bridge_slave_1) entered disabled state [ 204.664110][ T6952] bridge_slave_1: entered allmulticast mode [ 204.709470][ T6952] bridge_slave_1: entered promiscuous mode [ 206.246719][ T6960] bridge1: port 2(macvlan2) entered blocking state [ 206.253436][ T6960] bridge1: port 2(macvlan2) entered disabled state [ 206.522894][ T6960] macvlan2: entered allmulticast mode [ 206.536450][ T6960] macvlan2: entered promiscuous mode [ 210.650072][ T6998] tipc: Started in network mode [ 210.655233][ T6998] tipc: Node identity 4, cluster identity 4711 [ 210.661422][ T6998] tipc: Node number set to 4 [ 211.627952][ T5824] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 213.900342][ T7027] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 217.904890][ T61] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 220.155121][ T29] audit: type=1326 audit(1733619667.470:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7060 comm="syz.4.299" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f301bd7fed9 code=0x0 [ 220.180570][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 220.199402][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 220.302359][ T7053] kvm: kvm [7052]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x55 [ 220.319617][ T7053] kvm: kvm [7052]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xa0 [ 220.346344][ T7053] kvm: kvm [7052]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x6 [ 220.366048][ T7053] kvm_intel: kvm [7052]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x851 [ 220.390444][ T7053] kvm_intel: kvm [7052]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x851 [ 220.412930][ T7053] kvm_intel: kvm [7052]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x851 [ 220.564717][ T7076] x_tables: unsorted entry at hook 3 [ 220.568999][ T7053] kvm_intel: kvm [7052]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x851 [ 220.764378][ T7053] kvm_intel: kvm [7052]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x851 [ 220.915577][ T7079] fuse: Unknown parameter '0x0000000000000006' [ 221.376639][ T7091] Mount JFS Failure: -22 [ 221.381182][ T7091] jfs_mount failed w/return code = -22 [ 223.309012][ T7103] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 227.343840][ T7139] netlink: 52 bytes leftover after parsing attributes in process `syz.1.319'. [ 228.579624][ T7153] bridge0: port 3(vlan2) entered blocking state [ 228.610394][ T7153] bridge0: port 3(vlan2) entered disabled state [ 228.630932][ T7153] vlan2: entered allmulticast mode [ 228.654142][ T7153] bond0: entered allmulticast mode [ 228.679580][ T7153] bond_slave_0: entered allmulticast mode [ 228.834721][ T7153] bond_slave_1: entered allmulticast mode [ 228.885782][ T7153] vlan2: entered promiscuous mode [ 228.893883][ T7153] bond0: entered promiscuous mode [ 228.899273][ T7153] bond_slave_0: entered promiscuous mode [ 228.905269][ T7153] bond_slave_1: entered promiscuous mode [ 228.912351][ T7153] bridge0: port 3(vlan2) entered blocking state [ 228.919059][ T7153] bridge0: port 3(vlan2) entered forwarding state [ 229.765266][ T7159] netlink: 'syz.1.324': attribute type 21 has an invalid length. [ 229.773263][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.324'. [ 235.548563][ T7230] capability: warning: `syz.2.342' uses deprecated v2 capabilities in a way that may be insecure [ 237.359196][ T5952] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 237.587529][ T5952] usb 4-1: Using ep0 maxpacket: 8 [ 237.714950][ T5952] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.725322][ T5952] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 237.735345][ T5952] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 237.749536][ T5952] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.762664][ T5952] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 237.771929][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.038668][ T5952] usb 4-1: GET_CAPABILITIES returned 0 [ 238.044813][ T5952] usbtmc 4-1:16.0: can't read capabilities [ 238.388063][ T7255] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 239.044361][ T5824] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 239.278485][ T7260] mkiss: ax0: crc mode is auto. [ 239.307235][ T7263] netlink: 'syz.2.351': attribute type 32 has an invalid length. [ 239.355247][ T118] usb 4-1: USB disconnect, device number 2 [ 239.414362][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 239.732187][ T7263] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 242.101007][ T5918] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 242.894633][ T5918] usb 4-1: Using ep0 maxpacket: 32 [ 242.925126][ T5918] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.954711][ T5918] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.073045][ T5918] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.156810][ T5918] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 243.172052][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 243.371365][ T5918] usb 4-1: Product: syz [ 243.434678][ T5918] usb 4-1: Manufacturer: syz [ 243.549370][ T5918] usb 4-1: SerialNumber: syz [ 243.881178][ T5918] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input7 [ 244.976507][ T29] audit: type=1800 audit(1733619693.277:15): pid=7310 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.362" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 248.128125][ T7327] x_tables: duplicate entry at hook 1 [ 248.394734][ T25] usb 4-1: USB disconnect, device number 3 [ 249.530432][ T25] appletouch 4-1:1.0: input: appletouch disconnected [ 249.642173][ T7342] kvm: kvm [7341]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 249.664713][ T5952] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 249.895824][ T5952] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.950314][ T5952] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.598713][ T2931] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 250.644955][ T5952] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.654411][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.662928][ T5952] usb 5-1: Product: syz [ 250.668782][ T5952] usb 5-1: Manufacturer: syz [ 250.671854][ T7346] kvm: kvm [7345]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff [ 250.673377][ T5952] usb 5-1: SerialNumber: syz [ 250.687984][ T7346] kvm: kvm [7345]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff [ 250.702262][ T7346] kvm: kvm [7345]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff [ 250.717343][ T7346] kvm: kvm [7345]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff [ 250.731386][ T7346] kvm: kvm [7345]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff [ 250.745056][ T7346] kvm: kvm [7345]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8ff [ 250.763450][ T7346] kvm: kvm [7345]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xff [ 250.773224][ T7346] kvm_intel: kvm [7345]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x8ff [ 250.784654][ T7346] kvm: kvm [7345]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x8ff [ 250.793989][ T7346] kvm: kvm [7345]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xff [ 251.159841][ T5952] usb 5-1: 0:2 : does not exist [ 251.169288][ T5952] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 251.228699][ T5952] usb 5-1: USB disconnect, device number 4 [ 251.282820][ T7359] binder_alloc: 7358: binder_install_single_page failed to insert page at offset 0 with -14 [ 252.591774][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.491435][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.504730][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.955095][ T57] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 257.133248][ T57] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 257.186383][ T57] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.314031][ T57] usb 5-1: config 0 has no interface number 0 [ 257.339905][ T57] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 257.467960][ T57] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 257.481792][ T57] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 257.491332][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.502514][ T57] usb 5-1: config 0 descriptor?? [ 257.950865][ T57] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 258.510881][ T8] usb 5-1: USB disconnect, device number 5 [ 258.549034][ T11] usb 5-1: Failed to submit usb control message: -71 [ 258.580469][ T11] usb 5-1: unable to send the bmi data to the device: -71 [ 258.729349][ T11] usb 5-1: unable to get target info from device [ 258.736558][ T11] usb 5-1: could not get target info (-71) [ 259.606822][ T11] usb 5-1: could not probe fw (-71) [ 260.629448][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 260.794201][ T7428] usb usb7: usbfs: process 7428 (syz.3.395) did not claim interface 0 before use [ 265.474151][ T5824] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 268.194881][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 268.210768][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 268.220370][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 268.904719][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 268.913706][ T7498] netlink: 48 bytes leftover after parsing attributes in process `syz.4.407'. [ 269.392243][ T5824] block nbd3: Receive control failed (result -32) [ 269.403422][ T5824] block nbd3: Receive control failed (result -32) [ 270.382402][ T7484] block nbd3: shutting down sockets [ 270.853051][ T7498] vlan3: entered allmulticast mode [ 275.744917][ T7536] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 275.756873][ T7536] xt_bpf: check failed: parse error [ 278.151129][ T7551] syz.3.424: attempt to access beyond end of device [ 278.151129][ T7551] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 278.166223][ T7551] syz.3.424: attempt to access beyond end of device [ 278.166223][ T7551] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 278.183699][ T7551] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 278.194240][ T7551] syz.3.424: attempt to access beyond end of device [ 278.194240][ T7551] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 278.207847][ T7551] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 278.218257][ T7551] syz.3.424: attempt to access beyond end of device [ 278.218257][ T7551] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 278.231847][ T7551] syz.3.424: attempt to access beyond end of device [ 278.231847][ T7551] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 278.244823][ T7551] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 278.254562][ T7551] syz.3.424: attempt to access beyond end of device [ 278.254562][ T7551] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 278.267570][ T7551] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 278.277445][ T7551] syz.3.424: attempt to access beyond end of device [ 278.277445][ T7551] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 278.290433][ T7551] syz.3.424: attempt to access beyond end of device [ 278.290433][ T7551] nbd3: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 278.303913][ T7551] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 278.313774][ T7551] syz.3.424: attempt to access beyond end of device [ 278.313774][ T7551] nbd3: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 278.326816][ T7551] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 278.336339][ T7551] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 278.372646][ T7565] netlink: 28 bytes leftover after parsing attributes in process `syz.4.426'. [ 278.381882][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.426'. [ 279.449223][ T7565] bridge0: port 3(vlan2) entered disabled state [ 279.455901][ T7565] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.463393][ T7565] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.716726][ T57] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 279.924124][ T57] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.991669][ T57] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 280.564619][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.585156][ T57] usb 2-1: config 0 descriptor?? [ 280.593383][ T57] pwc: Askey VC010 type 2 USB webcam detected. [ 281.301973][ T7578] netlink: 36 bytes leftover after parsing attributes in process `syz.3.432'. [ 282.065941][ T7578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.432'. [ 282.294786][ T7578] netlink: 36 bytes leftover after parsing attributes in process `syz.3.432'. [ 282.306906][ T7578] netlink: 36 bytes leftover after parsing attributes in process `syz.3.432'. [ 282.340526][ T57] pwc: recv_control_msg error -32 req 02 val 2b00 [ 282.408985][ T57] pwc: recv_control_msg error -32 req 02 val 2700 [ 282.426773][ T57] pwc: recv_control_msg error -32 req 02 val 2c00 [ 282.451250][ T57] pwc: recv_control_msg error -32 req 04 val 1000 [ 282.492450][ T57] pwc: recv_control_msg error -32 req 04 val 1300 [ 282.533348][ T57] pwc: recv_control_msg error -32 req 04 val 1400 [ 282.566150][ T57] pwc: recv_control_msg error -32 req 02 val 2000 [ 282.635597][ T7591] netlink: 36 bytes leftover after parsing attributes in process `syz.2.435'. [ 282.644733][ T7591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.435'. [ 282.653633][ T7591] netlink: 36 bytes leftover after parsing attributes in process `syz.2.435'. [ 282.663117][ T7591] netlink: 36 bytes leftover after parsing attributes in process `syz.2.435'. [ 282.681673][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 283.530126][ T57] pwc: recv_control_msg error -32 req 02 val 2100 [ 284.086228][ T7605] hub 9-0:1.0: USB hub found [ 284.091889][ T7605] hub 9-0:1.0: 1 port detected [ 284.137779][ T57] pwc: recv_control_msg error -32 req 04 val 1500 [ 284.147281][ T57] pwc: recv_control_msg error -32 req 02 val 2500 [ 284.157532][ T6186] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 284.158035][ T57] pwc: recv_control_msg error -32 req 02 val 2400 [ 284.175534][ T57] pwc: recv_control_msg error -32 req 02 val 2600 [ 285.406905][ T57] pwc: recv_control_msg error -71 req 02 val 2900 [ 285.440103][ T57] pwc: recv_control_msg error -71 req 02 val 2800 [ 285.692532][ T57] pwc: recv_control_msg error -71 req 04 val 1100 [ 285.699488][ T57] pwc: recv_control_msg error -71 req 04 val 1200 [ 285.814405][ T57] pwc: Registered as video103. [ 285.821038][ T57] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 285.935108][ T57] usb 2-1: USB disconnect, device number 2 [ 288.549538][ T5952] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 289.610532][ T5952] usb 3-1: Using ep0 maxpacket: 16 [ 289.769206][ T5952] usb 3-1: config 6 has an invalid interface number: 4 but max is 0 [ 289.778513][ T5952] usb 3-1: config 6 has no interface number 0 [ 289.787661][ T5952] usb 3-1: config 6 interface 4 has no altsetting 0 [ 289.803456][ T5952] usb 3-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice=44.03 [ 289.813594][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.227738][ T7654] ISOFS: Unable to identify CD-ROM format. [ 291.236938][ T5952] usb 3-1: Product: syz [ 291.254293][ T5952] usb 3-1: Manufacturer: syz [ 291.259390][ T5952] usb 3-1: SerialNumber: syz [ 291.380003][ T5952] usb 3-1: can't set config #6, error -71 [ 291.390411][ T5952] usb 3-1: USB disconnect, device number 3 [ 298.325681][ T7710] veth0_to_team: entered promiscuous mode [ 298.332162][ T7710] veth0_to_team: entered allmulticast mode [ 298.643358][ T7719] lo: entered allmulticast mode [ 299.430912][ T7719] tunl0: entered allmulticast mode [ 299.899274][ T7734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.732463][ T7719] gre0: entered allmulticast mode [ 300.997746][ T7719] gretap0: entered allmulticast mode [ 301.115376][ T5952] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 301.125099][ T7719] erspan0: entered allmulticast mode [ 301.142388][ T7719] ip_vti0: entered allmulticast mode [ 301.341987][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 301.372625][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 301.385258][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 51, changing to 9 [ 302.134327][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 33540, setting to 1024 [ 302.145612][ T5952] usb 5-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 302.154730][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.165081][ T5952] usb 5-1: config 0 descriptor?? [ 302.174987][ T5952] appletouch 5-1:0.0: Could not find int-in endpoint [ 302.182408][ T5952] appletouch 5-1:0.0: probe with driver appletouch failed with error -5 [ 302.191832][ T5952] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 302.210497][ T7719] ip6_vti0: entered allmulticast mode [ 302.229963][ T7719] sit0: entered allmulticast mode [ 302.237668][ T7719] ip6tnl0: entered allmulticast mode [ 302.247587][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 302.260288][ T7719] ip6gre0: entered allmulticast mode [ 302.266098][ T25] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 302.276161][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.294296][ T7719] syz_tun: entered allmulticast mode [ 302.302982][ T25] usb 4-1: config 0 descriptor?? [ 302.327233][ T7719] ip6gretap0: entered allmulticast mode [ 302.351140][ T7743] kvm: kvm [7742]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 302.365817][ T25] as10x_usb: device has been detected [ 302.366147][ T7743] kvm: kvm [7742]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 302.371802][ T25] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 302.416434][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.425403][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.436227][ T25] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 302.457271][ T2148] usb 5-1: USB disconnect, device number 6 [ 302.471527][ T7719] bridge0: entered allmulticast mode [ 302.489477][ T7719] vcan0: entered allmulticast mode [ 302.506673][ T7719] bond0: entered allmulticast mode [ 302.513472][ T25] as10x_usb: error during firmware upload part1 [ 302.525253][ T25] Registered device nBox DVB-T Dongle [ 302.635983][ T7719] bond_slave_0: entered allmulticast mode [ 302.647374][ T5952] usb 4-1: USB disconnect, device number 4 [ 302.659886][ T7719] bond_slave_1: entered allmulticast mode [ 302.711543][ T5952] Unregistered device nBox DVB-T Dongle [ 302.721625][ T5952] as10x_usb: device has been disconnected [ 302.759217][ T7719] team0: entered allmulticast mode [ 302.766053][ T7719] team_slave_0: entered allmulticast mode [ 302.772531][ T7719] team_slave_1: entered allmulticast mode [ 302.791795][ T7719] dummy0: entered allmulticast mode [ 302.800249][ T7719] nlmon0: entered allmulticast mode [ 302.812372][ T7719] caif0: entered allmulticast mode [ 302.820058][ T7719] batadv0: entered allmulticast mode [ 302.832959][ T7719] vxcan0: entered allmulticast mode [ 302.839335][ T7719] vxcan1: entered allmulticast mode [ 302.846353][ T7719] veth0: entered allmulticast mode [ 302.854009][ T7719] veth1: entered allmulticast mode [ 302.869187][ T7719] wg0: entered allmulticast mode [ 302.896640][ T7719] wg1: entered allmulticast mode [ 302.916047][ T7719] wg2: entered allmulticast mode [ 302.925211][ T7719] veth0_to_bridge: entered allmulticast mode [ 302.941811][ T7719] veth1_to_bridge: entered allmulticast mode [ 302.952537][ T7719] veth0_to_bond: entered allmulticast mode [ 303.004329][ T7719] veth1_to_bond: entered allmulticast mode [ 303.769001][ T7719] veth0_to_team: entered allmulticast mode [ 303.783047][ T7719] veth1_to_team: entered allmulticast mode [ 303.838526][ T7719] infiniband syz2: set down [ 303.846604][ T7719] veth0_to_batadv: entered allmulticast mode [ 303.855595][ T7719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.071113][ T7719] batadv_slave_0: entered allmulticast mode [ 304.080712][ T7719] veth1_to_batadv: entered allmulticast mode [ 304.091833][ T7719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.792230][ T7719] batadv_slave_1: entered allmulticast mode [ 304.851436][ T7719] xfrm0: entered allmulticast mode [ 304.887860][ T7719] veth0_to_hsr: entered allmulticast mode [ 304.946821][ T7719] hsr_slave_0: entered allmulticast mode [ 305.151653][ T7719] veth1_to_hsr: entered allmulticast mode [ 305.217595][ T7719] hsr_slave_1: entered allmulticast mode [ 305.239104][ T7719] hsr0: entered allmulticast mode [ 305.497071][ T7719] veth1_virt_wifi: entered allmulticast mode [ 305.520979][ T7719] veth0_virt_wifi: entered allmulticast mode [ 305.546832][ T7719] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 305.566231][ T7719] veth1_vlan: entered allmulticast mode [ 305.601704][ T7719] veth0_vlan: entered allmulticast mode [ 305.611103][ T7776] syz.4.479[7776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.611204][ T7776] syz.4.479[7776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.759971][ T7776] syz.4.479[7776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.798849][ T7719] vlan0: entered allmulticast mode [ 305.823633][ T7719] vlan1: entered allmulticast mode [ 306.804569][ T7719] macvlan0: entered allmulticast mode [ 306.824260][ T7719] macvlan1: entered allmulticast mode [ 306.831491][ T7719] ipvlan0: entered allmulticast mode [ 306.838448][ T7719] ipvlan1: entered allmulticast mode [ 307.067867][ T7719] veth1_macvtap: entered allmulticast mode [ 307.103494][ T7719] veth0_macvtap: entered allmulticast mode [ 307.114141][ T7719] macvtap0: entered allmulticast mode [ 307.133602][ T7719] macsec0: entered allmulticast mode [ 307.147204][ T7719] geneve0: entered allmulticast mode [ 307.169936][ T7719] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.184565][ T7719] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.194240][ T7719] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.203816][ T7719] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.217786][ T7719] geneve1: entered allmulticast mode [ 307.229786][ T7719] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 307.240424][ T7719] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 307.268574][ T7719] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 307.309395][ T7719] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 307.335590][ T7719] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 307.361070][ T7719] syztnl2: entered allmulticast mode [ 307.370519][ T7719] syztnl1: entered allmulticast mode [ 307.417309][ T7784] tipc: Started in network mode [ 307.422271][ T7784] tipc: Node identity 101, cluster identity 4711 [ 307.428723][ T7784] tipc: Node number set to 257 [ 307.433815][ T7784] tipc: Cannot configure node identity twice [ 308.075920][ T7799] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 308.875390][ T7806] overlayfs: missing 'workdir' [ 309.298096][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'. [ 311.422007][ T7820] syzkaller0: entered allmulticast mode [ 312.346459][ T7838] netlink: 'syz.3.496': attribute type 21 has an invalid length. [ 314.192119][ T7856] netdevsim netdevsim2: Direct firmware load for — failed with error -2 [ 314.201134][ T7856] netdevsim netdevsim2: Falling back to sysfs fallback for: — [ 317.832636][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.839979][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.325487][ T7453] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 324.095904][ T7927] vlan2: entered promiscuous mode [ 324.101417][ T7927] vlan2: entered allmulticast mode [ 324.192394][ T7925] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 324.234465][ T7925] kvm: pic: non byte read [ 331.039400][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'. [ 332.666737][ T29] audit: type=1800 audit(1733619780.967:16): pid=7981 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.532" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 335.458258][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 335.467780][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 335.738715][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 335.758582][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 335.810237][ T8008] ceph: No mds server is up or the cluster is laggy [ 335.856438][ T5840] Bluetooth: hci0: unexpected event for opcode 0x0402 [ 340.530698][ T5840] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 340.890986][ T5840] Bluetooth: hci0: Injecting HCI hardware error event [ 340.900587][ T5840] Bluetooth: hci0: hardware error 0x00 [ 342.057565][ T5824] Bluetooth: hci4: unexpected event for opcode 0x0c58 [ 342.975985][ T5840] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 344.494763][ T5903] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 344.673863][ T5903] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 345.557714][ T5903] usb 4-1: config 0 has no interface number 0 [ 345.563877][ T5903] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 345.575722][ T5903] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 345.588591][ T5903] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 346.548803][ T5903] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 346.578399][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.682364][ T8149] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 347.018616][ T5903] usb 4-1: Product: syz [ 347.022848][ T5903] usb 4-1: Manufacturer: syz [ 347.027722][ T5903] usb 4-1: SerialNumber: syz [ 347.034971][ T5903] usb 4-1: config 0 descriptor?? [ 347.045023][ T8092] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 347.052782][ T8092] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 347.420693][ T8160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 347.470666][ T5903] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 348.082432][ T5903] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 348.255135][ T5952] usb 4-1: USB disconnect, device number 5 [ 348.643625][ T5952] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 348.725353][ T8186] netlink: 112 bytes leftover after parsing attributes in process `syz.3.569'. [ 349.094059][ T5952] cyberjack 4-1:0.69: device disconnected [ 354.557757][ T8147] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 354.575686][ T29] audit: type=1326 audit(1733619802.847:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301bd7fed9 code=0x7fc00000 [ 355.558450][ T29] audit: type=1326 audit(1733619802.847:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f301bd7fed9 code=0x7fc00000 [ 355.579996][ T29] audit: type=1326 audit(1733619802.847:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301bd7fed9 code=0x7fc00000 [ 355.601659][ T29] audit: type=1326 audit(1733619802.847:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301bd7fed9 code=0x7fc00000 [ 355.732694][ T29] audit: type=1326 audit(1733619802.857:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301bd7fed9 code=0x7fc00000 [ 355.754234][ T29] audit: type=1326 audit(1733619802.857:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301bd7fed9 code=0x7fc00000 [ 355.775821][ T29] audit: type=1326 audit(1733619802.857:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301bd7fed9 code=0x7fc00000 [ 355.797432][ T29] audit: type=1326 audit(1733619802.857:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301bd7fed9 code=0x7fc00000 [ 355.819184][ T29] audit: type=1326 audit(1733619802.857:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301bd7fed9 code=0x7fc00000 [ 355.841024][ T29] audit: type=1326 audit(1733619802.857:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8215 comm="syz.4.579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301bd7fed9 code=0x7fc00000 [ 356.087579][ T8235] netlink: 44 bytes leftover after parsing attributes in process `syz.2.582'. [ 359.013340][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.587'. [ 359.058292][ T8254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.737037][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.562551][ T8383] tipc: Enabling of bearer rejected, failed to enable media [ 374.624450][ T8390] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 374.634717][ T8390] overlayfs: missing 'lowerdir' [ 378.873286][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.018532][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.345775][ T8412] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 380.524793][ T8412] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 380.531336][ T8412] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 380.537713][ T8412] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 380.797065][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 382.423187][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 382.567230][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 382.944606][ T8447] syz.4.634 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 383.211796][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 388.021603][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 388.700374][ T8510] 9pnet_fd: p9_fd_create_unix (8510): problem connecting socket: ./file1: -2 [ 389.288939][ T8511] xt_nat: multiple ranges no longer supported [ 396.798229][ T8552] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 397.269938][ T8541] kvm: kvm [8530]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 399.118977][ T8563] binder_alloc: 8562: binder_alloc_buf, no vma [ 400.833014][ T8582] xt_CT: You must specify a L4 protocol and not use inversions on it [ 401.837654][ T8578] input: syz1 as /devices/virtual/input/input12 [ 406.915849][ T8624] ======================================================= [ 406.915849][ T8624] WARNING: The mand mount option has been deprecated and [ 406.915849][ T8624] and is ignored by this kernel. Remove the mand [ 406.915849][ T8624] option from the mount to silence this warning. [ 406.915849][ T8624] ======================================================= [ 407.793674][ T8147] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 412.915243][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 412.930987][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 412.939817][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 412.950012][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 412.959257][ T5824] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 412.966574][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 413.231800][ T8663] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 415.043175][ T5980] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.099973][ T5840] Bluetooth: hci4: command tx timeout [ 416.589646][ T5980] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.655943][ T8680] bridge0: port 3(erspan0) entered blocking state [ 416.662548][ T8680] bridge0: port 3(erspan0) entered disabled state [ 416.669344][ T8680] erspan0: entered allmulticast mode [ 416.675790][ T8680] erspan0: entered promiscuous mode [ 416.681520][ T8680] bridge0: port 3(erspan0) entered blocking state [ 416.688074][ T8680] bridge0: port 3(erspan0) entered forwarding state [ 417.731408][ T5840] Bluetooth: hci4: command tx timeout [ 418.201020][ T5980] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.573206][ T5980] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.700360][ T8714] overlayfs: failed to decode file handle (len=5, type=0, flags=0, err=-22) [ 419.458620][ T8655] chnl_net:caif_netlink_parms(): no params data found [ 419.572311][ T8718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.703'. [ 419.653335][ T8655] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.660831][ T8655] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.668535][ T8655] bridge_slave_0: entered allmulticast mode [ 419.698735][ T8655] bridge_slave_0: entered promiscuous mode [ 419.931986][ T5840] Bluetooth: hci4: command tx timeout [ 420.043782][ T8655] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.145684][ T8655] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.191948][ T8655] bridge_slave_1: entered allmulticast mode [ 420.226052][ T8655] bridge_slave_1: entered promiscuous mode [ 421.956561][ T8655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.995927][ T5840] Bluetooth: hci4: command tx timeout [ 422.134157][ T8655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.438066][ T8655] team0: Port device team_slave_0 added [ 424.473417][ T8655] team0: Port device team_slave_1 added [ 424.748449][ T5980] bridge_slave_1: left allmulticast mode [ 424.754680][ T5980] bridge_slave_1: left promiscuous mode [ 424.763386][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.795594][ T8803] rtc_cmos 00:00: Alarms can be up to one day in the future [ 425.605202][ T8811] kAFS: No cell specified [ 426.440555][ T5980] bridge_slave_0: left allmulticast mode [ 426.577352][ T5980] bridge_slave_0: left promiscuous mode [ 426.597842][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.043015][ T8814] can: request_module (can-proto-3) failed. [ 427.385142][ T8820] block nbd1: Device being setup by another task [ 427.561764][ T5840] block nbd1: Receive control failed (result -32) [ 427.607371][ T8821] block nbd1: shutting down sockets [ 429.410423][ T118] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 429.578698][ T118] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 429.588411][ T118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.634715][ T118] usb 3-1: Product: syz [ 429.643823][ T118] usb 3-1: Manufacturer: syz [ 429.663007][ T118] usb 3-1: SerialNumber: syz [ 429.757330][ T118] usb 3-1: config 0 descriptor?? [ 430.109471][ T8822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.123910][ T8822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.952169][ T8730] usb 3-1: USB disconnect, device number 4 [ 431.218805][ T5980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.234448][ T5980] bond_slave_0: left promiscuous mode [ 431.243361][ T5980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.258934][ T5980] bond_slave_1: left promiscuous mode [ 431.295072][ T5980] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 431.307130][ T5980] macvlan2: left promiscuous mode [ 431.312212][ T5980] team0: left promiscuous mode [ 431.319228][ T5980] team_slave_0: left promiscuous mode [ 431.325134][ T5980] team_slave_1: left promiscuous mode [ 431.352095][ T5980] bond0 (unregistering): Released all slaves [ 432.219772][ T8655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.232496][ T8655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.465543][ T8655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.478239][ T8655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.486228][ T8655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.550144][ T8655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.573272][ T8856] xt_CT: You must specify a L4 protocol and not use inversions on it [ 433.634070][ T8655] hsr_slave_0: entered promiscuous mode [ 434.015077][ T8655] hsr_slave_1: entered promiscuous mode [ 434.026231][ T8655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.174880][ T8655] Cannot create hsr debugfs directory [ 437.580653][ T8908] tmpfs: Bad value for 'huge' [ 437.659665][ T8910] netlink: 'syz.2.734': attribute type 1 has an invalid length. [ 437.829614][ T8910] No such timeout policy "syz0" [ 438.905926][ T8919] netlink: 'syz.4.736': attribute type 15 has an invalid length. [ 438.960933][ T8919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.736'. [ 439.000919][ T8655] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 439.083824][ T8655] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 439.152019][ T8655] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 439.183094][ T8927] netlink: 'syz.0.737': attribute type 4 has an invalid length. [ 439.257329][ T5980] hsr_slave_0: left promiscuous mode [ 439.271411][ T5980] hsr_slave_1: left promiscuous mode [ 439.298033][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.314764][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.342184][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.373950][ T5980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.518448][ T5980] veth1_macvtap: left promiscuous mode [ 439.535039][ T5980] veth0_macvtap: left promiscuous mode [ 439.773796][ T5980] veth1_vlan: left promiscuous mode [ 439.781942][ T5980] veth0_vlan: left promiscuous mode [ 440.299879][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.306343][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.940473][ T8973] block device autoloading is deprecated and will be removed. [ 447.164246][ T8985] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 448.288673][ T8990] netlink: 'syz.4.750': attribute type 1 has an invalid length. [ 448.307995][ T5980] team0 (unregistering): Port device team_slave_1 removed [ 448.369546][ T5980] team0 (unregistering): Port device team_slave_0 removed [ 449.574015][ T8655] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 450.403028][ T8171] bond0: (slave bond_slave_0): interface is now down [ 450.415076][ T8990] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 450.424660][ T8171] bond0: (slave bond_slave_1): interface is now down [ 450.468787][ T11] bond0: (slave bond_slave_0): interface is now down [ 450.476374][ T11] bond0: (slave bond_slave_1): interface is now down [ 450.498116][ T1086] bond0: (slave bond_slave_0): interface is now down [ 450.505057][ T1086] bond0: (slave bond_slave_1): interface is now down [ 450.601526][ T9009] netlink: 120 bytes leftover after parsing attributes in process `syz.2.754'. [ 450.678683][ T6186] bond0: (slave bond_slave_0): interface is now down [ 450.995385][ T6186] bond0: (slave bond_slave_1): interface is now down [ 451.205552][ T6186] bond0: (slave bond_slave_0): interface is now down [ 451.244258][ T6186] bond0: (slave bond_slave_1): interface is now down [ 451.289818][ T6186] bond0: now running without any active interface! [ 452.827789][ T8655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.843924][ T8655] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.861591][ T6186] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.868776][ T6186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.879715][ T6186] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.888257][ T6186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.142532][ T8655] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 455.154363][ T8655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 456.933076][ T8655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.212313][ T9070] input: syz1 as /devices/virtual/input/input14 [ 460.845267][ T8655] veth0_vlan: entered promiscuous mode [ 460.895855][ T8655] veth1_vlan: entered promiscuous mode [ 461.979777][ T8655] veth0_macvtap: entered promiscuous mode [ 462.014202][ T8655] veth1_macvtap: entered promiscuous mode [ 462.159806][ T9095] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 462.351150][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.372770][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.382854][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.551696][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.565997][ T8655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.577333][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.588088][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.718192][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.740209][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.767670][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.813030][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.229571][ T8655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.371807][ T8655] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.008701][ T8655] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.042347][ T8655] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.114676][ T8655] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.810201][ T8171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.866508][ T8171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.872791][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.115670][ T9136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.777'. [ 466.121729][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.512608][ T5840] Bluetooth: hci4: Unknown advertising packet type: 0x18 [ 470.512699][ T5840] Bluetooth: hci4: Unknown advertising packet type: 0x1e [ 470.520652][ T5840] Bluetooth: hci4: Unknown advertising packet type: 0x30 [ 470.528194][ T5840] Bluetooth: hci4: Malformed LE Event: 0x0d [ 471.961904][ T118] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 475.008580][ T9203] xt_CONNSECMARK: invalid mode: 0 [ 482.554190][ T9273] Smack: duplicate mount options [ 485.060421][ T9290] bond0: (slave vlan3): Opening slave failed [ 486.743205][ T9311] No source specified [ 486.814792][ T2148] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 487.564878][ T2148] usb 3-1: Using ep0 maxpacket: 8 [ 488.019314][ T2148] usb 3-1: config 0 has an invalid interface number: 224 but max is 0 [ 488.029200][ T2148] usb 3-1: config 0 has no interface number 0 [ 488.045775][ T2148] usb 3-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 488.076439][ T2148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.170479][ T2148] usb 3-1: config 0 descriptor?? [ 489.049519][ T5840] Bluetooth: hci4: command tx timeout [ 489.227770][ T118] usb 3-1: USB disconnect, device number 5 [ 490.164139][ T9350] netlink: 'syz.4.828': attribute type 2 has an invalid length. [ 490.526203][ T9350] fþ: entered promiscuous mode [ 491.014001][ T9343] netlink: 'syz.0.826': attribute type 4 has an invalid length. [ 494.258044][ T9385] input: syz0 as /devices/virtual/input/input21 [ 494.374437][ T9387] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 498.104814][ T9403] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 498.111079][ T9403] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 498.119960][ T9403] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 498.316963][ T9403] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 498.438400][ T9403] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 500.130013][ T9403] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 500.214999][ T5824] Bluetooth: hci2: command 0x0c1a tx timeout [ 500.221077][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 500.227715][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout [ 500.481405][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 502.181413][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.190473][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.275443][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 505.075960][ T9477] hub 9-0:1.0: USB hub found [ 505.080907][ T9477] hub 9-0:1.0: 1 port detected [ 505.997166][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 508.146408][ T9493] netlink: 72 bytes leftover after parsing attributes in process `syz.0.856'. [ 508.974913][ T9498] syz.0.856: attempt to access beyond end of device [ 508.974913][ T9498] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 509.065291][ T9498] gfs2: error -5 reading superblock [ 515.234773][ T9556] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 515.241140][ T9556] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 515.258901][ T9556] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 515.354927][ T9556] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 517.113102][ T9572] netlink: 36 bytes leftover after parsing attributes in process `syz.5.872'. [ 517.732197][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 517.738490][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout [ 517.744641][ T5824] Bluetooth: hci4: command 0x0c1a tx timeout [ 517.750764][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 517.789845][ T9572] netlink: 16 bytes leftover after parsing attributes in process `syz.5.872'. [ 518.842162][ T9572] netlink: 36 bytes leftover after parsing attributes in process `syz.5.872'. [ 519.055691][ T9572] netlink: 36 bytes leftover after parsing attributes in process `syz.5.872'. [ 519.198041][ T9593] overlayfs: failed to resolve './file1': -2 [ 519.253514][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.876'. [ 521.198255][ T9603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 525.889655][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 528.898577][ T9680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.892'. [ 530.341177][ T9692] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 533.443209][ T9718] netlink: 16 bytes leftover after parsing attributes in process `syz.4.899'. [ 540.401872][ T9772] block nbd0: not configured, cannot reconfigure [ 543.487457][ T9788] 9pnet_fd: Insufficient options for proto=fd [ 547.542387][ T9837] mkiss: ax0: crc mode is auto. [ 548.144609][ T9850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.927'. [ 557.568572][ T9926] netlink: 120 bytes leftover after parsing attributes in process `syz.4.942'. [ 560.721948][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 560.721969][ T29] audit: type=1326 audit(1733620009.592:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9946 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f417af7fed9 code=0x7ffc0000 [ 561.080229][ T29] audit: type=1326 audit(1733620009.592:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9946 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f417af7e840 code=0x7ffc0000 [ 561.101536][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.543186][ T29] audit: type=1326 audit(1733620009.622:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9946 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f417af7fed9 code=0x7ffc0000 [ 561.565069][ T29] audit: type=1326 audit(1733620009.622:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9946 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f417af7e840 code=0x7ffc0000 [ 561.631724][ T29] audit: type=1326 audit(1733620009.632:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9946 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f417af81707 code=0x7ffc0000 [ 561.808669][ T29] audit: type=1326 audit(1733620009.632:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9946 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f417af7fed9 code=0x7ffc0000 [ 561.847724][ T29] audit: type=1326 audit(1733620009.652:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9946 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f417af81707 code=0x7ffc0000 [ 561.869303][ T29] audit: type=1326 audit(1733620009.652:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9946 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f417af7eb3a code=0x7ffc0000 [ 561.891630][ T29] audit: type=1326 audit(1733620009.662:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9946 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f417af7fed9 code=0x7ffc0000 [ 561.913787][ T29] audit: type=1326 audit(1733620009.662:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9946 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f417af7fed9 code=0x7ffc0000 [ 563.190387][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.215105][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 576.006794][T10063] cmp (10063) used greatest stack depth: 18768 bytes left [ 581.566069][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 581.566087][ T29] audit: type=1326 audit(1733620030.882:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10122 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f417af7fed9 code=0x7ffc0000 [ 581.661382][ T29] audit: type=1326 audit(1733620030.932:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10122 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f417af7fed9 code=0x7ffc0000 [ 582.162014][ T29] audit: type=1326 audit(1733620030.932:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10122 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f417af7fed9 code=0x7ffc0000 [ 582.260651][ T29] audit: type=1326 audit(1733620030.932:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10122 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f417af7fed9 code=0x7ffc0000 [ 582.383570][ T29] audit: type=1326 audit(1733620030.932:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10122 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f417af7e840 code=0x7ffc0000 [ 582.405530][ T29] audit: type=1326 audit(1733620030.932:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10122 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f417af81707 code=0x7ffc0000 [ 582.427544][ T29] audit: type=1326 audit(1733620030.932:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10122 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f417af7fed9 code=0x7ffc0000 [ 582.449548][ T29] audit: type=1326 audit(1733620030.932:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10122 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f417af81707 code=0x7ffc0000 [ 582.471330][ T29] audit: type=1326 audit(1733620030.932:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10122 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f417af7eb3a code=0x7ffc0000 [ 582.493249][ T29] audit: type=1326 audit(1733620030.932:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10122 comm="syz.0.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f417af7fed9 code=0x7ffc0000 [ 584.824738][ T8730] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 585.071660][ T8730] usb 5-1: config 1 has an invalid descriptor of length 61, skipping remainder of the config [ 585.102871][ T8730] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 585.135757][ T8730] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 585.184161][ T8730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 585.213391][ T8730] usb 5-1: SerialNumber: syz [ 585.475532][ T8730] usb 5-1: 0:2 : does not exist [ 585.480491][ T8730] usb 5-1: unit 5: unexpected type 0x03 [ 585.488310][ T8730] usb 5-1: unit 4 not found! [ 585.521487][ T8730] usb 5-1: USB disconnect, device number 7 [ 585.717587][ T9138] udevd[9138]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.504805][ T8730] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 586.790688][ T8730] usb 2-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 586.903818][ T8730] usb 2-1: config 0 has an invalid interface number: 82 but max is 35 [ 587.036195][ T8730] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 587.114597][ T8730] usb 2-1: config 0 has no interface number 0 [ 587.120778][ T8730] usb 2-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=32.8f [ 587.150984][ T8730] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.168763][ T8730] usb 2-1: config 0 descriptor?? [ 587.180075][ T8730] gspca_main: sunplus-2.14.0 probing 08ca:0104 [ 587.731120][ T8730] gspca_sunplus: reg_r err -110 [ 587.923472][ T8730] sunplus 2-1:0.82: probe with driver sunplus failed with error -110 [ 589.791852][ T5874] usb 2-1: USB disconnect, device number 4 [ 591.302594][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 591.302613][ T29] audit: type=1800 audit(1733620040.612:145): pid=10198 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1001" name="/" dev="9p" ino=2 res=0 errno=0 [ 591.949943][T10198] syz.1.1001 (10198) used greatest stack depth: 17784 bytes left [ 596.851746][T10238] bridge0: port 2(syz_tun) entered blocking state [ 596.882895][T10238] bridge0: port 2(syz_tun) entered disabled state [ 596.905601][T10238] syz_tun: entered allmulticast mode [ 596.923193][T10238] syz_tun: entered promiscuous mode [ 596.944941][T10238] bridge0: port 2(syz_tun) entered blocking state [ 596.951969][T10238] bridge0: port 2(syz_tun) entered forwarding state [ 602.760526][T10282] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 602.769832][T10282] syz.1.1021: attempt to access beyond end of device [ 602.769832][T10282] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 604.355314][T10286] rtc_cmos 00:00: Alarms can be up to one day in the future [ 605.105238][T10296] kvm: kvm [10290]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x6 [ 606.643117][T10305] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.1031'. [ 606.652737][T10305] openvswitch: netlink: Message has 44053 unknown bytes. [ 607.741187][T10309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1032'. [ 607.764910][T10309] netlink: 'syz.1.1032': attribute type 4 has an invalid length. [ 609.230098][ T29] audit: type=1326 audit(1733620058.542:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 609.252689][ T29] audit: type=1326 audit(1733620058.572:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 610.588175][ T29] audit: type=1326 audit(1733620059.902:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 610.609804][ C0] vkms_vblank_simulate: vblank timer overrun [ 612.360150][ T29] audit: type=1326 audit(1733620060.712:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 612.385683][ T29] audit: type=1326 audit(1733620060.712:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 612.419395][ T29] audit: type=1326 audit(1733620061.652:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 612.504782][ T29] audit: type=1326 audit(1733620061.652:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 612.526351][ C0] vkms_vblank_simulate: vblank timer overrun [ 613.534659][ T29] audit: type=1326 audit(1733620061.652:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 614.089655][ T29] audit: type=1326 audit(1733620061.652:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 614.934571][ T29] audit: type=1326 audit(1733620061.652:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 614.961381][ T29] audit: type=1326 audit(1733620061.652:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 614.983368][ T29] audit: type=1326 audit(1733620061.652:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 615.005432][ T29] audit: type=1326 audit(1733620061.652:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 615.027015][ C0] vkms_vblank_simulate: vblank timer overrun [ 615.034120][ T29] audit: type=1326 audit(1733620061.652:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 615.056188][ T29] audit: type=1326 audit(1733620061.652:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 615.077554][ C0] vkms_vblank_simulate: vblank timer overrun [ 615.084747][ T29] audit: type=1326 audit(1733620061.812:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 615.107045][ T29] audit: type=1326 audit(1733620061.812:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 615.128934][ C0] vkms_vblank_simulate: vblank timer overrun [ 615.135750][ T29] audit: type=1326 audit(1733620061.842:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 615.157842][ T29] audit: type=1326 audit(1733620061.842:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10321 comm="syz.2.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 615.179382][ C0] vkms_vblank_simulate: vblank timer overrun [ 617.206968][T10373] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 618.989872][T10387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1050'. [ 619.304041][T10387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1050'. [ 619.524436][T10387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1050'. [ 619.536899][T10387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1050'. [ 620.414524][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 620.414545][ T29] audit: type=1400 audit(1733620069.512:169): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10400 comm="syz.1.1053" saddr=172.30.0.2 daddr=172.20.20.170 netif=wpan0 [ 622.413244][T10423] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 622.421216][T10423] IPv6: NLM_F_CREATE should be set when creating new route [ 622.428650][T10423] IPv6: NLM_F_CREATE should be set when creating new route [ 622.444964][ T9583] Bluetooth: hci2: unexpected event for opcode 0x2026 [ 623.324823][T10427] xt_CT: You must specify a L4 protocol and not use inversions on it [ 624.618584][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.625472][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.891560][T10441] gfs2: path_lookup on c::: returned error -2 [ 626.922157][ T9583] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 626.932923][ T9583] Bluetooth: hci2: Injecting HCI hardware error event [ 626.948677][ T9583] Bluetooth: hci2: hardware error 0x00 [ 627.301419][T10464] ebt_among: dst integrity fail: 101 [ 627.596573][T10469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1069'. [ 629.338300][ T9583] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 629.519821][T10474] tty tty28: ldisc open failed (-12), clearing slot 27 [ 631.073444][T10491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1076'. [ 633.294702][ T57] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 633.940016][ T57] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 633.949437][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.996315][ T57] usb 5-1: Product: syz [ 634.009987][ T57] usb 5-1: Manufacturer: syz [ 634.017530][ T57] usb 5-1: SerialNumber: syz [ 634.089672][ T57] usb 5-1: config 0 descriptor?? [ 634.139619][ T57] gspca_main: conex-2.14.0 probing 0572:0041 [ 634.746866][T10531] sp0: Synchronizing with TNC [ 636.558077][ T57] usb 5-1: USB disconnect, device number 8 [ 636.903613][T10542] Bluetooth: MGMT ver 1.23 [ 638.534109][ T29] audit: type=1326 audit(1733620087.842:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10551 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 638.670465][ T29] audit: type=1326 audit(1733620087.842:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10551 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 638.692091][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.728492][T10552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 638.739919][T10550] batman_adv: batadv0: Adding interface: vxlan0 [ 638.762253][T10550] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.853022][ T29] audit: type=1326 audit(1733620087.842:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10551 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 638.874740][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.934888][T10550] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 638.953104][ T29] audit: type=1326 audit(1733620087.842:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10551 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 639.006194][ T29] audit: type=1326 audit(1733620087.842:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10551 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 639.036474][ T29] audit: type=1326 audit(1733620087.892:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10551 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 639.079230][ T29] audit: type=1326 audit(1733620087.892:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10551 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 639.148487][ T29] audit: type=1326 audit(1733620087.892:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10551 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 639.304708][ T29] audit: type=1326 audit(1733620087.892:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10551 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f179137fed9 code=0x7ffc0000 [ 639.490817][ T29] audit: type=1326 audit(1733620087.892:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10551 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1791376ea7 code=0x7ffc0000 [ 642.506483][T10604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1100'. [ 642.515860][T10604] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1100'. [ 647.087678][T10643] can0: slcan on ptm0. [ 647.426051][T10630] can0 (unregistered): slcan off ptm0. [ 650.231723][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1114'. [ 651.982402][T10679] tipc: Started in network mode [ 652.027676][T10679] tipc: Node identity 4, cluster identity 4711 [ 652.034280][T10679] tipc: Node number set to 4 [ 652.394838][ T57] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 652.595979][ T57] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 652.812497][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.850954][ T57] usb 2-1: config 0 descriptor?? [ 653.075997][ T57] usb 2-1: Invalid firmware size=18. [ 653.410597][T10699] lo speed is unknown, defaulting to 1000 [ 653.465786][T10699] lo speed is unknown, defaulting to 1000 [ 653.472924][T10699] lo speed is unknown, defaulting to 1000 [ 653.630696][T10699] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 653.745145][T10703] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 653.752273][T10703] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 654.336463][T10699] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 654.401809][T10699] lo speed is unknown, defaulting to 1000 [ 654.453608][T10699] lo speed is unknown, defaulting to 1000 [ 654.614211][T10703] vhci_hcd vhci_hcd.0: Device attached [ 654.648216][T10699] lo speed is unknown, defaulting to 1000 [ 654.833649][T10724] fuse: Bad value for 'fd' [ 654.903869][T10699] lo speed is unknown, defaulting to 1000 [ 655.307167][T10699] lo speed is unknown, defaulting to 1000 [ 655.314779][T10707] vhci_hcd: connection closed [ 655.356989][ T7453] vhci_hcd: stop threads [ 655.399086][ T7453] vhci_hcd: release socket [ 655.488924][ T7453] vhci_hcd: disconnect device [ 655.507390][ T57] usb 2-1: USB disconnect, device number 5 [ 655.683813][ T118] vhci_hcd: vhci_device speed not set [ 655.927415][ T57] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 656.554675][ T57] usb 2-1: Using ep0 maxpacket: 8 [ 657.777193][ T57] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16 [ 657.794571][ T57] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 657.949843][ T57] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 660.504793][ T57] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.513139][ T57] usb 2-1: Product: syz [ 660.517441][ T57] usb 2-1: Manufacturer: syz [ 660.522060][ T57] usb 2-1: SerialNumber: syz [ 660.584283][ T57] usb 2-1: can't set config #1, error -71 [ 660.594676][ T57] usb 2-1: USB disconnect, device number 6 [ 666.535150][T10772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1138'. [ 666.599256][T10773] ubi0: attaching mtd0 [ 666.603848][T10773] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 666.628824][T10773] x_tables: ip_tables: osf match: only valid for protocol 6 [ 667.379032][T10768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1138'. [ 671.360654][T10798] tipc: Trying to set illegal importance in message [ 672.198238][T10804] ipt_REJECT: TCP_RESET invalid for non-tcp [ 673.949602][T10809] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 673.949784][T10809] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 673.965375][T10809] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 676.022703][T10832] tmpfs: Bad value for 'mpol' [ 676.036083][T10832] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1154'. [ 676.046524][ T9583] Bluetooth: hci3: command 0x0c1a tx timeout [ 676.052729][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 676.059421][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 676.099395][T10832] netlink: 'syz.2.1154': attribute type 1 has an invalid length. [ 678.406572][T10853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 682.390627][T10887] netlink: 'syz.2.1168': attribute type 10 has an invalid length. [ 682.398901][T10887] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1168'. [ 682.442996][T10887] team0: Port device geneve0 added [ 683.352665][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 683.352687][ T29] audit: type=1326 audit(1733620132.402:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10893 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301bd7fed9 code=0x7ffc0000 [ 684.117144][ T29] audit: type=1326 audit(1733620132.402:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10893 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301bd7fed9 code=0x7ffc0000 [ 684.117190][ T29] audit: type=1326 audit(1733620132.412:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10893 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f301bd7fed9 code=0x7ffc0000 [ 684.117222][ T29] audit: type=1326 audit(1733620132.412:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10893 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301bd7fed9 code=0x7ffc0000 [ 684.117252][ T29] audit: type=1326 audit(1733620132.412:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10893 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f301bd7fed9 code=0x7ffc0000 [ 684.117282][ T29] audit: type=1326 audit(1733620132.412:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10893 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301bd7fed9 code=0x7ffc0000 [ 684.117312][ T29] audit: type=1326 audit(1733620132.412:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10893 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301bd7fed9 code=0x7ffc0000 [ 684.117341][ T29] audit: type=1326 audit(1733620132.412:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10893 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f301bd7fed9 code=0x7ffc0000 [ 684.117373][ T29] audit: type=1326 audit(1733620132.412:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10893 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301bd7fed9 code=0x7ffc0000 [ 684.117403][ T29] audit: type=1326 audit(1733620132.412:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10893 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f301bd7fed9 code=0x7ffc0000 [ 685.365858][T10915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 686.112960][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.113043][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.573992][T10873] tty tty4: ldisc open failed (-12), clearing slot 3 [ 686.998237][T10911] tty tty20: ldisc open failed (-12), clearing slot 19 [ 698.827874][T10992] xt_l2tp: v2 tid > 0xffff: 262144 [ 699.367501][T11001] Cannot find del_set index 0 as target [ 702.152289][T11018] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1200'. [ 714.745506][T11087] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1218'. [ 715.043339][T11102] dlm: plock device version mismatch: kernel (1.2.0), user (808517631.808464432.808464432) [ 720.835248][T11138] sctp: [Deprecated]: syz.0.1230 (pid 11138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 720.835248][T11138] Use struct sctp_sack_info instead [ 720.994552][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 722.014682][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 722.038531][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.644790][ T8] usb 6-1: string descriptor 0 read error: -71 [ 724.651221][ T8] usb 6-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 724.729917][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.339304][ T8] usb 6-1: config 0 descriptor?? [ 726.825604][ T8] usb 6-1: can't set config #0, error -71 [ 727.002976][ T8] usb 6-1: USB disconnect, device number 2 [ 730.301006][T11183] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 733.251229][T11208] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 735.123467][T11219] sctp: [Deprecated]: syz.1.1249 (pid 11219) Use of int in maxseg socket option. [ 735.123467][T11219] Use struct sctp_assoc_value instead [ 742.415377][T11268] Cannot find add_set index 1026 as target [ 744.563048][T11298] hub 9-0:1.0: USB hub found [ 744.568084][T11298] hub 9-0:1.0: 1 port detected [ 745.888374][T11302] tipc: Enabling of bearer rejected, failed to enable media [ 747.497763][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.592042][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.622448][T11310] ./file0: Can't lookup blockdev [ 750.351813][T11338] @: renamed from vlan0 (while UP) [ 751.857575][T11352] /dev/nullb0: Can't open blockdev [ 752.411381][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1280'. [ 754.021453][T11366] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 754.100353][T11362] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1280'. [ 759.429994][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 759.430016][ T29] audit: type=1804 audit(1733620208.412:263): pid=11409 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.1289" name="/newroot/91/bus/bus" dev="overlay" ino=512 res=1 errno=0 [ 764.477078][T11442] netlink: 'syz.2.1297': attribute type 27 has an invalid length. [ 772.925806][T11507] input: syz0 as /devices/virtual/input/input41 [ 776.153537][T11536] ntfs3(nbd4): try to read out of volume at offset 0x0 [ 787.632032][T11614] 9pnet: Could not find request transport: rdmaÿÿÿÿ18446744073709551615 [ 791.182908][T11641] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 791.337090][T11647] input: syz1 as /devices/virtual/input/input43 [ 791.654964][T11635] veth0_vlan: left promiscuous mode [ 791.745433][T11635] veth0_vlan: entered promiscuous mode [ 794.603964][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 794.611687][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 794.644770][ T8] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 796.770933][ T29] audit: type=1804 audit(1733620247.020:264): pid=11677 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1348" name="/newroot/262/bus/bus" dev="overlay" ino=1428 res=1 errno=0 [ 798.208828][T11685] veth0_vlan: left promiscuous mode [ 798.259527][T11685] veth0_vlan: entered promiscuous mode [ 798.357274][T11674] input: syz1 as /devices/virtual/input/input47 [ 798.608167][T11696] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 804.839158][T11736] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1361'. [ 804.874317][ T9583] Bluetooth: hci1: unexpected event for opcode 0x041b [ 805.505129][T11743] nbd1: detected capacity change from 0 to 20 [ 805.548624][T11745] block nbd1: Send control failed (result -89) [ 805.586729][T11745] block nbd1: Request send failed, requeueing [ 805.713423][ T9583] block nbd1: Receive control failed (result -32) [ 806.980032][ T118] IPVS: starting estimator thread 0... [ 807.170952][ T26] block nbd1: Dead connection, failed to find a fallback [ 807.178957][ T26] block nbd1: shutting down sockets [ 807.185025][ T26] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 807.195354][ T26] Buffer I/O error on dev nbd1, logical block 0, async page read [ 807.294816][T11745] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 807.325167][T11737] IPVS: using max 21 ests per chain, 50400 per kthread [ 807.457245][T11745] Buffer I/O error on dev nbd1, logical block 0, async page read [ 807.459260][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 807.474831][ T8] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 807.549630][ T8] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 807.581705][T11745] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 808.414851][T11745] Buffer I/O error on dev nbd1, logical block 0, async page read [ 808.423488][T11745] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 808.465743][T11745] Buffer I/O error on dev nbd1, logical block 0, async page read [ 808.473717][T11745] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 808.700070][T11766] trusted_key: encrypted_key: insufficient parameters specified [ 808.725297][T11745] Buffer I/O error on dev nbd1, logical block 0, async page read [ 808.734060][T11745] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 808.743338][T11745] Buffer I/O error on dev nbd1, logical block 0, async page read [ 809.525822][ T9583] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 809.544716][ T9583] Bluetooth: hci1: Injecting HCI hardware error event [ 809.557671][ T9583] Bluetooth: hci1: hardware error 0x00 [ 809.568525][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.575255][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.598849][T11745] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 809.697050][T11745] Buffer I/O error on dev nbd1, logical block 0, async page read [ 809.714946][T11745] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 809.735606][T11745] Buffer I/O error on dev nbd1, logical block 0, async page read [ 809.913218][T11745] ldm_validate_partition_table(): Disk read failed. [ 810.788757][T11745] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 810.846176][T11745] Buffer I/O error on dev nbd1, logical block 0, async page read [ 810.854150][T11745] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 810.905141][T11745] Buffer I/O error on dev nbd1, logical block 0, async page read [ 810.940875][T11745] Dev nbd1: unable to read RDB block 0 [ 811.085288][T11745] nbd1: unable to read partition table [ 811.091119][T11745] nbd1: partition table beyond EOD, truncated [ 811.108926][T11745] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 811.119845][T11745] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=9, location=9 [ 811.129430][T11745] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8, location=8 [ 811.148081][T11745] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=7, location=7 [ 811.158570][T11745] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 812.094781][ T9583] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 812.107160][T11745] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 812.148987][T11582] ldm_validate_partition_table(): Disk read failed. [ 812.171299][T11745] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=4, location=4 [ 812.223054][T11582] blk_print_req_error: 25 callbacks suppressed [ 812.223076][T11582] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 812.265260][T11745] I/O error, dev nbd1, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 812.353418][T11745] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=3, location=3 [ 812.391201][T11582] buffer_io_error: 21 callbacks suppressed [ 812.391267][T11582] Buffer I/O error on dev nbd1, logical block 0, async page read [ 812.407886][T11745] I/O error, dev nbd1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 812.432951][T11745] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=2, location=2 [ 812.521343][T11582] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 812.544064][T11745] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 812.553817][T11582] Buffer I/O error on dev nbd1, logical block 1, async page read [ 812.554043][T11582] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 812.580811][T11582] Buffer I/O error on dev nbd1, logical block 0, async page read [ 812.591328][T11582] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 812.600706][T11582] Buffer I/O error on dev nbd1, logical block 1, async page read [ 812.611197][T11582] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 812.620815][T11582] Buffer I/O error on dev nbd1, logical block 0, async page read [ 812.628987][T11582] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 812.638284][T11582] Buffer I/O error on dev nbd1, logical block 1, async page read [ 812.647892][T11582] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 812.657085][T11582] Buffer I/O error on dev nbd1, logical block 0, async page read [ 812.665010][T11582] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 812.674082][T11582] Buffer I/O error on dev nbd1, logical block 1, async page read [ 812.682048][T11582] Dev nbd1: unable to read RDB block 0 [ 812.687902][T11582] Buffer I/O error on dev nbd1, logical block 0, async page read [ 812.696013][T11582] Buffer I/O error on dev nbd1, logical block 1, async page read [ 812.704315][T11582] nbd1: unable to read partition table [ 812.710354][T11582] nbd1: partition table beyond EOD, truncated [ 812.729129][T11745] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 812.744753][T11745] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 812.756034][T11745] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 812.766150][T11745] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 812.775969][T11745] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 812.797742][T11582] ldm_validate_partition_table(): Disk read failed. [ 812.805244][T11582] Dev nbd1: unable to read RDB block 0 [ 812.811050][T11582] nbd1: unable to read partition table [ 812.817104][T11582] nbd1: partition table beyond EOD, truncated [ 815.347335][T11809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 816.240308][T11818] netlink: 'syz.4.1377': attribute type 1 has an invalid length. [ 816.248277][T11818] netlink: 'syz.4.1377': attribute type 3 has an invalid length. [ 816.256180][T11818] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1377'. [ 825.156726][T11893] binder: 11885:11893 ioctl 40603d07 20000140 returned -22 [ 825.368672][T11889] can: request_module (can-proto-3) failed. [ 825.415343][T11895] [ 825.417707][T11895] ====================================================== [ 825.424730][T11895] WARNING: possible circular locking dependency detected [ 825.431749][T11895] 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 Not tainted [ 825.438851][T11895] ------------------------------------------------------ [ 825.445859][T11895] syz.1.1399/11895 is trying to acquire lock: [ 825.451910][T11895] ffff8880264085d8 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 825.462078][T11895] [ 825.462078][T11895] but task is already holding lock: [ 825.469433][T11895] ffff8880264080a8 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x16c/0xaa0 [ 825.479736][T11895] [ 825.479736][T11895] which lock already depends on the new lock. [ 825.479736][T11895] [ 825.490163][T11895] [ 825.490163][T11895] the existing dependency chain (in reverse order) is: [ 825.499206][T11895] [ 825.499206][T11895] -> #4 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 825.507853][T11895] lock_acquire+0x1ed/0x550 [ 825.512920][T11895] blk_mq_submit_bio+0x1536/0x2390 [ 825.518582][T11895] __submit_bio+0x2c6/0x560 [ 825.523635][T11895] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 825.529820][T11895] block_read_full_folio+0x93b/0xcd0 [ 825.535659][T11895] filemap_read_folio+0x14b/0x630 [ 825.541310][T11895] filemap_get_pages+0x17af/0x2540 [ 825.546993][T11895] filemap_read+0x45c/0xf50 [ 825.552058][T11895] blkdev_read_iter+0x2d8/0x430 [ 825.557463][T11895] vfs_read+0x991/0xb70 [ 825.562177][T11895] ksys_read+0x18f/0x2b0 [ 825.566970][T11895] do_syscall_64+0xf3/0x230 [ 825.572025][T11895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.578473][T11895] [ 825.578473][T11895] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 825.587027][T11895] lock_acquire+0x1ed/0x550 [ 825.592077][T11895] down_read+0xb1/0xa40 [ 825.596755][T11895] filemap_fault+0x6e8/0x1950 [ 825.601938][T11895] __do_fault+0x135/0x460 [ 825.606778][T11895] handle_pte_fault+0x1140/0x68a0 [ 825.612307][T11895] handle_mm_fault+0x1053/0x1ad0 [ 825.617753][T11895] __get_user_pages+0x1c82/0x49e0 [ 825.623283][T11895] faultin_page_range+0x4e7/0x850 [ 825.628824][T11895] do_madvise+0x6e5/0x4d10 [ 825.633768][T11895] __x64_sys_madvise+0xa6/0xc0 [ 825.639049][T11895] do_syscall_64+0xf3/0x230 [ 825.644072][T11895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.650488][T11895] [ 825.650488][T11895] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 825.658036][T11895] lock_acquire+0x1ed/0x550 [ 825.663205][T11895] __might_fault+0xc6/0x120 [ 825.668227][T11895] _copy_from_user+0x2a/0xc0 [ 825.673342][T11895] blk_trace_ioctl+0x1ad/0x9a0 [ 825.678618][T11895] blkdev_ioctl+0x40c/0x6a0 [ 825.683625][T11895] __se_sys_ioctl+0xf5/0x170 [ 825.688744][T11895] do_syscall_64+0xf3/0x230 [ 825.693756][T11895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.700162][T11895] [ 825.700162][T11895] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 825.708141][T11895] lock_acquire+0x1ed/0x550 [ 825.713150][T11895] __mutex_lock+0x1ac/0xee0 [ 825.718513][T11895] blk_register_queue+0x15a/0x400 [ 825.724042][T11895] add_disk_fwnode+0x648/0xf80 [ 825.729333][T11895] brd_alloc+0x547/0x790 [ 825.734099][T11895] brd_init+0x126/0x1b0 [ 825.738778][T11895] do_one_initcall+0x248/0x870 [ 825.744055][T11895] do_initcall_level+0x157/0x210 [ 825.749508][T11895] do_initcalls+0x3f/0x80 [ 825.754342][T11895] kernel_init_freeable+0x435/0x5d0 [ 825.760064][T11895] kernel_init+0x1d/0x2b0 [ 825.764898][T11895] ret_from_fork+0x4b/0x80 [ 825.769813][T11895] ret_from_fork_asm+0x1a/0x30 [ 825.775161][T11895] [ 825.775161][T11895] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 825.783165][T11895] validate_chain+0x18ef/0x5920 [ 825.788534][T11895] __lock_acquire+0x1397/0x2100 [ 825.793894][T11895] lock_acquire+0x1ed/0x550 [ 825.798928][T11895] __mutex_lock+0x1ac/0xee0 [ 825.803948][T11895] blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 825.810260][T11895] nbd_start_device+0x16c/0xaa0 [ 825.815628][T11895] nbd_ioctl+0x5dc/0xf40 [ 825.820399][T11895] blkdev_ioctl+0x57d/0x6a0 [ 825.825408][T11895] __se_sys_ioctl+0xf5/0x170 [ 825.830517][T11895] do_syscall_64+0xf3/0x230 [ 825.835530][T11895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.842107][T11895] [ 825.842107][T11895] other info that might help us debug this: [ 825.842107][T11895] [ 825.852317][T11895] Chain exists of: [ 825.852317][T11895] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#50 [ 825.852317][T11895] [ 825.867104][T11895] Possible unsafe locking scenario: [ 825.867104][T11895] [ 825.874541][T11895] CPU0 CPU1 [ 825.879900][T11895] ---- ---- [ 825.885243][T11895] lock(&q->q_usage_counter(io)#50); [ 825.890603][T11895] lock(mapping.invalidate_lock#2); [ 825.898393][T11895] lock(&q->q_usage_counter(io)#50); [ 825.906271][T11895] lock(&q->sysfs_lock); [ 825.910581][T11895] [ 825.910581][T11895] *** DEADLOCK *** [ 825.910581][T11895] [ 825.918702][T11895] 4 locks held by syz.1.1399/11895: [ 825.923875][T11895] #0: ffff8880263fa198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x13c/0xf40 [ 825.933176][T11895] #1: ffff8880263fa0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc2/0x1ae0 [ 825.944126][T11895] #2: ffff8880264080a8 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x16c/0xaa0 [ 825.954812][T11895] #3: ffff8880264080e0 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: nbd_start_device+0x16c/0xaa0 [ 825.965772][T11895] [ 825.965772][T11895] stack backtrace: [ 825.971661][T11895] CPU: 1 UID: 0 PID: 11895 Comm: syz.1.1399 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 825.982402][T11895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 825.992453][T11895] Call Trace: [ 825.995732][T11895] [ 825.998680][T11895] dump_stack_lvl+0x241/0x360 [ 826.003344][T11895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 826.008526][T11895] ? __pfx__printk+0x10/0x10 [ 826.013108][T11895] print_circular_bug+0x13a/0x1b0 [ 826.018121][T11895] check_noncircular+0x36a/0x4a0 [ 826.023043][T11895] ? __pfx_check_noncircular+0x10/0x10 [ 826.028488][T11895] validate_chain+0x18ef/0x5920 [ 826.033325][T11895] ? __pfx_validate_chain+0x10/0x10 [ 826.038507][T11895] ? is_bpf_text_address+0x26/0x2a0 [ 826.043685][T11895] ? __pfx_lock_release+0x10/0x10 [ 826.048694][T11895] ? unwind_next_frame+0x18e6/0x22d0 [ 826.053966][T11895] ? 0xffffffffa0003b40 [ 826.058116][T11895] ? kernel_text_address+0xa7/0xe0 [ 826.063211][T11895] ? __kernel_text_address+0xd/0x40 [ 826.068394][T11895] ? mark_lock+0x9a/0x360 [ 826.072705][T11895] __lock_acquire+0x1397/0x2100 [ 826.077555][T11895] lock_acquire+0x1ed/0x550 [ 826.082038][T11895] ? blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 826.088006][T11895] ? __pfx_lock_acquire+0x10/0x10 [ 826.093012][T11895] ? blk_mq_update_nr_hw_queues+0x3db/0x1ae0 [ 826.098977][T11895] ? nbd_start_device+0x16c/0xaa0 [ 826.103981][T11895] ? __pfx___might_resched+0x10/0x10 [ 826.109265][T11895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.115322][T11895] __mutex_lock+0x1ac/0xee0 [ 826.119809][T11895] ? blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 826.125773][T11895] ? blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 826.131735][T11895] ? __pfx___mutex_lock+0x10/0x10 [ 826.136748][T11895] ? __kasan_kmalloc+0x98/0xb0 [ 826.141504][T11895] ? __kmalloc_cache_noprof+0x243/0x390 [ 826.147059][T11895] ? blk_mq_update_nr_hw_queues+0x3db/0x1ae0 [ 826.153026][T11895] blk_mq_update_nr_hw_queues+0x3fa/0x1ae0 [ 826.158819][T11895] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 826.164781][T11895] ? lockdep_hardirqs_on+0x99/0x150 [ 826.169963][T11895] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 826.175925][T11895] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 826.182152][T11895] ? rcu_is_watching+0x15/0xb0 [ 826.186909][T11895] ? __mutex_lock+0xaf9/0xee0 [ 826.191574][T11895] ? __mutex_lock+0x5ef/0xee0 [ 826.196237][T11895] ? nbd_ioctl+0x13c/0xf40 [ 826.200638][T11895] ? __pfx___mutex_lock+0x10/0x10 [ 826.205650][T11895] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 826.211611][T11895] nbd_start_device+0x16c/0xaa0 [ 826.216452][T11895] nbd_ioctl+0x5dc/0xf40 [ 826.220678][T11895] ? __pfx_nbd_ioctl+0x10/0x10 [ 826.225426][T11895] ? __asan_memset+0x23/0x50 [ 826.230000][T11895] ? smack_file_ioctl+0x29e/0x3a0 [ 826.235012][T11895] ? __pfx_smack_file_ioctl+0x10/0x10 [ 826.240369][T11895] ? file_to_blk_mode+0xcc/0x140 [ 826.245293][T11895] ? __pfx_nbd_ioctl+0x10/0x10 [ 826.250063][T11895] blkdev_ioctl+0x57d/0x6a0 [ 826.254550][T11895] ? __pfx_blkdev_ioctl+0x10/0x10 [ 826.259555][T11895] ? __pfx_blkdev_ioctl+0x10/0x10 [ 826.264568][T11895] __se_sys_ioctl+0xf5/0x170 [ 826.269146][T11895] do_syscall_64+0xf3/0x230 [ 826.273634][T11895] ? clear_bhb_loop+0x35/0x90 [ 826.278310][T11895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.284199][T11895] RIP: 0033:0x7fb249f7fed9 [ 826.288631][T11895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.308231][T11895] RSP: 002b:00007fb247df6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 826.316634][T11895] RAX: ffffffffffffffda RBX: 00007fb24a146160 RCX: 00007fb249f7fed9 [ 826.324591][T11895] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000007 [ 826.332561][T11895] RBP: 00007fb249ff3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 826.340516][T11895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.348476][T11895] R13: 0000000000000001 R14: 00007fb24a146160 R15: 00007ffde14f7548 [ 826.356437][T11895] [ 826.514612][ T9583] block nbd1: Receive control failed (result -32) [ 826.514994][ T5840] block nbd1: Receive control failed (result -32) [ 826.555982][T11897] block nbd1: shutting down sockets