last executing test programs: 5.773953204s ago: executing program 3 (id=2774): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a312, 0xec63, 0xd, 0x8, 0x98b9, 0x80000000000000c, 0x0, 0x100000000000002, 0x10000, 0x100, 0xfe51, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x10000000003, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff3, 0xfffffffffffffff8, 0x2, 0xe, 0x7, 0x0, 0xe6, 0x200000000000101, 0x4000000000005, 0x100004, 0x63, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x5929, 0xea, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x6, 0x2, 0x3, 0x2, 0x8, 0xffffffff, 0x101, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x1, 0x8000000a, 0xb, 0xff, 0x6, 0xe, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4601771, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x100, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]}) r0 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat2$dir(0xffffff9c, 0x0, &(0x7f00000003c0)={0x100100, 0x8, 0x7d}, 0x18) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="84010000", @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000380108809c000080700009804c000080060001000200000008000200ac1414aa0500030002000000060001000200000008000200e00000020500030001000000060001000200000008000200e0000001050003000100000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000200eff93f58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db7174c00008024000100dbffffffffffffffffffffffffffffffffffffff49a2701e96e3b367ffffffff24000200491bd0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c4c00008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922200004000a0000090000000700000000000000000000000000000000030000000400098024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e14000200776730000000000000000000000000007896af8004fb09fc6842e85424e9d3c39cf455e06995d0bcbd9480e4de23942f25b7db6bfd1c6919d368acb617ad254fd7266c2d58d4cc5b8eb687f1f7cae0cc965b9493d38f229ec4e22e1ee2ddb9b06682aa4f93c911efa268af96c015c45d639998f5072894cd6fe5a10148a19a49de132bc0b68523c18fce4ce3ce8b4d0a40704eb50e0a98bf04fc093d480ff411f11ce9060937b1c1385f2c5cb1cbf58921a9211170725703f4c4f27d212c18bb00770ec6d415c6970783b4f60a8b3eb588"], 0x184}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r7, r7, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="66923dca343e7c28f9a57ce723713a91e185f20b873b17564a9ae45651d22094dea6daf6450541639a346351489fd749feaaeafdb50f5c37513fc3cf0ff37738ef211385cedc300cf288b6d264048ed3bf53aef2c0bf6776658f25fbb80fb752ac690c897bdfe3f17371ec9a9b03147961b2bdf6acdeb13910cd4f0d744eab8a0ae94620a69e8e30ccb4b7fdfe7aa26ba484a8a85876e930b7f092f5780192731f112837099e43", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000001,\x00']) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109202) ioctl$USBDEVFS_SETINTERFACE(r8, 0x80085504, &(0x7f0000000180)) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4.693536863s ago: executing program 0 (id=2778): r0 = syz_open_dev$sndpcmc(&(0x7f0000019080), 0x1, 0x42041) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000004000074c986345a0cd8bdab4012bbd70000000000000c2800c00018006000600843b00000c04028008000400", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$netlink(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 4.335873538s ago: executing program 3 (id=2779): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newtaction={0xd8, 0x30, 0x1}, 0xd8}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)={'#! ', '', [{0x20, 'GPL\x00'}]}, 0x9) sendfile(r1, r2, &(0x7f0000000000)=0x805, 0x20001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_usbip_server_init(0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000004000000ff0f", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x20}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff61) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 4.256425467s ago: executing program 1 (id=2780): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) recvmmsg(0xffffffffffffffff, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/115, 0x73}, 0x6}], 0x1, 0x0, &(0x7f0000002440)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 4.173229349s ago: executing program 1 (id=2781): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x24, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 4.172988414s ago: executing program 0 (id=2782): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x0, 0xa}}, 0x20) setpgid(r0, r0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x64) 3.454174887s ago: executing program 2 (id=2785): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000002200)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x20, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @multicast1, "e17f2000"}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x109000, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CDROM_SEND_PACKET(r2, 0x5393, &(0x7f0000000100)={"0000000000000008e4641d9d", 0x0, 0x0, 0x80000001, 0x0, 0x1, 0x0, 0x0, 0x0}) io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000090000004c0000000100000001000000", @ANYRES32=0x1, @ANYBLOB="b50800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x3) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x2, 0x300) 3.372881096s ago: executing program 2 (id=2786): r0 = socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) fdatasync(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0xa, 0x3, {0x0, 0x2000000}}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0x57a, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000ffff}, 0x6d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = openat$bsg(0xffffff9c, &(0x7f0000000300)='/dev/bsg/3:0:0:0\x00', 0x8d00, 0x0) ioctl$SG_BLKTRACESETUP(r7, 0xc0401273, &(0x7f0000000340)={'\x00', 0x3, 0x1a2, 0x7, 0xfffffffffffffffc, 0x2, r1}) r8 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) tkill(r8, 0xb) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 3.289830855s ago: executing program 0 (id=2787): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r2, &(0x7f0000000140)=@OVL_FILEID_V1={0x18, 0x300f8, {'\x00', {0x0, 0xfb, 0x15, 0x3, 0x1, "e837282efe0868327a31a705ec978547"}}}, 0xd71640) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r0], 0x1c}}, 0x20000040) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r4) r6 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) r7 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './file0'}, 0xb) 2.689630981s ago: executing program 3 (id=2788): open(&(0x7f0000000080)='./file0\x00', 0x53a641, 0x78e22799f4a46e86) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r2, 0x2, {0x0, 0xff, 0x2}, 0x1}, 0x18) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000002140)=""/4110, &(0x7f00000000c0)=0x100e) sendmsg(r1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x3b0, 0x3}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffffa, 0x1) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000240)=0x3) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, 0x0, 0x40) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000003180)=ANY=[@ANYBLOB="f8ffffff7f00000000bd70000000000000000000000000000000002000000001ac1414aa0000000000000000000000000000e4ffffff00000a000000160000001686b4e3f09b390a139beb247db79bf64d16950db5ebd28b14124aede5e756", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000b000000000000000000000000000000000a000000000000feffffffff7f4000020000000000000800000000000000000100000044000500fe8000000000000000000000000000aaffffffff3c00000000000000ac1414aa00000000000000000000000006000000040100"/176], 0xf8}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r7, 0x0, 0xfffffffffffffeb3, 0x4fffd, &(0x7f0000000240)={0xa, 0x4e20, 0x3, @remote}, 0x1c) 2.682177481s ago: executing program 0 (id=2796): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newtaction={0xd8, 0x30, 0x1}, 0xd8}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r1, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180)={'#! ', '', [{0x20, 'GPL\x00'}]}, 0x9) sendfile(r1, r2, &(0x7f0000000000)=0x805, 0x20001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_usbip_server_init(0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000050000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x20}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff61) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 2.530275093s ago: executing program 1 (id=2789): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x24, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0186405, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x20000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000007}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1.973683869s ago: executing program 2 (id=2790): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) recvmmsg(0xffffffffffffffff, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/115, 0x73}, 0x6}], 0x1, 0x0, &(0x7f0000002440)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 1.795106254s ago: executing program 2 (id=2791): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="feffffff000000000000000000ffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000200"/28], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x102, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}, 0x1, 0x3f}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x40042, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') writev(r4, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000080)="d2", 0x1}], 0x2) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000440)='encrypted\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0x4, r5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mount$tmpfs(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r0]) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x20050800) socket$inet_tcp(0x2, 0x1, 0x0) 1.72547522s ago: executing program 3 (id=2792): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = mq_open(&(0x7f0000000040)='\xeb\xac\xa5\x03\x00\x00\x00\x00', 0x842, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0xffffffffffffffea, 0x9, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000380)="e4836d513bcab6b90efd3ebcdfc597b9a7e727a3ece8daadf4b24a69b21dfd745934e8870086d4dcd91c1c9a69f5d303d175b4bcc0da016fb4be47336b3557b59b09b0bce1bace8b3eb86e9f3e3b4244a7bd9bad12f2ae80c3f5a6a08634b6f70ef4d694f97312f472beb24c47fbd19e9e7b2b8c851592d64758d2ff1ac341f208c6d28c62c00052de216599278d4aa251f6a289e480c2b6c35b5b3cfb67b110c0320ad676e05629918e418a25fbcd94427891aa0c9cb51e59695aa9a4e3696f6b57d6b4ab992673e3", 0xc9}], 0x2, 0x0, 0x0, 0x54}, 0x4040884) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r5, 0x0, 0x0, 0x0) close(r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = fsmount(r3, 0x1, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0x3) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x47000000) 1.000284135s ago: executing program 0 (id=2793): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x102, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}, 0x1, 0x3f}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x40042, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') writev(r4, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000080)="d2", 0x1}], 0x2) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000440)='encrypted\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0x4, r5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) mount$tmpfs(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r0]) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x20050800) socket$inet_tcp(0x2, 0x1, 0x0) 999.964152ms ago: executing program 3 (id=2794): socket$alg(0x26, 0x5, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x82}}, 0x50) r0 = socket$inet6(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @loopback, 0x1}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x29, 0x1e, &(0x7f0000000200)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x0, 0x1e8, 0xffffffff, 0xf4, 0x1e8, 0x3ac, 0x3ac, 0xffffffff, 0x3ac, 0x3ac, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x19, @empty, @multicast2, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x4, @broadcast, @multicast2, @icmp_id=0x64, @gre_key=0x5}}}}, {{@ip={@multicast1, @multicast1, 0xff, 0xffffffff, 'ipvlan1\x00', 'caif0\x00', {0xff}, {0xff}, 0x21, 0x6, 0x1}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x3, @broadcast, @remote, @icmp_id=0x67, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="7a0a00000000950020000000000000000000000000000000c0931c6a5471b10fe63b3c97ba12af77cd7d84f1a283c17c1fa1b277b105d5bfffba0f0a411d51408c14cd7b6ff447d7be3c78f1e57275a49824fdd72ee16ec84c1a1c1696e5ea865f7e09580528dd4edbddfc3748c93b2d6f0022efcbab6dc604c48efcfef68b1afc1a694a27991cd501d06ce5f335acca6d5b79ac926477bc99a3080fd28ccf1a0618929dbd04e38d06db4bb34533450fa95072d938517e16b49cd055d0f27df5904de97956173cef79a536f0bcbf31d7"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18003200000000e214166e000000000700"], &(0x7f00000000c0)='GPL\x00', 0x3}, 0x94) r3 = syz_io_uring_setup(0x496, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x7ffc, 0x40024e}, &(0x7f0000000340), &(0x7f0000000080)) syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8, 0x0, r3}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) shutdown(r0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$fb1(0xffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$FBIOPUTCMAP(r7, 0x4605, &(0x7f00000002c0)={0xfffffe2f, 0x1, &(0x7f00000001c0)=[0x8], &(0x7f0000000040), &(0x7f0000000000), 0x0}) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0xfffffffe) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x74000000) 777.454656ms ago: executing program 2 (id=2795): write$dsp(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x801) r1 = socket$inet6(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000080), 0xd, 0x628c0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f000033e000/0x2000)=nil, 0x2000, 0x5000000, 0x40010, r0, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000002d80e4d2359cd5df960b42bf2a26234ec8ec27b15d4dfbb37e017c9aa1f150aa581d40eb31e39586236655b4ca3ab045624bfc7a62667cbc3069d803e3194d4a1f8b9cd9141e27d96c560b159691fcf203324872b8699e34446a9b", @ANYRES16=r5, @ANYBLOB="4d7e00000000000000002a00000008002f00040000000500360000000000050037000000000008002f000600000008000200", @ANYRES32=r7, @ANYBLOB="060006000000000006000400000000000600060002000000"], 0x54}, 0x4, 0x700000000000000}, 0x0) syz_io_uring_setup(0x5ce, 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r10 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_NMI(r10, 0xae9a) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7000000, 0x0, 0x4000004}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 773.800866ms ago: executing program 1 (id=2804): r0 = fsmount(0xffffffffffffffff, 0x1, 0x170) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="d2f191d602d16412615d053a8b13a729973d666a9c3ed2d49a711b9465a03307a0", 0x21) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r3, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) write$cgroup_int(r3, &(0x7f0000000100)=0x4, 0x12) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) (rerun: 64) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r5 = dup3(r4, r2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@fd={0x66642a85, 0x0, r5}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) (async, rerun: 64) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x8, &(0x7f0000000100)=@raw=[@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r7, @sk_reuseport, r0, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 91.040954ms ago: executing program 1 (id=2797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) personality(0xbe4e602dc9e6c1d3) uname(&(0x7f0000000040)=""/138) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f043}) writev(r1, &(0x7f0000000740)=[{&(0x7f0000000280)='\fY', 0x2}], 0x1) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0xffffffff, 0x80) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x889e7) 90.628631ms ago: executing program 2 (id=2798): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) r4 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000300)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x17, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0000, 0x4) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 81.856113ms ago: executing program 3 (id=2799): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000398f000000000000058000"/25], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c048) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) syz_io_uring_setup(0x370a, &(0x7f00000003c0)={0x0, 0xa658, 0x2, 0x3, 0x2eb}, 0x0, &(0x7f0000000380)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000180)={{@hyper, 0x2}, @host, 0xc, 0x5d7, 0x5e, 0x2000001, 0x4, 0x1c, 0x4}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000089}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup2(r4, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd29, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d6, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x3502, 0x0, 0x3, 0x10, 0x9, 0x0, 0x10001}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 229.371µs ago: executing program 0 (id=2800): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) preadv(0xffffffffffffffff, &(0x7f0000001840), 0x0, 0x2, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) shmget$private(0x0, 0x1000, 0x40, &(0x7f00001c4000/0x1000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001f40)={r4, r3, 0x25, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000001f80)={@local, @link_local, @void, {@mpls_mc={0x8848, {[], @llc={@snap={0xab, 0xaa, "9a", "d9d75e", 0x86dd, "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"}}}}}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r6 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r6, 0xbc4cd000) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000100)=""/45, 0x2d}], 0x1) 0s ago: executing program 1 (id=2801): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) recvmmsg(r1, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/115, 0x73}, 0x6}], 0x1, 0x0, &(0x7f0000002440)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): type 27 has an invalid length. [ 367.310261][T12334] overlayfs: failed to clone upperpath [ 367.403399][ T9] libceph: connect (1)[c::]:6789 error -101 [ 367.406095][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 367.434573][T12344] ./file0: Can't open blockdev [ 367.435574][T12338] ceph: No mds server is up or the cluster is laggy [ 367.837263][T12362] overlayfs: failed to clone upperpath [ 367.980357][T12360] pim6reg: entered allmulticast mode [ 368.025886][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 368.025896][ T40] audit: type=1326 audit(1768461842.542:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12350 comm="syz.3.1838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 368.048987][ T40] audit: type=1326 audit(1768461842.542:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12350 comm="syz.3.1838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 368.058731][ T40] audit: type=1326 audit(1768461842.542:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12350 comm="syz.3.1838" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 368.067306][ T40] audit: type=1326 audit(1768461842.552:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12350 comm="syz.3.1838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 368.117560][ T40] audit: type=1326 audit(1768461842.552:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12350 comm="syz.3.1838" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 368.124386][ T40] audit: type=1326 audit(1768461842.552:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12350 comm="syz.3.1838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 368.130830][ T40] audit: type=1326 audit(1768461842.552:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12350 comm="syz.3.1838" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 368.138834][ T40] audit: type=1326 audit(1768461842.552:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12350 comm="syz.3.1838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 368.154799][ T40] audit: type=1326 audit(1768461842.552:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12350 comm="syz.3.1838" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 368.170316][ T40] audit: type=1326 audit(1768461842.552:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12350 comm="syz.3.1838" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 369.136625][T12395] overlayfs: failed to clone upperpath [ 369.219552][T12396] overlay: Unknown parameter '/' [ 369.229933][T12396] overlayfs: failed to resolve './file0:/': -2 [ 369.239900][T12396] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1848'. [ 369.591842][T12405] netlink: 430 bytes leftover after parsing attributes in process `syz.3.1855'. [ 369.710477][T12417] overlayfs: failed to clone upperpath [ 371.010620][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'. [ 371.013930][T12429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1862'. [ 371.017056][T12429] netlink: 'syz.2.1862': attribute type 13 has an invalid length. [ 371.021576][T12429] netlink: 'syz.2.1862': attribute type 11 has an invalid length. [ 371.171099][T12431] trusted_key: encrypted_key: insufficient parameters specified [ 371.368799][T12430] tmpfs: Unknown parameter '`' [ 372.189448][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1868'. [ 372.272871][T12461] openvswitch: netlink: Key type 58 is out of range max 32 [ 373.681737][T12483] speed is unknown, defaulting to 1000 [ 373.881366][T12483] speed is unknown, defaulting to 1000 [ 374.081257][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1880'. [ 374.134172][T12501] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1882'. [ 374.137419][T12503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1882'. [ 374.414853][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1888'. [ 374.866957][T12531] overlayfs: failed to clone upperpath [ 374.908372][T12524] bond1: left allmulticast mode [ 375.083426][T12537] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 375.176285][T12538] tipc: Enabling of bearer rejected, already enabled [ 375.715462][T12546] netem: change failed [ 375.921329][ T5951] Bluetooth: hci1: unexpected event for opcode 0x2060 [ 376.015605][T12559] overlayfs: failed to clone upperpath [ 376.051785][T12563] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1905'. [ 376.081647][T12567] 9p: Bad value for 'wfdno' [ 376.156334][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 376.156350][ T40] audit: type=1326 audit(1768461850.721:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.1.1909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x50000 [ 376.168260][ T40] audit: type=1326 audit(1768461850.721:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.1.1909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x50000 [ 376.177143][ T40] audit: type=1326 audit(1768461850.721:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.1.1909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x50000 [ 376.186558][ T40] audit: type=1326 audit(1768461850.721:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.1.1909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x50000 [ 376.195382][ T40] audit: type=1326 audit(1768461850.721:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.1.1909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x50000 [ 376.202392][ T40] audit: type=1326 audit(1768461850.721:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.1.1909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x50000 [ 376.210028][ T40] audit: type=1326 audit(1768461850.721:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.1.1909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x50000 [ 376.218371][ T40] audit: type=1326 audit(1768461850.721:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.1.1909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x50000 [ 376.227395][ T40] audit: type=1326 audit(1768461850.721:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.1.1909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x50000 [ 376.236528][ T40] audit: type=1326 audit(1768461850.721:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12571 comm="syz.1.1909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x50000 [ 376.427025][T12579] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 376.843414][T12593] overlayfs: failed to clone upperpath [ 377.194873][T12599] trusted_key: encrypted_key: insufficient parameters specified [ 377.206900][T12599] tmpfs: Unknown parameter '' [ 378.673072][T12624] overlayfs: failed to clone upperpath [ 379.488326][T12649] overlayfs: failed to clone upperpath [ 379.818849][T12674] overlayfs: failed to clone upperpath [ 380.145286][T12695] overlayfs: failed to clone upperpath [ 380.153992][T12695] overlayfs: failed to clone upperpath [ 380.307413][T12697] SQUASHFS error: Failed to read block 0x0: -5 [ 380.361174][T12699] overlayfs: failed to clone upperpath [ 380.749146][T12706] overlayfs: failed to clone upperpath [ 381.167946][T12719] tipc: Enabling of bearer rejected, already enabled [ 382.048808][T12731] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 382.386734][T12740] overlayfs: failed to clone upperpath [ 382.462835][T12744] overlayfs: failed to clone upperpath [ 382.867322][ T40] kauditd_printk_skb: 112 callbacks suppressed [ 382.867365][ T40] audit: type=1326 audit(1768461857.412:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.2.1972" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 382.876392][ T40] audit: type=1326 audit(1768461857.412:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.2.1972" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 382.907109][ T40] audit: type=1326 audit(1768461857.412:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.2.1972" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 382.917104][ T40] audit: type=1326 audit(1768461857.412:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.2.1972" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 382.925805][ T40] audit: type=1326 audit(1768461857.412:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.2.1972" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 382.933078][ T40] audit: type=1326 audit(1768461857.412:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.2.1972" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 382.941579][ T40] audit: type=1326 audit(1768461857.412:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.2.1972" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 382.949104][ T40] audit: type=1326 audit(1768461857.412:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.2.1972" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 382.956730][ T40] audit: type=1326 audit(1768461857.412:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.2.1972" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 382.963759][ T40] audit: type=1326 audit(1768461857.412:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12748 comm="syz.2.1972" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 383.350861][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.353286][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.601477][T12777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1982'. [ 383.760863][T12794] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1987'. [ 384.080791][T12804] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 384.422368][T12811] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1994'. [ 384.745645][ T5951] Bluetooth: hci0: unexpected event 0x03 length: 13 > 11 [ 384.792939][T12828] xt_CT: You must specify a L4 protocol and not use inversions on it [ 385.032142][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2002'. [ 385.085808][T12831] pim6reg9: entered allmulticast mode [ 385.746428][T12856] tipc: Enabling of bearer rejected, already enabled [ 385.750584][T12855] syz_tun: entered allmulticast mode [ 385.791274][T12855] syz_tun: left allmulticast mode [ 385.818065][T12858] netlink: 'syz.2.2010': attribute type 1 has an invalid length. [ 385.820523][T12858] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2010'. [ 385.929008][T12863] netlink: 107460 bytes leftover after parsing attributes in process `syz.2.2011'. [ 386.021850][T12867] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 386.024019][T12867] @0: renamed from bond_slave_1 [ 386.364354][T12869] overlayfs: failed to clone upperpath [ 386.406634][T12871] afs: Unknown parameter 'd' [ 386.525225][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2018'. [ 386.566483][T12881] overlayfs: failed to clone lowerpath [ 386.845430][ T5956] libceph: connect (1)[c::]:6789 error -101 [ 386.849504][ T5956] libceph: mon0 (1)[c::]:6789 connect error [ 386.888285][T12894] ceph: No mds server is up or the cluster is laggy [ 387.104373][ T5956] libceph: connect (1)[c::]:6789 error -101 [ 387.114051][ T5956] libceph: mon0 (1)[c::]:6789 connect error [ 387.605511][T12911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2027'. [ 387.608919][T12911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2027'. [ 388.133445][ T40] kauditd_printk_skb: 1957 callbacks suppressed [ 388.133462][ T40] audit: type=1326 audit(1768461862.685:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.0.2036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 388.145805][ T40] audit: type=1326 audit(1768461862.685:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.0.2036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 388.153015][ T40] audit: type=1326 audit(1768461862.695:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.0.2036" exe="/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 388.173205][ T40] audit: type=1326 audit(1768461862.695:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.0.2036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 388.180700][ T40] audit: type=1326 audit(1768461862.695:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.0.2036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 388.188047][ T40] audit: type=1326 audit(1768461862.695:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.0.2036" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 388.189331][T12941] overlayfs: failed to clone upperpath [ 388.194994][ T40] audit: type=1326 audit(1768461862.695:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.0.2036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 388.195023][ T40] audit: type=1326 audit(1768461862.695:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.0.2036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 388.195050][ T40] audit: type=1326 audit(1768461862.695:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.0.2036" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 388.195071][ T40] audit: type=1326 audit(1768461862.695:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12936 comm="syz.0.2036" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed579 code=0x7ffc0000 [ 388.699219][T12966] overlayfs: failed to clone upperpath [ 389.898932][T13002] overlayfs: failed to clone upperpath [ 389.935454][T13004] overlayfs: failed to clone lowerpath [ 390.181706][T13006] speed is unknown, defaulting to 1000 [ 390.225480][T13009] overlay: Unknown parameter '/' [ 390.284234][T13006] speed is unknown, defaulting to 1000 [ 390.480483][T13016] fuse: Unknown parameter '0x0000000000000003' [ 390.913530][T13027] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 391.662369][T13039] overlayfs: failed to clone upperpath [ 391.799097][T13045] tipc: Enabling of bearer rejected, already enabled [ 392.711652][T13058] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 392.851790][T13063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2076'. [ 393.388303][T13066] overlayfs: failed to clone upperpath [ 394.283780][T13073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.506039][T13109] speed is unknown, defaulting to 1000 [ 394.598210][T13109] speed is unknown, defaulting to 1000 [ 394.679579][T13117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2093'. [ 394.843714][T13127] netlink: 'syz.0.2095': attribute type 9 has an invalid length. [ 394.846144][T13127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2095'. [ 394.851798][T13127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2095'. [ 395.098252][T13133] trusted_key: encrypted_key: insufficient parameters specified [ 395.105049][T13133] tmpfs: Unknown parameter '' [ 395.334644][T13141] 9p: Bad value for 'rfdno' [ 395.631899][T13154] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2102'. [ 395.733387][T13158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2105'. [ 396.255084][T13172] overlayfs: failed to clone lowerpath [ 396.667325][T13184] tmpfs: Unknown parameter 'tmpfs' [ 397.556893][T13182] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 397.934333][T13203] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 398.335263][T13218] netlink: 'syz.0.2122': attribute type 1 has an invalid length. [ 398.407816][T13221] No control pipe specified [ 398.410923][T13221] fuse: Unknown parameter 'root}ode' [ 398.710697][T13204] Process accounting resumed [ 399.398899][T13241] trusted_key: encrypted_key: insufficient parameters specified [ 399.408312][T13241] tmpfs: Unknown parameter '' [ 399.853009][T13261] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2132'. [ 400.225930][T13269] ceph: No mds server is up or the cluster is laggy [ 400.768565][ T5956] libceph: connect (1)[c::]:6789 error -101 [ 400.770653][ T5956] libceph: mon0 (1)[c::]:6789 connect error [ 400.809079][ T5951] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 400.813080][ T5951] CPU: 2 UID: 0 PID: 5951 Comm: kworker/u33:5 Not tainted syzkaller #0 PREEMPT(full) [ 400.813105][ T5951] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 400.813117][ T5951] Workqueue: hci1 hci_rx_work [ 400.813151][ T5951] Call Trace: [ 400.813159][ T5951] [ 400.813166][ T5951] dump_stack_lvl+0x16c/0x1f0 [ 400.813198][ T5951] sysfs_warn_dup+0x7f/0xa0 [ 400.813220][ T5951] sysfs_create_dir_ns+0x24b/0x2b0 [ 400.813240][ T5951] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 400.813259][ T5951] ? find_held_lock+0x2b/0x80 [ 400.813289][ T5951] ? do_raw_spin_unlock+0x172/0x230 [ 400.813313][ T5951] kobject_add_internal+0x2c4/0x9d0 [ 400.813338][ T5951] kobject_add+0x16e/0x240 [ 400.813357][ T5951] ? __pfx_kobject_add+0x10/0x10 [ 400.813380][ T5951] ? kobject_put+0xaf/0x6f0 [ 400.813396][ T5951] ? _raw_spin_unlock+0x28/0x50 [ 400.813429][ T5951] device_add+0x288/0x1980 [ 400.813455][ T5951] ? __pfx_dev_set_name+0x10/0x10 [ 400.813483][ T5951] ? __pfx_device_add+0x10/0x10 [ 400.813508][ T5951] ? mgmt_send_event_skb+0x2fb/0x460 [ 400.813541][ T5951] hci_conn_add_sysfs+0x1a8/0x260 [ 400.813572][ T5951] le_conn_complete_evt+0x11ed/0x1fa0 [ 400.813604][ T5951] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 400.813637][ T5951] hci_le_conn_complete_evt+0x23c/0x3a0 [ 400.813669][ T5951] hci_le_meta_evt+0x357/0x610 [ 400.813694][ T5951] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 400.813722][ T5951] hci_event_packet+0x685/0x1210 [ 400.813748][ T5951] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 400.813775][ T5951] ? __pfx_hci_event_packet+0x10/0x10 [ 400.813802][ T5951] ? kcov_remote_start+0x399/0x680 [ 400.813828][ T5951] ? lockdep_hardirqs_on+0x7c/0x110 [ 400.813888][ T5951] hci_rx_work+0x2c9/0x1020 [ 400.813919][ T5951] process_one_work+0x9ba/0x1b20 [ 400.813952][ T5951] ? __pfx_process_one_work+0x10/0x10 [ 400.813982][ T5951] ? assign_work+0x1a0/0x250 [ 400.814005][ T5951] worker_thread+0x6c8/0xf10 [ 400.814038][ T5951] ? __pfx_worker_thread+0x10/0x10 [ 400.814060][ T5951] kthread+0x3c5/0x780 [ 400.814077][ T5951] ? __pfx_kthread+0x10/0x10 [ 400.814096][ T5951] ? rcu_is_watching+0x12/0xc0 [ 400.814119][ T5951] ? __pfx_kthread+0x10/0x10 [ 400.814137][ T5951] ret_from_fork+0x983/0xb10 [ 400.814164][ T5951] ? __pfx_ret_from_fork+0x10/0x10 [ 400.814186][ T5951] ? __switch_to+0x7af/0x10d0 [ 400.814211][ T5951] ? __pfx_kthread+0x10/0x10 [ 400.814230][ T5951] ret_from_fork_asm+0x1a/0x30 [ 400.814273][ T5951] [ 400.814299][ T5951] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 400.925564][ T5951] Bluetooth: hci1: failed to register connection device [ 400.938116][T13286] overlayfs: failed to clone upperpath [ 401.003653][T13289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2139'. [ 401.075528][T13291] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2140'. [ 401.141728][T13296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.146755][T13296] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2142'. [ 401.153176][T13294] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 401.259530][T13301] speed is unknown, defaulting to 1000 [ 401.307192][T13302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2144'. [ 401.354768][T13301] speed is unknown, defaulting to 1000 [ 401.365262][T13304] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2144'. [ 402.390418][T13314] trusted_key: encrypted_key: insufficient parameters specified [ 402.399305][T13314] tmpfs: Unknown parameter 'l' [ 402.740839][T13315] ceph: No mds server is up or the cluster is laggy [ 402.746147][ T5956] libceph: connect (1)[c::]:6789 error -101 [ 402.748663][ T5956] libceph: mon0 (1)[c::]:6789 connect error [ 404.247592][T13338] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2151'. [ 404.415994][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 404.416013][ T40] audit: type=1326 audit(1768461878.918:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13340 comm="syz.2.2152" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f75579 code=0x0 [ 404.513171][ T40] audit: type=1326 audit(1768461879.048:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.3.2153" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ad579 code=0x0 [ 404.530839][ T40] audit: type=1326 audit(1768461879.048:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.3.2153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 404.538888][ T40] audit: type=1326 audit(1768461879.048:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.3.2153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 404.545755][ T40] audit: type=1326 audit(1768461879.048:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.3.2153" exe="/syz-executor" sig=0 arch=40000003 syscall=343 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 404.552691][ T40] audit: type=1326 audit(1768462135.054:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.3.2153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 404.559514][ T40] audit: type=1326 audit(1768462135.054:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.3.2153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 404.566816][ T40] audit: type=1326 audit(1768462135.054:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.3.2153" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 404.573623][ T40] audit: type=1326 audit(1768462135.054:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.3.2153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 404.580439][ T40] audit: type=1326 audit(1768462135.054:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.3.2153" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 404.611620][T13354] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 405.063519][T13364] tipc: Enabling of bearer rejected, already enabled [ 405.311567][T13370] fuse: Unknown parameter '000000000000000000000040x0000000000000007 ?WI\YDfڤYӧXX [ 405.311567][T13370] bD"00000000000000000000' [ 406.226729][T13387] trusted_key: encrypted_key: insufficient parameters specified [ 406.235640][T13387] tmpfs: Unknown parameter 'K' [ 406.486750][T13393] 9p: Bad value for 'wfdno' [ 406.490019][T13393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2163'. [ 406.659014][ T8315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.663158][ T8315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.678286][T13398] No control pipe specified [ 407.120954][T13409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2168'. [ 408.292385][T13432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2174'. [ 408.295840][T13432] openvswitch: netlink: nsh attr 8 is out of range max 3 [ 408.571682][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 408.576675][ T5951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 408.579776][ T5951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 408.583222][ T5951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 408.586370][ T5951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 408.746529][ T1140] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.828344][ T1140] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.843678][T13443] speed is unknown, defaulting to 1000 [ 408.934802][ T1140] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.066571][T13443] speed is unknown, defaulting to 1000 [ 409.141579][ T1140] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.626198][T13450] overlayfs: failed to clone upperpath [ 409.675053][T13452] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2179'. [ 409.677912][T13452] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2179'. [ 409.685317][T13452] unsupported nlmsg_type 40 [ 410.108310][ T1140] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 410.119960][ T1140] bond0 (unregistering): Released all slaves [ 410.211525][ T1140] bond1 (unregistering): Released all slaves [ 410.224655][ T1140] bond2 (unregistering): Released all slaves [ 410.231021][ T1140] bond3 (unregistering): Released all slaves [ 410.328605][ T1140] bond4 (unregistering): (slave dummy0): Releasing backup interface [ 410.338271][ T1140] bond4 (unregistering): Released all slaves [ 410.414131][ T1140] bond5 (unregistering): Released all slaves [ 410.429681][T13454] dvmrp8: entered allmulticast mode [ 410.437507][T13443] chnl_net:caif_netlink_parms(): no params data found [ 410.634122][ T1140] tipc: Disabling bearer [ 410.639158][ T1140] tipc: Left network mode [ 410.663670][ T5954] Bluetooth: hci1: command tx timeout [ 410.720180][T13443] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.722817][T13443] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.725210][T13443] bridge_slave_0: entered allmulticast mode [ 410.728159][T13443] bridge_slave_0: entered promiscuous mode [ 410.732055][T13443] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.736129][T13443] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.738594][T13443] bridge_slave_1: entered allmulticast mode [ 410.742710][T13443] bridge_slave_1: entered promiscuous mode [ 410.760206][T13443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.765362][T13443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.793614][T13443] team0: Port device team_slave_0 added [ 410.796885][T13443] team0: Port device team_slave_1 added [ 410.845879][T13443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.848721][T13443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.858462][T13443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.866269][T13443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.868988][T13443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.879344][T13443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.082061][T13443] hsr_slave_0: entered promiscuous mode [ 411.096435][T13443] hsr_slave_1: entered promiscuous mode [ 411.112557][T13487] fuse: Unknown parameter '0x00000000000000030x0000000000000003' [ 411.369581][ T1140] hsr_slave_0: left promiscuous mode [ 411.376888][ T1140] hsr_slave_1: left promiscuous mode [ 411.389007][ T1140] veth1_macvtap: left promiscuous mode [ 411.398066][ T1140] veth0_macvtap: left promiscuous mode [ 411.400628][ T1140] veth1_vlan: left promiscuous mode [ 411.405029][ T1140] veth0_vlan: left promiscuous mode [ 411.477743][ T1140] pim6reg (unregistering): left allmulticast mode [ 411.831928][T13497] trusted_key: encrypted_key: insufficient parameters specified [ 411.836799][T13497] tmpfs: Unknown parameter '' [ 411.891837][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2188'. [ 412.053932][T13507] overlayfs: failed to clone upperpath [ 412.730814][ T5954] Bluetooth: hci1: command tx timeout [ 412.897048][ T1140] IPVS: stop unused estimator thread 0... [ 412.927651][T13443] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 412.938648][T13443] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 412.954146][T13443] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 412.966443][T13443] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 413.054455][T13443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.088949][T13443] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.100493][ T6193] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.103642][ T6193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.126099][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.129685][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.312306][T13443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.338131][T13574] xt_CT: You must specify a L4 protocol and not use inversions on it [ 413.347071][T13443] veth0_vlan: entered promiscuous mode [ 413.358845][T13443] veth1_vlan: entered promiscuous mode [ 413.379820][T13443] veth0_macvtap: entered promiscuous mode [ 413.385567][T13443] veth1_macvtap: entered promiscuous mode [ 413.395895][T13443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.407690][T13443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.417554][ T6193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.421554][ T6193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.425889][ T6193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.429853][ T6193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.565939][ T1255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.569833][ T1255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.577208][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.583617][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.691399][T13584] trusted_key: encrypted_key: insufficient parameters specified [ 413.700430][T13584] tmpfs: Unknown parameter '' [ 414.321365][T13596] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 414.323471][T13596] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 414.332929][T13596] vhci_hcd vhci_hcd.0: Device attached [ 414.337848][T13596] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 414.601151][ T6296] usb 44-1: SetAddress Request (10) to port 0 [ 414.603828][ T6296] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 414.604899][T13597] vhci_hcd: connection closed [ 414.607477][ T1255] vhci_hcd vhci_hcd.3: stop threads [ 414.610984][ T1255] vhci_hcd vhci_hcd.3: release socket [ 414.612902][ T1255] vhci_hcd vhci_hcd.3: disconnect device [ 414.622942][ T6296] usb 44-1: enqueue for inactive port 0 [ 414.645280][T13607] overlayfs: failed to clone upperpath [ 414.811056][ T5954] Bluetooth: hci1: command tx timeout [ 415.014510][ T6296] usb usb44-port1: attempt power cycle [ 415.572310][ T6296] usb usb44-port1: unable to enumerate USB device [ 415.635386][T13616] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 415.915318][T13632] speed is unknown, defaulting to 1000 [ 416.019760][T13632] speed is unknown, defaulting to 1000 [ 416.360512][T13651] speed is unknown, defaulting to 1000 [ 416.548754][T13651] speed is unknown, defaulting to 1000 [ 416.884101][ T40] kauditd_printk_skb: 1547 callbacks suppressed [ 416.884113][ T40] audit: type=1326 audit(1768462147.424:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13659 comm="syz.2.2222" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f75598 code=0x7ffc0000 [ 416.894625][ T5954] Bluetooth: hci1: command tx timeout [ 416.899314][ T40] audit: type=1326 audit(1768462147.434:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13659 comm="syz.2.2222" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f75598 code=0x7ffc0000 [ 416.910806][ T40] audit: type=1326 audit(1768462147.434:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13659 comm="syz.2.2222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 416.917578][ T40] audit: type=1326 audit(1768462147.434:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13659 comm="syz.2.2222" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f75598 code=0x7ffc0000 [ 416.925299][ T40] audit: type=1326 audit(1768462147.434:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13659 comm="syz.2.2222" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f75598 code=0x7ffc0000 [ 416.932589][ T40] audit: type=1326 audit(1768462147.434:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13659 comm="syz.2.2222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 416.940554][ T40] audit: type=1326 audit(1768462147.434:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13659 comm="syz.2.2222" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f75598 code=0x7ffc0000 [ 416.947607][ T40] audit: type=1326 audit(1768462147.434:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13659 comm="syz.2.2222" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f75598 code=0x7ffc0000 [ 416.956322][ T40] audit: type=1326 audit(1768462147.434:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13659 comm="syz.2.2222" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f75598 code=0x7ffc0000 [ 416.965372][ T40] audit: type=1326 audit(1768462147.434:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13659 comm="syz.2.2222" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f75598 code=0x7ffc0000 [ 417.355065][ T61] libceph: connect (1)[c::]:6789 error -101 [ 417.358148][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 417.404927][T13679] ceph: No mds server is up or the cluster is laggy [ 417.708919][T13689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'. [ 417.819929][T13693] overlayfs: failed to clone upperpath [ 417.876261][T13697] overlayfs: failed to clone upperpath [ 418.151735][T13712] EXT4-fs (nbd3): unable to read superblock [ 418.768334][T13729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2241'. [ 419.414411][T13746] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2247'. [ 419.915520][T13756] trusted_key: encrypted_key: insufficient parameters specified [ 419.925984][T13756] tmpfs: Unknown parameter '' [ 421.498216][T13776] tipc: Enabling of bearer rejected, already enabled [ 422.052170][T13781] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2255'. [ 422.080897][T13781] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2255'. [ 422.103241][T13781] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2255'. [ 422.107495][T13781] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2255'. [ 422.144228][T13781] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2255'. [ 422.147991][T13781] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2255'. [ 422.265285][T13790] trusted_key: encrypted_key: insufficient parameters specified [ 422.270000][T13790] tmpfs: Unknown parameter '' [ 422.444168][T13779] Process accounting resumed [ 423.742048][T13798] ceph: No mds server is up or the cluster is laggy [ 423.744656][ T61] libceph: connect (1)[c::]:6789 error -101 [ 423.746645][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 424.186022][T13827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2267'. [ 424.189054][T13827] netlink: 'syz.0.2267': attribute type 7 has an invalid length. [ 424.191950][T13827] netlink: 'syz.0.2267': attribute type 8 has an invalid length. [ 424.194502][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2267'. [ 424.633392][T13835] trusted_key: encrypted_key: insufficient parameters specified [ 424.642311][T13835] tmpfs: Unknown parameter '' [ 424.732248][T13838] speed is unknown, defaulting to 1000 [ 424.958701][T13838] speed is unknown, defaulting to 1000 [ 425.133814][T13850] trusted_key: encrypted_key: insufficient parameters specified [ 425.144429][T13850] tmpfs: Unknown parameter '' [ 425.615860][ T61] libceph: connect (1)[c::]:6789 error -101 [ 425.615977][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 425.871701][ T61] libceph: connect (1)[c::]:6789 error -101 [ 425.875142][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 425.906669][T13871] ceph: No source [ 426.147750][T13862] ceph: No mds server is up or the cluster is laggy [ 426.613682][T13891] netlink: 'syz.2.2285': attribute type 1 has an invalid length. [ 426.643291][T13891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 426.673952][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2285'. [ 426.678119][T13891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2285'. [ 426.700079][T13891] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2285'. [ 426.816920][T13891] bond1 (unregistering): Released all slaves [ 426.823881][T13899] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2288'. [ 427.814998][T13932] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2292'. [ 428.519661][T13956] batadv_slave_0: entered promiscuous mode [ 430.033382][T13993] trusted_key: encrypted_key: insufficient parameters specified [ 430.036663][T13993] tmpfs: Unknown parameter '' [ 430.083207][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2316'. [ 430.105246][T14005] hsr_slave_1 (unregistering): left promiscuous mode [ 430.343395][T14015] overlayfs: failed to clone upperpath [ 430.715407][T14032] trusted_key: encrypted_key: insufficient parameters specified [ 430.719122][T14032] tmpfs: Unknown parameter '' [ 430.745887][T14041] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2328'. [ 430.927184][T14047] overlayfs: failed to clone upperpath [ 430.981756][ T61] libceph: connect (1)[c::]:6789 error -101 [ 430.987257][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 430.991171][ T61] libceph: connect (1)[c::]:6789 error -101 [ 430.994409][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 431.021781][T14048] ceph: No mds server is up or the cluster is laggy [ 431.027476][T14053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2328'. [ 431.738399][ T5951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 431.743351][ T5951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 431.746425][ T5951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 431.750010][ T5951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 431.753445][ T5951] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 431.777655][T14063] speed is unknown, defaulting to 1000 [ 431.853355][T14063] speed is unknown, defaulting to 1000 [ 431.923160][T14065] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 431.925979][T14065] overlayfs: missing 'lowerdir' [ 431.988135][ T9116] syz_tun (unregistering): left allmulticast mode [ 431.992619][ T13] smc: removing ib device syz1 [ 432.062626][T14063] chnl_net:caif_netlink_parms(): no params data found [ 432.184697][T14063] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.187036][T14063] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.189424][T14063] bridge_slave_0: entered allmulticast mode [ 432.194582][T14063] bridge_slave_0: entered promiscuous mode [ 432.198963][T14063] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.201329][T14063] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.203925][T14063] bridge_slave_1: entered allmulticast mode [ 432.207739][T14063] bridge_slave_1: entered promiscuous mode [ 432.264397][T14063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.269108][T14063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.298758][T14063] team0: Port device team_slave_0 added [ 432.308218][T14063] team0: Port device team_slave_1 added [ 432.362324][T14063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.365326][T14063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.375513][T14063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.382370][T14063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.385112][T14063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.395051][T14063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.463601][T14063] hsr_slave_0: entered promiscuous mode [ 432.466936][T14063] hsr_slave_1: entered promiscuous mode [ 432.469768][T14063] debugfs: 'hsr0' already exists in 'hsr' [ 432.472454][T14063] Cannot create hsr debugfs directory [ 432.495641][T14074] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.2334'. [ 432.526437][T14074] input: syz1 as /devices/virtual/input/input6 [ 433.150075][ T1140] bridge_slave_1: left allmulticast mode [ 433.152169][ T1140] bridge_slave_1: left promiscuous mode [ 433.155382][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.159369][ T1140] bridge_slave_0: left allmulticast mode [ 433.162108][ T1140] bridge_slave_0: left promiscuous mode [ 433.164052][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.413927][ T1140] dvmrp6 (unregistering): left allmulticast mode [ 433.422905][ T1140] dvmrp8 (unregistering): left allmulticast mode [ 433.658513][ T1140] bond0 (unregistering): left promiscuous mode [ 433.660589][ T1140] : left promiscuous mode [ 433.662347][ T1140] @0: left promiscuous mode [ 433.666091][ T1140] bond0 (unregistering): (slave 30): Releasing backup interface [ 433.672448][ T1140] bond0 (unregistering): (slave c@0): Releasing backup interface [ 433.676879][ T1140] bond0 (unregistering): Released all slaves [ 433.772987][ T1140] bond1 (unregistering): (slave bond2): Releasing active interface [ 433.782016][ T5954] Bluetooth: hci4: command tx timeout [ 433.791093][ T1140] bond1 (unregistering): Released all slaves [ 433.909518][ T1140] bond2 (unregistering): Released all slaves [ 433.916268][ T1140] bond3 (unregistering): Released all slaves [ 434.002110][ T1140] : left promiscuous mode [ 434.122912][ T1140] tipc: Disabling bearer [ 434.124950][ T1140] tipc: Left network mode [ 434.139039][ T1140] IPVS: stopping master sync thread 11393 ... [ 434.204512][T14111] overlayfs: failed to clone upperpath [ 434.395302][T14063] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 434.414109][T14063] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 434.418317][T14063] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 434.455029][T14063] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 434.508947][T14063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.561165][ T1140] team0: left promiscuous mode [ 434.562921][ T1140] team_slave_0: left promiscuous mode [ 434.565078][ T1140] team_slave_1: left promiscuous mode [ 434.641702][ T1140] hsr_slave_0: left promiscuous mode [ 434.644706][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.652761][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.078072][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 435.111009][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 435.344221][ T1255] smc: removing ib device sz1 [ 435.361075][T14063] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.374205][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.376544][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.382536][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.384805][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.541979][T14063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.564848][T14063] veth0_vlan: entered promiscuous mode [ 435.572546][T14063] veth1_vlan: entered promiscuous mode [ 435.589229][T14063] veth0_macvtap: entered promiscuous mode [ 435.593897][T14063] veth1_macvtap: entered promiscuous mode [ 435.603013][T14063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.610221][T14063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.621118][ T1166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.626687][ T1166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.629423][ T1166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.655527][ T1166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.724358][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.726929][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.743704][ T1255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.746304][ T1255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.764333][T14149] overlayfs: failed to clone lowerpath [ 435.776704][T14149] overlayfs: failed to clone upperpath [ 435.850870][ T5954] Bluetooth: hci4: command tx timeout [ 435.938325][ T1140] IPVS: stop unused estimator thread 0... [ 435.985145][T14161] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2358'. [ 435.988402][T14160] 9pnet_fd: p9_fd_create_tcp (14160): problem binding to privport [ 435.996413][T14160] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 436.142471][T14160] /dev/sr0: Can't open blockdev [ 436.317055][T14178] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2364'. [ 437.001027][T14197] netlink: 'syz.0.2369': attribute type 3 has an invalid length. [ 437.004957][T14197] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2369'. [ 437.653101][T14205] overlayfs: missing 'lowerdir' [ 437.916732][T14213] overlayfs: missing 'lowerdir' [ 437.931293][ T5954] Bluetooth: hci4: command tx timeout [ 438.261189][T14224] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2377'. [ 438.265433][T14224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2377'. [ 438.671133][T14236] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2380'. [ 438.705006][T14236] netlink: 766 bytes leftover after parsing attributes in process `syz.2.2380'. [ 439.144311][T14243] overlayfs: failed to clone upperpath [ 439.371737][T14251] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 439.374546][T14251] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 439.378241][T14251] vhci_hcd vhci_hcd.0: Device attached [ 439.403090][T14251] tipc: Started in network mode [ 439.405371][T14251] tipc: Node identity ac1414aa, cluster identity 4711 [ 439.410376][T14251] tipc: Enabled bearer , priority 10 [ 439.640858][ T6296] usb 38-1: SetAddress Request (10) to port 0 [ 439.643005][ T6296] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 439.709978][T14260] input: syz0 as /devices/virtual/input/input8 [ 439.779308][T14265] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2389'. [ 439.925902][T14252] vhci_hcd: connection reset by peer [ 439.928415][ T1255] vhci_hcd vhci_hcd.0: stop threads [ 439.930139][ T1255] vhci_hcd vhci_hcd.0: release socket [ 439.932053][ T1255] vhci_hcd vhci_hcd.0: disconnect device [ 440.021158][ T5954] Bluetooth: hci4: command tx timeout [ 440.531113][ T6008] tipc: Node number set to 2886997162 [ 443.178837][T14273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2392'. [ 443.182820][T14273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2392'. [ 443.245254][T14281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2395'. [ 444.182545][T14301] netlink: 'syz.2.2398': attribute type 16 has an invalid length. [ 444.185289][T14301] netlink: 'syz.2.2398': attribute type 17 has an invalid length. [ 444.640393][T14315] netlink: 'syz.3.2405': attribute type 10 has an invalid length. [ 444.646934][T14315] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.650453][T14315] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.666499][T14315] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.669489][T14315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.672832][T14315] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.675853][T14315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.682777][T14315] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 444.730947][ T6296] usb 38-1: device descriptor read/8, error -110 [ 444.813048][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.815170][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.853578][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2410'. [ 445.124456][ T6296] usb usb38-port1: attempt power cycle [ 445.703766][ T6296] usb usb38-port1: unable to enumerate USB device [ 445.816306][T14346] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.819212][T14346] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.830265][T14346] bridge0: entered allmulticast mode [ 445.837220][T14346] bridge_slave_1: left allmulticast mode [ 445.839431][T14346] bridge_slave_1: left promiscuous mode [ 445.842125][T14346] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.852551][T14346] bridge_slave_0: left allmulticast mode [ 445.854478][T14346] bridge_slave_0: left promiscuous mode [ 445.857862][T14346] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.108256][T14357] netlink: 422 bytes leftover after parsing attributes in process `syz.3.2419'. [ 446.578323][T14365] trusted_key: encrypted_key: insufficient parameters specified [ 446.586455][T14365] tmpfs: Unknown parameter '1' [ 446.968636][ T5951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 446.978621][ T5951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 446.982065][ T5951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 446.985231][ T5951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 446.988419][ T5951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 447.156297][T14371] chnl_net:caif_netlink_parms(): no params data found [ 447.265998][T14371] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.268728][T14371] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.271412][T14371] bridge_slave_0: entered allmulticast mode [ 447.274375][T14371] bridge_slave_0: entered promiscuous mode [ 447.277698][T14371] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.279989][T14371] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.282521][T14371] bridge_slave_1: entered allmulticast mode [ 447.285396][T14371] bridge_slave_1: entered promiscuous mode [ 447.328742][T14371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.333766][T14371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.350916][T14371] team0: Port device team_slave_0 added [ 447.354246][T14371] team0: Port device team_slave_1 added [ 447.369501][T14371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.373694][T14371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.382001][T14371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.386261][T14371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.388459][T14371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.396543][T14371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.420804][T14371] hsr_slave_0: entered promiscuous mode [ 447.423174][T14371] hsr_slave_1: entered promiscuous mode [ 447.425391][T14371] debugfs: 'hsr0' already exists in 'hsr' [ 447.427212][T14371] Cannot create hsr debugfs directory [ 447.525278][T14371] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.531027][T14371] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 447.631334][T14371] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.634933][T14371] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 447.702804][T14371] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.706061][T14371] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 447.770267][T14371] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.770488][T14386] overlayfs: failed to clone upperpath [ 447.773772][T14371] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 447.878947][T14371] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 447.888877][T14371] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 447.897591][T14371] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 447.904579][T14371] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 448.026054][T14371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.046018][T14371] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.055883][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.059432][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.075532][ T6193] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.077887][ T6193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.197057][T14371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.226190][T14371] veth0_vlan: entered promiscuous mode [ 448.232473][T14371] veth1_vlan: entered promiscuous mode [ 448.247975][T14371] veth0_macvtap: entered promiscuous mode [ 448.253556][T14371] veth1_macvtap: entered promiscuous mode [ 448.262581][T14371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.268841][T14371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.276907][ T75] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.281954][ T75] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.287516][ T75] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.292775][ T75] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.338459][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.343236][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.357400][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.360979][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.436027][ T40] kauditd_printk_skb: 159 callbacks suppressed [ 448.436042][ T40] audit: type=1326 audit(1768462185.980:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.2.2429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 448.445882][ T40] audit: type=1326 audit(1768462185.980:5103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.2.2429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 448.453856][ T40] audit: type=1326 audit(1768462185.990:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.2.2429" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 448.462482][ T40] audit: type=1326 audit(1768462185.990:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.2.2429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 448.471646][ T40] audit: type=1326 audit(1768462185.990:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.2.2429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 448.478937][ T40] audit: type=1326 audit(1768462185.990:5107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.2.2429" exe="/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 448.486363][ T40] audit: type=1326 audit(1768462185.990:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.2.2429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 448.493732][ T40] audit: type=1326 audit(1768462185.990:5109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.2.2429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 448.500615][ T40] audit: type=1326 audit(1768462185.990:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.2.2429" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 448.507484][ T40] audit: type=1326 audit(1768462185.990:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14407 comm="syz.2.2429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x7ffc0000 [ 448.656039][T14387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.726224][T14412] lo speed is unknown, defaulting to 1000 [ 448.728142][T14412] lo speed is unknown, defaulting to 1000 [ 448.730288][T14412] lo speed is unknown, defaulting to 1000 [ 448.739111][T14412] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 448.757142][T14412] lo speed is unknown, defaulting to 1000 [ 448.759785][T14412] lo speed is unknown, defaulting to 1000 [ 448.762520][T14412] lo speed is unknown, defaulting to 1000 [ 448.765186][T14412] lo speed is unknown, defaulting to 1000 [ 448.767859][T14412] lo speed is unknown, defaulting to 1000 [ 449.050896][ T5954] Bluetooth: hci3: command tx timeout [ 449.271149][T14422] netlink: 'syz.0.2435': attribute type 10 has an invalid length. [ 449.279366][T14422] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2435'. [ 449.287696][T14422] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 449.308464][T14422] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 449.319485][T14422] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 449.334970][T14422] bochs-drm 0000:00:01.0: [drm] Unknown color mode 65545; guessing buffer size. [ 449.346603][T14422] netlink: 'syz.0.2435': attribute type 1 has an invalid length. [ 449.353250][T14422] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2435'. [ 449.608882][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2436'. [ 449.818925][T14437] trusted_key: encrypted_key: insufficient parameters specified [ 449.828227][T14437] tmpfs: Unknown parameter '' [ 449.910587][T14443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2440'. [ 450.043803][T14423] evm: overlay not supported [ 450.399420][T14447] pim6reg: entered allmulticast mode [ 450.610688][T14453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2443'. [ 450.795787][T13440] udevd[13440]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 450.814462][T13440] udevd[13440]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 450.858641][T14459] lo speed is unknown, defaulting to 1000 [ 451.222872][T14478] ip6t_srh: unknown srh invflags 7160 [ 451.231165][ T5954] Bluetooth: hci3: command tx timeout [ 451.378908][T14485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2450'. [ 452.175007][T14504] trusted_key: encrypted_key: insufficient parameters specified [ 452.187304][T14504] tmpfs: Unknown parameter '' [ 452.618187][T14512] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 452.620369][T14512] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 452.640913][T14512] vhci_hcd vhci_hcd.0: Device attached [ 452.654337][T14512] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 452.914491][ T54] usb 42-1: SetAddress Request (14) to port 0 [ 452.916623][ T54] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 452.933065][T14513] vhci_hcd: connection closed [ 452.933262][ T13] vhci_hcd vhci_hcd.2: stop threads [ 452.937286][ T13] vhci_hcd vhci_hcd.2: release socket [ 452.943294][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 452.995744][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2459'. [ 453.290898][ T5954] Bluetooth: hci3: command tx timeout [ 453.551860][ T40] kauditd_printk_skb: 123 callbacks suppressed [ 453.551936][ T40] audit: type=1326 audit(1768462191.100:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14528 comm="syz.1.2462" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704d579 code=0x0 [ 455.375036][T14548] trusted_key: encrypted_key: insufficient parameters specified [ 455.380412][T14548] tmpfs: Unknown parameter '' [ 455.384211][ T5954] Bluetooth: hci3: command tx timeout [ 455.486983][T14551] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 455.490321][T14551] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 455.493998][T14551] vhci_hcd vhci_hcd.0: Device attached [ 455.760812][ T6026] usb 44-1: SetAddress Request (14) to port 0 [ 455.760856][ T6026] usb 44-1: new SuperSpeed USB device number 14 using vhci_hcd [ 455.777287][ T6296] IPVS: starting estimator thread 0... [ 455.900965][T14569] IPVS: using max 32 ests per chain, 76800 per kthread [ 456.167725][ T40] audit: type=1326 audit(1768462193.710:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14573 comm="syz.2.2473" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704d579 code=0x0 [ 456.994649][T14552] vhci_hcd: connection reset by peer [ 456.996673][ T46] vhci_hcd vhci_hcd.3: stop threads [ 456.998567][ T46] vhci_hcd vhci_hcd.3: release socket [ 457.000434][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 457.264568][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2474'. [ 457.267756][T14582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2474'. [ 457.317218][ T5954] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 457.391649][ T5954] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 457.970194][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2477'. [ 458.021031][ T54] usb 42-1: device descriptor read/8, error -110 [ 458.421991][ T54] usb usb42-port1: attempt power cycle [ 458.484024][T14580] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 458.486475][T14580] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 458.489707][T14580] vhci_hcd vhci_hcd.0: Device attached [ 458.750947][ T1331] usb 38-1: SetAddress Request (14) to port 0 [ 458.760930][ T1331] usb 38-1: new SuperSpeed USB device number 14 using vhci_hcd [ 458.947689][T14580] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 458.993648][T14605] trusted_key: encrypted_key: insufficient parameters specified [ 458.996497][T14609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2481'. [ 459.002152][ T54] usb usb42-port1: unable to enumerate USB device [ 459.007601][T14603] tmpfs: Unknown parameter 'o' [ 459.009909][T14609] lo speed is unknown, defaulting to 1000 [ 459.210946][T14606] vhci_hcd: connection reset by peer [ 459.213988][ T1255] vhci_hcd vhci_hcd.0: stop threads [ 459.215760][ T1255] vhci_hcd vhci_hcd.0: release socket [ 459.224850][ T1255] vhci_hcd vhci_hcd.0: disconnect device [ 459.470154][T14617] ceph: No mds server is up or the cluster is laggy [ 460.041669][T13579] libceph: connect (1)[c::]:6789 error -101 [ 460.044387][T13579] libceph: mon0 (1)[c::]:6789 connect error [ 460.764225][T14639] overlayfs: missing 'lowerdir' [ 460.821024][ T6026] usb 44-1: device descriptor read/8, error -110 [ 461.853702][T14656] netlink: zone id is out of range [ 461.855669][T14656] netlink: zone id is out of range [ 462.081265][ T6026] usb usb44-port1: attempt power cycle [ 462.130940][ T24] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 462.282332][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.285788][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 462.288629][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 462.294366][ T24] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 462.297815][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.308944][T14658] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 462.314384][ T24] hub 5-1:1.0: bad descriptor, ignoring hub [ 462.316879][ T24] hub 5-1:1.0: probe with driver hub failed with error -5 [ 462.320280][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 462.335485][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 462.343192][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 462.347915][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 462.652351][T14162] usb 5-1: USB disconnect, device number 2 [ 462.673032][ T6026] usb usb44-port1: unable to enumerate USB device [ 463.789516][T14671] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 463.791519][T14671] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 463.794430][T14671] vhci_hcd vhci_hcd.0: Device attached [ 463.850860][ T1331] usb 38-1: device descriptor read/8, error -110 [ 463.919688][T14698] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 464.002621][T14703] sctp: [Deprecated]: syz.0.2508 (pid 14703) Use of int in maxseg socket option. [ 464.002621][T14703] Use struct sctp_assoc_value instead [ 464.076895][T14708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2510'. [ 464.155749][T13580] usb 42-1: SetAddress Request (18) to port 0 [ 464.157799][T13580] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd [ 464.239182][T14711] netlink: 'syz.3.2511': attribute type 13 has an invalid length. [ 464.251665][ T1331] usb usb38-port1: attempt power cycle [ 464.360321][T14711] gretap0: refused to change device tx_queue_len [ 464.363340][T14711] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 464.522247][T14692] vhci_hcd: connection reset by peer [ 464.524116][ T1166] vhci_hcd vhci_hcd.2: stop threads [ 464.525750][ T1166] vhci_hcd vhci_hcd.2: release socket [ 464.527561][ T1166] vhci_hcd vhci_hcd.2: disconnect device [ 464.818513][ T1331] usb usb38-port1: unable to enumerate USB device [ 464.976484][T14719] netlink: 'syz.0.2514': attribute type 2 has an invalid length. [ 465.086454][T14726] trusted_key: encrypted_key: insufficient parameters specified [ 465.108824][T14726] tmpfs: Unknown parameter '' [ 467.063161][T14750] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.380888][T14162] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 467.416429][T14759] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 467.418821][T14759] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 467.423363][T14759] vhci_hcd vhci_hcd.0: Device attached [ 467.430541][T14759] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 467.535188][T14162] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 467.540886][T14162] usb 7-1: config 1 interface 0 has no altsetting 0 [ 467.546591][T14162] usb 7-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.40 [ 467.550545][T14162] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.554166][T14162] usb 7-1: Product: 豆辎䧲疞쭶≓軆⤾⎁縃燃൫붨‎핁ꌣླ騭ꇩ兲党嘕㴣癜蝹͓᧚燙웓礟䴔㕆廙ᒨ쪃䬬팰ꡬ剂⵶Ⓜ衸럭䯞枘加簤刞쬎踦숃吅㢮ߌ⯌㽟⏂爐௷꿩ϣ圸〟㇨醪칁૒舟鑄룃᳙囷ʯꄬ䅴⢅燘⧈䇏㶵㗀դ꯲⽢멷烆ꢊ靯 䔐氷◸䭅땸龤㭐緵ﱲⱼꈄ龉웝庹׃㾭冤ﷄ쒧ꚵ詓 [ 467.567861][T14162] usb 7-1: Manufacturer: ࡃ [ 467.571527][T14162] usb 7-1: SerialNumber: ꒲㝍窚刮㾞コ䔡ब흘⃷奈ꛒⓤ鱃饶濧搜齻袖료ᛪꋵⲻꌉ뉛Ὁ䗤帺얾퇙꥚ [ 467.700840][ T9] usb 44-1: SetAddress Request (18) to port 0 [ 467.702815][ T9] usb 44-1: new SuperSpeed USB device number 18 using vhci_hcd [ 467.804750][T14162] usbhid 7-1:1.0: can't add hid device: -71 [ 467.806619][T14162] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 467.810689][T14162] usb 7-1: USB disconnect, device number 7 [ 467.986257][T14760] vhci_hcd: connection reset by peer [ 467.988381][ T8315] vhci_hcd vhci_hcd.3: stop threads [ 467.991862][ T8315] vhci_hcd vhci_hcd.3: release socket [ 467.995181][ T8315] vhci_hcd vhci_hcd.3: disconnect device [ 468.144305][ T5951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 468.147518][ T5951] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 468.150542][ T5951] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 468.153938][ T5951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 468.156643][ T5951] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 468.195092][T14770] lo speed is unknown, defaulting to 1000 [ 468.581896][ T1143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.596534][T14770] chnl_net:caif_netlink_parms(): no params data found [ 468.698225][ T1143] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.809869][T14770] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.812440][T14770] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.814736][T14770] bridge_slave_0: entered allmulticast mode [ 468.817335][T14770] bridge_slave_0: entered promiscuous mode [ 468.820277][T14770] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.822659][T14770] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.824838][T14770] bridge_slave_1: entered allmulticast mode [ 468.827429][T14770] bridge_slave_1: entered promiscuous mode [ 468.844721][T14770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.849528][T14770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.886244][ T1143] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.894621][T14770] team0: Port device team_slave_0 added [ 468.897965][T14770] team0: Port device team_slave_1 added [ 468.919586][T14770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.922189][T14770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.930603][T14770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.934940][T14770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.936993][T14770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.946699][T14770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.016648][ T1143] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.043409][T14770] hsr_slave_0: entered promiscuous mode [ 469.045763][T14770] hsr_slave_1: entered promiscuous mode [ 469.047826][T14770] debugfs: 'hsr0' already exists in 'hsr' [ 469.049523][T14770] Cannot create hsr debugfs directory [ 469.211006][T13580] usb 42-1: device descriptor read/8, error -110 [ 469.601892][T13580] usb usb42-port1: attempt power cycle [ 469.981166][ T1143] tipc: Disabling bearer [ 470.161733][T13580] usb usb42-port1: unable to enumerate USB device [ 470.181001][ T5954] Bluetooth: hci0: command tx timeout [ 470.374978][ T1143] tipc: Disabling bearer [ 470.381040][ T1143] tipc: Left network mode [ 471.278455][T14824] netlink: 6012 bytes leftover after parsing attributes in process `syz.3.2539'. [ 471.360340][T14834] autofs: Bad value for 'fd' [ 471.671093][T14770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 471.683523][T14770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 471.746609][T14845] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2545'. [ 471.759719][T14770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 471.795135][ T1143] hsr_slave_0: left promiscuous mode [ 471.798540][ T1143] hsr_slave_1: left promiscuous mode [ 471.815948][ T1143] veth1_vlan: left promiscuous mode [ 471.818402][ T1143] veth0_vlan: left promiscuous mode [ 471.901108][ T1143] team0 (unregistering): Port device batadv1 removed [ 472.121177][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2546'. [ 472.178635][T14868] program syz.2.2546 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.189311][T14869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2541'. [ 472.223287][ T1108] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 472.226137][ T1108] ata1.00: irq_stat 0x40000000 [ 472.228258][ T1108] ata1.00: failed command: ZAC MANAGEMENT OUT [ 472.230598][ T1108] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 10 [ 472.230598][ T1108] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 472.380953][ T5954] Bluetooth: hci0: command tx timeout [ 472.383324][ T1108] ata1.00: status: { DRDY ERR } [ 472.385182][ T1108] ata1.00: error: { ABRT } [ 472.386911][ T1108] ata1.00: device reported invalid CHS sector 0 [ 472.390637][ C3] ata1: illegal qc_active transition (00000000->00000002) [ 472.714159][ T1108] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 472.724784][ T1108] ata1.00: configured for UDMA/100 [ 472.741833][ T9] usb 44-1: device descriptor read/8, error -110 [ 472.807996][T14770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 472.900501][T14770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.909774][T14770] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.946223][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.948730][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.959043][ T6205] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.962087][ T6205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.151849][ T9] usb usb44-port1: attempt power cycle [ 473.252225][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.256013][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.286097][ T1143] IPVS: stop unused estimator thread 0... [ 473.317979][T14770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.341543][ T54] libceph: connect (1)[c::]:6789 error -22 [ 473.344123][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 473.348770][T14770] veth0_vlan: entered promiscuous mode [ 473.354133][T14770] veth1_vlan: entered promiscuous mode [ 473.368354][T14895] ceph: No mds server is up or the cluster is laggy [ 473.380461][T14770] veth0_macvtap: entered promiscuous mode [ 473.384889][T14770] veth1_macvtap: entered promiscuous mode [ 473.396575][T14770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.408133][T14770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.423141][ T1140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.427190][ T1140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.430474][ T1140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.434828][ T1140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.483075][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.486476][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.504192][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.507736][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.762168][ T9] usb usb44-port1: unable to enumerate USB device [ 474.002938][T14911] batadv_slave_0: entered promiscuous mode [ 474.421109][ T5954] Bluetooth: hci0: command tx timeout [ 474.479579][T14912] : renamed from bond_slave_0 (while UP) [ 474.570257][T14922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2555'. [ 475.213791][T14910] batadv_slave_0: left promiscuous mode [ 476.025352][T14941] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 476.028211][T14941] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 476.036983][T14941] vhci_hcd vhci_hcd.0: Device attached [ 476.095165][ T54] libceph: connect (1)[c::]:6789 error -101 [ 476.097936][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 476.141822][T14940] ceph: No mds server is up or the cluster is laggy [ 476.321581][ T6028] usb 44-1: SetAddress Request (22) to port 0 [ 476.325703][ T6028] usb 44-1: new SuperSpeed USB device number 22 using vhci_hcd [ 476.387296][T14947] fuse: Unknown parameter '$ G0b]fdR0x000000000000000c' [ 476.438442][T14950] ptrace attach of "/syz-executor exec"[14770] was attempted by ""[14950] [ 476.447090][T14949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2561'. [ 476.522106][ T5954] Bluetooth: hci0: command tx timeout [ 476.929934][T14961] netlink: 372 bytes leftover after parsing attributes in process `syz.1.2565'. [ 476.936417][ T1331] hid-generic 0005:0007:0007.0002: reserved main item tag 0xd [ 476.940570][ T1331] hid-generic 0005:0007:0007.0002: unexpected long global item [ 476.952612][ T1331] hid-generic 0005:0007:0007.0002: probe with driver hid-generic failed with error -22 [ 477.495618][T14973] could not allocate digest TFM handle tgr128 [ 477.594890][T14981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2571'. [ 477.600276][T14981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.606761][ T1331] lo speed is unknown, defaulting to 1000 [ 477.699899][T14986] overlayfs: missing 'lowerdir' [ 477.901092][T14942] vhci_hcd: connection reset by peer [ 477.908308][ T13] vhci_hcd vhci_hcd.3: stop threads [ 477.910575][ T13] vhci_hcd vhci_hcd.3: release socket [ 477.914151][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 477.938155][ T1331] libceph: connect (1)[c::]:6789 error -101 [ 477.959552][ T1331] libceph: mon0 (1)[c::]:6789 connect error [ 477.985122][T14990] ceph: No mds server is up or the cluster is laggy [ 478.749537][T15006] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2580'. [ 478.809591][T15011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2582'. [ 479.066139][T15024] Bluetooth: MGMT ver 1.23 [ 480.048368][T14162] libceph: connect (1)[c::]:6789 error -101 [ 480.052098][T14162] libceph: mon0 (1)[c::]:6789 connect error [ 480.077758][T15036] ceph: No mds server is up or the cluster is laggy [ 480.311493][T14162] libceph: connect (1)[c::]:6789 error -101 [ 480.313520][T14162] libceph: mon0 (1)[c::]:6789 connect error [ 480.870348][T15057] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 480.873091][T15057] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 480.876732][T15057] vhci_hcd vhci_hcd.0: Device attached [ 480.881531][T15057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2594'. [ 481.037453][T15065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2596'. [ 481.044634][T15065] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2596'. [ 481.100985][T15062] netlink: 'syz.2.2593': attribute type 4 has an invalid length. [ 481.151490][ T6296] usb 40-1: SetAddress Request (10) to port 0 [ 481.153537][ T6296] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 481.163315][T15069] netlink: 'syz.2.2593': attribute type 4 has an invalid length. [ 481.169722][T14604] lo speed is unknown, defaulting to 1000 [ 481.172642][T14604] syz2: Port: 1 Link DOWN [ 481.350005][T14604] lo speed is unknown, defaulting to 1000 [ 481.353732][T14604] syz2: Port: 1 Link ACTIVE [ 481.372028][ T6028] usb 44-1: device descriptor read/8, error -110 [ 481.489478][T15060] vhci_hcd: connection reset by peer [ 481.492033][ T1139] vhci_hcd vhci_hcd.1: stop threads [ 481.494359][ T1139] vhci_hcd vhci_hcd.1: release socket [ 481.496294][ T1139] vhci_hcd vhci_hcd.1: disconnect device [ 481.545355][T15078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.548686][T15078] batadv_slave_0: entered promiscuous mode [ 481.762355][ T6028] usb usb44-port1: attempt power cycle [ 481.913552][ T6287] libceph: connect (1)[c::]:6789 error -101 [ 481.915927][ T6287] libceph: mon0 (1)[c::]:6789 connect error [ 481.956627][T15087] ceph: No mds server is up or the cluster is laggy [ 482.348438][ T6028] usb usb44-port1: unable to enumerate USB device [ 482.636001][T15093] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 482.638833][T15093] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 482.648690][T15093] vhci_hcd vhci_hcd.0: Device attached [ 482.881057][T15096] vhci_hcd: connection closed [ 482.882435][ T224] vhci_hcd vhci_hcd.3: stop threads [ 482.886717][ T224] vhci_hcd vhci_hcd.3: release socket [ 482.889787][ T224] vhci_hcd vhci_hcd.3: disconnect device [ 482.911051][T14647] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 482.913564][T14647] usb 43-1: enqueue for inactive port 0 [ 482.991162][T14647] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 483.040863][ T54] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 483.201215][ T54] usb 6-1: Invalid ep0 maxpacket: 16 [ 483.330846][ T54] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 483.480868][ T54] usb 6-1: Invalid ep0 maxpacket: 16 [ 483.482851][ T54] usb usb6-port1: attempt power cycle [ 483.618139][T15122] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 483.968645][ T54] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 483.991296][ T54] usb 6-1: Invalid ep0 maxpacket: 16 [ 484.121020][ T54] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 484.141579][ T54] usb 6-1: Invalid ep0 maxpacket: 16 [ 484.144146][ T54] usb usb6-port1: unable to enumerate USB device [ 484.628044][T15147] tipc: Started in network mode [ 484.630062][T15147] tipc: Node identity 84e, cluster identity 4711 [ 484.632550][T15147] tipc: Node number set to 2126 [ 484.643451][T15147] fuse: Bad value for 'fd' [ 484.877959][T15156] netlink: 'syz.2.2623': attribute type 1 has an invalid length. [ 484.916344][T15156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 484.924566][T15156] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2623'. [ 484.965260][T15159] comedi comedi0: comedi_config --init_data is deprecated [ 485.297344][T15164] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2625'. [ 485.300590][T15164] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2625'. [ 485.332608][T15166] tmpfs: Bad value for 'mpol' [ 485.541389][T15170] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2627'. [ 485.546854][T15173] binder_alloc: 15171: binder_alloc_buf, no vma [ 485.595638][T15180] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2630'. [ 485.598540][T15180] block nbd0: not configured, cannot reconfigure [ 485.864624][T15189] /dev/nullb0: Can't open blockdev [ 486.067066][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2634'. [ 486.076309][T15196] netlink: 'syz.1.2634': attribute type 10 has an invalid length. [ 486.082062][T15196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.085319][T15196] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 486.118786][T15199] overlayfs: cannot append lower layer [ 486.251022][ T6296] usb 40-1: device descriptor read/8, error -110 [ 486.641580][ T6296] usb usb40-port1: attempt power cycle [ 487.202358][ T6296] usb usb40-port1: unable to enumerate USB device [ 487.249145][ T54] libceph: connect (1)[c::]:6789 error -101 [ 487.262862][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 487.314650][T15218] ceph: No mds server is up or the cluster is laggy [ 488.057120][ T40] audit: type=1326 audit(1768462225.600:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15231 comm="syz.0.2645" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x0 [ 488.458802][T15247] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 488.461017][T15247] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 488.463943][T15247] vhci_hcd vhci_hcd.0: Device attached [ 488.476917][T15247] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 488.740817][ T6287] usb 40-1: SetAddress Request (14) to port 0 [ 488.742827][ T6287] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 488.745443][T15252] netlink: 'syz.3.2649': attribute type 10 has an invalid length. [ 488.758444][T15252] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 488.805291][T15253] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 488.996225][T15253] netlink: 'syz.2.2648': attribute type 1 has an invalid length. [ 489.006363][T15248] vhci_hcd: connection reset by peer [ 489.008463][ T13] vhci_hcd vhci_hcd.1: stop threads [ 489.010340][ T13] vhci_hcd vhci_hcd.1: release socket [ 489.012668][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 489.100856][ T6296] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 489.258758][T15250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.264752][ T6296] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 489.268252][ T6296] usb 5-1: config 1 has an invalid descriptor of length 179, skipping remainder of the config [ 489.272876][ T6296] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 489.276637][ T6296] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.281171][ T6296] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59237, setting to 1024 [ 489.287481][ T6296] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 489.291436][ T6296] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 489.294610][ T6296] usb 5-1: Product: syz [ 489.296335][ T6296] usb 5-1: Manufacturer: syz [ 489.300373][T15255] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 489.303919][ T6296] cdc_wdm 5-1:1.0: skipping garbage [ 489.305606][ T6296] cdc_wdm 5-1:1.0: skipping garbage [ 489.308009][ T6296] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 489.309927][ T6296] cdc_wdm 5-1:1.0: Unknown control protocol [ 489.359734][T15258] overlayfs: failed to clone upperpath [ 489.716132][T15267] fuse: Bad value for 'fd' [ 491.002033][T15289] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2658'. [ 491.070638][T15289] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2658'. [ 492.321490][T15295] trusted_key: encrypted_key: insufficient parameters specified [ 492.326575][T15295] tmpfs: Unknown parameter '' [ 492.584852][T15300] trusted_key: encrypted_key: insufficient parameters specified [ 492.671209][T14647] usb 5-1: USB disconnect, device number 3 [ 492.711510][T15299] tmpfs: Unknown parameter '&' [ 492.715582][T15302] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2662'. [ 492.718460][T15302] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2662'. [ 492.982311][T15303] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 492.985140][T15303] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 492.990870][T15303] vhci_hcd vhci_hcd.0: Device attached [ 492.995843][T15303] tmpfs: Unknown parameter '' [ 493.193918][ T53] libceph: connect (1)[c::]:6789 error -101 [ 493.196369][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 493.216962][T15315] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 493.219077][T15315] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 493.226930][T15315] vhci_hcd vhci_hcd.0: Device attached [ 493.234653][T15308] ceph: No mds server is up or the cluster is laggy [ 493.245388][T15320] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 493.247658][T15320] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 493.251891][T15315] tipc: Started in network mode [ 493.252225][T15320] vhci_hcd vhci_hcd.0: Device attached [ 493.255321][T15315] tipc: Node identity ac1414aa, cluster identity 4711 [ 493.257808][T15315] tipc: Enabled bearer , priority 10 [ 493.314654][T15320] tipc: Enabling of bearer rejected, already enabled [ 493.510913][ T54] usb 44-1: SetAddress Request (26) to port 0 [ 493.513046][ T54] usb 44-1: new SuperSpeed USB device number 26 using vhci_hcd [ 493.520952][ T6296] usb 38-1: SetAddress Request (18) to port 0 [ 493.523769][ T6296] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 493.548467][T15310] vhci_hcd: connection closed [ 493.548921][ T6205] vhci_hcd vhci_hcd.1: stop threads [ 493.553734][ T6205] vhci_hcd vhci_hcd.1: release socket [ 493.555495][ T6205] vhci_hcd vhci_hcd.1: disconnect device [ 493.852056][ T6287] usb 40-1: device descriptor read/8, error -110 [ 493.900220][T15318] vhci_hcd: connection reset by peer [ 493.902599][ T6205] vhci_hcd vhci_hcd.3: stop threads [ 493.904621][ T6205] vhci_hcd vhci_hcd.3: release socket [ 493.910865][ T6205] vhci_hcd vhci_hcd.3: disconnect device [ 493.937406][T15321] vhci_hcd: connection reset by peer [ 493.939700][ T6205] vhci_hcd vhci_hcd.0: stop threads [ 493.941607][ T6205] vhci_hcd vhci_hcd.0: release socket [ 493.943510][ T6205] vhci_hcd vhci_hcd.0: disconnect device [ 494.012234][T15326] tipc: Enabled bearer , priority 10 [ 494.241737][ T6287] usb usb40-port1: attempt power cycle [ 494.380929][ T1331] tipc: Node number set to 2886997162 [ 494.801655][ T6287] usb usb40-port1: unable to enumerate USB device [ 495.265030][T15344] openvswitch: netlink: Flow actions attr not present in new flow. [ 495.511338][T15349] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 495.513539][T15349] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 495.518987][T15349] vhci_hcd vhci_hcd.0: Device attached [ 495.608897][T15350] vhci_hcd: connection closed [ 495.609192][ T1139] vhci_hcd vhci_hcd.1: stop threads [ 495.614964][ T1139] vhci_hcd vhci_hcd.1: release socket [ 495.618317][ T1139] vhci_hcd vhci_hcd.1: disconnect device [ 495.758102][T15358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2675'. [ 496.325151][T15371] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 496.327507][T15371] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 496.330178][T15371] vhci_hcd vhci_hcd.0: Device attached [ 496.335540][T15371] tipc: Started in network mode [ 496.337236][T15371] tipc: Node identity ac1414aa, cluster identity 4711 [ 496.339642][T15371] tipc: Enabled bearer , priority 10 [ 496.394642][T15376] xt_recent: Unsupported userspace flags (000000fe) [ 496.590868][T15127] usb 40-1: SetAddress Request (18) to port 0 [ 496.593187][T15127] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 496.697624][T15383] netlink: 'syz.2.2681': attribute type 32 has an invalid length. [ 496.700122][T15383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2681'. [ 496.704365][T15383] netlink: 'syz.2.2681': attribute type 32 has an invalid length. [ 497.011714][T15372] vhci_hcd: connection reset by peer [ 497.014244][ T46] vhci_hcd vhci_hcd.1: stop threads [ 497.016174][ T46] vhci_hcd vhci_hcd.1: release socket [ 497.018275][ T46] vhci_hcd vhci_hcd.1: disconnect device [ 497.330851][ T1331] tipc: Node number set to 2886997162 [ 497.354913][T15390] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2684'. [ 497.378899][T15396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2686'. [ 497.390791][T15396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2686'. [ 497.398537][T15396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2686'. [ 497.413803][T15396] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2686'. [ 498.097379][T15418] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 498.100847][T15418] overlayfs: failed to set xattr on upper [ 498.103332][T15418] overlayfs: ...falling back to redirect_dir=nofollow. [ 498.580633][ T6296] usb 38-1: device descriptor read/8, error -110 [ 498.580777][ T54] usb 44-1: device descriptor read/8, error -110 [ 498.737372][T15436] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 498.740226][T15436] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 498.744123][T15436] vhci_hcd vhci_hcd.0: Device attached [ 498.776424][T15436] tipc: Enabling of bearer rejected, already enabled [ 498.818766][T15432] netlink: 'syz.0.2690': attribute type 1 has an invalid length. [ 498.832392][T15432] netlink: 280 bytes leftover after parsing attributes in process `syz.0.2690'. [ 498.841185][ T54] usb 44-1: SetAddress Request (27) to port 0 [ 498.843228][ T54] usb 44-1: new SuperSpeed USB device number 27 using vhci_hcd [ 498.944749][T15442] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 498.946870][T15442] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 498.951822][T15442] vhci_hcd vhci_hcd.0: Device attached [ 498.981627][ T6296] usb usb38-port1: attempt power cycle [ 499.265594][T15443] vhci_hcd: connection closed [ 499.265962][ T1143] vhci_hcd vhci_hcd.1: stop threads [ 499.270343][ T1143] vhci_hcd vhci_hcd.1: release socket [ 499.272703][ T1143] vhci_hcd vhci_hcd.1: disconnect device [ 499.324013][T15438] vhci_hcd: connection reset by peer [ 499.326589][ T13] vhci_hcd vhci_hcd.3: stop threads [ 499.328829][ T13] vhci_hcd vhci_hcd.3: release socket [ 499.331671][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 499.541686][ T6296] usb usb38-port1: unable to enumerate USB device [ 500.641559][T14918] libceph: connect (1)[c::]:6789 error -22 [ 500.643840][T14918] libceph: mon0 (1)[c::]:6789 connect error [ 500.672988][T15463] ceph: No mds server is up or the cluster is laggy [ 501.535892][T15492] trusted_key: encrypted_key: insufficient parameters specified [ 501.548497][T15492] tmpfs: Unknown parameter 'R' [ 501.690939][T15127] usb 40-1: device descriptor read/8, error -110 [ 502.082162][T15127] usb usb40-port1: attempt power cycle [ 502.184161][T15496] tipc: Enabling of bearer rejected, already enabled [ 502.342318][T14647] libceph: connect (1)[c::]:6789 error -101 [ 502.344367][T14647] libceph: mon0 (1)[c::]:6789 connect error [ 502.390117][T15501] ceph: No mds server is up or the cluster is laggy [ 502.565681][T15508] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 502.664408][T15127] usb usb40-port1: unable to enumerate USB device [ 502.931413][T15515] ubi: mtd0 is already attached to ubi31 [ 503.254286][T15529] vivid-002: ================= START STATUS ================= [ 503.257263][T15529] vivid-002: RDS Tx I/O Mode: Controls [ 503.260128][T15529] vivid-002: RDS Program ID: 32904 [ 503.262189][T15529] vivid-002: RDS Program Type: 3 [ 503.263866][T15529] vivid-002: RDS PS Name: VIVID-TX [ 503.265654][T15529] vivid-002: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 503.269090][T15529] vivid-002: RDS Stereo: true [ 503.272164][T15529] vivid-002: RDS Artificial Head: false [ 503.274667][T15529] vivid-002: RDS Compressed: false [ 503.277001][T15529] vivid-002: RDS Dynamic PTY: false [ 503.279077][T15529] vivid-002: RDS Traffic Announcement: false [ 503.281201][T15529] vivid-002: RDS Traffic Program: true [ 503.283101][T15529] vivid-002: RDS Music: true [ 503.284720][T15529] vivid-002: ================== END STATUS ================== [ 503.288062][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2722'. [ 503.784187][T14918] libceph: connect (1)[c::]:6789 error -101 [ 503.789938][T14918] libceph: mon0 (1)[c::]:6789 connect error [ 503.829040][T15538] ceph: No mds server is up or the cluster is laggy [ 503.941451][ T54] usb 44-1: device descriptor read/8, error -110 [ 504.071124][ T54] usb usb44-port1: attempt power cycle [ 504.253545][T15541] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 504.270876][T15552] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 504.273162][T15552] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 504.276565][T15552] vhci_hcd vhci_hcd.0: Device attached [ 504.288352][T15552] tipc: Enabling of bearer rejected, already enabled [ 504.453961][ T40] audit: type=1326 audit(1768462242.000:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.0.2729" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 504.461497][ T40] audit: type=1326 audit(1768462242.000:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.0.2729" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 504.468939][ T40] audit: type=1326 audit(1768462242.000:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.0.2729" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 504.475911][ T40] audit: type=1326 audit(1768462242.000:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.0.2729" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 504.484104][ T40] audit: type=1326 audit(1768462242.000:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.0.2729" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 504.491448][ T40] audit: type=1326 audit(1768462242.000:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.0.2729" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 504.498192][ T40] audit: type=1326 audit(1768462242.000:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.0.2729" exe="/syz-executor" sig=0 arch=40000003 syscall=334 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 504.504960][ T40] audit: type=1326 audit(1768462242.000:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.0.2729" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 504.511743][ T40] audit: type=1326 audit(1768462242.000:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.0.2729" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 504.519441][ T40] audit: type=1326 audit(1768462242.000:5247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15555 comm="syz.0.2729" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d579 code=0x7ffc0000 [ 504.643476][ T54] usb usb44-port1: unable to enumerate USB device [ 504.644947][T14918] usb 40-1: SetAddress Request (22) to port 0 [ 504.659741][T14918] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 504.700439][T15557] trusted_key: encrypted_key: insufficient parameters specified [ 504.761292][T15557] tmpfs: Unknown parameter ']' [ 504.808604][T15553] vhci_hcd: connection reset by peer [ 504.810543][ T1139] vhci_hcd vhci_hcd.1: stop threads [ 504.812483][ T1139] vhci_hcd vhci_hcd.1: release socket [ 504.814326][ T1139] vhci_hcd vhci_hcd.1: disconnect device [ 505.529582][T15582] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 505.551002][T15582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2733'. [ 505.564330][T15582] netlink: 'syz.3.2733': attribute type 1 has an invalid length. [ 505.587080][T14647] libceph: connect (1)[c::]:6789 error -101 [ 505.589087][T14647] libceph: mon0 (1)[c::]:6789 connect error [ 505.624395][T15585] ceph: No mds server is up or the cluster is laggy [ 506.263508][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.532079][T15604] netlink: 'syz.1.2742': attribute type 1 has an invalid length. [ 506.534651][T15604] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2742'. [ 506.536423][T15605] random: crng reseeded on system resumption [ 506.537519][T15604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2742'. [ 506.645224][T15605] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 506.793415][T15612] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 506.795593][T15613] trusted_key: encrypted_key: insufficient parameters specified [ 506.846009][T15613] tmpfs: Unknown parameter 'f' [ 507.405718][T14647] libceph: connect (1)[c::]:6789 error -101 [ 507.408494][T14647] libceph: mon0 (1)[c::]:6789 connect error [ 507.452264][T15619] ceph: No mds server is up or the cluster is laggy [ 507.690181][T15627] fuse: Unknown parameter 'group_i00000000000000000000' [ 507.946519][T15632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2749'. [ 507.953727][T15632] vlan3: entered allmulticast mode [ 507.955455][T15632] hsr0: entered allmulticast mode [ 507.957158][T15632] hsr_slave_0: entered allmulticast mode [ 507.958970][T15632] hsr_slave_1: entered allmulticast mode [ 508.497561][T15637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2750'. [ 508.504325][T15637] No control pipe specified [ 508.923501][T15648] lo speed is unknown, defaulting to 1000 [ 509.732454][T15667] trusted_key: encrypted_key: insufficient parameters specified [ 509.740570][T15667] tmpfs: Unknown parameter '' [ 509.781293][T14918] usb 40-1: device descriptor read/8, error -110 [ 509.795840][T15668] /dev/nullb0: Can't open blockdev [ 510.171769][T14918] usb usb40-port1: attempt power cycle [ 510.285000][T14647] libceph: connect (1)[c::]:6789 error -101 [ 510.293559][T14647] libceph: mon0 (1)[c::]:6789 connect error [ 510.325696][T15672] ceph: No mds server is up or the cluster is laggy [ 510.474101][T15678] netlink: 107460 bytes leftover after parsing attributes in process `syz.1.2761'. [ 510.979910][T15683] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 510.999506][T15688] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 511.002377][T15688] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 511.284824][T14918] usb usb40-port1: unable to enumerate USB device [ 511.287201][T15688] vhci_hcd vhci_hcd.0: Device attached [ 511.314865][T15688] tipc: Enabling of bearer rejected, already enabled [ 511.572436][T15127] usb 38-1: SetAddress Request (22) to port 0 [ 511.574790][T15127] usb 38-1: new SuperSpeed USB device number 22 using vhci_hcd [ 511.927138][T15689] vhci_hcd: connection reset by peer [ 511.929315][ T46] vhci_hcd vhci_hcd.0: stop threads [ 511.933251][ T46] vhci_hcd vhci_hcd.0: release socket [ 511.935594][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 511.982863][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2767'. [ 511.985746][T15704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2767'. [ 513.074116][T14647] libceph: connect (1)[c::]:6789 error -101 [ 513.076179][T14647] libceph: mon0 (1)[c::]:6789 connect error [ 513.156719][T15733] ceph: No mds server is up or the cluster is laggy [ 513.234865][T15737] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2774'. [ 513.341937][T15740] fuse: Unknown parameter 'f' [ 513.364732][T15740] usb usb8: usbfs: process 15740 (syz.3.2774) did not claim interface 0 before use [ 514.485351][T15753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2778'. [ 514.488468][T15753] openvswitch: netlink: Flow key attr not present in new flow. [ 514.753848][T15762] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 514.756154][T15762] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 514.759738][T15762] vhci_hcd vhci_hcd.0: Device attached [ 514.784752][T15762] tipc: Enabling of bearer rejected, already enabled [ 514.787759][T15765] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 514.789821][T15765] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 514.811743][T15765] vhci_hcd vhci_hcd.0: Device attached [ 514.846931][T15765] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 515.030861][T13579] usb 40-1: SetAddress Request (26) to port 0 [ 515.033750][T13579] usb 40-1: new SuperSpeed USB device number 26 using vhci_hcd [ 515.081133][T14647] usb 44-1: SetAddress Request (30) to port 0 [ 515.083540][T14647] usb 44-1: new SuperSpeed USB device number 30 using vhci_hcd [ 515.143065][T15769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2783'. [ 515.180465][T15771] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2784'. [ 515.234151][T15766] vhci_hcd: connection reset by peer [ 515.236200][ T13] vhci_hcd vhci_hcd.3: stop threads [ 515.238066][ T13] vhci_hcd vhci_hcd.3: release socket [ 515.239851][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 515.489256][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 515.489323][ T40] audit: type=1804 audit(1768462253.030:5257): pid=15778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2787" name="/newroot/105/bus/file0" dev="overlay" ino=582 res=1 errno=0 [ 515.502679][T15763] vhci_hcd: connection reset by peer [ 515.505198][ T6205] vhci_hcd vhci_hcd.1: stop threads [ 515.507931][ T6205] vhci_hcd vhci_hcd.1: release socket [ 515.510454][ T6205] vhci_hcd vhci_hcd.1: disconnect device [ 515.771749][ T61] libceph: connect (1)[c::]:6789 error -101 [ 515.776284][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 515.821372][T15780] ceph: No mds server is up or the cluster is laggy [ 516.441388][T15795] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 516.443538][T15795] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 516.461497][T15795] vhci_hcd vhci_hcd.0: Device attached [ 516.473129][T15795] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 516.604229][T15798] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 516.606955][T15798] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 516.614844][T15798] vhci_hcd vhci_hcd.0: Device attached [ 516.666386][T15798] tipc: Enabling of bearer rejected, already enabled [ 516.989352][ T40] audit: type=1326 audit(1768462254.530:5258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15806 comm="syz.3.2792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 517.007651][ T40] audit: type=1326 audit(1768462254.530:5259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15806 comm="syz.3.2792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 517.020862][ T40] audit: type=1326 audit(1768462254.540:5260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15806 comm="syz.3.2792" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 517.027713][ T40] audit: type=1326 audit(1768462254.540:5261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15806 comm="syz.3.2792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 517.048576][T15796] vhci_hcd: connection reset by peer [ 517.050932][ T6205] vhci_hcd vhci_hcd.0: stop threads [ 517.053062][ T6205] vhci_hcd vhci_hcd.0: release socket [ 517.055423][ T40] audit: type=1326 audit(1768462254.540:5262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15806 comm="syz.3.2792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 517.057280][T15127] usb 38-1: device descriptor read/8, error -110 [ 517.064328][ T6205] vhci_hcd vhci_hcd.0: disconnect device [ 517.068788][ T40] audit: type=1326 audit(1768462254.540:5263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15806 comm="syz.3.2792" exe="/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 517.081511][ T40] audit: type=1326 audit(1768462254.540:5264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15806 comm="syz.3.2792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 517.088714][ T40] audit: type=1326 audit(1768462254.540:5265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15806 comm="syz.3.2792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 517.121951][ T40] audit: type=1326 audit(1768462254.540:5266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15806 comm="syz.3.2792" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 517.161493][T15809] trusted_key: encrypted_key: insufficient parameters specified [ 517.200685][T15809] tmpfs: Unknown parameter '@' [ 517.203561][T15799] vhci_hcd: connection closed [ 517.205671][ T1143] vhci_hcd vhci_hcd.1: stop threads [ 517.212630][ T1143] vhci_hcd vhci_hcd.1: release socket [ 517.215072][ T1143] vhci_hcd vhci_hcd.1: disconnect device [ 517.458432][T15127] usb usb38-port1: attempt power cycle [ 517.667349][T15814] /dev/nullb0: Can't open blockdev [ 517.951477][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 517.954058][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 517.956788][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 517.958797][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 517.963983][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 517.965989][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 517.968516][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 517.970580][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 517.984487][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 517.987639][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 517.990481][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 517.995008][T15818] trusted_key: encrypted_key: insufficient parameters specified [ 517.998720][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.007993][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.011465][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.014637][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.020606][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.025125][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.028605][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.035061][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.037576][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.041302][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.044175][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.047942][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.052763][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.056910][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.061613][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.065738][T15818] tmpfs: Unknown parameter 'p' [ 518.068041][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.070179][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.075091][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.083303][T15821] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2795'. [ 518.089113][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.092168][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.094239][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.098505][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.119846][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.132394][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.135465][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.139127][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.142355][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.147892][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.153127][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.158030][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.162193][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.165756][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.169558][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.172925][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.175142][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.181259][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.184212][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.190206][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.194552][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.200219][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.204002][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.212218][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.217154][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.220359][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.223948][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.227611][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.230064][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.233768][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.237045][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.239898][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.242694][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.246788][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.250512][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.255061][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.259944][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.263222][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.265905][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.270265][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.274177][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.278605][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.287530][T15127] usb usb38-port1: unable to enumerate USB device [ 518.290001][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.294464][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.296624][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.301006][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.304710][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.310339][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.313075][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.317500][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.320164][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.324478][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.327646][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.340943][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.343598][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.346745][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.349308][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.352507][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.355073][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.358007][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.360473][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.370966][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.373634][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.376883][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.379453][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.382742][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.385302][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.388409][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.391014][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.394132][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.396696][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.399707][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.410126][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.413577][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.416123][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.419319][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.421964][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.425138][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.427696][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.431019][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.434182][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.437359][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.439950][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.443469][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.446065][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.449227][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.460833][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.464014][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.466633][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.469786][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.472462][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.475850][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.478505][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.481883][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.484561][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.487797][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.490331][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.501100][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 518.503783][T15817] binder: 15816:15817 ioctl 4018620d 80000100 returned -16 [ 518.626782][T13441] udevd[13441]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 518.632488][T13440] udevd[13440]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 518.635455][T15827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2797'. [ 518.808043][T15841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2799'. [ 519.090776][ T8315] ------------[ cut here ]------------ [ 519.093558][ T8315] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 519.099000][ T8315] WARNING: net/mac80211/tx.c:751 at ieee80211_tx_h_rate_ctrl+0x139c/0x1ad0, CPU#0: kworker/u32:15/8315 [ 519.103472][ T8315] Modules linked in: [ 519.105443][ T8315] CPU: 0 UID: 0 PID: 8315 Comm: kworker/u32:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.109895][ T8315] Tainted: [L]=SOFTLOCKUP [ 519.111708][ T8315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 519.116003][ T8315] Workqueue: events_unbound cfg80211_wiphy_work [ 519.118696][ T8315] RIP: 0010:ieee80211_tx_h_rate_ctrl+0x13ac/0x1ad0 [ 519.121448][ T8315] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 60 06 00 00 48 8d 3d 44 d2 a6 05 49 8b 77 68 89 d9 48 89 ea 48 81 c6 48 0a 00 00 <67> 48 0f b9 3a bb 01 00 00 00 e9 94 f8 ff ff e8 90 45 cc f6 e8 4b [ 519.129148][ T8315] RSP: 0018:ffffc90024b87588 EFLAGS: 00010282 [ 519.131675][ T8315] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: 0000000000000005 [ 519.134855][ T8315] RDX: ffff888062e56744 RSI: ffff88804c18d7c8 RDI: ffffffff9098ea90 [ 519.138277][ T8315] RBP: ffff888062e56744 R08: 0000000000000005 R09: 0000000000000000 [ 519.141563][ T8315] R10: 0000000000000000 R11: ffff8880769aaff0 R12: ffff88805e324000 [ 519.144772][ T8315] R13: 0000000000000000 R14: ffff88804c2dd43d R15: ffffc90024b877e8 [ 519.148038][ T8315] FS: 0000000000000000(0000) GS:ffff8880976f9000(0000) knlGS:0000000000000000 [ 519.151724][ T8315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.154433][ T8315] CR2: 00000000f50fee62 CR3: 0000000049fef000 CR4: 0000000000352ef0 [ 519.157735][ T8315] Call Trace: [ 519.159144][ T8315] [ 519.160396][ T8315] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 519.162992][ T8315] ? find_held_lock+0x2b/0x80 [ 519.164946][ T8315] invoke_tx_handlers_late+0x1172/0x27d0 [ 519.167268][ T8315] ? invoke_tx_handlers_early+0x669/0x28a0 [ 519.169666][ T8315] ieee80211_tx+0x304/0x460 [ 519.171615][ T8315] ? __pfx_ieee80211_tx+0x10/0x10 [ 519.173691][ T8315] ? ieee80211_skb_resize+0x22a/0x630 [ 519.175870][ T8315] ? ieee80211_set_qos_hdr+0xba/0x3f0 [ 519.178204][ T8315] ieee80211_xmit+0x30f/0x3e0 [ 519.180251][ T8315] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 519.182722][ T8315] ieee80211_scan_state_send_probe+0x34c/0xad0 [ 519.185268][ T8315] ieee80211_scan_work+0x772/0x2080 [ 519.187454][ T8315] ? preempt_schedule_thunk+0x16/0x30 [ 519.189659][ T8315] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 519.192018][ T8315] ? preempt_schedule_thunk+0x16/0x30 [ 519.194282][ T8315] cfg80211_wiphy_work+0x3fb/0x560 [ 519.196398][ T8315] process_one_work+0x9ba/0x1b20 [ 519.198491][ T8315] ? __pfx_process_one_work+0x10/0x10 [ 519.200531][ T8315] ? assign_work+0x1a0/0x250 [ 519.202222][ T8315] worker_thread+0x6c8/0xf10 [ 519.204123][ T8315] ? __kthread_parkme+0x19e/0x250 [ 519.206206][ T8315] ? __pfx_worker_thread+0x10/0x10 [ 519.208434][ T8315] kthread+0x3c5/0x780 [ 519.210137][ T8315] ? __pfx_kthread+0x10/0x10 [ 519.212115][ T8315] ? rcu_is_watching+0x12/0xc0 [ 519.214208][ T8315] ? __pfx_kthread+0x10/0x10 [ 519.216091][ T8315] ret_from_fork+0x983/0xb10 [ 519.218081][ T8315] ? __pfx_ret_from_fork+0x10/0x10 [ 519.220163][ T8315] ? __switch_to+0x7af/0x10d0 [ 519.222312][ T8315] ? __pfx_kthread+0x10/0x10 [ 519.224229][ T8315] ret_from_fork_asm+0x1a/0x30 [ 519.226221][ T8315] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 519.227544][ T8315] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 519.230589][ T8315] CPU: 0 UID: 0 PID: 8315 Comm: kworker/u32:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.235400][ T8315] Tainted: [L]=SOFTLOCKUP [ 519.237364][ T8315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 519.241738][ T8315] Workqueue: events_unbound cfg80211_wiphy_work [ 519.244309][ T8315] Call Trace: [ 519.245716][ T8315] [ 519.247001][ T8315] dump_stack_lvl+0x3d/0x1f0 [ 519.248940][ T8315] vpanic+0x640/0x6f0 [ 519.250452][ T8315] ? ieee80211_tx_h_rate_ctrl+0x139c/0x1ad0 [ 519.252857][ T8315] panic+0xca/0xd0 [ 519.254489][ T8315] ? __pfx_panic+0x10/0x10 [ 519.256426][ T8315] ? check_panic_on_warn+0x1f/0xb0 [ 519.258734][ T8315] check_panic_on_warn+0xab/0xb0 [ 519.260814][ T8315] __warn+0x108/0x3c0 [ 519.262247][ T8315] __report_bug+0x2a0/0x520 [ 519.263938][ T8315] ? ieee80211_tx_h_rate_ctrl+0x139c/0x1ad0 [ 519.266412][ T8315] ? __pfx___report_bug+0x10/0x10 [ 519.268537][ T8315] ? ieee80211_probereq_get+0x6a/0x290 [ 519.270786][ T8315] ? ieee80211_build_probe_req+0x1eb/0x430 [ 519.272803][ T8315] ? ieee80211_scan_state_send_probe+0x49e/0xad0 [ 519.275424][ T8315] ? mark_held_locks+0x49/0x80 [ 519.277438][ T8315] ? irqentry_exit+0x1dd/0x8c0 [ 519.279396][ T8315] report_bug_entry+0xe1/0x290 [ 519.281133][ T8315] ? ieee80211_tx_h_rate_ctrl+0x13ac/0x1ad0 [ 519.283407][ T8315] handle_bug+0x18a/0x260 [ 519.285120][ T8315] exc_invalid_op+0x17/0x50 [ 519.286843][ T8315] asm_exc_invalid_op+0x1a/0x20 [ 519.288756][ T8315] RIP: 0010:ieee80211_tx_h_rate_ctrl+0x13ac/0x1ad0 [ 519.291020][ T8315] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 60 06 00 00 48 8d 3d 44 d2 a6 05 49 8b 77 68 89 d9 48 89 ea 48 81 c6 48 0a 00 00 <67> 48 0f b9 3a bb 01 00 00 00 e9 94 f8 ff ff e8 90 45 cc f6 e8 4b [ 519.298657][ T8315] RSP: 0018:ffffc90024b87588 EFLAGS: 00010282 [ 519.300960][ T8315] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: 0000000000000005 [ 519.304179][ T8315] RDX: ffff888062e56744 RSI: ffff88804c18d7c8 RDI: ffffffff9098ea90 [ 519.307170][ T8315] RBP: ffff888062e56744 R08: 0000000000000005 R09: 0000000000000000 [ 519.310224][ T8315] R10: 0000000000000000 R11: ffff8880769aaff0 R12: ffff88805e324000 [ 519.313225][ T8315] R13: 0000000000000000 R14: ffff88804c2dd43d R15: ffffc90024b877e8 [ 519.316282][ T8315] ? ieee80211_tx_h_rate_ctrl+0x1378/0x1ad0 [ 519.318736][ T8315] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 519.321087][ T8315] ? find_held_lock+0x2b/0x80 [ 519.322760][ T8315] invoke_tx_handlers_late+0x1172/0x27d0 [ 519.325084][ T8315] ? invoke_tx_handlers_early+0x669/0x28a0 [ 519.327493][ T8315] ieee80211_tx+0x304/0x460 [ 519.328967][ T8315] ? __pfx_ieee80211_tx+0x10/0x10 [ 519.331012][ T8315] ? ieee80211_skb_resize+0x22a/0x630 [ 519.333218][ T8315] ? ieee80211_set_qos_hdr+0xba/0x3f0 [ 519.335447][ T8315] ieee80211_xmit+0x30f/0x3e0 [ 519.337375][ T8315] __ieee80211_tx_skb_tid_band+0x2c2/0x720 [ 519.339423][ T8315] ieee80211_scan_state_send_probe+0x34c/0xad0 [ 519.341963][ T8315] ieee80211_scan_work+0x772/0x2080 [ 519.344100][ T8315] ? preempt_schedule_thunk+0x16/0x30 [ 519.346118][ T8315] ? __pfx_ieee80211_scan_work+0x10/0x10 [ 519.347980][ T8315] ? preempt_schedule_thunk+0x16/0x30 [ 519.349719][ T8315] cfg80211_wiphy_work+0x3fb/0x560 [ 519.351370][ T8315] process_one_work+0x9ba/0x1b20 [ 519.352991][ T8315] ? __pfx_process_one_work+0x10/0x10 [ 519.354736][ T8315] ? assign_work+0x1a0/0x250 [ 519.356240][ T8315] worker_thread+0x6c8/0xf10 [ 519.357900][ T8315] ? __kthread_parkme+0x19e/0x250 [ 519.359565][ T8315] ? __pfx_worker_thread+0x10/0x10 [ 519.361254][ T8315] kthread+0x3c5/0x780 [ 519.362595][ T8315] ? __pfx_kthread+0x10/0x10 [ 519.364111][ T8315] ? rcu_is_watching+0x12/0xc0 [ 519.365783][ T8315] ? __pfx_kthread+0x10/0x10 [ 519.367347][ T8315] ret_from_fork+0x983/0xb10 [ 519.368963][ T8315] ? __pfx_ret_from_fork+0x10/0x10 [ 519.370603][ T8315] ? __switch_to+0x7af/0x10d0 [ 519.372104][ T8315] ? __pfx_kthread+0x10/0x10 [ 519.373587][ T8315] ret_from_fork_asm+0x1a/0x30 [ 519.375111][ T8315] [ 519.376833][ T8315] Kernel Offset: disabled [ 519.378218][ T8315] Rebooting in 86400 seconds..