last executing test programs: 13m54.985437484s ago: executing program 3 (id=780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x18, 0x55, 0x2e5}, 0x18}}, 0x0) 13m53.95622692s ago: executing program 3 (id=783): r0 = socket$igmp6(0xa, 0x3, 0x2) shutdown(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, 0xffffffffffffffff, 0x19, 0x4, 0x0, @void, @value}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x5, 0x0, 0x0, 0x4d, 0xfffffffc, 0x7}, 0x9c) socket(0x400000000010, 0x3, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={0x0}, 0x18) syz_emit_vhci(&(0x7f0000001100)=ANY=[@ANYBLOB="040e04"], 0x7) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x208000, 0x0) r5 = syz_io_uring_setup(0x3429, &(0x7f00000000c0)={0x0, 0x3586, 0x2, 0x3, 0x32}, 0x0, &(0x7f0000000340)) io_uring_register$IORING_REGISTER_PROBE(r5, 0x8, &(0x7f0000000580)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x2b) r6 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SLAVE_FORCE(r6, 0x706, 0x69) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84, 0x0, 0x2}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x60, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66e0025c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], 0x5, [{}, {}, {0x0, 0xfe}], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 13m52.752097249s ago: executing program 3 (id=786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000240), 0x400, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c00018014000300fe80000000000000000000000000001114000400000000000000000000000000000000013c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000200000000000000000014000400fe8000000000000000000000000000aa"], 0xc8}}, 0x0) 3m20.56222617s ago: executing program 4 (id=2570): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000066c0), 0x0, 0x5efe) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2e, 0x93}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4002, &(0x7f0000000000)=0x4, 0x6, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x2284, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000005, 0x109010, 0xffffffffffffffff, 0x8000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000180)='+^&*:!%]+.?m-\x00', 0xe) 3m18.887397926s ago: executing program 4 (id=2575): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000066c0), 0x0, 0x5efe) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2e, 0x93}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4002, &(0x7f0000000000)=0x4, 0x6, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x2284, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000005, 0x109010, 0xffffffffffffffff, 0x8000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x2d, 0x2, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000180)='+^&*:!%]+.?m-\x00', 0xe) 3m15.797427833s ago: executing program 4 (id=2580): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_proto_private(r4, 0x89e2, 0x0) 3m14.277177007s ago: executing program 4 (id=2581): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000010001"], 0x50) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0) fstat(r5, &(0x7f0000001200)) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000340)={0x2b, 0x101, 0x4, 0x8, 0x781, 0x81}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xffffffff], [0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a, 0x6, 0x0, 0x61}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0xffffffff, {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000180)="5856bcd74e481cfb3b3481e63640", 0xe, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r6, r7, r7}, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x20044041, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1) 3m13.249996212s ago: executing program 4 (id=2586): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, &(0x7f0000000080)) 2m57.497245504s ago: executing program 33 (id=2586): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, &(0x7f0000000080)) 18.403356907s ago: executing program 1 (id=2977): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) modify_ldt$write(0x1, &(0x7f0000000100)={0x810e, 0x20001000, 0x4000, 0x1, 0x2, 0x1, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000000)=""/250, 0xfa) close(0xffffffffffffffff) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd8}}, 0x4000040) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) 13.048233409s ago: executing program 1 (id=2988): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2721, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r4 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r4, 0x3, 0x3, 0xfffffffd) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={r3, 0x2}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280), 0x0) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000013000), 0x0) 12.804386303s ago: executing program 1 (id=2990): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x20400, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) 11.562397092s ago: executing program 1 (id=2994): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 11.360880915s ago: executing program 6 (id=2995): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) ppoll(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000080)={[0x8001a0ffffffff]}, 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000040)) 11.360344375s ago: executing program 1 (id=2997): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) socket$inet6(0xa, 0x80002, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) syz_clone3(0x0, 0x0) 11.180194748s ago: executing program 0 (id=2998): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) modify_ldt$write(0x1, &(0x7f0000000100)={0x810e, 0x20001000, 0x4000, 0x1, 0x2, 0x1, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000000)=""/250, 0xfa) close(0xffffffffffffffff) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd8}}, 0x4000040) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) 9.359604286s ago: executing program 5 (id=3001): syz_extract_tcp_res$synack(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/sem\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x100) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) personality(0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1b8a877, &(0x7f0000000180)=ANY=[@ANYBLOB]) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0x1}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sequencer2(0xffffff9c, 0x0, 0x60801, 0x0) mount$afs(0x0, 0x0, 0x0, 0x200000, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0x8000000000000000, 0x8000f, 0xffffffffffffffff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x2, 0x5}, 0x0, 0x0) 8.274310262s ago: executing program 2 (id=3002): ioperm(0x9, 0x6, 0x5) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000127bd700077dbdf250f00d7229d4105050000000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4801) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000, 0x2000000}, &(0x7f0000002000), 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) creat(0x0, 0xf8) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) 8.099647365s ago: executing program 2 (id=3003): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kexec_load(0x7fffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$int_out(0xffffffffffffffff, 0x5462, 0x0) socket$netlink(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000080)={0x40, 0x14, 0x4, "3fab0be5"}, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000000, 0x26b}, &(0x7f0000000040), 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x40045b0a, &(0x7f0000000040)) 8.020442907s ago: executing program 6 (id=3004): socket(0x10, 0x3, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7.951731648s ago: executing program 5 (id=3005): kexec_load(0x7fffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$int_out(r2, 0x5462, &(0x7f0000000280)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 7.847498229s ago: executing program 0 (id=3006): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @null}) 6.952354043s ago: executing program 6 (id=3007): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x3) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r2, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r5, 0xc048aeca, &(0x7f0000000200)) 6.120962185s ago: executing program 2 (id=3008): r0 = io_uring_setup(0x194e, &(0x7f0000000340)={0x0, 0xd3d5, 0x40, 0x101, 0xf1}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(0xffffffffffffffff, r0) read$FUSE(r1, &(0x7f0000000f80)={0x2020}, 0x2020) 5.952643839s ago: executing program 0 (id=3009): r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.912029229s ago: executing program 5 (id=3010): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x2, 0xe0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xc, 0x5, 0x9}, {0x6, 0x24, 0x1a, 0x2, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xc, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x6, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8}}}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB]}) 5.82041052s ago: executing program 2 (id=3011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c00018014000300fe80000000000000000000000000001114000400000000000000000000000000000000013c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000200000000000000000014000400fe8000000000000000000000000000aa"], 0xc8}}, 0x0) 4.799731096s ago: executing program 2 (id=3012): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/31) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x240000a1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0xff}, {@in6=@mcast2, 0x4d6, 0x6c}, @in=@private=0xa010101, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0) 4.785853766s ago: executing program 6 (id=3013): ioperm(0x9, 0x6, 0x5) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000127bd700077dbdf250f00d7229d4105050000000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4801) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000, 0x2000000}, &(0x7f0000002000), 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) creat(0x0, 0xf8) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x101, "7bb9595931028deda525e19bdeffafde2500f6d15c9e31df9454310ad7c18e65"}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x400000000, 0x4, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) 3.707152003s ago: executing program 2 (id=3014): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) ppoll(&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000080)={[0x8001a0ffffffff]}, 0x8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000040)) 3.653522333s ago: executing program 6 (id=3015): syz_extract_tcp_res$synack(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/sem\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x100) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) personality(0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1b8a877, &(0x7f0000000180)=ANY=[@ANYBLOB]) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0x1}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f0000000440)=""/66, 0x42}], 0x2, 0x7, 0xfffffff7) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sequencer2(0xffffff9c, 0x0, 0x60801, 0x0) mount$afs(0x0, 0x0, 0x0, 0x200000, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x2, 0x8000000000000000, 0x8000f, 0xffffffffffffffff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x2, 0x5}, 0x0, 0x0) 2.604491209s ago: executing program 1 (id=3016): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) modify_ldt$write(0x1, &(0x7f0000000100)={0x810e, 0x20001000, 0x4000, 0x1, 0x2, 0x1, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000000)=""/250, 0xfa) close(0xffffffffffffffff) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd8}}, 0x4000040) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) 2.484962471s ago: executing program 6 (id=3017): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000066c0), 0x0, 0x5efe) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2e, 0x93}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4002, &(0x7f0000000000)=0x4, 0x6, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x2284, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000005, 0x109010, 0xffffffffffffffff, 0x8000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000180)='+^&*:!%]+.?m-\x00', 0xe) 2.412411673s ago: executing program 0 (id=3018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "53af20b16d2353cb", "086a4522634dec998e0f782d6dd36a085ada991a521bc8921471a6793d49bb5e", '3&Gf', "b0e3958a5194515b"}, 0x38) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x27) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 2.412157342s ago: executing program 5 (id=3019): writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 2.083259838s ago: executing program 5 (id=3020): syz_open_dev$rtc(0x0, 0x0, 0x20080) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) poll(0x0, 0x0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4e8, 0x450, 0x2c0, 0xffffffff, 0x3a8, 0x2c0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xff000000, 0x0, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0xffffff00, 0xff], 0x3ff, 0x1, 0x5c, 0x4e20, 0x4e22, 0x4e24, 0x4e24, 0x804, 0x20c0}, 0x80, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x801, {0x0, @broadcast, @multicast2, @port=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) 619.44208ms ago: executing program 5 (id=3021): kexec_load(0x7fffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$int_out(r2, 0x5462, &(0x7f0000000280)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 51.454689ms ago: executing program 0 (id=3023): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', @broadcast}) 0s ago: executing program 0 (id=3024): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2721, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r4 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r4, 0x3, 0x3, 0xfffffffd) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={r3, 0x2}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000280), 0x0) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000013000), 0x0) kernel console output (not intermixed with test programs): 0][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.237826][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.248973][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.259032][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.276894][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.303152][ T7267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.350868][ T6781] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 406.376453][ T6781] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 406.389174][ T6781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 406.404371][ T6781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 406.425247][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.443921][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.473853][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.500918][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.552800][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.594376][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.662840][ T7267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.733334][ T7267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.916425][ T7267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.476613][ T7267] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.572588][ T7267] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.646060][ T7267] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.654837][ T7267] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.644140][ T6774] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 408.658209][ T6774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 408.715200][ T7461] xt_hashlimit: overflow, rate too high: 0 [ 409.982107][ T6801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.024976][ T6801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.047385][ T7477] ceph: No mds server is up or the cluster is laggy [ 410.054480][ T14] libceph: connect (1)[c::]:6789 error -101 [ 410.061106][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 410.135999][ T6778] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 410.185081][ T7485] trusted_key: encrypted_key: master key parameter '' is invalid [ 410.310914][ T6774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.346472][ T6774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.424890][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 411.764638][ T7497] netlink: 24 bytes leftover after parsing attributes in process `syz.5.831'. [ 412.280077][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.5.831'. [ 414.110138][ T7525] xt_hashlimit: overflow, rate too high: 0 [ 417.668153][ T7535] loop5: detected capacity change from 0 to 8 [ 417.690871][ T7535] SQUASHFS error: zlib decompression failed, data probably corrupt [ 417.699014][ T7535] SQUASHFS error: Failed to read block 0x4e8: -5 [ 417.705938][ T27] audit: type=1800 audit(1744277104.686:6): pid=7535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.911" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 417.734007][ T7535] SQUASHFS error: Failed to read block 0x6e6: -5 [ 417.740482][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 417.747917][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 417.754743][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 417.761311][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 417.768700][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 417.775536][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 417.781889][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 417.789267][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 417.796145][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 417.802357][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 417.809729][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 417.816590][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 417.822804][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 417.830160][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 417.836992][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 417.843195][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 417.850559][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 417.857542][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 417.863935][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 417.871338][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 417.878193][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 417.884428][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 417.891789][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 417.898642][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 417.904870][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 417.912245][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 417.919122][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 417.925309][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 417.932674][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 417.939503][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 417.945768][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 417.953088][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 417.959992][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 417.966536][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 417.973844][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 417.980731][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 417.986998][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 417.994287][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.001639][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 418.007908][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.015202][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.022086][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 418.028319][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.035602][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.042449][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 418.048829][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.056193][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.062996][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 418.069434][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.076777][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.083562][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 418.089799][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.097246][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.104030][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 418.110295][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.117640][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.124439][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 418.130695][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.138015][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.144795][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 418.151190][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.158509][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.165293][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 418.171684][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.179021][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.185862][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 418.192109][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.199422][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.206246][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 418.212428][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.219774][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.226996][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 418.233192][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.240510][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.247327][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 418.253525][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.260914][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.267758][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 418.274112][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.281443][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.288401][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 418.294604][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.301930][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.308763][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 418.314948][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.322249][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.329059][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 418.335238][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.342558][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.349822][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 418.356052][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.363329][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.370165][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 418.376575][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.383967][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.390768][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 418.396977][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.404251][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.411069][ T7535] SQUASHFS error: Failed to read block 0x0: -5 [ 418.417287][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.424579][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.431409][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.438735][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.445551][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.452960][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 418.459905][ T7535] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 418.467214][ T7535] SQUASHFS error: read_indexes: reading block [6e4:0] [ 420.346496][ T7557] overlayfs: './file0' not a directory [ 420.552622][ T4358] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 421.548798][ T4358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.580023][ T4358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.618376][ T4358] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 421.634578][ T4358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.650903][ T7569] xt_hashlimit: overflow, rate too high: 0 [ 421.695342][ T6785] device hsr_slave_0 left promiscuous mode [ 421.716434][ T4358] usb 1-1: config 0 descriptor?? [ 421.761670][ T6785] device hsr_slave_1 left promiscuous mode [ 421.826628][ T6785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.145602][ T6785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.496781][ T6785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.504312][ T6785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.516327][ T4358] usbhid 1-1:0.0: can't add hid device: -71 [ 422.522354][ T4358] usbhid: probe of 1-1:0.0 failed with error -71 [ 422.615861][ T4358] usb 1-1: USB disconnect, device number 12 [ 422.627166][ T6785] device bridge_slave_1 left promiscuous mode [ 422.648270][ T6785] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.867462][ T6785] device bridge_slave_0 left promiscuous mode [ 422.896020][ T6785] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.958038][ T6785] device veth1_macvtap left promiscuous mode [ 423.985414][ T6785] device veth0_macvtap left promiscuous mode [ 424.127418][ T6785] device veth1_vlan left promiscuous mode [ 424.136110][ T6785] device veth0_vlan left promiscuous mode [ 424.137102][ T7594] loop0: detected capacity change from 0 to 64 [ 425.582664][ T7605] xt_hashlimit: overflow, rate too high: 0 [ 429.135943][ T7632] trusted_key: encrypted_key: master key parameter is missing [ 429.361236][ T6785] team0 (unregistering): Port device team_slave_1 removed [ 429.659649][ T48] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 429.676763][ T48] Bluetooth: hci5: Injecting HCI hardware error event [ 429.690737][ T48] Bluetooth: hci5: hardware error 0x00 [ 430.095411][ T6785] team0 (unregistering): Port device team_slave_0 removed [ 430.242902][ T7629] loop5: detected capacity change from 0 to 32768 [ 430.261031][ T7629] gfs2: Unknown parameter 'localc' [ 430.307535][ T6785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.413158][ T6785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.503060][ T7425] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 431.905913][ T48] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 434.003222][ T7668] trusted_key: encrypted_key: insufficient parameters specified [ 434.021821][ T6785] bond0 (unregistering): (slave team0): Releasing backup interface [ 434.308053][ T6785] bond0 (unregistering): Released all slaves [ 434.675013][ T7578] netlink: 28 bytes leftover after parsing attributes in process `syz.2.925'. [ 434.713853][ T7578] netlink: 39 bytes leftover after parsing attributes in process `syz.2.925'. [ 434.747945][ T7578] netlink: 39 bytes leftover after parsing attributes in process `syz.2.925'. [ 434.989189][ T7675] loop5: detected capacity change from 0 to 2048 [ 435.191736][ T7664] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.438146][ T7664] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.468302][ T7681] xt_hashlimit: overflow, rate too high: 0 [ 435.578959][ T7675] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 435.915908][ T7267] EXT4-fs (loop5): unmounting filesystem. [ 436.082370][ T7664] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.118174][ T7703] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 437.198470][ T7664] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.493067][ T7664] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.542218][ T7664] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.557478][ T7664] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.574325][ T7664] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.659104][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880572dc000: rx timeout, send abort [ 439.774855][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880572dc000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 439.912940][ T7742] xt_hashlimit: overflow, rate too high: 0 [ 440.378658][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.438159][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.418842][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 444.857920][ T7793] loop5: detected capacity change from 0 to 8 [ 444.924073][ T7793] SQUASHFS error: zlib decompression failed, data probably corrupt [ 444.932290][ T7793] SQUASHFS error: Failed to read block 0x4e8: -5 [ 444.945574][ T27] audit: type=1800 audit(1744277131.916:7): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.985" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 444.978607][ T7793] SQUASHFS error: Failed to read block 0x6e6: -5 [ 444.985313][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 444.992827][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.000196][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.006952][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.014271][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.021259][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.028169][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.035487][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.042388][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.049113][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.056948][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.063827][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.070110][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.077513][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.084337][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.090623][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.098132][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.105056][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.111438][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.118803][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.125631][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.132280][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.139660][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.146519][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.152768][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.160150][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.162368][ T7805] trusted_key: encrypted_key: insufficient parameters specified [ 445.167028][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.181099][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.188487][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.195326][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.201937][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.209475][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.216348][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.222581][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.229965][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.236824][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.243090][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.250535][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.258970][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.265255][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.272663][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.279539][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.285851][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.293480][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.300802][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.307306][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.314615][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.321503][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.327766][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.335061][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.341934][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.348292][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.355583][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.362494][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.368776][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.376165][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.383010][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.389302][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.396688][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.403517][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.410287][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.417668][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.424494][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.430741][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.438103][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.444891][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.451176][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.458502][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.465307][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.471566][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.478908][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.487806][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.494072][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.501405][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.508396][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.514605][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.522055][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.528916][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.535125][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.542533][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.549612][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.555869][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.563163][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.570011][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.576273][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.583553][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.590397][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.596654][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.603957][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.610964][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.617224][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.624529][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.631700][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.637943][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.645221][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.652325][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.658560][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.665871][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.672670][ T7793] SQUASHFS error: Failed to read block 0x0: -5 [ 445.678943][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.686273][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.693118][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.700494][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.707345][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.714792][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 445.721677][ T7793] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 445.729067][ T7793] SQUASHFS error: read_indexes: reading block [6e4:0] [ 446.552736][ T7819] nbd5: detected capacity change from 0 to 510 [ 446.749586][ T7825] block nbd5: shutting down sockets [ 446.830221][ C1] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.839617][ C1] Buffer I/O error on dev nbd5, logical block 0, async page read [ 446.847821][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.860509][ T52] Buffer I/O error on dev nbd5, logical block 0, async page read [ 446.870834][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.879914][ T52] Buffer I/O error on dev nbd5, logical block 0, async page read [ 446.887882][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.896992][ T52] Buffer I/O error on dev nbd5, logical block 0, async page read [ 446.904914][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.914054][ T52] Buffer I/O error on dev nbd5, logical block 0, async page read [ 446.990249][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 446.999416][ T52] Buffer I/O error on dev nbd5, logical block 0, async page read [ 447.007374][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.016471][ T52] Buffer I/O error on dev nbd5, logical block 0, async page read [ 447.024441][ T52] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.033543][ T52] Buffer I/O error on dev nbd5, logical block 0, async page read [ 447.048294][ T7425] ldm_validate_partition_table(): Disk read failed. [ 447.055916][ T1043] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.065934][ T1043] Buffer I/O error on dev nbd5, logical block 0, async page read [ 447.073928][ T1043] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 447.083055][ T1043] Buffer I/O error on dev nbd5, logical block 0, async page read [ 447.095998][ T7425] Dev nbd5: unable to read RDB block 0 [ 447.132454][ T7425] nbd5: unable to read partition table [ 447.204099][ T7425] nbd5: partition table beyond EOD, truncated [ 448.273285][ T7855] trusted_key: encrypted_key: insufficient parameters specified [ 449.719196][ T7877] xt_hashlimit: overflow, rate too high: 0 [ 450.924646][ T7904] trusted_key: encrypted_key: insufficient parameters specified [ 451.110763][ T7903] loop5: detected capacity change from 0 to 8 [ 451.566786][ T7903] SQUASHFS error: zlib decompression failed, data probably corrupt [ 451.633056][ T7903] SQUASHFS error: Failed to read block 0x4e8: -5 [ 451.684670][ T27] audit: type=1800 audit(1744277138.656:8): pid=7903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1020" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 452.116613][ T7929] xt_hashlimit: overflow, rate too high: 0 [ 453.352357][ T7946] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 453.361267][ T7946] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 453.373025][ T7946] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 454.711396][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 454.730288][ T7949] trusted_key: encrypted_key: insufficient parameters specified [ 455.859983][ T7975] device syz_tun entered promiscuous mode [ 455.872612][ T7975] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan2: link becomes ready [ 455.889752][ T7977] xt_hashlimit: overflow, rate too high: 0 [ 455.901419][ T7975] device syz_tun left promiscuous mode [ 456.945683][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 457.084576][ T8000] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1047'. [ 457.104451][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.111883][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.121011][ T7993] trusted_key: encrypted_key: insufficient parameters specified [ 458.044838][ T7] usb 6-1: device descriptor read/64, error -71 [ 458.196120][ T8013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1051'. [ 459.446040][ T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 460.091156][ T8037] xt_hashlimit: overflow, rate too high: 0 [ 462.000289][ T8057] trusted_key: encrypted_key: insufficient parameters specified [ 463.498059][ T8077] tmpfs: Unknown parameter 'usrquota' [ 463.868914][ T8089] xt_hashlimit: overflow, rate too high: 0 [ 470.236466][ T8144] xt_hashlimit: overflow, rate too high: 0 [ 473.206610][ T8175] xt_CT: You must specify a L4 protocol and not use inversions on it [ 473.234234][ T8175] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 475.132939][ T8199] xt_nfacct: accounting object `syz1' does not exists [ 480.528531][ T8250] xt_CT: You must specify a L4 protocol and not use inversions on it [ 480.530948][ T8250] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 482.447824][ T8262] xt_nfacct: accounting object `syz1' does not exists [ 488.163047][ T8345] loop5: detected capacity change from 0 to 8 [ 488.193085][ T8340] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 488.202187][ T8340] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 488.358326][ T8345] SQUASHFS error: zlib decompression failed, data probably corrupt [ 488.366628][ T8345] SQUASHFS error: Failed to read block 0x4e8: -5 [ 488.374626][ T27] audit: type=1800 audit(1744277175.346:9): pid=8345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1128" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 488.408129][ T8345] SQUASHFS error: Failed to read block 0x6e6: -5 [ 488.414682][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.422094][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.428954][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.435146][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.442500][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.449361][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.455549][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.463002][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.469856][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.476068][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.483362][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.490197][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.496453][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.503746][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.510618][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.516953][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.524248][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.531069][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.537285][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.544560][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.551474][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.557735][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.565029][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.571874][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.578092][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.585370][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.592686][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.598916][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.606248][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.613073][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.619399][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.626740][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.633548][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.639789][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.647112][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.653889][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.660156][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.667502][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.674284][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.680808][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.688330][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.695111][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.701361][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.708680][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.715470][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.721801][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.729139][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.735979][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.742157][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.749481][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.756314][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.762509][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.769941][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.776795][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.783001][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.790344][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.797169][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.803351][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.810671][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.817500][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.823797][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.831122][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.837950][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.844130][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.851476][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.858326][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.864515][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.871854][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.878698][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.884876][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.892189][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.899020][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.905199][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.912636][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.919470][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.925854][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.933130][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.940005][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.946250][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.953521][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.960368][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.966610][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.973879][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 488.980721][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 488.986970][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 488.994257][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 489.001087][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 489.007321][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 489.014608][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 489.021479][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 489.027729][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 489.035450][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 489.042289][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 489.048531][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 489.055854][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 489.062629][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 489.068886][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 489.076224][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 489.083044][ T8345] SQUASHFS error: Failed to read block 0x0: -5 [ 489.089305][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 489.096636][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 489.103476][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 489.110831][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 489.117725][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 489.125023][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 489.131898][ T8345] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 489.139233][ T8345] SQUASHFS error: read_indexes: reading block [6e4:0] [ 489.180479][ T8343] xt_CT: You must specify a L4 protocol and not use inversions on it [ 496.114248][ T8408] trusted_key: encrypted_key: master key parameter 'defau' is invalid [ 497.505954][ T8415] xt_nfacct: accounting object `syz1' does not exists [ 498.699605][ T8423] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.935881][ T4358] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 500.027597][ T8423] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.121802][ T4358] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.151379][ T4358] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.182975][ T4358] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 500.184532][ T8423] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.213877][ T4358] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 500.245203][ T4358] usb 6-1: SerialNumber: syz [ 500.413161][ T8423] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.497493][ T4358] usb 6-1: cannot find UAC_HEADER [ 500.527761][ T8441] xt_hashlimit: overflow, rate too high: 0 [ 500.596232][ T4358] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 500.664988][ T4358] usb 6-1: USB disconnect, device number 4 [ 500.693840][ T8443] udevd[8443]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.779115][ T8423] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.860820][ T8423] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.970368][ T8423] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.056337][ T8423] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.911521][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.918024][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.919103][ T8482] xt_nfacct: accounting object `syz1' does not exists [ 510.390648][ T8574] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 510.399727][ T8574] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 510.483312][ T8575] mmap: syz.4.1168 (8575) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 512.507132][ T8597] xt_nfacct: accounting object `syz1' does not exists [ 516.216636][ T8618] trusted_key: encrypted_key: master key parameter 'defaul' is invalid [ 516.695158][ T8628] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 516.704259][ T8628] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 516.858183][ T8626] loop5: detected capacity change from 0 to 8 [ 516.883374][ T8626] SQUASHFS error: zlib decompression failed, data probably corrupt [ 516.891465][ T8626] SQUASHFS error: Failed to read block 0x4e8: -5 [ 516.945818][ T27] audit: type=1800 audit(1744277203.876:10): pid=8626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1184" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 522.895616][ T8671] libceph: resolve '. [ 522.895616][ T8671] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 522.895616][ T8671] ' (ret=-3): failed [ 525.827035][ T8713] trusted_key: encrypted_key: master key parameter 'defaul' is invalid [ 528.535429][ T8741] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.610122][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1214'. [ 530.360425][ T8741] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.405147][ T8761] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 530.461112][ T8771] libceph: resolve '. [ 530.461112][ T8771] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 530.461112][ T8771] ' (ret=-3): failed [ 530.482578][ T8761] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 531.423604][ T8741] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.348247][ T8741] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.446506][ T8741] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.535251][ T8741] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.914847][ T8741] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.647482][ T8741] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.200490][ T8872] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 535.209647][ T8872] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 536.389255][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1234'. [ 538.714561][ T2152] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 539.395758][ T2152] usb 6-1: Using ep0 maxpacket: 16 [ 539.402833][ T2152] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.425718][ T2152] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.435519][ T2152] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 539.459207][ T2152] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 539.473550][ T2152] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.496448][ T2152] usb 6-1: config 0 descriptor?? [ 539.626084][ T2152] usbhid 6-1:0.0: can't add hid device: -71 [ 539.634476][ T2152] usbhid: probe of 6-1:0.0 failed with error -71 [ 539.691991][ T2152] usb 6-1: USB disconnect, device number 5 [ 539.850950][ T8926] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.073807][ T8926] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.422217][ T8937] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 540.431398][ T8937] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 541.575068][ T8926] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.684623][ T8926] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.975300][ T8926] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.013597][ T8926] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.046850][ T8926] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.063009][ T8926] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.224157][ T8979] device syz_tun entered promiscuous mode [ 543.232672][ T8979] device syz_tun left promiscuous mode [ 545.155543][ T9005] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.239292][ T9005] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.315343][ T9005] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.396405][ T9005] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.524855][ T9005] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.567210][ T9005] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.613706][ T9005] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.660658][ T9005] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.740147][ T9137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1307'. [ 558.756748][ T9137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1307'. [ 563.248251][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.258545][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.703079][ T9187] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1322'. [ 564.763573][ T9187] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1322'. [ 568.190653][ T4791] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 568.391858][ T4791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.421472][ T4791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.443734][ T4791] usb 6-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 568.480077][ T4791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.501961][ T4791] usb 6-1: config 0 descriptor?? [ 569.429889][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1334'. [ 569.493239][ T4791] hid-rmi 0003:0461:4E72.0001: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.5-1/input0 [ 570.979375][ T4358] usb 6-1: USB disconnect, device number 6 [ 579.446155][ T9365] overlayfs: failed to clone upperpath [ 592.343391][ T9500] xt_CT: You must specify a L4 protocol and not use inversions on it [ 597.165967][ T9560] netlink: 'syz.1.1434': attribute type 10 has an invalid length. [ 597.196544][ T9560] device syz_tun entered promiscuous mode [ 597.220941][ T9560] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 605.047569][ T9645] autofs4:pid:9645:autofs_fill_super: called with bogus options [ 606.200861][ T9656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1473'. [ 606.212222][ T9656] xt_nfacct: accounting object `syz1' does not exists [ 612.002690][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1485'. [ 612.017446][ T9701] xt_nfacct: accounting object `syz1' does not exists [ 617.273294][ T9745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1499'. [ 617.299201][ T9745] xt_nfacct: accounting object `syz1' does not exists [ 621.841747][ T9773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1507'. [ 623.667401][ T9797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1515'. [ 624.846174][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.852514][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.678911][ T9816] overlayfs: failed to clone upperpath [ 627.393824][ T4322] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 627.585811][ T4322] usb 6-1: Using ep0 maxpacket: 32 [ 627.595506][ T4322] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 627.824377][ T9836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1528'. [ 628.606257][ T4322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.633579][ T4322] usb 6-1: Product: syz [ 628.645054][ T4322] usb 6-1: Manufacturer: syz [ 628.663510][ T4322] usb 6-1: SerialNumber: syz [ 628.976552][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1531'. [ 628.986809][ T9844] xt_nfacct: accounting object `syz1' does not exists [ 629.226481][ T4322] usb 6-1: config 0 descriptor?? [ 629.273051][ T4322] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 629.611653][ T4322] gspca_stk1135: reg_w 0x2 err -71 [ 629.628349][ T4322] gspca_stk1135: serial bus timeout: status=0x00 [ 629.685893][ T4322] gspca_stk1135: Sensor write failed [ 629.721829][ T4322] gspca_stk1135: serial bus timeout: status=0x00 [ 629.894336][ T4322] gspca_stk1135: Sensor write failed [ 629.908395][ T4322] gspca_stk1135: serial bus timeout: status=0x00 [ 629.950120][ T4322] gspca_stk1135: Sensor read failed [ 630.119613][ T4322] gspca_stk1135: serial bus timeout: status=0x00 [ 630.127007][ T4322] gspca_stk1135: Sensor read failed [ 630.132711][ T4322] gspca_stk1135: Detected sensor type unknown (0x0) [ 630.139740][ T4322] gspca_stk1135: serial bus timeout: status=0x00 [ 630.146901][ T4322] gspca_stk1135: Sensor read failed [ 630.156847][ T4322] gspca_stk1135: serial bus timeout: status=0x00 [ 630.163408][ T4322] gspca_stk1135: Sensor read failed [ 630.183908][ T4322] gspca_stk1135: serial bus timeout: status=0x00 [ 630.204182][ T4322] gspca_stk1135: Sensor write failed [ 630.395898][ T4322] gspca_stk1135: serial bus timeout: status=0x00 [ 630.402711][ T4322] gspca_stk1135: Sensor write failed [ 630.417753][ T4322] stk1135: probe of 6-1:0.0 failed with error -71 [ 630.444634][ T4322] usb 6-1: USB disconnect, device number 7 [ 632.099253][ T9873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1540'. [ 633.626332][ T9884] xt_nfacct: accounting object `syz1' does not exists [ 637.374750][ T9916] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1553'. [ 638.961981][ T9931] xt_nfacct: accounting object `syz1' does not exists [ 640.798029][ T9950] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 640.807146][ T9950] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 643.372925][ T9970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1568'. [ 644.296929][ T9974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1569'. [ 644.935813][ T9983] xt_nfacct: accounting object `syz1' does not exists [ 648.406584][T10017] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1580'. [ 649.016111][T10021] overlayfs: failed to clone upperpath [ 649.344726][T10029] xt_nfacct: accounting object `syz1' does not exists [ 655.220051][T10077] overlayfs: failed to clone upperpath [ 655.748841][T10087] xt_nfacct: accounting object `syz1' does not exists [ 657.069378][T10097] netlink: 'syz.5.1605': attribute type 10 has an invalid length. [ 657.703397][T10097] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 663.762512][T10150] xt_nfacct: accounting object `syz1' does not exists [ 669.743170][T10222] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1638'. [ 674.249437][T10272] overlayfs: failed to clone upperpath [ 686.770967][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.777342][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.574059][T10407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 691.817674][T10445] xt_CT: You must specify a L4 protocol and not use inversions on it [ 691.824759][T10445] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 698.339832][T10497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 698.869139][T10509] capability: warning: `syz.5.1721' uses deprecated v2 capabilities in a way that may be insecure [ 698.885155][T10508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1720'. [ 702.298578][T10545] xt_CT: You must specify a L4 protocol and not use inversions on it [ 702.306523][T10545] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 705.610102][T10581] netlink: 'syz.0.1742': attribute type 10 has an invalid length. [ 706.364983][T10581] team0: Device veth1_macvtap failed to register rx_handler [ 707.028162][T10593] overlayfs: failed to clone upperpath [ 709.227416][T10616] device wg1 entered promiscuous mode [ 711.126919][T10631] overlayfs: failed to clone upperpath [ 712.199812][T10645] fuse: Bad value for 'fd' [ 714.232008][T10670] xt_CT: You must specify a L4 protocol and not use inversions on it [ 714.253159][T10670] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 717.562484][T10712] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1778'. [ 719.270802][T10720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 721.554216][T10749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 723.543537][T10767] xt_CT: You must specify a L4 protocol and not use inversions on it [ 724.140595][T10774] netlink: 'syz.0.1797': attribute type 1 has an invalid length. [ 724.156763][T10774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1797'. [ 724.976791][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1803'. [ 727.845636][T10818] netlink: 'syz.1.1812': attribute type 1 has an invalid length. [ 727.853459][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1812'. [ 730.374993][T10844] overlayfs: failed to clone upperpath [ 730.613439][T10850] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 732.025209][T10865] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1826'. [ 733.072922][T10877] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1835'. [ 736.196677][T10897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 737.117070][T10913] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1845'. [ 737.335339][T10914] 9pnet_fd: Insufficient options for proto=fd [ 740.387274][T10944] overlayfs: failed to resolve './file1': -2 [ 740.986806][T10956] lo speed is unknown, defaulting to 1000 [ 740.996910][T10956] lo speed is unknown, defaulting to 1000 [ 741.005780][T10956] lo speed is unknown, defaulting to 1000 [ 741.093508][T10956] infiniband sz1: set down [ 741.098492][T10956] infiniband sz1: added lo [ 741.112656][ T4322] lo speed is unknown, defaulting to 1000 [ 741.160537][T10956] RDS/IB: sz1: added [ 741.165813][T10956] smc: adding ib device sz1 with port count 1 [ 741.172253][T10956] smc: ib device sz1 port 1 has pnetid [ 741.189385][T10956] lo speed is unknown, defaulting to 1000 [ 741.284832][ T4322] lo speed is unknown, defaulting to 1000 [ 741.293323][T10956] lo speed is unknown, defaulting to 1000 [ 741.415592][T10956] lo speed is unknown, defaulting to 1000 [ 741.517995][T10956] lo speed is unknown, defaulting to 1000 [ 741.588202][T10956] lo speed is unknown, defaulting to 1000 [ 742.213976][T10975] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1861'. [ 743.736195][ T14] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 744.260961][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.300712][ T14] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 744.350214][ T14] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 744.415671][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.456711][ T14] usb 6-1: config 0 descriptor?? [ 744.484627][ T14] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 744.504463][ T14] dvb-usb: bulk message failed: -22 (3/0) [ 744.523905][ T14] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 744.543169][ T14] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 744.552259][ T14] usb 6-1: media controller created [ 744.565924][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 744.611671][ T14] dvb-usb: bulk message failed: -22 (6/0) [ 744.634184][ T14] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 744.659204][ T14] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10 [ 744.693289][T10995] dibusb: i2c wr: len=116 is too big! [ 744.693289][T10995] [ 744.776211][ T14] dvb-usb: schedule remote query interval to 150 msecs. [ 744.957687][T11016] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1877'. [ 745.413028][T11019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1879'. [ 745.909716][ T14] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 745.922716][ T14] usb 6-1: USB disconnect, device number 8 [ 746.082479][ T14] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 746.318289][T11032] ptrace attach of "./syz-executor exec"[4252] was attempted by "./syz-executor exec"[11032] [ 747.569159][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.577820][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.807456][T11048] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 748.791438][T11062] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1891'. [ 750.030370][T11078] infiniband syz0: set active [ 750.035204][T11078] infiniband syz0: added bond0 [ 750.444166][T11078] infiniband syz0: Couldn't open port 1 [ 750.565131][T11078] RDS/IB: syz0: added [ 750.569250][T11078] smc: adding ib device syz0 with port count 1 [ 750.575403][T11078] smc: ib device syz0 port 1 has pnetid [ 752.146313][T11102] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1906'. [ 753.125748][ T14] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 753.330706][ T14] usb 6-1: Using ep0 maxpacket: 32 [ 753.343980][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.386975][ T14] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 753.427921][ T14] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 753.445018][ T14] usb 6-1: Product: syz [ 753.452051][ T14] usb 6-1: Manufacturer: syz [ 753.473899][ T14] usb 6-1: SerialNumber: syz [ 753.647878][ T14] usb 6-1: config 0 descriptor?? [ 754.346696][T11135] xt_CT: You must specify a L4 protocol and not use inversions on it [ 754.683285][ T14] usb 6-1: USB disconnect, device number 9 [ 757.234266][T11175] xt_CT: You must specify a L4 protocol and not use inversions on it [ 761.765181][T11221] xt_CT: You must specify a L4 protocol and not use inversions on it [ 765.985743][ T4322] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 766.265674][ T4322] usb 6-1: Using ep0 maxpacket: 32 [ 766.286674][ T4322] usb 6-1: config 1 interface 0 has no altsetting 0 [ 766.317930][ T4322] usb 6-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 766.352564][ T4322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.383740][ T4322] usb 6-1: Product: syz [ 766.388338][ T4322] usb 6-1: Manufacturer: syz [ 766.392967][ T4322] usb 6-1: SerialNumber: syz [ 766.555343][T11293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1975'. [ 766.713790][ T4322] usbhid 6-1:1.0: can't add hid device: -71 [ 766.720693][ T4322] usbhid: probe of 6-1:1.0 failed with error -71 [ 766.729221][ T4322] usb 6-1: USB disconnect, device number 10 [ 771.384652][T11348] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1992'. [ 772.751764][T11374] netlink: 'syz.2.1997': attribute type 4 has an invalid length. [ 772.787053][T11374] netlink: 'syz.2.1997': attribute type 4 has an invalid length. [ 772.984924][T11379] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1998'. [ 776.921025][T11422] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2014'. [ 778.049858][T11436] xt_nfacct: accounting object `syz1' does not exists [ 780.627988][T11466] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2027'. [ 782.678536][T11493] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2039'. [ 783.697179][T11504] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2043'. [ 784.562619][T11512] xt_CT: You must specify a L4 protocol and not use inversions on it [ 784.571547][T11512] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 787.122366][T11537] netlink: 'syz.2.2055': attribute type 6 has an invalid length. [ 787.708280][T11548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2056'. [ 788.292562][T11557] netlink: 'syz.0.2060': attribute type 1 has an invalid length. [ 788.582205][T11557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 789.493395][T11566] bond1: (slave gretap1): making interface the new active one [ 789.574908][T11566] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 789.671512][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 789.865714][T11566] syz.0.2060 (11566) used greatest stack depth: 19504 bytes left [ 790.594950][T11593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2070'. [ 791.979455][T11607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2077'. [ 794.310643][T11607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.538528][T11607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.566775][T11607] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 794.599865][T11607] bond0 (unregistering): Released all slaves [ 795.362241][T11649] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 802.586070][ T4791] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 803.605860][ T4791] usb 6-1: Using ep0 maxpacket: 16 [ 804.014759][ T4791] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 804.031521][ T4791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.032063][T11746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2120'. [ 804.055402][ T4791] usb 6-1: config 0 descriptor?? [ 807.045735][ T4791] usb 6-1: can't set config #0, error -71 [ 807.069666][ T4791] usb 6-1: USB disconnect, device number 11 [ 809.097383][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.103757][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.752749][T11796] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 811.621532][T11807] netlink: 'syz.0.2139': attribute type 1 has an invalid length. [ 811.783697][T11817] syz.2.2142 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 811.813569][T11817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'. [ 813.477464][T11835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2147'. [ 813.504056][T11835] trusted_key: encrypted_key: master key parameter is missing [ 814.181600][T11856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2153'. [ 821.675268][T11898] xt_CT: You must specify a L4 protocol and not use inversions on it [ 824.029225][ T27] audit: type=1326 audit(1744277511.011:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11917 comm="syz.0.2166" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f3cd8d169 code=0x0 [ 826.690024][T11944] input: syz0 as /devices/virtual/input/input11 [ 828.272421][T11955] tmpfs: Unknown parameter 'usrquota' [ 831.748032][T11997] bridge0: port 3(team0) entered blocking state [ 831.799759][T11997] bridge0: port 3(team0) entered disabled state [ 831.830954][T11997] device team0 entered promiscuous mode [ 831.851146][T11997] device team_slave_0 entered promiscuous mode [ 831.871311][T11997] device team_slave_1 entered promiscuous mode [ 831.894680][T11997] bridge0: port 3(team0) entered blocking state [ 831.901136][T11997] bridge0: port 3(team0) entered forwarding state [ 834.647217][ T22] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 835.007171][ T22] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 835.165725][ T22] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 835.220732][ T22] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 835.246751][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.299566][T12017] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 835.620986][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2200'. [ 836.463411][T12049] bridge0: port 3(team0) entered blocking state [ 836.513327][T12049] bridge0: port 3(team0) entered disabled state [ 836.550128][T12049] device team0 entered promiscuous mode [ 836.569221][ T4791] usb 6-1: USB disconnect, device number 12 [ 836.582731][T12049] device team_slave_0 entered promiscuous mode [ 836.599593][T12049] device team_slave_1 entered promiscuous mode [ 836.899555][T12053] netlink: 'syz.1.2210': attribute type 10 has an invalid length. [ 837.522799][T12056] overlayfs: failed to clone upperpath [ 838.907117][T12077] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 839.002388][T12065] xt_CT: You must specify a L4 protocol and not use inversions on it [ 841.848327][T12116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.390678][T12133] input: syz0 as /devices/virtual/input/input12 [ 849.409038][T12167] overlayfs: failed to clone upperpath [ 860.271965][ T2152] kworker/dying (2152) used greatest stack depth: 19456 bytes left [ 860.618720][T12269] overlayfs: failed to clone upperpath [ 860.698418][T12257] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 860.725283][T12257] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 863.767390][T12308] overlayfs: failed to clone upperpath [ 866.935746][ T27] audit: type=1326 audit(1744277553.911:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12342 comm="syz.2.2294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cb38d169 code=0x7ffc0000 [ 870.631851][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.638484][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.919776][T12410] xt_CT: You must specify a L4 protocol and not use inversions on it [ 874.929018][T12410] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 882.546755][T12465] overlayfs: failed to clone upperpath [ 917.375833][T12737] overlayfs: failed to clone upperpath [ 925.398537][T12804] overlayfs: failed to clone upperpath [ 931.527753][T12844] overlayfs: failed to clone upperpath [ 931.956276][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.962697][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 940.197144][T12907] netlink: 452 bytes leftover after parsing attributes in process `syz.5.2437'. [ 942.840619][T12930] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 942.850149][T12930] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 945.146448][T12946] overlayfs: failed to clone upperpath [ 974.301635][T13193] netlink: 452 bytes leftover after parsing attributes in process `syz.2.2509'. [ 974.720393][T13204] overlayfs: failed to clone upperpath [ 988.941018][T13316] overlayfs: failed to clone upperpath [ 990.788540][ T4266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 990.799136][ T4266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 990.807476][ T4266] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 990.818537][ T4266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 990.831863][ T4266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 990.850387][ T4266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 990.913371][T13339] bridge0: port 1(team0) entered blocking state [ 990.923769][T13339] bridge0: port 1(team0) entered disabled state [ 990.944632][T13339] device team0 entered promiscuous mode [ 991.038181][ T41] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.133022][T13332] lo speed is unknown, defaulting to 1000 [ 991.196591][ T41] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.519130][ T41] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.151265][ T41] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.925645][ T48] Bluetooth: hci3: command 0x0409 tx timeout [ 994.068122][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.077352][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.005796][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 997.085945][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 998.974968][T13422] xt_CT: You must specify a L4 protocol and not use inversions on it [ 998.983347][T13422] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 999.188429][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 999.576660][T13332] chnl_net:caif_netlink_parms(): no params data found [ 1000.410359][T13332] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.474378][T13332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.533761][T13332] device bridge_slave_0 entered promiscuous mode [ 1000.589329][T13332] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.620068][T13332] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.218897][T13332] device bridge_slave_1 entered promiscuous mode [ 1001.941906][T13458] netlink: 452 bytes leftover after parsing attributes in process `syz.2.2568'. [ 1002.819634][T13332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.639568][T13332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.272053][T13332] team0: Port device team_slave_0 added [ 1005.312566][ T41] device hsr_slave_0 left promiscuous mode [ 1005.470792][ T41] device hsr_slave_1 left promiscuous mode [ 1005.494341][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1005.618379][T13487] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1005.795107][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1005.861598][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1005.873553][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1005.886964][ T41] device team0 left promiscuous mode [ 1005.893790][ T41] device team_slave_0 left promiscuous mode [ 1005.909708][ T41] device team_slave_1 left promiscuous mode [ 1005.916688][ T41] bridge0: port 3(team0) entered disabled state [ 1005.936179][ T41] device bridge_slave_1 left promiscuous mode [ 1005.943817][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.967523][ T41] device bridge_slave_0 left promiscuous mode [ 1005.981148][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.084543][ T41] device veth1_macvtap left promiscuous mode [ 1006.111099][ T41] device veth0_macvtap left promiscuous mode [ 1006.249533][ T41] device veth1_vlan left promiscuous mode [ 1006.295525][ T41] device veth0_vlan left promiscuous mode [ 1006.632131][T13509] netlink: 452 bytes leftover after parsing attributes in process `syz.2.2587'. [ 1011.504390][T13540] input: syz0 as /devices/virtual/input/input15 [ 1012.126550][T13552] loop5: detected capacity change from 0 to 2048 [ 1012.173189][T13552] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1012.259881][ T7267] EXT4-fs (loop5): unmounting filesystem. [ 1012.383579][ T41] team0 (unregistering): Port device team_slave_1 removed [ 1012.640622][T13558] netlink: 452 bytes leftover after parsing attributes in process `syz.5.2599'. [ 1012.859820][ T41] team0 (unregistering): Port device team_slave_0 removed [ 1018.568475][T13603] netlink: 452 bytes leftover after parsing attributes in process `syz.5.2610'. [ 1019.342113][T13332] team0: Port device team_slave_1 added [ 1019.360161][ T4502] smc: removing ib device sz1 [ 1019.807616][T13332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.955484][T13332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.711758][T13332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.713051][T13634] input: syz0 as /devices/virtual/input/input16 [ 1021.841164][T13332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1021.867672][T13332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.064583][T13332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.583514][T13645] netlink: 452 bytes leftover after parsing attributes in process `syz.2.2622'. [ 1025.642451][T13332] device hsr_slave_0 entered promiscuous mode [ 1025.865644][T13332] device hsr_slave_1 entered promiscuous mode [ 1025.946061][T13332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1025.992394][T13332] Cannot create hsr debugfs directory [ 1026.845236][T13688] netlink: 452 bytes leftover after parsing attributes in process `syz.5.2632'. [ 1026.890957][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1026.901964][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1026.911302][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1026.924160][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1026.933872][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1026.942210][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1028.551656][T13332] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1028.676689][T13332] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1028.821890][T13332] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1028.866995][T13332] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1029.025973][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 1030.241013][T13332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.185700][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 1031.394499][T13332] 8021q: adding VLAN 0 to HW filter on device team0 [ 1031.560209][ T6774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1031.586352][ T6774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1031.671973][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1031.690974][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1031.731648][ T6788] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.738854][ T6788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1031.785864][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1031.802555][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1031.867150][ T6788] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.874350][ T6788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.914945][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1031.979529][T13686] chnl_net:caif_netlink_parms(): no params data found [ 1032.015604][ T6774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1032.024600][ T6774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1032.192559][ T6774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1032.227293][ T6774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1032.276209][ T6774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1032.332648][ T6774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1032.490312][ T6774] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1032.503181][ T6774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1032.534439][ T6774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1032.708414][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1032.723669][ T6788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1032.747593][T13332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1033.126025][T13686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.142268][T13686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.178515][T13686] device bridge_slave_0 entered promiscuous mode [ 1033.221368][T13686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.243087][T13686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.250343][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 1033.609730][T13686] device bridge_slave_1 entered promiscuous mode [ 1034.124495][T13686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.204413][T13686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.351446][T13686] team0: Port device team_slave_0 added [ 1035.326737][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 1035.916890][T13686] team0: Port device team_slave_1 added [ 1036.180551][T13332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.256438][ T6792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1036.286434][ T6792] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1036.539716][T13686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1036.618547][T13686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1036.663347][T13686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.686195][ T41] device hsr_slave_0 left promiscuous mode [ 1036.766931][ T41] device hsr_slave_1 left promiscuous mode [ 1036.964400][ T41] device team0 left promiscuous mode [ 1036.989191][ T41] bridge0: port 1(team0) entered disabled state [ 1037.012542][T13805] overlayfs: failed to clone upperpath [ 1037.275460][T13808] input: syz0 as /devices/virtual/input/input17 [ 1043.771064][ T41] bond0 (unregistering): Released all slaves [ 1043.864417][T13686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1043.871454][T13686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.897860][T13686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.913004][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1043.922275][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1044.191045][T13686] device hsr_slave_0 entered promiscuous mode [ 1044.284721][T13686] device hsr_slave_1 entered promiscuous mode [ 1044.295077][T13868] overlayfs: failed to clone upperpath [ 1044.332552][T13686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1044.342440][T13686] Cannot create hsr debugfs directory [ 1044.356176][T13866] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 1044.528886][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1044.564424][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1044.620881][T13332] device veth0_vlan entered promiscuous mode [ 1044.630223][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1044.661830][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1045.463770][T13332] device veth1_vlan entered promiscuous mode [ 1045.502305][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1045.634447][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1045.658037][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1045.704457][T13332] device veth0_macvtap entered promiscuous mode [ 1045.763551][T13332] device veth1_macvtap entered promiscuous mode [ 1045.825216][T13332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1045.866760][T13332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.905555][T13332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1045.950558][T13332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.980470][T13332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1046.030180][T13332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.050908][T13332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1046.068836][T13332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.095540][T13332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.125515][T13332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.155493][T13332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.185671][T13332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1046.245522][T13332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1046.277462][T13332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1046.284992][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1046.304579][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1046.316742][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1046.346343][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1046.382125][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1046.402696][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1046.500252][T13332] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.535710][T13332] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.544489][T13332] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.575528][T13332] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.696583][T13686] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1046.737235][T13686] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1046.773951][T13686] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1046.836891][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.852935][T13686] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1046.865040][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.919433][ T6765] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1047.037447][ T6763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.064170][ T6763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.186004][ T6763] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1049.589085][T13686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.608935][T13937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2677'. [ 1049.639476][T13932] overlayfs: failed to clone upperpath [ 1049.690517][T13937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2677'. [ 1049.784704][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1049.844154][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1049.873999][T13686] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.927224][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1049.965283][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1049.996080][ T4502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.003215][ T4502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.075580][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1050.829497][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1051.016350][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1051.076506][ T4630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.083676][ T4630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.124069][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1051.161085][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1051.191760][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1051.274135][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1051.409659][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1051.445268][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1052.300903][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1052.311372][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1052.320443][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1052.360153][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1052.464093][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1052.509101][T13686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1052.675651][ T5406] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1052.887427][ T5406] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.924010][ T5406] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1052.962636][ T5406] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1052.985052][ T5406] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.095296][T13991] overlayfs: failed to clone upperpath [ 1053.232994][T13974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.262099][T13974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.301171][T13974] xt_TCPMSS: Only works on TCP SYN packets [ 1053.492825][ T14] usb 6-1: USB disconnect, device number 13 [ 1053.649161][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1053.670420][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1053.735322][T13686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.835906][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.842547][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.231431][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1056.280858][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1056.419026][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1056.428635][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1056.441108][T13686] device veth0_vlan entered promiscuous mode [ 1056.449467][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1056.459739][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1056.473189][T13686] device veth1_vlan entered promiscuous mode [ 1056.531615][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1056.558877][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1056.567178][T14040] netlink: 452 bytes leftover after parsing attributes in process `syz.2.2696'. [ 1056.606740][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1056.616016][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1056.631084][T13686] device veth0_macvtap entered promiscuous mode [ 1056.692520][T13686] device veth1_macvtap entered promiscuous mode [ 1056.806578][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.870477][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.923580][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.111130][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.169884][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.205455][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.215334][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.265870][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.287045][T13686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.304173][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1057.408345][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1058.196032][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1058.204941][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1058.656168][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.720816][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.745496][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.797231][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.831205][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.890755][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.923410][T13686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.944587][T13686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.956539][T13686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1058.963958][T14055] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 1058.975163][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1058.988995][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1059.003407][T13686] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.029250][T13686] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.054952][T13686] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.079737][T13686] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.263826][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.277641][ T14] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1059.287254][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.334429][ T6792] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1059.355770][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.378413][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.412245][ T6795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1059.485520][ T14] usb 6-1: Using ep0 maxpacket: 8 [ 1059.492652][ T14] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1059.520625][ T14] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1059.716370][ T14] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1059.795471][ T14] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1060.051695][ T14] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1060.061868][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.072395][ T14] usb 6-1: GET_CAPABILITIES returned 0 [ 1061.078212][ T14] usbtmc 6-1:16.0: can't read capabilities [ 1061.454262][T14096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2706'. [ 1061.592251][T14101] overlayfs: missing 'workdir' [ 1061.611726][T14101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.622596][T14101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.965936][T14105] IPVS: length: 139 != 8 [ 1063.423324][ T14] usb 6-1: USB disconnect, device number 14 [ 1064.456529][T14127] netlink: 452 bytes leftover after parsing attributes in process `syz.5.2712'. [ 1064.495516][T13714] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1064.811516][T13714] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1064.855586][T13714] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.663492][T13714] usb 7-1: config 0 descriptor?? [ 1065.671422][T13714] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1069.248238][T14182] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.2722'. [ 1070.961612][T13714] usb 7-1: Detected FT232A [ 1070.967822][T13714] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1071.087365][ T4791] usb 7-1: USB disconnect, device number 2 [ 1071.114003][ T4791] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1071.294145][ T4791] ftdi_sio 7-1:0.0: device disconnected [ 1072.039089][T14218] netlink: 452 bytes leftover after parsing attributes in process `syz.6.2731'. [ 1072.203203][T14220] netlink: 'syz.0.2732': attribute type 5 has an invalid length. [ 1077.731505][T14278] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1078.653227][T14279] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(12) [ 1078.659884][T14279] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1078.667289][T14271] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1078.673846][T14271] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1078.683197][T14275] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(13) [ 1078.689860][T14275] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1078.705668][T14278] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(19) [ 1078.712325][T14278] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1078.746741][T14279] vhci_hcd vhci_hcd.0: Device attached [ 1078.766298][T14296] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1078.777751][T14279] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1078.790160][T14278] vhci_hcd vhci_hcd.0: Device attached [ 1078.824875][T14275] vhci_hcd vhci_hcd.0: Device attached [ 1078.862596][T14296] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1078.885572][T14271] vhci_hcd vhci_hcd.0: Device attached [ 1078.917291][T14278] vhci_hcd vhci_hcd.0: port 0 already used [ 1078.934919][T14294] vhci_hcd: connection closed [ 1078.935257][T14290] vhci_hcd: connection closed [ 1078.935496][T14281] vhci_hcd: connection closed [ 1078.945680][ T4322] vhci_hcd: vhci_device speed not set [ 1079.086438][T14272] vhci_hcd: connection closed [ 1079.854114][ T6763] vhci_hcd: stop threads [ 1079.885362][ T6763] vhci_hcd: release socket [ 1079.895285][ T6763] vhci_hcd: disconnect device [ 1079.900486][ T4322] usb 43-4: new full-speed USB device number 2 using vhci_hcd [ 1079.915617][ T27] audit: type=1326 audit(1744277766.891:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.2.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cb38d169 code=0x7ffc0000 [ 1079.920747][T14291] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1080.005564][ T27] audit: type=1326 audit(1744277766.901:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.2.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cb38d169 code=0x7ffc0000 [ 1080.035675][ T6763] vhci_hcd: stop threads [ 1080.045649][ T27] audit: type=1326 audit(1744277766.921:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.2.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f15cb38d169 code=0x7ffc0000 [ 1080.048783][ T6763] vhci_hcd: release socket [ 1080.260317][ T6763] vhci_hcd: disconnect device [ 1080.268158][ T6763] vhci_hcd: stop threads [ 1080.303660][ T6763] vhci_hcd: release socket [ 1081.029358][ T6763] vhci_hcd: disconnect device [ 1081.035030][ T6763] vhci_hcd: stop threads [ 1081.057609][ T6763] vhci_hcd: release socket [ 1081.065540][ T27] audit: type=1326 audit(1744277766.921:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.2.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cb38d169 code=0x7ffc0000 [ 1081.086724][ T6763] vhci_hcd: disconnect device [ 1081.331532][ T27] audit: type=1326 audit(1744277766.921:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.2.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cb38d169 code=0x7ffc0000 [ 1081.360580][ T27] audit: type=1326 audit(1744277766.931:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.2.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f15cb38bad0 code=0x7ffc0000 [ 1082.631069][ T27] audit: type=1326 audit(1744277766.931:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.2.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cb38d169 code=0x7ffc0000 [ 1082.659022][T14330] loop1: detected capacity change from 0 to 2048 [ 1082.924275][ T27] audit: type=1326 audit(1744277766.931:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.2.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cb38d169 code=0x7ffc0000 [ 1082.958009][T14330] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1083.014633][ T27] audit: type=1326 audit(1744277766.931:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.2.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f15cb38d169 code=0x7ffc0000 [ 1083.038504][ T27] audit: type=1326 audit(1744277766.931:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.2.2749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15cb38d169 code=0x7ffc0000 [ 1083.221949][T13332] EXT4-fs (loop1): unmounting filesystem. [ 1083.658447][T14363] Cannot find del_set index 4 as target [ 1083.704794][T14366] netlink: 452 bytes leftover after parsing attributes in process `syz.6.2761'. [ 1085.199650][ T4322] vhci_hcd: vhci_device speed not set [ 1086.146683][T14394] loop5: detected capacity change from 0 to 2048 [ 1086.355600][T14394] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1087.296612][ T7267] EXT4-fs (loop5): unmounting filesystem. [ 1091.854746][T14453] xt_nat: multiple ranges no longer supported [ 1092.549755][T14458] loop6: detected capacity change from 0 to 2048 [ 1092.916897][T14458] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1094.039721][T13686] EXT4-fs (loop6): unmounting filesystem. [ 1094.139141][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 1094.139157][ T27] audit: type=1326 audit(1744277781.121:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41f18d169 code=0x7ffc0000 [ 1094.614458][ T27] audit: type=1326 audit(1744277781.121:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41f18d169 code=0x7ffc0000 [ 1094.716013][ T27] audit: type=1326 audit(1744277781.151:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fa41f18d169 code=0x7ffc0000 [ 1094.739583][ T27] audit: type=1326 audit(1744277781.151:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41f18d169 code=0x7ffc0000 [ 1094.786499][ T27] audit: type=1326 audit(1744277781.151:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41f18d169 code=0x7ffc0000 [ 1094.808808][ C1] vkms_vblank_simulate: vblank timer overrun [ 1094.883926][ T27] audit: type=1326 audit(1744277781.151:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa41f18bad0 code=0x7ffc0000 [ 1094.907062][ T27] audit: type=1326 audit(1744277781.151:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41f18d169 code=0x7ffc0000 [ 1094.930083][ T27] audit: type=1326 audit(1744277781.151:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41f18d169 code=0x7ffc0000 [ 1095.012893][ T27] audit: type=1326 audit(1744277781.151:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fa41f18d169 code=0x7ffc0000 [ 1095.143547][ T27] audit: type=1326 audit(1744277781.991:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.5.2787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa41f18d169 code=0x7ffc0000 [ 1096.895639][ T5409] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1097.131106][ T5409] usb 2-1: config 0 has no interfaces? [ 1097.236542][ T5409] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1097.276622][ T5409] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.285196][ T5409] usb 2-1: Product: syz [ 1097.495720][ T5409] usb 2-1: Manufacturer: syz [ 1097.500390][ T5409] usb 2-1: SerialNumber: syz [ 1097.535144][ T5409] usb 2-1: config 0 descriptor?? [ 1100.810864][ T6768] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.925150][ T6768] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.132196][ T6768] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.282803][ T6768] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.301719][T14565] input: syz0 as /devices/virtual/input/input18 [ 1101.353657][ T4266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1101.365049][ T4266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1101.373744][ T4266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1101.383654][ T4266] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1101.391889][ T4266] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1101.400385][ T4266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1103.039401][ T5409] usb 2-1: can't set config #0, error -110 [ 1103.486903][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 1104.203725][ T4322] usb 2-1: USB disconnect, device number 4 [ 1105.742646][T14564] chnl_net:caif_netlink_parms(): no params data found [ 1105.965923][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 1106.216087][ T6768] bond1: (slave gretap1): Releasing active interface [ 1106.588649][T14615] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1106.604807][T14615] cramfs: wrong magic [ 1108.055622][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 1108.308618][T14564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.319163][T14564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.329508][T14564] device bridge_slave_0 entered promiscuous mode [ 1108.339466][T14564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.347735][T14564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.356690][T14564] device bridge_slave_1 entered promiscuous mode [ 1108.552750][T14564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.188931][T14564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.262084][T14645] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2819'. [ 1110.125734][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 1111.448692][T14564] team0: Port device team_slave_0 added [ 1111.840684][T14663] input: syz0 as /devices/virtual/input/input19 [ 1111.882611][T14564] team0: Port device team_slave_1 added [ 1112.283448][ T6768] device hsr_slave_0 left promiscuous mode [ 1112.345758][ T6768] device hsr_slave_1 left promiscuous mode [ 1112.386227][ T6768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1112.429974][ T6768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1112.478404][ T6768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1112.536181][ T6768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1112.590461][ T6768] device team0 left promiscuous mode [ 1112.616443][ T6768] device team_slave_0 left promiscuous mode [ 1112.640370][ T6768] device team_slave_1 left promiscuous mode [ 1112.672115][ T6768] bridge0: port 3(team0) entered disabled state [ 1112.700967][ T6768] device bridge_slave_1 left promiscuous mode [ 1112.725333][ T6768] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.755470][ T14] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1112.772880][ T6768] device bridge_slave_0 left promiscuous mode [ 1112.801347][ T6768] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.968667][ T6768] device veth0_macvtap left promiscuous mode [ 1112.974740][ T6768] device veth1_vlan left promiscuous mode [ 1113.050433][ T6768] device veth0_vlan left promiscuous mode [ 1113.137597][ T14] usb 7-1: descriptor type invalid, skip [ 1113.151452][ T14] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1113.166613][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 1113.519456][ T14] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1113.589480][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.615630][ T14] usb 7-1: Product: syz [ 1113.714004][ T14] usb 7-1: Manufacturer: syz [ 1113.735496][ T14] usb 7-1: SerialNumber: syz [ 1114.102419][ T14] cdc_ncm 7-1:1.0: bind() failure [ 1114.117704][ T14] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1114.124778][ T14] cdc_ncm 7-1:1.1: bind() failure [ 1114.750802][ T14] usb 7-1: USB disconnect, device number 3 [ 1114.896516][ T6768] infiniband syz0: set down [ 1116.219470][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.225858][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.549657][ T6768] bond1 (unregistering): Released all slaves [ 1120.230105][T14737] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input20 [ 1124.981870][ T6768] team0 (unregistering): Port device team_slave_1 removed [ 1125.306259][ T6768] team0 (unregistering): Port device team_slave_0 removed [ 1125.603581][ T6768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1125.816875][ T6768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1126.150557][ T5406] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1126.341084][ T5406] usb 6-1: Using ep0 maxpacket: 16 [ 1126.365441][ T5406] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1126.374539][ T5406] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1126.384361][ T5406] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1126.394340][ T5406] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1126.404206][ T5406] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1126.414223][ T5406] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1126.420991][ T5406] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1126.430417][ T5406] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.461674][ T5406] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 1126.542736][ T6788] smc: removing ib device syz0 [ 1126.542785][ T6768] bond0 (unregistering): Released all slaves [ 1126.650895][ T951] bond0 speed is unknown, defaulting to 1000 [ 1126.733811][ T5406] scsi host1: usb-storage 6-1:1.0 [ 1126.739206][T14564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1126.776955][T14564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1126.915197][T14564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1126.956840][ T951] usb 6-1: USB disconnect, device number 15 [ 1126.996386][T14564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1127.011386][T14564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1127.055610][T14564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.329837][T14782] trusted_key: encrypted_key: master key parameter '"Master"' is invalid [ 1127.899955][T14564] device hsr_slave_0 entered promiscuous mode [ 1127.939159][T14564] device hsr_slave_1 entered promiscuous mode [ 1131.546928][T14816] input: syz0 as /devices/virtual/input/input21 [ 1136.061601][ T7] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1136.210614][T14564] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1136.223909][T14564] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1136.267039][T14564] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1136.320235][T14564] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1136.377289][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.455739][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.554469][ T7] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1136.667581][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.682756][T14564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1136.698405][ T6770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1136.736216][ T6770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1136.756438][ T7] usb 7-1: config 0 descriptor?? [ 1136.779739][T14564] 8021q: adding VLAN 0 to HW filter on device team0 [ 1136.879531][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1136.952380][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1137.040767][ T4280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.047953][ T4280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.238208][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1137.301864][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1137.370941][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1137.394089][ T7] usb 7-1: string descriptor 0 read error: -22 [ 1137.410172][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.417415][ T4280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.482171][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1137.709849][ T7] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0002/input/input22 [ 1138.444405][ T7] uclogic 0003:256C:006D.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 1138.605298][ T7] usb 7-1: USB disconnect, device number 4 [ 1138.677619][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1139.627927][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1139.759243][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1139.803851][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1139.831180][T14892] input: syz0 as /devices/virtual/input/input23 [ 1139.959058][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1139.993852][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1140.092208][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1140.154818][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1140.240912][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1140.305999][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1140.354748][T14895] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 1140.361033][T14895] pim6reg0: persist disabled [ 1140.473595][T14564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1141.560996][ T6795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1141.580316][ T6795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1141.633845][T14564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1141.685836][ T6770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1141.729016][ T6770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1143.179896][ T6770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1143.225948][ T6770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1143.284122][ T6770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1143.302116][ T6770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1143.328661][T14564] device veth0_vlan entered promiscuous mode [ 1143.403270][T14564] device veth1_vlan entered promiscuous mode [ 1143.554844][ T6765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1143.567125][ T6765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1143.609670][T14564] device veth0_macvtap entered promiscuous mode [ 1143.622001][T14564] device veth1_macvtap entered promiscuous mode [ 1143.661382][T14564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1143.698525][T14564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.761520][T14564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1143.807630][T14564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.896737][T14564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1143.934628][T14564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.951775][T14564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1143.962660][T14564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1143.981282][T14564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1143.992286][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1144.025028][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1144.114982][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1144.197579][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1144.371188][T14564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1144.382803][T14564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.399631][T14564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1144.525837][T14564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.631155][T14564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1144.791507][T14564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1144.802428][T14564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1144.813748][T14564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1145.582939][T14564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1146.892511][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1146.911435][ T6768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1146.948638][T14564] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.970202][T14564] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.994910][T14564] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.047212][T14564] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.230145][ T6788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.245157][ T6788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.295718][ T6765] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1147.332574][ T6788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.351461][ T6788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.477670][T14053] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1149.472421][T15000] netlink: 452 bytes leftover after parsing attributes in process `syz.5.2891'. [ 1150.158167][T15013] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2897'. [ 1150.696387][ T951] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1150.933318][ T951] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.946408][ T951] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1151.224213][ T951] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 1151.224252][ T951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.889049][T15036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1152.898090][T15036] device batadv_slave_0 entered promiscuous mode [ 1153.512118][ T951] usbhid 7-1:27.0: can't add hid device: -71 [ 1153.526007][ T951] usbhid: probe of 7-1:27.0 failed with error -71 [ 1153.533617][ T951] usb 7-1: invalid MIDI out EP 0 [ 1153.632355][ T951] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 1153.688745][ T951] usb 7-1: USB disconnect, device number 5 [ 1153.956170][T15047] udevd[15047]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1155.851802][ T4266] Bluetooth: hci0: command 0x0406 tx timeout [ 1161.331945][T15126] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1168.261414][T15200] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1168.285169][T15200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1168.294751][T15200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1172.366231][T15252] 9pnet_fd: Insufficient options for proto=fd [ 1172.552257][T15256] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 1172.561730][T15256] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 1174.965529][ T4322] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1175.165555][ T4322] usb 2-1: Using ep0 maxpacket: 8 [ 1175.173960][ T4322] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1175.465424][ T4322] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1175.490848][ T4322] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1175.520183][ T4322] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1175.549669][ T4322] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1175.573693][ T4322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.818211][ T4322] usb 2-1: GET_CAPABILITIES returned 0 [ 1175.827334][ T4322] usbtmc 2-1:16.0: can't read capabilities [ 1176.143275][T15315] overlayfs: missing 'workdir' [ 1176.196473][T15314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.205835][T15314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.651642][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.658983][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.474787][T14888] usb 2-1: USB disconnect, device number 5 [ 1182.895730][T15380] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 1182.916941][T15380] pim6reg0: persist disabled [ 1184.915446][ T22] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1185.105434][ T22] usb 7-1: Using ep0 maxpacket: 8 [ 1185.112503][ T22] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1185.190344][ T22] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1185.271129][ T22] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1185.369789][T15418] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1185.379217][T15418] cramfs: wrong magic [ 1186.283970][ T22] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1186.402040][ T22] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1186.487778][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.747310][ T22] usb 7-1: usb_control_msg returned -71 [ 1187.752957][ T22] usbtmc 7-1:16.0: can't read capabilities [ 1187.835886][ T22] usb 7-1: USB disconnect, device number 6 [ 1190.229202][T15472] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1190.237910][T15472] cramfs: wrong magic [ 1191.546217][T15479] overlayfs: missing 'workdir' [ 1193.425834][T15492] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 1193.452394][T15492] pim6reg0: persist disabled [ 1193.935715][ T22] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1194.115686][ T22] usb 1-1: device descriptor read/64, error -71 [ 1194.385852][ T22] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1194.725634][ T951] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1194.927835][ T951] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1194.939746][ T951] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 1195.015725][T15518] netlink: 452 bytes leftover after parsing attributes in process `syz.2.3012'. [ 1195.731866][ T22] usb 1-1: device descriptor read/64, error -71 [ 1195.767377][ T951] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1195.815445][ T951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.823504][ T951] usb 6-1: Product: syz [ 1195.893992][ T951] usb 6-1: Manufacturer: syz [ 1195.895755][ T22] usb usb1-port1: attempt power cycle [ 1195.929187][ T951] usb 6-1: SerialNumber: syz [ 1196.004715][T15527] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1196.015430][T15527] cramfs: wrong magic [ 1196.325702][ T22] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1196.797373][ T951] cdc_ncm 6-1:1.0: bind() failure [ 1196.826893][ T951] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1196.833845][ T951] cdc_ncm 6-1:1.1: bind() failure [ 1196.863447][ T951] usb 6-1: USB disconnect, device number 16 [ 1196.953320][ T22] usb 1-1: device descriptor read/8, error -71 [ 1304.495360][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1304.502739][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4358/1:b..l [ 1304.511349][ C1] (detected by 1, t=10502 jiffies, g=74193, q=165 ncpus=2) [ 1304.518661][ C1] task:kworker/0:8 state:R running task stack:21336 pid:4358 ppid:2 flags:0x00004000 [ 1304.530953][ C1] Workqueue: events_power_efficient gc_worker [ 1304.537077][ C1] Call Trace: [ 1304.540380][ C1] [ 1304.543339][ C1] __schedule+0x143f/0x4570 [ 1304.547938][ C1] ? release_firmware_map_entry+0x18b/0x18b [ 1304.553901][ C1] ? mark_lock+0x9a/0x340 [ 1304.558262][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 1304.563414][ C1] ? preempt_schedule_notrace+0x140/0x140 [ 1304.569185][ C1] irqentry_exit+0x53/0x80 [ 1304.573632][ C1] asm_sysvec_call_function_single+0x16/0x20 [ 1304.579817][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x1dc/0x220 [ 1304.586702][ C1] Code: f8 4d 85 ed 75 16 e8 83 42 a1 f8 eb 15 e8 7c 42 a1 f8 e8 87 2c c8 01 4d 85 ed 74 ea e8 6d 42 a1 f8 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00 [ 1304.606446][ C1] RSP: 0018:ffffc90002e87a40 EFLAGS: 00000293 [ 1304.612635][ C1] RAX: ffffffff88e967e3 RBX: 0000000000000000 RCX: ffff88802e2dd940 [ 1304.620740][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1304.628742][ C1] RBP: ffffc90002e87af0 R08: ffffffff88e967b9 R09: fffffbfff225785e [ 1304.636743][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 1304.644738][ C1] R13: 0000000000000200 R14: 0000000000000046 R15: 1ffff920005d0f48 [ 1304.652744][ C1] ? seqcount_lockdep_reader_access+0x1a9/0x220 [ 1304.659052][ C1] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 1304.665338][ C1] ? nf_conntrack_hash_check_insert+0x9b0/0x9b0 [ 1304.671627][ C1] gc_worker+0x325/0x1540 [ 1304.675992][ C1] ? gc_worker+0x27a/0x1540 [ 1304.680530][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1304.685947][ C1] ? print_irqtrace_events+0x210/0x210 [ 1304.691445][ C1] ? init_conntrack+0xfc0/0xfc0 [ 1304.696424][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 1304.701659][ C1] ? process_one_work+0x806/0x1260 [ 1304.706801][ C1] process_one_work+0x917/0x1260 [ 1304.711789][ C1] ? worker_detach_from_pool+0x260/0x260 [ 1304.717456][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1304.723034][ C1] ? kthread_data+0x4e/0xc0 [ 1304.727580][ C1] ? wq_worker_running+0x97/0x190 [ 1304.732632][ C1] worker_thread+0xa47/0x1200 [ 1304.737378][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1304.742265][ C1] kthread+0x28d/0x320 [ 1304.746363][ C1] ? worker_clr_flags+0x190/0x190 [ 1304.751501][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1304.756119][ C1] ret_from_fork+0x1f/0x30 [ 1304.760582][ C1] [ 1304.763621][ C1] rcu: rcu_preempt kthread starved for 10520 jiffies! g74193 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1304.774935][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1304.784920][ C1] rcu: RCU grace-period kthread stack dump: [ 1304.790824][ C1] task:rcu_preempt state:R running task stack:25592 pid:16 ppid:2 flags:0x00004000 [ 1304.801635][ C1] Call Trace: [ 1304.804944][ C1] [ 1304.807905][ C1] __schedule+0x143f/0x4570 [ 1304.812451][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1304.817378][ C1] ? release_firmware_map_entry+0x18b/0x18b [ 1304.823304][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 1304.828712][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1304.834633][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1304.839533][ C1] schedule+0xbf/0x180 [ 1304.843648][ C1] schedule_timeout+0x1b9/0x300 [ 1304.848537][ C1] ? console_conditional_schedule+0x40/0x40 [ 1304.854470][ C1] ? update_process_times+0x1b0/0x1b0 [ 1304.859899][ C1] ? prepare_to_swait_event+0x329/0x350 [ 1304.865511][ C1] rcu_gp_fqs_loop+0x2d2/0x1150 [ 1304.870441][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1304.876731][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 1304.881985][ C1] ? rcu_gp_init+0x15f0/0x15f0 [ 1304.886792][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1304.892732][ C1] ? finish_swait+0xcf/0x1e0 [ 1304.897369][ C1] rcu_gp_kthread+0xa3/0x3b0 [ 1304.902000][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1304.907145][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1304.913100][ C1] ? __kthread_parkme+0x168/0x1c0 [ 1304.918179][ C1] kthread+0x28d/0x320 [ 1304.922282][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1304.927433][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1304.932061][ C1] ret_from_fork+0x1f/0x30 [ 1304.936534][ C1] [ 1304.939573][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1304.945910][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1304.951136][ C0] NMI backtrace for cpu 0 [ 1304.951161][ C0] CPU: 0 PID: 15530 Comm: syz.1.3016 Not tainted 6.1.133-syzkaller #0 [ 1304.951179][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1304.951189][ C0] RIP: 0010:__lock_acquire+0xcea/0x1f80 [ 1304.951220][ C0] Code: bf 00 00 00 00 00 fc ff df 48 0f a3 1d 1f fa c0 0f 0f 83 40 08 00 00 49 8d 9d d0 0a 00 00 48 89 d8 48 c1 e8 03 48 89 44 24 50 <80> 3c 38 00 74 12 48 89 df e8 28 43 77 00 48 bf 00 00 00 00 00 fc [ 1304.951240][ C0] RSP: 0018:ffffc90000007980 EFLAGS: 00000806 [ 1304.951257][ C0] RAX: 1ffff110063c015a RBX: ffff888031e00ad0 RCX: ffffffff816ac82f [ 1304.951270][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: dffffc0000000000 [ 1304.951282][ C0] RBP: ffff888031e00b30 R08: dffffc0000000000 R09: fffffbfff225784d [ 1304.951295][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888031e00ad8 [ 1304.951307][ C0] R13: ffff888031e00000 R14: ffff888031e00b50 R15: 1ffff110063c016a [ 1304.951320][ C0] FS: 00007f11bb5ff6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1304.951336][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1304.951348][ C0] CR2: 0000001b30b1bff8 CR3: 000000002fb9d000 CR4: 00000000003506f0 [ 1304.951363][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1304.951373][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1304.951384][ C0] Call Trace: [ 1304.951391][ C0] [ 1304.951398][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 1304.951417][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1304.951444][ C0] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 1304.951470][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 1304.951487][ C0] ? nmi_handle+0x12e/0x440 [ 1304.951514][ C0] ? nmi_handle+0x25/0x440 [ 1304.951540][ C0] ? __lock_acquire+0xcea/0x1f80 [ 1304.951565][ C0] ? default_do_nmi+0x62/0x150 [ 1304.951584][ C0] ? exc_nmi+0xa8/0x100 [ 1304.951602][ C0] ? end_repeat_nmi+0x16/0x31 [ 1304.951627][ C0] ? __lock_acquire+0xcbf/0x1f80 [ 1304.951653][ C0] ? __lock_acquire+0xcea/0x1f80 [ 1304.951679][ C0] ? __lock_acquire+0xcea/0x1f80 [ 1304.951705][ C0] ? __lock_acquire+0xcea/0x1f80 [ 1304.951730][ C0] [ 1304.951735][ C0] [ 1304.951747][ C0] lock_acquire+0x1f8/0x5a0 [ 1304.951772][ C0] ? __lock_task_sighand+0x25/0x2d0 [ 1304.951800][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1304.951828][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1304.951856][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1304.951882][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 1304.951902][ C0] __lock_task_sighand+0x45/0x2d0 [ 1304.951926][ C0] ? __lock_task_sighand+0x25/0x2d0 [ 1304.951949][ C0] ? __lock_task_sighand+0x25/0x2d0 [ 1304.951975][ C0] send_sigqueue+0x1de/0x720 [ 1304.952000][ C0] ? send_sigqueue+0x107/0x720 [ 1304.952026][ C0] ? sigqueue_free+0x1e0/0x1e0 [ 1304.952053][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1304.952073][ C0] posix_timer_fn+0x186/0x390 [ 1304.952096][ C0] ? common_timer_wait_running+0x10/0x10 [ 1304.952117][ C0] __hrtimer_run_queues+0x5e5/0xe50 [ 1304.952148][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1304.952169][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 1304.952198][ C0] hrtimer_interrupt+0x392/0x980 [ 1304.952230][ C0] __sysvec_apic_timer_interrupt+0x158/0x5b0 [ 1304.952263][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1304.952285][ C0] [ 1304.952289][ C0] [ 1304.952295][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1304.952318][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 1304.952336][ C0] Code: f1 84 f5 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 7e cb ae f6 48 89 df e8 e6 09 b0 f6 e8 a1 5b d5 f6 fb bf 01 00 00 00 f6 89 a2 f6 65 8b 05 b7 5f 46 75 85 c0 74 02 5b c3 e8 54 83 44 [ 1304.952350][ C0] RSP: 0018:ffffc9000ceefb30 EFLAGS: 00000286 [ 1304.952364][ C0] RAX: 1b58dcaf2d4e6700 RBX: ffff88802fdf2e40 RCX: ffffffff973c3103 [ 1304.952377][ C0] RDX: dffffc0000000000 RSI: ffffffff8b0c1dc0 RDI: 0000000000000001 [ 1304.952389][ C0] RBP: ffffc9000ceefc70 R08: dffffc0000000000 R09: ffffed1005fbe5c9 [ 1304.952402][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11005fbe61b [ 1304.952413][ C0] R13: 0000000004000000 R14: 0000000000000011 R15: ffff88802fdf30d8 [ 1304.952433][ C0] get_signal+0x151f/0x17a0 [ 1304.952465][ C0] ? ptrace_notify+0x370/0x370 [ 1304.952495][ C0] arch_do_signal_or_restart+0xb0/0x1a10 [ 1304.952516][ C0] ? __might_fault+0xa1/0x110 [ 1304.952540][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 1304.952569][ C0] ? do_sigaltstack+0x3f3/0x610 [ 1304.952590][ C0] ? get_sigframe_size+0x10/0x10 [ 1304.952609][ C0] ? restore_altstack+0x107/0x150 [ 1304.952628][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1304.952660][ C0] ? exit_to_user_mode_loop+0x39/0x100 [ 1304.952679][ C0] exit_to_user_mode_loop+0x6a/0x100 [ 1304.952697][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 1304.952715][ C0] syscall_exit_to_user_mode+0x60/0x270 [ 1304.952739][ C0] do_syscall_64+0x47/0xb0 [ 1304.952754][ C0] ? clear_bhb_loop+0x45/0xa0 [ 1304.952776][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1304.952797][ C0] RIP: 0033:0x7f11bb65d2fb [ 1304.952820][ C0] Code: fe ff ff eb 23 66 2e 0f 1f 84 00 00 00 00 00 45 31 c0 31 c9 ba 80 00 00 00 48 89 de bf ca 00 00 00 31 c0 e8 57 fe 12 00 8b 03 <85> c0 74 e1 c7 45 08 00 00 00 00 45 84 ed 74 2d 80 3d d2 83 e7 00 [ 1304.952834][ C0] RSP: 002b:00007f11bb5ff0f0 EFLAGS: 00000286 [ 1304.952847][ C0] RAX: 0000000000000001 RBX: 00007f11bb9a5fa8 RCX: ffffffffffffffa8 [ 1304.952860][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f11bb9a5fa8 [ 1304.952870][ C0] RBP: 00007f11bb9a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1304.952882][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f11bb9a5fac [ 1304.952893][ C0] R13: 0000000000000000 R14: 00007ffd8e5decb0 R15: 00007ffd8e5ded98 [ 1304.952911][ C0] [ 1305.470300][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.578439][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=648 sent=0 n=-1 (errno 32: Broken pipe) [ 1307.105628][ T4254] syz-executor (4254) used greatest stack depth: 19064 bytes left [ 1307.493203][ T6765] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.594298][ T6765] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.699911][ T6765] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.783275][ T6765] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.946917][ T6765] device hsr_slave_0 left promiscuous mode [ 1308.953961][ T6765] device hsr_slave_1 left promiscuous mode [ 1308.960732][ T6765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1308.968455][ T6765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1308.976939][ T6765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1308.984400][ T6765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1308.993065][ T6765] device bridge_slave_1 left promiscuous mode [ 1308.999364][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.008106][ T6765] device bridge_slave_0 left promiscuous mode [ 1309.014355][ T6765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.044876][ T6765] device veth1_macvtap left promiscuous mode [ 1309.051500][ T6765] device veth0_macvtap left promiscuous mode [ 1309.057687][ T6765] device veth1_vlan left promiscuous mode [ 1309.063504][ T6765] device veth0_vlan left promiscuous mode [ 1309.571277][ T6765] team0 (unregistering): Port device team_slave_1 removed [ 1309.627317][ T6765] team0 (unregistering): Port device team_slave_0 removed [ 1309.674521][ T6765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1309.723214][ T6765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1309.950981][ T6765] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1310.240964][ T6765] bond0 (unregistering): Released all slaves [ 1310.822563][ T6765] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.896130][ T6765] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.957190][ T6765] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.025104][ T6765] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.267039][ T6765] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.359860][ T6765] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.450668][ T6765] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.519206][ T6765] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.675063][ T6765] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.760644][ T6765] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.863475][ T6765] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.958516][ T6765] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.210745][ T6765] device hsr_slave_0 left promiscuous mode [ 1314.219175][ T6765] device hsr_slave_1 left promiscuous mode [ 1314.226397][ T6765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1314.233854][ T6765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1314.242161][ T6765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1314.250012][ T6765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1314.264217][ T6765] device bridge_slave_1 left promiscuous mode [ 1314.272732][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.291833][ T6765] device bridge_slave_0 left promiscuous mode [ 1314.299350][ T6765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.319699][ T6765] device hsr_slave_0 left promiscuous mode [ 1314.329907][ T6765] device hsr_slave_1 left promiscuous mode [ 1314.338192][ T6765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1314.350116][ T6765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1314.359581][ T6765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1314.370997][ T6765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1314.381093][ T6765] device bridge_slave_1 left promiscuous mode [ 1314.392232][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.404063][ T6765] device bridge_slave_0 left promiscuous mode [ 1314.413790][ T6765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.432034][ T6765] device hsr_slave_0 left promiscuous mode [ 1314.439808][ T6765] device hsr_slave_1 left promiscuous mode [ 1314.450303][ T6765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1314.459927][ T6765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1314.471932][ T6765] batman_adv: batadv0: Interface deactivated: batadv_slave_1