last executing test programs: 15m52.3575346s ago: executing program 2 (id=2015): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x86800, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x98, 0x3d, 0x107, 0x4, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x8}, @nested={0x80, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x71, 0x1c, 0x0, 0x0, @str='(\x00\xec\xf4\x7ftY9^\xcew\x97\x82\x06\x9d&\x04\xec\xfb\x1a\xa5\xc1\xef!\xa9\x9do#\xe0\xd3\x1c@\xa7\xb30x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}}, 0x4000080) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000140)=0x1) writev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb), 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x5, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 15m45.833039518s ago: executing program 2 (id=2032): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev\x00') pread64(r3, &(0x7f0000019040)=""/102400, 0x19000, 0x400000000003) 15m44.711088935s ago: executing program 32 (id=2032): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev\x00') pread64(r3, &(0x7f0000019040)=""/102400, 0x19000, 0x400000000003) 14m47.169181232s ago: executing program 1 (id=2149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) 14m40.624346421s ago: executing program 1 (id=2164): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x6, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/file0\x00'}) io_uring_enter(r0, 0x3516, 0x4, 0x0, 0x0, 0x0) 14m36.995157526s ago: executing program 1 (id=2167): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'erspan0\x00', 0x2, 0x2}) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, &(0x7f0000000040)=0x121) r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x3516, 0x4, 0x0, 0x0, 0x0) 14m30.601457892s ago: executing program 1 (id=2182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 14m29.358804821s ago: executing program 1 (id=2183): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x20000, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 14m28.607658772s ago: executing program 1 (id=2188): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee4, 0x400, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) listen(r0, 0xfffffff7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) 14m25.804349715s ago: executing program 5 (id=2192): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000000)={'erspan0\x00', 0x2, 0x2}) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0040d07, &(0x7f0000000040)=0x121) r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 14m19.637605508s ago: executing program 33 (id=2204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 14m13.53018413s ago: executing program 34 (id=2188): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee4, 0x400, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) listen(r0, 0xfffffff7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) 10m48.313274574s ago: executing program 4 (id=2657): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000100)='./control\x00', 0x0) socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000040)='./control\x00') 10m47.482542507s ago: executing program 4 (id=2658): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000380)="d33b71f9c22741490a9ba8bded94b67cb8c3990f1203afe1a8b67592", 0x9, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0x1000006) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1000000}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 10m44.673593949s ago: executing program 4 (id=2663): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) dup(0xffffffffffffffff) inotify_init1(0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x4000000000000f5) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000040)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x348, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c0, 0x1e0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@inet=@hashlimit2={{0x150}, {'nicvf0\x00', {0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x3, 0x7bfd, 0x18}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a8) 10m43.813396242s ago: executing program 4 (id=2665): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x20000, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 10m42.742187068s ago: executing program 4 (id=2666): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000380), r0}}, 0x18) 10m42.116063117s ago: executing program 4 (id=2668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) 10m40.977993615s ago: executing program 35 (id=2668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0x7c}}, 0x0) 10m40.919203466s ago: executing program 7 (id=2673): r0 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x1000, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x40, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket(0x2, 0x3, 0x100000001) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000001080)={@local, @random="00e300", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x4, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010102, @multicast2}}}}}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000280)=0x3, 0x4) 10m39.825581982s ago: executing program 7 (id=2674): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) dup(0xffffffffffffffff) inotify_init1(0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x4000000000000f5) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000040)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x348, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c0, 0x1e0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@inet=@hashlimit2={{0x150}, {'nicvf0\x00', {0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x3, 0x7bfd, 0x18}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3a8) 10m39.124514483s ago: executing program 7 (id=2675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) kexec_load(0x0, 0x2, &(0x7f0000000900)=[{0x0, 0x0, 0x200000000}, {0x0, 0x0, 0x0, 0x8000}], 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000001080)=0x2) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4800) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x336) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 10m37.98019485s ago: executing program 7 (id=2676): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x20000, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 10m37.801360123s ago: executing program 7 (id=2677): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000340)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000380), r1}}, 0x18) 10m37.415136339s ago: executing program 7 (id=2678): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x10, &(0x7f00000008c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x90009427, &(0x7f0000000180)) lseek(r1, 0x164, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e2200000000ffffffff00"/56, @ANYRES32=0x0, @ANYBLOB="20c91c498118b7e2030000004832c54e9683f5c65ef10c5f"], 0x54}}, 0x20004010) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0x0, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x40000, 0x0, 0x2, 0x0, 0xc}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)=0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x4) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000540)=""/200, 0xc8) 10m36.918125746s ago: executing program 36 (id=2678): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x10, &(0x7f00000008c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x90009427, &(0x7f0000000180)) lseek(r1, 0x164, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e2200000000ffffffff00"/56, @ANYRES32=0x0, @ANYBLOB="20c91c498118b7e2030000004832c54e9683f5c65ef10c5f"], 0x54}}, 0x20004010) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0x0, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x40000, 0x0, 0x2, 0x0, 0xc}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)=0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x4) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000540)=""/200, 0xc8) 19.119957141s ago: executing program 3 (id=4253): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x40}}, 0x0) 16.136043926s ago: executing program 3 (id=4258): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000280)=""/194) 15.954103989s ago: executing program 0 (id=4260): r0 = socket(0x25, 0x80805, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) close(r1) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0x0) r6 = socket(0x2, 0x80805, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) 14.744794587s ago: executing program 0 (id=4263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1b3802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x10) close(r5) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000610800024000000002080006400000000208080840000000000900"], 0x9c}}, 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)='\aswm-\n]VL', 0x9) mount$bpf(0x0, 0x0, &(0x7f0000000400), 0x4001, &(0x7f00000000c0)=ANY=[]) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd60010100000000000000000000000000bbfe8000000000000000000000000000aa00004e21001090780200000000000000"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$igmp(0x2, 0x3, 0x2) 13.449663457s ago: executing program 0 (id=4265): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x0, 0x0, 0x80000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) 13.167371202s ago: executing program 9 (id=4266): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) socket$can_raw(0x1d, 0x3, 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fremovexattr(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB='btr']) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x1) connect$bt_l2cap(r2, 0x0, 0x0) sendmmsg$sock(r2, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x810) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0xa0202) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xffffffc0) 12.837422006s ago: executing program 8 (id=4267): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f00000001c0)={r2, 0xffffffffffffffff, 0x1ff}) 12.468860572s ago: executing program 8 (id=4268): r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f00000001c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600f00018000000", @ANYRES32, @ANYBLOB="00000000000000002c000000000000001800000000000000000000000000000095000000000000009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000000114010025bd7000ffdbdf25080001"], 0x28}, 0x1, 0x0, 0x0, 0x40000c4}, 0xc4) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$key(0xf, 0x3, 0x2) r5 = msgget$private(0x0, 0xafb0e20fef6483ff) msgrcv(r5, 0x0, 0x0, 0x3, 0x1000) r6 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xfffffffc}) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) close_range(r6, 0xffffffffffffffff, 0x0) 12.427356742s ago: executing program 0 (id=4269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x1f) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x0, 0x1}}}}, 0x30}}, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x30b, 0xbc, 0xff, 0x4, 0xc, @random="f1a7c0c5abe3"}, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20048814) r5 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r5, 0x7b2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) syz_emit_vhci(0x0, 0x8) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040b0b016e00326599783abdf153"], 0xe) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f00000004c0)) 10.550822071s ago: executing program 8 (id=4270): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 10.231973706s ago: executing program 0 (id=4272): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x800, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb77b, 0x0, 0x0, 0x0, 0xe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x4, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) pread64(r6, &(0x7f0000002240)=""/237, 0xed, 0x4eb) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48}}, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 9.640494824s ago: executing program 3 (id=4274): r0 = userfaultfd(0x80001) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x10) close(r5) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000610800024000000002080006400000000208080840000000000900"], 0x9c}}, 0x4) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)='\aswm-\n]VL', 0x9) mount$bpf(0x0, 0x0, &(0x7f0000000400), 0x4001, &(0x7f00000000c0)=ANY=[]) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009d000040"]) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000ece65fbcee5586dd60010100000000000000000000000000bbfe8000000000000000000000000000aa00004e21001090780200000000000000"], 0x0) 8.701059559s ago: executing program 3 (id=4277): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840100001900010000000000000000001d010900500012804c00c3070900bb1688d0fac08000000039002c00b9b933ec33fdf7db291cd960af91baee9260af6e6e20788c2f11cebe7f3478c404af147c7e7cfdf137bf00bc3db2726a76e2b04d3b0000001e010680f8552e"], 0x184}, 0x1, 0x0, 0x0, 0x4040491}, 0x4000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000002c0)="6bb28309fc58774f6eaa59b4ddeda052", 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x1000, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket(0x2, 0x3, 0x100000001) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000001080)={@local, @random="00e300", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x4, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010102, @multicast2}}}}}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r7 = open(&(0x7f0000000140)='./file1\x00', 0x14d840, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f80, 0x11f2, 0x3f, 0x19ef, 0x3, 0x7, 0x2800, 0x2, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xcf, 0x9}}) fstatfs(r7, &(0x7f0000000000)=""/116) 7.92283039s ago: executing program 9 (id=4278): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) iopl(0x3) r1 = inotify_init1(0x0) splice(r1, 0x0, r1, 0x0, 0x99, 0x5) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x803341) r3 = dup(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f00000000c0)=@data_c2h={{0x7, 0x0, 0x18, 0x1, 0x8}, 0x5, 0xb30b, 0x3, 0x80000000, "2ae7064a"}, 0x80, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f00007b1000/0x1000)=nil) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) write(r3, &(0x7f00000000c0)="2400000058001f0014f9f407002304000afff511080001000f1f47f19a5ea46c01000000", 0x24) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 7.031464794s ago: executing program 9 (id=4280): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x80000000}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.559887621s ago: executing program 8 (id=4281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x28000600) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa6641, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r3, 0x4b4b, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, 0x0, &(0x7f0000000240)=0x700) unshare(0x80) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f00000001c0)=""/17, &(0x7f0000000200)=0x11) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000006800010000000000fddbdf250a000000000000000c000880080001000b00000008000500", @ANYRES32], 0x2c}}, 0x90) writev(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000018000109000000000000000002180000ff0000080000000008000100ac1414"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) futex(&(0x7f000000cffc), 0x5, 0x1000000, 0x0, &(0x7f0000048000), 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0), 0x800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) unshare(0x22020600) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 6.269928925s ago: executing program 9 (id=4283): r0 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1c}, 0x60) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000340)=0x402, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r6, 0x709, 0x0, 0x0, {0x2e}}, 0x14}}, 0x0) 5.442546408s ago: executing program 8 (id=4284): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000280)=""/194) 4.895908266s ago: executing program 9 (id=4285): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) socket(0x1d, 0x2, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00'], 0x2a, 0xfffffffffffffffc) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@o_path={0x0, 0xffffffffffffffff, 0x4000, r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x321, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) 3.97064824s ago: executing program 9 (id=4287): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_open_dev$dri(0x0, 0x1ff, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TCXONC(r1, 0x4b3a, 0x2) socket$inet6(0xa, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6006000040000900fffffffffddbdf250100000099001f00460601"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x402001, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000)={0x46}, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) ioctl$PTP_SYS_OFFSET(r4, 0xc0403d11, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 3.848906422s ago: executing program 0 (id=4288): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) socket$can_raw(0x1d, 0x3, 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fremovexattr(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB='btr']) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x1) connect$bt_l2cap(r2, 0x0, 0x0) sendmmsg$sock(r2, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x810) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0xa0202) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xffffffc0) 3.390919129s ago: executing program 6 (id=4290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x70}}, 0x0) 3.244076631s ago: executing program 6 (id=4291): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x0, 0x0, 0x80000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) 2.436170383s ago: executing program 6 (id=4292): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xfffffffffffffffe) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000030c0)=""/102400, 0x19000) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000480)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xfe33) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380), 0x0, 0x34000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_cache\x00') preadv(r4, &(0x7f0000000340), 0x0, 0xa4, 0x10001) syz_open_dev$tty1(0xc, 0x4, 0x1) 2.287979405s ago: executing program 3 (id=4293): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) iopl(0x3) capset(0x0, 0x0) 1.767154664s ago: executing program 6 (id=4294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/mdstat\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0xfffff000}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x44}}, 0x48040) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48c}) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)) syz_io_uring_setup(0x4f5a, &(0x7f0000000280)={0x0, 0x57c7, 0x86ce1a54f7c65264, 0x1, 0x28c, 0x0, r9}, &(0x7f0000000300), &(0x7f00000003c0)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) accept(0xffffffffffffffff, &(0x7f0000000200)=@nl=@unspec, &(0x7f0000000180)=0x80) 1.589445867s ago: executing program 8 (id=4295): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x30b, 0xbc, 0xff, 0x4, 0xc, @random="f1a7c0c5abe3"}, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20048814) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) syz_emit_vhci(0x0, 0x8) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040b0b016e00326599783abdf153"], 0xe) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f00000004c0)) 776.983619ms ago: executing program 6 (id=4296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x18a8, 0x48}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x20000000) 551.869342ms ago: executing program 6 (id=4297): syz_open_dev$cec(0x0, 0x0, 0x210380) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000140)={r4, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r5, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x1, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @bcast]}) 0s ago: executing program 3 (id=4298): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x800, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb77b, 0x0, 0x0, 0x0, 0xe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x4, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) pread64(r6, &(0x7f0000002240)=""/237, 0xed, 0x4eb) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48}}, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) kernel console output (not intermixed with test programs): ted cc 0x1001 length: 249 > 9 [ 1238.215253][ T8156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1238.224467][ T8156] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1238.231775][ T8156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1238.270773][T13523] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2659'. [ 1238.481269][T11019] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1238.507132][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.513513][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.212479][T11019] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.395269][T11019] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.451504][T13529] sp0: Synchronizing with TNC [ 1239.793818][T13533] gfs2: gfs2 mount does not exist [ 1240.147032][T11019] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.274561][ T4269] Bluetooth: hci3: command 0x0409 tx timeout [ 1240.287592][T13527] [U] è [ 1242.076004][T13520] chnl_net:caif_netlink_parms(): no params data found [ 1242.345681][ T4269] Bluetooth: hci3: command 0x041b tx timeout [ 1242.889628][T13520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.906081][T13520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.949739][T13520] device bridge_slave_0 entered promiscuous mode [ 1243.071732][T13520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.089685][T13520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.280699][T13520] device bridge_slave_1 entered promiscuous mode [ 1243.816183][T13520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1243.853509][T13520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.424387][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 1245.128743][T13520] team0: Port device team_slave_0 added [ 1245.337461][T13520] team0: Port device team_slave_1 added [ 1246.116484][T13520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1246.444291][T13520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1246.475473][T13520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1246.525083][T13520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1246.532332][T13520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1246.558884][ T8156] Bluetooth: hci3: command 0x0419 tx timeout [ 1246.623718][T13520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.641967][ T8156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1246.708985][ T8156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1246.719293][ T8156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1246.733984][ T8156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1246.743524][ T8156] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1246.754515][ T8156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1247.414766][T11019] device hsr_slave_0 left promiscuous mode [ 1247.421519][T11019] device hsr_slave_1 left promiscuous mode [ 1247.437623][T11019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1247.445494][T11019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1247.453467][T11019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1247.469762][T11019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1247.530098][T11019] device veth1_macvtap left promiscuous mode [ 1247.536413][T11019] device veth0_macvtap left promiscuous mode [ 1247.542546][T11019] device veth1_vlan left promiscuous mode [ 1247.550018][T11019] device veth0_vlan left promiscuous mode [ 1248.859495][ T8156] Bluetooth: hci1: command 0x0409 tx timeout [ 1249.453368][ T4269] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1249.626034][ T4269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1249.722624][ T4269] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1249.730898][ T4269] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1249.744389][ T4269] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1249.752327][ T4269] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1250.697993][T11019] team0 (unregistering): Port device team_slave_1 removed [ 1250.747111][T11019] team0 (unregistering): Port device team_slave_0 removed [ 1250.810103][T11019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1250.897485][T11019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1250.906220][ T4269] Bluetooth: hci1: command 0x041b tx timeout [ 1251.510465][T13595] input: syz0 as /devices/virtual/input/input27 [ 1251.644586][T11019] bond0 (unregistering): Released all slaves [ 1251.806023][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 1251.853318][T13520] device hsr_slave_0 entered promiscuous mode [ 1251.863849][T13520] device hsr_slave_1 entered promiscuous mode [ 1251.870939][T13520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1251.895371][T13520] Cannot create hsr debugfs directory [ 1252.985082][ T8156] Bluetooth: hci1: command 0x040f tx timeout [ 1253.136450][T13603] ubi31: attaching mtd0 [ 1253.218283][T13603] ubi31: scanning is finished [ 1253.223077][T13603] ubi31: empty MTD device detected [ 1253.634991][T13569] chnl_net:caif_netlink_parms(): no params data found [ 1253.758246][T13603] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1253.766997][T13603] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1253.793648][T13603] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1253.802911][T13603] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1253.844188][T13603] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1253.864448][ T4269] Bluetooth: hci0: command 0x041b tx timeout [ 1254.355332][T13603] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1254.363453][T13603] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1791114418 [ 1254.394159][T13603] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1254.426275][T13606] ubi31: background thread "ubi_bgt31d" started, PID 13606 [ 1255.137936][T13569] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.149189][T13569] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.180822][T13569] device bridge_slave_0 entered promiscuous mode [ 1255.241869][T13569] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.256972][T13569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.277959][T13569] device bridge_slave_1 entered promiscuous mode [ 1255.612426][T13569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1255.681381][T13569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1255.787873][T13586] chnl_net:caif_netlink_parms(): no params data found [ 1255.802163][T13569] team0: Port device team_slave_0 added [ 1255.827994][T13569] team0: Port device team_slave_1 added [ 1255.943535][T13569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1255.958550][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1256.042799][T13569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1256.199707][T11019] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.219931][T13569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1256.232849][T13569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1256.265139][T13569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1256.347709][T13586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.363123][T13586] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.379953][T13586] device bridge_slave_0 entered promiscuous mode [ 1256.415837][T11019] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.462639][T13628] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2690'. [ 1256.472141][T13628] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2690'. [ 1256.486144][T13628] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2690'. [ 1256.508919][T13586] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.536679][T13586] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.555332][T13586] device bridge_slave_1 entered promiscuous mode [ 1256.647354][T11019] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.676207][T13569] device hsr_slave_0 entered promiscuous mode [ 1256.693053][T13569] device hsr_slave_1 entered promiscuous mode [ 1256.703093][T13569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1256.720513][T13569] Cannot create hsr debugfs directory [ 1256.727574][T13520] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1256.744470][T13586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1256.771166][T11019] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.792529][T13520] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1256.812144][T13586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1256.860521][T13520] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1256.915962][T13520] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1256.947213][T13586] team0: Port device team_slave_0 added [ 1256.984246][T13586] team0: Port device team_slave_1 added [ 1257.172535][T13586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1257.189086][T13586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.224147][T13586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1257.264170][T13586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1257.271164][T13586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1257.368346][T13586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.167485][T11019] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.243782][T13586] device hsr_slave_0 entered promiscuous mode [ 1258.255015][T13586] device hsr_slave_1 entered promiscuous mode [ 1258.261865][T13586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1258.281437][T13586] Cannot create hsr debugfs directory [ 1258.326000][T11019] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.428682][T11019] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.452286][T13637] overlayfs: missing 'lowerdir' [ 1258.544805][T11019] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.667463][T13569] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1258.752806][T13520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1258.761264][T13569] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1258.903793][T13569] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1258.932657][T13569] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1259.655585][T13520] 8021q: adding VLAN 0 to HW filter on device team0 [ 1259.669092][T11025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1259.693595][T11025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1259.746063][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1259.922356][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1259.952519][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.959694][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1260.872565][ T129] libceph: connect (1)[c::]:6789 error -101 [ 1260.887713][ T129] libceph: mon0 (1)[c::]:6789 connect error [ 1260.931020][T13569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1260.940683][T13648] ceph: No mds server is up or the cluster is laggy [ 1261.014235][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1261.028990][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1261.045717][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1261.054655][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.061725][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1261.069875][T13650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2695'. [ 1261.235713][T11025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1261.278778][T13586] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1261.343560][T13586] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1261.376934][T13586] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1261.410994][T13586] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1261.421260][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1261.431771][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1261.463532][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1261.491818][T13569] 8021q: adding VLAN 0 to HW filter on device team0 [ 1261.652831][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1261.680920][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1261.842277][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1261.853550][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1261.863860][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1261.890532][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.897809][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.914461][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1261.948812][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1261.985459][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.992600][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.003062][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1262.012196][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1262.021519][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1262.073168][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1262.106797][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1262.149853][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1262.236991][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1262.250335][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1262.279815][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1262.293682][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1262.318777][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1262.393152][T13520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1262.424753][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1262.455081][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1262.468887][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1262.524612][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1262.581967][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1263.079201][T13569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1263.105693][T13569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1263.144372][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1263.152839][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1263.287679][T13671] overlayfs: missing 'lowerdir' [ 1263.453198][T13586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1263.497452][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1263.508101][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1263.630176][T13586] 8021q: adding VLAN 0 to HW filter on device team0 [ 1263.883349][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1263.892612][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1263.923153][ T9946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.930344][ T9946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1264.827818][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1264.856623][T11019] IPVS: stopping master sync thread 6979 ... [ 1264.863542][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1264.891742][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1264.908821][ T9946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1264.916040][ T9946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1264.932402][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1264.961262][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1264.984329][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1265.017121][T13569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1265.057270][T13520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.118980][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1266.134173][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1266.141660][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1266.212282][T13586] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1266.234755][T13586] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1266.279424][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1266.295558][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1266.323084][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1266.340799][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1266.350727][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1266.360072][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1266.370165][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1266.379342][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1266.482336][T13697] sd 0:0:1:0: PR command failed: 1026 [ 1266.499494][T13697] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1266.509123][T13697] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1266.524190][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1266.537811][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1266.555918][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1266.572888][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1266.582262][T13697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2706'. [ 1266.658484][T11007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1266.694981][T11007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1266.718291][T11007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1266.742218][T11007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1266.767098][T13520] device veth0_vlan entered promiscuous mode [ 1267.027655][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1267.042877][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1267.062032][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1267.083616][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1267.180833][T13569] device veth0_vlan entered promiscuous mode [ 1267.261602][T13520] device veth1_vlan entered promiscuous mode [ 1268.210870][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1268.219521][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1268.228707][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1268.245377][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1268.941281][T13569] device veth1_vlan entered promiscuous mode [ 1268.987240][T11019] device hsr_slave_0 left promiscuous mode [ 1268.993483][T13714] sp0: Synchronizing with TNC [ 1268.999119][T11019] device hsr_slave_1 left promiscuous mode [ 1269.014982][T11019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1269.022604][T11019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.032222][T11019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1269.041212][T11019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.054633][T13709] [U] è [ 1269.059717][T11019] device bridge_slave_1 left promiscuous mode [ 1269.066131][T11019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.086463][T11019] device bridge_slave_0 left promiscuous mode [ 1269.092722][T11019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.127425][T11019] device hsr_slave_0 left promiscuous mode [ 1269.139293][T11019] device hsr_slave_1 left promiscuous mode [ 1269.150910][T11019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1269.164175][T11019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.184883][T11019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1269.192434][T11019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.206110][T11019] device team0 left promiscuous mode [ 1269.211405][T11019] device team_slave_0 left promiscuous mode [ 1269.221354][T11019] device team_slave_1 left promiscuous mode [ 1269.235200][T11019] bridge0: port 3(team0) entered disabled state [ 1269.251825][T11019] device bridge_slave_1 left promiscuous mode [ 1269.260995][T11019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.278040][T11019] device bridge_slave_0 left promiscuous mode [ 1269.289838][T11019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.289344][T11019] device veth1_macvtap left promiscuous mode [ 1270.297618][T11019] device veth0_macvtap left promiscuous mode [ 1270.303994][T11019] device veth1_vlan left promiscuous mode [ 1270.317059][T11019] device veth0_vlan left promiscuous mode [ 1270.329930][T11019] device veth1_macvtap left promiscuous mode [ 1270.344533][T11019] device veth1_vlan left promiscuous mode [ 1270.354415][T11019] device veth0_vlan left promiscuous mode [ 1271.769281][T11019] team0 (unregistering): Port device team_slave_1 removed [ 1271.890119][T11019] team0 (unregistering): Port device team_slave_0 removed [ 1271.957714][T11019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1272.010989][T11019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1273.259181][T11019] bond0 (unregistering): Released all slaves [ 1274.440387][T11019] team0 (unregistering): Port device team_slave_1 removed [ 1274.487935][T11019] team0 (unregistering): Port device team_slave_0 removed [ 1274.533294][T11019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1274.554436][T13737] sd 0:0:1:0: PR command failed: 1026 [ 1274.559989][T13737] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1274.574009][T13737] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1274.588495][T11019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1275.052488][T11019] bond0 (unregistering): Released all slaves [ 1275.280168][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1275.296650][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1275.327121][T13520] device veth0_macvtap entered promiscuous mode [ 1275.346434][T11007] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1275.373482][T11007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1275.402948][T11007] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1275.421131][T11007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1275.431662][T11007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1275.518781][T13586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1275.594782][T13569] device veth0_macvtap entered promiscuous mode [ 1275.618110][T13520] device veth1_macvtap entered promiscuous mode [ 1275.847686][T13569] device veth1_macvtap entered promiscuous mode [ 1276.342779][T13520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1276.367742][T13520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.378970][T13520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1276.390097][T13520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.402742][T13520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1276.414207][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1276.436222][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.455699][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1276.466940][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.479191][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1276.489928][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.626186][T13569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1276.997325][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1277.010092][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1277.059623][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1277.085549][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1277.098812][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1277.110516][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1277.155758][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.167105][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.182681][T13569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.204085][T13569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.264770][T13569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1277.272467][T13520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.293965][T13520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.324144][T13520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.354003][T13520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.366688][T13520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.377660][T13520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.389366][T13520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1277.410627][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1277.420508][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1277.436780][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1277.451071][ T8136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1277.539502][T13520] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.552377][T13520] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.561473][T13520] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.570862][T13520] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.623996][T13569] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.645207][T13569] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.654549][T13569] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1277.663498][T13569] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.356469][ T4395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.365803][T11007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.373759][T11007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.402887][ T4395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.447730][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1278.467002][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1278.558245][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.558629][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.577291][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1278.606143][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.633439][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1278.634941][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.686368][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1278.734962][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1278.763379][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1278.786434][T13586] device veth0_vlan entered promiscuous mode [ 1278.820522][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1278.835598][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1278.864695][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1278.898863][T13586] device veth1_vlan entered promiscuous mode [ 1278.979152][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1279.013173][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1279.050357][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1279.068322][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1279.144192][ T9868] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1279.145668][T13586] device veth0_macvtap entered promiscuous mode [ 1279.223322][T13586] device veth1_macvtap entered promiscuous mode [ 1279.353759][T13586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.365359][T13586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.375889][T13586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.388649][T13586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.652285][T13586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.654689][ T9868] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1279.663337][T13586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.672220][ T9868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.692430][ T9868] usb 7-1: config 0 descriptor?? [ 1279.697772][T13586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.710391][ T9868] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1279.716622][T13586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.734860][T13586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1279.742840][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1279.754678][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1279.763360][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1279.773525][ T9946] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1279.788629][T13586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.812496][T13586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.823176][T13586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.835127][T13586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.845725][T13586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.860903][T13586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.893980][T13586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1279.921629][ T9868] gspca_spca508: reg_read err -32 [ 1279.932220][ T9868] gspca_spca508: reg_read err -32 [ 1279.938545][T13586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.954693][ T9868] gspca_spca508: reg_read err -32 [ 1279.977282][ T9868] gspca_spca508: reg_read err -32 [ 1279.994413][T13586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1280.051486][T13586] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.090868][T13586] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.160338][T13586] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.172346][T13586] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.444460][ T9868] gspca_spca508: reg write: error -71 [ 1281.851536][ T9868] spca508: probe of 7-1:0.0 failed with error -71 [ 1281.879030][ T9868] usb 7-1: USB disconnect, device number 3 [ 1281.888682][T11029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1281.904640][T11029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1282.071541][T13780] sp0: Synchronizing with TNC [ 1282.090046][T13779] [U] `èè [ 1283.059966][T11009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.080187][T11009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.127544][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1283.156045][T13795] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1283.172185][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.819506][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.980966][T13795] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1285.010539][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1285.112021][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2730'. [ 1285.144111][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2730'. [ 1285.422657][T13801] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2730'. [ 1286.286389][T13822] sd 0:0:1:0: PR command failed: 1026 [ 1286.291837][T13822] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1286.440837][T13822] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1287.418518][T13831] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1287.568780][T13833] sp0: Synchronizing with TNC [ 1287.594739][T13832] [U] è [ 1290.411020][T13845] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1290.445961][T13845] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1292.856662][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2747'. [ 1292.897599][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2747'. [ 1292.907713][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2747'. [ 1293.395639][T13873] sp0: Synchronizing with TNC [ 1293.403304][T13872] [U] è [ 1294.154150][T13883] CIFS mount error: No usable UNC path provided in device string! [ 1294.154150][T13883] [ 1294.164225][T13883] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1294.849752][T13888] overlayfs: missing 'lowerdir' [ 1295.022508][T13885] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2754'. [ 1295.358015][T13892] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1297.634514][T12231] libceph: connect (1)[c::]:6789 error -101 [ 1297.640571][T12231] libceph: mon0 (1)[c::]:6789 connect error [ 1297.641866][T13910] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2761'. [ 1297.905574][T12231] libceph: connect (1)[c::]:6789 error -101 [ 1297.911734][T12231] libceph: mon0 (1)[c::]:6789 connect error [ 1298.234716][T13908] ceph: No mds server is up or the cluster is laggy [ 1298.518156][T13931] sp0: Synchronizing with TNC [ 1298.538405][T13929] [U] è [ 1298.835112][T13938] overlayfs: missing 'lowerdir' [ 1299.949033][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.955477][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.284795][ T52] block nbd6: Attempted send on invalid socket [ 1301.291190][ T52] I/O error, dev nbd6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1301.301469][T13956] VFS: could not find a valid V7 on nbd6. [ 1301.955766][T13968] sp0: Synchronizing with TNC [ 1301.966162][T13967] [U] è [ 1302.210063][T13977] overlayfs: missing 'lowerdir' [ 1308.859211][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2790'. [ 1308.868189][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2790'. [ 1309.288702][ T93] block nbd9: Attempted send on invalid socket [ 1309.296326][ T93] I/O error, dev nbd9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1309.306714][T14011] VFS: could not find a valid V7 on nbd9. [ 1309.333061][T14031] overlayfs: missing 'workdir' [ 1309.401790][T14035] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2796'. [ 1309.490134][T11940] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 1309.510208][T11940] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1309.552130][T14040] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2800'. [ 1309.574337][T14040] unsupported nlmsg_type 40 [ 1309.638056][T11007] Bluetooth: hci5: Frame reassembly failed (-84) [ 1309.779688][T14047] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1311.745719][ T4269] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1311.745772][ T8156] Bluetooth: hci5: command 0x1003 tx timeout [ 1312.862677][T14066] overlayfs: missing 'workdir' [ 1313.054651][T14077] nbd8: detected capacity change from 0 to 510 [ 1313.124798][ T93] block nbd8: Send control failed (result -89) [ 1313.131239][ T93] block nbd8: Request send failed, requeueing [ 1313.140411][ T4259] block nbd8: Receive control failed (result -32) [ 1313.148705][ T93] block nbd8: Dead connection, failed to find a fallback [ 1313.159686][ T93] block nbd8: shutting down sockets [ 1313.165346][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1313.174584][ T93] buffer_io_error: 6 callbacks suppressed [ 1313.174636][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1313.191416][ T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1313.200774][ T52] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1313.562748][ T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1313.571852][ T52] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1313.584116][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1313.593244][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1313.601551][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1313.610674][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1313.618701][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1313.627846][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1313.635923][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1313.645027][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1313.652948][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1313.662034][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1313.669904][T14077] ldm_validate_partition_table(): Disk read failed. [ 1313.677233][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1313.686394][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1313.697155][ T52] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1313.705754][T14077] Dev nbd8: unable to read RDB block 0 [ 1313.839528][T14077] nbd8: unable to read partition table [ 1313.951797][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1313.963090][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=254, location=254 [ 1313.997726][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=253, location=253 [ 1314.030999][T14082] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1314.039373][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=252, location=252 [ 1314.055062][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=104, location=104 [ 1314.071325][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=102, location=102 [ 1314.089215][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1314.124594][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=212, location=212 [ 1314.136218][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=211, location=211 [ 1314.150589][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=210, location=210 [ 1314.164514][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=62, location=62 [ 1314.190218][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=60, location=60 [ 1314.202146][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=104, location=104 [ 1314.218830][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=102, location=102 [ 1314.240905][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1314.253127][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=126, location=126 [ 1314.266938][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=125, location=125 [ 1314.280384][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=124, location=124 [ 1314.293263][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1314.305524][ T93] blk_print_req_error: 24 callbacks suppressed [ 1314.305570][ T93] I/O error, dev nbd8, sector 504 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.322160][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=105, location=105 [ 1314.358563][T14085] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2816'. [ 1314.367986][ T52] I/O error, dev nbd8, sector 500 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.540690][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=104, location=104 [ 1314.545564][T14085] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2816'. [ 1314.552196][ T52] I/O error, dev nbd8, sector 496 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.569329][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=103, location=103 [ 1314.581877][ T52] I/O error, dev nbd8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.591380][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1314.601289][ T52] I/O error, dev nbd8, sector 496 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.610752][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=62, location=62 [ 1314.611324][T14085] netlink: 38 bytes leftover after parsing attributes in process `syz.9.2816'. [ 1314.639208][ T93] I/O error, dev nbd8, sector 488 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.649086][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=61, location=61 [ 1314.812014][ T93] block nbd6: Attempted send on invalid socket [ 1314.812476][ T52] I/O error, dev nbd8, sector 480 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1314.818317][ T93] I/O error, dev nbd6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1314.818392][T14079] VFS: could not find a valid V7 on nbd6. [ 1314.864325][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=60, location=60 [ 1315.304773][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1315.332022][ T93] I/O error, dev nbd8, sector 496 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1315.345802][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=55, location=55 [ 1315.389250][ T52] I/O error, dev nbd8, sector 488 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1315.555019][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=54, location=54 [ 1315.564772][T14077] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=53, location=53 [ 1315.583605][T14077] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 1317.735542][T14121] ubi: mtd0 is already attached to ubi31 [ 1323.116232][T14163] netlink: 'syz.3.2839': attribute type 12 has an invalid length. [ 1324.037439][T14172] ubi: mtd0 is already attached to ubi31 [ 1325.554834][T14181] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1326.123548][T14187] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2846'. [ 1328.218215][T14200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.227383][T14200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.699444][T14206] device bridge_slave_1 left promiscuous mode [ 1328.708474][T14206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.750703][T14206] device bridge_slave_0 left promiscuous mode [ 1328.763907][T14206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.755755][T14209] nbd0: detected capacity change from 0 to 510 [ 1329.796727][ T93] block nbd0: Send control failed (result -89) [ 1329.802958][ T93] block nbd0: Request send failed, requeueing [ 1329.812046][ T4259] block nbd0: Receive control failed (result -32) [ 1329.819915][ T93] block nbd0: Dead connection, failed to find a fallback [ 1329.827038][ T93] block nbd0: shutting down sockets [ 1329.833274][ T93] blk_print_req_error: 1 callbacks suppressed [ 1329.833319][ T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1329.853304][ T93] buffer_io_error: 6 callbacks suppressed [ 1329.853359][ T93] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1329.912277][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1329.921374][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1329.929628][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1329.938708][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1329.961519][ T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1329.971027][ T93] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1329.980718][ T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1329.990095][ T93] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1330.001004][ T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1330.010377][ T93] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1330.411381][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1330.421091][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1330.434333][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1330.443431][ T52] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1330.457452][T14209] ldm_validate_partition_table(): Disk read failed. [ 1330.494972][ T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1330.504307][ T93] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1330.514001][ T93] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1330.523115][ T93] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1330.539974][T14209] Dev nbd0: unable to read RDB block 0 [ 1330.548613][T14224] ptrace attach of "./syz-executor exec"[11971] was attempted by "./syz-executor exec"[14224] [ 1330.653581][T14209] nbd0: unable to read partition table [ 1330.695079][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1330.754824][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=254, location=254 [ 1330.808688][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=253, location=253 [ 1330.902015][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=252, location=252 [ 1330.995344][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=104, location=104 [ 1331.027212][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=102, location=102 [ 1331.066449][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1331.080323][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=212, location=212 [ 1331.098415][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=211, location=211 [ 1331.109638][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=210, location=210 [ 1331.193757][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=62, location=62 [ 1331.235011][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=60, location=60 [ 1331.251630][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=104, location=104 [ 1331.263963][ T7769] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1331.318605][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=102, location=102 [ 1331.544406][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1331.556629][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=126, location=126 [ 1331.566241][ T7769] usb 4-1: Using ep0 maxpacket: 8 [ 1331.572539][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=125, location=125 [ 1331.586915][ T7769] usb 4-1: config 0 has no interfaces? [ 1331.600446][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=124, location=124 [ 1331.611415][ T7769] usb 4-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 1331.742183][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1331.753828][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=105, location=105 [ 1331.765674][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=104, location=104 [ 1331.783565][ T7769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.799961][ T7769] usb 4-1: Product: syz [ 1331.800295][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=103, location=103 [ 1331.809129][ T7769] usb 4-1: Manufacturer: syz [ 1331.839696][ T7769] usb 4-1: SerialNumber: syz [ 1332.251430][ T7769] usb 4-1: config 0 descriptor?? [ 1332.604239][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1332.637834][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=62, location=62 [ 1332.705258][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=61, location=61 [ 1332.731449][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=60, location=60 [ 1332.750478][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1332.761708][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=55, location=55 [ 1332.778702][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=54, location=54 [ 1332.789813][T14209] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=53, location=53 [ 1332.805758][T14209] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1332.942938][ T9868] usb 4-1: USB disconnect, device number 15 [ 1335.721397][T14264] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2868'. [ 1337.105456][T14277] ptrace attach of "./syz-executor exec"[13586] was attempted by "./syz-executor exec"[14277] [ 1337.192187][T14279] ubi: mtd0 is already attached to ubi31 [ 1340.855593][T14305] kAFS: unparsable volume name [ 1341.246187][T14310] ubi: mtd0 is already attached to ubi31 [ 1344.904797][T14347] syz.9.2894[14347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1344.904913][T14347] syz.9.2894[14347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1346.318048][T14353] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1346.336997][T14353] overlayfs: failed to set xattr on upper [ 1346.342714][T14353] overlayfs: ...falling back to index=off,metacopy=off. [ 1346.830464][T14374] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2902'. [ 1349.353457][ T93] block nbd6: Attempted send on invalid socket [ 1349.359969][ T93] blk_print_req_error: 33 callbacks suppressed [ 1349.359984][ T93] I/O error, dev nbd6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1349.696743][T14386] VFS: could not find a valid V7 on nbd6. [ 1357.777564][T14479] nbd8: detected capacity change from 0 to 510 [ 1357.810206][ T93] block nbd8: Send control failed (result -89) [ 1357.816653][ T93] block nbd8: Request send failed, requeueing [ 1357.822870][ T4259] block nbd8: Receive control failed (result -32) [ 1357.829656][ T93] block nbd8: Dead connection, failed to find a fallback [ 1357.836786][ T93] block nbd8: shutting down sockets [ 1357.842026][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1357.851388][ T93] buffer_io_error: 6 callbacks suppressed [ 1357.851401][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1357.865300][ T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1357.875625][ T52] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1357.883763][ T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1357.892895][ T52] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1357.901594][ T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1357.910722][ T52] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1357.922782][ T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1357.931984][ T52] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1357.940231][ T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1357.949373][ T52] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1357.964454][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1357.973526][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1357.982410][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1357.991643][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1358.005524][T14479] ldm_validate_partition_table(): Disk read failed. [ 1358.012483][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.021753][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1358.030769][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1358.038340][T14481] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1358.039997][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1358.059056][T14479] Dev nbd8: unable to read RDB block 0 [ 1358.101629][T14479] nbd8: unable to read partition table [ 1358.177311][T14481] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1358.199080][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1358.214838][T14481] overlayfs: missing 'lowerdir' [ 1358.220165][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=254, location=254 [ 1358.249293][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=253, location=253 [ 1358.298516][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=252, location=252 [ 1358.628724][T14486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2939'. [ 1358.730990][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=104, location=104 [ 1358.773313][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=102, location=102 [ 1358.785829][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1358.988510][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=212, location=212 [ 1359.060340][T14491] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1359.834182][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=211, location=211 [ 1359.844201][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=210, location=210 [ 1359.854330][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=62, location=62 [ 1359.871623][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=60, location=60 [ 1359.922743][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=104, location=104 [ 1359.939374][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=102, location=102 [ 1360.520703][T14497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2942'. [ 1360.595522][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1360.682365][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=126, location=126 [ 1360.693485][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=125, location=125 [ 1360.740298][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=124, location=124 [ 1360.767699][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1360.800515][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=105, location=105 [ 1360.858162][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=104, location=104 [ 1360.897425][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=103, location=103 [ 1360.933464][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1360.962938][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=62, location=62 [ 1361.225172][T14507] batman_adv: batadv0: Adding interface: dummy0 [ 1361.231726][T14507] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1361.257301][T14507] batman_adv: batadv0: Interface activated: dummy0 [ 1361.407243][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.410152][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=61, location=61 [ 1361.414948][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.488786][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=60, location=60 [ 1361.500517][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1361.513958][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=55, location=55 [ 1361.524190][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=54, location=54 [ 1361.535319][T14479] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=53, location=53 [ 1361.545403][T14479] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 1362.413780][T14514] ubi: mtd0 is already attached to ubi31 [ 1363.717263][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2951'. [ 1365.090465][T14524] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2949'. [ 1365.109550][T14524] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2949'. [ 1365.130314][T14524] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2949'. [ 1371.157746][T14585] sp0: Synchronizing with TNC [ 1371.577431][ T93] block nbd3: Attempted send on invalid socket [ 1371.583713][ T93] blk_print_req_error: 33 callbacks suppressed [ 1371.583729][ T93] I/O error, dev nbd3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1371.599189][T14575] VFS: could not find a valid V7 on nbd3. [ 1372.094178][T14578] [U] è [ 1372.113619][T14586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2967'. [ 1372.167805][T14586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2967'. [ 1372.178248][T14586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2967'. [ 1373.843786][T11003] Bluetooth: hci5: Frame reassembly failed (-84) [ 1373.853509][T14597] Bluetooth: hci5: Frame reassembly failed (-84) [ 1374.291018][T14610] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1375.870907][ T4259] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1375.878023][ T8156] Bluetooth: hci5: command 0x1003 tx timeout [ 1378.385760][T14637] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1380.104307][T14649] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1382.808307][T14657] sd 0:0:1:0: PR command failed: 1026 [ 1382.843955][T14657] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1382.861082][T14658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2985'. [ 1383.394633][T14657] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1384.111871][T14670] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1385.013752][ T8136] Bluetooth: hci5: Frame reassembly failed (-84) [ 1385.023816][T14669] Bluetooth: hci5: Frame reassembly failed (-84) [ 1387.112077][T14628] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1387.127925][ T4269] Bluetooth: hci5: command 0x1003 tx timeout [ 1388.978978][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2996'. [ 1389.041477][T14709] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2998'. [ 1389.323054][T14714] sd 0:0:1:0: PR command failed: 1026 [ 1389.363092][T14714] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1389.394293][T14714] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1389.419876][T14718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3000'. [ 1389.564011][T14718] IPv6: NLM_F_CREATE should be specified when creating new route [ 1390.278310][T14716] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1391.326815][T14734] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1391.357505][T14734] overlayfs: failed to set xattr on upper [ 1391.363281][T14734] overlayfs: ...falling back to index=off,metacopy=off. [ 1392.616702][T14756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3015'. [ 1393.301772][T14760] batman_adv: batadv0: Adding interface: dummy0 [ 1393.328809][T14760] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1393.354098][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.471167][T14763] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1393.633080][T14760] batman_adv: batadv0: Interface activated: dummy0 [ 1393.713028][T14765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 1393.753965][T14765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.791674][T14765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 1393.823707][T14765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.984265][T14788] ptrace attach of "./syz-executor exec"[13520] was attempted by "./syz-executor exec"[14788] [ 1396.082091][T14793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3025'. [ 1397.858459][ T8136] wlan1: Trigger new scan to find an IBSS to join [ 1397.937290][T14801] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3029'. [ 1398.045472][T14803] ubi: mtd0 is already attached to ubi31 [ 1398.089282][T14805] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1398.781384][ T93] block nbd8: Attempted send on invalid socket [ 1398.787673][ T93] I/O error, dev nbd8, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1398.797105][T14807] VFS: could not find a valid V7 on nbd8. [ 1401.222328][T14843] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1402.007510][T11016] wlan1: Trigger new scan to find an IBSS to join [ 1402.067803][T14839] ptrace attach of "./syz-executor exec"[11971] was attempted by "./syz-executor exec"[14839] [ 1402.174628][T14846] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1403.817323][T11016] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 1405.521418][T14890] ubi: mtd0 is already attached to ubi31 [ 1406.292048][T14893] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1406.691888][ T4269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1406.848992][ T4269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1406.863570][ T4269] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1406.884424][ T4269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1406.920831][ T4269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1406.943442][ T4269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1408.281183][T14899] chnl_net:caif_netlink_parms(): no params data found [ 1408.500695][T14899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.508434][T14899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.521270][T14899] device bridge_slave_0 entered promiscuous mode [ 1408.533126][T14899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.540674][T14899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.551814][T14899] device bridge_slave_1 entered promiscuous mode [ 1408.586763][T14899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1408.600384][T14899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1408.799165][T14899] team0: Port device team_slave_0 added [ 1409.305629][T14628] Bluetooth: hci2: command 0x0409 tx timeout [ 1409.706668][T14899] team0: Port device team_slave_1 added [ 1410.301492][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3067'. [ 1410.310674][T14933] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3067'. [ 1411.275168][T14899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1411.282160][T14899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1411.384017][T14628] Bluetooth: hci2: command 0x041b tx timeout [ 1411.421765][T14899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.539350][T14948] sd 0:0:1:0: PR command failed: 1026 [ 1411.559283][T14899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.574089][T14948] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1411.598223][T14899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1411.635682][T14948] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1411.658801][T14899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.917554][T14951] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3072'. [ 1411.981433][T14951] IPv6: NLM_F_CREATE should be specified when creating new route [ 1412.353138][T14899] device hsr_slave_0 entered promiscuous mode [ 1412.379332][T14899] device hsr_slave_1 entered promiscuous mode [ 1412.867859][T14899] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.182622][T14899] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.464854][T14628] Bluetooth: hci2: command 0x040f tx timeout [ 1413.760751][T14899] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.537140][T14899] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.772266][T13766] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1415.105307][T13766] usb 9-1: Using ep0 maxpacket: 16 [ 1415.137844][T13766] usb 9-1: config 2 has an invalid interface number: 142 but max is 0 [ 1415.152666][T13766] usb 9-1: config 2 has no interface number 0 [ 1415.174009][T13766] usb 9-1: config 2 interface 142 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 1415.352176][T14980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3084'. [ 1415.363760][T13766] usb 9-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 1415.397951][T13766] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.427270][T14899] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1415.460960][T13766] usb 9-1: Product: syz [ 1415.492261][T13766] usb 9-1: Manufacturer: syz [ 1415.518551][T13766] usb 9-1: SerialNumber: syz [ 1415.596398][ T4269] Bluetooth: hci2: command 0x0419 tx timeout [ 1416.097889][T14985] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1416.127971][T14899] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1416.143302][T13766] usb 9-1: NFC: intf ffff88807d648000 id ffffffff8dc0f7e0 [ 1416.170450][T14899] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1416.197113][T14899] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1416.372032][T14982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1416.380556][T14982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1416.391418][T13766] usb 9-1: USB disconnect, device number 2 [ 1416.515793][T14994] sd 0:0:1:0: PR command failed: 1026 [ 1416.531465][T14994] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1416.579125][T14899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1416.586763][T14994] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1416.598308][T14996] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3087'. [ 1416.619715][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1416.638024][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1416.670560][T14899] 8021q: adding VLAN 0 to HW filter on device team0 [ 1416.705963][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1416.725419][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1416.739046][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.746240][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1416.784336][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1416.805669][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1416.825822][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1416.844944][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.852029][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1417.009115][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1417.055577][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1417.097025][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1417.484687][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1417.542425][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1417.582459][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1417.602818][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1417.642294][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1417.693766][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1417.738843][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1417.751493][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1417.779277][T14899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1419.108789][T15035] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3098'. [ 1420.223349][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1420.253391][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1420.287080][T15051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3102'. [ 1420.695707][ T93] block nbd6: Attempted send on invalid socket [ 1420.703983][ T93] I/O error, dev nbd6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1420.713756][T15048] VFS: could not find a valid V7 on nbd6. [ 1420.722162][T14899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1420.805704][T11029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1420.911166][T11029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1421.100980][T11003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1421.214979][T11003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1421.247505][T14899] device veth0_vlan entered promiscuous mode [ 1421.284035][T11003] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1421.417613][T11003] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1421.468186][T14899] device veth1_vlan entered promiscuous mode [ 1421.577390][T11009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1421.604854][T11009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1421.638690][T14899] device veth0_macvtap entered promiscuous mode [ 1421.680234][T14899] device veth1_macvtap entered promiscuous mode [ 1422.064909][T14899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.077176][T14899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.088615][T14899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.099981][T14899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.110344][T14899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.122272][T14899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.274724][T14899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.285499][T14899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.324494][T14899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.342265][T14899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.381370][T14899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1422.491434][T11016] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1422.524604][T11016] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1422.605388][T11016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1422.625612][T11016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1422.646289][T14899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.657516][T14899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.685933][T14899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.720286][T14899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.734113][T14899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.864115][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.870460][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.880583][T14899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.893474][T14899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.905026][T14899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.916428][T14899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.927453][T14899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1423.807184][T14899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1423.819886][T11016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1424.051002][T11016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1424.098429][T14899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.146781][T14899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.172644][T14899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.188296][T14899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.330532][T15094] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3114'. [ 1424.451533][T11016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.465620][T11016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.511687][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1424.618532][ T8136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.645946][ T8136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.694876][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1424.888576][T15106] overlayfs: failed to resolve './file1': -2 [ 1426.060917][T15119] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1428.198122][T15136] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3127'. [ 1429.172466][T15148] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 1429.393329][T15160] overlayfs: failed to resolve './file1': -2 [ 1431.040045][T15176] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1432.978271][T15192] wlan0 speed is unknown, defaulting to 1000 [ 1432.985597][T15192] wlan0 speed is unknown, defaulting to 1000 [ 1433.011197][T15192] wlan0 speed is unknown, defaulting to 1000 [ 1433.053969][ T7769] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1433.254488][ T7769] usb 7-1: Using ep0 maxpacket: 16 [ 1433.462479][ T7769] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.472792][ T7769] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1433.502610][T15192] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1433.514259][ T7769] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1433.537867][ T7769] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.556439][ T7769] usb 7-1: Product: syz [ 1433.566528][ T7769] usb 7-1: Manufacturer: syz [ 1433.576780][ T7769] usb 7-1: SerialNumber: syz [ 1433.769496][T15192] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1434.736149][ T7769] usb 7-1: 0:2 : does not exist [ 1434.764883][ T7769] usb 7-1: USB disconnect, device number 4 [ 1434.934895][T15192] wlan0 speed is unknown, defaulting to 1000 [ 1434.963779][T15192] wlan0 speed is unknown, defaulting to 1000 [ 1434.989947][T15192] wlan0 speed is unknown, defaulting to 1000 [ 1435.019415][T15192] wlan0 speed is unknown, defaulting to 1000 [ 1435.039362][T15192] wlan0 speed is unknown, defaulting to 1000 [ 1435.050670][T15192] wlan0 speed is unknown, defaulting to 1000 [ 1436.630535][ T9946] wlan1: Trigger new scan to find an IBSS to join [ 1436.854524][T15225] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3150'. [ 1436.933973][T15226] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1438.804010][T15230] netlink: zone id is out of range [ 1438.817002][T15230] netlink: set zone limit has 4 unknown bytes [ 1439.323946][T12086] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1442.426145][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3161'. [ 1442.648669][T12086] usb 7-1: device descriptor read/all, error -71 [ 1442.658811][T15260] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1442.665202][T15260] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1442.671843][T15260] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1443.169005][T15275] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1444.833469][T14628] Bluetooth: hci2: command 0x0c1a tx timeout [ 1446.995429][T14628] Bluetooth: hci2: command 0x0406 tx timeout [ 1447.634663][T15305] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3175'. [ 1448.290125][T15305] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1448.296274][T15305] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1448.302259][T15305] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1448.923579][T15297] overlayfs: failed to resolve './file1': -2 [ 1448.994470][T15314] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1449.726792][T14628] Bluetooth: hci2: command 0x0c1a tx timeout [ 1450.115965][T15320] usb usb8: usbfs: process 15320 (syz.8.3180) did not claim interface 0 before use [ 1450.935507][T15321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1451.121186][T15321] device batadv_slave_1 entered promiscuous mode [ 1451.203018][T15325] bridge: RTM_NEWNEIGH with invalid ether address [ 1451.793994][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 1452.346741][T15347] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3188'. [ 1452.990876][T15347] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3188'. [ 1453.003391][T15347] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3188'. [ 1453.010184][T15353] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3189'. [ 1453.573580][T15362] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1456.245439][ T52] block nbd3: Attempted send on invalid socket [ 1456.251653][ T52] I/O error, dev nbd3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1456.261926][T15371] VFS: could not find a valid V7 on nbd3. [ 1458.254081][T15392] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3202'. [ 1458.280893][T15392] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3202'. [ 1458.435865][T15392] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3202'. [ 1459.788142][T15406] PKCS8: Unsupported PKCS#8 version [ 1463.092877][T15432] kAFS: unparsable volume name [ 1464.177359][T15437] overlayfs: failed to resolve './file1': -2 [ 1464.771869][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3217'. [ 1467.222438][T15458] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3224'. [ 1468.204958][T15467] kAFS: unparsable volume name [ 1468.736466][ T93] block nbd3: Attempted send on invalid socket [ 1468.743490][ T93] I/O error, dev nbd3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1468.753073][T15457] VFS: could not find a valid V7 on nbd3. [ 1470.677487][T15498] input input33: cannot allocate more than FF_MAX_EFFECTS effects [ 1471.637319][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3235'. [ 1472.076095][T15502] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1472.082098][T15502] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1472.089374][T15502] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1472.529644][T15512] kAFS: unparsable volume name [ 1474.104063][ T4269] Bluetooth: hci2: command 0x0c1a tx timeout [ 1474.246979][T15518] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3240'. [ 1474.379142][T15515] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3239'. [ 1475.299466][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3248'. [ 1476.184137][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 1477.515449][ T93] block nbd6: Attempted send on invalid socket [ 1477.521672][ T93] I/O error, dev nbd6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1477.531760][T15551] VFS: could not find a valid V7 on nbd6. [ 1477.574368][T15563] netlink: 84 bytes leftover after parsing attributes in process `syz.9.3255'. [ 1478.457080][T15573] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3257'. [ 1481.548945][T15601] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3268'. [ 1485.181004][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.194142][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1488.193735][T15649] netlink: zone id is out of range [ 1488.199159][T15649] netlink: set zone limit has 4 unknown bytes [ 1492.985987][T15681] PKCS8: Unsupported PKCS#8 version [ 1493.114032][T15672] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3291'. [ 1500.797712][T15730] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3309'. [ 1502.110650][T15747] input input36: cannot allocate more than FF_MAX_EFFECTS effects [ 1502.751996][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3308'. [ 1502.802205][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3308'. [ 1502.824291][T15754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3308'. [ 1510.247487][T15798] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3329'. [ 1514.088873][T15833] overlayfs: overlapping lowerdir path [ 1514.966491][T15842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3342'. [ 1515.982472][T15851] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3343'. [ 1516.083467][T15845] fuse: Bad value for 'rootmode' [ 1516.536974][T15844] netdevsim netdevsim3: Direct firmware load for . [ 1516.536974][T15844] failed with error -2 [ 1516.547579][T15844] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1516.547579][T15844] [ 1518.021763][T15871] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1518.715142][T15887] No such timeout policy "syz0" [ 1520.114493][T15889] netlink: zone id is out of range [ 1520.119808][T15889] netlink: set zone limit has 4 unknown bytes [ 1520.517814][T15894] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3356'. [ 1522.502951][T15910] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1523.752207][T15922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3366'. [ 1524.210533][T15933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3369'. [ 1525.041524][T15942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3370'. [ 1531.219242][T15979] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3381'. [ 1532.071926][T15993] input input37: cannot allocate more than FF_MAX_EFFECTS effects [ 1532.082910][T15981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3383'. [ 1532.423887][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 1533.341764][T16009] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1533.860928][T16011] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1534.752540][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3395'. [ 1534.794061][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3395'. [ 1534.811591][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3395'. [ 1539.203649][T16063] PKCS8: Unsupported PKCS#8 version [ 1539.682619][T16067] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1541.874069][ T9868] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1542.094041][ T9868] usb 7-1: Using ep0 maxpacket: 16 [ 1542.118980][ T9868] usb 7-1: config 2 has an invalid interface number: 142 but max is 0 [ 1542.152661][ T9868] usb 7-1: config 2 has no interface number 0 [ 1542.179157][ T9868] usb 7-1: config 2 interface 142 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 1542.218713][ T9868] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 1542.260444][ T9868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.301892][ T9868] usb 7-1: Product: syz [ 1542.333708][ T9868] usb 7-1: Manufacturer: syz [ 1542.361700][ T9868] usb 7-1: SerialNumber: syz [ 1542.522263][T16079] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1542.542113][ T9868] usb 7-1: NFC: intf ffff88802400f000 id ffffffff8dc0f7e0 [ 1543.509859][T16077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1543.518445][T16077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1543.536454][ T9868] usb 7-1: USB disconnect, device number 7 [ 1544.243204][T16101] ubi: mtd0 is already attached to ubi31 [ 1545.596842][T16105] PKCS8: Unsupported PKCS#8 version [ 1545.643571][T16112] 9pnet_fd: Insufficient options for proto=fd [ 1545.792127][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.799488][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.000271][T16124] ubi: mtd0 is already attached to ubi31 [ 1548.589144][T16141] ubi: mtd0 is already attached to ubi31 [ 1550.256603][ T14] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1550.736998][T16158] kAFS: unparsable volume name [ 1551.334039][ T14] usb 7-1: Using ep0 maxpacket: 16 [ 1551.340889][ T14] usb 7-1: config 2 has an invalid interface number: 142 but max is 0 [ 1551.388804][ T14] usb 7-1: config 2 has no interface number 0 [ 1551.399656][ T14] usb 7-1: config 2 interface 142 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 1551.462974][ T14] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 1551.488600][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.524038][ T14] usb 7-1: Product: syz [ 1551.528328][ T14] usb 7-1: Manufacturer: syz [ 1551.544727][ T14] usb 7-1: SerialNumber: syz [ 1551.551925][T16149] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1551.583915][ T14] usb 7-1: NFC: intf ffff88807d3a9000 id ffffffff8dc0f7e0 [ 1551.819697][T16147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1551.828486][T16147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1552.556861][T11940] usb 7-1: USB disconnect, device number 8 [ 1552.596611][T16170] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3443'. [ 1552.829378][T16179] PKCS8: Unsupported PKCS#8 version [ 1553.441502][T16184] ubi: mtd0 is already attached to ubi31 [ 1554.242915][T16189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3450'. [ 1555.343161][T16204] kAFS: unparsable volume name [ 1558.651524][T16217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3460'. [ 1558.661561][T16217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3460'. [ 1559.547381][T16226] ubi: mtd0 is already attached to ubi31 [ 1560.296296][T16229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3465'. [ 1560.446427][T16236] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1565.629614][T16270] input input40: cannot allocate more than FF_MAX_EFFECTS effects [ 1566.087615][T16272] kAFS: unparsable volume name [ 1566.864918][T16282] No such timeout policy "syz0" [ 1567.702149][T16281] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3477'. [ 1567.939325][T14628] Bluetooth: hci5: sending frame failed (-49) [ 1567.946828][ T4269] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 1568.091586][T16290] Bluetooth: hci5: Frame reassembly failed (-84) [ 1568.213871][T12086] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1568.243500][T16294] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1568.413887][T12086] usb 7-1: Using ep0 maxpacket: 16 [ 1568.434586][T12086] usb 7-1: config 0 has an invalid interface number: 145 but max is 0 [ 1568.451120][T12086] usb 7-1: config 0 has no interface number 0 [ 1568.487578][T12086] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1568.535223][T12086] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1568.614636][T12086] usb 7-1: Product: syz [ 1568.663446][T12086] usb 7-1: Manufacturer: syz [ 1568.682357][T12086] usb 7-1: SerialNumber: syz [ 1568.747759][T12086] usb 7-1: config 0 descriptor?? [ 1568.767500][T12086] hub 7-1:0.145: bad descriptor, ignoring hub [ 1568.783432][T12086] hub: probe of 7-1:0.145 failed with error -5 [ 1568.941841][T12086] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.145/input/input41 [ 1568.968159][T16288] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3479'. [ 1569.058891][T16299] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3483'. [ 1569.069761][T16299] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3483'. [ 1570.154082][ T129] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1570.941416][T16311] PKCS8: Unsupported PKCS#8 version [ 1571.123882][ T129] usb 4-1: Using ep0 maxpacket: 16 [ 1571.130747][ T129] usb 4-1: config 2 has an invalid interface number: 142 but max is 0 [ 1571.171687][ T129] usb 4-1: config 2 has no interface number 0 [ 1571.206969][ T129] usb 4-1: config 2 interface 142 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 1571.242285][ T129] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c6.6e [ 1571.264662][ T129] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.289667][ T129] usb 4-1: Product: syz [ 1571.294665][ T129] usb 4-1: Manufacturer: syz [ 1571.299695][ T129] usb 4-1: SerialNumber: syz [ 1571.765470][T16303] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1571.778060][ T129] usb 4-1: NFC: intf ffff888029d1f000 id ffffffff8dc0f7e0 [ 1572.077446][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3491'. [ 1572.171901][T16303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1572.180516][T16303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1572.191713][ T7769] usb 4-1: USB disconnect, device number 16 [ 1578.050472][T16363] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3502'. [ 1578.073992][ T8136] Bluetooth: hci5: Frame reassembly failed (-84) [ 1578.081092][ T8136] Bluetooth: hci5: Frame reassembly failed (-84) [ 1578.085317][T16363] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3502'. [ 1578.097450][T16347] Bluetooth: hci5: Frame reassembly failed (-84) [ 1578.595196][T12086] usb 7-1: USB disconnect, device number 9 [ 1580.181347][ T4269] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1580.188015][T14628] Bluetooth: hci5: command 0x1003 tx timeout [ 1581.233649][T16386] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3509'. [ 1581.433934][ T9868] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1582.086489][ T9868] usb 4-1: device descriptor read/64, error -71 [ 1582.099824][ T93] block nbd8: Attempted send on invalid socket [ 1582.106163][ T93] I/O error, dev nbd8, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1582.115238][T16385] VFS: could not find a valid V7 on nbd8. [ 1582.498633][ T9868] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1583.561456][ T9868] usb 4-1: device descriptor read/64, error -71 [ 1584.094052][ T9868] usb usb4-port1: attempt power cycle [ 1586.492314][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3519'. [ 1586.501351][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3519'. [ 1587.988316][T16427] Timeout policy `syz0' can only be used by L3 protocol number 248 [ 1589.027157][T16424] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3522'. [ 1590.363917][T16456] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1591.235532][T16455] overlayfs: failed to resolve './file1': -2 [ 1596.468350][T16507] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1597.300104][T16510] overlayfs: failed to resolve './file1': -2 [ 1600.304244][T16536] overlayfs: statfs failed on './file0' [ 1600.524154][T16543] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1601.114352][T16548] PKCS8: Unsupported PKCS#8 version [ 1603.454204][T16555] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3556'. [ 1604.963315][T16587] netlink: zone id is out of range [ 1604.969596][T16587] netlink: set zone limit has 4 unknown bytes [ 1605.704125][ T4298] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1605.722582][T16597] PKCS8: Unsupported PKCS#8 version [ 1605.922607][ T4298] usb 10-1: not running at top speed; connect to a high speed hub [ 1605.949134][ T4298] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1606.031837][ T4298] usb 10-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 1606.192722][ T4298] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.215416][ T4298] usb 10-1: Product: syz [ 1606.230596][ T4298] usb 10-1: Manufacturer: syz [ 1606.260715][ T4298] usb 10-1: SerialNumber: syz [ 1606.804273][ T4298] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input42 [ 1606.818232][ T3608] bcm5974 10-1:1.0: could not read from device [ 1606.856437][ T4298] usb 10-1: USB disconnect, device number 2 [ 1606.866793][ T3608] bcm5974 10-1:1.0: could not read from device [ 1606.918166][ T3608] bcm5974 10-1:1.0: could not read from device [ 1607.162806][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.169157][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.407351][ T93] block nbd6: Attempted send on invalid socket [ 1607.413645][ T93] I/O error, dev nbd6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1607.423131][T16603] VFS: could not find a valid V7 on nbd6. [ 1608.605702][T16628] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3576'. [ 1610.018151][T16638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3577'. [ 1610.097880][T16638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3577'. [ 1610.107858][T16638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3577'. [ 1610.724775][T16646] PKCS8: Unsupported PKCS#8 version [ 1612.977831][T16669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3588'. [ 1613.396331][T16672] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3590'. [ 1614.820808][T16691] PKCS8: Unsupported PKCS#8 version [ 1616.498953][T16711] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3602'. [ 1620.231518][T16739] PKCS8: Unsupported PKCS#8 version [ 1620.585336][T16747] overlayfs: failed to resolve './file1': -2 [ 1620.957365][T16753] overlayfs: failed to resolve './file1': -2 [ 1624.971705][T16778] kAFS: unparsable volume name [ 1632.392292][ T52] block nbd9: Attempted send on invalid socket [ 1632.398676][ T52] I/O error, dev nbd9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1632.943885][T16798] VFS: could not find a valid V7 on nbd9. [ 1635.249006][T16825] kAFS: unparsable volume name [ 1637.604823][T16829] overlayfs: failed to resolve './file1': -2 [ 1642.949666][T16876] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1644.045255][ T93] block nbd0: Attempted send on invalid socket [ 1644.051529][ T93] I/O error, dev nbd0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1644.060715][T16880] VFS: could not find a valid V7 on nbd0. [ 1644.766282][T16898] kAFS: unparsable volume name [ 1645.407475][T16897] overlayfs: failed to resolve './file1': -2 [ 1648.027837][ T93] block nbd9: Attempted send on invalid socket [ 1648.034133][ T93] I/O error, dev nbd9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1648.043312][T16925] VFS: could not find a valid V7 on nbd9. [ 1648.294547][T16934] kAFS: unparsable volume name [ 1649.767999][T16944] input: syz0 as /devices/virtual/input/input43 [ 1651.392978][T16962] loop6: detected capacity change from 0 to 524287999 [ 1651.562033][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1651.571274][ C1] buffer_io_error: 6 callbacks suppressed [ 1651.571286][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1652.454155][T16966] loop6: detected capacity change from 524287999 to 524288000 [ 1652.522137][T16973] kAFS: unparsable volume name [ 1653.318711][T16971] overlayfs: failed to resolve './file1': -2 [ 1653.325159][T16962] loop6: unable to read partition table [ 1653.344325][T16962] loop_reread_partitions: partition scan of loop6 (Í¢†¨ÙÇ´WÝC@'OÈQžšÒ¥‹) failed (rc=-5) [ 1655.317172][T16994] kvm [16991]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000 [ 1655.363186][T16994] kvm [16991]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000 [ 1655.458279][T16994] kvm [16991]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x4000 [ 1655.516806][T16994] kvm [16991]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x4000 [ 1657.689204][T17020] kAFS: unparsable volume name [ 1658.804645][T17029] No such timeout policy "syz0" [ 1659.751750][T17033] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3701'. [ 1663.235827][T17069] kAFS: unparsable volume name [ 1666.635823][T17078] overlayfs: failed to resolve './file1': -2 [ 1667.126684][T17084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3715'. [ 1668.736854][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.743144][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.111063][T17103] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1671.268986][T17120] kAFS: unparsable volume name [ 1674.798470][T17131] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3729'. [ 1678.157912][T17147] overlayfs: failed to resolve './file1': -2 [ 1679.991076][T17176] kAFS: unparsable volume name [ 1681.698863][T17193] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1682.353489][T17195] overlayfs: failed to resolve './file1': -2 [ 1684.654650][T17221] kAFS: unparsable volume name [ 1688.443771][T17236] overlayfs: failed to resolve './file1': -2 [ 1690.616485][ T93] block nbd9: Attempted send on invalid socket [ 1690.622754][ T93] I/O error, dev nbd9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1690.631889][T17251] VFS: could not find a valid V7 on nbd9. [ 1693.730324][T17268] kAFS: unparsable volume name [ 1694.895345][T17280] overlayfs: failed to resolve './file1': -2 [ 1697.717416][T17295] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1699.667321][T17303] input input44: cannot allocate more than FF_MAX_EFFECTS effects [ 1699.774547][T17310] kAFS: unparsable volume name [ 1700.689305][T17322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3788'. [ 1704.338775][T17342] input input45: cannot allocate more than FF_MAX_EFFECTS effects [ 1705.207079][T17356] kAFS: unparsable volume name [ 1705.246168][T17352] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3793'. [ 1705.273432][T17352] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3793'. [ 1709.668257][T17389] input input46: cannot allocate more than FF_MAX_EFFECTS effects [ 1710.434350][T17404] No such timeout policy "syz0" [ 1711.052133][T17405] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3815'. [ 1711.212285][T17409] tmpfs: Bad value for 'huge' [ 1711.311141][T17411] input: syz0 as /devices/virtual/input/input47 [ 1713.982194][T17437] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3823'. [ 1713.991379][T17437] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3823'. [ 1714.811698][T17441] input input48: cannot allocate more than FF_MAX_EFFECTS effects [ 1715.538627][T17449] No such timeout policy "syz0" [ 1718.529421][T17458] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3832'. [ 1718.551852][T17467] tmpfs: Bad value for 'huge' [ 1720.520282][T17487] input input49: cannot allocate more than FF_MAX_EFFECTS effects [ 1720.923802][T17496] No such timeout policy "syz0" [ 1723.467229][T17521] tmpfs: Bad value for 'huge' [ 1724.046922][T17525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3853'. [ 1725.904039][T17546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3861'. [ 1728.452324][T17569] tmpfs: Bad value for 'huge' [ 1728.517744][T17563] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3866'. [ 1730.316355][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.322663][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1733.084788][T17624] tmpfs: Bad value for 'huge' [ 1736.719705][T12231] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 1736.871953][T12231] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1737.537616][T17674] tmpfs: Bad value for 'huge' [ 1742.305484][T17722] input: syz0 as /devices/virtual/input/input50 [ 1746.391364][T17765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3930'. [ 1746.431764][T17767] input: syz0 as /devices/virtual/input/input51 [ 1749.663875][T17797] input input52: cannot allocate more than FF_MAX_EFFECTS effects [ 1750.385905][ T52] block nbd9: Attempted send on invalid socket [ 1750.392147][ T52] I/O error, dev nbd9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1750.401802][T17789] VFS: could not find a valid V7 on nbd9. [ 1753.798119][T17833] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3952'. [ 1754.152467][T17837] input input53: cannot allocate more than FF_MAX_EFFECTS effects [ 1757.347749][ T52] block nbd8: Attempted send on invalid socket [ 1757.354082][ T52] I/O error, dev nbd8, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1757.381088][T17854] VFS: could not find a valid V7 on nbd8. [ 1758.398312][T17868] input input54: cannot allocate more than FF_MAX_EFFECTS effects [ 1758.543564][T17863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3962'. [ 1758.810370][T17886] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3968'. [ 1760.956795][T17912] input input55: cannot allocate more than FF_MAX_EFFECTS effects [ 1762.072174][T17928] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3980'. [ 1762.082136][T17934] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3984'. [ 1764.630897][T17961] input input56: cannot allocate more than FF_MAX_EFFECTS effects [ 1768.220604][T17980] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3999'. [ 1769.518690][T17995] No such timeout policy "syz0" [ 1770.611809][T18002] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4002'. [ 1770.633245][T18013] input input57: cannot allocate more than FF_MAX_EFFECTS effects [ 1774.021798][T18031] input: syz0 as /devices/virtual/input/input58 [ 1776.023571][T18037] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4016'. [ 1777.495989][T18061] input input59: cannot allocate more than FF_MAX_EFFECTS effects [ 1778.223853][T18069] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1779.725252][T18074] input: syz0 as /devices/virtual/input/input60 [ 1781.173758][T18082] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4032'. [ 1783.355380][T18111] PKCS8: Unsupported PKCS#8 version [ 1783.377533][T18112] input input61: cannot allocate more than FF_MAX_EFFECTS effects [ 1785.781892][T18126] input: syz0 as /devices/virtual/input/input62 [ 1786.277513][T18136] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4046'. [ 1789.984186][ T4301] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1790.327124][T18165] input: syz0 as /devices/virtual/input/input63 [ 1790.484002][ T4301] usb 10-1: Using ep0 maxpacket: 32 [ 1790.491469][ T4301] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1790.520406][ T4301] usb 10-1: config 0 has no interface number 0 [ 1790.583767][ T4301] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1790.827328][ T4301] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1790.875765][ T4301] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.896063][ T4301] usb 10-1: Product: syz [ 1791.153705][ T4301] usb 10-1: Manufacturer: syz [ 1791.165854][ T4301] usb 10-1: SerialNumber: syz [ 1791.392249][ T4301] usb 10-1: config 0 descriptor?? [ 1791.466166][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.472873][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.159753][ T4301] usb 10-1: can't set config #0, error -71 [ 1792.183502][ T4301] usb 10-1: USB disconnect, device number 3 [ 1798.163785][T13766] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1798.424548][T18237] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4075'. [ 1799.405005][T13766] usb 9-1: Using ep0 maxpacket: 32 [ 1799.419419][T13766] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 1800.382049][T13766] usb 9-1: config 0 has no interface number 0 [ 1800.390073][T13766] usb 9-1: config 0 interface 184 has no altsetting 0 [ 1800.699458][T13766] usb 9-1: string descriptor 0 read error: -71 [ 1800.713817][T13766] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1800.760000][T13766] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.800315][T13766] usb 9-1: config 0 descriptor?? [ 1800.834308][T13766] usb 9-1: can't set config #0, error -71 [ 1800.859201][T13766] usb 9-1: USB disconnect, device number 3 [ 1804.448766][T18275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4088'. [ 1807.547664][ T9868] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1807.993973][ T9868] usb 7-1: Using ep0 maxpacket: 32 [ 1808.000840][ T9868] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1808.027289][ T9868] usb 7-1: config 0 has no interface number 0 [ 1808.062084][ T9868] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1808.079277][ T9868] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1808.097081][ T9868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.116751][ T9868] usb 7-1: Product: syz [ 1808.120949][ T9868] usb 7-1: Manufacturer: syz [ 1808.142364][ T9868] usb 7-1: SerialNumber: syz [ 1808.159203][ T9868] usb 7-1: config 0 descriptor?? [ 1808.778396][ T9868] smsc75xx v1.0.0 [ 1808.792319][ T9868] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1808.852732][ T9868] smsc75xx: probe of 7-1:0.184 failed with error -22 [ 1809.273594][T18309] input input65: cannot allocate more than FF_MAX_EFFECTS effects [ 1809.822640][T11940] usb 7-1: USB disconnect, device number 10 [ 1816.501786][T16409] Process accounting resumed [ 1819.548074][T18387] input input66: cannot allocate more than FF_MAX_EFFECTS effects [ 1819.578125][T18386] netlink: zone id is out of range [ 1819.583326][T18386] netlink: set zone limit has 4 unknown bytes [ 1820.024363][T11940] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1820.444992][T11940] usb 9-1: not running at top speed; connect to a high speed hub [ 1820.467547][T11940] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1820.509750][T11940] usb 9-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 1820.550116][T11940] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.955939][T11940] usb 9-1: Product: syz [ 1820.960296][T11940] usb 9-1: Manufacturer: syz [ 1821.452836][T11940] usb 9-1: SerialNumber: syz [ 1821.889432][T18405] ubi: mtd0 is already attached to ubi31 [ 1822.894070][T16409] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1823.276067][T16409] usb 7-1: Using ep0 maxpacket: 32 [ 1823.288419][T16409] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1823.319133][T16409] usb 7-1: config 0 has no interface number 0 [ 1823.326632][T16409] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1823.360007][T16409] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1823.393048][T11940] usb 9-1: can't set config #1, error -71 [ 1823.400921][T11940] usb 9-1: USB disconnect, device number 4 [ 1823.406807][T16409] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.437944][T16409] usb 7-1: Product: syz [ 1823.442141][T16409] usb 7-1: Manufacturer: syz [ 1823.541091][T16409] usb 7-1: SerialNumber: syz [ 1823.557811][T16409] usb 7-1: config 0 descriptor?? [ 1823.578143][T16409] smsc75xx v1.0.0 [ 1823.581817][T16409] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1824.163822][T16409] smsc75xx: probe of 7-1:0.184 failed with error -22 [ 1824.464655][T18429] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4132'. [ 1825.538687][ T7769] usb 7-1: USB disconnect, device number 11 [ 1825.904340][T18449] fuse: Bad value for 'fd' [ 1828.295831][T18462] netlink: zone id is out of range [ 1828.300986][T18462] netlink: set zone limit has 4 unknown bytes [ 1828.534519][T18467] PKCS8: Unsupported PKCS#8 version [ 1828.614474][T18470] input input67: cannot allocate more than FF_MAX_EFFECTS effects [ 1828.953777][T16409] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 1829.156451][T16409] usb 4-1: not running at top speed; connect to a high speed hub [ 1829.225886][T16409] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1829.247009][T16409] usb 4-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 1829.279903][T16409] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.306915][T16409] usb 4-1: Product: syz [ 1829.325675][T16409] usb 4-1: Manufacturer: syz [ 1829.361059][T16409] usb 4-1: SerialNumber: syz [ 1829.941996][T16409] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input68 [ 1829.974836][ T3608] bcm5974 4-1:1.0: could not read from device [ 1829.998489][T16409] usb 4-1: USB disconnect, device number 20 [ 1830.011454][ T3608] bcm5974 4-1:1.0: could not read from device [ 1830.369973][T18477] ubi: mtd0 is already attached to ubi31 [ 1831.554031][T18481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4146'. [ 1832.362756][T18497] input: syz0 as /devices/virtual/input/input69 [ 1832.480029][T18499] dccp_invalid_packet: P.Data Offset(0) too small [ 1835.083900][T18522] ubi: mtd0 is already attached to ubi31 [ 1835.955367][T18531] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4163'. [ 1836.370701][T18539] input: syz0 as /devices/virtual/input/input70 [ 1836.630880][T18541] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4166'. [ 1836.639802][T18541] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4166'. [ 1839.364071][T18565] ubi: mtd0 is already attached to ubi31 [ 1841.235330][T18588] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4177'. [ 1841.577481][T18591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4178'. [ 1843.809635][T18594] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4180'. [ 1844.025401][T18620] ubi: mtd0 is already attached to ubi31 [ 1845.798157][T18635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4190'. [ 1845.807093][T18635] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4190'. [ 1846.163776][T18636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4192'. [ 1846.209842][T18636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4192'. [ 1846.219585][T18636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4192'. [ 1846.371123][T18643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4193'. [ 1846.937127][T18650] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4195'. [ 1848.685609][T18675] ubi: mtd0 is already attached to ubi31 [ 1849.376104][T18682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4204'. [ 1849.385181][T18682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4204'. [ 1850.779410][T18699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4208'. [ 1851.157943][T18693] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4209'. [ 1852.905636][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.911968][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.134829][T18720] ubi: mtd0 is already attached to ubi31 [ 1854.773141][T18732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4218'. [ 1854.782115][T18732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4218'. [ 1856.593751][ T4301] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1856.859401][T18750] No such timeout policy "syz0" [ 1856.973822][ T4301] usb 4-1: Using ep0 maxpacket: 32 [ 1857.480370][ T4301] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1857.489403][T18746] PKCS8: Unsupported PKCS#8 version [ 1857.504148][ T4301] usb 4-1: config 0 has no interface number 0 [ 1857.510473][ T4301] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1857.590164][ T4301] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1857.603329][ T4301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.611532][ T4301] usb 4-1: Product: syz [ 1857.618019][ T4301] usb 4-1: Manufacturer: syz [ 1857.626256][ T4301] usb 4-1: SerialNumber: syz [ 1857.658690][ T4301] usb 4-1: config 0 descriptor?? [ 1857.684099][ T4301] smsc75xx v1.0.0 [ 1857.687749][ T4301] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1857.763915][ T4301] smsc75xx: probe of 4-1:0.184 failed with error -22 [ 1857.992730][T18760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4225'. [ 1858.731492][T18767] ubi: mtd0 is already attached to ubi31 [ 1859.140352][T18771] device ip6tnl1 entered promiscuous mode [ 1859.166332][T11940] usb 4-1: USB disconnect, device number 21 [ 1859.966298][T18782] ubi: mtd0 is already attached to ubi31 [ 1861.196592][T18794] PKCS8: Unsupported PKCS#8 version [ 1861.460130][T18798] input input73: cannot allocate more than FF_MAX_EFFECTS effects [ 1862.627957][T18806] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4241'. [ 1865.428440][T18831] PKCS8: Unsupported PKCS#8 version [ 1866.153847][T18844] No such timeout policy "syz0" [ 1867.285055][T18852] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4256'. [ 1870.369542][T18870] PKCS8: Unsupported PKCS#8 version [ 1870.568220][T18875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4263'. [ 1871.454614][T16409] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1871.643793][T16409] usb 7-1: Using ep0 maxpacket: 32 [ 1871.657317][T16409] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1871.701963][T16409] usb 7-1: config 0 has no interface number 0 [ 1871.724027][T16409] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1871.818181][T16409] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1871.986469][T16409] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.298299][T16409] usb 7-1: Product: syz [ 1872.311541][T16409] usb 7-1: Manufacturer: syz [ 1872.333337][T16409] usb 7-1: SerialNumber: syz [ 1872.360434][T16409] usb 7-1: config 0 descriptor?? [ 1872.383299][T16409] smsc75xx v1.0.0 [ 1872.403034][T16409] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1872.477047][T16409] smsc75xx: probe of 7-1:0.184 failed with error -22 [ 1872.965392][T18899] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4268'. [ 1874.364597][T18898] ubi: mtd0 is already attached to ubi31 [ 1874.432425][T16409] usb 7-1: USB disconnect, device number 12 [ 1875.893721][T18915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4274'. [ 1877.016940][T18919] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4276'. [ 1877.045297][T18924] input input75: cannot allocate more than FF_MAX_EFFECTS effects [ 1878.423708][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4281'. [ 1880.786262][T18954] overlayfs: missing 'lowerdir' [ 1881.470066][T18968] netlink: 1456 bytes leftover after parsing attributes in process `syz.9.4287'. [ 1883.864093][T18988] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 1884.005812][T18993] ubi: mtd0 is already attached to ubi31 [ 1884.257564][T18998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1884.264719][T18998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1885.600993][T19000] page:ffffea0001538a00 refcount:4 mapcount:1 mapping:ffff88805a669658 index:0x0 pfn:0x54e28 [ 1885.612378][T19000] memcg:ffff88804f1c4000 [ 1885.616670][T19000] aops:shmem_aops ino:706 [ 1885.621032][T19000] flags: 0xfff60000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 1885.630880][T19000] raw: 00fff60000080015 ffff88807d25a248 ffffea0001203488 ffff88805a669658 [ 1885.639514][T19000] raw: 0000000000000000 0000000000000000 0000000400000000 ffff88804f1c4000 [ 1885.648121][T19000] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 1885.655425][T19000] page_owner tracks the page as allocated [ 1885.662353][T19000] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 19004, tgid 19000 (syz.6.4297), ts 1885045708680, free_ts 1884887551363 [ 1885.680429][T19000] post_alloc_hook+0x18d/0x1b0 [ 1885.685193][T19000] get_page_from_freelist+0x3731/0x38d0 [ 1885.690738][T19000] __alloc_pages+0x28d/0x770 [ 1885.695333][T19000] __folio_alloc+0xf/0x30 [ 1885.699671][T19000] vma_alloc_folio+0x486/0x990 [ 1885.704437][T19000] shmem_alloc_and_acct_folio+0x5a8/0xd50 [ 1885.710160][T19000] shmem_get_folio_gfp+0x13f0/0x3470 [ 1885.715457][T19000] shmem_read_mapping_page_gfp+0x113/0x3a0 [ 1885.721268][T19000] udmabuf_create+0x85e/0x1060 [ 1885.726036][T19000] udmabuf_ioctl+0x300/0x4e0 [ 1885.730633][T19000] __se_sys_ioctl+0xf1/0x160 [ 1885.735233][T19000] do_syscall_64+0x3b/0xb0 [ 1885.739654][T19000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1885.745553][T19000] page last free stack trace: [ 1885.750218][T19000] free_unref_page_prepare+0x12a6/0x15b0 [ 1885.755857][T19000] free_unref_page_list+0x663/0x900 [ 1885.761055][T19000] release_pages+0x24c4/0x27a0 [ 1885.765812][T19000] tlb_flush_mmu+0xfc/0x210 [ 1885.770315][T19000] tlb_finish_mmu+0xce/0x1f0 [ 1885.774906][T19000] exit_mmap+0x3b3/0x980 [ 1885.779145][T19000] __mmput+0x115/0x3c0 [ 1885.783240][T19000] exit_mm+0x226/0x300 [ 1885.787307][T19000] do_exit+0x9f1/0x26a0 [ 1885.791459][T19000] __x64_sys_exit+0x3c/0x40 [ 1885.795962][T19000] do_syscall_64+0x3b/0xb0 [ 1885.800381][T19000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1885.806384][T19000] ------------[ cut here ]------------ [ 1885.811828][T19000] kernel BUG at mm/filemap.c:153! [ 1885.816863][T19000] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1885.822923][T19000] CPU: 1 PID: 19000 Comm: syz.6.4297 Not tainted 6.1.131-syzkaller #0 [ 1885.831069][T19000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1885.841128][T19000] RIP: 0010:filemap_unaccount_folio+0x5c2/0xa60 [ 1885.847368][T19000] Code: 07 38 c1 0f 8c 21 fe ff ff 48 89 ef e8 f7 2f 2b 00 e9 14 fe ff ff e8 dd ce d3 ff 4c 89 ef 48 c7 c6 e0 2f 15 8b e8 4e 5c 13 00 <0f> 0b e8 c7 ce d3 ff 4c 89 ef 48 c7 c6 60 35 15 8b e8 38 5c 13 00 [ 1885.866987][T19000] RSP: 0018:ffffc90004a57578 EFLAGS: 00010046 [ 1885.873049][T19000] RAX: c2775f46a7e04f00 RBX: ffff88805a669658 RCX: ffffc90004a57303 [ 1885.881012][T19000] RDX: 0000000000000002 RSI: ffffffff8b0c2ec0 RDI: ffffffff8b5f6f80 [ 1885.888973][T19000] RBP: ffffc90004a57718 R08: dffffc0000000000 R09: fffffbfff1d4168e [ 1885.896935][T19000] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805a669658 [ 1885.904901][T19000] R13: ffffea0001538a00 R14: ffffea0001538a00 R15: ffffea0001538a00 [ 1885.912890][T19000] FS: 000055555b029500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1885.921812][T19000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1885.928383][T19000] CR2: 000000110c40cf40 CR3: 0000000061cbe000 CR4: 00000000003506e0 [ 1885.936348][T19000] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1885.944311][T19000] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1885.952297][T19000] Call Trace: [ 1885.955571][T19000] [ 1885.958501][T19000] ? __die_body+0x5e/0xa0 [ 1885.962848][T19000] ? die+0x83/0xb0 [ 1885.966616][T19000] ? do_trap+0x11e/0x350 [ 1885.970861][T19000] ? filemap_unaccount_folio+0x5c2/0xa60 [ 1885.976486][T19000] ? filemap_unaccount_folio+0x5c2/0xa60 [ 1885.982120][T19000] ? do_error_trap+0x13d/0x1e0 [ 1885.986885][T19000] ? filemap_unaccount_folio+0x5c2/0xa60 [ 1885.992521][T19000] ? do_int3+0x30/0x30 [ 1885.996590][T19000] ? report_bug+0x3c9/0x500 [ 1886.001084][T19000] ? handle_invalid_op+0x2c/0x40 [ 1886.006016][T19000] ? filemap_unaccount_folio+0x5c2/0xa60 [ 1886.011635][T19000] ? exc_invalid_op+0x2f/0x40 [ 1886.016301][T19000] ? asm_exc_invalid_op+0x16/0x20 [ 1886.021324][T19000] ? filemap_unaccount_folio+0x5c2/0xa60 [ 1886.026953][T19000] ? filemap_unaccount_folio+0x5c2/0xa60 [ 1886.032580][T19000] __filemap_remove_folio+0xc7/0xaa0 [ 1886.037858][T19000] ? __rwlock_init+0x140/0x140 [ 1886.042614][T19000] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 1886.049633][T19000] ? _raw_spin_lock_irq+0xdb/0x110 [ 1886.054743][T19000] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1886.060298][T19000] ? find_get_entries+0x710/0x710 [ 1886.065322][T19000] filemap_remove_folio+0x105/0x2e0 [ 1886.070511][T19000] truncate_inode_folio+0x59/0x70 [ 1886.075534][T19000] shmem_undo_range+0x570/0x2390 [ 1886.080479][T19000] ? shmem_truncate_range+0xb0/0xb0 [ 1886.085693][T19000] shmem_evict_inode+0x265/0xa60 [ 1886.090633][T19000] ? inode_wait_for_writeback+0x21f/0x280 [ 1886.096352][T19000] ? shmem_free_in_core_inode+0xb0/0xb0 [ 1886.101893][T19000] ? bit_waitqueue+0x30/0x30 [ 1886.106481][T19000] ? do_raw_spin_unlock+0x137/0x8a0 [ 1886.111677][T19000] ? shmem_free_in_core_inode+0xb0/0xb0 [ 1886.117229][T19000] evict+0x529/0x930 [ 1886.121122][T19000] ? proc_nr_inodes+0x310/0x310 [ 1886.125966][T19000] ? _raw_spin_unlock+0x24/0x40 [ 1886.130811][T19000] ? iput+0x73f/0x980 [ 1886.134799][T19000] __dentry_kill+0x436/0x650 [ 1886.139402][T19000] dentry_kill+0xbb/0x290 [ 1886.143743][T19000] ? dput+0x37/0x1d0 [ 1886.147637][T19000] dput+0xfb/0x1d0 [ 1886.151363][T19000] __fput+0x62e/0x8d0 [ 1886.155356][T19000] task_work_run+0x246/0x300 [ 1886.159973][T19000] ? task_work_cancel+0x2e0/0x2e0 [ 1886.165032][T19000] exit_to_user_mode_loop+0xde/0x100 [ 1886.170327][T19000] exit_to_user_mode_prepare+0xb1/0x140 [ 1886.175875][T19000] syscall_exit_to_user_mode+0x60/0x270 [ 1886.181444][T19000] do_syscall_64+0x47/0xb0 [ 1886.185856][T19000] ? clear_bhb_loop+0x45/0xa0 [ 1886.190531][T19000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1886.196424][T19000] RIP: 0033:0x7fb408f8d169 [ 1886.200862][T19000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1886.220479][T19000] RSP: 002b:00007ffc5c006d58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1886.228889][T19000] RAX: 0000000000000000 RBX: 00007fb4091a7ba0 RCX: 00007fb408f8d169 [ 1886.236848][T19000] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1886.244807][T19000] RBP: 00007fb4091a7ba0 R08: 00000000000001b8 R09: 000000175c00704f [ 1886.252768][T19000] R10: 00007fb4091a7ac0 R11: 0000000000000246 R12: 00000000001cc53c [ 1886.260739][T19000] R13: 00007fb4091a6240 R14: ffffffffffffffff R15: 00007ffc5c006e70 [ 1886.268705][T19000] [ 1886.271714][T19000] Modules linked in: [ 1886.275618][T19000] ---[ end trace 0000000000000000 ]--- [ 1886.281061][T19000] RIP: 0010:filemap_unaccount_folio+0x5c2/0xa60 [ 1886.287294][T19000] Code: 07 38 c1 0f 8c 21 fe ff ff 48 89 ef e8 f7 2f 2b 00 e9 14 fe ff ff e8 dd ce d3 ff 4c 89 ef 48 c7 c6 e0 2f 15 8b e8 4e 5c 13 00 <0f> 0b e8 c7 ce d3 ff 4c 89 ef 48 c7 c6 60 35 15 8b e8 38 5c 13 00 [ 1886.306891][T19000] RSP: 0018:ffffc90004a57578 EFLAGS: 00010046 [ 1886.312987][T19000] RAX: c2775f46a7e04f00 RBX: ffff88805a669658 RCX: ffffc90004a57303 [ 1886.320981][T19000] RDX: 0000000000000002 RSI: ffffffff8b0c2ec0 RDI: ffffffff8b5f6f80 [ 1886.328944][T19000] RBP: ffffc90004a57718 R08: dffffc0000000000 R09: fffffbfff1d4168e [ 1886.336906][T19000] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805a669658 [ 1886.344871][T19000] R13: ffffea0001538a00 R14: ffffea0001538a00 R15: ffffea0001538a00 [ 1886.352835][T19000] FS: 000055555b029500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1886.361754][T19000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1886.368331][T19000] CR2: 000000110c40cf40 CR3: 0000000061cbe000 CR4: 00000000003506e0 [ 1886.376560][T19000] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1886.384538][T19000] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1886.392502][T19000] Kernel panic - not syncing: Fatal exception [ 1886.398838][T19000] Kernel Offset: disabled [ 1886.403157][T19000] Rebooting in 86400 seconds..