last executing test programs: 5m57.571142495s ago: executing program 32 (id=391): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="4e7417f7f0afaa93ec1feb61e6ecf74becf5b64c4498ace47170e3439f9db3344aceab3d192ddef8789f7f826a9732df1f1165a989ed666ec2a96eb78b40d1fdd5d53d8c6d56a19efc82066d026cbaa27ee8352b2ab989070bacd96deb903134a387cf0cd7fa82de91ca1193f7ccbd5fb2bf8398e9e5e1bace8f81486378b42f308d9a55d3c14c642591f333cc6a6aae7abffd8de21e569c4cd0219c7b72b44c6b43a5c9b11226ac8cdb1760e405121fbe45ad7349b581cdf811c2cce1585a72ca327313353579454c3bad2460f16ba64d86984d8fd0d61be6902f1d5c92a4b1aa8ffbf256793899af036634d15895e11bbd29c1ce6f9a1114d48f9fcd624db25507c962549a97d4d21619202e112c08e486d7acc55d5ab8e591ed2da9b7e325fca61855a511c7170100f023a048978e5711eea42caa20405f64a5861b2f57e81644750a0eb3498c5ca76105ac6ab2c5c50e4f9b1ff72fcc6f3a01f98119cb4e8dafcf9e35426300018b8cc649c17fcf87999e0d6d1a4c501e9d92934f912b6740d191d9ca4c142b7782f83d3f4862989633eb043b21563a8360c47298fdbc3ce7ba271a5c317c9c66b6a535e2bfa7d7ae54c1ede664560b58e5d4de9cafb2d43cee207612e632cbab64c99b24363d2a57d064be77f0846d003dfcd2d26138a5f9b94205570e1137d5b72919551f25fcd73a5c612e4affc15a868413241eef86b65d0405de5a47384e51810784293333777efe59b8312e59f3bde54ca8a521932103473dce1d2db1f4fff7d338f98fe1243027acc019709d9eef6af6f8fcaa1b7bd6e5048955cfe725a9682bd3f5361057360fe4c163175606d89b380b295a0139dd06404aca8b1beb5a9be7e57964b74344fb1336e126d570e5cf2b64fdf6ca9d33d7b73b4c13c4ef9d1ffd2b82714a78a57b1bc630bbd6d4e63a847e1146376ed4c0585adcc053bd8acdc6df529f3b251de651d3e6398749402391c613f34a5f7e6099e76842e8d66a78cbaa590f6593bf87095bf4a1015a2cad2c13d8656db8f226387fc355a9fff471c93c3c10b265f7472523aeaa5d08f753a48b096b913f7c030d7355f68c9d71e66919373daecc64d14db760283f49101d6360df9cfe65ea91338e31767b94a1e1463e134b6f19ba51d70da4391341231d5466dcaa39711f227d25f9b320a004243b4f8edec5d8a498b3732466e3bbb548368d20a78c172099647f5938ea6c1ff8c94a37313e871189cb9da58271add887459fc89e615e5c99a125fef828d661096f74fb8b4edb8cd703615b8c732995243b2c826b888eeeb089cf10bc187d36ece6ee30d60c46bd6fe0508aa8308dbf834fe0aaa12deaf4bb1b9337e63b13d6076c5245e27be4fd8cceb433b9608569fdc85dd6c04f37259851566f1f1983536aed757671fca1a3f6615ad5fed80ac36609c6f879f86d8c11a357a04a1113ae2d356433e11ae50169ea71ca614f7171508319cc0b7a9decdae434ed2bd3a313ab41999d09f3cfcaa80924129f77b89173b3a877b845285cbfa9e51fdc0fca6a3c72748cd88173cd8150c825bb0da72518485a3e159422dda9770dba5cb4343dbccc5fc1541e0a157a5295adb32ba7526ca16e6bca5342ce4e58e9cb567670a5acc03e2eaac39185085aba969c97174057026c1e170625c09061583142b21c91c0f8306392c2be9ed372ede666c3f1186ef70f493110e94cfebaaadba5938a29a669c94562e571e607f2fdba0c5721e2026b6a490f80afbbb5c71ac7f8a9fea566284bce2039f5b2405f811145f4ffbdd7e8febcaedfd162fc503e1a29bb63d88a465c66339f1553dde48991289451363ff349587e4099469a5052b4b337baea3cfadc28319e3a24f635d8d5ee8500503fbf1aff0bc1e6f50227cd79bc9e6c2a5ab0f0b92a1e3c6f81e3578f7ce5071e0fc77cdf1d18fe77dbf4a6bfb2587f8e8e317f98ede1f8f32a64d736f9a5c451a01cacfcc0b9099c4808840c2948cd8998abb4badbe30d93a55cfc23df97998efa139ce8681be3b4032e536db63d9c3b7ca6904ae3f0abbd740385be14fe6764c74e19d8efa9e3580252cb25d0d3e2eae1b82f4187b92173189b5f2d4d536c126e453267a6c0410b872cf0f6e2e2b82a527667f598eb0c87bf1723a63a213e22e093abb757af27a53c0f6f3e29c32aeca4c619d5c8f49d41424ddae64ab67ae7286af0fd931e93d06f711b70cc3c6a58a392392bd4623d25144e840c1539a0b8b29ad19d7768c4d2764ca5f8ee72d96a3eb5358bfcad65dc575cfdcb52c662d33321a96ab197aa4d13d984a2a18f94345373fb5dfa031967614dbf070e24c9cf11a8fe8a128aced2d75e5203099db970933abab5ef8f84b1a56c1b2384e2d9413d41226dff043fcd3d8b7bd833aa02d6016e9f756adce96405cb530e7b5d62b483d6e4a5df06cd553581bee273483c243127106df7fabf5daa98007f5178254f8b5024f994c98770cb0267b6a3bdf819d2ac74dd2b38464a6542c28c8ef9220f2dbe947efcbdac9ce81748665957b2ff1b11f73e79154dfb1729f6d6011adb99e4b30f4ae6b1409bfbed29807ad5e02150f1af53e305049ac26c2b28c8ee1f6cc40ddc48ac831ef3ed2e157cb513de06e1fe69f1d66d1a0432f75eebedee30b0523d71e36bcd0f622d95772687b59fec199087dd09c7eb88329d6aad37f3c6d4289dcb799d9349b4b8b401723ec90e06caedd02f294cafc508b03440890aeef82fae39c677d58586d973e5d8c2f00c34f12efa4c8b3b73c1b0941bf8be3ac8119e7d4ebc8e6853c459ab8a0567fbebf1e6036ed187d7f9f7ba0cb8b887389adc41dd23d027009707662ea429c71f01bdfa3f0bffdda25d2dcdc725464e3d4cf32c6f95dcf90eec4978b9af79c92a359fb5bd08776fa77b20a06ed65c64c0bb7a4e34e9e6e85d6e4f4ee34fc7a9e404bd5213f49704082558375b1a76d4e6e84e678358561425108bc7b3630d0a801971e32c037434b80add0a10d5509ef436bf9a8cb5c0a0fe125614a23688ae18dad4766b1339d7080e51af087cc2dd029dc757098d1bfb9c975af94e0d37e9a24c6a6661c99fdcdbb95d023dc016abdf81c1a09b8b4897ed1f2512aea923b362752cad64393673dcb2dce3d63e379f25c340559a98abe43589879a3537bc88526f1c8499db48bfa8d0b51118b3992930cbfc99e48d815c56aad1560c0fc25540a82e17fb931360abb23d748152280ba1603fff1cac0a041c6f9ab949a059f050144e61cbe5ffb8e272f115cbc82bd62cdfb9759a63e77d3cfdb0a25e504aa5a1e4eda15fa2e1e1a7bb18e74e62a13fce33900d760d89608c79f05b9e11be34cdffbafbdc60838f5a6f76cd8a3ff1072d90462f77abff31e054f3f552772ea750f451d091cb2fd6eef92a800a7837a28ab1be8885b6f9eb18a3093fd989f697bd23edb8075c7120ff375ac72576d625080e107843aa7523fbcea78c18b9762a89e562bf098d61b5b2f2521d709a9611e312c7691f47a503823fdf715afcc6ed3e11dcd0dd77a272cfbdbc2405e26eaf4e2698b9501279dc095c8869128af162383795ea6a14b6cd0b1cb3828b4d98cc4439d8dc51c20ae9e5328bb05a591818d6526df969384678dd202fd4415f94b861b2ccaf8873680ca6cb9d9fd12f26c11dc6bce36cebbf7734b7bc5a16d882407e26cac42fc9e178af21478c782ac0418c2ecf1876ea2cbeb946b881e460fb81c02c2a91b859927ba4e72f7d03091b3dcc460438ee1aa7ac00f561ccafdbef63ca4286ba78b38c443d470dcfd2211ca74703d27d1cba021071da6559505ddd7f0c8b71115d7196318bff0d2a3381573f79f23c7cb8de2d2dd8d9b86268586a614880ef74c92e5fc80906f453f949afecb888337d591fad11d4efe7ed1cdac88a0569e65ef9733f0a2ab70a323ccb10fbb98df982f0ee5596665ec52a2935d0e3f9d83175b2aca4ed312e622bae00fa4171e73c168735e79bc21561ef91f83adc582bec05a44d6dcfff78556690c9b104d5e64ba7f8481c38c1b7e35038fb60f2beb7ab4a64c9426a498ac3cc1c6c192b6e95215dd8907593b523a399b583cc21808b4b7c237a069c59728f58dad4b00fcf21f70f91713b056db9b3f8a9da36fbf641e1681f6c56a45da353b116547cd4506ca1289b595b475c2596707111f05037557adf077d467b01cc786717842add3a0767d195edcb05a7598a4d1b3baee786a969e87beabf8221ce2b2f9010a85eb31911baa39f1c59f289116d8b9cd360ab400eea764537511b13c871e4b497ec78be7043cf1a737764f2dc810862d41f0c32d0a3f713e9243df3777fa053bfb646b8e1bfd6675e96404e9ffcc2bfe30d09db0684bb8ab8267a34705eb57f374cb828043b25e71c2b8b237d38d44018d79c8e375e21d55178c12bc96e429b339887a821bf0132d55e1ecb161165e9b152034ae6e468c175a71e657dfdafce9ca273ed84b4b469f2e4bd8847d0b86e8d12c19bd18083f97ee1d00b588427d09b54c1b3254e53dfe48b5c19fd6a899994fafa1b31d1f17dd20a69a3b20e9b31527c7e076ef1c9333c00c1b94d5dd71305eb096498202a276870ecd7d68e5737787b2e8ae158022397bf77829adb0b807473a139d4896e30e35aa10059e38fa8431b647dbd2ba57855a82b816d19cec134a378e9cfceb4654bfe77721c10025fa24e1149ae89822441c2fdf655e0d70bb50836352cabed3630689c35a2984671ab9c963d5860a3689c8c1562228d397d0a3cb59e8602d7e72247e29656ba04e53cd2659511274d766cb8d78755f2a3127e2c70b91dd46ba520068d80f6c4115f2b223a3f606d194f5c37bd80550ff5e9aaf4ce5ff329012239f25c12efd79a697362f90d42cac99f323f99b45b918088c2590b6cfe8a1795492d1520e51ad7a2c403901c7809616710872d0c3d67926752d308ca84916bcfcf9573501227318822d40d00742992662cd629a0cf7f688d326fbd10f201c459c7f463cb34b12f8854c4df436170e3c97840803771caf57ff87b70de5cc4a8ecf45775a4f8849df99e6eabe0bb64bb7f6af35701bf384bb04728f87a31297341a662912925e5f0806a682148efd04b099022f1aea22e3419d157dca427cea5dbbab7a0ded30641d16a83fa26e1551d4a5e8639bf175e1dd80448043539083a379aa9ab4e07f54662c9c4e45178f43cca3c61552c7db984f56d35fd41c41cf8d176d76b2ddf0a8e2c36621cd7c49b411e4dc516da4bc418b2410ff1306c639f1a17f36a62229d2cb32049022d2cffbdecf467f82c314a0388f5c74d7600e1cad70e2fedab09ec362e09c5c18d7e38fb5eb48c1dba21ca96bf9ae470de81f7231048fde18225f64f04e1f322e25e45e0a8e4240d6035bd4ac4824edf111553edb5d3e1e432460cfc48fc7783dfcf26f7e4edb510c201d097a3e4a7d24400e68c24ef57ca2e90176fc32c76b2d9d2334c0a011de42c04306664f40ba1f6d25d002e6331234b9131d6783536d49acfcd47fb83e5380df7a2c87574e26ccaf595ba6849d6f855cf19bebf271592b2bfbc2d7bf998a0012edf01fc6b00f911fd662b6c33d896f7c5c32a2f91037255a16785945e8c3a8dba19889969ec01a3da9c836365305b6c944fa95484a6a50257b9da0bd3ef7bc055c6b0abe09003200298a5ddf381e8eff042aa2eaa2f07aee41a30260fcbb042baffd6e022d725b4b7805a3550109f0d92bb33092294f2b2a84a965550e1b23d13a57f125eed60206d75db2ad5fa44f37a0d600fc7136b581a76bafd3c01ed229ad8734e1b044107713bf6c779600622ea3358ba78f1a8476d934cb9fb19f799aef8a4a232e986a5da978d14fe64e918dd34b8ba29d44f0366b527786fe469941587b0cef4a515315e78b93b52f88a3191959b66e320c2272fb115255ca0d7b88e1bca06e71f90c3dc32fdd3dd8bc1c5e71f606b648c49e9e1486fbb8f24873826faddfc876ea79a2446423f4cfe6b0e94fceaf21c6412e2f9f8e7e2ea9fef73cbb227ad9d89dcde0b92f075b57f3d82b69c297a70c4e27c143e62e13e48ae65a874381763a870cbcbddeba6fe7bf9904c492c0d433fafea50f89ea8fa66ebead1ab6e751914c45e164865ae49bb44d55b40589f5c601b8c202a62cf91ce26753e7e9656d7158a6b39e44ec92d2aacf60fd0077d14dc92bf406c99aa54971b28ed81f3f39fe8d0293e90a494b6dd9b1c90fefc859655cce4eabb4071380cc41ed628f83b0909e56456536afa595316afa012cfad467884e558565ca6f162bb8c012939800eb664c30ebbd5057c26cf67cffedef77c9af863f7293dfef1c2b7c5f54d84547606831b47e177d3edb370196afc7312325b0877676b41c625850b62b05c715fd4892e0878b36130b8e3f5bf8d8a714fc32f3b9b9b38f8e90d55806c62b798947b6ad5dfe240aa95bad5407329d2a4ca1ad6fd1233507149333809b4a9d5e295f944e38a86d45c04d856d280397afff31bbe161b18f153389ec47b999b8ceb38305f801d25c60856517abd16b8e9ac4185dec46e856a0b5d95dd6d67f6e5b12a543a91493f9aa2eabbf3a5aee4218a1687919b7974d5e6f576691aafc10f105a73f676395ac6e5166b7d003f2c3737c04e7461ffda1151a7fc4776b1881460eab2877ff6204e1ed607f785a5c05ae4b171b7fed2575a75d11f73bf7d6074a011e0023fd3fa843e3c63dadb95f9ae07ad29c509e9d06e59e6b7564786a01acb67b8488d66ef21a793bfafb69df84cc2557f97b15db98ed8bdd1909c83da5890596e53f218cd980ceb75ce1b678bc222fd21c453b72852fc3aba410d666e07cf2b38c2702158768fbd489e469db093c7fefa0c27dc826db746a3c8c99e3261279c7cf79d21ae096609b8db473136c5065cfd13db955b87a7479effdf66cbf10110e9f6aa8f4b711109d98e6dbab022f2f4690424e241de429c50a6de76595296a42a4bf0b2c1d9842fb0ba3ef6ef1aaf6cbb8e839764bd9677e491f23fbdc28d0ed5d9e09be429da7ed1a93e85828f9175c74446bf62baf9726e23207226b34d839a42e13c63fbef2caeba904f7b5dfa3667ade62a8e3bf5764828f9b2bdf2ea11b70e2a603d3a69b33ace06e8986fc811e03d2de5bd4bc898f67a3cb8c75abf198e9455e3a0f86b81b94f0cf367b6ea410b97feae2d9411b410179903a4df9a989f25e9ed2b5a7763e11a01874039d88d9a3cb4435301f7f922f29c8729149f90e39d6f2998875728a3b0eaccb793385abbf3735f3948aae9cf5982c6d3f3bdd5061d611cdf7209392fbb1ce6e709dedfbdbb4442e243178f93b8ec384d8fabb69de31bf3232618f05945b162406708a3151222f42c54d982db53e0cb3baba85d6c13e7f1a2a8ab296a0313ed9a476605ef876f5c3f10346a33b9e6af598d865a04a5b46613d10494b1c9d51435bb551249f06595c96a525f8cb76d2ddde641f0745161f3496726e9f4b33886180e05718ee265fab07f8ffcf95a7a985f334e33db22d0907c1ffc12abe33e880ab6b1198f5fb3c9a21e58e021ca300f333ab16e7f47fad98ac28ebfbcbe405f0d8eaf08f286dd4035b1fb922f48d34914a628fa342efb64f9f1f943bc7772333887cd2e69a16f00c51c62afb8fd1f3ebecf61d166a769427aa0d36c0ccc7b461a8a1b10d241d8a32a46e010085bf3de570861546f7b03e2887ff3aa5692b2f8602912186de386e3bcc2597a18f6c2a9ff6215110a1fcbfe3b5e8a9e893750f3a7d1063004b3b2e6d109339c2a7aed0a972993d717f960fecaf9c1565d2823ead43ccf659da1f65b45892b562a55f32005e87d2f9678a01fd3bf596c0ef873fbb0754bfe87eb36f3e68925e97602881166b4f22e4b0cb40f3835011e8d6e22bedf1f96092c4e91f3b0ef46af602e7e80694719ad08bb0e6d59f29ab5da5832ddf55dc9ec64f68f22d33c7f81a9cd754e896dcbea71a5c0ab471d496b5a40281077f96374c2cd2475a0b2b82b0f8d84568df8a05cc2be840ff8319d1bfec5f086f4a9116c68645597d78b55e483a5cf1f25b423ba35bb2e03fea1aac22a0ae233182f96fb9023be57e47f79169df21adb0c00b9f6b6dd0d1f6a14eafc2b03c27a3c38bdd1057d7e0446e64759f80bfe23e765a70d4e66cf9159da4263574761d413760951935b3b4241e188550f4a61707a7ff26c48b8941a825d7a849cdcb834880d8b9241b96dcd73ad4235bfefc4aea659d2b7116eddd99c92b290ed89ef2359cdb9e2b6ba68f3206ca035d8731e7c4b667a9baee1b4a4c5b483f7793543b33cbf59629d6e51d7d7ab52266d478510c4374e3d3ec6ead98af9257434e2548e5d8ede59ccd7a0712bd61a43c5d4d98844c52d3f97925da0959dc5640f4e168e0c3f1130bc7587272e5011bfe62ed423c0a61790b3633ee059654b12a2c405dcaed5bd154113fc63b5f934d90bfd54f6d94029cb298c88b849ddc3358e0f255362da2e229725ddd33bcdc3a3f94a4181499d0924786fc0f8a41a525326735218ae0275794e260af9d83aea4bbe4a25b8dd74ca78cc973ec4c2358cdfe7c242c19a8c986050cf9b51dcdbd8937a5f85b8979e1f95b10cb7a92bfd4ccc6d0fe36b80ad89d76bc454aee3d02edd0ada94874deda4d1db16b933ece2c3fe5dfc5ef3b81acc173da43cf92ef00bad4d6d56489bb9eef0db3e8d24973118601ee04235850f35d52975b9d062afe29c77bdf4ba424fbd2a6681e7d8a72df5a7b1e893b9a8dbce598d28860e8fdb4c25928dce80d626ec1aeccae3e11ac805ec17180cca8189927c874385111cd9e6f4e018138e4a79c02fbb01bf4381ff648f19340ecbf03db5ec984e02296a0209d2c31266b34b0336f0e11b35d504d9e8c268ead0362a5b0a7289ce069784fafed6f9f69377ccd1bdab347c2a089b82fc1555a07e3ee873705b9c8bef22443b4b2ad2019e4fc153834e3e5eef0665c6d803963dd9c2f0546f25133011fe8f725744d86b33cad127bad73e3b55ae88253386246cafa7fd563e382c1659fa147537d348bf6cd973ab8715d0d1bebf57a975a88905a1df56274b30aa480b00d2da67d750e28fe98f57c64743064f56631540cf2666e04e87fc3173e5cf7407454763ce1bd064de2023767c3b41cd4cc312d3c65bd6410a3f2f898a883da2bb8d6cee72339c28d001cfc7d142711c100a424e1bd734a6701d28d38d075b73eb1a9b422a64f3bc52901d7d4c7ff6ef97c62f661820d9a173f35c34f266694363261698cef03d0e91dc42ecbdd5c7ae60fdcf0ca19afed2414d8ae7febe31e0df02d05b0713a996587f123f9ae8254338000770d939f8540129ef761a741c312bd3286ad14dd8be2360fa78e895d328b618e1c67db72a83e2cd46a009fe48342ee87371f1d14a248c1cc8cf0bcf6bda1c2fa1551e958b8006650b0bd8e56b239b9a2f3cf0070ebd397d76bdfd3d62f236fe1ea6d4e7334e0f96182f320b98b4322691f24baabaee2d3b2ccd0c899e0261e90946c1ca7ac41cf9ec3bb321783bfb3ccec02033b11fdcc32e2064c815623aeca5cd0d5376d2aedf37a5f047fc427fc0eddec5d8cbeee8bfda52390eee341a180f43f413f7ac652e5f770a7506057e731355f9a6ef597799df7720bd494b5d2c2b02b0e7fc078f1a6fbe73005bd8cb3ae3c4edb9ae8d1dba0eb9a2007e7462de675f753b2174869534fed8e9ea4eae3a09da34eca0ab9f0560e05736aaf13504bbead2bc1e0ee97e6a6c01b79b6bacb017b8bf744aa250b38af2d4862951d0b0e588c6924f880d008d246b96be8d1e577acb271f33da415ae85a4a36d47288617232d32de0d1ae8eed9cd02d4e6081a956627e3f1bfd1f3651f06d6d61473d58591816b75961ec837a65f923e39816d620dc8e80375337c781020b85e03792a4b2774926d59075040f5ecaadd4163414547d1df0e2606106a67fe9f69652a59400bc042cb81a76e4f14d380882f579627cdd5fc478d5cd89a4dbb24c4252c89146d9b0cfe7fa99a72269ff5d5f04d8c91a9e354d10cd095fe24101e51d6be20d89fe9b21601eab458d9bc0fe73698efd2192c368f87405a413817ecfd88214dea122fb0d8d139efb395246c0790e174c9d8adb10caafeb2b6a2742c966fc687cbdb853be478befda9b89b106660854a00ced9c7028a7071f40280d91daf78d26c854051f73340431d003ce66680045b1cc4480abec0331a807d631a4560478626fd41aa8c3fdcb66d75aefb6a29030b0c94be961dce67db553863464feffc8b72c3e7219003eb942d359e777a87bd2c2e1a27f58e30e0eecc10d9b2c9f0b1552ba2965503ef2f77a35d88b82abc97837874b67bf1ae656a3b2fed7d60be4de83a83da8d98994cfb9c458fd2b883d8e9751670c62eec4bec7c7873215bf99f17e9628f1ac1fbeac4004d288fe279d2bcfeb4ed7671048de8598c7a9ae328e829e4115a5ba155ea2641b1df684d457f527339ac8ea6705ac7e73590f900bd73a434e4d72d8175aca5beade289da131374c40aa72014c6446fd943e8a2f7ac9e7bb008128bde5af3d3c1e1811f7df88329700fd40a5cb12396412283978589d04019c9e019ebad5829b15098ecd0f03b5901b2f48644a13b15558abe018087240153990dd38e9e9e60ad9bf1df3f21d574383535ea5f44298a29c1e90bce931dd45f5b4d06029929dfc88923bea8c20b56bb43868804e5e28486aa345ecc9e821d24f9e02c120066ad008ab22bb6f22bbff6036bddf2dc05c50bbcfdedd621be2410f9b8de2f364c8cd259234072bf3ad45fcb418d40c81c553bfedc91f50cd322c8cf07a8f81862dd0d3d0d02ca4acf0fe7ca0da1d90e3e74740ce6a38d69de93c01e46aafe400accfe872b76f94e4a055e1849a82a520b9ac9cebc34609843fc04bdccbd220f7a9d499553cfd9809c6084ec3ea2132ea5350bd9ce7ea7af466d3bafb0aceb86a0e72b658e8b3866fe9a28c78afcb4da501ecc357d2f4c9787f72486eee8ff03aed4ddf09b247215c134c02d50106dff1082732e750f7eb804320978873d1daf87369a56b84f8bc2fe2a98a755fbd645b3ba4d2ba3691ef05832540cfe12c7e19c5ffa35a59e77cf999eb1d38ffdea79ebcbd573d1020bb37dae73ed250be1de70230aaa346865835ddc3e38ef371f102518adbc1bfd4124146686e610457c603fcfa2c4a6f74e8c904b977f4af9475d72adfceaba7db108330983b247a63b2609daba03df9f27665343ba40e475873a2c774561a8776088663377dd330ba415261bd7e25e9ebe435542a0e2243dc1bfe7d429b43036f8c1aa8081df47e007fd54f6f6eb420bc416f1c9a6d82e572d365e881ccc6e8f48ac1b338effe51c6251801ebcbecf5732601c4bf1dbb703af33738828b69392d10091813ce2b93e6b51d2d263f44de2f7f1d17441dd72d3ee4135d8591dfe4dc96c1317f488b141a92e6f750ad60874694a4959f5488342c3f306f1eab8472615abd0fd27cfa71e9c88ea9957c7431033e127a5d3a9c774500b6899f4e3b5f2fb7367ad200", 0x2000, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_IOCTL(r0, &(0x7f0000002a00)={0x20, 0x0, 0x0, {0x5cd, 0x4, 0x4, 0x14d2aaaf}}, 0x20) 5m34.19742335s ago: executing program 33 (id=563): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000680)={0x80, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) 5m22.96011113s ago: executing program 34 (id=739): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) poll(&(0x7f00000000c0)=[{r1}], 0x1, 0x70) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x8001) 5m18.748028849s ago: executing program 35 (id=751): unshare(0x62040200) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4m28.072080568s ago: executing program 36 (id=1499): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m20.556678297s ago: executing program 37 (id=2482): r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014", 0x5) 3m9.42806816s ago: executing program 38 (id=2635): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1e7) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r1, 0x40104d05, &(0x7f0000000900)="00000d0000000000000001") close_range(r0, 0xffffffffffffffff, 0x0) 2m51.581873637s ago: executing program 39 (id=2886): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x2, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m20.595943155s ago: executing program 40 (id=3291): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x5, 0x6, 0xf4, 0x40000000006, 0x853f784, 0x2006, 0x0, 0x291, 0xfffffffc, 0xa000, 0x2, r2, 0x0, 0x104, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000b80)={0x50, 0x0, r1, {0x7, 0x2b, 0x2, 0x16008011, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x8, 0xffffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) 2m18.606523536s ago: executing program 41 (id=3303): openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002002, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc02, 0xf) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0108000400000000f7ff0a00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef1f16f10ccf40000000500090002000000050002"], 0x58}}, 0x0) 2m15.678185415s ago: executing program 42 (id=3326): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xf642, 0x20, 0x6, 0x9dfe, 0x11}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 1m58.279505s ago: executing program 2 (id=3452): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd82, &(0x7f0000001b00)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x1, 0x6, "6c4bcc", 0xd4c, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@dstopts={0x16, 0x5, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x1, 0x6de, [0x6, 0x3, 0x356, 0xffffffffffffffff]}}]}, @hopopts={0x2e, 0x198, '\x00', [@ra={0x5, 0x2, 0x7b54}, @generic={0x4, 0xcbb, "a09859ce3072a6251138072af9422fd6acaacd3cb41b9fd85027f1cac5dc101a165de94da9404591ecba7f3d90fe07a30ba54826f03b1acb8471cb74b77b469a0e107cff6e4927094d675859ed301e636cb5ec4a8cfa08bd4faff16fb056b9739cd69fa899635ac709eaf0418afede456d124a461c9030830bd99fa18507cbbc3e9070028513b238d3bdef7f8bb6f9de1e2a55d5ea469a8ad140245aa7a1b7d91a9b405f80b2c4c8e221f6dbd503dcc90b571e0b257017a6b024f31c51bae109f23c4f9a0aa0d3c247372ab8ecf72f980dfd6fc4fa4345dc3b39e31e7085c7368cd51970b67a82e5d64ac9c5ebf73149043bda376e490557d0e2bce7c11cd41c1e124d821b98188eeb9c214a949f7804ba3319c5044c11e6e3ed05757ee01dafd61c5e7effacede9ff7ae78399b6222f8bf4c000714df3ac9f66a222520b5a13ebe80fb99a1339f52ab698b6400fadb39212c64cddc3ca8f305646782da18200e96844ff7e865a57bcc7aec9deb7fb336ac9aaa506a45ee79f8aadc6fae031cee2f5dce1340c051195c4f1a163648dcad6943d822ff1816930a8bb5e9b46a8ea122d94bcc03a5acdc3213a2652263ed669ce830e6b9fa7051d733fd3021bfd491f7799943ccd138bbfd0d1fd6f27454cb03d3430f0aad5be351c4c4e07d847fffb45052362145ada88b71bad74d6c85abf2b5bfdfaf34408af30b9c3cb7ba43eb440b242fbdb95d26e514c46b592e9953d1b707b25f840813cf28b3edfe297039f265c477096413e2597f4fefc5b4985a84023bcd97a99efa3932d5dd44162762e6c34aa29059e73c7d9faed912799bd218c212103057408359fb968f98eab4e4cece1f7bf84e9dbc7378140ba5d782fabb6a5f81b1e5fab7eae9274a5efd11291531754e64b364aa11fc73ec502843d742a1bcc1d4fd889826138a91daaff9cdb5393accc56fbcfd08902a98fb9a914a0ff7720b7c9f8aa7cb591eb7c0b9adaad09771d71c666b1f00eb4c9d2e0606b5c69bdb5256c501e655f7156043ae484dd213fb943a3e3a97b259cd80401b6652a511aef6afd9f2b1bad12c24e2bafe2f5ff8adbb0bfbb2729a60c8fc6a745af95d34cd8b2128246f6626d9d00969cdbd28db57a1cf8ba88b967ab78360f7ba4000fea578bb6727d7809b66484c492d55ac1b1d9365b606f396c581854058b67b109a3a3f42f5c6e5584c1bc0a6543b8cf6f0f3cb91b9460a556e94d087293658166b2e644d06bcdc9cdad0021d80c4e4c0a35a4a508085e2565322b2ac81e5d07515488a1daf7d5b1434119491f156f2683e4b6df5744023f1b1779b8ca5e91aea19f716f96e62b261701304a11ba937de4fef6a71120b5712b7e70a2783f04a457af7dc2cfad063b9dd4afaa03af4260384bf2c12a7de6e35600d5bb9204ba181aa36eabc50d14513783371fadecc993be0edb2ac4ca624c55d364e98d0218b1780ef67a58c4d99a69790eabc4f164262f6788a5c69e4116c760dcc546e34c1907bda624f2b7f0a406b5b2517d0e77e905324c6be590fb3594b62b3a4d1e5101b6bfaccc7b6410a0f32f2394f84340a8644c9e7e8901cbc0a1ca774ff4fb81d33feb3434fa9dd1523195c9309f75328bddae237d850f9165bdcca95c6a5eb48f6fc70e1f3ef7abf153c2066d8d3e4cca3bfb7e8e3f4dbfafab31d341e3dc37fc47a4e8bc54607aa1f98311076419aa7e90995ff65972ae63a758bc8dc341664a22dd191506bd9e63039f2460748bd158bbab95c9f81a4f2503dc99b12e41236d7c0568419ab3ff471bff1e80ba2edf0eacc66fc5a695dd9d54e113f1c8c18cc90adfc5a4226e4717de4050708368af2128967fbce109b5e84f334bef0b2f4ecde3e48cf4f6e503a1881e6516a9cac16e58c0004a089b331640debab307e339c904f49d490b10aba947570556e92f13518c916f6b88a38db6ad83f6cbd9a8d913f43cffb100cff82e2d3fcb0debcfce0e89ba072cef825638fea9ccd8ac447541753439d9f003889a1c22516dee40b9764149fe6a7fae3118496b170bf8f5f0566ddeefadeaaea24371683c38849caca60b845e0351b405d18b478c849ac99a103176dd3061273b7b10a779959a128d707fc782221e64e204952fcaed7ed29222ac434d6fc1cecb92671d25b9c79d67a75233e5c0869cf31b5f94b8e9de4cdd81ae1e3605acd2bbf59f852c24ab5c3e70c70186d7c5d7e072964fe3c9b0880c07d0a6584f6ae74553bcfedd4f9f4e908718d5a6b771dcc85aa25edaf71b64e3db11c76cc6571cec6a9a78fd679fd176f8d7df1e61146e5d017cab40925902e18c5f820bc730623df72fbb2ebbbd3dce097b7ce2c65042e6c08e0a0512f138e8d5cb30dff9e3e0275ceeb0fa4ae7232e7b74c2a01e69ec381c51475d9e8c40416f35ee1579ce8f4e24486dff104f399e54a20c5d79afb66e440ee8b73034066fec913fb859a12207376754772bfacd5578be54f46340f28cf847ba03e4f34ea1fd388ee7c019ca5635c79c9d582bcb9cce1e2ad28dbc807e77c43a5e0995fe9aaf4c3aef3920003eec9f719c1c0288cb6e1b0d1490785a35634d5b13ef6612a6614ee1178d94643be311baaf575481e0c7b3666f506ab90d492f56b00b90c2bc0d8c8117406a7124e459c0de9526fb738fa2818d135b35ba414bad69c6292c9a81d89d8441d05b853c41cd1cc4fa08230922df3fecd1e64a8d2a7bab39ea0b0bb1ed0771d8ab54e36fdef321afddb3a64196cc7ae79416f6683ba864022e20ec326f110cab2f15957f73569e47ce9f91ce00a45a9e1c5c45fca83f39d8b8294c9391a1be5e49a7e49c83daf6a3000214f9a6996ca8dcf75b05e0332c2470700ecbadf82de466c88da81b9928f224acc4e34636f8666f4ae29fa1dea7964d1c210aac0dd8bc3b5fc4efdf0073e3a542a4a533aa3e40ee26d1c9332bf636e69d99fce5f83e76b7b3d5460ac7f1ad01f3832628d00335f27768d013dca72d29e7a38d0b00d5301f364c7567550f78a9f86a0e4071419ddd5e8c837912a9bce1047d21add98739e5162b59c778d21522679d62835f744918b0cd1c8b2496cd4c0610f4af7a2faad41739068c07cb4a887b92238794bfe3b474ae86cdb8eb3d13c08fb8090292d204818190e0391004d4a519c4128e7320198d16112bb4e9f749af2bf1510c6c8a005a5375b7d6faf6168632c71073670ea1306773a788ece7dbe9d8e02985925088035449b5db7e14479eeb838d4e1797d09fe5dff07837b432661bfad15cb0c6f6bd6f2b0da0eff7cfec70c4160a878773aaa3d3d79731a8ea152e36e5ec04df63f55d381eab57f0033b155850d95c7e6944ac1d010eabe4fba3f1bbb410911dff48ac306cb034d3f9c6b5c1b7dd8d92b19dae10b0c55ea57643a7b64830ab619e1b4b2bf5152eac44ad72982fc16aff931b7978b5da673827c9c9eb449aec09ae5394dfd73a7cea4e2dcec45a1fcb9963e260685d3c135c0d44891fa49fd42a55d8590846ab4d1138874f313a9615ed07bec3cd3d4a0039306e26f16196d0437c9fc958df4878e3006db84dd190f93e714ae77ef16210e502213820cf814b1363859f4667c837c99b822a6eaca46d27667f6c90f21adeac3534d15b949afa46ac651f59368ebf0554c4341c9f2cfacd233cba186a4679a7211b7f0265d468d12e574727adcd3a31aafe0ed4cf5194e0d7befa3e6c4bcfc7601207c3507ebec346f6edc7b62a01d091c08637f1ac760068e2e74d0e144682f01ad062cf8f9ac9f2768c8d1124a904e71be9da61877099886fe57e57eb4b1549dea958916d3722b369628440a687682cabeff2bc48cfde801724a8bb7f68a6d1f2bad9c4304fead0af58c7bd6cb5bc547752ca91e63cb288e25cd21bef672f16b6a9fd0bc2d0fa0433178a450f6023a1cdd1aa51d6e0e9f44abc557c7515c5ea106168c8013acd55aa517385bcad98609545c0b48e64ff88120b6cff52054b8a2a3b33713f7671a9e80f4dc9031eb2514ef8e3ea07ba13d4c3774b0d1f8608b47fb686280bb7fb2776b271ee643d902e54e38f75cde30a0196cbeeb09ab5161b83df385a62a21de42c08b019ea5f17664b95951168158e632cd6dd3fedde3337adbb5894a2736dbed80ef5eefd0c166e60dfe76c57160d749649632442cc93191551cec66566d38fe5a8032aaedb4f515f37fa31edeba1665f876393eb8b830b1d66a3024e65cf262d479158f052616c87b472b652c301877ec0098d1c112bfffb2d9bfa3c47dacdd30d52e74a9cacdd894ed8bf76c163167eaccd64ac4888ec6ab915443ddf8e3d8829938ff96063f2b8d5bc87939a9eb0b612aeb09818baddeab4ea5f89b8b9d8e11b51174d643ed2d95c75ca862c7e2f6cb54d97ca3c4e2178405a79ba4b36b39e1b5693850286756dcd8716214a28450ff4a3d4ff493fb26774b310c0e1478fa0dc32b7e864509845f28cdcc789099c50bcfbcbf797944b37a62a2f0bafc1f482850c6cfff333f86cc95a848e6f96a978f0783c68a52e32ed6344bcd5284565bcbdf7315f74779228ea21205b453e928a23154efa753c6158228878f0b1329754263e8d94"}]}], @name_distributor={{0x44, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x2, 0x0, 0x0, 0x6, 0x350e, 0x2, 0x4e21, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x1}, [{0x8d, 0xd, 0x8, 0x5, 0x7, 0x8, 0x3, 0xaad4e0}]}}}}}}, 0x0) 1m58.17390126s ago: executing program 2 (id=3454): memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/route\x00') fchdir(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x5750c0}, 0x18) 1m58.050908278s ago: executing program 2 (id=3455): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcd}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x10}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}}], 0x1, 0x20008050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 1m57.945845919s ago: executing program 2 (id=3456): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 1m57.707477853s ago: executing program 2 (id=3460): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2711, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 1m57.289795012s ago: executing program 2 (id=3463): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m56.93429554s ago: executing program 43 (id=3463): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m41.065495301s ago: executing program 6 (id=3578): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r3, r5, 0x3, 0xfe02, 0x2, 0x1, {0xac7c, 0x0, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x412f, 0xe154, 0x2020, 0x8, 0x9, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 1m40.710345529s ago: executing program 6 (id=3581): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, r0, 0x0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, 0x0, 0x0, 0x0) ptrace$setregs(0x4212, r0, 0x58, &(0x7f0000000080)="0100000000000000000000000000000000000000000000000100"/96) 1m40.453879037s ago: executing program 6 (id=3585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000001000)={0x1, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002000)={0x1, 0x0, [{0x1b, 0x0, 0xfee00d00}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x85e, 0x0, 0xffff}]}) 1m40.060263365s ago: executing program 6 (id=3588): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x18d883, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) 1m39.627782974s ago: executing program 6 (id=3589): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) symlinkat(&(0x7f0000000280)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) 1m39.32500529s ago: executing program 6 (id=3592): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 1m38.769619414s ago: executing program 44 (id=3592): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 1m24.259425464s ago: executing program 4 (id=3693): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x90a46, 0x50703}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32, @ANYBLOB="200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1m23.813271161s ago: executing program 4 (id=3689): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000340)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0xab07, 0x1) 1m23.520155722s ago: executing program 4 (id=3692): r0 = userfaultfd(0x801) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x881, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x14, 0x4, 0x8, 0x6, "ff0053000000200400010500"}) r2 = syz_open_pts(r1, 0x141601) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r0, 0xffffffffffffffff, 0x0) 1m22.96753969s ago: executing program 4 (id=3698): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 1m22.748231836s ago: executing program 4 (id=3700): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m21.577121427s ago: executing program 4 (id=3702): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x11, 0x1, '/proc/mdstat\x00'}]}, 0x30}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 1m21.20091275s ago: executing program 45 (id=3702): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x11, 0x1, '/proc/mdstat\x00'}]}, 0x30}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 1m5.252689842s ago: executing program 7 (id=3866): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x1ee86, 0x409}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}]}, 0x2c}}, 0x24008844) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r2, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x2000e844) 1m5.114258746s ago: executing program 7 (id=3875): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:03/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='00:03\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pnp/devices/00:03/resources\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='disable', 0x7) write(r1, &(0x7f00000001c0)='set io 0-0', 0xa) write(r1, &(0x7f0000000200)='activate', 0x8) 1m5.108240756s ago: executing program 7 (id=3877): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222', 0x2f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222', 0x63) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1m3.858415202s ago: executing program 7 (id=3881): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x18d883, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) 1m3.685722683s ago: executing program 7 (id=3871): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) shutdown(r1, 0x1) accept4$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10, 0x80000) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1m3.509504215s ago: executing program 7 (id=3874): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r3, 0x0) syz_clone3(&(0x7f0000000380)={0x116980180, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m3.336396823s ago: executing program 46 (id=3874): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r3, 0x0) syz_clone3(&(0x7f0000000380)={0x116980180, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) 58.379069104s ago: executing program 1 (id=3917): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="2a0000000600000000000000000020000000000000000000020002000000004bba8327358ba9f58b0abd1c0018e9852c371d77caf940ccf2"], 0x2a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 58.268593261s ago: executing program 1 (id=3920): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c000100ff04000000000000d8fd010006000000090000000600050088a800000800feff", @ANYRES32, @ANYBLOB="08000500", @ANYRES16=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 58.063891137s ago: executing program 1 (id=3925): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=@delchain={0x24, 0x65, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {0x0, 0xa}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c881}, 0x880) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x500, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000002c0)=[0x1], &(0x7f0000000240)=[r3], &(0x7f00000001c0), 0x0, 0xff}) 57.984110965s ago: executing program 1 (id=3928): creat(&(0x7f0000000000)='file0\x00', 0x1ff) mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) mount(&(0x7f0000000640)=@nullb, &(0x7f0000001080)='./file0\x00', 0x0, 0x81001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) write(r0, &(0x7f0000000f00)='file0', 0x5) 57.919553064s ago: executing program 1 (id=3930): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000001840)=ANY=[], 0x0) 57.672140093s ago: executing program 1 (id=3936): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='* . 2147483647 8192 65534 65534 1 secinfo 1 1 0\n', 0x30) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.export/content\x00', 0x0, 0x0) read(r2, &(0x7f00000002c0)=""/4096, 0x1000) 57.532907146s ago: executing program 47 (id=3936): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='* . 2147483647 8192 65534 65534 1 secinfo 1 1 0\n', 0x30) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.export/content\x00', 0x0, 0x0) read(r2, &(0x7f00000002c0)=""/4096, 0x1000) 16.060478261s ago: executing program 8 (id=4457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x54, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x48, r4, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x8}, @device_b, @device_a, @initial, {0x0, 0x400}}, @delba={0x3, 0x2, {{0x0, 0x1, 0x1}, 0x3, {0xbd, 0x6}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 15.977500192s ago: executing program 8 (id=4460): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x40, 0x400200cc4, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.81686482s ago: executing program 8 (id=4462): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x40001) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140ff"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 15.670445055s ago: executing program 8 (id=4464): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') r0 = syz_open_dev$loop(&(0x7f0000000440), 0x84, 0x4a00) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 15.576895742s ago: executing program 8 (id=4466): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='devtmpfs\x00', &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000001000)="040000000000000000000000380100000000000000000000000000000000000000000000000000006d7964657600") ioctl(r0, 0xc180fd09, &(0x7f0000002000)="040000000000000000000000800100003801000001000000000000000000000000000000000000006d7964657600") ioctl(r0, 0xc138fd06, &(0x7f0000003000)="040000000000000000000000380100000000000000000000000000000000000000000000000000006d7964657600") r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dev/mapper/mydev\x00', 0x0, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000004000)=0x1000) 15.309648931s ago: executing program 8 (id=4469): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000640)='\xf0\x891\xb8R\xe6\x8d\x12\xe5\xe3+\xcd24\x01\x80\x1a\xc9A\x93\xb1@\xbf\x89K\xd0\x86\xd9\x86\x18\xc4:\xc3\xe0\xac\xed~\x97\a\xbe\xfb\v1d\xbe\xa1\xc1N\xd2p\xf0\xc6\xf3\x8eD\x1b\xc7q\x99?9\xf1\xe6\f\xa9\x90\xec:\x037\xe8\x0f\rX6\xf2\x88\x8d\r\xd2\xfc+\x19\x9a}\x9c\xd9\x1a\xef\xf1\x16d>ah\xa2\xa7\x02U\x06\xe1\xe1PY\x90\x17\xf0p\x01*!I\xd3$\xd00C\x88*NA\xc3\x95`\xb2\xf1\xb1\xed\x91\xe4\x87\xcf_9\x1eIpAfN\x99\xa9\v)\x98p\xea[\xc5&D\xe7\xf3\xba/\xcd\xdb\x9dz\xb2\xbf\xc6\xea?\x13(\x15\xc1\tm\xe7t,[\x14|bM\xfa\xeb\x91\xb0\xdfAR\xf3\xe2', &(0x7f0000000300)='\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xc9\xe1\x90\x10@\x1chOK\x98\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x17\x81>\t\xc30-\xe2\xb3\xb00x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x80000, 0x0, {0x0, 0x0, 0x0, r3, 0x49801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f00000001c0)=0x4, 0x4) sendto$packet(r0, &(0x7f0000000400)="05", 0x1, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @link_local}, 0x14) 1.518421239s ago: executing program 3 (id=4638): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.440533558s ago: executing program 3 (id=4639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x6000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x31, 0x14, 0xe6, 0x0, 0x8, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}}}}, 0x2e) 1.253820721s ago: executing program 3 (id=4640): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x34000) 1.244346477s ago: executing program 5 (id=4649): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) write(r1, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) close(r1) 1.201158s ago: executing program 5 (id=4641): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 789.324522ms ago: executing program 9 (id=4643): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:04.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='0000:00:04.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:04.0/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/pci/drivers/dwc2-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000f00)='0000:00:04.0\x00', 0xd) 784.219596ms ago: executing program 5 (id=4653): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200000001"], 0x0, 0x34}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="b805000000b98e0000000f01c1420fc7b463e5000000b9800000c00f3235010000000f30410f220566b88d008ed866b8e0008ee066baf80cb8e1fb4b8cef66bafc0cecf20f005700f30f1efdb97f0900000f32", 0x53}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 711.04161ms ago: executing program 9 (id=4644): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x30, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 702.519807ms ago: executing program 0 (id=4645): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) write$cgroup_pid(r0, &(0x7f0000000140), 0x12) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 610.316888ms ago: executing program 0 (id=4646): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000e, 0x11, r0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc4a, 0x9, 0x4, 0x1, 0x3ff, 0x3, 0x4002004c2, 0x1000, 0x9, 0x10001, 0xfffffffffffffffb, 0x8, 0x4, 0x0, 0x8, 0x4000000da91], 0x41000, 0x2008c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 606.198297ms ago: executing program 5 (id=4657): bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000010c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x20040000) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x3c, 0x11, 0x1, 0x470bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80d57, 0x301}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_EVENT={0x8, 0x2c, 0x3ff}]}, 0x3c}}, 0x0) 601.531685ms ago: executing program 9 (id=4658): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4b39fd, 0x0) 490.807964ms ago: executing program 0 (id=4648): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000180)='.\x00', 0x800, &(0x7f0000000080)={0x2, 0xf8, 0x20000, {r4}}, 0x20) 487.308209ms ago: executing program 9 (id=4650): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x203, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x0) 410.180659ms ago: executing program 9 (id=4651): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000140)) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x10) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a", 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f00000002c0)=0xbd55, 0x4) 385.181633ms ago: executing program 0 (id=4652): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) dup(r0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x1e) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 378.564518ms ago: executing program 3 (id=4663): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000180)='.\x00', 0x800, &(0x7f0000000080)={0x2, 0xf8, 0x20000, {r4}}, 0x20) 320.96263ms ago: executing program 5 (id=4654): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x49, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3b, 0x2000, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x4e20, 0x27, 0x0, @opaque="043363e8167e675a7b4957478df830e8a1119af97f00c52cbb8f7fd1377cd2"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 38.407901ms ago: executing program 3 (id=4655): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x94, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 28.389098ms ago: executing program 0 (id=4656): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f0000000100)='./file1\x00', 0x144) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f00000000c0)=""/55, 0x37) lseek(r2, 0x7, 0x1) 1.39918ms ago: executing program 0 (id=4659): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='i801_smbus\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/i801_smbus/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0000:00:03.0\x00', 0xd) 0s ago: executing program 5 (id=4660): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x2) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f0000000140)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) kernel console output (not intermixed with test programs): ode bits. [ 317.418043][ T5108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 317.434088][ T5108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.456106][ T5108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 317.463098][ T5108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 317.471952][ T5108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 317.744336][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.942063][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.119525][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.498433][ T13] bridge_slave_1: left allmulticast mode [ 318.501160][ T13] bridge_slave_1: left promiscuous mode [ 318.503919][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.511915][ T13] bridge_slave_0: left allmulticast mode [ 318.514587][ T13] bridge_slave_0: left promiscuous mode [ 318.523954][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.814663][T15727] netlink: 'syz.9.3481': attribute type 1 has an invalid length. [ 318.931643][T15731] netlink: 'syz.3.3482': attribute type 4 has an invalid length. [ 319.053165][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.124246][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.163574][ T13] bond0 (unregistering): Released all slaves [ 319.244097][T15727] 8021q: adding VLAN 0 to HW filter on device bond5 [ 319.416013][T15729] bond5: entered allmulticast mode [ 319.451289][T15683] lo speed is unknown, defaulting to 1000 [ 319.575193][ T5754] Bluetooth: hci1: command tx timeout [ 319.605990][ C2] Unknown status report in ack skb [ 320.194395][T15683] lo speed is unknown, defaulting to 1000 [ 320.264942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 320.294942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 320.549773][ T5459] 8021q: adding VLAN 0 to HW filter on device eth10 [ 321.132279][ T13] hsr_slave_0: left promiscuous mode [ 321.144498][ T13] hsr_slave_1: left promiscuous mode [ 321.158450][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.182064][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.244833][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.271330][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.399809][ T13] veth1_macvtap: left promiscuous mode [ 321.414717][ T13] veth0_macvtap: left promiscuous mode [ 321.434277][ T13] veth1_vlan: left promiscuous mode [ 321.447329][ T13] veth0_vlan: left promiscuous mode [ 321.645025][ T5754] Bluetooth: hci1: command tx timeout [ 322.020473][ T13] team0 (unregistering): Port device team_slave_1 removed [ 322.038637][ T13] team0 (unregistering): Port device team_slave_0 removed [ 322.449544][T15683] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.452683][T15683] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.456396][T15683] bridge_slave_0: entered allmulticast mode [ 322.460892][T15683] bridge_slave_0: entered promiscuous mode [ 322.466561][T15683] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.469797][T15683] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.473706][T15683] bridge_slave_1: entered allmulticast mode [ 322.478572][T15683] bridge_slave_1: entered promiscuous mode [ 322.508938][T15683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.516109][T15683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.547124][T15683] team0: Port device team_slave_0 added [ 322.555447][T15683] team0: Port device team_slave_1 added [ 322.575121][T15683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.577680][T15683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.587261][T15683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.606023][T15683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.608576][T15683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.617921][T15683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.667726][T15683] hsr_slave_0: entered promiscuous mode [ 322.670640][T15683] hsr_slave_1: entered promiscuous mode [ 322.674238][T15683] debugfs: 'hsr0' already exists in 'hsr' [ 322.677255][T15683] Cannot create hsr debugfs directory [ 322.916626][T15824] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4252604744 (34020837952 ns) > initial count (25771729976 ns). Using initial count to start timer. [ 323.154366][ T5459] 8021q: adding VLAN 0 to HW filter on device eth11 [ 323.420913][T15840] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4234756656 (33878053248 ns) > initial count (25262286960 ns). Using initial count to start timer. [ 323.726051][ T5754] Bluetooth: hci1: command tx timeout [ 323.882603][T15858] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3507'. [ 324.215901][T15683] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 324.233173][T15683] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 324.242411][T15683] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 324.265991][T15683] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.273703][T15683] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 324.305438][T15683] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 324.309374][T15683] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 324.322634][T15683] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 324.330110][T15873] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3511'. [ 324.350106][T15873] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3511'. [ 324.483714][T15887] syz_tun: entered allmulticast mode [ 324.569192][ T5899] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 324.622659][T15683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.652687][T15886] syz_tun: left allmulticast mode [ 324.673162][T15683] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.694165][T10037] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.696544][T10037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.706618][T10037] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.709635][T10037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.735274][ T5899] usb 9-1: Using ep0 maxpacket: 8 [ 324.740524][ T5899] usb 9-1: config 0 has no interfaces? [ 324.748382][ T5899] usb 9-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 324.755413][ T5899] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.759130][ T5899] usb 9-1: Product: syz [ 324.760980][ T5899] usb 9-1: Manufacturer: syz [ 324.763030][ T5899] usb 9-1: SerialNumber: syz [ 324.775890][ T5899] usb 9-1: config 0 descriptor?? [ 324.997882][ T5899] usb 9-1: USB disconnect, device number 4 [ 325.155263][T15914] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3517'. [ 325.487880][T15683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.805292][ T5754] Bluetooth: hci1: command tx timeout [ 326.109951][T15958] netlink: 'syz.4.3527': attribute type 1 has an invalid length. [ 326.311791][T15955] bridge1: entered promiscuous mode [ 326.314193][T15955] bridge1: entered allmulticast mode [ 326.321376][T15955] team0: Port device bridge1 added [ 326.357654][T15958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.361126][T15961] bridge0: port 3(team0) entered blocking state [ 326.364568][T15961] bridge0: port 3(team0) entered disabled state [ 326.370117][T15961] team0: entered allmulticast mode [ 326.374363][T15961] team_slave_0: entered allmulticast mode [ 326.379746][T15961] team_slave_1: entered allmulticast mode [ 326.417340][T15961] team0: entered promiscuous mode [ 326.425887][T15961] team_slave_0: entered promiscuous mode [ 326.434505][T15961] team_slave_1: entered promiscuous mode [ 326.443746][ T42] audit: type=1326 audit(1786040408.881:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15969 comm="syz.9.3529" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702efec code=0x0 [ 326.448867][T15961] bridge0: port 3(team0) entered blocking state [ 326.455843][T15961] bridge0: port 3(team0) entered forwarding state [ 326.532423][T15683] veth0_vlan: entered promiscuous mode [ 326.554076][T15683] veth1_vlan: entered promiscuous mode [ 326.645717][T15683] veth0_macvtap: entered promiscuous mode [ 326.663074][T15683] veth1_macvtap: entered promiscuous mode [ 326.702522][T15683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.721843][T15683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.984771][T10012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.994093][T10012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.024218][ T5459] 8021q: adding VLAN 0 to HW filter on device eth12 [ 327.115433][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.120015][T10012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.123265][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.127752][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.128495][T10012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.145334][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.672658][ T5459] 8021q: adding VLAN 0 to HW filter on device eth13 [ 327.722242][ T61] kernel write not supported for file /stat (pid: 61 comm: kworker/2:2) [ 327.891613][T16017] overlayfs: failed to clone upperpath [ 330.576437][ T42] audit: type=1326 audit(1786040413.021:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16082 comm="syz.3.3559" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feefec code=0x0 [ 331.093445][T16111] netlink: 'syz.3.3564': attribute type 1 has an invalid length. [ 331.143149][T16111] bond1: entered promiscuous mode [ 331.148866][T16111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.668560][T16111] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.682119][T16111] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 331.704283][T16111] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 331.752267][T16111] bond1: (slave gre1): making interface the new active one [ 331.769202][T16111] gre1: entered promiscuous mode [ 331.785858][T16111] bond1: (slave gre1): Enslaving as an active interface with an up link [ 332.908191][T16165] netlink: 'syz.3.3577': attribute type 1 has an invalid length. [ 332.965649][T16165] bond2: entered promiscuous mode [ 332.967970][T16165] 8021q: adding VLAN 0 to HW filter on device bond2 [ 333.164382][T16165] 8021q: adding VLAN 0 to HW filter on device bond2 [ 333.172756][T16165] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 333.184291][T16165] bond2: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 333.193746][T16165] bond2: (slave ipip0): making interface the new active one [ 333.197435][T16165] ipip0: entered promiscuous mode [ 333.202118][T16165] bond2: (slave ipip0): Enslaving as an active interface with an up link [ 335.198666][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.640961][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.869094][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.079674][ T5108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.099360][ T5108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.103686][ T5108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.107836][ T5108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.117835][ T5108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.318600][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.511034][ T42] audit: type=1800 audit(1786040418.951:2480): pid=16231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3600" name="bmaControls" dev="configfs" ino=63378 res=0 errno=0 [ 336.644973][T16234] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3602'. [ 337.192119][ T13] bridge_slave_1: left allmulticast mode [ 337.201826][ T13] bridge_slave_1: left promiscuous mode [ 337.216694][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.257904][ T13] bridge_slave_0: left allmulticast mode [ 337.265186][ T13] bridge_slave_0: left promiscuous mode [ 337.273738][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.794210][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.804546][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.815146][ T13] bond0 (unregistering): Released all slaves [ 337.837953][T16269] bond2: entered allmulticast mode [ 337.840190][T16269] ipip0: entered allmulticast mode [ 338.119068][T16275] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 338.229859][ T5108] Bluetooth: hci1: command tx timeout [ 338.532574][ T5459] 8021q: adding VLAN 0 to HW filter on device eth1 [ 338.552732][T16220] lo speed is unknown, defaulting to 1000 [ 338.791299][T16267] bond2: left allmulticast mode [ 338.793362][T16267] ipip0: left allmulticast mode [ 339.075006][T16299] tipc: Enabling of bearer rejected, failed to enable media [ 339.163621][T16220] lo speed is unknown, defaulting to 1000 [ 339.239968][ T42] audit: type=1800 audit(1786040421.681:2481): pid=16305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3620" name="ipv4_port" dev="configfs" ino=64048 res=0 errno=0 [ 339.393533][ T5459] 8021q: adding VLAN 0 to HW filter on device eth14 [ 339.710727][ T13] hsr_slave_0: left promiscuous mode [ 339.721920][ T13] hsr_slave_1: left promiscuous mode [ 339.735582][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.739576][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.751451][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.763317][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.804199][ T13] veth1_macvtap: left promiscuous mode [ 339.807151][ T13] veth0_macvtap: left promiscuous mode [ 339.809715][ T13] veth1_vlan: left promiscuous mode [ 339.811956][ T13] veth0_vlan: left promiscuous mode [ 340.177196][ T13] team0 (unregistering): Port device team_slave_1 removed [ 340.193847][ T13] team0 (unregistering): Port device team_slave_0 removed [ 340.285195][ T5108] Bluetooth: hci1: command tx timeout [ 340.444805][T16321] lo speed is unknown, defaulting to 1000 [ 340.915479][T16338] tipc: Started in network mode [ 340.922272][T16338] tipc: Node identity ac1414aa, cluster identity 4711 [ 340.966072][T16338] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 340.983262][T16338] tipc: Enabled bearer , priority 10 [ 340.994302][T16220] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.999343][T16220] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.005565][T16220] bridge_slave_0: entered allmulticast mode [ 341.011552][T16220] bridge_slave_0: entered promiscuous mode [ 341.024170][T16220] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.042494][T16220] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.051503][T16220] bridge_slave_1: entered allmulticast mode [ 341.063295][T16220] bridge_slave_1: entered promiscuous mode [ 341.103872][T16321] lo speed is unknown, defaulting to 1000 [ 341.119329][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 341.253565][T16220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.265010][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 341.282535][T16220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.407626][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 341.410151][ T5459] 8021q: adding VLAN 0 to HW filter on device eth15 [ 341.442598][T16220] team0: Port device team_slave_0 added [ 341.448791][T16220] team0: Port device team_slave_1 added [ 341.520504][T16220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.528261][T16220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.555037][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 341.555349][T16220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.574010][T16220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.581604][T16220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.609009][T16220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.695186][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 341.781613][T16220] hsr_slave_0: entered promiscuous mode [ 341.791111][T16220] hsr_slave_1: entered promiscuous mode [ 341.797469][T16220] debugfs: 'hsr0' already exists in 'hsr' [ 341.800154][T16220] Cannot create hsr debugfs directory [ 341.835079][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 342.001377][ T5899] tipc: Node number set to 2886997162 [ 342.125920][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 342.365222][ T5108] Bluetooth: hci1: command tx timeout [ 342.404999][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 342.643317][T16386] fuse: fd is not a fuse device [ 342.869619][T16396] overlayfs: failed to resolve './cgroup': -2 [ 342.935003][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 343.242687][ T5459] 8021q: adding VLAN 0 to HW filter on device eth16 [ 343.485873][T16402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3650'. [ 343.508788][T16402] tipc: Started in network mode [ 343.510816][T16402] tipc: Node identity ac14140f, cluster identity 4711 [ 343.522108][T16402] tipc: Enabled bearer , priority 10 [ 343.957372][T16220] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 343.985584][T16220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 344.003678][T16220] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 344.024293][T16220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 344.028073][T16414] lo speed is unknown, defaulting to 1000 [ 344.030844][T16220] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 344.058148][T16220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 344.061906][T16220] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 344.074601][T16220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 344.243009][T16220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.276041][T16220] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.295871][T10012] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.298567][T10012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.311909][T16414] lo speed is unknown, defaulting to 1000 [ 344.319328][T10012] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.322697][T10012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.445110][ T5108] Bluetooth: hci1: command tx timeout [ 344.518368][ T9] tipc: Node number set to 2886997007 [ 345.216954][T16220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.243678][T16470] overlayfs: failed to clone upperpath [ 345.463104][T16467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3662'. [ 345.846024][T16489] kvm: emulating exchange as write [ 345.854279][T16220] veth0_vlan: entered promiscuous mode [ 345.864689][T16220] veth1_vlan: entered promiscuous mode [ 345.906153][T16220] veth0_macvtap: entered promiscuous mode [ 345.953684][T16220] veth1_macvtap: entered promiscuous mode [ 346.045053][ C0] net_ratelimit: 2 callbacks suppressed [ 346.045077][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 346.086328][T16220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.284088][T16220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.948105][T16499] lo speed is unknown, defaulting to 1000 [ 346.995251][ T5827] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.998481][T10012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.001998][ T5827] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.021256][ T5827] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.033527][T10012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.078029][T12677] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.085116][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 347.119188][T10012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.123446][T10012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.639376][T16499] lo speed is unknown, defaulting to 1000 [ 347.846638][ T24] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 347.995205][ T24] usb 12-1: Using ep0 maxpacket: 8 [ 348.001319][ T24] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 348.004609][ T24] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 348.035560][ T24] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 348.049783][ T24] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 348.064081][ T24] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.072230][T16534] netlink: 'syz.4.3676': attribute type 1 has an invalid length. [ 348.079339][ T24] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 348.088105][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.135010][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 348.197727][T16534] 8021q: adding VLAN 0 to HW filter on device bond2 [ 348.334728][T16538] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 348.335373][ T5801] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 348.367895][ T24] usb 12-1: usb_control_msg returned -32 [ 348.372812][ T24] usbtmc 12-1:16.0: can't read capabilities [ 348.606037][ T5801] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 348.643825][ T5801] bond2: left allmulticast mode [ 348.687708][ T5801] bond2: left promiscuous mode [ 348.698242][ T5801] bridge0: port 1(bond2) entered disabled state [ 349.080435][ T42] audit: type=1800 audit(1786040431.511:2482): pid=16565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3684" name="dev" dev="configfs" ino=64409 res=0 errno=0 [ 349.136088][T16564] usbtmc 12-1:16.0: usb_control_msg returned -32 [ 349.170870][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 349.231535][ T5801] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 349.234964][ T5801] bond0 (unregistering): (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 349.243398][ T5801] bridge0 (unregistering): left promiscuous mode [ 349.341395][ T5834] usb 12-1: USB disconnect, device number 10 [ 349.464427][ T5801] bond0 (unregistering): (slave team0): Releasing backup interface [ 349.550202][ T5801] team0: left promiscuous mode [ 349.649532][ T5801] bond0 (unregistering): Released all slaves [ 349.661054][ T5801] bond1 (unregistering): Released all slaves [ 349.676218][ T5801] bond2 (unregistering): Released all slaves [ 349.837319][T16568] xfrm1: entered allmulticast mode [ 349.919501][T16568] ip6gretap1: entered promiscuous mode [ 350.205225][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 350.358303][T16588] overlayfs: failed to get inode (-116) [ 350.943879][T16604] fuse-io-uring is disabled [ 351.255149][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 351.479851][ T5801] hsr_slave_0: left promiscuous mode [ 351.496263][ T5801] hsr_slave_1: left promiscuous mode [ 351.677911][ T5801] veth1_macvtap: left promiscuous mode [ 351.686158][ T5801] veth0_macvtap: left promiscuous mode [ 351.696898][ T5801] veth1_vlan: left promiscuous mode [ 351.704637][ T5801] veth0_vlan: left promiscuous mode [ 352.285213][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 352.859953][ T5801] IPVS: stop unused estimator thread 0... [ 353.021194][ T5754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 353.031256][ T5754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 353.042139][ T5754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 353.049488][ T5754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 353.057880][ T5754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.325030][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 353.894369][ T5801] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.109801][T16676] bridge0: port 3(wlan1) entered blocking state [ 354.119613][T16676] bridge0: port 3(wlan1) entered disabled state [ 354.124662][T16676] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 354.200831][ T5801] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.233266][T16639] lo speed is unknown, defaulting to 1000 [ 354.358689][ T5801] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.365001][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 354.458343][T16690] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 354.504007][ T5801] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.524207][T16639] lo speed is unknown, defaulting to 1000 [ 355.167358][ T5108] Bluetooth: hci3: command tx timeout [ 355.405051][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 355.658091][ T5801] bond2 (unregistering): (slave gretap1): Removing an active aggregator [ 355.685685][ T5801] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 355.772256][T16718] siw: device registration error -23 [ 355.779695][ T5801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.792624][ T5801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.803825][ T5801] bond0 (unregistering): Released all slaves [ 355.811657][ T5801] bond1 (unregistering): Released all slaves [ 355.843503][ T5801] bond2 (unregistering): Released all slaves [ 355.898223][T16721] ib_srp: QP creation failed for dev syz0: -22 [ 355.899996][ T5459] 8021q: adding VLAN 0 to HW filter on device eth17 [ 356.170193][ T5801] tipc: Disabling bearer [ 356.178725][ T5801] tipc: Left network mode [ 356.269156][T16639] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.275115][T16639] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.278349][T16639] bridge_slave_0: entered allmulticast mode [ 356.283863][T16639] bridge_slave_0: entered promiscuous mode [ 356.291849][T16639] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.295108][T16639] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.298071][T16639] bridge_slave_1: entered allmulticast mode [ 356.301705][T16639] bridge_slave_1: entered promiscuous mode [ 356.445648][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 356.523119][T16639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.553422][T16639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.646931][T16639] team0: Port device team_slave_0 added [ 356.651182][ T5459] 8021q: adding VLAN 0 to HW filter on device eth19 [ 356.662069][T16639] team0: Port device team_slave_1 added [ 356.719016][T16639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.722064][T16639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.732387][T16639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.750294][T16639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.757729][T16639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.781070][T16639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.973909][T16639] hsr_slave_0: entered promiscuous mode [ 357.002410][T16639] hsr_slave_1: entered promiscuous mode [ 357.258966][ T5108] Bluetooth: hci3: command tx timeout [ 357.347331][ T5801] hsr_slave_0: left promiscuous mode [ 357.367517][ T5801] hsr_slave_1: left promiscuous mode [ 357.374467][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.389717][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.410812][ T5801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.414222][ T5801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.438961][ T5801] veth1_macvtap: left promiscuous mode [ 357.441688][ T5801] veth0_macvtap: left promiscuous mode [ 357.444290][ T5801] veth1_vlan: left promiscuous mode [ 357.447260][ T5801] veth0_vlan: left promiscuous mode [ 357.494999][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 357.607362][T16792] netlink: 'syz.3.3740': attribute type 1 has an invalid length. [ 357.613125][T16792] netlink: 207236 bytes leftover after parsing attributes in process `syz.3.3740'. [ 358.173701][ T5801] team0 (unregistering): Port device team_slave_1 removed [ 358.194084][ T5801] team0 (unregistering): Port device team_slave_0 removed [ 358.335780][ T5459] 8021q: adding VLAN 0 to HW filter on device eth18 [ 358.538331][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 358.610200][ T5108] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 358.620470][ T5108] CPU: 3 UID: 0 PID: 5108 Comm: kworker/u34:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 358.620526][ T5108] Tainted: [L]=SOFTLOCKUP [ 358.620535][ T5108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 358.620551][ T5108] Workqueue: hci2 hci_rx_work [ 358.620587][ T5108] Call Trace: [ 358.620595][ T5108] [ 358.620604][ T5108] dump_stack_lvl+0x100/0x190 [ 358.620647][ T5108] sysfs_warn_dup.cold+0x1c/0x28 [ 358.620688][ T5108] sysfs_create_dir_ns+0x24b/0x2b0 [ 358.620725][ T5108] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 358.620751][ T5108] ? find_held_lock+0x2b/0x80 [ 358.620785][ T5108] ? kobject_add_internal+0x25f/0x930 [ 358.620807][ T5108] ? kobject_add_internal+0x25f/0x930 [ 358.620829][ T5108] ? do_raw_spin_unlock+0x145/0x1e0 [ 358.620854][ T5108] kobject_add_internal+0x2c8/0x930 [ 358.620880][ T5108] kobject_add+0x16a/0x1e0 [ 358.620901][ T5108] ? __pfx_kobject_add+0x10/0x10 [ 358.620920][ T5108] ? class_to_subsys+0x10f/0x150 [ 358.621131][ T5108] ? kobject_put+0xb9/0x640 [ 358.621149][ T5108] ? _raw_spin_unlock+0x28/0x50 [ 358.621178][ T5108] device_add+0x294/0x1970 [ 358.621199][ T5108] ? __pfx_dev_set_name+0x10/0x10 [ 358.621220][ T5108] ? __pfx_device_add+0x10/0x10 [ 358.621251][ T5108] ? mgmt_send_event_skb+0x2fb/0x460 [ 358.621297][ T5108] hci_conn_add_sysfs+0x1a3/0x260 [ 358.621330][ T5108] le_conn_complete_evt+0x11eb/0x1f60 [ 358.621366][ T5108] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 358.621401][ T5108] ? hci_event_packet+0x186/0xcd0 [ 358.621433][ T5108] hci_le_conn_complete_evt+0x23c/0x3a0 [ 358.621461][ T5108] ? skb_pull_data+0x15f/0x1e0 [ 358.621493][ T5108] hci_le_meta_evt+0x34a/0x5f0 [ 358.621524][ T5108] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 358.621554][ T5108] hci_event_packet+0x51c/0xcd0 [ 358.621580][ T5108] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 358.621607][ T5108] ? __pfx_hci_event_packet+0x10/0x10 [ 358.621635][ T5108] ? kcov_remote_start+0x384/0x670 [ 358.628215][ T5108] ? lockdep_hardirqs_on+0x78/0x100 [ 358.628258][ T5108] hci_rx_work+0x451/0xfc0 [ 358.628291][ T5108] process_one_work+0xa23/0x1940 [ 358.628349][ T5108] ? __pfx_process_one_work+0x10/0x10 [ 358.628386][ T5108] ? __pfx_hci_rx_work+0x10/0x10 [ 358.628415][ T5108] worker_thread+0x5ef/0xe50 [ 358.628451][ T5108] ? __pfx_worker_thread+0x10/0x10 [ 358.628481][ T5108] ? kthread+0x13a/0x450 [ 358.628506][ T5108] ? __pfx_worker_thread+0x10/0x10 [ 358.628529][ T5108] kthread+0x370/0x450 [ 358.628547][ T5108] ? __pfx_kthread+0x10/0x10 [ 358.628572][ T5108] ret_from_fork+0x72b/0xd50 [ 358.628609][ T5108] ? __pfx_ret_from_fork+0x10/0x10 [ 358.628633][ T5108] ? __switch_to+0x800/0x10f0 [ 358.628675][ T5108] ? __pfx_kthread+0x10/0x10 [ 358.628695][ T5108] ret_from_fork_asm+0x1a/0x30 [ 358.628727][ T5108] [ 358.753348][ T5108] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 358.759330][ T5108] Bluetooth: hci2: failed to register connection device [ 359.126775][ T5459] 8021q: adding VLAN 0 to HW filter on device eth20 [ 359.309443][T16849] fuse: fd is not a fuse device [ 359.335046][ T5108] Bluetooth: hci3: command tx timeout [ 359.574993][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 360.125354][ T5108] Bluetooth: hci2: command 0x0406 tx timeout [ 360.368076][T16639] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 360.375144][T16639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 360.381459][T16639] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 360.390550][T16639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 360.394505][T16639] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 360.400657][T16639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 360.404714][T16639] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 360.411205][T16639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 360.475746][T16639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.497181][T16639] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.505809][T10036] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.509030][T10036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.521729][T10036] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.524631][T10036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.615116][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 360.914540][T16639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.959421][T16639] veth0_vlan: entered promiscuous mode [ 360.969087][T16639] veth1_vlan: entered promiscuous mode [ 360.999274][T16639] veth0_macvtap: entered promiscuous mode [ 361.005199][T16639] veth1_macvtap: entered promiscuous mode [ 361.018983][T16639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.029824][T16639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.095895][ T5801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.101496][ T5801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.106401][ T5801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.109910][ T5801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.115996][T10030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.120033][T10030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.172638][T10012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.179135][T10012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.406563][ T5754] Bluetooth: hci3: command tx timeout [ 361.536183][T16955] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 361.654970][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 361.745497][T16969] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3772'. [ 361.789940][T16974] fuse: fd is not a fuse device [ 361.922620][T16984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3777'. [ 362.311684][T16996] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 362.314297][T16996] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 362.319168][T16996] vhci_hcd vhci_hcd.0: Device attached [ 362.515872][ T9] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 362.597875][ T9] usb 51-1: new full-speed USB device number 2 using vhci_hcd [ 362.669765][T17001] vhci_hcd: connection closed [ 362.670262][T12677] vhci_hcd vhci_hcd.7: stop threads [ 362.683502][T12677] vhci_hcd vhci_hcd.7: release socket [ 362.692165][T12677] vhci_hcd vhci_hcd.7: disconnect device [ 362.695095][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 363.563228][T17051] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 363.735226][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 364.363980][T17077] overlayfs: failed to clone upperpath [ 364.767223][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 365.305420][ T1351] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 365.315014][ T7852] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 365.368959][T17130] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3823'. [ 365.475168][ T1351] usb 8-1: Using ep0 maxpacket: 8 [ 365.480751][ T1351] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 365.484167][ T1351] usb 8-1: config 0 has no interface number 0 [ 365.488057][ T1351] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 365.492388][ T1351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.495895][ T7852] usb 6-1: unable to get BOS descriptor or descriptor too short [ 365.500687][ T1351] usb 8-1: config 0 descriptor?? [ 365.507633][ T7852] usb 6-1: New USB device found, idVendor=dead, idProduct=beef, bcdDevice= 1.00 [ 365.521977][ T7852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.532865][ T7852] usb 6-1: Product: syz [ 365.534353][ T7852] usb 6-1: Manufacturer: syz [ 365.536393][ T7852] usb 6-1: SerialNumber: syz [ 365.625588][ T1351] viperboard 8-1:0.143: version 0.00 found at bus 008 address 006 [ 365.652722][ T1351] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 365.657095][ T1351] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 365.714348][T17119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.733608][T17119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.781448][T17136] usb 6-1: Unknown version 0x0000 [ 365.784074][ T7852] usb 8-1: USB disconnect, device number 6 [ 365.818704][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 366.644796][T17158] overlayfs: failed to clone upperpath [ 366.826907][ T34] usb 6-1: USB disconnect, device number 2 [ 366.845150][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 366.908080][T17169] fuse: fd is not a fuse device [ 367.035967][T17179] vim2m pcspkr: Removing vim2m [ 367.717083][ T9] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 367.750183][T17205] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 367.852505][ T42] audit: type=1326 audit(1786040456.291:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17208 comm="syz.7.3849" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f24fec code=0x0 [ 367.885047][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 368.905948][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 368.908713][T17263] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3876'. [ 368.925091][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 369.057702][ T9] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 369.061700][ T9] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 369.070933][ T9] usb 8-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 369.074742][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.078369][ T9] usb 8-1: Product: syz [ 369.080237][ T9] usb 8-1: Manufacturer: syz [ 369.082354][ T9] usb 8-1: SerialNumber: syz [ 369.092936][T17251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 369.097140][T17251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 369.101719][ T9] usbserial_generic 8-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 369.106530][ T9] usbserial_generic 8-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 369.111409][ T9] usbserial_generic 8-1:1.0: generic converter detected [ 369.117922][ T9] usb 8-1: generic converter now attached to ttyUSB0 [ 369.320665][ C0] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 369.327498][ T9] usb 8-1: USB disconnect, device number 7 [ 369.335864][ T9] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 369.340550][ T9] usbserial_generic 8-1:1.0: device disconnected [ 369.965232][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 370.045083][ T5108] Bluetooth: hci4: command 0x1003 tx timeout [ 370.048714][ T5754] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 370.705394][T17295] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3884'. [ 370.819862][ T5108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.824907][ T5108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.831411][ T5108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.834808][ T5108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.846194][ T5108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 371.005034][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 371.196392][T17300] lo speed is unknown, defaulting to 1000 [ 371.358843][T17300] lo speed is unknown, defaulting to 1000 [ 371.582208][T17300] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.584627][T17300] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.587291][T17300] bridge_slave_0: entered allmulticast mode [ 371.591978][T17300] bridge_slave_0: entered promiscuous mode [ 371.598393][T17300] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.600848][T17300] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.603660][T17300] bridge_slave_1: entered allmulticast mode [ 371.611732][T17300] bridge_slave_1: entered promiscuous mode [ 371.634335][T17328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3889'. [ 371.636337][T17300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.643282][T17300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.691132][T17300] team0: Port device team_slave_0 added [ 371.694775][T17300] team0: Port device team_slave_1 added [ 371.713097][T17300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.715779][T17300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.725393][T17300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.730763][T17300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.733068][T17300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.742346][T17300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.798650][T17300] hsr_slave_0: entered promiscuous mode [ 371.801347][T17300] hsr_slave_1: entered promiscuous mode [ 371.803575][T17300] debugfs: 'hsr0' already exists in 'hsr' [ 371.805993][T17300] Cannot create hsr debugfs directory [ 372.055131][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 372.428602][T17300] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 372.433900][T17300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 372.437040][T17300] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 372.442218][T17300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 372.445726][T17300] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 372.452138][T17300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 372.455628][T17300] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 372.459982][T17300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 372.477968][T17300] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.480311][T17300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.482945][T17300] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.485642][T17300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.524186][T17300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.528388][T10030] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.531320][T10030] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.557724][T17300] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.565546][T10018] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.568101][T10018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.577306][T10018] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.580042][T10018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.848928][T17300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.937272][ T5754] Bluetooth: hci1: command tx timeout [ 373.031137][T17300] veth0_vlan: entered promiscuous mode [ 373.038642][T17300] veth1_vlan: entered promiscuous mode [ 373.070962][T17300] veth0_macvtap: entered promiscuous mode [ 373.076573][T17300] veth1_macvtap: entered promiscuous mode [ 373.089192][T17300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.095117][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 373.104367][T17300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.153620][ T5801] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.167122][ T5827] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.202024][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.211309][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.296568][T10012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.296902][ T5801] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.301551][T10012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.307390][ T5801] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.134989][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 374.730734][T17399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3897'. [ 374.957900][T17409] lo: left promiscuous mode [ 374.959955][T17409] tunl0: left promiscuous mode [ 374.967414][T17409] gre0: left promiscuous mode [ 374.972189][T17409] gretap0: left promiscuous mode [ 374.976921][T17409] erspan0: left promiscuous mode [ 374.978682][T17409] ip_vti0: left promiscuous mode [ 374.984689][T17409] ip6_vti0: left promiscuous mode [ 374.990218][T17409] sit0: left promiscuous mode [ 374.995021][T17409] ip6tnl0: left promiscuous mode [ 375.005878][ T5754] Bluetooth: hci1: command tx timeout [ 375.008074][T17409] ip6gre0: left promiscuous mode [ 375.008320][T17409] ip6gretap0: left promiscuous mode [ 375.008428][T17409] bridge0: left promiscuous mode [ 375.008534][T17409] bond0: left promiscuous mode [ 375.030458][T17409] team0: left promiscuous mode [ 375.033560][T17409] dummy0: left promiscuous mode [ 375.038371][T17409] nlmon0: left promiscuous mode [ 375.040266][T17409] batadv0: left promiscuous mode [ 375.042473][T17409] veth0: left promiscuous mode [ 375.044830][T17409] veth1: left promiscuous mode [ 375.048146][T17409] wg0: left promiscuous mode [ 375.050475][T17409] wg1: left promiscuous mode [ 375.052496][T17409] wg2: left promiscuous mode [ 375.054443][T17409] veth0_to_bridge: left promiscuous mode [ 375.058811][T17409] bridge_slave_0: left promiscuous mode [ 375.062174][T17409] veth1_to_bridge: left promiscuous mode [ 375.065009][T17409] veth0_to_bond: left promiscuous mode [ 375.067007][T17409] bond_slave_0: left promiscuous mode [ 375.069305][T17409] veth1_to_bond: left promiscuous mode [ 375.071868][T17409] bond_slave_1: left promiscuous mode [ 375.073930][T17409] veth0_to_team: left promiscuous mode [ 375.077469][T17409] team_slave_0: left promiscuous mode [ 375.079846][T17409] veth1_to_team: left promiscuous mode [ 375.082142][T17409] team_slave_1: left promiscuous mode [ 375.083961][T17409] veth0_to_batadv: left promiscuous mode [ 375.086578][T17409] batadv_slave_0: left promiscuous mode [ 375.088930][T17409] veth1_to_batadv: left promiscuous mode [ 375.091131][T17409] batadv_slave_1: left promiscuous mode [ 375.093236][T17409] xfrm0: left promiscuous mode [ 375.095632][T17409] veth0_to_hsr: left promiscuous mode [ 375.097939][T17409] veth1_to_hsr: left promiscuous mode [ 375.100220][T17409] hsr0: left promiscuous mode [ 375.102192][T17409] veth1_virt_wifi: left promiscuous mode [ 375.104691][T17409] veth0_virt_wifi: left promiscuous mode [ 375.107829][T17409] vlan0: left promiscuous mode [ 375.109865][T17409] vlan1: left promiscuous mode [ 375.111940][T17409] macvlan0: left promiscuous mode [ 375.114102][T17409] macvlan1: left promiscuous mode [ 375.116370][T17409] ipvlan0: left promiscuous mode [ 375.118407][T17409] ipvlan1: left promiscuous mode [ 375.120552][T17409] macvtap0: left promiscuous mode [ 375.122551][T17409] macsec0: left promiscuous mode [ 375.124634][T17409] geneve1: left promiscuous mode [ 375.129501][T17409] netdevsim netdevsim9 netdevsim0: left promiscuous mode [ 375.133292][T17409] netdevsim netdevsim9 netdevsim1: left promiscuous mode [ 375.136212][T17409] netdevsim netdevsim9 netdevsim2: left promiscuous mode [ 375.139280][T17409] netdevsim netdevsim9 netdevsim3: left promiscuous mode [ 375.142413][T17409] mac80211_hwsim hwsim28 wlan0: left promiscuous mode [ 375.143538][T17419] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 375.153355][T17409] vlan2: left allmulticast mode [ 375.153528][T17419] block device autoloading is deprecated and will be removed. [ 375.158316][T17409] bridge_slave_0: left allmulticast mode [ 375.165083][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 375.165662][T17409] bond1: left promiscuous mode [ 375.170914][T17409] ip6gre1: left promiscuous mode [ 375.176046][T17409] bond2: left promiscuous mode [ 375.177906][T17409] gre2: left promiscuous mode [ 375.181236][T17409] bond3: left promiscuous mode [ 375.182936][T17409] erspan1: left promiscuous mode [ 375.184649][T17409] bond3: left allmulticast mode [ 375.194530][T17409] erspan1: left allmulticast mode [ 375.210068][T17409] bond5: left allmulticast mode [ 375.212794][ T5827] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.235203][T12677] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.239164][T12677] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.248050][T17423] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3908'. [ 375.285146][T12677] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.423185][T17425] netlink: 'syz.9.3909': attribute type 2 has an invalid length. [ 375.526979][T17444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3915'. [ 375.740807][T17456] netlink: 'syz.1.3920': attribute type 1 has an invalid length. [ 375.762968][T17456] bond1: entered promiscuous mode [ 375.765788][T17456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 375.801542][T17456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3920'. [ 375.804744][T17456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3920'. [ 375.837521][T17456] bond1: (slave bridge1): making interface the new active one [ 375.840969][T17456] bridge1: entered promiscuous mode [ 375.849171][T17456] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 375.984157][T17470] fuse: fd is not a fuse device [ 376.200612][T17482] fuse: fd is not a fuse device [ 376.205141][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 376.317107][T17489] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3937'. [ 376.525089][T17495] overlayfs: failed to clone upperpath [ 376.602066][ T5108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 376.610152][ T5108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 376.617530][ T5108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 376.621402][ T5108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 376.632202][ T5108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 376.897710][T17498] lo speed is unknown, defaulting to 1000 [ 377.033464][T17498] lo speed is unknown, defaulting to 1000 [ 377.087537][ T5754] Bluetooth: hci1: command tx timeout [ 377.245111][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 377.310210][T17498] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.313418][T17498] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.317079][T17498] bridge_slave_0: entered allmulticast mode [ 377.321399][T17498] bridge_slave_0: entered promiscuous mode [ 377.331873][T17498] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.335431][T17498] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.338714][T17498] bridge_slave_1: entered allmulticast mode [ 377.342941][T17498] bridge_slave_1: entered promiscuous mode [ 377.432349][T17498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.440280][T17498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.498263][T17498] team0: Port device team_slave_0 added [ 377.504549][T17498] team0: Port device team_slave_1 added [ 377.535363][T17498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.547207][T17498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.557892][T17498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.564334][T17498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.574733][T17498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.585694][T17498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.609988][ T34] IPVS: starting estimator thread 0... [ 377.620762][T17526] tipc: Started in network mode [ 377.622797][T17526] tipc: Node identity ac1414aa, cluster identity 4711 [ 377.626925][T17526] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 377.630036][T17526] tipc: Enabled bearer , priority 10 [ 377.642798][T17498] hsr_slave_0: entered promiscuous mode [ 377.661219][T17498] hsr_slave_1: entered promiscuous mode [ 377.667941][T17498] debugfs: 'hsr0' already exists in 'hsr' [ 377.675280][T17498] Cannot create hsr debugfs directory [ 377.715461][T17527] IPVS: using max 43 ests per chain, 103200 per kthread [ 377.765173][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 377.905229][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 378.055507][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 378.205013][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 378.285172][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 378.345025][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 378.485039][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 378.542196][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.545654][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.634690][T11860] tipc: Node number set to 2886997162 [ 378.695035][ T5754] Bluetooth: hci3: command tx timeout [ 378.765506][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 378.874394][T17580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3962'. [ 378.913577][T17580] batadv0: entered promiscuous mode [ 378.927113][T17580] macsec1: entered promiscuous mode [ 378.929774][T17580] macsec1: entered allmulticast mode [ 378.931849][T17580] batadv0: entered allmulticast mode [ 378.935882][T17580] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 378.940280][T17580] batadv0: left allmulticast mode [ 378.944231][T17580] batadv0: left promiscuous mode [ 379.056894][T17498] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 379.063877][T17498] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 379.070629][T17498] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 379.085859][T17498] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 379.089770][T17498] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 379.108874][T17498] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 379.126939][T17588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3963'. [ 379.137719][T17498] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 379.147698][T17498] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 379.175091][ T5754] Bluetooth: hci1: command tx timeout [ 379.323906][T17498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.347286][T17609] netlink: 2024 bytes leftover after parsing attributes in process `syz.8.3965'. [ 379.356350][T17609] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3965'. [ 379.360668][T17498] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.382773][T10012] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.385470][T10012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.392225][T10012] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.395766][T10012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.931055][T17498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.193610][T17498] veth0_vlan: entered promiscuous mode [ 380.204791][T17498] veth1_vlan: entered promiscuous mode [ 380.243835][T17498] veth0_macvtap: entered promiscuous mode [ 380.251300][T17498] veth1_macvtap: entered promiscuous mode [ 380.276484][T17498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.296672][T17498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.385439][T12677] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.397108][T12677] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.456489][ T5827] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.469074][ T5827] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.501686][T10018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.516039][T10018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.605862][T10018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.614158][T10018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.765273][ T5754] Bluetooth: hci3: command tx timeout [ 380.935576][T17681] fuse: fd is not a fuse device [ 381.042375][T17688] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3979'. [ 381.051048][T17688] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3979'. [ 381.063258][T17688] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3979'. [ 381.070793][T17688] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3979'. [ 381.581884][ T42] audit: type=1800 audit(1786040470.021:2484): pid=17701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3982" name="file0" dev="overlay" ino=156 res=0 errno=0 [ 382.444986][ C0] net_ratelimit: 7 callbacks suppressed [ 382.445000][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 382.695124][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 382.857417][ T5754] Bluetooth: hci3: command tx timeout [ 383.494967][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 383.725209][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 383.925874][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 384.077189][ T9] usb 8-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 384.080952][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xa9000) [ 384.166550][ T1134] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 384.169222][ T1134] ata1: failed to read log page 10h (errno=-5) [ 384.171872][ T1134] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 384.175754][ T1134] ata1.00: irq_stat 0x41000000 [ 384.177781][ T1134] ata1.00: failed command: READ FPDMA QUEUED [ 384.180144][ T1134] ata1.00: cmd 60/48:70:06:37:01/05:00:00:00:00/40 tag 14 ncq dma 692224 in [ 384.180144][ T1134] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 384.189627][ T1134] ata1.00: status: { DRDY } [ 384.195373][ T1134] ata1.00: error: { ABRT } [ 384.197101][ T1134] ata1.00: failed command: READ FPDMA QUEUED [ 384.199369][ T1134] ata1.00: cmd 60/40:78:4e:3c:01/03:00:00:00:00/40 tag 15 ncq dma 425984 in [ 384.199369][ T1134] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 384.206820][ T1134] ata1.00: status: { DRDY } [ 384.208644][ T1134] ata1.00: error: { ABRT } [ 384.211415][ T1134] ata1.00: configured for UDMA/100 [ 384.213859][ T1134] sd 0:0:0:0: [sda] tag#14 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 384.220404][ T1134] sd 0:0:0:0: [sda] tag#14 Sense Key : Aborted Command [current] [ 384.223445][ T1134] sd 0:0:0:0: [sda] tag#14 Add. Sense: No additional sense information [ 384.226942][ T1134] sd 0:0:0:0: [sda] tag#14 CDB: Read(10) 28 00 00 01 37 06 00 05 48 00 [ 384.230159][ T1134] blk_print_req_error: 100 callbacks suppressed [ 384.230175][ T1134] I/O error, dev sda, sector 79622 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 384.238817][ T1134] sd 0:0:0:0: [sda] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 384.242217][ T1134] sd 0:0:0:0: [sda] tag#15 Sense Key : Aborted Command [current] [ 384.245139][ T1134] sd 0:0:0:0: [sda] tag#15 Add. Sense: No additional sense information [ 384.248301][ T1134] sd 0:0:0:0: [sda] tag#15 CDB: Read(10) 28 00 00 01 3c 4e 00 03 40 00 [ 384.250873][ T1134] I/O error, dev sda, sector 80974 op 0x0:(READ) flags 0x80700 phys_seg 104 prio class 2 [ 384.254530][ T1134] ata1: EH complete [ 384.337695][T17786] overlayfs: failed to clone upperpath [ 384.525382][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 384.765117][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 384.819351][T17798] loop0: detected capacity change from 0 to 8 [ 384.846543][T17798] block2mtd: erasesize must be a divisor of device size [ 384.925490][ T5108] Bluetooth: hci3: command tx timeout [ 385.265038][ T5834] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 385.418861][ T5834] usb 10-1: New USB device found, idVendor=058f, idProduct=6387, bcdDevice= 1.00 [ 385.421765][ T5834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.424408][ T5834] usb 10-1: Product: syz [ 385.426941][ T5834] usb 10-1: Manufacturer: syz [ 385.428673][ T5834] usb 10-1: SerialNumber: syz [ 385.436257][ T5834] usb-storage 10-1:1.0: USB Mass Storage device detected [ 385.444529][ T5834] scsi host6: usb-storage 10-1:1.0 [ 385.565325][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 385.805155][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 386.206726][ T5108] Bluetooth: hci4: command 0xfc05 tx timeout [ 386.213385][ T5754] Bluetooth: hci4: Reading Intel version command failed (-110) [ 386.213706][ T5108] Bluetooth: hci4: Resetting usb device. [ 386.446919][T17787] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 386.478288][T17791] Bluetooth: MGMT ver 1.23 [ 386.488431][ T40] usb 8-1: reset high-speed USB device number 8 using dummy_hcd [ 386.605128][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 386.799501][T17842] netlink: 'syz.9.4029': attribute type 1 has an invalid length. [ 386.813000][T17842] bond6: entered allmulticast mode [ 386.843133][T17842] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 386.849117][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 386.852736][T17842] bond6: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 386.872915][T17842] bond6: (slave vti0): making interface the new active one [ 386.877939][T17842] vti0: entered allmulticast mode [ 386.884042][T17842] vti0: left allmulticast mode [ 387.059065][T17847] fuse: fd is not a fuse device [ 387.080469][T17849] tipc: Started in network mode [ 387.082820][T17849] tipc: Node identity 7f000001, cluster identity 4711 [ 387.092619][T17849] tipc: Enabled bearer , priority 10 [ 387.104376][T17849] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 387.107997][T17849] tipc: Enabled bearer , priority 10 [ 387.279698][ T1351] usb 8-1: USB disconnect, device number 8 [ 387.348523][T17860] fuse: fd is not a fuse device [ 387.443222][T17867] fuse: fd is not a fuse device [ 387.574313][T17875] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4044'. [ 387.645274][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 387.676208][T17881] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4046'. [ 387.722888][ T5696] af_packet: tpacket_rcv: packet too big, clamped from 65549 to 3956. macoff=92 [ 387.819574][T17888] overlayfs: failed to clone upperpath [ 387.885335][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 388.033386][ T1351] usb 10-1: USB disconnect, device number 18 [ 388.049134][T17890] bridge0: port 3(wlan1) entered blocking state [ 388.055841][T17890] bridge0: port 3(wlan1) entered disabled state [ 388.059392][T17890] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode [ 388.104604][T17890] mac80211_hwsim hwsim47 wlan1: entered promiscuous mode [ 388.119316][T17890] bridge0: port 3(wlan1) entered blocking state [ 388.121863][T17890] bridge0: port 3(wlan1) entered forwarding state [ 388.206891][T15874] tipc: Node number set to 2130706433 [ 388.637393][T17918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4060'. [ 388.685268][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 388.788034][T17923] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 388.925291][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 388.931843][T10030] bridge0: port 3(wlan1) entered disabled state [ 389.367032][T17929] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 389.379388][T17929] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 389.386031][T17929] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 389.391394][T17929] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 389.419239][T17929] pci 0000:00:01.0: Adding to iommu group 1 [ 389.441890][T17935] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 389.502711][T17929] pci 0000:00:01.0: vgaarb: bridge control possible [ 389.505567][T17929] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=none,locks=none [ 389.538229][T17929] pci 0000:00:04.0: [8086:3420] type 01 class 0x060400 PCIe Root Port [ 389.559201][T17929] pci 0000:00:04.0: PCI bridge to [bus 01] [ 389.563942][T17929] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 389.572563][T17929] pci 0000:00:04.0: bridge window [mem 0x80100000-0x802fffff] [ 389.586010][T17929] pci 0000:00:04.0: bridge window [mem 0x580100000-0x5802fffff 64bit pref] [ 389.590476][T17929] pci 0000:00:04.0: enabling Extended Tags [ 389.620079][T17929] pci 0000:00:04.0: Adding to iommu group 4 [ 389.636072][T17929] pci 0000:00:04.0: PCI bridge to [bus 01] [ 389.641711][T17929] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 01] add_size 200000 add_align 100000 [ 389.649284][T17929] pci 0000:00:04.0: bridge window [mem 0x00100000-0x000fffff] to [bus 01] add_size 200000 add_align 100000 [ 389.656332][T17929] pci 0000:00:01.0: BAR 0 [mem 0x81000000-0x81ffffff pref]: assigned [ 389.659367][T17929] pci 0000:00:04.0: bridge window [mem 0x80100000-0x802fffff]: assigned [ 389.662123][T17929] pci 0000:00:04.0: bridge window [mem 0x580100000-0x5802fffff 64bit pref]: assigned [ 389.670564][T17929] pci 0000:00:01.0: ROM [mem 0x80010000-0x8001ffff pref]: assigned [ 389.678792][T17929] pci 0000:00:01.0: BAR 2 [mem 0x80002000-0x80002fff]: assigned [ 389.683580][T17929] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff]: assigned [ 389.687458][T17929] pci 0000:00:04.0: PCI bridge to [bus 01] [ 389.690687][T17929] pci 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 389.697027][T17929] pci 0000:00:04.0: bridge window [mem 0x80100000-0x802fffff] [ 389.701917][T17929] pci 0000:00:04.0: bridge window [mem 0x580100000-0x5802fffff 64bit pref] [ 389.712709][T17929] bochs-drm 0000:00:01.0: enabling device (0100 -> 0102) [ 389.725049][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 389.738256][T17929] [drm] Found bochs VGA, ID 0xb0c5. [ 389.744947][T17929] [drm] Framebuffer size 16384 kB @ 0x81000000, mmio @ 0x80002000. [ 389.777662][T17945] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4069'. [ 389.800943][T17929] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 389.898330][T17929] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 389.968689][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 389.994362][T17929] pcieport 0000:00:04.0: PME: Signaling with IRQ 26 [ 390.007425][T17929] aer 0000:00:04.0:pcie002: error -EINTR: request_irq(27) aer_irq aer_isr aerdrv [ 390.012242][T17929] pcieport 0000:00:04.0: AER: request AER IRQ 27 failed [ 390.015025][T17929] aer 0000:00:04.0:pcie002: probe with driver aer failed with error -4 [ 390.110249][T17951] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4071'. [ 390.115154][T17951] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4071'. [ 390.150321][T17949] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 390.152655][T17949] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 390.168361][T17949] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 390.179179][T17949] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 390.186875][T17949] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 390.201734][T17949] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 390.205848][T17949] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 390.208415][T17949] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 390.238116][T17949] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 390.765003][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 390.979658][T17970] fuse: Bad value for 'fd' [ 391.005269][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 391.172637][T17985] fuse: fd is not a fuse device [ 391.292958][T17990] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4084'. [ 391.649617][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 391.653150][T17822] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 391.805190][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 392.062442][T18012] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4093'. [ 392.072876][T18012] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4093'. [ 392.170013][ T34] IPVS: starting estimator thread 0... [ 392.180042][T18020] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 392.206068][T17822] Bluetooth: hci1: command 0x0c1a tx timeout [ 392.208588][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 392.265862][T18018] IPVS: using max 43 ests per chain, 103200 per kthread [ 392.285234][T17822] Bluetooth: hci3: command 0x0c1a tx timeout [ 392.527924][T18043] overlayfs: failed to clone upperpath [ 392.845224][ C0] net_ratelimit: 1 callbacks suppressed [ 392.845243][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 392.873939][T18054] netlink: 'syz.8.4110': attribute type 5 has an invalid length. [ 393.085091][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 393.207660][T18075] lo speed is unknown, defaulting to 1000 [ 393.274435][T18080] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4122'. [ 393.387411][T18075] lo speed is unknown, defaulting to 1000 [ 393.725504][T18093] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4127'. [ 393.728878][T18093] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4127'. [ 393.776257][ T5827] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.780712][ T5827] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.783824][ T5827] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.787720][ T5827] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.888409][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 394.125078][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 394.285402][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 394.287914][T17822] Bluetooth: hci1: command 0x0c1a tx timeout [ 394.365140][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 394.865047][T15874] usb 13-1: new high-speed USB device number 19 using dummy_hcd [ 394.924976][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 394.940329][ T9] IPVS: starting estimator thread 0... [ 394.951230][T18151] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 395.025029][T15874] usb 13-1: Using ep0 maxpacket: 32 [ 395.028488][T15874] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 395.033323][T15874] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 395.039527][T15874] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 395.044499][T15874] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 395.053815][T18157] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4150'. [ 395.054567][T15874] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 395.061293][T15874] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.064613][T15874] usb 13-1: Product: syz [ 395.066683][T15874] usb 13-1: Manufacturer: syz [ 395.068597][T15874] usb 13-1: SerialNumber: syz [ 395.069006][T18150] IPVS: using max 43 ests per chain, 103200 per kthread [ 395.094760][ C0] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 395.128568][T15874] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input30 [ 395.165212][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 395.295066][T15874] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 395.298323][T15874] (id 0x00) [ 395.344991][T15874] rc_core: IR keymap rc-imon-pad not found [ 395.347032][T15874] Registered IR keymap rc-empty [ 395.348651][T15874] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 395.352035][T15874] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 395.506587][T15874] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0 [ 395.511469][T15874] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0/input31 [ 395.517545][T15874] imon 13-1:155.0: iMON device (15c2:ffdc, intf0) on usb<13:19> initialized [ 395.970170][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 396.099130][T18175] imon:send_packet: task interrupted [ 396.103525][T18175] imon:send_packet: packet tx failed (-512) [ 396.107777][T18175] imon:vfd_write: send packet #1 failed [ 396.111674][T18175] imon:send_packet: packet tx failed (-32) [ 396.125208][T18175] imon:vfd_write: send packet #0 failed [ 396.164713][T18181] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 396.175394][T18181] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 396.177795][T18181] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 396.205101][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 396.210048][T18191] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 396.223224][T18193] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2669067777/2669067779 [ 396.246977][ T5834] usb 13-1: USB disconnect, device number 19 [ 397.005088][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 397.245080][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 397.282234][T18229] bond0: Error: CAN devices cannot be enslaved [ 397.831903][T18256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4190'. [ 398.045062][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 398.185662][T15874] libceph: connect (1)[c::]:6789 error -101 [ 398.188167][T15874] libceph: mon0 (1)[c::]:6789 connect error [ 398.205171][T17822] Bluetooth: hci1: command 0x0c1a tx timeout [ 398.205201][ T5754] Bluetooth: hci2: command 0x0406 tx timeout [ 398.207150][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 398.274550][T18261] ceph: No mds server is up or the cluster is laggy [ 398.314928][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 398.462552][T18269] fuse: fd is not a fuse device [ 398.679529][T18259] vmwgfx 0000:00:02.0: probe with driver vmwgfx failed with error -22 [ 399.055442][T18292] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4202'. [ 399.085266][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 399.248645][T18304] fuse: fd is not a fuse device [ 399.335082][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 399.359364][T18313] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4211'. [ 400.131047][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 400.279934][T18335] lo speed is unknown, defaulting to 1000 [ 400.365243][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 400.464134][T18335] lo speed is unknown, defaulting to 1000 [ 400.617246][T18341] lo speed is unknown, defaulting to 1000 [ 400.889184][T18341] lo speed is unknown, defaulting to 1000 [ 400.979845][T18344] netlink: 'syz.9.4230': attribute type 4 has an invalid length. [ 401.004489][ T9] lo speed is unknown, defaulting to 1000 [ 401.007615][ T9] syz0: Port: 1 Link ACTIVE [ 401.010067][T18344] netlink: 'syz.9.4230': attribute type 4 has an invalid length. [ 401.042705][T15874] lo speed is unknown, defaulting to 1000 [ 401.045216][T15874] syz0: Port: 1 Link DOWN [ 401.128034][T18364] binder: 18363:18364 ioctl c0306201 0 returned -14 [ 401.175032][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 401.251480][T18371] binder: 18363:18371 ioctl c0306201 0 returned -14 [ 401.397878][T18381] netlink: 'syz.9.4238': attribute type 1 has an invalid length. [ 401.405337][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 401.414170][T18381] 8021q: adding VLAN 0 to HW filter on device bond7 [ 401.611016][T18381] 8021q: adding VLAN 0 to HW filter on device bond7 [ 401.625913][T18381] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 401.630591][T18381] bond7: (slave wireguard0): Error -95 calling set_mac_address [ 401.704179][T18384] mac80211_hwsim hwsim29 wlan1: left allmulticast mode [ 401.713125][T18384] bridge0: port 3(wlan1) entered disabled state [ 401.723686][T18384] bond7: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 401.916732][T18392] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 402.107154][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 402.205289][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 402.276385][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 402.287067][ T10] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 402.296088][ T10] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 402.309820][ T10] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 402.325266][ T10] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 402.336647][ T10] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 402.341332][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.346931][ T10] usb 8-1: Product: syz [ 402.348726][ T10] usb 8-1: Manufacturer: syz [ 402.350804][ T10] usb 8-1: SerialNumber: syz [ 402.359077][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 402.364052][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input32 [ 402.445244][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 402.596656][ T10] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 402.608340][ T10] (id 0x00) [ 402.685259][ T10] rc_core: IR keymap rc-imon-pad not found [ 402.691712][ T10] Registered IR keymap rc-empty [ 402.693856][ T10] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 402.712921][ T10] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 402.803638][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 402.824210][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input33 [ 402.862279][ T10] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:9> initialized [ 403.245193][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 403.410672][T18444] fuse: fd is not a fuse device [ 403.421865][T18442] imon:send_packet: task interrupted [ 403.423859][T18442] imon:send_packet: packet tx failed (-512) [ 403.426704][T18442] imon:vfd_write: send packet #1 failed [ 403.430080][T18442] imon:send_packet: packet tx failed (-32) [ 403.445107][T18442] imon:vfd_write: send packet #0 failed [ 403.485899][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 403.557082][T18447] overlayfs: failed to clone upperpath [ 403.575211][ T7852] usb 8-1: USB disconnect, device number 9 [ 404.086733][T18461] syzkaller0: entered promiscuous mode [ 404.088793][T18461] syzkaller0: entered allmulticast mode [ 404.097978][T18462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4268'. [ 404.145193][T18464] Mass Storage Function, version: 2009/09/11 [ 404.157641][T18464] LUN: removable file: (no medium) [ 404.294990][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 404.382656][T18475] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4276'. [ 404.385297][T18473] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4274'. [ 404.525473][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 404.610633][T18489] gadgetfs: bound to dummy_udc driver [ 404.612521][T18487] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 404.674172][T18487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.684812][T18487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.706863][T18487] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 404.714733][T18487] bond0 (unregistering): Released all slaves [ 404.865090][ T5834] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 404.870920][ C2] gadgetfs: connected [ 404.873500][T18510] fuse: fd is not a fuse device [ 404.885048][ T5834] gadgetfs: disconnected [ 405.037093][ C2] gadgetfs: connected [ 405.047344][ T5834] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 405.050285][ T5834] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 405.053124][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.068450][ C2] gadgetfs: configuration #1 [ 405.078719][T18488] gadgetfs: suspended from state 3 [ 405.086524][ T5834] usb 5-1: USB disconnect, device number 6 [ 405.089594][T18488] gadgetfs: disconnected [ 405.335004][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 405.565326][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 405.649015][T18537] netlink: 'syz.3.4299': attribute type 1 has an invalid length. [ 405.712381][T18537] 8021q: adding VLAN 0 to HW filter on device bond3 [ 405.740066][T18543] fuse: fd is not a fuse device [ 405.783106][T18539] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 405.845150][T12677] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 405.889599][T18553] netlink: 2024 bytes leftover after parsing attributes in process `syz.9.4305'. [ 405.897385][T18553] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4305'. [ 405.976057][ T5801] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 406.365005][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 406.425539][T18567] overlayfs: failed to get inode (-116) [ 406.615050][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 406.722720][T18579] overlayfs: failed to clone lowerpath [ 406.748904][T18579] overlayfs: failed to clone upperpath [ 406.817907][T18584] fuse: fd is not a fuse device [ 407.000868][T18581] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.007907][T18581] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.038264][T18589] tipc: Enabling of bearer rejected, failed to enable media [ 407.194850][T18581] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.194953][T18595] netlink: 'syz.9.4323': attribute type 4 has an invalid length. [ 407.196102][T18592] netdevsim netdevsim5: Direct firmware load for * [ 407.196102][T18592] failed with error -2 [ 407.209763][T18581] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.210347][T18592] netdevsim netdevsim5: Falling back to sysfs fallback for: * [ 407.210347][T18592] [ 407.222370][T18594] netlink: 'syz.9.4323': attribute type 4 has an invalid length. [ 407.229401][ T50] lo speed is unknown, defaulting to 1000 [ 407.231424][ T50] syz0: Port: 1 Link ACTIVE [ 407.272236][ T50] lo speed is unknown, defaulting to 1000 [ 407.277050][ T50] syz0: Port: 1 Link DOWN [ 407.369179][T18581] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.381923][T18581] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.663811][T18581] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.668672][T18581] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.914990][T12677] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.926266][T12677] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.015068][T12677] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.017257][T18625] /dev/loop9: Can't lookup blockdev [ 408.019007][T12677] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.033062][T12677] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.040117][T12677] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.043410][T12677] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.047496][T12677] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.445009][ C0] net_ratelimit: 2 callbacks suppressed [ 408.445027][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 408.479169][T18643] overlayfs: failed to clone upperpath [ 408.684120][T18651] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20003 [ 408.695029][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 408.812307][T18654] i801_smbus 0000:00:03.0: SMBus using polling [ 408.839250][T18654] i2c i2c-2: Memory type 0x07 not supported yet, not instantiating SPD [ 409.182241][T18665] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4353'. [ 409.473105][T18676] i2c i2c-0: new_device: Instantiated device isp1301 at 0x2c [ 409.480241][T18676] sysfs: cannot create duplicate filename '/devices/platform/vidtv.0/i2c-1/1-002c' [ 409.485451][T18676] CPU: 0 UID: 0 PID: 18676 Comm: syz.8.4355 Tainted: G L syzkaller #0 PREEMPT(full) [ 409.485486][T18676] Tainted: [L]=SOFTLOCKUP [ 409.485493][T18676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 409.485504][T18676] Call Trace: [ 409.485512][T18676] [ 409.485521][T18676] dump_stack_lvl+0x100/0x190 [ 409.485574][T18676] sysfs_warn_dup.cold+0x1c/0x28 [ 409.485614][T18676] sysfs_create_dir_ns+0x24b/0x2b0 [ 409.485652][T18676] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 409.485681][T18676] ? find_held_lock+0x2b/0x80 [ 409.485715][T18676] ? kobject_add_internal+0x25f/0x930 [ 409.485829][T18676] ? kobject_add_internal+0x25f/0x930 [ 409.485854][T18676] ? do_raw_spin_unlock+0x145/0x1e0 [ 409.485881][T18676] kobject_add_internal+0x2c8/0x930 [ 409.485908][T18676] kobject_add+0x16a/0x1e0 [ 409.485929][T18676] ? __pfx_kobject_add+0x10/0x10 [ 409.485952][T18676] ? __kasan_kmalloc+0xaa/0xb0 [ 409.485989][T18676] ? lockdep_init_map_type+0x5c/0x250 [ 409.486008][T18676] ? class_to_subsys+0x114/0x150 [ 409.486047][T18676] device_add+0x294/0x1970 [ 409.486070][T18676] ? lockdep_init_map_type+0x5c/0x250 [ 409.486091][T18676] ? __pfx_device_add+0x10/0x10 [ 409.486111][T18676] ? lockdep_init_map_type+0x5c/0x250 [ 409.486137][T18676] ? __init_waitqueue_head+0xca/0x150 [ 409.486172][T18676] i2c_new_client_device+0x660/0xd30 [ 409.486227][T18676] new_device_store+0x20f/0x420 [ 409.486246][T18676] ? __lock_acquire+0x49f/0x1a40 [ 409.486269][T18676] ? __pfx_new_device_store+0x10/0x10 [ 409.486298][T18676] ? find_held_lock+0x2b/0x80 [ 409.486320][T18676] ? sysfs_file_kobj+0xe4/0x290 [ 409.486344][T18676] ? sysfs_file_kobj+0xe4/0x290 [ 409.486371][T18676] ? __pfx_new_device_store+0x10/0x10 [ 409.486390][T18676] dev_attr_store+0x58/0x80 [ 409.486408][T18676] ? __pfx_dev_attr_store+0x10/0x10 [ 409.486426][T18676] sysfs_kf_write+0xf2/0x150 [ 409.486453][T18676] kernfs_fop_write_iter+0x3e0/0x5f0 [ 409.486474][T18676] ? __pfx_sysfs_kf_write+0x10/0x10 [ 409.486502][T18676] vfs_write+0x6ac/0x1050 [ 409.486529][T18676] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 409.486554][T18676] ? __pfx_vfs_write+0x10/0x10 [ 409.486570][T18676] ? find_held_lock+0x2b/0x80 [ 409.486614][T18676] ksys_write+0x12a/0x250 [ 409.486631][T18676] ? __pfx_ksys_write+0x10/0x10 [ 409.486674][T18676] __do_fast_syscall_32+0xe7/0x970 [ 409.486706][T18676] do_fast_syscall_32+0x32/0x70 [ 409.486734][T18676] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 409.486758][T18676] RIP: 0023:0xf7f48fec [ 409.486781][T18676] Code: Unable to access opcode bytes at 0xf7f48fc2. [ 409.486798][T18676] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 409.486819][T18676] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 409.486831][T18676] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 409.486841][T18676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 409.486851][T18676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.486861][T18676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 409.486883][T18676] [ 409.487127][T18676] kobject: kobject_add_internal failed for 1-002c with -EEXIST, don't try to register things with the same name in the same directory. [ 409.498144][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 409.536131][T18678] i2c i2c-2: new_device: Instantiated device isp1301 at 0x2c [ 409.538154][T18676] i2c i2c-1: Failed to register i2c client isp1301 at 0x2c (-17) [ 409.687041][T18682] netlink: 'syz.3.4358': attribute type 1 has an invalid length. [ 409.705908][T18682] bond4: entered allmulticast mode [ 409.734990][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 409.767678][T18682] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 409.782645][T18682] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 409.830218][T18682] bond4: (slave vti0): making interface the new active one [ 409.832538][T18682] vti0: entered allmulticast mode [ 409.836647][T18682] vti0: left allmulticast mode [ 410.256303][T18696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4364'. [ 410.370004][T18698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4365'. [ 410.535009][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 410.763945][T18710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4379'. [ 410.775163][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 410.784153][T18710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4379'. [ 410.793964][T18710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4379'. [ 410.811873][T18710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4379'. [ 410.976463][T18717] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 411.125746][ T1351] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 411.286796][ T1351] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 411.289660][ T1351] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 411.292401][ T1351] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.298215][ T1351] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 411.300927][ T1351] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.303420][ T1351] usb 8-1: Product: syz [ 411.304768][ T1351] usb 8-1: Manufacturer: syz [ 411.306224][ T1351] usb 8-1: SerialNumber: syz [ 411.312461][ T1351] hub 8-1:1.0: bad descriptor, ignoring hub [ 411.314536][ T1351] hub 8-1:1.0: probe with driver hub failed with error -5 [ 411.517448][ T1351] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 411.565020][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 411.805489][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 411.818164][ T7852] usb 8-1: USB disconnect, device number 10 [ 411.822060][ T7852] usblp0: removed [ 411.951815][ T42] audit: type=1800 audit(1786040500.391:2485): pid=18736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4382" name="idProduct" dev="configfs" ino=74671 res=0 errno=0 [ 411.960037][ T42] audit: type=1800 audit(1786040500.391:2486): pid=18736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4382" name="ep_name" dev="configfs" ino=74675 res=0 errno=0 [ 411.970113][ T42] audit: type=1800 audit(1786040500.391:2487): pid=18736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4382" name="name" dev="configfs" ino=74676 res=0 errno=0 [ 411.997700][T18738] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4383'. [ 412.151296][T18741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.475785][ T5834] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 412.605047][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 412.633450][ T5834] usb 10-1: unable to get BOS descriptor or descriptor too short [ 412.640445][ T5834] usb 10-1: not running at top speed; connect to a high speed hub [ 412.644816][ T5834] usb 10-1: config 14 has an invalid interface number: 57 but max is 1 [ 412.649234][ T5834] usb 10-1: config 14 has an invalid interface number: 228 but max is 1 [ 412.652666][ T5834] usb 10-1: config 14 has no interface number 0 [ 412.656866][ T5834] usb 10-1: config 14 has no interface number 1 [ 412.659522][ T5834] usb 10-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 412.663915][ T5834] usb 10-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 412.670559][ T5834] usb 10-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 412.675172][ T5834] usb 10-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.682455][ T5834] usb 10-1: config 14 interface 57 has no altsetting 0 [ 412.687151][ T5834] usb 10-1: config 14 interface 228 has no altsetting 0 [ 412.691998][ T5834] usb 10-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 412.696086][ T5834] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.699413][ T5834] usb 10-1: Product: syz [ 412.701175][ T5834] usb 10-1: Manufacturer: syz [ 412.703091][ T5834] usb 10-1: SerialNumber: syz [ 413.121756][ T5834] legousbtower 10-1:14.57: interrupt endpoints not found [ 413.521586][ T5834] legousbtower 10-1:14.228: LEGO USB Tower firmware version is 51.63 build 1747 [ 413.526167][ T5834] legousbtower 10-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 413.654992][ C0] net_ratelimit: 1 callbacks suppressed [ 413.655011][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 413.894975][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 414.285061][ T50] usb 10-1: USB disconnect, device number 19 [ 414.319693][ T50] legousbtower 10-1:14.228: LEGO USB Tower #-160 now disconnected [ 414.694962][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 414.925044][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 415.724992][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 415.776370][T18875] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.4428'. [ 415.784637][T18875] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4428'. [ 415.876789][T18873] kvm: pic: non byte read [ 415.883611][T18873] kvm: pic: level sensitive irq not supported [ 415.883910][T18873] kvm: pic: non byte read [ 415.896749][T18873] kvm: pic: level sensitive irq not supported [ 415.897009][T18873] kvm: pic: non byte read [ 415.908034][T18873] kvm: pic: level sensitive irq not supported [ 415.908283][T18873] kvm: pic: non byte read [ 415.919827][T18873] kvm: pic: level sensitive irq not supported [ 415.920076][T18873] kvm: pic: non byte read [ 415.931225][T18873] kvm: pic: level sensitive irq not supported [ 415.931475][T18873] kvm: pic: non byte read [ 415.943588][T18873] kvm: pic: level sensitive irq not supported [ 415.946034][T18873] kvm: pic: non byte read [ 415.965036][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 416.184048][T18895] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4434'. [ 416.292856][T18900] misc userio: Can't change port extra on an already running userio instance [ 416.313294][T18903] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4436'. [ 416.704403][T18910] vp-vdpa 0000:00:02.0: Failed to probe modern PCI device [ 416.764965][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 417.005054][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 417.100837][T18934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4443'. [ 417.275816][T18939] ref_ctr increment failed for inode: 0x59b offset: 0x7 ref_ctr_offset: 0x80002 of mm: 0xffff888023dd8000 [ 417.514383][T18956] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4458'. [ 417.815000][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 417.833279][T19030] netlink: 'syz.5.4455': attribute type 10 has an invalid length. [ 417.837452][T19030] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.840663][T19030] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.864392][T19030] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.867127][T19030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.870020][T19030] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.872702][T19030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.884765][T19030] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 417.898421][T19036] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:00b0:e4ff:fe85:3814 error=-28 [ 418.055470][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 418.075668][T19036] infiniband syz1: set active [ 418.079836][T19036] infiniband syz1: added bridge_slave_1 [ 418.101274][T19036] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 418.106235][T19036] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 418.112593][T19036] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 418.136140][T19036] RDS/IB: syz1: added [ 418.140859][T19036] smc: adding ib device syz1 with port count 1 [ 418.145095][T19036] smc: ib device syz1 port 1 has no pnetid [ 418.797366][T12677] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.802510][T12677] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.845325][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 418.963028][T12677] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.967441][T12677] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.978983][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 418.991098][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 419.004529][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 419.013163][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 419.017389][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 419.075040][T12677] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.083603][T12677] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.095085][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 419.131126][T19113] geneve1: entered promiscuous mode [ 419.197026][T19126] loop4: detected capacity change from 0 to 7 [ 419.201811][T19126] loop4: [ 419.203457][T19126] loop4: partition table partially beyond EOD, truncated [ 419.212456][T12677] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.244972][T12677] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.393595][T19146] overlayfs: failed to clone upperpath [ 419.638532][T19102] lo speed is unknown, defaulting to 1000 [ 419.686114][T12677] mac80211_hwsim hwsim47 wlan1: left allmulticast mode [ 419.693754][T12677] mac80211_hwsim hwsim47 wlan1: left promiscuous mode [ 419.699322][T12677] bridge0: port 3(wlan1) entered disabled state [ 419.720875][T12677] bridge_slave_1: left allmulticast mode [ 419.728294][T12677] bridge_slave_1: left promiscuous mode [ 419.730258][T12677] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.744113][T12677] bridge_slave_0: left allmulticast mode [ 419.746220][T12677] bridge_slave_0: left promiscuous mode [ 419.749311][T12677] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.895181][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 420.074216][T19102] lo speed is unknown, defaulting to 1000 [ 420.096298][ T5827] netdevsim netdevsim8 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.100933][ T5827] netdevsim netdevsim8 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.115000][ T5827] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.125290][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 420.140018][ T5827] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.148844][ T5827] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.165348][ T5827] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.172967][ T5827] netdevsim netdevsim0 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.179703][ T5827] netdevsim netdevsim2 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.234979][ T5827] netdevsim netdevsim2 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.244372][ T5827] netdevsim netdevsim2 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.276896][T19212] overlayfs: upper fs does not support file handles, falling back to index=off. [ 420.297557][T19215] fuse: fd is not a fuse device [ 420.336904][ T5827] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.342287][ T5827] netdevsim netdevsim4 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.359334][ T5827] netdevsim netdevsim4 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.366454][ T5459] 8021q: adding VLAN 0 to HW filter on device eth2 [ 420.430445][ T5827] netdevsim netdevsim2 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.546451][T19252] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 420.624307][T19272] binder: 19265:19272 ioctl c0306201 80000040 returned -11 [ 420.630655][T19272] binder: 19265:19272 ioctl c0306201 80000640 returned -22 [ 420.700700][ T5459] 8021q: adding VLAN 0 to HW filter on device eth3 [ 420.756827][ T5801] netdevsim netdevsim4 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.764355][ T5801] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.764714][T19300] netlink: 'syz.5.4498': attribute type 2 has an invalid length. [ 420.779590][T19300] netlink: 'syz.5.4498': attribute type 2 has an invalid length. [ 420.782200][T19300] netlink: 'syz.5.4498': attribute type 2 has an invalid length. [ 420.782584][ T5801] netdevsim netdevsim6 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.784779][T19300] netlink: 1279 bytes leftover after parsing attributes in process `syz.5.4498'. [ 420.794227][ T5801] netdevsim netdevsim6 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.803301][ T5801] netdevsim netdevsim6 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.807364][ T5801] netdevsim netdevsim4 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.924962][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 420.952233][T12677] hsr_slave_0: left promiscuous mode [ 420.960395][T12677] hsr_slave_1: left promiscuous mode [ 420.962800][T12677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.967846][T12677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.970811][T12677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.973177][T12677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.982664][T12677] veth1_macvtap: left promiscuous mode [ 420.994989][T12677] veth0_macvtap: left promiscuous mode [ 420.997742][T12677] veth1_vlan: left promiscuous mode [ 420.999659][T12677] veth0_vlan: left promiscuous mode [ 421.105232][ T5754] Bluetooth: hci1: command tx timeout [ 421.174967][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 421.201159][T19354] netlink: 'syz.3.4504': attribute type 10 has an invalid length. [ 421.311263][T12677] team0 (unregistering): Port device team_slave_1 removed [ 421.324356][T12677] team0 (unregistering): Port device team_slave_0 removed [ 421.380701][ T5754] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 421.435868][ T5459] 8021q: adding VLAN 0 to HW filter on device eth4 [ 421.449907][T19350] bond0: entered promiscuous mode [ 421.452141][T19350] bond_slave_0: entered promiscuous mode [ 421.454781][T19350] bond_slave_1: entered promiscuous mode [ 421.460319][T19350] batadv0: entered promiscuous mode [ 421.464973][T19350] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 421.471341][T19354] syz_tun: entered promiscuous mode [ 421.481972][T19354] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 421.498531][T19363] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 421.630293][T19102] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.639262][T19102] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.642950][T19102] bridge_slave_0: entered allmulticast mode [ 421.655970][T19102] bridge_slave_0: entered promiscuous mode [ 421.670375][T19405] fuse: fd is not a fuse device [ 421.670811][T19102] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.682585][T19102] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.689366][T19102] bridge_slave_1: entered allmulticast mode [ 421.695421][T19102] bridge_slave_1: entered promiscuous mode [ 421.722355][T19102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.727164][T19102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.750698][T19102] team0: Port device team_slave_0 added [ 421.757114][T19102] team0: Port device team_slave_1 added [ 421.788564][T19102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.790945][T19102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.805372][T19102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.811804][T19102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.818710][T19102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.857531][T19102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.907848][T19102] hsr_slave_0: entered promiscuous mode [ 421.910374][T19102] hsr_slave_1: entered promiscuous mode [ 421.912536][T19102] debugfs: 'hsr0' already exists in 'hsr' [ 421.914325][T19102] Cannot create hsr debugfs directory [ 421.964968][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 421.972866][T12677] IPVS: stop unused estimator thread 0... [ 422.102978][ T5459] 8021q: adding VLAN 0 to HW filter on device eth5 [ 422.132692][T19578] overlayfs: failed to clone upperpath [ 422.205632][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 422.223548][T19102] netdevsim netdevsim0 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.407697][T19102] netdevsim netdevsim0 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.536085][T19102] netdevsim netdevsim0 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.567423][T19605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4522'. [ 422.661529][T19102] netdevsim netdevsim0 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.813843][T19644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4528'. [ 422.818103][T19644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.838465][T19644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.941990][T19665] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4530'. [ 422.965006][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 423.015052][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 423.038156][T19102] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 423.042823][T19102] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 423.048468][T19102] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 423.053191][T19102] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 423.056709][T19102] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 423.062680][T19102] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.066704][T19102] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 423.074184][T19102] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.128244][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 423.133715][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 423.148896][ T10] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 423.158520][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.164794][ T10] usb 8-1: Product: syz [ 423.166065][T19102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.171297][ T5754] Bluetooth: hci1: command tx timeout [ 423.174404][ T10] usb 8-1: Manufacturer: syz [ 423.178415][ T10] usb 8-1: SerialNumber: syz [ 423.191546][T19102] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.214613][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.217743][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.250712][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.253043][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.417910][ T10] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 423.601261][T19102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.650125][T19102] veth0_vlan: entered promiscuous mode [ 423.657113][T19102] veth1_vlan: entered promiscuous mode [ 423.679557][T19102] veth0_macvtap: entered promiscuous mode [ 423.684746][T19102] veth1_macvtap: entered promiscuous mode [ 423.694541][T19102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.709624][T19102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.821252][ T1351] usb 8-1: USB disconnect, device number 11 [ 423.825995][T12677] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.829767][T12677] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.836851][ T1351] usblp0: removed [ 423.837983][T12677] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.840902][T12677] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.889733][T10036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.893170][T10036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.929223][T10023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.932682][T10023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.044991][ C0] net_ratelimit: 1 callbacks suppressed [ 424.045012][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 424.285028][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 424.346208][T19775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4539'. [ 424.437370][T19782] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4540'. [ 424.605898][T19853] input: syz0 as /devices/virtual/input/input35 [ 425.049387][T19897] netlink: 'syz.3.4551': attribute type 1 has an invalid length. [ 425.055710][T19897] netlink: 'syz.3.4551': attribute type 4 has an invalid length. [ 425.058784][T19897] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4551'. [ 425.062393][T19887] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.085033][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 425.255223][ T5754] Bluetooth: hci1: command tx timeout [ 425.325054][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 425.653648][T19927] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4557'. [ 425.912378][T19887] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.076549][T20001] netlink: 'syz.5.4561': attribute type 5 has an invalid length. [ 426.134960][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 426.276879][T20014] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 426.365010][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 426.424837][T20033] loop4: detected capacity change from 0 to 7 [ 426.437125][T20033] loop4: [ 426.438498][T20033] loop4: partition table partially beyond EOD, truncated [ 426.438705][T20034] ath9k 0000:00:04.0: PCI memory region reserve error [ 426.507803][T20043] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4572'. [ 426.745334][T20059] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4576'. [ 426.932125][T19887] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.078051][T19887] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.175159][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 427.220870][T20151] netlink: 'syz.9.4582': attribute type 5 has an invalid length. [ 427.277415][T12677] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.285701][T12677] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.295157][T12677] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.298586][T12677] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.335065][ T5754] Bluetooth: hci1: command tx timeout [ 427.405181][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 428.043440][T20201] lo speed is unknown, defaulting to 1000 [ 428.146050][T20201] lo speed is unknown, defaulting to 1000 [ 428.214965][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 428.224547][T20209] netlink: 'syz.3.4604': attribute type 4 has an invalid length. [ 428.237591][T20209] netlink: 'syz.3.4604': attribute type 4 has an invalid length. [ 428.455090][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 429.245034][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 429.495057][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 429.521343][T20240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4600'. [ 429.582141][T20250] netlink: 'syz.5.4602': attribute type 1 has an invalid length. [ 429.627681][T20250] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.659216][T20290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 429.667230][T20290] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 429.672240][T20290] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 429.699549][T20256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4613'. [ 429.734558][T20250] mac80211_hwsim hwsim49 wlan1: entered promiscuous mode [ 429.743633][T20250] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 430.073648][T20314] overlayfs: failed to get inode (-116) [ 430.295002][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 430.361934][T20321] overlayfs: upper fs does not support file handles, falling back to index=off. [ 430.366476][T20324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4622'. [ 430.535077][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 431.325042][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 431.494676][T20429] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4629'. [ 431.534271][T20429] batadv0: entered promiscuous mode [ 431.536656][T20429] macsec1: entered promiscuous mode [ 431.538530][T20429] macsec1: entered allmulticast mode [ 431.540389][T20429] batadv0: entered allmulticast mode [ 431.544040][T20429] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 431.548420][T20429] batadv0: left allmulticast mode [ 431.550782][T20429] batadv0: left promiscuous mode [ 431.565008][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 431.775008][ T5841] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 431.975053][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 431.979131][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.984261][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.988594][ T5841] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 431.994171][ T5841] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 431.998293][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.008419][ T5841] usb 5-1: config 0 descriptor?? [ 432.375188][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 432.441980][ T5841] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 432.444445][ T5841] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 432.446974][ T5841] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 432.450788][ T5841] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 432.453070][ T5841] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 432.457849][ T5841] input: HID 0955:7214 Haptics as /devices/virtual/input/input36 [ 432.530607][ T5841] shield 0003:0955:7214.0014: Registered Thunderstrike controller [ 432.533365][ T5841] shield 0003:0955:7214.0014: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 432.546142][T20494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4639'. [ 432.615007][ C3] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 432.633101][T20431] netlink: 504 bytes leftover after parsing attributes in process `syz.0.4630'. [ 432.643185][ T5857] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 432.643357][ T5856] usb 5-1: USB disconnect, device number 7 [ 432.649741][ T5857] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 432.653683][ T5857] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 432.659019][ T5857] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 433.405183][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 433.417194][T20551] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 433.441341][T20552] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 433.480856][T20552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.486564][T20552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.494263][T20552] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 433.500367][T20552] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.504531][T20552] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.516964][T20552] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 433.523766][T20552] bond0 (unregistering): Released all slaves [ 434.138595][T20582] ------------[ cut here ]------------ [ 434.142673][T20582] Device '2-002c' does not have a release() function, it is broken and must be fixed. See Documentation/core-api/kobject.rst. [ 434.146764][T20582] WARNING: drivers/base/core.c:2638 at device_release+0x1da/0x270, CPU#1: syz.0.4659/20582 [ 434.150342][T20582] Modules linked in: [ 434.153634][T20582] CPU: 1 UID: 0 PID: 20582 Comm: syz.0.4659 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.157062][T20582] Tainted: [L]=SOFTLOCKUP [ 434.158390][T20582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.161562][T20582] RIP: 0010:device_release+0x1dd/0x270 [ 434.163265][T20582] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 6d c2 af fb 48 8d 3d d6 3d d5 0a 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 54 c2 af fb 48 89 da 48 b8 00 00 [ 434.169269][T20582] RSP: 0018:ffffc9000b257a20 EFLAGS: 00010287 [ 434.171186][T20582] RAX: 000000000000408b RBX: ffff888076e1a020 RCX: ffffc9002a657000 [ 434.173685][T20582] RDX: 0000000000080000 RSI: ffff8880442d21e0 RDI: ffffffff912f2c70 [ 434.176391][T20582] RBP: ffff8880442d21e0 R08: 0000000000000001 R09: 0000000000000000 [ 434.178926][T20582] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802aa0f800 [ 434.181401][T20582] R13: dffffc0000000000 R14: ffff8880442d21e0 R15: 0000000000000000 [ 434.183881][T20582] FS: 0000000000000000(0000) GS:ffff888096cdf000(0063) knlGS:00000000f549db40 [ 434.186786][T20582] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 434.188876][T20582] CR2: 00000000f71a8b50 CR3: 0000000063954000 CR4: 0000000000352ef0 [ 434.191387][T20582] Call Trace: [ 434.192620][T20582] [ 434.193588][T20582] kobject_put+0x1f7/0x640 [ 434.195111][T20582] device_unregister+0x2f/0xe0 [ 434.196666][T20582] i2c_unregister_device+0xf5/0x270 [ 434.198299][T20582] i2c_deregister_clients+0x255/0x460 [ 434.200001][T20582] i2c_del_adapter+0x124/0x2d0 [ 434.201522][T20582] i801_remove+0xa4/0x3d0 [ 434.202894][T20582] pci_device_remove+0xb2/0x1d0 [ 434.204475][T20582] ? __pfx_pci_device_remove+0x10/0x10 [ 434.206358][T20582] device_remove+0xcb/0x180 [ 434.207872][T20582] device_release_driver_internal+0x44e/0x620 [ 434.209874][T20582] unbind_store+0xf8/0x110 [ 434.211308][T20582] ? __pfx_unbind_store+0x10/0x10 [ 434.212939][T20582] drv_attr_store+0x74/0xb0 [ 434.214411][T20582] ? __pfx_drv_attr_store+0x10/0x10 [ 434.216111][T20582] sysfs_kf_write+0xf2/0x150 [ 434.217621][T20582] kernfs_fop_write_iter+0x3e0/0x5f0 [ 434.219302][T20582] ? __pfx_sysfs_kf_write+0x10/0x10 [ 434.220954][T20582] vfs_write+0x6ac/0x1050 [ 434.222354][T20582] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 434.224209][T20582] ? __pfx_vfs_write+0x10/0x10 [ 434.225803][T20582] ? find_held_lock+0x2b/0x80 [ 434.227363][T20582] ksys_write+0x12a/0x250 [ 434.228755][T20582] ? __pfx_ksys_write+0x10/0x10 [ 434.230337][T20582] __do_fast_syscall_32+0xe7/0x970 [ 434.231977][T20582] do_fast_syscall_32+0x32/0x70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 434.233585][T20582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 434.235766][T20582] RIP: 0023:0xf70aefec [ 434.237112][T20582] Code: Unable to access opcode bytes at 0xf70aefc2. [ 434.239230][T20582] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 434.241902][T20582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 434.244430][T20582] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 434.247041][T20582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.249592][T20582] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 434.252159][T20582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 434.254712][T20582] [ 434.255795][T20582] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 434.258109][T20582] CPU: 1 UID: 0 PID: 20582 Comm: syz.0.4659 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.261573][T20582] Tainted: [L]=SOFTLOCKUP [ 434.262976][T20582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 434.266227][T20582] Call Trace: [ 434.267409][T20582] [ 434.268494][T20582] dump_stack_lvl+0x100/0x190 [ 434.270062][T20582] vpanic+0x552/0x970 [ 434.271364][T20582] ? __pfx_vpanic+0x10/0x10 [ 434.273036][T20582] panic+0xd1/0xe0 [ 434.274283][T20582] ? __pfx_panic+0x10/0x10 [ 434.275751][T20582] check_panic_on_warn.cold+0x19/0x34 [ 434.277699][T20582] ? device_release+0x1da/0x270 [ 434.279300][T20582] __warn.cold+0x191/0x318 [ 434.280810][T20582] __report_bug+0x30f/0x440 [ 434.282314][T20582] ? device_release+0x1da/0x270 [ 434.283930][T20582] ? __pfx___report_bug+0x10/0x10 [ 434.285609][T20582] ? do_raw_spin_lock+0x128/0x260 [ 434.287270][T20582] ? find_held_lock+0x2b/0x80 [ 434.288828][T20582] ? kobj_kset_leave+0x160/0x210 [ 434.290461][T20582] report_bug_entry+0xe1/0x290 [ 434.292034][T20582] ? device_release+0x1dd/0x270 [ 434.293625][T20582] handle_bug+0x1cd/0x2a0 [ 434.295049][T20582] exc_invalid_op+0x17/0x50 [ 434.296533][T20582] asm_exc_invalid_op+0x1a/0x20 [ 434.298089][T20582] RIP: 0010:device_release+0x1dd/0x270 [ 434.299839][T20582] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 93 00 00 00 48 8b 6b 50 48 85 ed 74 19 e8 6d c2 af fb 48 8d 3d d6 3d d5 0a 48 89 ee <67> 48 0f b9 3a e9 eb fe ff ff e8 54 c2 af fb 48 89 da 48 b8 00 00 [ 434.305865][T20582] RSP: 0018:ffffc9000b257a20 EFLAGS: 00010287 [ 434.307823][T20582] RAX: 000000000000408b RBX: ffff888076e1a020 RCX: ffffc9002a657000 [ 434.310337][T20582] RDX: 0000000000080000 RSI: ffff8880442d21e0 RDI: ffffffff912f2c70 [ 434.312825][T20582] RBP: ffff8880442d21e0 R08: 0000000000000001 R09: 0000000000000000 [ 434.315299][T20582] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802aa0f800 [ 434.317796][T20582] R13: dffffc0000000000 R14: ffff8880442d21e0 R15: 0000000000000000 [ 434.320301][T20582] kobject_put+0x1f7/0x640 [ 434.321745][T20582] device_unregister+0x2f/0xe0 [ 434.323275][T20582] i2c_unregister_device+0xf5/0x270 [ 434.324937][T20582] i2c_deregister_clients+0x255/0x460 [ 434.326693][T20582] i2c_del_adapter+0x124/0x2d0 [ 434.328216][T20582] i801_remove+0xa4/0x3d0 [ 434.329613][T20582] pci_device_remove+0xb2/0x1d0 [ 434.331159][T20582] ? __pfx_pci_device_remove+0x10/0x10 [ 434.332915][T20582] device_remove+0xcb/0x180 [ 434.334368][T20582] device_release_driver_internal+0x44e/0x620 [ 434.336294][T20582] unbind_store+0xf8/0x110 [ 434.337727][T20582] ? __pfx_unbind_store+0x10/0x10 [ 434.339304][T20582] drv_attr_store+0x74/0xb0 [ 434.340784][T20582] ? __pfx_drv_attr_store+0x10/0x10 [ 434.342421][T20582] sysfs_kf_write+0xf2/0x150 [ 434.343893][T20582] kernfs_fop_write_iter+0x3e0/0x5f0 [ 434.345661][T20582] ? __pfx_sysfs_kf_write+0x10/0x10 [ 434.347330][T20582] vfs_write+0x6ac/0x1050 [ 434.348710][T20582] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 434.350543][T20582] ? __pfx_vfs_write+0x10/0x10 [ 434.352050][T20582] ? find_held_lock+0x2b/0x80 [ 434.353579][T20582] ksys_write+0x12a/0x250 [ 434.354954][T20582] ? __pfx_ksys_write+0x10/0x10 [ 434.356497][T20582] __do_fast_syscall_32+0xe7/0x970 [ 434.358121][T20582] do_fast_syscall_32+0x32/0x70 [ 434.359664][T20582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 434.361752][T20582] RIP: 0023:0xf70aefec [ 434.363056][T20582] Code: Unable to access opcode bytes at 0xf70aefc2. [ 434.365140][T20582] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 434.367757][T20582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 434.370239][T20582] RDX: 000000000000000d RSI: 0000000000000000 RDI: 0000000000000000 [ 434.372703][T20582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.375183][T20582] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 434.377680][T20582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 434.380154][T20582] [ 434.381867][T20582] Kernel Offset: disabled [ 434.383236][T20582] Rebooting in 86400 seconds..