last executing test programs: 7m54.978689835s ago: executing program 1 (id=1418): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000008ac054f0200000000000109022400010000a000090400fc01030003000921ffff00012205000905a103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000100)={0x20, 0x3, 0x5, {0x5, 0x23, "26ed60"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x200) 7m53.321625739s ago: executing program 1 (id=1454): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'veth0_to_hsr\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @multicast, 'ip6tnl0\x00'}}, 0x1e) 7m53.321312219s ago: executing program 1 (id=1455): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000500)=@urb_type_control={0x2, {0x0, 0x1}, 0x6, 0x5, &(0x7f0000000000)={0x80, 0x14, 0xf801, 0x200}, 0x8, 0x8004, 0x0, 0x0, 0x1676ab37, 0xdffffff9, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 7m53.245868477s ago: executing program 1 (id=1456): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 7m53.163053819s ago: executing program 1 (id=1457): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$security_evm(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)=@v2={0x3, 0x3, 0x15, 0xfffffff7}, 0x9, 0x1) 7m52.87146811s ago: executing program 1 (id=1460): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000005c0)={r1}, &(0x7f0000001600)=0x8) 7m52.784761459s ago: executing program 32 (id=1460): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000005c0)={r1}, &(0x7f0000001600)=0x8) 6m48.730416934s ago: executing program 3 (id=2579): ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x6490, 0x4) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[]) 6m48.730004621s ago: executing program 3 (id=2580): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) close(r0) 6m48.676794533s ago: executing program 3 (id=2582): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, r2, 0x25, 0x14, @val=@tcx}, 0x1c) 6m48.586124509s ago: executing program 3 (id=2586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0, r0], 0x0, 0x10, 0x1000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1, 0x0, 0x8000000}, 0x27) 6m48.52959122s ago: executing program 3 (id=2588): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 6m48.522869629s ago: executing program 3 (id=2590): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x3, 0xe, 0x1, 0x4}}]}}]}, 0x44}}, 0x0) 6m33.122555256s ago: executing program 33 (id=2590): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x3, 0xe, 0x1, 0x4}}]}}]}, 0x44}}, 0x0) 4m16.138596084s ago: executing program 4 (id=5532): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 4m13.950595406s ago: executing program 4 (id=5566): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mprotect(&(0x7f000002c000/0x1000)=nil, 0x1000, 0x2) madvise(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 4m13.630301426s ago: executing program 4 (id=5562): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x14, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40040) ioctl$HIDIOCGNAME(r1, 0x80404806, &(0x7f0000000100)) 4m11.965481024s ago: executing program 4 (id=5584): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 4m11.886278177s ago: executing program 4 (id=5589): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x442, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) mknod(&(0x7f0000000680)='./file0\x00', 0x8001420, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file2\x00', &(0x7f0000000140), 0x8440, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 4m11.492316629s ago: executing program 4 (id=5595): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffb, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x0, 0x15, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "6c1ca43f80026d1a850900581b59ded147e04d528539f3d328973702384c72a964a02447a75df8a69ea917deaebaa493c809557afe895239d2b100", "4f000000dd9d9ac2f63a7ad700", [0x5]}}) r2 = dup(r1) read$FUSE(r2, &(0x7f0000003c40)={0x2020}, 0xffffff0a) 4m11.230087221s ago: executing program 34 (id=5595): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffb, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x1ffffe, 0x0, 0x0, 0x0, 0x15, "339f020bbe82b38b000000000000000000070d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c500", "6c1ca43f80026d1a850900581b59ded147e04d528539f3d328973702384c72a964a02447a75df8a69ea917deaebaa493c809557afe895239d2b100", "4f000000dd9d9ac2f63a7ad700", [0x5]}}) r2 = dup(r1) read$FUSE(r2, &(0x7f0000003c40)={0x2020}, 0xffffff0a) 2m9.106581847s ago: executing program 5 (id=7707): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) read$FUSE(r2, &(0x7f0000002980)={0x2020}, 0x2020) 2m9.04674163s ago: executing program 5 (id=7708): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc) 2m9.046446922s ago: executing program 5 (id=7709): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 2m8.755808834s ago: executing program 5 (id=7710): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 2m8.751506607s ago: executing program 5 (id=7711): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x9c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0x81}, 0x1c) 2m8.407139075s ago: executing program 5 (id=7714): openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 2m8.358280516s ago: executing program 35 (id=7714): openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 1m34.063884548s ago: executing program 0 (id=8144): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0xa) 1m33.929178309s ago: executing program 0 (id=8147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x414d, &(0x7f0000000400)={0x0, 0x287d, 0x400, 0x3, 0x4e}, &(0x7f0000002200)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000002280)=0x0) prlimit64(0x0, 0x7, &(0x7f0000004080), 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x800}) io_uring_enter(r1, 0x2003, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 1m33.825383267s ago: executing program 0 (id=8148): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x17, 0x1, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0x8, 0x5, 0x0, 0x0, @u32=0x7}]}, 0xff2e}}, 0x0) 1m33.715061883s ago: executing program 0 (id=8149): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) utimensat(r2, 0x0, 0x0, 0x0) 1m33.193490429s ago: executing program 0 (id=8151): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m33.095963657s ago: executing program 0 (id=8152): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x0, 0x2c1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1}, 0x5) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) close_range(r0, 0xffffffffffffffff, 0x0) 1m17.795108356s ago: executing program 36 (id=8152): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x0, 0x2c1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1}, 0x5) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) recvmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) close_range(r0, 0xffffffffffffffff, 0x0) 38.065476737s ago: executing program 7 (id=8785): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000500)='ns/pid_for_children\x00') 37.369954665s ago: executing program 7 (id=8796): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) 37.224401221s ago: executing program 7 (id=8801): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd70100400f0ff0400000006000100050000000800090002"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 37.105552748s ago: executing program 7 (id=8804): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/file0\x00', 0x0, 0x324b0d1, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 36.96148112s ago: executing program 7 (id=8806): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x39) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000390423bd7000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="81b8000000000000300012800b000100697036746e6c000020000280080008002b00000014000300000000000000000000000100"], 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x4044844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 36.655390544s ago: executing program 7 (id=8807): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) syz_clone(0x400a200, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 36.524419289s ago: executing program 37 (id=8807): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) syz_clone(0x400a200, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.132763316s ago: executing program 8 (id=9412): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300)="ddea382fe5537f3d2fb49c4812b017ff934a2ddcd24d5fd5c81691cc5aa3bf511c976eb4bf242154d6ce2d659ded56e5fcb9e30482f646f74754697e6c295d2c3aa749d9b7b6f726a240a036ea41b65d694c35b3b88482fbdec4e1f8c3fb21f9547dd2c030532e185f9d066b194f2967a99fbf1b7c1e28e80cef223bb83cf08e0e7fd422472a6c2e3cc84af917f9f263607277cded34d075d922fc94097a778dfdede31ca69a7842431ccfebd0cac561e165816fe998d19761ef45bf43200b9fff2f808b8455cd8c4a1334a581442dd4b4f1797bd573b0c1b9e69b69b8fdb6348bfd9d0046219d10e89b25d0a386286dbcddfde1592f9d638a90676cc7ee1d90fe427a8294896bb71718f0f5611ae7780f6e428e537ca207fd75be51e1f497ca0c46b0de9455902f19da63a6dc42e180b07135ee29e32d8126116e0760c261adb57b7940494d3d22e411f58259bb55d39216215e5a9307fa53615ffc3366ddf04f6d162a2dc4b95ae7ace91bbabb975f270960a0aa0d84226ac0cee09ca53e64a20ce93f25171d9bac6a924bd88c2d0cec7e98b623cbe3273775c287a4df4e788b5b6d31239fcbc7e9c395e116a46c5ed3b5ce1d8f00e9319419e7c1c9727211398688f2ff6f1ef98da7e2e12f4c7b5446a4c2c38dad1d72b9b27b8a02d730bbca9865fdc3ee266ade9389a22c239bf4f7794dd2a007d947a2e7c23fbfb2cf187db4fc9216e692ff1d229dd230d780b5f8826d703b525e98b14e6968bdcb135fc562c1249885276451f508293da724968c92e9332564da27289460e9b5f8841d797cec69ad050d29f265d54ff713339ff94474dead800bdd4441ad970786b532becb4507b2dad036aeefaa71ad4a66713b7c4ae9788d998171787843be7a0cb3f695bd1fc4cb615af198266ccef28a3a1d85116c366c0f64ef16e8fe7535b968b436574f6c1af28667d7acadc85b3db8c4c00f26b6a59ba98bcabc59dd389dc0dba675fe71bd1948cf9b850011f3da1bb1f9a1041027572be9afe39b1e20db89d41bc609edf9db5a3b03ab9284f43b912d426653329364008cdb27921da3b198e2da95f46c194a1d6471d2930a8514b17efe24e52ae87ef3ee62e2e1f23b7680e4790ef1c509dfa8ace6f4eaaceaa0c8513ede96984847e04bed5fc026f4dbb0942a932f54c375c2c24e640370dd6540fb775e46994b6897b959d19c3d15a431e274c70868193822f634370eb2effec4a1005a998454e1ceac6d418b66441572b7eb5bde3e09bcb35cd51f54859ffbbd242c84e603f14c876c5f9f862f309f3fb597c55bb9738ef476e59842baca084c7ed594b2e2741546e7c6d4e014a64b8c26dbea3cea6f00825674e577147597c5c93c461f0cf5e083099d7b21a64f577c289a39c71c2dc304967bfbbb274b2cc7076cd1ead5d02012cffe8a5072d26dc6ec9b748af2fd5b4dc322bd3e378901844db0f824f5564bdf374b339c067d964e3706f1245448e20b9ad144122e6d90bd24a73c9b9ee37c985b2770f6c2dda56b61b63ba185beb32674d4908be4c2e9d329e2fc34372e0b18a9858d24b63ff5e3f5f709752d2b4a86ba572c0273beca9db44fe5025ac6b2e971609cf4dac54fc3276325f31fabb933c4b4967f338bdba205a01f81431830e447bcbed44c09bd743a119631eb101a3eed41ae979a62cf99842a7673dbc551d235237ca0c870fdc618c4dd478db3abc4369138812b7a18860970c463ca84f172fbceb7a3f121298e5b875b0bea6d50d11c2f0a49133189740239076f332b92b31a7e7a70f0e1b4e0fe5fbb3e05c75688ea7cac53abaf8a3186fbc12a308ea7e618807b9a76d549dd2bc3af69e20f9e1a7abc4c4490e0994847d90b014cac74cbbb7e6c623209f764d8eab02a957a3db89b07baf4ebfd6ed2adc7096e35eabe40019c67ad2f955acbaebfd7694d814c708a7c1898a9caf174e219dd335eab1e39e99c391e3dea3eaf16c240aa0c396f5ed0664b49df7a8da00205f9bd3c668c05212375bd730f3b6fcd98d07445b8dbf332acbf2fb2b249b8eb98582f7c54a8d498bfddecac3e93b10d4b32de8d14e747076c312e90c7359fc7725e619c6f815731771d9ec540edcf72644e036c86384d471b233c43ecdf4ebadf6d5efd37f5bc31bbb53979b2703f0cc794c0e2c11f0898b3c1353bf92d32b693129eb31a0d3e4fbe5cc1f9f73bb00d7138ac9a3110fd5afdf790100e9a131972e2bb5ec292a7b8f5ddf293e75cc1e281a0272f0fb00a47b63994ae5ed1fed1aad586fbb68d0db726572cc758c35b6d2152fc6b90378262beda9e36311aa87ca6e3cdbf996084bbbd191f154018297ad33d317c40b6b90b2dae688ccea76256535edf8d88d2cb86405d0e2685e5ef573ea77f7cef8c01d9b1af5a7f5ce36552cacd07a351d08579c0d1766fa8963fb0f50e855ac7db622cc5c151aa76db4801f24d8da53ffe59a7a3610bf4df8b5c02ec667d0d55a2450cc8f65129a1e3f27091e6911c9d6b800a06ef70460061195f5111596f1776e2fee053509b494bf569823b70853394552c145489a539c045f794da9f525edf43cf8740873c127e4521d1d402318ca30ccc12a1e9b2399cf59a757dcd29af93aed6c23ff0231d5c5efae9f0d352c2c3cb89c2272a75623fcf5d8de8da4d523e7789637903dc528a4a562f4c828b13764f03de595174800e466b2c0fc5dc5eb3db400801a9ffae88600286d589def10c72377790e1728332804d077ef35acb416dd24135480b945892b761acdc693a308e9d415edef0da28912529341b88f0c15a0292587a40601c79588d286c307901c4ff66e3ff3ce926f20b429d5ac7159dcebff2ec418682808d62fca9a2e49a5ac46882866a606510b18b41062b4af7909e2cc935a22390b94db1b8808eae17ec0ea2dccc008e2ffa59409c61c8846d7a9bc15e43e451dad887b855f6760ed3b511bbed2606c829e2f0aa6fd4408969d9ea27ef4fe4d6918757d408d47a041f6cc46a8cfbb9a3945d68268faad29572cb5b7f4af76323a395f663702b9cf55b908e36e62473fb170398bb8fdbe7b39c11d14dfb6e695f0e9328b84ee86e886f056bd11efa95915c6f6be1a3ad04998efb5429710c3f404381032a228d79a9e7d9f8942a6dfca1cff0c5b4095d186da1bd924c78e0940f0a83a43808f6f4b4e9747c181bb16dba5989974d96bfa5ade7320cf2aece6fcde44b7c4669222be299e0240f1c0113c66b71d7cb097b2591709b347517dc06c743cb627c5848a97c1b7d095efd40a44ab9cf6a42c03ddb55897a19d3632d77776a77fc4c8d2a070782c6223f236a38c4dc37da731ed304ccb119c2d9b23e4fa7ac1b52829001f0ddf5e9e4f1176095e437aae7a8e66243927a026aa4bedd9602ee89c6eb62ff300529c7f770d3d49d9ce4e98d8b3d0f7efad49f6015766e6085795d246990920c7356a8dde4eee420a3fc032e9d361b111e1b1edc2d100e1eb3edba6a55d17700c75c5a8516509b81a27f13df9113fddacbe85f635b0d2e494f2c1a46f5018be92be4f1c070a5c954141d50efd048ced35268c5b4851ac5b01c43ba8c1d22209d96ba596a83828f40f3ff649883c45c7cf62307b26544650ca71efe283877e6e560c1ff3876d4f6cce0efd5f08cb074d19a3d767f9bb7788004663328f86b2d6e54564d797fb7626a609d5c823ee9e8f11ca55085152c64f0ba446a99d61dc0b79e26758144601c9fb5b75da79489bc4be86e9315ad26b983269d845c9f2974105a7f89a44671be6bc6fd48c9634c2a849e80c58955b4b82577746ba1e281b41d51b0e65a4d3b7c368a676a07933ed11c754d41d0cd33d2bbb12a53d83772b120318ae0896829c9b1b31055e1fa00a40d7392b8d9cf0eb4bf253776764fbdb0f2365c7696498080296152c4d5d6d0e83e853db63fbcdf0f2962a846093db9b6564257d396d280af560c8bae9c30ca27ba2c920e83db8fc1cf8474038fbb103e0664d01c9bddd34106dc97e4b331969054871e544bb0566905d764940ef983a429bb0eba8e9b4c2533da8efd80bfb710da5587623f284d272f4eab19a3ec6015ca8bfcca60a2163f2a5c2b1c35a3524352273a5beb992066e4e3811ad900dc3238666678f213eecb033df508c71cdd05c999d4985d0774e936d63ef994578d53320664a204acbfec7c01ae4fdfc0b68580cf6a72c00d8c8b24e3a5baec97952fae115e3132e72ec9b7f25b12fbbe99b5439a33f4854745c0cba03dd74043fa30a9363a8928aca3ab50a30ec501b45f3baac7d5bc8c0db7e106a2bf762e6669dd5c952e1a9a2da0ffb22666d7e43f59cad572603301a6e19e6343c7f6036ea7cbee16871724d37711634f985495a3b8eb0aeec33377a90b1d9033f6ded9b4bc7fbb3879dfc5f17aaa7e2328536556c856f69180c33fa860fd4176951b1aa3e055a795aff1e6c2b78e1a2fb3449d6748dc0cee93af2fa40723e7495b5354ad8a38a3142772d1bf90ed47d3b871a78a74adcd76dce513aa8c6ed069701e0032494b5a20e74e17146ade49d333c0377e3f7f70d857eab73011b0a6c16b4825fc816d24a644ecb620292c41db414d4e7554e0181da574df59a1b1ef5577b8b12532aa10c324d73bf706b186c8e9063b8d6e7ecf29fcc3dfdd64c823c40fafa882687c8c5aae2f0ac889ee6b6d0dc60a6d378553a9d7fee8cd005bb1dd793f0e56f079fc5f53e99c2b7093527399a9f00312b43e81cf60e7338836369bc60fa45253ab2166655a7cf72a347fe2f7ccb5aa9dfb04f8eeb89ba400a40d266931901e0d1f984e651696bf58b709cd24314be5cb9a823aa332cd768387128f3343ffaea64f41dc0a2f8c02e60dff7e2d0e85eb3ddec0c2697223272995c4ab67c66b2a2e9d68db306a8160cfbf495e67f1ddb74324a0e1832776653c992df5edd6ad98930a0b6ca2b78dcd6f3c0cd2dda1ec783fd4955e023086d7860e0fc2f61b4d2ba88c477e959888cd24a4efe45d3ed48f2afc44e55b81dfafe03c88c4c27e5ec8e0a18533cc00709ec9e1cad214ee705e08e84bf7cd6e3c9753aed11028fa5e9f9ce596b1db09e61696b84e0cef75fea80c34132f54d830e2eb3b338f4bdaedea34bceb790af70d8aded8da4460c7c3038dfe73f623f16734d830d73e5926321e87fa91321388e63ca3b2ca73fd4e70e9e9e291f98266bc775ebbfbd1c427a0f2b1bab10952c8064488e7d7aae4c8e7b89ab03d050f82d9971f7641f65d07c3426af91639a12e639ed2a7b8edfecd1d3480252ee99e7013e25e1135de798294bd0deab950d36ae92ef357c9e03a8b3ef575a0f99f1cd15c94f156856725324f76b0e3e8bcd1d3f016c4cde1c8349da5c2d875032464a943153cf40e5f025d711eda841d2b337396498d2a0fbb85f9fc9e485079dd1e8331824f6fa2361a39ebf1cb2c8f90e4838e66c39489135e7670b280b5023c26ba6387c8850dc6c5a19a31521df737078fcf379472041c9686675b6903e6e73dead47253019deaf4084a2b801a5921262db9f123449ee404649369a3daa36831fc56e798548f44b30ca46162e542e5e21f922c0ab02e947ab42bb3a7ef3b806a39fb8e7bbe839db9881a3b64bc17a35f8c7a03cc9f5938c313b1613d6ff205f13dd26343dfcd221e8feb2a53197493ff34306b9968df5910c4685f5890255c82a0e06db506e6fc243a39e445b67c04cfa8d442a2f0d5b376ab1d8d5571a6512ef5fb19ab8978498f9fc8d45f4151338fe50912d485537651e015b4427a66a052aad9d2e2ba1ffd92329290a854bd1c95ab51a0be5b4180d806b22bc5608a91c06a5b1574d257802eaba1183fc83398d5af88872bb76a6b059930c52e960253b9e63eb0731c36c69af44f48fdee37b2e8ad889e531ed3b1d964675214cc11269063c50d9ff554c6df6304304f3a8c7f721712ec9fe7617fb9b1b5b195761496bd13017d683e3f796e679f5f6f9368457877c4da665503e4657d8ca739d7b33a94c6c05333a4ddb25ff631385bcea2058ed87975160d52cb708f79d40de512f6fabcac8e269439a381b0b7191a099a772588e568548cb1cac50bf2d49583bb8b87a840f4b9e3e733ba3aed87866caa47809293cdc064777716acd348fa8e2bf0a4a2c768240963ccf8e59e239ffbcb390a3bd8cd29ac9b5a88d0280730a2f3daeef14042f743c367b2277d630fae1c5b65b08020e2569a8b1ed36d7a8e42ec974118c4c47c3a176dc976b70a494bc236c74f2fccda83d8bcc09792979977cb5636192fd70ef654eeebc455327fa35cf5aa1eca88a22908b33c4f1684e55277b339d59eda72adad262053e207ce8dae1c268d4a96ef6d5bd600d6c30863567ba52f4ce917db043ff7ecafa80cc292f9d9684eb7e497d289e216f25fd512ff37d301e4bf12caa55105d815f1dbba4fcaf4158ce9b73f5529b458ad635f08558904b020176027d72a6b53e0465690ac261a1801ab0d93121caa466b9b2bf778719c8552f5d7ad8e87960602d727616e222a24d40d61d0036374916045f6b3c4584ddaeba98dd410a9bf94c2b56dbdada7c283c334e233cdf63912cfb5d2d4b5004a5161ca2caa5ba0292ae6a8cdbce0767b7d4a2b994acfb0684ddf2bfa85afec15e0a1221287fa806aef52283beb5793610188baed3350762cf59df01b9209351d6005333f5bf9a9365ede67554d19ea4c62c25dca92dc19b2c05118109ed1e06702643dbdb32634f6ca4f1ec1f79a096353b8eb3d35afb5195c5402bdd8d3b8893d2d5b57d9ec9868451a22af109f7ea9eb14d15ef92b240bb78dc68652cfe68808170a51f67fcf971cf70dd3f3719b017c75fa7eb62abb8fe8df887f2e43e6bae1d955dfb271c47ba078a4f7fa997eff74ffc70be40059f7257fd6e40c73651de6d16334f509a7e52449795fff4d3c7dd6c053fd1a85db6ecb87964af078382e6bc3b7edc51b00b17400573b3f7efd80dde42f8a9121d3b7d6fe2fa25ce7d01a1e44b34fa3ae9ca94deb02caf550e9f751b86e4cbe2354093b175959dedf31825241cbb131f6b829547300ffc9af659bcee1261696f584c809cc59f69739b02c642786d905a949e229785b625b6108a8b7313118418be3f48e5de6b738c3f03f7d8390f9348a9ea0ddb286816134c963a808b5fd80e19fd5b75b9f08028752b87e89ef430ca652455f9995951300eb0c1552adfabf5155cf6ddf0070296e16cb4e668cd682f622a83f91eb4a12271d4e0999bdedb13b53db6d004eb6f6316d80e4341192b13605310c175b9134d7687aaad089a2891ebeff9388a982b48952ed9eed207bd545f02e4f11de27f61793513017d14bffe1c6471c102b4fb4b01b82d2d2bbdc1818b7dab9ad2690107f12f5ef2ca6835307222e0993e2b68f4e9ec4e2fa46425c67e3e9ccf085170685a2b4458724ff7e2830cbf90946d4b5c9fab6fd980ed072361fafaeb29916d60eb52e778fc0d0a9b51197c15472e1124876e849d943b913c1f6d247b699d20fcc24f2c83771c449abb7933dcecd188b96522969db4711f72917feb31fb1ec21edd3b57adb53811f2559129677a93467f468ed7153106021f3481f1e8ca1f80b32d26a8439a3c286370f7efc414ec41ecbb15b7c64f096d94aa399f690b05e5575da5895b5930abdd642bdbfd39dae601a5f7092b4227f2159b6daf7a05b9cf3508ace62996bd6a591d4d90ed7910c6bdcd2752a86f783bcc45c67bfc10725e933b090819adea0dc7210dd5a90923304769df9c652609b8dfaed467783f3e104cbcc758436f861c838d6ae70633a76903fb40d78fd74e91a7fd9a4cb50458553b249d79b2c239ff245edf5aedd54f6fea729d3732adf647e455e5f82c31f6832fc3fc8a1b72602dc67cb31eaa10f78b2404f773493e9a2ba01d40b063ece97c8f132200a8ff2dd067bf121ca0d164926d21938dc01b5592b6907828af1da05956f9c1f1fa26c52ec04e7d67d0544d9bbfc7250ed1433d74d24d8ec3083c3aff9e72e596332627077791f5bf59698b3e5a82d59e285f89fb1101ba1565469b1ae4b2775c340afe1d1762824baf811840b0a1bd934ef70eeccc83a146afa21a434882bdb0ee773a9be10a0ca670d77fe5756b494c4932c90d7e2a41df4b621c70a6df147c950f4eaba4bfa80ce2105a76b56b96a62a5b1cda6b86725c04e8a308d2390e525494874cbe0c6f6b5f7a0f9366e351caa57093bb8aa1fa6a3d46e6575109c18ff19ad336ba17468f2647aaeb6d0c021c2e8fa836ac05197216fb816fe54f494fe589267cbebcccd154c138360c2a82fb918606413262ba0d36423ed57dc0090c79dd15e0e3c00c9d7fdd3ec4d0c58e6f9635c7f13e3d72f8c17d753a6e0ee3a875ed97d8204b816bbfe9c4f464b119735ab43599a8f77d37aa683b9a0b95da834360718c40a22b1190088d0a6173898c9d4a1d0d4199646b05bf01db7de749f13d8b1f625dc473756b9be3f6fe5e4a740fe7d4df362a9965a186ccd7332af494a579de966199f63f0926481e26ade83fcebcf15437126f1212abdf8f8f6251b03ce7c575f7b9175fc525bf50c5f99ba6b1ccd0538274786b7bc1c892de7ffb7b688f8e5aec8877a36350772db1209636a60b43a2d58e7ecebe5467e7a82454557ba49c2bb416ec1fa5ce54855b2626d917241ace6a590981e5ad26636aa99445cdcb852aa011bd97d285a219480af73baa70150a46d9c838df66505e88cd4f99e206538e7de14c1d09c8f8a93f55723cd7001947e5710be5489956441796c1c27278849d58cb142e090efa98bbaf239a9e98f3281cc8dada3f3051e3f4337583b35268dd5bcef134cf535ac19292e62b446afff1bfdc978ba1a68b7279e3f47d9a26ff5c612bd9e2df2cb5276a18b91ce42f64efa81baf6b85a4413cd09e0a2c3abcda08c6b96e0e933aec80313cf5a0a73bc491f9a90fc6f1ef78f7e383ba7a1dec58c15d8f2af942fbb74dfe17bc34ae218d0c852e57c3058fc12dfcc5ad3b35e4a6f8628d9b60df08db1d533eda8eb0988f07b22662f10848c736ce59787b7dae70d8dad9c458fbe5408d56cc6439b661870fdcaa7beaeec8dd0323099af8c68da6cf118d58fe807a51cd6a9ae97e298a3cff83876363089b28dde888a567b60d8cd7f4b25250b680df626e9a92635878c9c6f012c84a6047d47858b4bb9d77b489e6f829564ab76e0532b972931bb97b53a70aceb7c2b2448dc8d0864b5c18dc33203d31384765769af03383674f31cfc09853ee63844b0ac6c0bd349bfc7d55bbb591d32d3f6412aea2a05a1a976647ca1ba22b2463cda5066a678b2e232bc6ae22566d1e6b52e5e667562df7ba51f2bb9efbe6f4cc800fd2fa68f2bc61ae8cc7fe968b5d60e94d9de7cbd5056be82748de1ac19fae0cae985a7fb4ff0776860e86c0d9763826b7a99d205a003a384df1f35d5335302ac4782efd4237dcc944cc6388444def4b55e68e33b94030f41a308c5d904c1742e86209f1bef06512c5b5e1067fa709316d2084041f51bc9bd0cbf7210e34480ddce44a1bf2e0603edda369e8bdbaaac012512c835fe0661d9ccec0b0b05225a107cc8e00091c75120d09c19856dbc19baaedcd1e42b3126c321428a1392680e0cbbaa286f545d9b7b66d2953680c6c9345a3727fd0df3a95708dd87e7cad5c7fc606a2e615edcdf9df2515eaa36fe3c72866990d5da6729e2bb85e0eede8c001ee58505b4aab81d1515f2cbac5d9c3f935273d03120fa081137c600a45e6e3053a7a6e85d6013028b2300f9778d032e8f93ec997755596434b17f82fc09078279fbf9d10ead42e16910f5f82784c783bd2027636b986e5fe46414191e017436f1c83e353e0f476259b129309e8f12b102e05b548cc4da0fda1dd68077970af51f893eeed8c8acf6b0ca9a6c0e557203d5e5a4b06803c96c1b5dd701464a89963ad1574361e58b6e3b45bd05e19aed29002d52728e977460f4f0c9d58fbc9e45cc478c645c3aa792ff90a18eaf399ed01b02e194d29589e52818d6d3c2ba26ca477ce0c372b7e46ef1f5775f1d4b764ca7508b015892197495d863fe49276122844e1372f48a9bf4ed15be59f47355e36acde9bd3b289dd51a1e9a30b1e5a24deb005e461af1e8d063cc90e3337855af5a3dd2ac8907d7787e2ddd23abbecade7ef63a654b5a8715ce16d7e654e2be35e0e0705cb18953610d2200b368734cc881ecc6b68f31b2562c634e7dcef4100810d045fc8594cecad7e792d64a9970dc9b888756a37d3b436fc289e318db197670b95c448edb6c31d6d0ff6fa062571f4a57d579d3e5cf5eb8e2965c45253e3ef5a3b593d764f4cc11440b970aa20f1caf20cc6d6194e9a0bb520130cf004fb517d488cd5a7803649ebe03b171f3b97b9f5fa4a1c2d89977c05fb661ae6d6728f0594416c27819bd3ade0083653fa686c870308b9320e4394432f2e96b06401cd16020f89d26b15f16309fd2ec5d81619f15f6581299c4193bedb4d0b078aed6a822275c540e9b40d8415478ae0940510fc46c330a66e7746bd08b8859aafa3c65e8860f3fb2846ad154f7c6c4e1e3dc1b65e5250769a76877ffeeac1005b2e01bf4bdf8d7893ac38df364f2db3d2463b0b7b8a25c99975aedd7e009644ec7ff708821ffacfce270f5ee4485ec205d9371698b6bf1d0bcd542cbc826f468e6153f72bb40114145b4c2ccfbb45dba5c2f0634d8f3a21ec74e7d3b74aa271c5412fc0b7459323ca4c3bd91d378c8daf56f3f56c26096076eb42f392a1107e4f68f6144100ca48c44b4d59760fdab3704a1fa489ca5fb4de75503f8e3e21e5369a6b41ae2bf230780d82a0d0782a60a4b0d645dc57c3344b8b0efb7be4e0b8a2d9d6481aac8ee9c7eed3211c1778bd743f55388e69914387d8d3550a071c32455e7a19bc6c4c623da7c4dceced5afbbcd7f8b785a7a9adba7717f8faeeb3919c54daa0423214da53ec186112fa092b2539ee17a3bd8e9c0599d901ed6976b30ec7fa1826442a933111687cbfb8cc72e2c45f5aaed6d593412b186ccd49968ab563d73e2c53cf44532caf8427f319a4130670106294a71c49872181049caa96ec36c004c305e8871e99e351012bf4397f9ef9b846218d66d7f13864775ec54e25165299c9b513b023845842fa8cb745e0341e737bee3f173eafc976bf4a522ea76fa44afdc740aef19f9990e90ee842e6f19c7808844540da83b2b2b3ed782f5c063e2ec2b1ff537a9576ff2693041c506cdfd08236ca087133e4ce9736fe5f2ff344f979ea8122df6b76b36d406b06aab1d58d22759e4ab5d1fae3fb73adbf0d79ee0ac71f7a14c3abda11e629a49bb7a6463a05d35ba12be7aaf3be2df184089fbc109d68fe6850032dee49685a0ab82fc440db66ea890a87ce713535536c26a912e7cba2c20dd9ee3057e93997a4c8872a25907cda69bada9c9e6ef90364d224b5cbffe01d4ab8825657c032507cdd17324b8ee8df720cbd6751619760d0b976977bc830e15b9dd7402cbcd620cb175c2cfb4078d21f8d87a104c559c335a7443b4a2", 0x2000, &(0x7f00000017c0)={&(0x7f00000000c0)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0xffffffffd0065de0, 0x1, 0x6, 0x4, 0x5, 0x0, 0x0, 0x100, 0x2000004}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)={0x474203, 0x596}, 0x18) 1.074948365s ago: executing program 8 (id=9413): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="9d", 0x1}], 0x1}, 0x10) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) 884.202072ms ago: executing program 9 (id=9416): listns(&(0x7f0000000000)={0x20, 0x0, 0x4ffffffff, 0x3ffffff5, 0x0, 0x3}, 0x0, 0xe, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000000)='U', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 793.855989ms ago: executing program 6 (id=9417): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) 793.472589ms ago: executing program 9 (id=9418): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, 0x0) 793.233752ms ago: executing program 6 (id=9419): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, 0x0) 655.316536ms ago: executing program 9 (id=9420): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') close(r0) 598.081341ms ago: executing program 2 (id=9421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000500)={0x1, 0x0, @pic={0xe, 0x7, 0xe0, 0x81, 0x9, 0xa, 0xa1, 0x41, 0xf8, 0x10, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) 522.88826ms ago: executing program 9 (id=9422): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_off}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) 521.006126ms ago: executing program 6 (id=9423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x40000120) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 520.870131ms ago: executing program 2 (id=9424): rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x5, &(0x7f0000000840)={0x2, 0x1, 0xfffffaa0}) rt_tgsigqueueinfo(r1, r0, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4}) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) 445.449059ms ago: executing program 9 (id=9425): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb8d4a000) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x1800, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 445.228344ms ago: executing program 2 (id=9426): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1cb}, 0x94) r0 = syz_io_uring_setup(0x31bc, &(0x7f0000000540)={0x0, 0xc3b3, 0x800, 0x1, 0x278}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x5c27, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x8, 0x0, 0x91a, 0x2}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 394.086026ms ago: executing program 2 (id=9427): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) close(r0) 387.679494ms ago: executing program 2 (id=9428): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f00000001c0), 0x4) 381.518189ms ago: executing program 6 (id=9436): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='\x00', 0x89101) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r1) close(r1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81100) move_mount(r2, 0x0, r0, 0x0, 0x46) 245.280086ms ago: executing program 8 (id=9429): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 245.10811ms ago: executing program 6 (id=9430): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000000)=0xc, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100), 0xfffffffffffffeda, 0x400c885, &(0x7f00000003c0)={0x11, 0x11, r2, 0x1, 0xe8, 0x6, @random="c0f424a1f50d"}, 0x14) 245.036057ms ago: executing program 2 (id=9431): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) 156.695966ms ago: executing program 6 (id=9432): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 148.067537ms ago: executing program 9 (id=9433): ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0x4}, 0x2, 0xb1f1, &(0x7f0000000040)={{0x0, 0x5, 0x402}}, 0x0, 0x0}}) r0 = syz_io_uring_setup(0x7a3f, &(0x7f0000000880)={0x0, 0x2730, 0x800, 0x2, 0x15e}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000240)=0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x39, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x2, 0x1, 0x0, 0x0) 91.133863ms ago: executing program 8 (id=9434): r0 = fsopen(&(0x7f0000000040)='exfat\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x10, 0x1, 0x1, [r2]}}], 0x10, 0x50}}], 0x1, 0x404c040) sendmmsg$inet(r3, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x43, 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) 285.869µs ago: executing program 8 (id=9435): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/106, 0x6a}], 0x1}, 0x12153) 0s ago: executing program 8 (id=9437): unshare(0x6020400) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x88) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x61d595a8, 0xc) kernel console output (not intermixed with test programs): 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.908455][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 479.922149][ T9] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 479.959069][T23253] fuse: Bad value for 'fd' [ 480.012154][T23255] tipc: Enabling of bearer rejected, already enabled [ 480.085646][ T24] plantronics 0003:047F:FFFF.0022: reserved main item tag 0xd [ 480.121296][ T24] plantronics 0003:047F:FFFF.0022: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 480.148466][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 480.184019][T23268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7415'. [ 480.232953][ T1346] usb 11-1: USB disconnect, device number 18 [ 480.233140][T23269] usb 11-1: Couldn't submit interrupt_out_urb -19 [ 480.287580][ T24] usb 5-1: USB disconnect, device number 43 [ 480.948515][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 481.013326][T23289] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7425'. [ 481.020865][T23289] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7425'. [ 481.119460][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 481.119475][ T42] audit: type=1326 audit(738.969:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23298 comm="syz.6.7430" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f07fec code=0x0 [ 481.188518][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 481.423204][T23312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7436'. [ 481.918102][T23323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7440'. [ 481.988610][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 482.885352][T23381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7466'. [ 482.993329][T23384] net_ratelimit: 1 callbacks suppressed [ 482.993343][T23384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 483.028430][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 483.268527][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 483.938749][ T5753] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 484.068927][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 484.098307][ T5753] usb 5-1: Using ep0 maxpacket: 8 [ 484.102117][ T5753] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 484.105223][ T5753] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 484.111893][ T5753] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 484.117587][ T5753] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 484.123577][ T5753] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 484.132073][ T5753] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 484.138541][ T5753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.208335][ T5902] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 484.308438][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 484.354602][ T5753] usb 5-1: usb_control_msg returned -32 [ 484.356550][ T5753] usbtmc 5-1:16.0: can't read capabilities [ 484.368360][ T5902] usb 11-1: Using ep0 maxpacket: 8 [ 484.371844][ T5902] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 484.374767][ T5902] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 484.378395][ T5902] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 484.381937][ T5902] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 484.385277][ T5902] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 484.391042][ T5902] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 484.394507][ T5902] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.655097][T23449] all (unregistering): Released all slaves [ 484.770880][T23452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.844857][T23455] wlan0 speed is unknown, defaulting to 1000 [ 484.849619][T23455] syzkaller0 speed is unknown, defaulting to 1000 [ 484.854494][T23455] sit0 speed is unknown, defaulting to 1000 [ 484.899169][T23456] wlan0 speed is unknown, defaulting to 1000 [ 484.904135][T23456] syzkaller0 speed is unknown, defaulting to 1000 [ 484.919840][ T5753] usb 5-1: USB disconnect, device number 44 [ 484.970485][T23456] sit0 speed is unknown, defaulting to 1000 [ 485.108468][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 485.153564][T23471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7502'. [ 485.206054][ T42] audit: type=1800 audit(743.049:4796): pid=23476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7503" name="nullb0" dev="tmpfs" ino=9582 res=0 errno=0 [ 485.261244][T23481] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 485.261680][T23480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7504'. [ 485.272904][T23480] netlink: 'syz.5.7504': attribute type 10 has an invalid length. [ 485.276223][T23480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7504'. [ 485.348374][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 486.148528][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 486.388488][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 486.735243][ T42] audit: type=1326 audit(744.579:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23534 comm="syz.2.7528" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f78fec code=0x0 [ 486.988379][ T9] usb 11-1: USB disconnect, device number 19 [ 487.013256][T23554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 487.118901][T23561] syzkaller1: entered promiscuous mode [ 487.121620][T23561] syzkaller1: entered allmulticast mode [ 487.439331][T23576] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 487.447096][T23578] 9p: Invalid uid '0x00000000ffffffff' [ 488.061170][T23609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.228479][ C1] net_ratelimit: 2 callbacks suppressed [ 488.228500][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 488.237794][T23618] overlayfs: failed to verify upper (403/file1, ino=2116, err=-116) [ 488.242888][T23618] overlayfs: failed to verify index dir 'upper' xattr [ 488.250348][T23618] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 488.327264][T23623] binder: 23622:23623 ioctl 4018620d 0 returned -22 [ 488.468416][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 489.268518][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 489.501878][T23659] lo: left allmulticast mode [ 489.508523][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 489.568428][T12562] usb 11-1: new full-speed USB device number 20 using dummy_hcd [ 489.720467][T12562] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 489.724934][T12562] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 489.730779][T12562] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 489.735280][T12562] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.953917][T12562] usb 11-1: usb_control_msg returned -32 [ 489.957151][T12562] usbtmc 11-1:16.0: can't read capabilities [ 490.308373][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 490.548487][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 490.927774][ T42] audit: type=1326 audit(748.769:4798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23671 comm="syz.2.7587" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f78fec code=0x0 [ 491.348458][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 491.588503][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 491.845856][ T42] audit: type=1800 audit(749.689:4799): pid=23714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7607" name="bus" dev="9p" ino=72116451 res=0 errno=0 [ 491.910037][T23721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7609'. [ 491.914454][T23721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7609'. [ 492.262297][T23735] netlink: 156 bytes leftover after parsing attributes in process `syz.5.7615'. [ 492.342891][ T9293] usb 11-1: USB disconnect, device number 20 [ 492.388542][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 492.490602][T23751] netlink: 'syz.0.7622': attribute type 11 has an invalid length. [ 492.507102][T23753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7623'. [ 492.603455][T23759] ip6tnl1: entered allmulticast mode [ 492.628515][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 492.744161][T23771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7630'. [ 493.033197][T23785] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 493.042026][T23785] bond1: (slave lo): Enslaving as an active interface with an up link [ 493.209856][T23796] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3925089799 (7850179598 ns) > initial count (6869990840 ns). Using initial count to start timer. [ 493.219977][T23796] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 493.428502][ C1] net_ratelimit: 1 callbacks suppressed [ 493.428518][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 493.668550][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 493.722404][T23816] macvlan0: left promiscuous mode [ 493.724849][T23816] netlink: 'syz.2.7650': attribute type 2 has an invalid length. [ 494.251578][T23839] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.254470][T23839] bridge0: port 2(bridge_slave_1) entered listening state [ 494.257641][T23839] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.260703][T23839] bridge0: port 1(bridge_slave_0) entered listening state [ 494.272102][T23839] veth1_vlan: left promiscuous mode [ 494.275133][T23839] veth0_vlan: left promiscuous mode [ 494.279086][T23839] veth0_vlan: entered promiscuous mode [ 494.284067][T23839] veth1_vlan: entered promiscuous mode [ 494.299680][T23839] veth1_macvtap: left promiscuous mode [ 494.303093][T23839] veth0_macvtap: left promiscuous mode [ 494.306605][T23839] veth0_macvtap: entered promiscuous mode [ 494.311987][T23839] veth1_macvtap: entered promiscuous mode [ 494.318831][T23839] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 494.321943][T23839] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 494.325190][T23839] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 494.328986][T23839] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 494.332242][T23839] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 494.338030][ T40] sit0 speed is unknown, defaulting to 1000 [ 494.340494][ T40] syz1: Port: 1 Link ACTIVE [ 494.364701][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.369330][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.374178][T23845] pimreg0: tun_chr_ioctl cmd 1074025677 [ 494.378592][T23845] pimreg0: linktype set to 774 [ 494.382087][ T40] sit0 speed is unknown, defaulting to 1000 [ 494.387855][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.394025][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.420767][ T5456] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 494.468480][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 494.708450][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 495.050557][T23876] netlink: 'syz.5.7668': attribute type 1 has an invalid length. [ 495.508582][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 495.661525][T23924] overlayfs: maximum fs stacking depth exceeded [ 495.704200][T23928] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 495.738063][T23928] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 495.745829][T23928] overlayfs: failed to look up (tracing) for ino (-66) [ 495.748499][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 496.548627][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 496.788542][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 497.589405][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 497.720796][T21512] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.829587][T23995] wlan0 speed is unknown, defaulting to 1000 [ 497.833068][T23995] syzkaller0 speed is unknown, defaulting to 1000 [ 497.836212][T23995] sit0 speed is unknown, defaulting to 1000 [ 497.882024][ T5764] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 497.896293][ T5764] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 497.927576][ T5764] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 497.935717][T21512] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.943037][ T5764] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 497.961541][ T5764] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 497.996391][ T5759] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 498.004857][ T5759] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 498.009885][ T5759] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 498.014291][ T5759] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 498.021633][ T5759] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 498.180949][T24004] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 498.235048][T21512] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.266429][ T42] audit: type=1326 audit(756.109:4800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24012 comm="syz.0.7723" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cefec code=0x0 [ 498.336389][T24018] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7724'. [ 498.363208][T24018] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.423061][T21512] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.453381][T23998] wlan0 speed is unknown, defaulting to 1000 [ 498.458802][T23998] syzkaller0 speed is unknown, defaulting to 1000 [ 498.464946][T23998] sit0 speed is unknown, defaulting to 1000 [ 498.628503][ C1] net_ratelimit: 1 callbacks suppressed [ 498.628525][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 498.737540][T21512] bridge_slave_1: left allmulticast mode [ 498.739715][T21512] bridge_slave_1: left promiscuous mode [ 498.741738][T21512] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.751873][T21512] bridge_slave_0: left allmulticast mode [ 498.754481][T21512] bridge_slave_0: left promiscuous mode [ 498.757389][T21512] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.868455][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 498.911899][ T1168] smc: removing ib device syz1 [ 499.014736][ T1168] smbdirect: ib_dev[syz1] removed [ 499.098004][T21512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.139523][T21512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.150104][T21512] bond0 (unregistering): Released all slaves [ 499.194490][T21512] bond1 (unregistering): (slave lo): Releasing backup interface [ 499.215332][T21512] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 499.226865][T21512] bond1 (unregistering): Released all slaves [ 499.331717][ T58] sit0 speed is unknown, defaulting to 1000 [ 499.335622][ T5456] 8021q: adding VLAN 0 to HW filter on device eth10 [ 499.338106][ T58] syz1: Port: 1 Link DOWN [ 499.668456][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 499.748386][ T50] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 499.835963][T23998] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.844277][T23998] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.858543][T23998] bridge_slave_0: entered allmulticast mode [ 499.867816][T23998] bridge_slave_0: entered promiscuous mode [ 499.872327][T23998] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.874706][T23998] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.877785][T23998] bridge_slave_1: entered allmulticast mode [ 499.886377][T23998] bridge_slave_1: entered promiscuous mode [ 499.894691][ T5456] 8021q: adding VLAN 0 to HW filter on device eth11 [ 499.899633][ T50] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 499.903074][ T50] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 499.906271][ T50] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 499.909873][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 499.913300][ T50] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 499.918439][ T50] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 499.925409][ T50] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 499.947705][ T50] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 499.951865][ T50] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 499.955122][ T50] usb 5-1: Product: syz [ 499.956780][ T50] usb 5-1: Manufacturer: syz [ 499.972737][T24064] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 499.981337][ T50] cdc_wdm 5-1:1.0: skipping garbage [ 499.986050][ T50] cdc_wdm 5-1:1.0: skipping garbage [ 499.999210][ T50] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 500.005822][ T50] cdc_wdm 5-1:1.0: Unknown control protocol [ 500.040401][T23998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.063696][T23998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.113777][T24087] input: syz1 as /devices/virtual/input/input67 [ 500.151012][ T5759] Bluetooth: hci1: command tx timeout [ 500.197542][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 500.200691][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 500.204015][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 500.206940][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 500.211742][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 500.215247][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 500.218584][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 500.221499][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 500.225893][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 500.228800][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 500.229476][ T9] usb 5-1: USB disconnect, device number 45 [ 500.231904][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 500.242310][T23998] team0: Port device team_slave_0 added [ 500.247077][T23998] team0: Port device team_slave_1 added [ 500.366526][T23998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.376615][T23998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.393394][T23998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.409962][T23998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.412514][T23998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.422153][T23998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.455120][ T5456] 8021q: adding VLAN 0 to HW filter on device eth12 [ 500.584285][T23998] hsr_slave_0: entered promiscuous mode [ 500.592739][T23998] hsr_slave_1: entered promiscuous mode [ 500.597925][T23998] debugfs: 'hsr0' already exists in 'hsr' [ 500.608617][T23998] Cannot create hsr debugfs directory [ 500.708548][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 500.852450][ T9] libceph: connect (1)[c::]:6789 error -101 [ 500.859626][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 500.926743][T24129] ceph: No mds server is up or the cluster is laggy [ 500.948671][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 501.030833][ T5456] 8021q: adding VLAN 0 to HW filter on device eth13 [ 501.107989][T23998] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 501.124116][T23998] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.129660][T23998] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 501.147098][T23998] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.150574][T23998] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 501.155415][T23998] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.164252][T23998] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 501.171722][T23998] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 501.257701][T21512] : left promiscuous mode [ 501.417640][T23998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.454223][T23998] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.477462][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.480121][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.549721][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.552250][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.748683][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 501.918037][T24209] Process accounting resumed [ 501.988469][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 502.075902][T21512] hsr_slave_0: left promiscuous mode [ 502.082179][T21512] hsr_slave_1: left promiscuous mode [ 502.085208][T21512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.091321][T21512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.098728][T21512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.102676][T21512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.122961][T21512] veth1_macvtap: left promiscuous mode [ 502.125803][T21512] veth0_macvtap: left promiscuous mode [ 502.132447][T21512] veth1_vlan: left promiscuous mode [ 502.134775][T21512] veth0_vlan: left promiscuous mode [ 502.244691][ T5759] Bluetooth: hci1: command tx timeout [ 502.542393][T24229] all: renamed from lo [ 502.607631][T23998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.788420][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 502.945530][T23998] veth0_vlan: entered promiscuous mode [ 502.959969][T23998] veth1_vlan: entered promiscuous mode [ 502.971119][T21512] IPVS: stop unused estimator thread 0... [ 503.028449][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 503.053071][T23998] veth0_macvtap: entered promiscuous mode [ 503.071162][T23998] veth1_macvtap: entered promiscuous mode [ 503.107237][T23998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.129859][T23998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.183244][T24189] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.190902][T24189] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.199825][T24189] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.202768][T24189] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.466360][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.476259][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.526675][T24274] Invalid argument reading file caps for ./file0 [ 503.619075][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.622261][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.828510][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 504.068454][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 504.308473][ T5759] Bluetooth: hci1: command tx timeout [ 504.432643][T24316] loop2: detected capacity change from 0 to 7 [ 504.475827][T24316] Dev loop2: unable to read RDB block 7 [ 504.478140][T24316] loop2: unable to read partition table [ 504.481621][T24316] loop2: partition table beyond EOD, truncated [ 504.488435][T24316] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 504.868515][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 505.108805][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 505.631546][T24337] ubi8: attaching mtd0 [ 505.719969][T24337] ubi8: scanning is finished [ 505.722262][T24337] ubi8: empty MTD device detected [ 505.735677][T24337] ubi8 error: ubi_read_volume_table: LEB size too small for a volume record [ 505.908458][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 506.152468][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 506.155950][T24337] ubi8 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 506.238924][T24350] overlayfs: failed to clone lowerpath [ 506.254953][T24350] overlayfs: failed to clone lowerpath [ 506.390222][ T5759] Bluetooth: hci1: command tx timeout [ 506.395895][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.948544][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 507.188505][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 507.988416][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 508.228425][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 508.348353][ T50] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 508.498419][ T50] usb 12-1: Using ep0 maxpacket: 8 [ 508.503113][ T50] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 508.507240][ T50] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 508.511871][ T50] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 508.517272][ T50] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.527677][ T50] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 508.533291][ T50] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.754676][ T50] usb 12-1: GET_CAPABILITIES returned 0 [ 508.756839][ T50] usbtmc 12-1:16.0: can't read capabilities [ 508.870238][T24421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7856'. [ 508.975773][ C2] usbtmc 12-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 508.982910][T24429] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7859'. [ 508.983638][ T40] usb 12-1: USB disconnect, device number 2 [ 509.024235][ T42] audit: type=1326 audit(766.869:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.0.7860" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 509.028550][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 509.031628][ T42] audit: type=1326 audit(766.869:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.0.7860" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 509.046205][ T42] audit: type=1326 audit(766.879:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.0.7860" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 509.054488][ T42] audit: type=1326 audit(766.879:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.0.7860" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 509.063807][ T42] audit: type=1326 audit(766.879:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.0.7860" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 509.073383][ T42] audit: type=1326 audit(766.879:4806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.0.7860" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 509.081423][ T42] audit: type=1326 audit(766.879:4807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.0.7860" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 509.088487][ T42] audit: type=1326 audit(766.889:4808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.0.7860" exe="/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 509.105376][ T42] audit: type=1326 audit(766.949:4809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.0.7860" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 509.112713][ T42] audit: type=1326 audit(766.949:4810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24431 comm="syz.0.7860" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cefec code=0x7ffc0000 [ 509.268381][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 509.386054][T24463] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7873'. [ 509.415967][T24463] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7873'. [ 509.453826][T24465] kvm: apic: phys broadcast and lowest prio [ 509.592388][T24476] syzkaller1: entered promiscuous mode [ 509.595023][T24476] syzkaller1: entered allmulticast mode [ 510.062903][T24501] overlayfs: failed to verify upper (1904/file1, ino=9872, err=-116) [ 510.065879][T24501] overlayfs: failed to verify index dir 'upper' xattr [ 510.068670][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 510.071686][T24501] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 510.308562][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 510.368531][ T58] usb 12-1: new low-speed USB device number 3 using dummy_hcd [ 510.546835][ T58] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 510.550719][ T58] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 510.558049][ T58] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 510.566083][ T58] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 510.571320][ T58] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 510.577787][ T58] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 510.581888][ T58] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 510.587175][ T58] usb 12-1: config 168 interface 0 has no altsetting 0 [ 510.591648][ T58] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 510.594611][ T58] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 510.599634][ T58] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 510.604295][ T58] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 510.608097][ T58] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 510.612078][ T58] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 510.616835][ T58] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 510.622349][ T58] usb 12-1: config 168 interface 0 has no altsetting 0 [ 510.625701][ T58] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 510.628926][ T58] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 510.635014][ T58] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 510.647854][ T58] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 510.655663][ T58] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 510.666317][ T58] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 510.678009][ T58] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 510.685758][ T58] usb 12-1: config 168 interface 0 has no altsetting 0 [ 510.758255][ T58] usb 12-1: string descriptor 0 read error: -22 [ 510.761641][ T58] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 510.769576][ T58] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.786337][ T58] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 511.108425][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 511.152228][ T5901] usb 12-1: USB disconnect, device number 3 [ 511.348420][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 511.661455][T24544] fuse: Bad value for 'fd' [ 512.148449][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 512.280996][T24567] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7915'. [ 512.388464][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 512.878615][ T40] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 513.076715][ T40] usb 11-1: config index 0 descriptor too short (expected 45, got 36) [ 513.087724][ T40] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.095386][ T40] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.100326][ T40] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 513.105910][ T40] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 513.109746][ T40] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.118559][ T40] usb 11-1: config 0 descriptor?? [ 513.188530][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 513.269219][T24616] ALSA: seq fatal error: cannot create timer (-16) [ 513.389045][T24623] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7939'. [ 513.428716][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 513.544808][ T40] plantronics 0003:047F:FFFF.0023: reserved main item tag 0xd [ 513.579672][ T40] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 513.800569][ T58] usb 11-1: USB disconnect, device number 21 [ 513.885533][T24653] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7949'. [ 513.971026][T24659] bridge0: port 4(erspan0) entered blocking state [ 513.973419][T24659] bridge0: port 4(erspan0) entered disabled state [ 513.983269][T24659] bridge0: port 4(erspan0) entered disabled state [ 514.228423][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 514.363082][T24685] erspan0: entered promiscuous mode [ 514.377093][T24689] netlink: 'syz.6.7960': attribute type 1 has an invalid length. [ 514.385548][T24685] bridge0: port 3(syz_tun) entered blocking state [ 514.388444][T24685] bridge0: port 3(syz_tun) entered listening state [ 514.396639][T24685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.404477][T24685] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.409706][T24685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.416543][ T171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.422141][ T171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.426004][ T171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.432116][T17695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.459000][T24685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.462330][T24685] batadv_slave_1: left promiscuous mode [ 514.464708][T24685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.468517][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 514.473638][T24685] veth1_vlan: left promiscuous mode [ 514.476740][T24685] veth0_vlan: left promiscuous mode [ 514.480992][T24685] veth0_vlan: entered promiscuous mode [ 514.483928][T24685] veth1_vlan: entered promiscuous mode [ 514.492653][T24685] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 514.501252][ T5838] batadv_slave_1: entered promiscuous mode [ 514.526002][ T5838] batman_adv: batadv0: Interface activated: vlan0 [ 514.530362][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.568239][ T634] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.571814][ T634] bridge0: port 1(bridge_slave_0) entered listening state [ 514.580529][ T634] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.582823][T24698] netlink: 'syz.0.7964': attribute type 1 has an invalid length. [ 514.583800][ T634] bridge0: port 2(bridge_slave_1) entered listening state [ 514.634322][ T5826] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.645437][ T5826] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.658074][T24696] ip6tnl1: entered allmulticast mode [ 514.686484][T24705] netlink: 'syz.2.7966': attribute type 11 has an invalid length. [ 514.690851][T24698] bond1: entered promiscuous mode [ 514.693856][T24698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.715365][T24702] bond1: (slave bridge2): making interface the new active one [ 514.722260][T24702] bridge2: entered promiscuous mode [ 514.726353][T24702] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 514.749990][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.758082][ T5855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.767597][ T5826] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.771865][ T5826] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.176151][T24736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.182172][T24736] bridge0: port 3(team0) entered blocking state [ 515.185169][T24736] bridge0: port 3(team0) entered listening state [ 515.188100][T24736] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.197701][T24736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.230431][T24736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.233965][T24736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.240311][T24736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 515.244013][T24736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 515.252321][T24736] veth1_vlan: left promiscuous mode [ 515.254722][T24736] veth0_vlan: left promiscuous mode [ 515.257023][T24736] veth0_vlan: entered promiscuous mode [ 515.261280][T24736] veth1_vlan: entered promiscuous mode [ 515.301317][T24733] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7977'. [ 515.312049][ T634] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.314637][ T634] bridge0: port 1(bridge_slave_0) entered listening state [ 515.318750][ T634] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.321451][ T634] bridge0: port 2(bridge_slave_1) entered listening state [ 515.343802][T24741] pimreg0: tun_chr_ioctl cmd 1074025677 [ 515.345793][T24741] pimreg0: linktype set to 774 [ 515.348276][ T5826] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.353926][ T5826] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.370907][ T9293] wlan0 speed is unknown, defaulting to 1000 [ 515.389740][ T5826] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.395717][ T5826] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.419020][T24746] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 515.433295][T24746] bond1: (slave lo): Enslaving as an active interface with an up link [ 515.587344][T24763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7995'. [ 515.643419][T24766] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3925089799 (7850179598 ns) > initial count (6869990840 ns). Using initial count to start timer. [ 515.650269][T24766] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 515.763088][T24776] fuse: Bad value for 'fd' [ 515.869503][T24781] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 515.879528][T24781] bond3: (slave lo): Enslaving as an active interface with an up link [ 516.507386][T24790] veth1_vlan: left promiscuous mode [ 516.513479][T24790] veth0_vlan: left promiscuous mode [ 516.519529][T24790] veth0_vlan: entered promiscuous mode [ 516.524354][T24790] veth1_vlan: entered promiscuous mode [ 516.539020][T24790] veth1_macvtap: left promiscuous mode [ 516.546964][T24790] veth0_macvtap: left promiscuous mode [ 516.550941][T24790] veth0_macvtap: entered promiscuous mode [ 516.554786][T24790] veth1_macvtap: entered promiscuous mode [ 516.563820][T24790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 516.567561][T24790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 516.572586][T24790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 516.578322][T24790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 516.655133][T24189] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.658264][T24189] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.664020][T24793] pimreg0: tun_chr_ioctl cmd 1074025677 [ 516.666374][T24793] pimreg0: Linktype set failed because interface is up [ 516.673457][T24189] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.679160][T24189] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.805413][T24809] overlayfs: failed to clone lowerpath [ 517.598695][ T74] wlan1: Trigger new scan to find an IBSS to join [ 519.428439][ C1] net_ratelimit: 15 callbacks suppressed [ 519.428463][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 519.669267][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 519.836748][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.468461][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 520.708470][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 520.804164][T24852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.108698][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.175840][T24868] netlink: 'syz.6.8029': attribute type 2 has an invalid length. [ 521.180895][T24868] netlink: 'syz.6.8029': attribute type 2 has an invalid length. [ 521.183934][T24868] netlink: 1347 bytes leftover after parsing attributes in process `syz.6.8029'. [ 521.297801][T24874] vivid-000: disconnect [ 521.300915][T24873] vivid-000: reconnect [ 521.330783][T24876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 521.425955][T24876] pimreg0: tun_chr_ioctl cmd 1074025677 [ 521.428526][T24876] pimreg0: Linktype set failed because interface is up [ 521.508635][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 521.615665][T24890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8036'. [ 521.748555][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 522.559809][ T1168] wlan1: Trigger new scan to find an IBSS to join [ 522.568484][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 524.628714][ C1] net_ratelimit: 3 callbacks suppressed [ 524.628731][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 524.878504][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 524.985725][ T171] wlan1: Creating new IBSS network, BSSID 06:a1:c0:14:dd:6f [ 525.132536][T24890] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 525.186165][T24898] wlan0 speed is unknown, defaulting to 1000 [ 525.197753][T24898] syzkaller0 speed is unknown, defaulting to 1000 [ 525.200989][ T42] audit: type=1800 audit(783.049:4811): pid=24911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8046" name="nullb0" dev="tmpfs" ino=9582 res=0 errno=0 [ 525.313651][T24923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.470481][ T9293] hid_parser_main: 6 callbacks suppressed [ 525.470504][ T9293] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 525.489168][ T9293] hid-generic 0000:0000:0000.0024: hidraw1: HID v0.00 Device [syz0] on syz0 [ 525.606171][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.668468][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 525.668720][T24941] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.8054'. [ 525.759514][ T9293] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 525.908464][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 525.918342][ T9293] usb 12-1: Using ep0 maxpacket: 8 [ 525.922549][ T9293] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 525.927742][ T9293] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 525.931226][ T9293] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.936620][ T9293] usb 12-1: config 0 descriptor?? [ 525.958257][ T1346] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 526.138273][ T1346] usb 5-1: Using ep0 maxpacket: 32 [ 526.142022][ T1346] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 526.145803][ T1346] usb 5-1: config 0 interface 0 has no altsetting 0 [ 526.149358][ T9293] iowarrior 12-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 526.154655][ T1346] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 526.160874][ T1346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.169455][ T1346] usb 5-1: config 0 descriptor?? [ 526.328425][ T5838] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 526.389751][ T1346] usbhid 5-1:0.0: can't add hid device: -71 [ 526.398358][ T1346] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 526.409856][ T1346] usb 5-1: USB disconnect, device number 46 [ 526.508477][ T5838] usb 11-1: Using ep0 maxpacket: 8 [ 526.517051][ T5838] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 526.528330][ T5838] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 526.532470][ T5838] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 526.536727][ T5838] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 526.543460][ T5838] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.549576][ T5838] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 526.554081][ T5838] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.661467][ T9] usb 12-1: USB disconnect, device number 4 [ 526.708413][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 526.773697][ T5838] usb 11-1: usb_control_msg returned -32 [ 526.775649][ T5838] usbtmc 11-1:16.0: can't read capabilities [ 526.948831][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 527.137283][T24974] usbtmc 11-1:16.0: usb_control_msg returned -32 [ 527.141868][ T9] usb 11-1: USB disconnect, device number 22 [ 527.510326][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.741482][ T9] libceph: connect (1)[c::]:6789 error -101 [ 527.743809][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 527.758450][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 527.805168][T25000] ceph: No mds server is up or the cluster is laggy [ 528.056595][T25016] pim6reg1: entered promiscuous mode [ 528.059849][T25016] pim6reg1: entered allmulticast mode [ 528.228410][ T5753] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 528.373747][ T58] libceph: connect (1)[c::]:6789 error -101 [ 528.376363][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 528.380406][ T5753] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 528.384910][ T5753] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.393243][ T5753] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 528.397621][ T5753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.464489][T25027] ceph: No mds server is up or the cluster is laggy [ 528.613944][ T5753] usb 5-1: usb_control_msg returned -32 [ 528.622079][ T5753] usbtmc 5-1:16.0: can't read capabilities [ 528.763352][T25054] all: renamed from lo (while UP) [ 528.957370][ T5753] libceph: connect (1)[c::]:6789 error -101 [ 528.961720][ T5753] libceph: mon0 (1)[c::]:6789 connect error [ 528.967747][T25070] usbtmc 5-1:16.0: INDICATOR_PULSE returned 0 [ 529.034830][T25065] ceph: No mds server is up or the cluster is laggy [ 529.170304][ T5753] usb 5-1: USB disconnect, device number 47 [ 529.375849][T25092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8110'. [ 529.428322][ C0] bridge0: port 3(syz_tun) entered learning state [ 529.577027][T25101] overlayfs: failed to resolve './cgroup': -2 [ 529.838383][ C1] net_ratelimit: 4 callbacks suppressed [ 529.838401][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 530.069131][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 530.070947][ C3] bridge0: port 2(bridge_slave_1) entered learning state [ 530.074341][ C3] bridge0: port 1(bridge_slave_0) entered learning state [ 530.631716][T25133] fuse: fd is not a fuse device [ 530.703952][T25137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.709596][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.868493][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 531.108538][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 531.453770][T25160] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input69 [ 531.731538][T25168] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8138'. [ 531.918605][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 531.977186][ T9293] libceph: connect (1)[c::]:6789 error -101 [ 531.979711][ T9293] libceph: mon0 (1)[c::]:6789 connect error [ 532.074739][T25184] ceph: No mds server is up or the cluster is laggy [ 532.158620][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 532.890265][T25201] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8150'. [ 532.949554][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 533.188507][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 535.028574][ C1] net_ratelimit: 3 callbacks suppressed [ 535.028601][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 535.278424][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 535.830576][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.068534][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 536.308443][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 537.108427][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 537.348492][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 538.158391][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 538.398749][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 539.198515][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 540.228516][ C1] net_ratelimit: 1 callbacks suppressed [ 540.228541][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 540.468517][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 541.268494][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 541.508539][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 541.589755][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.308445][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 542.548448][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 543.348675][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 543.588455][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 544.148978][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.798385][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 544.801569][ C0] bridge0: topology change detected, propagating [ 545.428527][ C3] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.428828][ C1] net_ratelimit: 2 callbacks suppressed [ 545.428840][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 545.431170][ C3] bridge0: topology change detected, propagating [ 545.439012][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 545.440550][ C3] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.441898][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 545.444305][ C3] bridge0: topology change detected, propagating [ 545.448805][ C3] bridge0: port 3(team0) entered learning state [ 545.668696][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 546.478498][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 546.718531][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 546.718649][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.508512][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 547.758485][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 548.435822][ T5764] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 548.456632][ T5764] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 548.463788][ T5764] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 548.471718][ T5764] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 548.476821][ T5764] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 548.558372][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 548.598363][ T50] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 548.768427][ T50] usb 11-1: Using ep0 maxpacket: 16 [ 548.771524][ T50] usb 11-1: config 0 has no interfaces? [ 548.774266][ T50] usb 11-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 548.777969][ T50] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 548.785105][ T50] usb 11-1: SerialNumber: syz [ 548.789294][ T50] usb 11-1: config 0 descriptor?? [ 548.798382][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 548.823686][T25227] wlan0 speed is unknown, defaulting to 1000 [ 548.826620][T25227] syzkaller0 speed is unknown, defaulting to 1000 [ 549.003017][ T50] usb 11-1: USB disconnect, device number 23 [ 549.027024][T25227] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.030264][T25227] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.033104][T25227] bridge_slave_0: entered allmulticast mode [ 549.036388][T25227] bridge_slave_0: entered promiscuous mode [ 549.041729][T25227] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.044710][T25227] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.048149][T25227] bridge_slave_1: entered allmulticast mode [ 549.052198][T25227] bridge_slave_1: entered promiscuous mode [ 549.095280][T25227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.100937][T25227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.123613][T25227] team0: Port device team_slave_0 added [ 549.128129][T25227] team0: Port device team_slave_1 added [ 549.145741][T25227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.148512][T25227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.161111][T25227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.167062][T25227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.170132][T25227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.180799][T25227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.214918][T25227] hsr_slave_0: entered promiscuous mode [ 549.219445][T25227] hsr_slave_1: entered promiscuous mode [ 549.398719][T25227] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 549.405196][T25227] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 549.408542][T25227] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 549.415856][T25227] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 549.419635][T25227] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 549.429813][T25227] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 549.433231][T25227] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 549.440297][T25227] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 549.465008][T25227] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.467460][T25227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.470256][T25227] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.473015][T25227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.518083][T25227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.544151][ T634] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.557872][ T634] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.573050][T25227] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.582500][ T634] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.585629][ T634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.594849][ T634] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.598378][ T634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.598465][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 549.945005][T25227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.152483][T25227] veth0_vlan: entered promiscuous mode [ 550.160855][T25227] veth1_vlan: entered promiscuous mode [ 550.183463][T25227] veth0_macvtap: entered promiscuous mode [ 550.189117][T25227] veth1_macvtap: entered promiscuous mode [ 550.203417][T25227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.213172][T25227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.220376][ T5855] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.224010][ T5855] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.228807][ T5855] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.236215][ T5855] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.311142][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.323705][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.371663][T17695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.382287][T17695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.502445][T25272] netlink: 'syz.2.8166': attribute type 9 has an invalid length. [ 550.628658][ C1] net_ratelimit: 1 callbacks suppressed [ 550.628681][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 550.628844][ T5764] Bluetooth: hci4: command tx timeout [ 550.868517][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 550.910889][ T42] audit: type=1326 audit(808.759:4812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25282 comm="syz.6.8157" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f07fec code=0x0 [ 550.916765][T12562] libceph: connect (1)[c::]:6789 error -101 [ 550.921677][T12562] libceph: mon0 (1)[c::]:6789 connect error [ 551.000370][T25284] ceph: No mds server is up or the cluster is laggy [ 551.026687][T25280] warn_alloc: 1 callbacks suppressed [ 551.026708][T25280] syz.7.8159: page allocation failure: order:0, mode:0x144cca(GFP_HIGHUSER_MOVABLE|__GFP_RETRY_MAYFAIL|__GFP_COMP), nodemask=0,cpuset=syz7,mems_allowed=0-1 [ 551.061061][T25280] CPU: 0 UID: 0 PID: 25280 Comm: syz.7.8159 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.061096][T25280] Tainted: [L]=SOFTLOCKUP [ 551.061104][T25280] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 551.061116][T25280] Call Trace: [ 551.061124][T25280] [ 551.061133][T25280] dump_stack_lvl+0x100/0x190 [ 551.061162][T25280] warn_alloc.cold+0x94/0xa8 [ 551.061182][T25280] ? __pfx_warn_alloc+0x10/0x10 [ 551.061207][T25280] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 551.061239][T25280] ? __pfx_get_page_from_freelist+0x10/0x10 [ 551.061273][T25280] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 551.061296][T25280] ? __lock_acquire+0x49f/0x1a40 [ 551.061333][T25280] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 551.061353][T25280] ? find_held_lock+0x2b/0x80 [ 551.061372][T25280] ? debug_check_no_obj_freed+0x31f/0x630 [ 551.061427][T25280] ? rcu_is_watching+0x12/0xc0 [ 551.061449][T25280] ? __lock_acquire+0x49f/0x1a40 [ 551.061482][T25280] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 551.061506][T25280] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 551.061528][T25280] ? policy_nodemask+0xed/0x4f0 [ 551.061553][T25280] alloc_pages_mpol+0x1fb/0x540 [ 551.061576][T25280] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 551.061600][T25280] ? irqentry_exit+0x24d/0xa00 [ 551.061630][T25280] folio_alloc_mpol_noprof+0x36/0x260 [ 551.061659][T25280] alloc_migration_target_by_mpol+0x2c1/0x650 [ 551.061686][T25280] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 551.061719][T25280] ? __pfx___might_resched+0x10/0x10 [ 551.061750][T25280] migrate_pages_batch+0x5dc/0x45c0 [ 551.061773][T25280] ? kasan_save_stack+0x30/0x50 [ 551.061792][T25280] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 551.061823][T25280] ? migrate_pages_sync+0x12c/0x880 [ 551.061849][T25280] ? migrate_pages_sync+0x588/0x880 [ 551.061872][T25280] ? __pfx_migrate_pages_batch+0x10/0x10 [ 551.061901][T25280] ? __pfx_migrate_pages_sync+0x10/0x10 [ 551.061929][T25280] ? __lock_acquire+0x49f/0x1a40 [ 551.061960][T25280] migrate_pages+0x1950/0x2850 [ 551.061986][T25280] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 551.062018][T25280] ? __pfx_migrate_pages+0x10/0x10 [ 551.062049][T25280] ? do_mbind+0x555/0xfd0 [ 551.062083][T25280] do_mbind+0x5a4/0xfd0 [ 551.062115][T25280] ? __pfx_do_mbind+0x10/0x10 [ 551.062142][T25280] ? madvise_unlock+0xa9/0x220 [ 551.062175][T25280] ? __pfx_get_nodes+0x10/0x10 [ 551.062201][T25280] kernel_mbind+0x1b7/0x200 [ 551.062230][T25280] ? __pfx_kernel_mbind+0x10/0x10 [ 551.062263][T25280] __do_fast_syscall_32+0xe7/0x970 [ 551.062283][T25280] do_fast_syscall_32+0x32/0x70 [ 551.062301][T25280] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 551.062323][T25280] RIP: 0023:0xf6ffefec [ 551.062347][T25280] Code: Unable to access opcode bytes at 0xf6ffefc2. [ 551.062356][T25280] RSP: 002b:00000000f53ed50c EFLAGS: 00000292 ORIG_RAX: 0000000000000112 [ 551.062376][T25280] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 551.062387][T25280] RDX: 0000000000000002 RSI: 0000000080000000 RDI: 0000000000000008 [ 551.062398][T25280] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 551.062407][T25280] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 551.062417][T25280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 551.062444][T25280] [ 551.062509][T25280] Mem-Info: [ 551.191500][T25280] active_anon:5254 inactive_anon:1515 isolated_anon:1036 [ 551.191500][T25280] active_file:4842 inactive_file:13327 isolated_file:0 [ 551.191500][T25280] unevictable:1768 dirty:196 writeback:0 [ 551.191500][T25280] slab_reclaimable:6776 slab_unreclaimable:71772 [ 551.191500][T25280] mapped:28240 shmem:1792 pagetables:2348 [ 551.191500][T25280] sec_pagetables:313 bounce:0 [ 551.191500][T25280] kernel_misc_reclaimable:0 [ 551.191500][T25280] free:45489 free_pcp:0 free_cma:0 [ 551.210892][T25280] Node 0 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8672kB pagetables:1840kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 551.223115][T25280] Node 0 DMA free:3756kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 551.235645][T25280] lowmem_reserve[]: 0 280 280 280 280 [ 551.237823][T25280] Node 0 DMA32 free:30512kB boost:20480kB min:33256kB low:36448kB high:39640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:3536kB writepending:4kB zspages:1296kB present:1032196kB managed:287152kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 551.251963][T25280] lowmem_reserve[]: 0 0 0 0 0 [ 551.253874][T25280] Node 0 DMA: 267*4kB (U) 12*8kB (U) 6*16kB (U) 20*32kB (U) 5*64kB (U) 2*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 3756kB [ 551.259881][T25280] Node 0 DMA32: 682*4kB (UME) 191*8kB (UME) 109*16kB (UME) 249*32kB (UME) 93*64kB (UME) 29*128kB (UME) 15*256kB (UME) 4*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 30544kB [ 551.268821][T25280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 551.272611][T25280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 551.276073][T25280] 20932 total pagecache pages [ 551.277994][T25280] 973 pages in swap cache [ 551.280235][T25280] Free swap = 92604kB [ 551.282419][T25280] Total swap = 124996kB [ 551.284336][T25280] 524155 pages RAM [ 551.285869][T25280] 0 pages HighMem/MovableOnly [ 551.287746][T25280] 211474 pages reserved [ 551.290128][T25280] 0 pages cma reserved [ 551.331576][T25299] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 551.668824][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 551.884339][T25331] netlink: 'syz.2.8179': attribute type 13 has an invalid length. [ 551.908450][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 551.937627][T25332] 9pnet: p9_errstr2errno: server reported unknown error o# [ 551.969542][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.188670][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.469548][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.708624][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 552.721601][ T5764] Bluetooth: hci4: command tx timeout [ 552.958437][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 553.748739][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 553.767954][T25397] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 553.946245][T25408] overlayfs: failed to clone upperpath [ 554.085772][ T42] audit: type=1326 audit(811.929:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25373 comm="syz.7.8199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffefec code=0x7fc00000 [ 554.788407][ T5764] Bluetooth: hci4: command tx timeout [ 555.828484][ C1] net_ratelimit: 3 callbacks suppressed [ 555.828507][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 556.068431][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 556.229270][T25515] tls_set_device_offload_rx: netdev not found [ 556.649586][T25556] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 556.869180][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 556.908553][ T1346] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 557.012240][T25592] kernel read not supported for file /cpuacct.usage_percpu (pid: 25592 comm: syz.2.8282) [ 557.018041][ T42] audit: type=1800 audit(814.859:4814): pid=25592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8282" name="cpuacct.usage_percpu" dev="mqueue" ino=119547 res=0 errno=0 [ 557.080207][ T1346] usb 11-1: Using ep0 maxpacket: 16 [ 557.089562][ T1346] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.101689][ T1346] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.105252][ T1346] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 557.108482][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 557.111918][ T1346] usb 11-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 557.116552][ T1346] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.122732][ T1346] usb 11-1: config 0 descriptor?? [ 557.477344][T25617] netlink: 'syz.7.8292': attribute type 1 has an invalid length. [ 557.510068][T25617] 8021q: adding VLAN 0 to HW filter on device bond2 [ 557.540364][ T1346] shield 0003:0955:7214.0025: unknown main item tag 0x0 [ 557.544763][ T1346] shield 0003:0955:7214.0025: unknown main item tag 0x0 [ 557.550100][ T1346] shield 0003:0955:7214.0025: unknown main item tag 0x0 [ 557.554168][ T1346] shield 0003:0955:7214.0025: unknown main item tag 0x0 [ 557.557295][ T1346] shield 0003:0955:7214.0025: unknown main item tag 0x0 [ 557.560405][T25617] bond2: (slave geneve2): making interface the new active one [ 557.566592][T25617] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 557.566985][ T1346] input: HID 0955:7214 Haptics as /devices/virtual/input/input70 [ 557.589984][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.711770][ T1346] shield 0003:0955:7214.0025: Registered Thunderstrike controller [ 557.728430][ T1346] shield 0003:0955:7214.0025: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 557.740642][T25554] netlink: 504 bytes leftover after parsing attributes in process `syz.6.8268'. [ 557.815547][ T1346] usb 11-1: USB disconnect, device number 24 [ 557.827182][ T9293] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 557.838688][ T9293] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 557.861166][ T9293] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 557.863244][ T42] audit: type=1326 audit(815.709:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25593 comm="syz.8.8283" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7fc00000 [ 557.873487][ T9293] shield 0003:0955:7214.0025: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 557.908406][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 558.037992][T25635] netlink: 'syz.7.8298': attribute type 1 has an invalid length. [ 558.070586][T25635] 8021q: adding VLAN 0 to HW filter on device bond3 [ 558.107186][T25635] bond3: (slave geneve3): making interface the new active one [ 558.115880][T25635] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 558.148372][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 558.230787][ T634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.238772][ T62] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 558.265203][T25645] netlink: 'syz.8.8302': attribute type 12 has an invalid length. [ 558.269709][T25645] netlink: 'syz.8.8302': attribute type 29 has an invalid length. [ 558.273209][T25645] netlink: 148 bytes leftover after parsing attributes in process `syz.8.8302'. [ 558.276926][T25645] netlink: 'syz.8.8302': attribute type 3 has an invalid length. [ 558.280253][T25645] netlink: 'syz.8.8302': attribute type 2 has an invalid length. [ 558.283457][T25645] netlink: 35 bytes leftover after parsing attributes in process `syz.8.8302'. [ 558.837057][T25671] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8312'. [ 558.843620][T25671] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8312'. [ 558.872585][ T5764] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 558.878391][ T5764] Bluetooth: hci4: Injecting HCI hardware error event [ 558.886131][ T5764] Bluetooth: hci4: hardware error 0x00 [ 558.914791][T25673] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.8316'. [ 558.948589][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 559.094558][ T42] audit: type=1326 audit(816.939:4816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25690 comm="syz.7.8321" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffefec code=0x0 [ 559.188476][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 559.591430][T25702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8324'. [ 559.706533][T25705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8324'. [ 559.819481][T25709] netlink: 'syz.6.8336': attribute type 12 has an invalid length. [ 559.823774][T25709] netlink: 'syz.6.8336': attribute type 29 has an invalid length. [ 559.827610][T25709] netlink: 148 bytes leftover after parsing attributes in process `syz.6.8336'. [ 559.836851][T25709] netlink: 'syz.6.8336': attribute type 3 has an invalid length. [ 559.840561][T25709] netlink: 'syz.6.8336': attribute type 2 has an invalid length. [ 559.844008][T25709] netlink: 35 bytes leftover after parsing attributes in process `syz.6.8336'. [ 560.956920][ T5764] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 561.028448][ C1] net_ratelimit: 2 callbacks suppressed [ 561.028465][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 561.268484][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 562.069580][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 562.308483][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 562.859554][T25788] team0: Port device dummy0 removed [ 562.866041][T25789] netlink: 'syz.6.8357': attribute type 10 has an invalid length. [ 562.890308][T25789] __nla_validate_parse: 5 callbacks suppressed [ 562.890339][T25789] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8357'. [ 562.912164][T25789] dummy0: entered promiscuous mode [ 563.108531][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 563.267113][T25811] netlink: 'syz.6.8372': attribute type 21 has an invalid length. [ 563.273959][T25811] netlink: 'syz.6.8372': attribute type 22 has an invalid length. [ 563.286826][T25811] netlink: 'syz.6.8372': attribute type 23 has an invalid length. [ 563.292916][T25811] netlink: 'syz.6.8372': attribute type 25 has an invalid length. [ 563.298043][T25811] netlink: 'syz.6.8372': attribute type 26 has an invalid length. [ 563.304808][T25811] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8372'. [ 563.340516][T25815] kvm: user requested TSC rate below hardware speed [ 563.359175][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 563.990768][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.016189][T25847] netlink: 'syz.7.8385': attribute type 1 has an invalid length. [ 564.020512][T25847] netlink: 16179 bytes leftover after parsing attributes in process `syz.7.8385'. [ 564.099128][T25853] input: syz1 as /devices/virtual/input/input71 [ 564.158464][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 564.275033][T25870] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8395'. [ 564.302258][T25874] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8392'. [ 564.308779][T25874] IPVS: Unknown mcast interface: vcan0 [ 564.388511][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 564.487186][T25887] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input72 [ 565.198389][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 565.452130][ T42] audit: type=1326 audit(823.299:4817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25901 comm="syz.8.8409" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feefec code=0x0 [ 566.228618][ C1] net_ratelimit: 1 callbacks suppressed [ 566.228641][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 566.478611][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 567.268738][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 567.518448][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 567.836070][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.318462][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 568.558550][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 569.063335][T26042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.112253][ T171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.348519][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 569.588459][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 569.715303][T26052] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8461'. [ 569.739047][T26053] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 569.930486][T26058] netlink: 'syz.7.8466': attribute type 21 has an invalid length. [ 569.934553][T26058] netlink: 'syz.7.8466': attribute type 22 has an invalid length. [ 569.939698][T26058] netlink: 'syz.7.8466': attribute type 23 has an invalid length. [ 569.942537][T26058] netlink: 'syz.7.8466': attribute type 25 has an invalid length. [ 569.945424][T26058] netlink: 'syz.7.8466': attribute type 26 has an invalid length. [ 569.949634][T26058] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8466'. [ 570.086497][T26067] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8477'. [ 570.093788][T26067] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8477'. [ 570.099747][T26067] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8477'. [ 570.655064][T26109] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8482'. [ 571.133624][T26141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8494'. [ 571.428506][ C1] net_ratelimit: 3 callbacks suppressed [ 571.428528][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 571.668468][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 572.478533][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 572.609389][T26221] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.708467][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 572.949476][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 573.484746][T26249] fuse: fd is not a fuse device [ 573.508793][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 573.748477][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 573.898345][ T5901] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 574.071301][ T5901] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.076799][ T5901] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.081006][ T5901] usb 12-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 574.085737][ T5901] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.093109][ T5901] usb 12-1: config 0 descriptor?? [ 574.159463][ T634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.421655][T26281] fuse: Bad value for 'fd' [ 574.521389][ T5901] cm6533_jd 0003:0D8C:0022.0026: unknown main item tag 0x0 [ 574.526156][ T5901] cm6533_jd 0003:0D8C:0022.0026: unknown main item tag 0x0 [ 574.536378][ T5901] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:0D8C:0022.0026/input/input73 [ 574.548883][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 574.550488][ T5901] cm6533_jd 0003:0D8C:0022.0026: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 574.722698][ T50] usb 12-1: USB disconnect, device number 5 [ 574.798440][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 575.205683][ T42] audit: type=1326 audit(833.049:4818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26278 comm="syz.2.8557" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78fec code=0x7fc00000 [ 575.508376][ C3] bridge0: port 3(team0) entered forwarding state [ 575.511161][ C3] bridge0: topology change detected, propagating [ 575.524612][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.529203][ C0] bridge0: topology change detected, propagating [ 575.532560][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.535772][ C0] bridge0: topology change detected, propagating [ 575.954045][T26324] kernel read not supported for file /cpuacct.usage_percpu (pid: 26324 comm: syz.7.8574) [ 575.959214][ T42] audit: type=1800 audit(833.809:4819): pid=26324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.8574" name="cpuacct.usage_percpu" dev="mqueue" ino=123469 res=0 errno=0 [ 576.628588][ C1] net_ratelimit: 3 callbacks suppressed [ 576.628605][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 576.681046][ T42] audit: type=1326 audit(834.529:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26319 comm="syz.6.8563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fec code=0x7fc00000 [ 576.868488][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 576.916778][T26353] netlink: 'syz.6.8579': attribute type 1 has an invalid length. [ 576.949380][T26353] 8021q: adding VLAN 0 to HW filter on device bond2 [ 576.985787][T26353] bond2: (slave geneve2): making interface the new active one [ 576.995361][T26353] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 577.671682][T26386] netlink: 'syz.2.8591': attribute type 1 has an invalid length. [ 577.678488][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 577.689721][T26386] 8021q: adding VLAN 0 to HW filter on device bond4 [ 577.732915][T26386] bond4: (slave geneve3): making interface the new active one [ 577.742481][T26386] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 577.908406][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 577.923241][T26396] cgroup: fork rejected by pids controller in /syz2 [ 578.709204][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 578.948468][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 579.126601][T26536] netlink: 'syz.8.8607': attribute type 1 has an invalid length. [ 579.145042][T26536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 579.185848][T26536] bond1: (slave geneve2): making interface the new active one [ 579.193701][T26536] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 579.388518][ T5901] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 579.550083][ T5901] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.564227][ T5901] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.575774][ T5901] usb 11-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 579.581252][ T5901] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.586308][ T5901] usb 11-1: config 0 descriptor?? [ 579.655327][T26550] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 579.676632][T26550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.684653][T26550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.693703][T26550] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 579.704357][T26550] bond0 (unregistering): Released all slaves [ 579.748473][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 579.823338][T26552] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 579.988962][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 579.989513][ T634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.013817][ T5901] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0 [ 580.021535][ T5901] cm6533_jd 0003:0D8C:0022.0027: unknown main item tag 0x0 [ 580.029898][ T5901] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0D8C:0022.0027/input/input74 [ 580.041001][ T5901] cm6533_jd 0003:0D8C:0022.0027: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 580.213208][T19924] usb 11-1: USB disconnect, device number 25 [ 580.556531][T26596] 9p: Invalid gid '0x00000000ffffffff' [ 580.788562][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 580.904518][T26623] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8646'. [ 580.909825][T26623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.912961][T26623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.918032][T26623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.921948][T26623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.012685][T26633] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8651'. [ 581.065091][T26641] tmpfs: Bad value for 'nr_blocks' [ 581.838607][ C1] net_ratelimit: 2 callbacks suppressed [ 581.838626][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 582.068405][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 582.247949][T26716] overlayfs: failed to clone upperpath [ 582.555513][T26734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8695'. [ 582.797775][T26751] overlayfs: failed to clone upperpath [ 582.868485][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 582.974621][T26762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 582.977815][T26762] IPv6: NLM_F_CREATE should be set when creating new route [ 583.046539][ T42] audit: type=1326 audit(840.889:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26763 comm="syz.8.8708" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6feefec code=0x0 [ 583.118503][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 583.269698][T26778] fuse: fd is not a fuse device [ 583.306680][T26780] netlink: 35 bytes leftover after parsing attributes in process `syz.7.8714'. [ 583.317581][T26780] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8714'. [ 583.906647][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 583.918398][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 583.925332][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 583.995109][T19924] libceph: connect (1)[c::]:6789 error -101 [ 583.997887][T19924] libceph: mon0 (1)[c::]:6789 connect error [ 584.002056][T19924] libceph: connect (1)[c::]:6789 error -101 [ 584.004954][T19924] libceph: mon0 (1)[c::]:6789 connect error [ 584.121997][T26815] binder: 26814:26815 ioctl c0306201 800001c0 returned -22 [ 584.148412][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 584.218025][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 584.221336][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 584.269339][T19924] libceph: connect (1)[c::]:6789 error -101 [ 584.271215][T26823] netlink: 'syz.2.8731': attribute type 7 has an invalid length. [ 584.277035][T19924] libceph: mon0 (1)[c::]:6789 connect error [ 584.483860][T26836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8737'. [ 584.731955][T26805] ceph: No mds server is up or the cluster is laggy [ 584.734398][T26808] ceph: No mds server is up or the cluster is laggy [ 584.747540][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 584.754158][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 584.799157][T19924] libceph: connect (1)[c::]:6789 error -101 [ 584.810752][T19924] libceph: mon0 (1)[c::]:6789 connect error [ 584.917234][T26846] loop5: detected capacity change from 0 to 4095 [ 584.958445][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 585.187207][T26866] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 585.194310][T26866] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 585.198471][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 585.455300][T26866] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 585.503379][T26866] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 585.509145][T26866] overlayfs: d_ino too big (233, ino=9223372036854777026, xinobits=3) [ 585.520164][T26866] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 585.525051][T26866] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 585.529907][T26866] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 585.534070][T26866] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 585.537681][T26866] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 585.546251][T26866] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 585.555313][T26866] overlayfs: d_ino too big (instances, ino=4611686018427391256, xinobits=3) [ 585.758574][ T1168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.960673][T26925] netlink: 'syz.7.8760': attribute type 4 has an invalid length. [ 585.961964][T26924] tls_set_device_offload: netdev not found [ 585.988610][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 587.028659][ C1] net_ratelimit: 1 callbacks suppressed [ 587.028678][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 587.268455][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 588.078478][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 588.318656][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 588.393344][T26985] netlink: 'syz.6.8788': attribute type 13 has an invalid length. [ 588.536642][T26989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.657279][T26998] wlan0 speed is unknown, defaulting to 1000 [ 588.661188][T26998] syzkaller0 speed is unknown, defaulting to 1000 [ 588.744683][T27004] tmpfs: Bad value for 'nr_blocks' [ 588.927762][T27014] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8801'. [ 589.001299][T27015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.039647][T27015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.043335][T27017] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 589.058153][T27015] bond0 (unregistering): Released all slaves [ 589.071496][T27019] bridge0: entered allmulticast mode [ 589.120570][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 589.358514][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 589.505808][ T5855] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.554416][T27031] netlink: 'syz.2.8809': attribute type 4 has an invalid length. [ 589.669684][ T5855] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.716802][ T5759] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 589.726583][ T5759] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 589.734287][ T5759] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 589.767167][ T5759] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 589.781738][ T5759] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 589.894700][ T5855] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.075145][ T5855] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.158631][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 590.188402][T27040] wlan0 speed is unknown, defaulting to 1000 [ 590.192437][T27040] syzkaller0 speed is unknown, defaulting to 1000 [ 590.388570][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 590.493422][ T5855] bridge_slave_1: left allmulticast mode [ 590.498321][ T5855] bridge_slave_1: left promiscuous mode [ 590.501054][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.509539][ T5855] bridge_slave_0: left allmulticast mode [ 590.512390][ T5855] bridge_slave_0: left promiscuous mode [ 590.514980][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.832477][ T5855] bond3 (unregistering): (slave geneve3): Releasing active interface [ 590.844436][ T5855] bond2 (unregistering): (slave geneve2): Releasing active interface [ 590.880019][ T74] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 590.892542][ T5855] bond1 (unregistering): (slave lo): Releasing backup interface [ 590.897717][ T5855] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 590.905756][ T5855] bond1 (unregistering): Released all slaves [ 590.919828][ T5855] bond2 (unregistering): Released all slaves [ 590.932931][ T5855] bond3 (unregistering): Released all slaves [ 590.984628][T27090] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 591.011059][T27091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.018479][T27091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.051830][T27091] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 591.077930][T27091] bond0 (unregistering): Released all slaves [ 591.193085][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 591.199157][T27093] gretap1: entered allmulticast mode [ 591.228882][T27093] team0: Port device gretap1 added [ 591.237354][T27095] bridge0: port 3(team0) entered blocking state [ 591.244127][T27095] bridge0: port 3(team0) entered disabled state [ 591.248792][T27095] team0: entered allmulticast mode [ 591.251252][T27095] team_slave_0: entered allmulticast mode [ 591.253913][T27095] team_slave_1: entered allmulticast mode [ 591.271469][T27095] team0: entered promiscuous mode [ 591.273203][T27095] team_slave_0: entered promiscuous mode [ 591.275229][T27095] team_slave_1: entered promiscuous mode [ 591.277099][T27095] gretap1: entered promiscuous mode [ 591.281953][T27095] bridge0: port 3(team0) entered blocking state [ 591.284084][T27095] bridge0: port 3(team0) entered forwarding state [ 591.505277][T27040] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.509854][T27040] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.513560][T27040] bridge_slave_0: entered allmulticast mode [ 591.517824][T27040] bridge_slave_0: entered promiscuous mode [ 591.524367][T27040] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.529022][T27040] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.533013][T27040] bridge_slave_1: entered allmulticast mode [ 591.537225][T27040] bridge_slave_1: entered promiscuous mode [ 591.603285][ T5456] 8021q: adding VLAN 0 to HW filter on device eth14 [ 591.615716][T27040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.661588][ T5855] hsr_slave_0: left promiscuous mode [ 591.665334][ T5855] hsr_slave_1: left promiscuous mode [ 591.697737][ T5855] veth1_macvtap: left promiscuous mode [ 591.700479][ T5855] veth0_macvtap: left promiscuous mode [ 591.703239][ T5855] veth1_vlan: left promiscuous mode [ 591.705686][ T5855] veth0_vlan: left promiscuous mode [ 591.908511][ T5764] Bluetooth: hci0: command tx timeout [ 591.957517][ T5855] team0 (unregistering): Port device team_slave_1 removed [ 591.975321][ T5855] team0 (unregistering): Port device team_slave_0 removed [ 592.090157][T27040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.125072][T27040] team0: Port device team_slave_0 added [ 592.128866][T27040] team0: Port device team_slave_1 added [ 592.147329][T27130] netlink: 'syz.6.8836': attribute type 1 has an invalid length. [ 592.150653][T27130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 592.154999][T27130] IPv6: NLM_F_CREATE should be set when creating new route [ 592.159339][T27130] IPv6: NLM_F_CREATE should be set when creating new route [ 592.168416][T27130] netlink: 'syz.6.8836': attribute type 1 has an invalid length. [ 592.172036][T27130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 592.175542][T27040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.178520][T27040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.187627][T27040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.192566][T27040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.195080][T27040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.204369][T27040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.228479][ C1] net_ratelimit: 1 callbacks suppressed [ 592.228504][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 592.252936][T27040] hsr_slave_0: entered promiscuous mode [ 592.255459][T27040] hsr_slave_1: entered promiscuous mode [ 592.258076][T27040] debugfs: 'hsr0' already exists in 'hsr' [ 592.260950][T27040] Cannot create hsr debugfs directory [ 592.396403][T27147] Bluetooth: MGMT ver 1.23 [ 592.468500][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 592.611028][ T5456] 8021q: adding VLAN 0 to HW filter on device eth15 [ 592.676676][T27040] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 592.685234][T27040] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 592.688025][T27040] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 592.716933][T27040] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 592.731995][T27040] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 592.739832][T27040] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 592.742885][T27040] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 592.753781][T27040] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 592.881878][ T5456] 8021q: adding VLAN 0 to HW filter on device eth16 [ 592.898866][T27040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.997764][T27040] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.009944][T20204] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.012561][T20204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.024081][T20204] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.027720][T20204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.033181][T27189] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8862'. [ 593.077632][T27189] bond3: entered promiscuous mode [ 593.082967][T27189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 593.268439][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 593.337442][ T5456] 8021q: adding VLAN 0 to HW filter on device eth17 [ 593.518412][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 593.559203][T27228] wlan0 speed is unknown, defaulting to 1000 [ 593.563093][T27228] syzkaller0 speed is unknown, defaulting to 1000 [ 593.634096][T27040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.997555][T27040] veth0_vlan: entered promiscuous mode [ 593.998891][ T5764] Bluetooth: hci0: command tx timeout [ 594.022522][T27040] veth1_vlan: entered promiscuous mode [ 594.049174][T27040] veth0_macvtap: entered promiscuous mode [ 594.054720][T27040] veth1_macvtap: entered promiscuous mode [ 594.080506][T27040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.090752][T27040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.102197][ T5855] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.105929][ T5855] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.111835][ T5855] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.114857][ T5855] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.250328][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.254516][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.313063][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.316930][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.320292][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 594.451257][T27252] tmpfs: Bad value for 'nr_blocks' [ 594.558466][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 595.096994][T27290] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3415406607 (54646505712 ns) > initial count (1924906624 ns). Using initial count to start timer. [ 595.348499][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 595.491184][T27316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8893'. [ 595.588451][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 595.981830][T27334] overlayfs: failed to clone upperpath [ 596.068505][ T5764] Bluetooth: hci0: command tx timeout [ 596.388736][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 596.534219][T27365] fuse: fd is not a fuse device [ 596.628518][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 596.695097][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 596.698456][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 596.755569][ T40] libceph: connect (1)[b::]:6789 error -101 [ 596.758391][ T40] libceph: mon0 (1)[b::]:6789 connect error [ 596.970145][ T58] libceph: connect (1)[c::]:6789 error -101 [ 596.972754][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 597.018938][ T40] libceph: connect (1)[b::]:6789 error -101 [ 597.022234][ T40] libceph: mon0 (1)[b::]:6789 connect error [ 597.428504][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 597.478714][ T58] libceph: connect (1)[c::]:6789 error -101 [ 597.482808][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 597.512228][T27376] ceph: No mds server is up or the cluster is laggy [ 597.512311][T27382] ceph: No mds server is up or the cluster is laggy [ 597.556793][ T40] libceph: connect (1)[b::]:6789 error -101 [ 597.596192][ T40] libceph: mon0 (1)[b::]:6789 connect error [ 597.668458][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 597.984734][T27434] mac80211_hwsim hwsim27 »»»»»»: renamed from wlan0 (while UP) [ 598.158473][ T5764] Bluetooth: hci0: command tx timeout [ 598.404345][T27466] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8956'. [ 598.432902][T27466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.468428][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 598.492720][T27474] fuse: Bad value for 'fd' [ 598.708432][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 599.205925][T27504] overlayfs: failed to clone upperpath [ 599.242950][T27507] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8973'. [ 599.352538][T27513] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8976'. [ 599.508593][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 599.758521][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 599.950179][T27561] wlan0 speed is unknown, defaulting to 1000 [ 599.954367][T27561] syzkaller0 speed is unknown, defaulting to 1000 [ 600.347948][ T42] audit: type=1326 audit(858.189:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27590 comm="syz.8.9010" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 600.361232][ T42] audit: type=1326 audit(858.189:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27590 comm="syz.8.9010" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 600.373492][ T42] audit: type=1326 audit(858.209:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27590 comm="syz.8.9010" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 600.381088][ T42] audit: type=1326 audit(858.209:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27590 comm="syz.8.9010" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 600.389282][ T42] audit: type=1326 audit(858.209:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27590 comm="syz.8.9010" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 600.397369][ T42] audit: type=1326 audit(858.219:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27590 comm="syz.8.9010" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 600.403934][ T42] audit: type=1326 audit(858.219:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27590 comm="syz.8.9010" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 600.411952][ T42] audit: type=1326 audit(858.219:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27590 comm="syz.8.9010" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 600.419282][ T42] audit: type=1326 audit(858.219:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27590 comm="syz.8.9010" exe="/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 600.427362][ T42] audit: type=1326 audit(858.219:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27590 comm="syz.8.9010" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6feefec code=0x7ffc0000 [ 600.548433][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 600.629170][T27609] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9019'. [ 600.635336][T27609] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9019'. [ 600.642219][T27609] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9019'. [ 600.788510][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 600.987349][T27628] syzkaller1: entered promiscuous mode [ 600.990122][T27628] syzkaller1: entered allmulticast mode [ 601.598904][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 601.838422][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 602.439942][T27683] wlan0 speed is unknown, defaulting to 1000 [ 602.443904][T27683] syzkaller0 speed is unknown, defaulting to 1000 [ 602.638462][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 602.868403][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 603.009067][T27697] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 603.579696][T27720] kvm: user requested TSC rate below hardware speed [ 603.668972][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 603.838360][ T10] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 603.908452][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 603.988498][ T10] usb 14-1: Using ep0 maxpacket: 16 [ 603.994506][ T10] usb 14-1: config 0 has no interfaces? [ 604.006287][ T10] usb 14-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 604.011266][ T10] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 604.014963][ T10] usb 14-1: SerialNumber: syz [ 604.030643][ T10] usb 14-1: config 0 descriptor?? [ 604.163177][T27757] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9075'. [ 604.166596][T27757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9075'. [ 604.283818][ T1346] usb 14-1: USB disconnect, device number 2 [ 604.718539][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 604.895421][T27748] ceph: No mds server is up or the cluster is laggy [ 604.898504][T27753] ceph: No mds server is up or the cluster is laggy [ 604.957123][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 605.307980][T27814] overlayfs: failed to clone lowerpath [ 605.620921][ T1346] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 605.758378][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 605.788541][ T1346] usb 14-1: Using ep0 maxpacket: 8 [ 605.794729][ T1346] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 605.798908][ T1346] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 605.803393][ T1346] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 605.809633][ T1346] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 605.814468][ T1346] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 605.824402][ T1346] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 605.829805][ T1346] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.876322][T27852] overlayfs: failed to clone upperpath [ 605.988479][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 606.048464][ T1346] usb 14-1: usb_control_msg returned -32 [ 606.054360][ T1346] usbtmc 14-1:16.0: can't read capabilities [ 606.400454][T27872] usbtmc 14-1:16.0: INITIATE_CLEAR returned 0 [ 606.602949][ T24] usb 14-1: USB disconnect, device number 3 [ 606.788525][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 606.952687][T27885] gretap1: entered allmulticast mode [ 606.959793][T27885] team0: Port device gretap1 added [ 606.968376][T19924] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 606.977355][T27885] bridge0: port 4(team0) entered blocking state [ 606.980512][T27885] bridge0: port 4(team0) entered disabled state [ 606.984250][T27885] team0: entered allmulticast mode [ 606.987024][T27885] team_slave_0: entered allmulticast mode [ 606.990362][T27885] team_slave_1: entered allmulticast mode [ 606.993942][T27885] dummy0: entered allmulticast mode [ 607.008796][T27885] team0: entered promiscuous mode [ 607.011177][T27885] team_slave_0: entered promiscuous mode [ 607.013874][T27885] team_slave_1: entered promiscuous mode [ 607.016591][T27885] dummy0: entered promiscuous mode [ 607.019775][T27885] gretap1: entered promiscuous mode [ 607.026591][T27885] bridge0: port 4(team0) entered blocking state [ 607.029506][T27885] bridge0: port 4(team0) entered listening state [ 607.128500][T19924] usb 11-1: Using ep0 maxpacket: 16 [ 607.150650][T19924] usb 11-1: config 0 has no interfaces? [ 607.161178][T19924] usb 11-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 607.167154][T19924] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 607.170778][T19924] usb 11-1: SerialNumber: syz [ 607.173648][T19924] usb 11-1: config 0 descriptor?? [ 607.210251][T27892] syzkaller1: entered promiscuous mode [ 607.212569][T27892] syzkaller1: entered allmulticast mode [ 607.271696][T27894] mac80211_hwsim hwsim3 »»»»»»: renamed from wlan0 (while UP) [ 607.467977][ T10] usb 11-1: USB disconnect, device number 26 [ 607.828800][ C1] net_ratelimit: 1 callbacks suppressed [ 607.828823][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 608.068429][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 608.083684][T27941] wlan0 speed is unknown, defaulting to 1000 [ 608.088625][T27941] syzkaller0 speed is unknown, defaulting to 1000 [ 608.109859][T27942] netlink: 164 bytes leftover after parsing attributes in process `syz.6.9147'. [ 608.129325][T27942] netlink: 36 bytes leftover after parsing attributes in process `syz.6.9147'. [ 608.129863][T27946] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 608.144788][T27946] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 608.172277][T27946] ovl_remap_lower_ino: 36 callbacks suppressed [ 608.172301][T27946] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 608.188946][T27946] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 608.194453][T27946] overlayfs: d_ino too big (65, ino=9223372036854776155, xinobits=3) [ 608.198804][T27946] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 608.205492][T27946] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 608.215830][T27946] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 608.222317][T27946] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 608.236670][T27946] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 608.240283][T27946] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 608.243112][T27946] overlayfs: d_ino too big (instances, ino=4611686018427391256, xinobits=3) [ 608.693820][T27967] fuse: Bad value for 'fd' [ 608.868811][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 609.011501][ T10] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 609.108467][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 609.168405][ T10] usb 14-1: Using ep0 maxpacket: 16 [ 609.186225][ T10] usb 14-1: config 0 has no interfaces? [ 609.202339][ T10] usb 14-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 609.208649][ T10] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 609.215767][ T10] usb 14-1: SerialNumber: syz [ 609.230884][ T10] usb 14-1: config 0 descriptor?? [ 609.539595][ T10] usb 14-1: USB disconnect, device number 4 [ 609.888934][T27924] syz.9.9133 (27924) used greatest stack depth: 17896 bytes left [ 609.918436][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 610.148386][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 610.299750][T28013] netlink: 'syz.8.9176': attribute type 2 has an invalid length. [ 610.303956][T28013] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9176'. [ 610.683230][T28034] netlink: 1363 bytes leftover after parsing attributes in process `syz.9.9186'. [ 610.806549][T28038] bridge1: entered promiscuous mode [ 610.810014][T28038] bridge1: entered allmulticast mode [ 610.948450][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 611.188490][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 611.284861][T28048] input: syz1 as /devices/virtual/input/input75 [ 611.386624][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 611.386638][ T42] audit: type=1804 audit(869.229:4839): pid=28054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9193" name="file1" dev="tmpfs" ino=12775 res=1 errno=0 [ 611.481526][T28061] netlink: 'syz.2.9198': attribute type 1 has an invalid length. [ 611.512076][T28061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.850692][T28089] Bluetooth: hci0: service_discovery: too big uuid_count value 33022 [ 611.998730][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 612.238433][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 613.028399][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 613.105525][T28144] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 613.134871][T28140] ceph: No mds server is up or the cluster is laggy [ 613.279108][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 613.491403][T28154] veth3: entered allmulticast mode [ 613.873488][T28173] overlayfs: failed to clone lowerpath [ 614.065453][T28191] input: syz0 as /devices/virtual/input/input76 [ 614.073270][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 614.110552][T28193] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 614.224676][T28197] wlan0 speed is unknown, defaulting to 1000 [ 614.236778][T28197] syzkaller0 speed is unknown, defaulting to 1000 [ 614.318420][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 614.522389][ T42] audit: type=1804 audit(872.369:4840): pid=28227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.9266" name="/newroot/318/file0" dev="tmpfs" ino=1664 res=1 errno=0 [ 614.877420][T28240] wlan0 speed is unknown, defaulting to 1000 [ 614.887599][T28240] syzkaller0 speed is unknown, defaulting to 1000 [ 615.107169][T28253] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9278'. [ 615.108540][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 615.348454][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 615.598653][ T24] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 615.771279][ T24] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 615.775540][ T24] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.781843][ T24] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 615.787287][ T24] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.799769][ T24] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 615.804063][ T24] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 615.807655][ T24] usb 11-1: Product: syz [ 615.809822][ T24] usb 11-1: Manufacturer: syz [ 615.817467][ T24] cdc_wdm 11-1:1.0: skipping garbage [ 615.822306][ T24] cdc_wdm 11-1:1.0: skipping garbage [ 615.829520][ T24] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 615.832585][ T24] cdc_wdm 11-1:1.0: Unknown control protocol [ 616.125463][T28287] netlink: 'syz.2.9289': attribute type 1 has an invalid length. [ 616.158666][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 616.163756][T28287] 8021q: adding VLAN 0 to HW filter on device bond5 [ 616.197677][T28287] bond5: (slave ip6erspan0): making interface the new active one [ 616.202027][T28287] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 616.398473][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 618.228512][ C1] net_ratelimit: 2 callbacks suppressed [ 618.228538][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 618.373064][T19924] usb 11-1: USB disconnect, device number 27 [ 618.460632][T28332] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9307'. [ 618.478364][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 619.268533][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 619.518565][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 619.706869][T28391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9315'. [ 620.261273][T28430] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9330'. [ 620.308455][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 620.548411][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 620.754749][T28450] wlan0 speed is unknown, defaulting to 1000 [ 620.758608][T28450] syzkaller0 speed is unknown, defaulting to 1000 [ 621.330081][T28488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9350'. [ 621.358543][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 621.588603][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 621.809120][ T24] usb 11-1: new high-speed USB device number 28 using dummy_hcd [ 621.978532][ T24] usb 11-1: Using ep0 maxpacket: 32 [ 621.982850][ T24] usb 11-1: config index 0 descriptor too short (expected 29220, got 36) [ 621.986462][ T24] usb 11-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 621.989407][ T24] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 621.992278][ T24] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 621.995481][ T24] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 621.999153][ T24] usb 11-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 622.004063][ T24] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 622.010565][ T24] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.016854][ T24] usb 11-1: config 0 descriptor?? [ 622.194221][T28522] xt_policy: too many policy elements [ 622.226578][ T24] usblp 11-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 622.228330][ C3] bridge0: port 4(team0) entered learning state [ 622.388492][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 622.628410][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 622.963830][T12562] usb 11-1: USB disconnect, device number 28 [ 622.976584][T12562] usblp0: removed [ 623.438454][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 623.668401][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 624.161630][ T1168] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 624.373164][T28602] 9pnet: p9_errstr2errno: server reported unknown error ./file0 [ 624.478386][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 624.718386][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 624.934184][T28627] fuse: Bad value for 'fd' [ 625.508739][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 625.572864][T28656] xt_policy: too many policy elements [ 625.749691][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 626.038420][T28681] nbd6: detected capacity change from 0 to 63 [ 626.049188][T28684] block nbd6: NBD_DISCONNECT [ 626.086218][T28684] block nbd6: Disconnected due to user request. [ 626.092780][T28684] block nbd6: shutting down sockets [ 626.094049][ T9352] blk_print_req_error: 129 callbacks suppressed [ 626.094070][ T9352] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 626.101273][ T9352] buffer_io_error: 11 callbacks suppressed [ 626.101289][ T9352] Buffer I/O error on dev nbd6, logical block 0, async page read [ 626.105751][T28684] [ 626.106331][ T9352] Buffer I/O error on dev nbd6, logical block 1, async page read [ 626.107342][T28684] ====================================================== [ 626.107354][T28684] WARNING: possible circular locking dependency detected [ 626.107367][T28684] syzkaller #0 Tainted: G L [ 626.110216][ T9352] Buffer I/O error on dev nbd6, logical block 2, async page read [ 626.112871][T28684] ------------------------------------------------------ [ 626.112886][T28684] syz.6.9432/28684 is trying to acquire lock: [ 626.112900][T28684] ffff888028489140 ((wq_completion)nbd6-recv){+.+.}-{0:0}, at: touch_wq_lockdep_map+0x9c/0x1c0 [ 626.115844][ T9352] Buffer I/O error on dev nbd6, logical block 3, async page read [ 626.118449][T28684] [ 626.118449][T28684] but task is already holding lock: [ 626.118461][T28684] ffff888028431a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x26/0x1c0 [ 626.118513][T28684] [ 626.118513][T28684] which lock already depends on the new lock. [ 626.118513][T28684] [ 626.118518][T28684] [ 626.118518][T28684] the existing dependency chain (in reverse order) is: [ 626.118524][T28684] [ 626.118524][T28684] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 626.118547][T28684] lock_acquire+0x1b9/0x370 [ 626.121806][ T9352] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 626.124265][T28684] __mutex_lock+0x1a4/0x1bd0 [ 626.126345][ T9352] Buffer I/O error on dev nbd6, logical block 0, async page read [ 626.130914][T28684] refcount_dec_and_mutex_lock+0x51/0x100 [ 626.130966][T28684] nbd_config_put+0x31/0x750 [ 626.130992][T28684] recv_work+0x63a/0x8c0 [ 626.131018][T28684] process_one_work+0xa23/0x1940 [ 626.131045][T28684] worker_thread+0x5ef/0xe50 [ 626.134131][ T9352] Buffer I/O error on dev nbd6, logical block 1, async page read [ 626.138074][T28684] kthread+0x370/0x450 [ 626.141550][ T9352] Buffer I/O error on dev nbd6, logical block 2, async page read [ 626.145637][T28684] ret_from_fork+0x72b/0xd50 [ 626.148802][ T9352] Buffer I/O error on dev nbd6, logical block 3, async page read [ 626.152424][T28684] ret_from_fork_asm+0x1a/0x30 [ 626.152472][T28684] [ 626.152472][T28684] -> #1 [ 626.154721][ T9352] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 626.159041][T28684] ((work_completion)(&args->work)){+.+.}-{0:0}: [ 626.159076][T28684] lock_acquire+0x1b9/0x370 [ 626.159107][T28684] process_one_work+0x98e/0x1940 [ 626.159131][T28684] worker_thread+0x5ef/0xe50 [ 626.159154][T28684] kthread+0x370/0x450 [ 626.159174][T28684] ret_from_fork+0x72b/0xd50 [ 626.159194][T28684] ret_from_fork_asm+0x1a/0x30 [ 626.159218][T28684] [ 626.159218][T28684] -> #0 ((wq_completion)nbd6-recv){+.+.}-{0:0}: [ 626.161484][ T9352] Buffer I/O error on dev nbd6, logical block 0, async page read [ 626.164679][T28684] check_prev_add+0xeb/0xe60 [ 626.167066][ T9352] Buffer I/O error on dev nbd6, logical block 1, async page read [ 626.168837][T28684] __lock_acquire+0x136c/0x1a40 [ 626.168873][T28684] lock_acquire+0x1b9/0x370 [ 626.168895][T28684] touch_wq_lockdep_map+0xad/0x1c0 [ 626.168913][T28684] __flush_workqueue+0x131/0x1200 [ 626.168930][T28684] nbd_disconnect_and_put+0x9b/0x1c0 [ 626.168950][T28684] nbd_genl_disconnect+0x34b/0x4e0 [ 626.168969][T28684] genl_family_rcv_msg_doit+0x214/0x300 [ 626.171311][ T9352] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 626.173155][T28684] genl_rcv_msg+0x560/0x800 [ 626.173176][T28684] netlink_rcv_skb+0x159/0x420 [ 626.173194][T28684] genl_rcv+0x28/0x40 [ 626.176305][ T9352] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 626.180026][T28684] netlink_unicast+0x585/0x850 [ 626.180072][T28684] netlink_sendmsg+0x8b0/0xda0 [ 626.180100][T28684] ____sys_sendmsg+0xa4d/0xbe0 [ 626.180131][T28684] ___sys_sendmsg+0x190/0x1e0 [ 626.180160][T28684] __sys_sendmsg+0x160/0x210 [ 626.182552][ T9352] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 626.185400][T28684] __do_fast_syscall_32+0xe7/0x970 [ 626.185434][T28684] do_fast_syscall_32+0x32/0x70 [ 626.185451][T28684] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 626.187877][ T9352] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 626.190776][T28684] [ 626.190776][T28684] other info that might help us debug this: [ 626.190776][T28684] [ 626.190793][T28684] Chain exists of: [ 626.190793][T28684] (wq_completion)nbd6-recv --> (work_completion)(&args->work) --> &nbd->config_lock [ 626.190793][T28684] [ 626.190834][T28684] Possible unsafe locking scenario: [ 626.190834][T28684] [ 626.190839][T28684] CPU0 CPU1 [ 626.190847][T28684] ---- ---- [ 626.190853][T28684] lock(&nbd->config_lock); [ 626.190867][T28684] lock((work_completion)(&args->work)); [ 626.190883][T28684] lock(&nbd->config_lock); [ 626.190898][T28684] lock((wq_completion)nbd6-recv); [ 626.190913][T28684] [ 626.190913][T28684] *** DEADLOCK *** [ 626.190913][T28684] [ 626.190918][T28684] 3 locks held by syz.6.9432/28684: [ 626.190930][T28684] #0: ffffffff90b4c928 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 626.193716][ T9352] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 626.195760][T28684] #1: ffffffff90b4c9e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 626.200644][T25226] ldm_validate_partition_table(): Disk read failed. [ 626.203146][T28684] #2: ffff888028431a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x26/0x1c0 [ 626.205549][ T9352] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 626.207590][T28684] [ 626.207590][T28684] stack backtrace: [ 626.207615][T28684] CPU: 2 UID: 0 PID: 28684 Comm: syz.6.9432 Tainted: G L syzkaller #0 PREEMPT(full) [ 626.207643][T28684] Tainted: [L]=SOFTLOCKUP [ 626.207651][T28684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 626.207665][T28684] Call Trace: [ 626.207674][T28684] [ 626.207684][T28684] dump_stack_lvl+0x100/0x190 [ 626.207714][T28684] print_circular_bug.cold+0x178/0x1c7 [ 626.207746][T28684] check_noncircular+0x146/0x160 [ 626.207776][T28684] check_prev_add+0xeb/0xe60 [ 626.207808][T28684] __lock_acquire+0x136c/0x1a40 [ 626.207836][T28684] lock_acquire+0x1b9/0x370 [ 626.207861][T28684] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 626.207884][T28684] ? __schedule+0x126e/0x6730 [ 626.207911][T28684] ? lockdep_init_map_type+0x5c/0x250 [ 626.207939][T28684] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 626.207959][T28684] touch_wq_lockdep_map+0xad/0x1c0 [ 626.207978][T28684] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 626.208000][T28684] __flush_workqueue+0x131/0x1200 [ 626.208027][T28684] ? __pfx___schedule+0x10/0x10 [ 626.208052][T28684] ? irqentry_exit+0x24d/0xa00 [ 626.208080][T28684] ? __pfx___flush_workqueue+0x10/0x10 [ 626.208101][T28684] ? preempt_schedule_thunk+0x16/0x40 [ 626.208131][T28684] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 626.208160][T28684] nbd_disconnect_and_put+0x9b/0x1c0 [ 626.208187][T28684] nbd_genl_disconnect+0x34b/0x4e0 [ 626.208212][T28684] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 626.208237][T28684] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 626.208271][T28684] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 626.208304][T28684] genl_family_rcv_msg_doit+0x214/0x300 [ 626.208337][T28684] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 626.208363][T28684] ? genl_get_cmd+0x3e7/0x760 [ 626.208391][T28684] ? ____sys_sendmsg+0xa4d/0xbe0 [ 626.208416][T28684] ? ___sys_sendmsg+0x190/0x1e0 [ 626.208441][T28684] ? __radix_tree_lookup+0x217/0x2b0 [ 626.208472][T28684] genl_rcv_msg+0x560/0x800 [ 626.208491][T28684] ? __pfx_genl_rcv_msg+0x10/0x10 [ 626.208507][T28684] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 626.208529][T28684] ? __lock_acquire+0x49f/0x1a40 [ 626.208551][T28684] netlink_rcv_skb+0x159/0x420 [ 626.208579][T28684] ? __pfx_genl_rcv_msg+0x10/0x10 [ 626.208599][T28684] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 626.208632][T28684] ? netlink_deliver_tap+0x1ae/0xcc0 [ 626.208660][T28684] genl_rcv+0x28/0x40 [ 626.208686][T28684] netlink_unicast+0x585/0x850 [ 626.208713][T28684] ? __pfx_netlink_unicast+0x10/0x10 [ 626.208743][T28684] netlink_sendmsg+0x8b0/0xda0 [ 626.208774][T28684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.208813][T28684] ? apparmor_socket_sendmsg+0x15b/0x270 [ 626.208879][T28684] ____sys_sendmsg+0xa4d/0xbe0 [ 626.208905][T28684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.208935][T28684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 626.208963][T28684] ? find_held_lock+0x2b/0x80 [ 626.208983][T28684] ? tomoyo_path_number_perm+0x28f/0x580 [ 626.209007][T28684] ___sys_sendmsg+0x190/0x1e0 [ 626.209032][T28684] ? __pfx____sys_sendmsg+0x10/0x10 [ 626.209053][T28684] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 626.209076][T28684] ? find_held_lock+0x2b/0x80 [ 626.209105][T28684] __sys_sendmsg+0x160/0x210 [ 626.209128][T28684] ? __pfx___sys_sendmsg+0x10/0x10 [ 626.209150][T28684] ? kfree+0x1e5/0x6c0 [ 626.209185][T28684] __do_fast_syscall_32+0xe7/0x970 [ 626.209206][T28684] do_fast_syscall_32+0x32/0x70 [ 626.209220][T28684] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 626.209243][T28684] RIP: 0023:0xf7f07fec [ 626.209272][T28684] Code: Unable to access opcode bytes at 0xf7f07fc2. [ 626.209282][T28684] RSP: 002b:00000000f53a550c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 626.209304][T28684] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 626.209318][T28684] RDX: 0000000004000810 RSI: 0000000000000000 RDI: 0000000000000000 [ 626.209330][T28684] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 626.209342][T28684] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 626.209352][T28684] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 626.209369][T28684] [ 626.472112][ T9352] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 626.522114][T25226] Dev nbd6: unable to read RDB block 0 [ 626.527181][T25226] nbd6: unable to read partition table [ 626.538749][T25226] ldm_validate_partition_table(): Disk read failed. [ 626.547260][T25226] Dev nbd6: unable to read RDB block 0 [ 626.555500][T25226] nbd6: unable to read partition table [ 626.558341][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 626.788402][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 627.588461][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 627.828375][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 628.628581][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 628.868427][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 629.270921][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.668454][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 629.908546][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 630.708436][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 630.948455][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 631.748519][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 631.999945][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 632.788444][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 633.028454][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 633.828415][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 634.068467][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 634.868414][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 635.108475][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 635.908379][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available