last executing test programs: 23m36.138299418s ago: executing program 3 (id=33): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}}, 0x0) 23m34.304432651s ago: executing program 3 (id=37): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 23m32.937866923s ago: executing program 3 (id=40): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21", 0x25}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) 23m30.821060233s ago: executing program 3 (id=43): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21", 0x25}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) 23m26.409571057s ago: executing program 3 (id=50): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x15) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f904, 0x3}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001e0001000000000000000000070000005b1a170204000000a599d1702d8ba8e486f44d1ceeb13082c5aa6f544664a0640b74e08ac81e7a3e6c708f5cc85dc54f7e5dd5a09b4041d3fa6d5435f1eac9a228518b6ce8303619e40c337f6a3dbbfee7a719c7617d8814e4600df52771e592f08eb7a2bd94e12b6aeeff1e22f2fc9935849c467090a44ec544434f32d5011bc099e3f7d048a37e81531c7d553e3479fee438e67ef23baf028e636615d63a82f1ba829efd8ff1e90b53c30c8bb1e04bdb10a7267809330b142886e42d33cac329fae5759898ab3e593f45f4eae54768e3ac28aeb60cf99c7819bbffcd5fb8f9ba0920f647f8c691fc2a2ad23cfe7a65067495706c46edbe3cd0ba9e5e259e48a6033b8f068485898350ef57cc6e3fefb272a8272f95e927ad9dfde9f321f9a0c8878ddc28580931bc078bf27c4e31afb804898da2959c6d7844e63c1e", @ANYRES32=r6, @ANYBLOB="000002000a0002000000000000000000"], 0x28}}, 0x0) 23m23.409887977s ago: executing program 3 (id=52): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x271a, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889"], 0x10b8}, 0x7f00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r9, 0xd, 0x1) 23m8.312652893s ago: executing program 32 (id=52): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x271a, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889"], 0x10b8}, 0x7f00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) fchdir(r8) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r9, 0xd, 0x1) 8m2.1439134s ago: executing program 1 (id=1182): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x1}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) 8m1.28636546s ago: executing program 1 (id=1185): socket$inet_mptcp(0x2, 0x1, 0x106) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x4, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0) 7m59.291716207s ago: executing program 1 (id=1187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 7m56.792933715s ago: executing program 1 (id=1190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000180), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002780)=ANY=[@ANYBLOB="050000000c0000"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000f00)=""/102400, 0x19000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x10f0, r1}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 7m51.732357204s ago: executing program 1 (id=1199): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x1f9) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x10c) 7m49.658336272s ago: executing program 1 (id=1201): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000001480)}, {&(0x7f0000000140)}, {&(0x7f0000000280)="b32ecf7e666c0de925210b608c5f040e89e61ec85c36e8e15ab425f74cd72c5b498f5761f17eade0e69dc40682a8093c9045cc0dc3d66922d708695bad22b15873c627fbbf1b87cb5fc775dfedf1a57c92d74797fba70637e960adf67b2afd4d12090251bbf6ed4f6090ebf45ad53382ff5003852a4c74bf8c78adaaae3b", 0x7e}, {&(0x7f0000000340)="3956b52d7b42aa8cc72b1fae7059136930da4e233df5cb4d1068a3f6d6f419141e7a68ed0c0e2a0317777fd7694bbb77a63d85bc53a07ad7a5480c15406bddb0bb5f03568f2505da03fbd9f7d5b419ef3bfbfcb0863508", 0x57}, {&(0x7f00000003c0)}, {&(0x7f0000000480)="0f35868b2164de2031487f92a2c6608e263617cd19c7d33f31d19461897727fa13", 0x21}, {&(0x7f00000004c0)="9e812c7aeb00deb4ccf82df13157b490e9039866ffaf91b724c98e288bee4585211095a445b440219dc2285c4091d3a46d7d8dc410a18ace0d0abd8d6fb7a7533a5956935d535c29522b17b9d0d83270298a67fae729594d4c5407b4b0decca12c4e3c566fe6e2d6382d5b78daf23a639ea1a16ab0db99124a7e51963dc697", 0x7f}], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f00000002c0)={0xfffffffffffffffe, 0x4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 7m33.632085627s ago: executing program 33 (id=1201): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(r0, &(0x7f0000000540)=[{&(0x7f0000001480)}, {&(0x7f0000000140)}, {&(0x7f0000000280)="b32ecf7e666c0de925210b608c5f040e89e61ec85c36e8e15ab425f74cd72c5b498f5761f17eade0e69dc40682a8093c9045cc0dc3d66922d708695bad22b15873c627fbbf1b87cb5fc775dfedf1a57c92d74797fba70637e960adf67b2afd4d12090251bbf6ed4f6090ebf45ad53382ff5003852a4c74bf8c78adaaae3b", 0x7e}, {&(0x7f0000000340)="3956b52d7b42aa8cc72b1fae7059136930da4e233df5cb4d1068a3f6d6f419141e7a68ed0c0e2a0317777fd7694bbb77a63d85bc53a07ad7a5480c15406bddb0bb5f03568f2505da03fbd9f7d5b419ef3bfbfcb0863508", 0x57}, {&(0x7f00000003c0)}, {&(0x7f0000000480)="0f35868b2164de2031487f92a2c6608e263617cd19c7d33f31d19461897727fa13", 0x21}, {&(0x7f00000004c0)="9e812c7aeb00deb4ccf82df13157b490e9039866ffaf91b724c98e288bee4585211095a445b440219dc2285c4091d3a46d7d8dc410a18ace0d0abd8d6fb7a7533a5956935d535c29522b17b9d0d83270298a67fae729594d4c5407b4b0decca12c4e3c566fe6e2d6382d5b78daf23a639ea1a16ab0db99124a7e51963dc697", 0x7f}], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f00000002c0)={0xfffffffffffffffe, 0x4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 2m38.854587693s ago: executing program 4 (id=1646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xe69, 0x0, 0x0, 0x1000, 0x86, r0, 0x0, 0x30}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x420, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727f, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 2m36.942802808s ago: executing program 4 (id=1647): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) syz_open_dev$radio(&(0x7f0000000400), 0x3, 0x2) syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000440)={0x0, 0x4015, 0x10, 0x0, 0x8b}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 2m28.550962094s ago: executing program 4 (id=1655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000009) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0xd490a000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'wp384\x00'}}) 2m27.958023758s ago: executing program 4 (id=1657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x40003) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 2m22.606450543s ago: executing program 4 (id=1663): socket$kcm(0x10, 0x400000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) lseek(0xffffffffffffffff, 0xb, 0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x4, 0x7, 0x3, 0xdb31, 0x7fffffff, r0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) 2m20.581917151s ago: executing program 4 (id=1664): socket$nl_route(0x10, 0x3, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) syz_open_dev$radio(&(0x7f0000000400), 0x3, 0x2) syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000440)={0x0, 0x4015, 0x10, 0x0, 0x8b}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 2m4.331612821s ago: executing program 34 (id=1664): socket$nl_route(0x10, 0x3, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) syz_open_dev$radio(&(0x7f0000000400), 0x3, 0x2) syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000440)={0x0, 0x4015, 0x10, 0x0, 0x8b}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 1m47.514511214s ago: executing program 2 (id=1699): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x2}, {}, {0xfff2, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xe}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}]}}]}, 0x3c}}, 0x20028041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m47.360498938s ago: executing program 2 (id=1700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="ce3c61821c000b250a005f42000000000000"], 0x1c}}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 1m45.783837745s ago: executing program 2 (id=1703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000009) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0xd490a000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x7) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'wp384\x00'}}) 1m40.194625116s ago: executing program 2 (id=1706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="ce3c61821c000b250a005f42000000000000", @ANYRES32], 0x1c}}, 0x4) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x4}, 0x2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 1m39.181450539s ago: executing program 2 (id=1708): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x2}, {}, {0xfff2, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xe}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}]}}]}, 0x3c}}, 0x20028041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m38.844119867s ago: executing program 2 (id=1709): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test\x00', 0x14) write(0xffffffffffffffff, &(0x7f0000000380)='100000', 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/27, 0x1b) unshare(0x42000000) 1m23.698322711s ago: executing program 35 (id=1709): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test\x00', 0x14) write(0xffffffffffffffff, &(0x7f0000000380)='100000', 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/27, 0x1b) unshare(0x42000000) 13.168096932s ago: executing program 5 (id=1813): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) 11.249426927s ago: executing program 6 (id=1815): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000d00)='/sys/power/mem_sleep', 0x122102, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getegid() ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f00000001c0)='1', 0x1) 11.201577688s ago: executing program 5 (id=1816): socket$kcm(0x10, 0x400000002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) lseek(0xffffffffffffffff, 0xb, 0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x4, 0x7, 0x3, 0xdb31, 0x7fffffff, r0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) 9.853980379s ago: executing program 5 (id=1817): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x4001, 0x3, 0x1240, 0x10f0, 0x700001b, 0x148, 0x0, 0x148, 0x11d0, 0x206, 0x240, 0x11d0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x10d0, 0x10f0, 0x0, {0x390, 0x8f00}, [@common=@addrtype={{0x30}, {0x158, 0x202}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.net/syz1\x00', 0x5, {0xffffffffffffff03}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xd4, 'syz1\x00', {0x9e2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12a0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x80003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1a3042, 0x20) r1 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_LOCK(r1, 0xb) r2 = socket(0x2, 0x5, 0x800003) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$key(r2, 0x0, 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi1\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000000)={'comedi_bond\x00', [0x2, 0x4, 0x2, 0x8, 0x90000, 0x9, 0xed, 0x890, 0x280ffa, 0xfffffffc, 0x4, 0x1, 0x1030, 0x1000008, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x912, 0x9ea, 0x3, 0x9, 0xc, 0x101, 0x1, 0x990e, 0x5, 0x18, 0x2, 0x2000006, 0x5]}) 9.278921633s ago: executing program 7 (id=1818): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x2}, {}, {0xfff2, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xe}, {0x0, 0xe}}}, 0x24}}, 0x20028041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.148827726s ago: executing program 6 (id=1819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 7.69140653s ago: executing program 6 (id=1820): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f904, 0x3}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="000002000a0002000000000000000000"], 0x28}}, 0x0) 7.608400892s ago: executing program 7 (id=1821): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000c, 0x28011, r2, 0x0) r3 = socket(0x11, 0x2, 0x0) setsockopt(r3, 0x107, 0xc, &(0x7f00000001c0)="1161cc09", 0x4) 7.25435609s ago: executing program 7 (id=1822): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00003e4000/0x2000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000125000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f00000d6000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00002d7000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x1862, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 6.069297708s ago: executing program 5 (id=1823): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x8001af85, 0x0) 5.672687937s ago: executing program 5 (id=1826): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000696000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040055) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc002, 0x3, 0xce}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 5.401449383s ago: executing program 7 (id=1827): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.41085648s ago: executing program 6 (id=1828): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10020, 0x0) 2.217226138s ago: executing program 0 (id=1829): unshare(0x26020600) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x280, 0x1e0, 0x3014, 0x1, 0x8, 0x0, 0x2, 0x5}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x1d, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYRESOCT=r0], 0x0, 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000200), 0x8}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000180)={r2, r4}) sendto$inet(r2, &(0x7f0000000080)="e00c", 0x2, 0x4005, 0x0, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x19, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) bind$unix(r5, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r6 = syz_open_dev$video(&(0x7f0000000280), 0x4, 0x2) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000300)={0x1, @pix={0x280, 0x1e0, 0x42474752, 0x1, 0x280, 0x4b000, 0x8}}) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000600)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000001c0)={0x10000014}) r9 = epoll_create1(0x0) epoll_pwait2(r9, &(0x7f0000000100)=[{}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180)={[0x4]}, 0x8) close(r9) bind$inet6(r5, &(0x7f0000000080)={0xa, 0xffff, 0x204, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}, 0x1c) 2.15098992s ago: executing program 5 (id=1830): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6f, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x9, 0x0, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "90"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xd2c, 0x4, 0xd, 0x8}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0xd, 0xfe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xf, 0x6, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0xf3, 0x68}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.795621418s ago: executing program 0 (id=1831): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f00000000c0)=0x4, 0x4) 1.598195452s ago: executing program 7 (id=1832): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000001280)={0x1, @pix={0xe, 0x3, 0x3136564e, 0x7, 0x594, 0x9000, 0xa, 0x4, 0x0, 0x7, 0x1, 0x2}}) r1 = socket$inet(0x2, 0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0xfffffffffffffff4, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x6c000000, 0xf, 0x5, 0x4007c9}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000ffd7013c000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x88, r10, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000cc0)={0x30, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r11, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0xb, 0x1, 0xffffffff}, {0xfffffffc, 0x2, 0x4, 0x1000}, {0xa47, 0x100005}}) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000340)=0x0) syz_open_procfs$namespace(r12, &(0x7f0000000640)='ns/net\x00') setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010800000000000000000000000014000780080011400000000005001500050000000500010006000000050005000a00000005000400000000000900020073797a30000000001100683a69702c706f727400000000"], 0x60}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x4) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r9) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f00000005c0)={&(0x7f0000000080), 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, r14, 0x20, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xc97}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6}, @ETHTOOL_A_RINGS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xffffffff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20004850) 1.531325944s ago: executing program 0 (id=1833): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0x7f, 0xe, 0x7ffffffe}]}) chmod(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x24) 1.28024593s ago: executing program 0 (id=1834): socket$nl_route(0x10, 0x3, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x6, 0x2) fchdir(0xffffffffffffffff) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xde9f, 0x1000, 0x2, 0x15b}, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000003c0)={0x0, 0x3, 0x0, 0x0, 0x257, 0x0, r0}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x1, 0x1000000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b75, 0x800, 0x2, 0x1eb, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1b6e, 0x8, 0x1, 0x2ec}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x8000, 0x1, 0xe1}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x6, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x44000) 1.093726494s ago: executing program 7 (id=1835): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d00010100803209040000020300000009211101000122230009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a1"], 0x0}, 0x0) 744.939012ms ago: executing program 6 (id=1836): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 338.339082ms ago: executing program 6 (id=1837): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40045b0a, &(0x7f0000000000)={0x2, 0xfffffffe, 0x7, 0xff, 0x1}) 94.528518ms ago: executing program 0 (id=1838): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181042, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) 0s ago: executing program 0 (id=1839): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) tkill(0x0, 0xb) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) kernel console output (not intermixed with test programs): 3723][ T6087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.567501][ T6087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.651089][ T6087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.410675][ T6371] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 187.661844][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.837323][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.111745][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.138955][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.597052][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.606261][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.328484][ T6403] sd 0:0:1:0: PR command failed: 1026 [ 195.338786][ T6403] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 195.379169][ T6403] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 202.304321][ T6463] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 203.521945][ T6468] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 203.566885][ T6470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.143'. [ 205.639001][ T8] libceph: connect (1)[c::]:6789 error -101 [ 206.241321][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 206.260197][ T6486] ceph: No mds server is up or the cluster is laggy [ 208.030398][ T8] libceph: connect (1)[c::]:6789 error -101 [ 208.036601][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 208.099333][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 208.122933][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'. [ 208.143858][ T6494] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.153476][ T6494] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.162737][ T6494] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.172356][ T6494] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.201988][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'. [ 208.252922][ T6494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'. [ 209.198400][ T6494] syz.2.146 (6494) used greatest stack depth: 20360 bytes left [ 211.703945][ T6525] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 212.322443][ T6528] syz.1.157 uses obsolete (PF_INET,SOCK_PACKET) [ 212.349770][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 212.356038][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 212.362488][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 213.076564][ T6538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.159'. [ 214.517428][ T6549] process 'syz.4.160' launched '/dev/fd/-1/./cgroup.cpu/cgroup.procs' with NULL argv: empty string added [ 214.563547][ T5782] Bluetooth: hci4: link tx timeout [ 214.571330][ T5782] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.587954][ T5084] Bluetooth: hci4: link tx timeout [ 214.608324][ T5084] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.624134][ T5084] Bluetooth: hci4: link tx timeout [ 214.629521][ T5084] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 214.643715][ T5084] Bluetooth: hci4: link tx timeout [ 214.649205][ T5084] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 215.324633][ T6553] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop4": -EINTR [ 215.390740][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 215.407042][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 215.586019][ T6556] ceph: No mds server is up or the cluster is laggy [ 215.703032][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 216.433384][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 216.676509][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 216.810892][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.164'. [ 216.859823][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 216.869298][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.164'. [ 216.913715][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 217.509157][ T6583] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 218.163633][ T6591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.168'. [ 220.425215][ T6600] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 223.443277][ T6615] sd 0:0:1:0: PR command failed: 1026 [ 223.449168][ T6615] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 223.456242][ T6615] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 224.563047][ T6621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.177'. [ 224.597189][ T6621] nbd: must specify at least one socket [ 233.695196][ T6669] sd 0:0:1:0: PR command failed: 1026 [ 233.701020][ T6669] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 233.708041][ T6669] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 237.481070][ T6697] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 241.200818][ T6712] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 241.868148][ T6724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.188'. [ 241.892259][ T6724] nbd: must specify at least one socket [ 243.506598][ T6735] sd 0:0:1:0: PR command failed: 1026 [ 243.512501][ T6735] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 243.519557][ T6735] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 245.675579][ T6749] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 246.192160][ T6756] netlink: 'syz.1.200': attribute type 1 has an invalid length. [ 247.630285][ T6758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.192'. [ 249.108121][ T6766] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 250.014204][ T6770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.202'. [ 251.866962][ T6683] udevd[6683]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 252.089910][ T6789] netlink: 20 bytes leftover after parsing attributes in process `syz.1.205'. [ 252.154570][ T6789] nbd: must specify at least one socket [ 252.897849][ T6797] sd 0:0:1:0: PR command failed: 1026 [ 252.903454][ T6797] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 252.910359][ T6797] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 255.728843][ T6813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.212'. [ 256.035890][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.042723][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.861414][ T6807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.211'. [ 258.040692][ T6683] udevd[6683]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 261.875906][ T6857] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 263.067267][ T6866] sd 0:0:1:0: PR command failed: 1026 [ 263.073087][ T6866] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 263.080275][ T6866] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 264.186741][ T6877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.223'. [ 266.096706][ T6885] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 266.308071][ T6891] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 267.087540][ T6898] netlink: 20 bytes leftover after parsing attributes in process `syz.1.226'. [ 269.828006][ T6683] udevd[6683]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 271.476903][ T6932] sd 0:0:1:0: PR command failed: 1026 [ 271.482725][ T6932] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 271.489717][ T6932] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 272.776651][ T6935] binder: BINDER_SET_CONTEXT_MGR already set [ 272.799906][ T6935] binder: 6933:6935 ioctl 4018620d 200000004a80 returned -16 [ 273.557697][ T6946] syz.4.234: attempt to access beyond end of device [ 273.557697][ T6946] loop4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 274.257695][ T6955] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 280.268403][ T6992] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 280.909369][ T6997] sd 0:0:1:0: PR command failed: 1026 [ 280.915495][ T6997] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 280.922767][ T6997] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 282.013908][ T5766] libceph: connect (1)[c::]:6789 error -101 [ 282.034505][ T5766] libceph: mon0 (1)[c::]:6789 connect error [ 283.803918][ T5766] libceph: connect (1)[c::]:6789 error -101 [ 283.810139][ T5766] libceph: mon0 (1)[c::]:6789 connect error [ 283.848421][ T6995] ceph: No mds server is up or the cluster is laggy [ 284.473814][ T7016] syz.4.245: attempt to access beyond end of device [ 284.473814][ T7016] loop4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 285.766085][ T7026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.247'. [ 290.255773][ T7056] sd 0:0:1:0: PR command failed: 1026 [ 290.261667][ T7056] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 290.268685][ T7056] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 293.221578][ T7065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.254'. [ 293.238681][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'. [ 293.268349][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 293.348530][ T7073] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.357817][ T7073] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.367118][ T7073] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.376371][ T7073] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.526002][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'. [ 293.552569][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 295.483305][ T6683] udevd[6683]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 295.756400][ T7089] binder: 7088:7089 ioctl c0306201 0 returned -14 [ 299.148779][ T7109] sd 0:0:1:0: PR command failed: 1026 [ 299.154563][ T7109] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 299.161599][ T7109] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 300.444948][ T7119] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 301.484460][ T7126] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 302.216973][ T7125] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 308.241523][ T8] libceph: connect (1)[c::]:6789 error -101 [ 308.259837][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 308.520199][ T8] libceph: connect (1)[c::]:6789 error -101 [ 308.533727][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 308.872028][ T7153] ceph: No mds server is up or the cluster is laggy [ 309.546407][ T7171] sd 0:0:1:0: PR command failed: 1026 [ 309.552270][ T7171] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 309.559458][ T7171] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 315.093533][ T8] libceph: connect (1)[c::]:6789 error -101 [ 315.229365][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 315.375934][ T7212] ceph: No mds server is up or the cluster is laggy [ 315.490181][ T8] libceph: connect (1)[c::]:6789 error -101 [ 315.496330][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 315.674437][ T7221] sd 0:0:1:0: PR command failed: 1026 [ 315.680266][ T7221] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 315.687279][ T7221] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 317.736919][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.744179][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.561480][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'. [ 324.601346][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 324.734038][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'. [ 324.862271][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 324.970793][ T5099] libceph: connect (1)[c::]:6789 error -101 [ 324.976942][ T5099] libceph: mon0 (1)[c::]:6789 connect error [ 325.320170][ T8] libceph: connect (1)[c::]:6789 error -101 [ 325.352549][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 325.431621][ T7279] ceph: No mds server is up or the cluster is laggy [ 335.051765][ T970] libceph: connect (1)[c::]:6789 error -101 [ 335.057917][ T970] libceph: mon0 (1)[c::]:6789 connect error [ 335.373947][ T7355] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 335.390790][ T7349] ceph: No mds server is up or the cluster is laggy [ 336.040187][ T23] libceph: connect (1)[c::]:6789 error -101 [ 336.050685][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 338.526589][ T7366] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 338.715842][ T5782] Bluetooth: hci4: link tx timeout [ 338.730604][ T5782] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 338.744351][ T5782] Bluetooth: hci4: link tx timeout [ 338.749515][ T5782] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 339.562075][ T5782] Bluetooth: hci4: link tx timeout [ 339.567281][ T5782] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 339.622477][ T7374] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop4": -EINTR [ 340.558275][ T7392] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 340.749685][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 341.067482][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 341.109682][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.312'. [ 341.140187][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 341.149047][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.312'. [ 343.838123][ T7412] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 355.864299][ T7465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.322'. [ 356.046062][ T7472] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 358.673049][ T7485] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 359.410645][ T6656] udevd[6656]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 360.338382][ T7495] ======================================================= [ 360.338382][ T7495] WARNING: The mand mount option has been deprecated and [ 360.338382][ T7495] and is ignored by this kernel. Remove the mand [ 360.338382][ T7495] option from the mount to silence this warning. [ 360.338382][ T7495] ======================================================= [ 361.598807][ T7502] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 365.294823][ T7519] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 369.370557][ T7551] syz.4.337: attempt to access beyond end of device [ 369.370557][ T7551] loop4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 370.963693][ T7564] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 372.789887][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 373.799846][ T7583] sd 0:0:1:0: PR command failed: 1026 [ 373.805822][ T7583] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 373.813106][ T7583] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 376.645985][ T7595] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 377.420580][ T5766] libceph: connect (1)[c::]:6789 error -101 [ 377.533759][ T5766] libceph: mon0 (1)[c::]:6789 connect error [ 377.893636][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 377.956875][ T7598] ceph: No mds server is up or the cluster is laggy [ 377.969789][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 378.492503][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 378.960680][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.967328][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 378.973495][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.880055][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 380.905385][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'. [ 380.930882][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.356'. [ 380.959929][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'. [ 381.278141][ T7617] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 385.384510][ T7627] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 389.885004][ T7640] sd 0:0:1:0: PR command failed: 1026 [ 389.890866][ T7640] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 389.897788][ T7640] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 395.197815][ T7665] netlink: 28 bytes leftover after parsing attributes in process `syz.1.370'. [ 398.306238][ T7681] syz.0.372: attempt to access beyond end of device [ 398.306238][ T7681] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 401.003805][ T7700] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 401.682357][ T7706] sd 0:0:1:0: PR command failed: 1026 [ 401.688077][ T7706] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 401.695032][ T7706] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 402.708108][ T7709] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 403.816583][ T7719] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop0": -EINTR [ 405.587052][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 405.776643][ T7717] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 405.917434][ T7729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.381'. [ 407.423331][ T7742] tmpfs: Unknown parameter './tracing' [ 407.604483][ T6656] udevd[6656]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 407.953031][ T7744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.385'. [ 408.364103][ T7752] sd 0:0:1:0: PR command failed: 1026 [ 408.369902][ T7752] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 408.376875][ T7752] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 409.607469][ T7761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.380'. [ 410.911383][ T7765] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 413.069519][ T6656] udevd[6656]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 413.469091][ T7776] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 414.672139][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 414.700901][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 414.733649][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 414.759778][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 418.250101][ T1207] libceph: connect (1)[c::]:6789 error -101 [ 418.256170][ T1207] libceph: mon0 (1)[c::]:6789 connect error [ 418.477294][ T7804] netlink: 28 bytes leftover after parsing attributes in process `syz.4.398'. [ 418.563459][ T1207] libceph: connect (1)[c::]:6789 error -101 [ 418.570903][ T1207] libceph: mon0 (1)[c::]:6789 connect error [ 419.527053][ T7797] ceph: No mds server is up or the cluster is laggy [ 419.563265][ T1207] libceph: connect (1)[c::]:6789 error -101 [ 419.569410][ T1207] libceph: mon0 (1)[c::]:6789 connect error [ 419.722891][ T7806] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 420.091755][ T7809] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 420.988174][ T7812] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 422.728385][ T7823] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 424.154662][ T7829] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 424.494131][ T7825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.406'. [ 425.156518][ T7833] binder: 7831:7833 ioctl c0306201 0 returned -14 [ 426.484284][ T7844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.409'. [ 427.572489][ T7839] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 427.742610][ T8] libceph: connect (1)[c::]:6789 error -101 [ 427.759287][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 428.884387][ T5766] libceph: connect (1)[c::]:6789 error -101 [ 428.907814][ T5766] libceph: mon0 (1)[c::]:6789 connect error [ 429.505257][ T5099] libceph: connect (1)[c::]:6789 error -101 [ 429.511455][ T5099] libceph: mon0 (1)[c::]:6789 connect error [ 429.519540][ T7846] ceph: No mds server is up or the cluster is laggy [ 429.780804][ T7859] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 430.112227][ T7864] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 434.792592][ T7882] syz.0.421: attempt to access beyond end of device [ 434.792592][ T7882] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 435.713590][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 435.759886][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.411'. [ 435.769238][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 435.813100][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.411'. [ 436.739904][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 436.924835][ T5766] libceph: connect (1)[c::]:6789 error -101 [ 436.939929][ T5766] libceph: mon0 (1)[c::]:6789 connect error [ 438.794478][ T7898] ceph: No mds server is up or the cluster is laggy [ 440.354129][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.360594][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.810573][ T7914] batadv_slave_1: entered promiscuous mode [ 441.325881][ T7908] batadv_slave_1: left promiscuous mode [ 445.142281][ T7939] sd 0:0:1:0: PR command failed: 1026 [ 445.148180][ T7939] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 445.155373][ T7939] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 446.020673][ T7938] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 448.537454][ T7950] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 448.590557][ T7948] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 456.249949][ T7977] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop2": -EINTR [ 460.929685][ T8004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.446'. [ 464.154819][ T8016] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 465.402923][ T8027] batadv_slave_1: entered promiscuous mode [ 465.560422][ T8021] batadv_slave_1: left promiscuous mode [ 469.668303][ T8050] netlink: 28 bytes leftover after parsing attributes in process `syz.4.457'. [ 474.789247][ T8070] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 477.713370][ T8091] sd 0:0:1:0: PR command failed: 1026 [ 477.719064][ T8091] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 477.726093][ T8091] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 478.198151][ T8094] netlink: 28 bytes leftover after parsing attributes in process `syz.4.467'. [ 486.794771][ T8136] sd 0:0:1:0: PR command failed: 1026 [ 486.800592][ T8136] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 486.807603][ T8136] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 488.271989][ T8144] 9pnet_fd: Insufficient options for proto=fd [ 490.443627][ T8151] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop0": -EINTR [ 492.071039][ T8161] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 492.727654][ T8168] batadv_slave_1: entered promiscuous mode [ 493.302167][ T8165] batadv_slave_1: left promiscuous mode [ 495.721046][ T8178] sd 0:0:1:0: PR command failed: 1026 [ 495.726742][ T8178] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 495.733837][ T8178] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 496.937891][ T8185] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 498.892278][ T8190] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 502.020485][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.026890][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.141033][ T8207] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 503.631898][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 503.638033][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 503.947088][ T8218] sd 0:0:1:0: PR command failed: 1026 [ 503.953100][ T8218] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 503.960581][ T8218] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 504.157090][ T5099] libceph: connect (1)[c::]:6789 error -101 [ 504.163312][ T5099] libceph: mon0 (1)[c::]:6789 connect error [ 504.371901][ T8216] ceph: No mds server is up or the cluster is laggy [ 508.560877][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.507'. [ 509.980132][ T8257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.510'. [ 511.465372][ T7999] libceph: connect (1)[c::]:6789 error -101 [ 511.471744][ T7999] libceph: mon0 (1)[c::]:6789 connect error [ 511.606604][ T8259] ceph: No mds server is up or the cluster is laggy [ 512.365322][ T8268] sd 0:0:1:0: PR command failed: 1026 [ 512.371059][ T8268] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 512.378884][ T8268] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 513.384762][ T8282] 9pnet_fd: Insufficient options for proto=fd [ 518.081379][ T8295] batadv_slave_1: entered promiscuous mode [ 518.749069][ T8292] batadv_slave_1: left promiscuous mode [ 520.261619][ T8300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.519'. [ 521.004810][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.2.520'. [ 528.734769][ T8348] batadv_slave_1: entered promiscuous mode [ 529.213790][ T8341] batadv_slave_1: left promiscuous mode [ 529.988066][ T8350] syz.2.528: attempt to access beyond end of device [ 529.988066][ T8350] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 531.464510][ T8368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'. [ 531.717081][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 531.785878][ T8372] sd 0:0:1:0: PR command failed: 1026 [ 531.791848][ T8372] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 531.798884][ T8372] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 532.622879][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 532.654068][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 532.929994][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 533.713351][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 533.737344][ T8374] ceph: No mds server is up or the cluster is laggy [ 533.998476][ T8388] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 534.921483][ T8401] batadv_slave_1: entered promiscuous mode [ 535.466379][ T8392] batadv_slave_1: left promiscuous mode [ 537.723451][ T8418] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 540.917158][ T8434] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 544.493375][ T8454] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 547.783549][ T8467] netlink: 20 bytes leftover after parsing attributes in process `syz.0.556'. [ 549.533502][ T6656] udevd[6656]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 550.310726][ T8486] batadv_slave_1: entered promiscuous mode [ 550.799316][ T8481] batadv_slave_1: left promiscuous mode [ 551.912167][ T8502] batadv_slave_1: entered promiscuous mode [ 552.453268][ T8494] batadv_slave_1: left promiscuous mode [ 554.073078][ T8507] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop0": -EINTR [ 554.194355][ T8513] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 555.212189][ T8517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.564'. [ 556.259778][ T8506] Bluetooth: hci4: command 0x0406 tx timeout [ 556.681556][ T8523] batadv_slave_1: entered promiscuous mode [ 557.232066][ T8518] batadv_slave_1: left promiscuous mode [ 562.758014][ T8561] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop4": -EINTR [ 562.942378][ T8572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.575'. [ 563.331951][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.338561][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.349625][ T8506] Bluetooth: hci4: command 0x0406 tx timeout [ 567.698108][ T8590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.579'. [ 568.949448][ T8598] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 570.504086][ T8602] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 570.660915][ T6656] udevd[6656]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 570.894886][ T6656] udevd[6656]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 571.691070][ T5099] libceph: connect (1)[c::]:6789 error -101 [ 571.697246][ T5099] libceph: mon0 (1)[c::]:6789 connect error [ 571.727395][ T8612] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop4": -EINTR [ 572.664648][ T8617] ceph: No mds server is up or the cluster is laggy [ 572.700577][ T5099] libceph: connect (1)[c::]:6789 error -101 [ 572.706730][ T5099] libceph: mon0 (1)[c::]:6789 connect error [ 576.331691][ T8654] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 577.255340][ T8655] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop1": -EINTR [ 578.817563][ T8664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.595'. [ 579.253825][ T7999] libceph: connect (1)[c::]:6789 error -101 [ 579.271012][ T7999] libceph: mon0 (1)[c::]:6789 connect error [ 579.599259][ T7999] libceph: connect (1)[c::]:6789 error -101 [ 579.624322][ T7999] libceph: mon0 (1)[c::]:6789 connect error [ 580.046658][ T8669] ceph: No mds server is up or the cluster is laggy [ 582.228757][ T7999] libceph: connect (1)[c::]:6789 error -101 [ 582.236144][ T7999] libceph: mon0 (1)[c::]:6789 connect error [ 584.004723][ T8700] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 584.367655][ T8701] batadv_slave_1: entered promiscuous mode [ 584.419932][ T8701] vlan2: entered allmulticast mode [ 584.432786][ T8701] bond0: entered allmulticast mode [ 584.438190][ T8701] bond_slave_0: entered allmulticast mode [ 584.444173][ T8701] bond_slave_1: entered allmulticast mode [ 584.563717][ T8696] batadv_slave_1: left promiscuous mode [ 584.903906][ T8703] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 587.012293][ T8711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.608'. [ 590.589797][ T8725] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 592.953034][ T8738] batadv_slave_1: entered promiscuous mode [ 593.453712][ T8735] batadv_slave_1: left promiscuous mode [ 594.022521][ T8744] batadv_slave_1: entered promiscuous mode [ 594.566203][ T8739] batadv_slave_1: left promiscuous mode [ 596.846148][ T8753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.613'. [ 598.940483][ T6656] udevd[6656]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 599.783852][ T8766] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 600.328063][ T8772] syz.0.622: attempt to access beyond end of device [ 600.328063][ T8772] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 600.500709][ T8782] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 601.781244][ T8792] netlink: 28 bytes leftover after parsing attributes in process `syz.4.620'. [ 603.008595][ T8796] batadv_slave_1: entered promiscuous mode [ 603.119275][ T8794] batadv_slave_1: left promiscuous mode [ 608.060442][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 608.066759][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 608.169897][ T8822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.637'. [ 608.340348][ T5847] libceph: connect (1)[c::]:6789 error -101 [ 608.353023][ T5847] libceph: mon0 (1)[c::]:6789 connect error [ 608.481885][ T6656] udevd[6656]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 608.609949][ T8823] ceph: No mds server is up or the cluster is laggy [ 615.667991][ T8855] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 616.007106][ T8857] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 616.920785][ T8867] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 618.768531][ T8875] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 620.033738][ T8887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.645'. [ 621.306217][ T8890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.400735][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.536733][ T8895] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 624.424633][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 624.442300][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 624.674934][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.681447][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.822081][ T8813] libceph: connect (1)[c::]:6789 error -101 [ 625.095893][ T8902] ceph: No mds server is up or the cluster is laggy [ 626.336181][ T8813] libceph: mon0 (1)[c::]:6789 connect error [ 626.830125][ T8916] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 627.710955][ T8925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.663'. [ 632.870910][ T8943] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 633.488373][ T8951] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 633.593351][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 633.611285][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 633.632846][ T8949] ceph: No mds server is up or the cluster is laggy [ 633.990104][ T8963] netlink: 64 bytes leftover after parsing attributes in process `syz.0.667'. [ 634.681000][ T8960] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop0": -EINTR [ 635.911464][ T8969] netlink: 28 bytes leftover after parsing attributes in process `syz.4.674'. [ 636.908168][ T23] libceph: connect (1)[c::]:6789 error -101 [ 636.994055][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 637.733876][ T23] libceph: connect (1)[c::]:6789 error -101 [ 637.740488][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 637.746534][ T8977] ceph: No mds server is up or the cluster is laggy [ 638.184585][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 638.194796][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 638.599801][ T8989] vlan2: entered allmulticast mode [ 638.605072][ T8989] bond0: entered allmulticast mode [ 638.610367][ T8989] bond_slave_0: entered allmulticast mode [ 638.616176][ T8989] bond_slave_1: entered allmulticast mode [ 640.405161][ T9006] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop0": -EINTR [ 640.451298][ T9005] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 641.729831][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 642.730442][ T9022] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop0": -EINTR [ 642.884650][ T9031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.684'. [ 643.969696][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 645.395197][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 645.493377][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 645.860200][ T1207] libceph: connect (1)[c::]:6789 error -101 [ 645.870693][ T1207] libceph: mon0 (1)[c::]:6789 connect error [ 645.944227][ T9042] ceph: No mds server is up or the cluster is laggy [ 646.165739][ T9051] binder: 9048:9051 ioctl c0306201 0 returned -14 [ 646.226510][ T8] libceph: connect (1)[c::]:6789 error -101 [ 646.237979][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 646.277823][ T9054] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 646.307852][ T9053] ceph: No mds server is up or the cluster is laggy [ 647.445337][ T9061] binder: BINDER_SET_CONTEXT_MGR already set [ 647.464400][ T9061] binder: 9060:9061 ioctl 4018620d 200000004a80 returned -16 [ 647.542288][ T9063] binder: 9060:9063 ioctl c0306201 0 returned -14 [ 649.091521][ T9077] sd 0:0:1:0: PR command failed: 1026 [ 649.097417][ T9077] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 649.104581][ T9077] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 649.937074][ T9079] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 651.446058][ T8] libceph: connect (1)[c::]:6789 error -101 [ 651.452267][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 651.469745][ T9084] ceph: No mds server is up or the cluster is laggy [ 652.143091][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 652.149288][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 652.702661][ T9102] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 655.874102][ T9125] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 655.957518][ T9124] sd 0:0:1:0: PR command failed: 1026 [ 655.963353][ T9124] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 655.970489][ T9124] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 657.948893][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 658.657396][ T9138] ceph: No mds server is up or the cluster is laggy [ 658.683604][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 659.030423][ T9143] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 665.063930][ T9167] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 665.699609][ T9172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.721'. [ 666.668414][ T9175] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 667.447138][ T9184] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 667.802684][ T8] libceph: connect (1)[c::]:6789 error -101 [ 667.830973][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 667.865136][ T9187] ceph: No mds server is up or the cluster is laggy [ 668.129580][ T9194] sd 0:0:1:0: PR command failed: 1026 [ 668.135280][ T9194] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 668.142390][ T9194] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 671.648475][ T9209] binder: 9208:9209 ioctl c0306201 0 returned -14 [ 671.712215][ T9210] binder: 9208:9210 ioctl c0306201 0 returned -14 [ 671.926130][ T9214] netlink: 28 bytes leftover after parsing attributes in process `syz.1.731'. [ 674.739604][ T9228] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 675.093356][ T9237] overlayfs: failed to resolve './file2': -2 [ 675.136897][ T5099] libceph: connect (1)[c::]:6789 error -101 [ 675.147878][ T5099] libceph: mon0 (1)[c::]:6789 connect error [ 675.496941][ T9232] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 675.517203][ T5099] libceph: connect (1)[c::]:6789 error -101 [ 675.552552][ T8506] Bluetooth: hci4: command 0x0406 tx timeout [ 675.597773][ T5099] libceph: mon0 (1)[c::]:6789 connect error [ 675.893466][ T9237] ceph: No mds server is up or the cluster is laggy [ 675.917766][ T9236] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 677.333291][ T9260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.740'. [ 678.994519][ T9267] binder: 9264:9267 ioctl c0306201 0 returned -14 [ 679.406554][ T9270] binder: 9264:9270 ioctl c0306201 0 returned -14 [ 682.748466][ T9289] vlan2: entered allmulticast mode [ 682.753888][ T9289] bond0: entered allmulticast mode [ 682.759116][ T9289] bond_slave_0: entered allmulticast mode [ 682.765149][ T9289] bond_slave_1: entered allmulticast mode [ 683.614123][ T9290] overlayfs: failed to resolve './file2': -2 [ 684.258861][ T9293] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 684.503902][ T9301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.750'. [ 686.163632][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.177671][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.548548][ T9315] binder: 9309:9315 ioctl c0306201 0 returned -14 [ 689.761020][ T9319] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 690.116954][ T9333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.759'. [ 691.650798][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 691.748007][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 692.082320][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 692.186575][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 692.353440][ T9338] ceph: No mds server is up or the cluster is laggy [ 693.762531][ T9362] binder: 9360:9362 ioctl c0306201 0 returned -14 [ 694.857774][ T9372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.768'. [ 696.762169][ T9366] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 697.288715][ T9380] batadv_slave_1: entered promiscuous mode [ 697.302419][ T9381] vlan2: entered allmulticast mode [ 697.307685][ T9381] bond0: entered allmulticast mode [ 697.314089][ T9381] bond_slave_0: entered allmulticast mode [ 697.319938][ T9381] bond_slave_1: entered allmulticast mode [ 697.326658][ T9380] batadv_slave_1: left promiscuous mode [ 702.146012][ T9411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.778'. [ 703.240348][ T9404] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 704.503202][ T9419] binder: 9414:9419 ioctl c0306201 0 returned -14 [ 705.257496][ T9425] batadv_slave_1: entered promiscuous mode [ 705.724680][ T9422] batadv_slave_1: left promiscuous mode [ 713.200354][ T9466] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 717.346946][ T9495] netlink: 52 bytes leftover after parsing attributes in process `syz.4.800'. [ 717.522529][ T9493] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop4": -EINTR [ 720.773083][ T9516] sd 0:0:1:0: PR command failed: 1026 [ 720.788871][ T9516] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 720.796124][ T9516] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 722.470872][ T9531] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 724.635425][ T5099] libceph: connect (1)[c::]:6789 error -101 [ 724.731496][ T5099] libceph: mon0 (1)[c::]:6789 connect error [ 725.201597][ T9556] binder: 9555:9556 ioctl 4018620d 0 returned -22 [ 725.228705][ T9551] ceph: No mds server is up or the cluster is laggy [ 725.229146][ T5099] libceph: connect (1)[c::]:6789 error -101 [ 725.261532][ T9557] binder: 9555:9557 ioctl c0306201 0 returned -14 [ 725.296220][ T5099] libceph: mon0 (1)[c::]:6789 connect error [ 725.810355][ T5099] libceph: connect (1)[c::]:6789 error -101 [ 725.939889][ T5099] libceph: mon0 (1)[c::]:6789 connect error [ 729.895376][ T9577] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 730.356875][ T9581] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 732.174844][ T9591] overlayfs: missing 'lowerdir' [ 732.824919][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 732.923567][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 732.942637][ T9592] ceph: No mds server is up or the cluster is laggy [ 733.891139][ T9612] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 735.759748][ T8506] Bluetooth: hci4: command 0x0406 tx timeout [ 735.846786][ T9622] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 738.875890][ T9645] overlayfs: missing 'lowerdir' [ 739.235994][ T23] libceph: connect (1)[c::]:6789 error -101 [ 739.285294][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 739.417191][ T9646] ceph: No mds server is up or the cluster is laggy [ 744.465430][ T9675] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 745.069552][ T8506] Bluetooth: hci4: command 0x0406 tx timeout [ 746.097694][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 746.104567][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 746.679753][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 746.724667][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 747.063112][ T9687] ceph: No mds server is up or the cluster is laggy [ 747.501703][ T9702] sd 0:0:1:0: PR command failed: 1026 [ 747.507376][ T9702] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 747.514488][ T9702] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 747.555856][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.562583][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.204587][ T9706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.847'. [ 752.180979][ T9713] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 755.417306][ T9733] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 756.972034][ T9740] sd 0:0:1:0: PR command failed: 1026 [ 756.977716][ T9740] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 756.984834][ T9740] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 757.943487][ T9744] netlink: 28 bytes leftover after parsing attributes in process `syz.2.859'. [ 759.584889][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 760.057478][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'. [ 760.116512][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 760.255921][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'. [ 760.314132][ T9751] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 762.748626][ T9778] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 764.812039][ T9783] binder: 9782:9783 ioctl 4018620d 0 returned -22 [ 764.899933][ T9786] binder: 9782:9786 ioctl c0306201 0 returned -14 [ 768.030992][ T9800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.871'. [ 769.201418][ T9805] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 771.820139][ T9819] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 773.835102][ T9831] overlayfs: missing 'lowerdir' [ 773.926674][ T8813] libceph: connect (1)[c::]:6789 error -101 [ 774.043620][ T8813] libceph: mon0 (1)[c::]:6789 connect error [ 774.053031][ T9831] ceph: No mds server is up or the cluster is laggy [ 774.757901][ T9841] batadv_slave_1: entered promiscuous mode [ 774.774854][ T9840] binder: 9837:9840 ioctl c0306201 0 returned -14 [ 775.292059][ T9835] batadv_slave_1: left promiscuous mode [ 776.191604][ T9844] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 779.448876][ T9863] syz.4.886: attempt to access beyond end of device [ 779.448876][ T9863] loop4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 781.130824][ T9881] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 781.140300][ T9881] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 781.314740][ T8506] Bluetooth: hci4: command 0x0406 tx timeout [ 781.897545][ T9883] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 781.938124][ T9877] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 783.883411][ T27] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 784.143807][ T27] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 784.164967][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.192829][ T27] usb 5-1: Product: syz [ 784.197109][ T27] usb 5-1: Manufacturer: syz [ 784.218488][ T27] usb 5-1: SerialNumber: syz [ 784.271730][ T27] usb 5-1: config 0 descriptor?? [ 784.329781][ T27] usb 5-1: Waiting for MOTU Microbook II to boot up... [ 784.337069][ T27] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22 [ 784.359621][ T27] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 785.668596][ T7999] usb 5-1: USB disconnect, device number 2 [ 789.666441][ T9935] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 792.198823][ T9945] netlink: 20 bytes leftover after parsing attributes in process `syz.2.903'. [ 793.452969][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 793.482359][ T6656] udevd[6656]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 793.502976][ T9953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.905'. [ 793.523882][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 793.538800][ T9953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.905'. [ 798.588030][ T9978] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 798.597617][ T9978] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 798.828506][ T9979] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 799.843339][ T9988] batadv_slave_1: entered promiscuous mode [ 800.314088][ T9982] batadv_slave_1: left promiscuous mode [ 805.343501][T10002] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 805.999748][T10006] sd 0:0:1:0: PR command failed: 1026 [ 806.005492][T10006] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 806.012651][T10006] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 806.852602][T10008] netlink: 20 bytes leftover after parsing attributes in process `syz.4.919'. [ 807.962725][ T6683] udevd[6683]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 809.246253][T10027] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 809.255792][T10027] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 809.724524][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.732225][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.801204][T10029] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 813.753503][T10048] netlink: 240 bytes leftover after parsing attributes in process `syz.1.924'. [ 817.957479][T10072] sd 0:0:1:0: PR command failed: 1026 [ 817.963068][T10072] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 817.969918][T10072] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 818.284610][T10078] syz.1.932: attempt to access beyond end of device [ 818.284610][T10078] loop1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 819.215145][T10090] overlayfs: missing 'lowerdir' [ 819.288283][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 819.344847][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 819.702228][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 819.818213][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 820.060606][T10090] ceph: No mds server is up or the cluster is laggy [ 820.195262][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 828.020286][T10114] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 830.319072][T10129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.941'. [ 832.158715][T10137] netlink: 40 bytes leftover after parsing attributes in process `syz.1.944'. [ 832.168292][T10137] nbd: must specify at least one socket [ 832.931417][ T6656] udevd[6656]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 833.179286][T10148] sd 0:0:1:0: PR command failed: 1026 [ 833.185279][T10148] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 833.192415][T10148] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 835.904495][T10151] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 837.799663][ T27] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 838.084697][ T27] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 838.187096][T10163] syz.0.948: attempt to access beyond end of device [ 838.187096][T10163] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 838.529611][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.579581][ T27] usb 2-1: Product: syz [ 838.588451][ T27] usb 2-1: Manufacturer: syz [ 838.642462][ T27] usb 2-1: SerialNumber: syz [ 838.660577][ T27] usb 2-1: config 0 descriptor?? [ 838.672482][ T27] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 838.679659][ T27] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 838.687936][ T27] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 840.796003][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 840.825345][ T8813] usb 2-1: USB disconnect, device number 2 [ 841.272686][T10178] ceph: No mds server is up or the cluster is laggy [ 841.370141][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 841.376294][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 841.585537][T10184] overlayfs: missing 'lowerdir' [ 841.683492][ T8813] libceph: connect (1)[c::]:6789 error -101 [ 841.782426][ T8813] libceph: mon0 (1)[c::]:6789 connect error [ 842.122264][ T8] libceph: connect (1)[c::]:6789 error -101 [ 842.196760][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 842.324014][T10184] ceph: No mds server is up or the cluster is laggy [ 842.731335][T10193] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 843.498319][T10194] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 844.716462][T10204] ceph: No mds server is up or the cluster is laggy [ 844.749433][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 844.880239][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 847.598775][T10218] binder: BINDER_SET_CONTEXT_MGR already set [ 847.606385][T10218] binder: 10217:10218 ioctl 4018620d 200000004a80 returned -16 [ 847.694385][T10222] binder: 10217:10222 ioctl c0306201 0 returned -14 [ 847.859140][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.963'. [ 849.022244][T10235] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 854.762632][T10253] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 854.937296][T10261] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 855.034336][T10262] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 855.147153][T10265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.973'. [ 857.410923][T10277] overlayfs: missing 'workdir' [ 858.083104][ T8] libceph: connect (1)[c::]:6789 error -101 [ 858.182602][T10278] ceph: No mds server is up or the cluster is laggy [ 858.444021][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 858.492098][T10276] syz.2.974: attempt to access beyond end of device [ 858.492098][T10276] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 859.762426][T10296] netlink: 40 bytes leftover after parsing attributes in process `syz.2.979'. [ 860.423782][T10301] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 861.350202][T10305] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 865.080033][T10320] sd 0:0:1:0: PR command failed: 1026 [ 865.085704][T10320] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 865.092905][T10320] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 867.623491][T10341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.984'. [ 870.160481][T10347] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 870.435604][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.442741][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.660265][T10349] fuse: Bad value for 'rootmode' [ 880.118237][ T8813] libceph: connect (1)[c::]:6789 error -101 [ 880.234718][ T8813] libceph: mon0 (1)[c::]:6789 connect error [ 880.704963][ T8813] libceph: connect (1)[c::]:6789 error -101 [ 880.760528][T10383] ceph: No mds server is up or the cluster is laggy [ 880.767482][ T8813] libceph: mon0 (1)[c::]:6789 connect error [ 883.119643][ T5820] libceph: connect (1)[c::]:6789 error -101 [ 883.165030][ T5820] libceph: mon0 (1)[c::]:6789 connect error [ 883.260807][T10395] ceph: No mds server is up or the cluster is laggy [ 889.291696][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'. [ 889.590470][T10422] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 894.953332][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 897.596066][T10460] overlayfs: failed to resolve './file2': -2 [ 897.698915][T10460] ceph: No mds server is up or the cluster is laggy [ 897.711417][ T8813] libceph: connect (1)[c::]:6789 error -101 [ 897.825224][ T8813] libceph: mon0 (1)[c::]:6789 connect error [ 898.610528][T10467] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1022'. [ 902.151597][T10492] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop0": -EINTR [ 903.709601][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 906.335469][T10519] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop1": -EINTR [ 908.226435][T10494] Bluetooth: hci4: command 0x0406 tx timeout [ 915.174833][T10569] fuse: Invalid rootmode [ 915.334107][T10568] syzkaller0: entered promiscuous mode [ 915.494233][T10568] syzkaller0: entered allmulticast mode [ 918.212901][T10577] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 921.350611][T10589] binder: 10588:10589 ioctl c0306201 0 returned -14 [ 928.480602][T10607] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 933.020771][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.029510][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 940.523783][T10650] syz.0.1061: attempt to access beyond end of device [ 940.523783][T10650] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 943.769739][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 949.120931][T10688] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 952.096708][T10694] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 953.381596][T10700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1076'. [ 953.704004][T10417] udevd[10417]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 953.992514][T10714] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1069'. [ 954.087483][T10709] syz.2.1069: attempt to access beyond end of device [ 954.087483][T10709] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 955.871133][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 956.147225][T10725] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 960.215509][T10745] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 961.620154][ T23] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 963.742777][ T23] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 965.061725][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.078775][ T23] usb 1-1: Product: syz [ 965.083078][ T23] usb 1-1: Manufacturer: syz [ 965.088721][ T23] usb 1-1: SerialNumber: syz [ 965.097178][ T23] usb 1-1: config 0 descriptor?? [ 965.242881][ T23] usb 1-1: can't set config #0, error -71 [ 965.257509][T10762] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 965.296513][ T23] usb 1-1: USB disconnect, device number 2 [ 969.353753][T10778] batadv_slave_1: entered promiscuous mode [ 969.928834][T10775] batadv_slave_1: left promiscuous mode [ 974.585836][T10798] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 975.543900][T10803] binder: 10802:10803 ioctl c0306201 0 returned -14 [ 978.690607][T10814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1098'. [ 978.827218][T10826] syz.2.1098: attempt to access beyond end of device [ 978.827218][T10826] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 980.189950][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 981.905270][T10851] netlink: 'syz.4.1103': attribute type 1 has an invalid length. [ 985.322714][T10858] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 986.094326][T10856] autofs4:pid:10856:autofs_fill_super: called with bogus options [ 992.335718][T10882] netlink: 'syz.0.1114': attribute type 1 has an invalid length. [ 993.400017][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.406406][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1001.182689][T10907] batadv_slave_1: entered promiscuous mode [ 1001.778981][T10904] batadv_slave_1: left promiscuous mode [ 1012.357328][T10931] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 1013.031608][T10938] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1018.161476][T10960] batadv_slave_1: entered promiscuous mode [ 1018.325588][T10954] batadv_slave_1: left promiscuous mode [ 1021.152316][T10972] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1136'. [ 1021.182948][T10972] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1136'. [ 1021.466057][T10976] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1024.500841][T10985] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1027.627597][T11002] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1145'. [ 1027.647153][T11002] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1145'. [ 1027.879495][ T8] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 1028.599538][ T8] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 1029.299493][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.316674][ T8] usb 5-1: Product: syz [ 1029.325830][ T8] usb 5-1: Manufacturer: syz [ 1029.426670][ T8] usb 5-1: SerialNumber: syz [ 1029.439186][ T8] usb 5-1: config 0 descriptor?? [ 1029.456260][ T8] usb 5-1: Waiting for MOTU Microbook II to boot up... [ 1029.464153][ T8] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1029.474257][ T8] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 1030.596871][T11018] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1030.902503][T11023] batadv_slave_1: entered promiscuous mode [ 1031.076967][T11014] batadv_slave_1: left promiscuous mode [ 1033.803029][ T7999] usb 5-1: USB disconnect, device number 3 [ 1033.854024][T11021] syz.1.1148 (11021) used greatest stack depth: 19960 bytes left [ 1033.958903][T11030] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1037.378320][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1038.159532][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1038.243901][T11060] ceph: No mds server is up or the cluster is laggy [ 1039.398524][T11068] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 1039.411485][T11073] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1039.592354][T11078] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1164'. [ 1039.615068][T11078] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1164'. [ 1043.355729][T11104] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1043.578564][T11111] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1045.117773][T11118] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1046.067241][T11122] netlink: 'syz.4.1177': attribute type 1 has an invalid length. [ 1049.250835][ T8813] libceph: connect (1)[c::]:6789 error -101 [ 1049.842435][T11138] ceph: No mds server is up or the cluster is laggy [ 1049.887707][ T8813] libceph: mon0 (1)[c::]:6789 connect error [ 1051.189996][T11150] autofs4:pid:11150:autofs_fill_super: called with bogus options [ 1051.360523][T11157] netlink: 'syz.0.1188': attribute type 1 has an invalid length. [ 1055.125792][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.132279][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.406796][T11169] autofs4:pid:11169:autofs_fill_super: called with bogus options [ 1055.808209][T11178] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1058.374549][T11185] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1060.540953][T11194] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 1060.570225][T11196] autofs4:pid:11196:autofs_fill_super: called with bogus options [ 1062.978016][T11205] sd 0:0:1:0: PR command failed: 1026 [ 1062.984018][T11205] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1062.990816][T11205] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1064.427823][T11214] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1065.587435][T11218] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1067.170886][T11225] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1068.958550][T11229] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1069.137487][T11237] autofs4:pid:11237:autofs_fill_super: called with bogus options [ 1071.296018][T11233] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1075.233440][T11249] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1076.062146][T11261] batadv_slave_1: entered promiscuous mode [ 1076.512785][T11256] batadv_slave_1: left promiscuous mode [ 1077.384615][T11272] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1079.179108][T11275] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1080.882335][T11286] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1081.854330][T10494] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1081.864470][T10494] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1081.873365][T10494] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1081.882436][T10494] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1081.890776][T10494] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1081.898246][T10494] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1082.059437][ T23] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 1082.954333][ T23] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 1082.963621][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.977003][ T23] usb 5-1: Product: syz [ 1083.030687][ T23] usb 5-1: Manufacturer: syz [ 1083.035500][ T23] usb 5-1: SerialNumber: syz [ 1083.081069][ T23] usb 5-1: config 0 descriptor?? [ 1083.165926][ T23] usb 5-1: Waiting for MOTU Microbook II to boot up... [ 1083.204485][ T23] usb 5-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1083.239601][ T23] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 1083.680980][T11304] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1083.911287][T11289] chnl_net:caif_netlink_parms(): no params data found [ 1083.950203][T10494] Bluetooth: hci1: command tx timeout [ 1086.045914][T10494] Bluetooth: hci1: command tx timeout [ 1086.230807][ T23] usb 5-1: USB disconnect, device number 4 [ 1088.125773][T10494] Bluetooth: hci1: command tx timeout [ 1088.164076][T11289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.325238][T11289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.333149][T11289] bridge_slave_0: entered allmulticast mode [ 1088.341071][T11289] bridge_slave_0: entered promiscuous mode [ 1088.350916][T11289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.358230][T11289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.366171][T11289] bridge_slave_1: entered allmulticast mode [ 1088.374025][T11289] bridge_slave_1: entered promiscuous mode [ 1088.693026][T11289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.771613][T11289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.920524][T11289] team0: Port device team_slave_0 added [ 1088.941149][T11289] team0: Port device team_slave_1 added [ 1089.602861][T11289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.614283][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.667403][T11289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.189626][T10494] Bluetooth: hci1: command tx timeout [ 1090.347454][T11323] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1090.421154][T11289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.490280][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1090.585948][T11289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.718464][T11289] hsr_slave_0: entered promiscuous mode [ 1090.739722][T11289] hsr_slave_1: entered promiscuous mode [ 1090.803823][T11289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1090.813833][T11289] Cannot create hsr debugfs directory [ 1091.152625][T11330] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1092.384403][T11334] binder: 11333:11334 ioctl c0306201 0 returned -14 [ 1092.767271][T11289] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1092.838510][T11289] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1093.224753][T11289] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1093.274310][T11289] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1093.618849][T11353] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1096.615496][T11289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.654145][T11289] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.767542][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.775989][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.822853][T11362] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1097.117962][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.125254][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1097.553480][T11289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1097.584546][T11364] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1238'. [ 1098.326106][T11375] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1099.033441][T10952] udevd[10952]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1100.018779][T11379] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1100.214460][T11289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1102.127440][T11400] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1104.905788][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 1104.939466][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'. [ 1105.206718][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 1105.236758][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'. [ 1105.382683][T11289] veth0_vlan: entered promiscuous mode [ 1105.443082][T11289] veth1_vlan: entered promiscuous mode [ 1105.552430][T11289] veth0_macvtap: entered promiscuous mode [ 1105.603222][T11289] veth1_macvtap: entered promiscuous mode [ 1105.697071][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1105.709427][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1105.855665][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1105.950334][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.086634][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.279072][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.419579][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1106.547557][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.650803][T11289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1106.792023][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1106.830022][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.847423][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1106.858150][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.868334][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1106.882299][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.892507][T11289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1106.903163][T11289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1106.915592][T11289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1106.956123][T11289] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.978270][T11289] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.987151][T11289] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.006580][T11289] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.393638][ T9459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.421861][ T9459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.436563][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.404564][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.246383][T11455] batadv_slave_1: entered promiscuous mode [ 1110.849761][T11450] batadv_slave_1: left promiscuous mode [ 1116.193662][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.202060][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.086964][T11486] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1123.220544][T11493] autofs4:pid:11493:autofs_fill_super: called with bogus options [ 1123.456269][T11495] autofs4:pid:11495:autofs_fill_super: called with bogus options [ 1126.077656][T11507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1267'. [ 1127.689534][T11511] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1129.784310][T11523] autofs4:pid:11523:autofs_fill_super: called with bogus options [ 1131.771779][T11283] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 1132.015035][T11536] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1132.100387][T11283] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 1132.241414][T11283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.325632][T11283] usb 1-1: Product: syz [ 1132.355769][T11283] usb 1-1: Manufacturer: syz [ 1132.379936][T11283] usb 1-1: SerialNumber: syz [ 1132.400821][T11283] usb 1-1: config 0 descriptor?? [ 1132.495040][T11283] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 1132.534965][T11283] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1132.595547][T11283] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 1132.965483][T11543] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1278'. [ 1134.044702][T11283] usb 1-1: USB disconnect, device number 3 [ 1135.279664][T11549] batadv_slave_1: entered promiscuous mode [ 1135.286437][T11549] batadv_slave_1: left promiscuous mode [ 1136.260769][T11552] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1137.253112][T11563] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1137.537630][T11571] autofs4:pid:11571:autofs_fill_super: called with bogus options [ 1138.290314][T11584] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1138.816631][T11589] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1139.145558][T11593] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1142.190636][ T1104] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.324413][ T1104] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.556805][ T1104] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.662059][ T1104] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.901828][ T1104] netdevsim netdevsim1 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1144.116729][ T1104] netdevsim netdevsim1 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1144.150013][T11611] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1144.259618][ T1104] netdevsim netdevsim1 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1144.324133][ T1104] netdevsim netdevsim1 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1144.692629][T11621] batadv_slave_1: entered promiscuous mode [ 1145.212122][T11617] batadv_slave_1: left promiscuous mode [ 1148.130344][T11647] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1304'. [ 1149.855182][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1306'. [ 1149.893588][T11663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1306'. [ 1149.908838][T11467] udevd[11467]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1149.939133][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1306'. [ 1149.981533][T11663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1306'. [ 1153.474255][ T1104] hsr_slave_0: left promiscuous mode [ 1153.761283][ T1104] hsr_slave_1: left promiscuous mode [ 1154.060647][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1154.068156][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1154.076650][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1154.084353][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1154.100227][ T1104] bridge_slave_1: left allmulticast mode [ 1154.105959][ T1104] bridge_slave_1: left promiscuous mode [ 1154.128035][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.224670][T11709] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1313'. [ 1154.335997][ T1104] bridge_slave_0: left allmulticast mode [ 1154.453432][ T1104] bridge_slave_0: left promiscuous mode [ 1154.610877][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.301039][T11717] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1157.378801][ T1104] veth1_macvtap: left promiscuous mode [ 1157.489459][ T1104] veth0_macvtap: left promiscuous mode [ 1157.501311][ T1104] veth1_vlan: left promiscuous mode [ 1157.519991][ T1104] veth0_vlan: left promiscuous mode [ 1157.970533][T11724] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1158.704741][T11728] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1161.220763][T11734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1318'. [ 1161.446738][T11467] udevd[11467]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1164.854104][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 1164.984236][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 1165.064313][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1165.078284][ T1104] bond_slave_1 (unregistering): left allmulticast mode [ 1165.165190][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1165.185543][ T1104] bond_slave_0 (unregistering): left allmulticast mode [ 1165.346128][T11756] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1324'. [ 1166.356020][ T1104] bond0 (unregistering): Released all slaves [ 1167.457566][T11763] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1171.982430][T11796] autofs4:pid:11796:autofs_fill_super: called with bogus options [ 1172.137263][T11803] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1335'. [ 1173.601829][T11800] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1177.810088][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.816525][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.095030][T11840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1344'. [ 1179.380484][T11846] autofs4:pid:11846:autofs_fill_super: called with bogus options [ 1181.793868][T11863] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1185.146664][T11878] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1191.110004][T11916] batadv_slave_1: entered promiscuous mode [ 1191.697212][T11912] batadv_slave_1: left promiscuous mode [ 1192.101213][T11926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1353'. [ 1196.268010][T11951] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1197.200288][T11957] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1198.342918][T11964] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1200.523359][T11974] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1206.868731][T12012] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1207.793720][T12042] batadv_slave_1: entered promiscuous mode [ 1208.329748][T12030] batadv_slave_1: left promiscuous mode [ 1208.619333][T10494] Bluetooth: hci1: link tx timeout [ 1208.625423][T10494] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1208.635065][T10494] Bluetooth: hci1: link tx timeout [ 1208.640299][T10494] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1208.714451][T12043] syz.5.1382: attempt to access beyond end of device [ 1208.714451][T12043] loop5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1210.589420][T12059] Can't find ip_set type hash:m [ 1211.086712][T12044] Bluetooth: hci1: command 0x0406 tx timeout [ 1213.014252][T12075] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1214.091987][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1389'. [ 1215.956177][T12044] Bluetooth: hci1: command 0x0406 tx timeout [ 1220.034085][T12108] autofs4:pid:12108:autofs_fill_super: called with bogus options [ 1224.046820][T12120] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1399'. [ 1231.836437][T12172] batadv_slave_1: entered promiscuous mode [ 1232.005658][T12159] batadv_slave_1: left promiscuous mode [ 1236.236583][T12197] autofs4:pid:12197:autofs_fill_super: called with bogus options [ 1236.295651][T12200] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1239.849931][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.856356][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.072566][T12237] Can't find ip_set type hash:m [ 1243.224318][T12235] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop4": -EINTR [ 1243.355720][T12252] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1244.570113][T12266] autofs4:pid:12266:autofs_fill_super: called with bogus options [ 1244.589342][T12044] Bluetooth: hci1: command 0x0406 tx timeout [ 1245.213664][T12276] batadv_slave_1: entered promiscuous mode [ 1245.780366][T12271] batadv_slave_1: left promiscuous mode [ 1247.883790][T12286] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 1248.429651][T12299] autofs4:pid:12299:autofs_fill_super: called with bogus options [ 1249.641860][T12306] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1250.097786][T12308] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 1252.040750][T12314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1439'. [ 1252.310799][T12327] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 1252.553330][T12016] udevd[12016]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1252.778654][T12336] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 1253.305765][T12358] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1444'. [ 1253.464620][T12354] syz.4.1444: attempt to access beyond end of device [ 1253.464620][T12354] loop4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1254.910927][T12368] autofs4:pid:12368:autofs_fill_super: called with bogus options [ 1255.160091][T10494] Bluetooth: hci1: command 0x0406 tx timeout [ 1264.285624][T12417] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1266.399845][T12442] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1272.107682][T12503] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1272.615668][T12516] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 1272.984042][T12526] batadv_slave_1: entered promiscuous mode [ 1273.518828][T12518] batadv_slave_1: left promiscuous mode [ 1275.970588][T12543] Can't find ip_set type has [ 1276.131829][T12541] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop4": -EINTR [ 1276.188737][T12551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1484'. [ 1277.896901][T12044] Bluetooth: hci1: command 0x0406 tx timeout [ 1277.900009][T12551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1484'. [ 1278.025750][T12557] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1278.092181][T12551] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1484'. [ 1278.154932][T12551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1484'. [ 1282.038906][T12579] fuse: Invalid rootmode [ 1282.094369][T12579] syzkaller0: entered promiscuous mode [ 1282.579318][T12579] syzkaller0: entered allmulticast mode [ 1291.277663][T12661] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1292.127180][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1507'. [ 1292.136697][T12667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1507'. [ 1292.147388][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1507'. [ 1292.157417][T12667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1507'. [ 1292.398703][T12672] socket: no more sockets [ 1292.406097][T12672] Failed to initialize the IGMP6 control socket (err -23) [ 1295.762828][T12688] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1296.789358][T12691] syz.5.1515: attempt to access beyond end of device [ 1296.789358][T12691] loop5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1298.669317][T10494] Bluetooth: hci1: command 0x0406 tx timeout [ 1299.265644][T12706] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1299.594975][T12709] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1300.513730][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.520297][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.908465][T12727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1513'. [ 1301.931739][T12727] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1513'. [ 1302.780160][T12739] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1303.432816][T12743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1529'. [ 1303.472935][T12743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1529'. [ 1303.504501][T12743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1529'. [ 1303.552285][T12746] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1303.607413][T12743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1529'. [ 1305.712742][T12754] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1531'. [ 1306.576933][T12773] batadv_slave_1: entered promiscuous mode [ 1306.740376][T12761] batadv_slave_1: left promiscuous mode [ 1308.469414][T12784] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1309.356566][T12665] udevd[12665]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1309.426738][T12786] ICMPv6: NDISC: Failed to initialize the control socket (err -105) [ 1311.245949][T12799] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1317.657425][ T23] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1318.606470][ T23] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 1318.635895][T12829] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1318.644783][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.702975][ T23] usb 6-1: Product: syz [ 1318.730788][ T23] usb 6-1: Manufacturer: syz [ 1318.735489][ T23] usb 6-1: SerialNumber: syz [ 1320.391107][ T23] usb 6-1: config 0 descriptor?? [ 1320.396760][ T23] usb 6-1: can't set config #0, error -71 [ 1320.478689][ T23] usb 6-1: USB disconnect, device number 2 [ 1325.959015][T12866] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1326.904621][T12873] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1327.327252][T12889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1567'. [ 1329.332162][T12665] udevd[12665]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1329.415276][T12896] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 1332.532768][T12912] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1332.572743][T12916] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1576'. [ 1332.599547][T12916] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1576'. [ 1333.261077][T12932] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1336.741805][T12948] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1337.481617][T12958] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1337.566013][T12955] autofs4:pid:12955:autofs_fill_super: called with bogus options [ 1340.525240][T12974] comedi comedi1: Minor 2 could not be opened [ 1340.833079][T12976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1593'. [ 1340.847728][T12984] autofs4:pid:12984:autofs_fill_super: called with bogus options [ 1342.820151][T12992] autofs4:pid:12992:autofs_fill_super: called with bogus options [ 1342.974711][T12995] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1343.177714][T12619] udevd[12619]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1343.728001][T12665] udevd[12665]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1346.394739][T13015] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1349.597101][T13029] ceph: No mds server is up or the cluster is laggy [ 1349.636028][ T5099] libceph: connect (1)[c::]:6789 error -101 [ 1349.748919][ T5099] libceph: mon0 (1)[c::]:6789 connect error [ 1350.185998][T13035] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 1353.009813][T13061] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1356.572734][T13077] ICMPv6: NDISC: Failed to initialize the control socket (err -105) [ 1359.724310][T13094] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1361.957301][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.963970][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.981304][T13101] syzkaller0: entered promiscuous mode [ 1361.986860][T13101] syzkaller0: entered allmulticast mode [ 1362.088236][T13101] tipc: Started in network mode [ 1362.106674][T13101] tipc: Node identity 9aceaa77be66, cluster identity 4711 [ 1362.132392][T13101] tipc: Enabled bearer , priority 0 [ 1362.188202][T13100] tipc: Resetting bearer [ 1362.305238][T13100] tipc: Disabling bearer [ 1363.695917][T13122] ceph: No mds server is up or the cluster is laggy [ 1363.709533][ T8813] libceph: connect (1)[c::]:6789 error -101 [ 1363.783024][ T8813] libceph: mon0 (1)[c::]:6789 connect error [ 1364.404008][ T8] libceph: connect (1)[c::]:6789 error -101 [ 1364.440966][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 1365.074155][T13132] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1365.657006][T13134] autofs4:pid:13134:autofs_fill_super: called with bogus options [ 1368.523335][T13150] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1369.471087][T13153] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1373.751409][ T27] libceph: connect (1)[c::]:6789 error -101 [ 1373.757533][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 1373.807878][T13173] ceph: No mds server is up or the cluster is laggy [ 1374.887316][T13181] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 1377.242164][T13189] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1392.854717][T13247] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1395.375008][T13256] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1406.404768][T13287] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1407.747363][T12044] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1407.758972][T12044] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1407.768617][T12044] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1407.777746][T12044] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1407.785636][T12044] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1407.801652][T12044] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1407.841767][T13297] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 1408.465116][T13307] syz.2.1681: attempt to access beyond end of device [ 1408.465116][T13307] loop2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1409.060533][T13311] Can't find ip_set type hash:ma [ 1410.083924][T10494] Bluetooth: hci3: command tx timeout [ 1410.648530][ T7999] libceph: connect (1)[c::]:6789 error -101 [ 1410.728234][ T7999] libceph: mon0 (1)[c::]:6789 connect error [ 1410.860024][T13321] ceph: No mds server is up or the cluster is laggy [ 1410.890958][ T7999] libceph: connect (1)[c::]:6789 error -101 [ 1410.976420][ T7999] libceph: mon0 (1)[c::]:6789 connect error [ 1411.533813][T13294] chnl_net:caif_netlink_parms(): no params data found [ 1412.119621][T10494] Bluetooth: hci3: command tx timeout [ 1412.730103][T13294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.737346][T13294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.769881][T13294] bridge_slave_0: entered allmulticast mode [ 1412.825526][T13294] bridge_slave_0: entered promiscuous mode [ 1413.119537][T13349] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1413.181946][T13348] autofs4:pid:13348:autofs_fill_super: called with bogus options [ 1413.492220][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.950235][T13294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.961818][T13294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.969118][T13294] bridge_slave_1: entered allmulticast mode [ 1413.976914][T13294] bridge_slave_1: entered promiscuous mode [ 1414.047968][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.338738][T10494] Bluetooth: hci3: command tx timeout [ 1415.713090][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.798011][T13294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1415.815802][T13294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1417.472927][T10494] Bluetooth: hci3: command tx timeout [ 1417.772274][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.168448][T13294] team0: Port device team_slave_0 added [ 1418.864507][ T49] netdevsim netdevsim4 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 1418.991437][T13294] team0: Port device team_slave_1 added [ 1419.043580][ T49] netdevsim netdevsim4 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 1419.313924][ T49] netdevsim netdevsim4 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 1419.430281][ T49] netdevsim netdevsim4 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 1419.495677][T13294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.519469][T13294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.625690][T13294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1419.668125][T13294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1419.689190][T13294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.774710][T13294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1420.089340][ T49] tipc: Left network mode [ 1422.283777][T13294] hsr_slave_0: entered promiscuous mode [ 1422.330476][T13294] hsr_slave_1: entered promiscuous mode [ 1422.340292][T13294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1422.348095][T13294] Cannot create hsr debugfs directory [ 1423.387746][T13410] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1423.400259][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.406730][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.573006][T13294] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1426.585453][T13294] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1430.302694][T13294] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1430.378561][T13294] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1431.204630][T13294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1431.433321][T13294] 8021q: adding VLAN 0 to HW filter on device team0 [ 1431.513650][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.520929][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1431.565375][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.572650][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1431.707683][ T49] hsr_slave_0: left promiscuous mode [ 1431.714253][ T49] hsr_slave_1: left promiscuous mode [ 1431.728801][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1431.742341][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1431.765404][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1431.787343][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1431.828162][ T49] bridge_slave_1: left allmulticast mode [ 1431.839048][ T49] bridge_slave_1: left promiscuous mode [ 1431.854070][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.888977][ T49] bridge_slave_0: left allmulticast mode [ 1431.900697][ T49] bridge_slave_0: left promiscuous mode [ 1431.996999][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.964829][T13451] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1433.329572][ T49] veth1_macvtap: left promiscuous mode [ 1433.345810][ T49] veth0_macvtap: left promiscuous mode [ 1433.353680][ T49] veth1_vlan: left promiscuous mode [ 1433.372125][ T49] veth0_vlan: left promiscuous mode [ 1435.415037][T13465] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1441.013701][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1441.294905][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1441.481018][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1441.519693][ T49] bond_slave_1 (unregistering): left allmulticast mode [ 1441.652071][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1441.670624][ T49] bond_slave_0 (unregistering): left allmulticast mode [ 1441.950118][T13480] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1443.598474][ T49] bond0 (unregistering): Released all slaves [ 1443.874003][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1716'. [ 1443.919527][T13483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1716'. [ 1443.944449][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1716'. [ 1443.972451][T13483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1716'. [ 1446.851169][T13521] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1447.816078][T13294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1450.292570][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1724'. [ 1450.740382][T12044] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1450.759427][T12044] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1450.782389][T12044] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1450.793329][T12044] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1450.800814][T13539] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1724'. [ 1450.810459][T12044] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1450.817949][T12044] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1450.943810][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1724'. [ 1451.061517][T13539] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1724'. [ 1451.432480][T13554] autofs4:pid:13554:autofs_fill_super: called with bogus options [ 1451.566878][T13294] veth0_vlan: entered promiscuous mode [ 1451.668595][T13363] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1451.689225][T13363] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.731083][T13294] veth1_vlan: entered promiscuous mode [ 1451.773019][T13363] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1451.784906][T13363] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.045729][T13363] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1452.111538][T13564] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1452.152477][T13363] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.910474][T12044] Bluetooth: hci4: command tx timeout [ 1452.981577][T13363] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1453.003183][T13363] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.084633][T13294] veth0_macvtap: entered promiscuous mode [ 1453.167966][T13294] veth1_macvtap: entered promiscuous mode [ 1453.221161][T13540] chnl_net:caif_netlink_parms(): no params data found [ 1453.260891][T13577] autofs4:pid:13577:autofs_fill_super: called with bogus options [ 1453.286856][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1453.307991][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.330266][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1453.358025][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.388445][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1453.408539][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1453.423567][T13294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1455.039264][T12044] Bluetooth: hci4: command tx timeout [ 1455.106645][T13363] netdevsim netdevsim2 eth13: set [0, 0] type 1 family 0 port 8472 - 0 [ 1455.176368][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1455.194002][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.205732][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1455.222572][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.235385][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1455.253926][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1455.268465][T13294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1455.494813][T13363] netdevsim netdevsim2 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 1455.552605][T13363] netdevsim netdevsim2 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 1455.662800][T13294] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.686372][T13294] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.714354][T13294] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.723282][T13294] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.766062][T13363] netdevsim netdevsim2 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 1455.903557][T13540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1455.916961][T13540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.933712][T13540] bridge_slave_0: entered allmulticast mode [ 1455.947667][T13540] bridge_slave_0: entered promiscuous mode [ 1455.966494][T13540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.973848][T13540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.990768][T13540] bridge_slave_1: entered allmulticast mode [ 1456.000450][T13540] bridge_slave_1: entered promiscuous mode [ 1456.181999][T13540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1456.226494][T13540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1456.347515][T13540] team0: Port device team_slave_0 added [ 1456.396685][T13540] team0: Port device team_slave_1 added [ 1456.515908][T13540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1456.524103][T13540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1456.554299][T13540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1456.604959][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.622945][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.664671][T13540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1456.680847][T13540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1456.707907][T13540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1456.751894][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1734'. [ 1456.761098][T13601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1734'. [ 1456.788182][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1734'. [ 1456.799330][T13601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1734'. [ 1456.902114][ T9296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.923540][ T9296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.937799][T13540] hsr_slave_0: entered promiscuous mode [ 1456.948931][T13540] hsr_slave_1: entered promiscuous mode [ 1456.955682][T13540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1456.963489][T13540] Cannot create hsr debugfs directory [ 1457.071580][T12044] Bluetooth: hci4: command tx timeout [ 1459.015858][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1741'. [ 1459.026237][T13605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1741'. [ 1460.815111][T12044] Bluetooth: hci4: command tx timeout [ 1460.942567][T13605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1741'. [ 1460.958290][T13605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1741'. [ 1461.130240][T13620] autofs4:pid:13620:autofs_fill_super: called with bogus options [ 1463.315425][T13363] hsr_slave_0: left promiscuous mode [ 1463.342272][T13363] hsr_slave_1: left promiscuous mode [ 1463.383869][T13363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1463.404907][T13363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1463.440200][T13363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1463.447726][T13363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1463.491607][T13363] bridge_slave_1: left allmulticast mode [ 1463.497342][T13363] bridge_slave_1: left promiscuous mode [ 1463.510062][T13363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.540712][T13363] bridge_slave_0: left allmulticast mode [ 1463.546618][T13363] bridge_slave_0: left promiscuous mode [ 1463.579459][T13363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.743972][T13363] veth1_macvtap: left promiscuous mode [ 1463.749731][T13363] veth0_macvtap: left promiscuous mode [ 1463.755429][T13363] veth1_vlan: left promiscuous mode [ 1463.769740][T13363] veth0_vlan: left promiscuous mode [ 1464.103296][T13635] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1470.113206][T13363] team0 (unregistering): Port device team_slave_1 removed [ 1470.187182][T13363] team0 (unregistering): Port device team_slave_0 removed [ 1470.296015][T13363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1470.310021][T13363] bond_slave_1 (unregistering): left allmulticast mode [ 1472.093714][T13363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1472.105011][T13363] bond_slave_0 (unregistering): left allmulticast mode [ 1472.589974][T13363] bond0 (unregistering): Released all slaves [ 1473.044389][T13540] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1473.157952][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1747'. [ 1473.169815][T13668] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1747'. [ 1473.186065][T13540] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1473.208777][T13540] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1473.265855][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1747'. [ 1473.275347][T13668] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1747'. [ 1473.294995][T13540] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1477.094594][T13540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1477.167781][T13540] 8021q: adding VLAN 0 to HW filter on device team0 [ 1477.226270][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.233544][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1477.318169][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.325489][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1478.055768][T13540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1481.337536][T13719] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1482.232206][T13734] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1482.990763][T13540] veth0_vlan: entered promiscuous mode [ 1483.154136][T13540] veth1_vlan: entered promiscuous mode [ 1483.323031][T13540] veth0_macvtap: entered promiscuous mode [ 1483.358850][T13540] veth1_macvtap: entered promiscuous mode [ 1483.419681][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1757'. [ 1483.446248][T13741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1757'. [ 1483.477333][T13540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1483.501627][T13744] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 1483.507541][T13540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.545047][T13540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1483.579550][T13540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.604269][T13540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1483.623454][T13540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.648060][T13540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1483.666969][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1757'. [ 1483.679262][T13741] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1757'. [ 1483.725625][T13540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.779309][T13540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1483.805929][T13540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1483.840857][T13540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.389988][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.396395][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.429351][T13540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1485.467624][T13540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.496688][T13540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1485.644491][T13757] Failed to initialize the IGMP6 autojoin socket (err -105) [ 1485.672680][T13540] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.711545][T13540] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.745073][T13540] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.771542][T13540] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.899930][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1486.907831][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1487.165051][T13771] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1487.330574][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.493923][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.184092][T13777] autofs4:pid:13777:autofs_fill_super: called with bogus options [ 1488.287101][T13778] comedi comedi1: Minor 2 could not be opened [ 1489.428534][T13789] comedi comedi1: Minor 2 could not be opened [ 1491.714238][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1767'. [ 1491.737027][T13803] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1767'. [ 1491.769918][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1767'. [ 1491.778876][T13803] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1767'. [ 1493.864762][T13824] autofs4:pid:13824:autofs_fill_super: called with bogus options [ 1497.014097][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1780'. [ 1497.046302][T13850] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1780'. [ 1497.089930][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1780'. [ 1497.098879][T13850] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1780'. [ 1497.658706][T13861] autofs4:pid:13861:autofs_fill_super: called with bogus options [ 1501.167296][T13878] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1779'. [ 1501.723344][T13723] udevd[13723]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1502.450512][T13903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1790'. [ 1502.483138][T13903] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1790'. [ 1502.543265][T13905] autofs4:pid:13905:autofs_fill_super: called with bogus options [ 1502.646258][T13903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1790'. [ 1502.655560][T13903] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1790'. [ 1502.866984][T13912] autofs4:pid:13912:autofs_fill_super: called with bogus options [ 1503.455046][T13923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1793'. [ 1505.639079][T13723] udevd[13723]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1507.637381][T13953] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1508.754155][T13955] autofs4:pid:13955:autofs_fill_super: called with bogus options [ 1511.210938][T13982] comedi comedi1: Minor 2 could not be opened [ 1512.306846][T13985] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1513.787408][T13998] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1514.602013][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1800'. [ 1514.611098][T14002] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1800'. [ 1514.620589][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1800'. [ 1514.629620][T14002] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1800'. [ 1516.999053][T14012] autofs4:pid:14012:autofs_fill_super: called with bogus options [ 1520.915687][T14033] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1521.226458][T14039] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1818'. [ 1521.250409][T14039] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1818'. [ 1522.452643][T14039] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1818'. [ 1522.543993][T14039] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1818'. [ 1523.295310][T14059] comedi comedi1: Minor 2 could not be opened [ 1524.909258][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1524.999548][ T7999] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1525.099510][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 1525.107063][ T23] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1525.126969][ T23] usb 1-1: config 0 has no interface number 0 [ 1526.859933][ T23] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1526.888915][ T7999] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 1526.903561][T11283] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1526.909379][ T7999] usb 6-1: config 1 has no interface number 0 [ 1526.924356][ T23] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1526.947663][ T7999] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 1526.967772][ T23] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1526.989752][ T7999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.008075][ T7999] usb 6-1: Product: syz [ 1527.018227][ T23] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1527.027464][ T7999] usb 6-1: Manufacturer: syz [ 1527.039271][ T7999] usb 6-1: SerialNumber: syz [ 1527.044054][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.085185][ T23] usb 1-1: config 0 descriptor?? [ 1527.106955][ T23] ldusb 1-1:0.55: Interrupt in endpoint not found [ 1527.130275][T11283] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1527.149601][T11283] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.178381][T11283] usb 8-1: Product: syz [ 1527.188530][T11283] usb 8-1: Manufacturer: syz [ 1527.198618][T11283] usb 8-1: SerialNumber: syz [ 1527.230018][T11283] usb 8-1: config 0 descriptor?? [ 1527.312113][ T7999] usb 6-1: 3:1 : does not exist [ 1527.317507][ T7999] usb 6-1: 3:2 : does not exist [ 1527.352760][ T23] usb 1-1: USB disconnect, device number 4 [ 1527.509614][ T7999] usb 6-1: USB disconnect, device number 3 [ 1527.658550][T11283] usb 8-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1527.697618][T11283] usb 8-1: Firmware version (0.0) predates our first public release. [ 1527.706336][T11283] usb 8-1: Please update to version 0.2 or newer [ 1528.027037][T11283] usb 8-1: USB disconnect, device number 2 [ 1528.539331][ T7999] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1528.752510][ T7999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1528.783723][ T7999] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1528.794458][T14116] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1832'. [ 1528.815123][ T7999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.824561][T14116] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1832'. [ 1528.870645][ T7999] usb 6-1: config 0 descriptor?? [ 1529.149053][ T7999] usbhid 6-1:0.0: can't add hid device: -71 [ 1529.179732][ T7999] usbhid: probe of 6-1:0.0 failed with error -71 [ 1529.231240][ T7999] usb 6-1: USB disconnect, device number 4 [ 1529.570130][T11283] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1529.769668][ T7999] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1529.795276][T11283] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.806187][T11283] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1529.828870][T11283] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1529.859214][T11283] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1529.890083][T11283] usb 8-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1529.919321][T11283] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.986649][ T7999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1530.017401][ T7999] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1530.048706][ T7999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.088868][ T7999] usb 6-1: config 0 descriptor?? [ 1530.359416][ T8813] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1530.421294][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.428668][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.459301][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.466388][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.479306][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.486671][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.509322][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.516376][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.524410][T14106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1530.545521][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.558558][T14106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1530.567021][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.585248][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.592579][ T8813] usb 7-1: Using ep0 maxpacket: 8 [ 1530.612806][ T8813] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1530.629019][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.640798][ T8813] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1530.667844][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.684088][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.691412][ T8813] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1530.712519][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.725875][ T8813] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1530.741744][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.762902][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.771274][ T8813] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1530.790267][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.797304][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.808782][ T8813] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1530.836835][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.846820][ T8813] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1530.864824][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.876740][ T8813] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.889394][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.896441][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.933637][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.952570][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.978305][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1530.998056][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1531.011557][ T7999] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 1531.017421][T11283] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 1531.034652][ T7999] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input5 [ 1531.058340][T11283] lg-g15 0003:046D:C222.0001: unbalanced collection at end of report description [ 1531.081466][ C1] ================================================================================ [ 1531.091811][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 1531.100456][ C1] index 65036 is out of range for type 'const int[34]' [ 1531.107383][ C1] CPU: 1 PID: 14160 Comm: dhcpcd-run-hook Not tainted syzkaller #0 [ 1531.115332][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1531.125475][ C1] Call Trace: [ 1531.128833][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1531.131737][ C1] dump_stack_lvl+0x18c/0x250 [ 1531.136676][ C1] ? show_regs_print_info+0x20/0x20 [ 1531.141959][ C1] ? load_image+0x420/0x420 [ 1531.146588][ C1] ? kcov_remote_start+0x29f/0x810 [ 1531.151965][ C1] ubsan_epilogue+0xa/0x30 [ 1531.156482][ C1] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 1531.162390][ C1] aiptek_irq+0x1eb8/0x2920 [ 1531.167121][ C1] ? usb_unanchor_urb+0xa5/0xc0 [ 1531.172090][ C1] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 1531.177918][ C1] __usb_hcd_giveback_urb+0x35d/0x520 [ 1531.183371][ C1] dummy_timer+0xa58/0x34e0 [ 1531.188036][ C1] ? dummy_free_streams+0x520/0x520 [ 1531.193308][ C1] ? dummy_free_streams+0x520/0x520 [ 1531.198578][ C1] __hrtimer_run_queues+0x525/0xc10 [ 1531.203931][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1531.209110][ C1] ? read_tsc+0x9/0x20 [ 1531.212767][T11283] lg-g15: probe of 0003:046D:C222.0001 failed with error -22 [ 1531.213272][ C1] hrtimer_run_softirq+0x177/0x290 [ 1531.225850][ C1] handle_softirqs+0x27d/0x820 [ 1531.230712][ C1] ? read_tsc+0x9/0x20 [ 1531.234843][ C1] ? ktime_get+0x24b/0x280 [ 1531.239318][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1531.244145][ C1] ? do_softirq+0x1a0/0x1a0 [ 1531.248715][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1531.253993][ C1] __irq_exit_rcu+0xd3/0x190 [ 1531.258646][ C1] ? irq_exit_rcu+0x20/0x20 [ 1531.261783][ T8813] usb 7-1: GET_CAPABILITIES returned 0 [ 1531.263196][ C1] irq_exit_rcu+0x9/0x20 [ 1531.268787][ T8813] usbtmc 7-1:16.0: can't read capabilities [ 1531.272933][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1531.272974][ C1] [ 1531.272983][ C1] [ 1531.272992][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1531.273128][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0xd7/0xe0 [ 1531.273166][ C1] Code: f3 48 c1 e3 05 4c 8d 63 28 4d 39 fc 77 9d 49 ff c6 4d 89 33 49 89 4c 1b 08 4d 89 54 1b 10 49 89 7c 1b 18 49 89 54 1b 20 eb 81 <5b> 41 5c 41 5e 41 5f c3 90 66 0f 1f 00 c7 87 00 16 00 00 00 00 00 [ 1531.322924][ C1] RSP: 0018:ffffc900046070f0 EFLAGS: 00000246 [ 1531.329073][ C1] RAX: 0000000000000002 RBX: ffffffff8f1f5b1e RCX: 0000000000000003 [ 1531.337194][ C1] RDX: ffffffff813bba28 RSI: ffffffff8cfa08e0 RDI: 0000000000000002 [ 1531.345223][ C1] RBP: ffffc90004607238 R08: ffff88801b65bc00 R09: 0000000000000002 [ 1531.353256][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8f1f5b23 [ 1531.361290][ C1] R13: ffffc900046071e8 R14: 0000000000000002 R15: dffffc0000000000 [ 1531.369444][ C1] ? unwind_next_frame+0x658/0x2990 [ 1531.374714][ C1] unwind_next_frame+0x658/0x2990 [ 1531.379827][ C1] ? load_elf_binary+0x9ed/0x2850 [ 1531.384964][ C1] ? load_elf_binary+0x9ee/0x2850 [ 1531.390071][ C1] ? load_elf_binary+0x9ee/0x2850 [ 1531.395246][ C1] ? stack_trace_save+0x100/0x100 [ 1531.400340][ C1] arch_stack_walk+0x144/0x190 [ 1531.405179][ C1] ? load_elf_binary+0x9ee/0x2850 [ 1531.410323][ C1] stack_trace_save+0xaa/0x100 [ 1531.415166][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1531.420357][ C1] ? __stack_depot_save+0x1f/0x660 [ 1531.425545][ C1] kasan_set_track+0x4e/0x70 [ 1531.430268][ C1] ? kasan_set_track+0x4e/0x70 [ 1531.435102][ C1] ? kasan_save_free_info+0x28/0x40 [ 1531.440371][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 1531.445716][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 1531.451410][ C1] ? kmem_cache_free+0xf8/0x290 [ 1531.456332][ C1] ? unlink_anon_vmas+0x2d0/0x660 [ 1531.461518][ C1] ? free_pgtables+0x4ef/0x770 [ 1531.466360][ C1] ? exit_mmap+0x420/0xb90 [ 1531.467882][T11283] usb 8-1: USB disconnect, device number 3 [ 1531.470821][ C1] ? __mmput+0x118/0x3a0 [ 1531.470850][ C1] ? exec_mmap+0x59a/0x650 [ 1531.470882][ C1] ? begin_new_exec+0xa4e/0x1ef0 [ 1531.470916][ C1] ? load_elf_binary+0x9ee/0x2850 [ 1531.470994][ C1] ? kmem_cache_free+0xf8/0x290 [ 1531.471030][ C1] kasan_save_free_info+0x28/0x40 [ 1531.505529][ C1] ____kasan_slab_free+0x126/0x1f0 [ 1531.510721][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 1531.516255][ C1] ? unlink_anon_vmas+0x2d0/0x660 [ 1531.521350][ C1] kmem_cache_free+0xf8/0x290 [ 1531.526121][ C1] unlink_anon_vmas+0x2d0/0x660 [ 1531.531051][ C1] free_pgtables+0x4ef/0x770 [ 1531.535740][ C1] exit_mmap+0x420/0xb90 [ 1531.540055][ C1] ? vm_brk+0x30/0x30 [ 1531.544112][ C1] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1531.549957][ C1] ? uprobe_clear_state+0x278/0x290 [ 1531.555259][ C1] __mmput+0x118/0x3a0 [ 1531.559391][ C1] exec_mmap+0x59a/0x650 [ 1531.563710][ C1] ? acct_arg_size+0x120/0x120 [ 1531.568543][ C1] ? bpf_lsm_inode_permission+0x9/0x10 [ 1531.574057][ C1] ? rcu_is_watching+0x15/0xb0 [ 1531.578896][ C1] begin_new_exec+0xa4e/0x1ef0 [ 1531.583740][ C1] ? common_file_perm+0x198/0x1f0 [ 1531.588891][ C1] load_elf_binary+0x9ee/0x2850 [ 1531.593822][ C1] ? load_elf_binary+0x991/0x2850 [ 1531.598941][ C1] ? bprm_execve+0xae9/0x1730 [ 1531.603690][ C1] ? load_script+0x890/0x890 [ 1531.608345][ C1] ? _raw_read_unlock+0x28/0x40 [ 1531.613249][ C1] ? load_misc_binary+0x654/0xad0 [ 1531.618350][ C1] bprm_execve+0xb0b/0x1730 [ 1531.622947][ C1] ? alloc_bprm+0x9a0/0x9a0 [ 1531.627534][ C1] do_execveat_common+0x501/0x6b0 [ 1531.632733][ C1] __x64_sys_execve+0x92/0xa0 [ 1531.637494][ C1] do_syscall_64+0x55/0xb0 [ 1531.641991][ C1] ? clear_bhb_loop+0x40/0x90 [ 1531.646772][ C1] ? clear_bhb_loop+0x40/0x90 [ 1531.651536][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1531.657497][ C1] RIP: 0033:0x7f56f4bcf107 [ 1531.662005][ C1] Code: Unable to access opcode bytes at 0x7f56f4bcf0dd. [ 1531.669076][ C1] RSP: 002b:00007fff6e033008 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1531.677593][ C1] RAX: ffffffffffffffda RBX: 000055defe25f078 RCX: 00007f56f4bcf107 [ 1531.685631][ C1] RDX: 000055defe25f0a0 RSI: 000055defe25f078 RDI: 000055defe25f130 [ 1531.693662][ C1] RBP: 000055defe25f130 R08: 00007fff6e038df1 R09: 0000000000000000 [ 1531.701698][ C1] R10: 0000000000000008 R11: 0000000000000246 R12: 000055defe25f0a0 [ 1531.709722][ C1] R13: 00007f56f4d94e8b R14: 000055defe25f0a0 R15: 0000000000000000 [ 1531.717781][ C1] [ 1531.721202][ C1] ================================================================================ [ 1531.730539][ C1] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 1531.737776][ C1] CPU: 1 PID: 14160 Comm: dhcpcd-run-hook Not tainted syzkaller #0 [ 1531.745729][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1531.755886][ C1] Call Trace: [ 1531.759236][ C1] [ 1531.762127][ C1] dump_stack_lvl+0x18c/0x250 [ 1531.766877][ C1] ? show_regs_print_info+0x20/0x20 [ 1531.772145][ C1] ? load_image+0x420/0x420 [ 1531.776718][ C1] panic+0x2ca/0x720 [ 1531.780718][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1531.785308][ C1] check_panic_on_warn+0x84/0xa0 [ 1531.790317][ C1] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 1531.796103][ C1] aiptek_irq+0x1eb8/0x2920 [ 1531.800688][ C1] ? usb_unanchor_urb+0xa5/0xc0 [ 1531.805599][ C1] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 1531.811390][ C1] __usb_hcd_giveback_urb+0x35d/0x520 [ 1531.816827][ C1] dummy_timer+0xa58/0x34e0 [ 1531.821444][ C1] ? dummy_free_streams+0x520/0x520 [ 1531.826715][ C1] ? dummy_free_streams+0x520/0x520 [ 1531.831986][ C1] __hrtimer_run_queues+0x525/0xc10 [ 1531.837286][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1531.842479][ C1] ? read_tsc+0x9/0x20 [ 1531.846654][ C1] hrtimer_run_softirq+0x177/0x290 [ 1531.851842][ C1] handle_softirqs+0x27d/0x820 [ 1531.856675][ C1] ? read_tsc+0x9/0x20 [ 1531.860812][ C1] ? ktime_get+0x24b/0x280 [ 1531.865295][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1531.870116][ C1] ? do_softirq+0x1a0/0x1a0 [ 1531.874684][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1531.879971][ C1] __irq_exit_rcu+0xd3/0x190 [ 1531.884625][ C1] ? irq_exit_rcu+0x20/0x20 [ 1531.889196][ C1] irq_exit_rcu+0x9/0x20 [ 1531.893489][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1531.899187][ C1] [ 1531.902154][ C1] [ 1531.905130][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1531.911173][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0xd7/0xe0 [ 1531.917737][ C1] Code: f3 48 c1 e3 05 4c 8d 63 28 4d 39 fc 77 9d 49 ff c6 4d 89 33 49 89 4c 1b 08 4d 89 54 1b 10 49 89 7c 1b 18 49 89 54 1b 20 eb 81 <5b> 41 5c 41 5e 41 5f c3 90 66 0f 1f 00 c7 87 00 16 00 00 00 00 00 [ 1531.937530][ C1] RSP: 0018:ffffc900046070f0 EFLAGS: 00000246 [ 1531.943668][ C1] RAX: 0000000000000002 RBX: ffffffff8f1f5b1e RCX: 0000000000000003 [ 1531.951705][ C1] RDX: ffffffff813bba28 RSI: ffffffff8cfa08e0 RDI: 0000000000000002 [ 1531.959741][ C1] RBP: ffffc90004607238 R08: ffff88801b65bc00 R09: 0000000000000002 [ 1531.967777][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8f1f5b23 [ 1531.975815][ C1] R13: ffffc900046071e8 R14: 0000000000000002 R15: dffffc0000000000 [ 1531.983863][ C1] ? unwind_next_frame+0x658/0x2990 [ 1531.989129][ C1] unwind_next_frame+0x658/0x2990 [ 1531.994211][ C1] ? load_elf_binary+0x9ed/0x2850 [ 1531.999292][ C1] ? load_elf_binary+0x9ee/0x2850 [ 1532.004382][ C1] ? load_elf_binary+0x9ee/0x2850 [ 1532.009490][ C1] ? stack_trace_save+0x100/0x100 [ 1532.014581][ C1] arch_stack_walk+0x144/0x190 [ 1532.019403][ C1] ? load_elf_binary+0x9ee/0x2850 [ 1532.024517][ C1] stack_trace_save+0xaa/0x100 [ 1532.029345][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1532.034517][ C1] ? __stack_depot_save+0x1f/0x660 [ 1532.039685][ C1] kasan_set_track+0x4e/0x70 [ 1532.044332][ C1] ? kasan_set_track+0x4e/0x70 [ 1532.049146][ C1] ? kasan_save_free_info+0x28/0x40 [ 1532.054401][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 1532.059747][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 1532.065435][ C1] ? kmem_cache_free+0xf8/0x290 [ 1532.070354][ C1] ? unlink_anon_vmas+0x2d0/0x660 [ 1532.075434][ C1] ? free_pgtables+0x4ef/0x770 [ 1532.080266][ C1] ? exit_mmap+0x420/0xb90 [ 1532.084753][ C1] ? __mmput+0x118/0x3a0 [ 1532.089066][ C1] ? exec_mmap+0x59a/0x650 [ 1532.093545][ C1] ? begin_new_exec+0xa4e/0x1ef0 [ 1532.098553][ C1] ? load_elf_binary+0x9ee/0x2850 [ 1532.103691][ C1] ? kmem_cache_free+0xf8/0x290 [ 1532.108614][ C1] kasan_save_free_info+0x28/0x40 [ 1532.113703][ C1] ____kasan_slab_free+0x126/0x1f0 [ 1532.118880][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 1532.124396][ C1] ? unlink_anon_vmas+0x2d0/0x660 [ 1532.129510][ C1] kmem_cache_free+0xf8/0x290 [ 1532.134267][ C1] unlink_anon_vmas+0x2d0/0x660 [ 1532.139197][ C1] free_pgtables+0x4ef/0x770 [ 1532.143900][ C1] exit_mmap+0x420/0xb90 [ 1532.148241][ C1] ? vm_brk+0x30/0x30 [ 1532.152292][ C1] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1532.158023][ C1] ? uprobe_clear_state+0x278/0x290 [ 1532.163300][ C1] __mmput+0x118/0x3a0 [ 1532.167437][ C1] exec_mmap+0x59a/0x650 [ 1532.171767][ C1] ? acct_arg_size+0x120/0x120 [ 1532.176602][ C1] ? bpf_lsm_inode_permission+0x9/0x10 [ 1532.182118][ C1] ? rcu_is_watching+0x15/0xb0 [ 1532.186968][ C1] begin_new_exec+0xa4e/0x1ef0 [ 1532.191817][ C1] ? common_file_perm+0x198/0x1f0 [ 1532.196919][ C1] load_elf_binary+0x9ee/0x2850 [ 1532.201873][ C1] ? load_elf_binary+0x991/0x2850 [ 1532.206991][ C1] ? bprm_execve+0xae9/0x1730 [ 1532.211747][ C1] ? load_script+0x890/0x890 [ 1532.216402][ C1] ? _raw_read_unlock+0x28/0x40 [ 1532.221309][ C1] ? load_misc_binary+0x654/0xad0 [ 1532.226414][ C1] bprm_execve+0xb0b/0x1730 [ 1532.231054][ C1] ? alloc_bprm+0x9a0/0x9a0 [ 1532.235650][ C1] do_execveat_common+0x501/0x6b0 [ 1532.240775][ C1] __x64_sys_execve+0x92/0xa0 [ 1532.245521][ C1] do_syscall_64+0x55/0xb0 [ 1532.249992][ C1] ? clear_bhb_loop+0x40/0x90 [ 1532.254726][ C1] ? clear_bhb_loop+0x40/0x90 [ 1532.259474][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1532.265445][ C1] RIP: 0033:0x7f56f4bcf107 [ 1532.269922][ C1] Code: Unable to access opcode bytes at 0x7f56f4bcf0dd. [ 1532.276987][ C1] RSP: 002b:00007fff6e033008 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1532.285497][ C1] RAX: ffffffffffffffda RBX: 000055defe25f078 RCX: 00007f56f4bcf107 [ 1532.293534][ C1] RDX: 000055defe25f0a0 RSI: 000055defe25f078 RDI: 000055defe25f130 [ 1532.301561][ C1] RBP: 000055defe25f130 R08: 00007fff6e038df1 R09: 0000000000000000 [ 1532.309593][ C1] R10: 0000000000000008 R11: 0000000000000246 R12: 000055defe25f0a0 [ 1532.317628][ C1] R13: 00007f56f4d94e8b R14: 000055defe25f0a0 R15: 0000000000000000 [ 1532.325679][ C1] [ 1532.329333][ C1] Kernel Offset: disabled [ 1532.333674][ C1] Rebooting in 86400 seconds..