last executing test programs: 4m46.40910011s ago: executing program 0 (id=1086): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000007040)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0]}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x5, r1}, 0x38) 4m46.40648573s ago: executing program 0 (id=1088): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002400)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}, {{&(0x7f0000000200)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000740)='HC', 0x2}], 0x1}}], 0x2, 0xc000) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={r2, 0x0, 0x20}, 0xc) 4m46.351096972s ago: executing program 0 (id=1089): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 4m46.255995447s ago: executing program 0 (id=1093): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) mount(0x0, &(0x7f0000000000)='./file0/../file0/../file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) 4m46.223747948s ago: executing program 0 (id=1094): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 4m45.990460238s ago: executing program 0 (id=1099): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2710, 0x1, 0x7000, 0x2000, &(0x7f00008e7000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 4m45.976888687s ago: executing program 32 (id=1099): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2710, 0x1, 0x7000, 0x2000, &(0x7f00008e7000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 4m37.762846007s ago: executing program 2 (id=1243): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x18, 0x4004064}, 0x40046) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x1c0) syz_emit_ethernet(0x1c8, &(0x7f0000000240)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x192, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2, [{0x4, 0xf, "f8bf3e2254918466bcfbcee275605cbcb0eada8dab31a8aa5821136e6abd19c703d677d67b35c61eaf2c373f0dac72c33001b05d00b7022c38c57abec7e2e61b4c6637efd5e2e25679258c9b0ebd823d35d16cf4d6106d0448311adfdfb4622747d03d900fe919012de31a7de6fdb28f705c21cf5a2285066410"}, {0x19, 0x17, "4e3ac1406fe38592f426d92bdafafe59158511e6022bd44f9e9ece98e0592f96578b5d0ea40c564f734a55b03b57d3654de953d3c905255b16a1049880003d97683b102b3ae1c2b3e60d607ffc1d4a0aeb093248f1a347e023c993d07c1ab9345262959a998a6a319cce4f401f2e5f0813820f36b9ae3390b5f83211c4d7dbb136f706978fb0d07661cbcf40ffe7e3c655d9c84150adb3d3ea28ef9f39c9f50f137a733d681c37d1e396fd38528bccbb0169799ab0073009e4"}, {0x1, 0x6, "1faf9335c9cc27f04c5e3e21b97fd88846c1e2c548bcd849b3ad924f420feec30f13082702fb6e7d55d251278561c6dee9"}]}}}}}}, 0x0) 4m37.690431594s ago: executing program 2 (id=1244): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x4e) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0x2020) 4m37.690197138s ago: executing program 2 (id=1245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x38, r2, 0x1, 0x4, 0x2, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x4, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0xa000, 0x6, 0x81, 0xffff, 0x4, 0x8005, 0x5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c890}, 0x14) 4m37.629419668s ago: executing program 2 (id=1247): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00') 4m37.554927228s ago: executing program 2 (id=1250): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x8d) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) close(0x3) 4m37.310247917s ago: executing program 2 (id=1259): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000440)={@multicast, @multicast, @val={@void, {0x8100, 0x5, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0xfffd, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x3}}}}}}}, 0x0) 4m37.233440802s ago: executing program 33 (id=1259): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r1, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000440)={@multicast, @multicast, @val={@void, {0x8100, 0x5, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0xfffd, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x3}}}}}}}, 0x0) 4m33.749316495s ago: executing program 4 (id=1327): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r1, r0, 0x4, r0}, 0x10) 4m33.679819201s ago: executing program 4 (id=1331): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x6a) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@verity_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) 4m33.609499174s ago: executing program 4 (id=1333): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f00000003c0), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r1], &(0x7f00000001c0)=[0xd], &(0x7f0000000480)=[r2], &(0x7f0000000200)}) 4m33.527879621s ago: executing program 4 (id=1335): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 4m33.449382056s ago: executing program 4 (id=1338): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x134}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) 4m33.067008129s ago: executing program 4 (id=1343): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 4m32.991999811s ago: executing program 34 (id=1343): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 1m45.035145725s ago: executing program 3 (id=4053): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x21, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='statm\x00') pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x40000000007) socket$nl_route(0x10, 0x3, 0x0) 1m44.94366429s ago: executing program 3 (id=4054): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x1000000, 0x0}) 1m44.351238032s ago: executing program 3 (id=4068): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 1m44.261162575s ago: executing program 3 (id=4069): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x18f883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) 1m44.119452941s ago: executing program 3 (id=4070): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000640)={0x4}) 1m43.627836384s ago: executing program 3 (id=4072): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1070bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 1m43.601664227s ago: executing program 35 (id=4072): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1070bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 12.551758254s ago: executing program 6 (id=4875): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001f00)={0x2, 0x0, {&(0x7f0000000440)=""/112, 0x70, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000cc0)=""/236, 0xec, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000a00)=""/274, 0x112, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000c00)=""/135, 0xfca2, 0x0, 0x0, 0x3}}, 0x36) 12.465615979s ago: executing program 6 (id=4878): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) socket$kcm(0xa, 0x1, 0x106) close(r0) 11.470025253s ago: executing program 6 (id=4894): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b01090224"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = syz_io_uring_setup(0x27c9, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x0, 0x8000d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 10.024491639s ago: executing program 6 (id=4907): setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) 9.928385567s ago: executing program 6 (id=4909): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r1 = socket(0x2d, 0x2, 0x0) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r4 = socket(0x2d, 0x2, 0x0) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, r3, 0xc}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 8.924600909s ago: executing program 6 (id=4916): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}], 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x10000, &(0x7f0000000000)=0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x4a7) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4006, r1, 0x0}]) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 8.864439445s ago: executing program 36 (id=4916): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}], 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x10000, &(0x7f0000000000)=0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x4a7) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4006, r1, 0x0}]) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 3.060181388s ago: executing program 8 (id=4980): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) truncate(&(0x7f0000000100)='./file1\x00', 0x7) 1.984061789s ago: executing program 8 (id=4995): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591638d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0006cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296560000d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fd92bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f46dc53a26fd997f3af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde84f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c5770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46ba8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a650b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0c1043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077be00000000d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc654ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0x20000082}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0x0, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0xc, {{0x1000000000000002, 0x4, 0x2, 0x5, 0xfffffff8, 0x1, {0x1000000002, 0x2000000000000001, 0x6, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r2, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) 1.873558878s ago: executing program 5 (id=4998): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.553391369s ago: executing program 5 (id=4999): mount$overlay(0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 1.497743188s ago: executing program 5 (id=5001): ioperm(0x0, 0x2, 0x7e) r0 = gettid() r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @local}, 0x10) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.361676193s ago: executing program 1 (id=5004): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x8, 0x0, 0x5e12, 0x20, 0x13, 0x8000000000007, 0x106c, 0x9, 0x8000000000000, 0x8000000400007f, 0x0, 0x6, 0x0, 0x204, 0x0, 0x8001], 0xeeee0000, 0x2c0290}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.3186145s ago: executing program 1 (id=5014): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) close_range(r1, 0xffffffffffffffff, 0x0) 1.127053907s ago: executing program 8 (id=5007): r0 = openat$kvm(0xffffff9c, &(0x7f00000013c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x80000000000}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0xe0, 0x6, 0xb, 0xf, 0x10003, 0x0, 0x400200cc4, 0xfff, 0x4, 0x0, 0x7, 0x0, 0x6, 0xfffffffffffffffe, 0x20000000000006a, 0xffffffffffffffff], 0x41000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.05510509s ago: executing program 1 (id=5009): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x84b}, @mss={0x2, 0x1}, @timestamp, @mss={0x2, 0x80000001}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r0, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) 961.030593ms ago: executing program 8 (id=5010): mount$overlay(0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 618.153947ms ago: executing program 5 (id=5012): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x2068ca6, 0x0) r2 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x1082b, 0x0) 610.1686ms ago: executing program 1 (id=5021): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) splice(r0, 0x0, r1, 0x0, 0x8201, 0x9) 558.260757ms ago: executing program 7 (id=5013): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x52) ioctl$FIONREAD(r3, 0x541b, 0x0) 498.277974ms ago: executing program 7 (id=5015): r0 = syz_io_uring_setup(0x3bd4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 497.840216ms ago: executing program 1 (id=5016): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x7fdfffff, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, r5, 0x0, r5], [0x2b8], [0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000002000)=[0x0], 0x0, 0x0, 0x0, 0x1}) 428.9174ms ago: executing program 5 (id=5017): syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaa"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000000c0), 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000640), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000080), 0x4) 416.232178ms ago: executing program 1 (id=5018): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) truncate(&(0x7f0000000100)='./file1\x00', 0x7) 416.069881ms ago: executing program 7 (id=5019): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ed}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000400)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "10b1a0", 0x0, 0x0, 0x0, @empty, @local}}}}}}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0xea8) syz_extract_tcp_res(0x0, 0x8001, 0x5) 415.574592ms ago: executing program 5 (id=5020): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000380)="7f4132", 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000000002043554200000000000001090224"], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 361.249507ms ago: executing program 7 (id=5022): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000200000001000000", @ANYRES32=0x1, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 100.876167ms ago: executing program 8 (id=5023): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) 100.711641ms ago: executing program 7 (id=5024): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x20000003}}, 0x10) bind$tipc(r0, 0x0, 0x0) 33.677677ms ago: executing program 7 (id=5025): fchdir(0xffffffffffffffff) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0xfcfa, 0x0}, 0x20000818) 0s ago: executing program 8 (id=5026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a) kernel console output (not intermixed with test programs): e [ 173.499285][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 173.649311][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 173.792547][ T9] tipc: Node number set to 2886997162 [ 173.794548][ T9] libceph: connect (1)[c::]:6789 error -101 [ 173.797708][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 173.836309][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 173.839731][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 173.929384][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 174.060945][ T9] libceph: connect (1)[c::]:6789 error -101 [ 174.063728][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 174.100937][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 174.102990][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 174.200451][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 174.570596][ T9] libceph: connect (1)[c::]:6789 error -101 [ 174.573071][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 174.610896][T10910] ceph: No mds server is up or the cluster is laggy [ 174.612142][T10905] ceph: No mds server is up or the cluster is laggy [ 174.612294][ T844] libceph: connect (1)[c::]:6789 error -101 [ 174.612448][ T844] libceph: mon0 (1)[c::]:6789 connect error [ 174.729452][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 175.040797][T10941] ceph: No mds server is up or the cluster is laggy [ 175.063581][ T40] audit: type=1326 audit(1780701944.898:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10947 comm="syz.5.2024" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f94f7c code=0x0 [ 175.369504][ T5757] Bluetooth: hci1: command 0x0406 tx timeout [ 176.502728][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.506312][ C1] bridge0: topology change detected, propagating [ 176.510411][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.513370][ C1] bridge0: topology change detected, propagating [ 176.670559][T11015] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2052'. [ 176.733458][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2055'. [ 177.542408][T11049] syz.6.2064 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 177.661053][T11059] netlink: 'syz.3.2070': attribute type 7 has an invalid length. [ 177.715437][T11063] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.2073'. [ 177.849311][ C0] net_ratelimit: 3 callbacks suppressed [ 177.849323][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 178.563931][T11117] overlayfs: failed to clone upperpath [ 178.889385][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 179.755773][T11183] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2123'. [ 179.762003][T11183] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2123'. [ 179.765885][T11183] netlink: 'syz.6.2123': attribute type 5 has an invalid length. [ 179.768857][T11183] netlink: 43 bytes leftover after parsing attributes in process `syz.6.2123'. [ 179.929317][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 180.011156][T11199] all: renamed from lo (while UP) [ 180.138191][T11217] batadv_slave_1: entered promiscuous mode [ 180.145281][T11216] batadv_slave_1: left promiscuous mode [ 180.226067][ T110] libceph: connect (1)[c::]:6789 error -101 [ 180.228008][ T110] libceph: mon0 (1)[c::]:6789 connect error [ 180.272148][ T7056] libceph: connect (1)[b::]:6789 error -101 [ 180.274703][ T7056] libceph: mon0 (1)[b::]:6789 connect error [ 180.279418][ T7056] libceph: connect (1)[b::]:6789 error -101 [ 180.281807][ T7056] libceph: mon0 (1)[b::]:6789 connect error [ 180.485173][T11254] fuse: Bad value for 'fd' [ 180.490419][ T110] libceph: connect (1)[c::]:6789 error -101 [ 180.499767][ T110] libceph: mon0 (1)[c::]:6789 connect error [ 180.539561][ T7056] libceph: connect (1)[b::]:6789 error -101 [ 180.542170][ T7056] libceph: mon0 (1)[b::]:6789 connect error [ 180.584802][T11262] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2154'. [ 180.881965][T11276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2161'. [ 180.969420][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 181.021870][ T110] libceph: connect (1)[c::]:6789 error -101 [ 181.025846][ T110] libceph: mon0 (1)[c::]:6789 connect error [ 181.041434][T11224] ceph: No mds server is up or the cluster is laggy [ 181.044453][T11233] ceph: No mds server is up or the cluster is laggy [ 181.055452][ T5846] libceph: connect (1)[b::]:6789 error -101 [ 181.060941][ T5846] libceph: mon0 (1)[b::]:6789 connect error [ 181.471691][T11282] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.2164'. [ 181.474793][T11282] netlink: Conntrack attr has 3 unknown bytes [ 182.009241][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 182.747055][T11352] loop3: detected capacity change from 0 to 7 [ 182.750941][T11352] Dev loop3: unable to read RDB block 7 [ 182.753208][T11352] loop3: unable to read partition table [ 182.757609][T11352] loop3: partition table beyond EOD, truncated [ 182.762899][T11352] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 183.049252][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 183.100903][T11379] netlink: 'syz.6.2206': attribute type 10 has an invalid length. [ 183.103826][T11379] syz_tun: entered promiscuous mode [ 183.108868][T11379] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 184.089236][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 184.110322][T11410] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2227'. [ 184.113840][T11410] netlink: 'syz.5.2227': attribute type 7 has an invalid length. [ 184.116898][T11410] netlink: 'syz.5.2227': attribute type 8 has an invalid length. [ 184.119827][T11410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2227'. [ 184.554740][T11412] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 184.860603][ T40] audit: type=1326 audit(1780701954.698:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11444 comm="syz.5.2236" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f94f7c code=0x0 [ 184.914836][T11454] netlink: 'syz.6.2240': attribute type 1 has an invalid length. [ 184.938255][T11454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.966610][T11454] bond1: (slave geneve2): making interface the new active one [ 184.973317][T11454] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 185.032146][T11460] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 185.129293][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 185.169286][ T9] psmouse serio4: Failed to reset mouse on : -5 [ 186.169299][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 187.179687][T11527] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 187.184028][T11527] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.209310][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 187.351896][T11531] overlayfs: failed to clone upperpath [ 187.379093][T11533] fuse: fd is not a fuse device [ 188.249304][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 188.415899][T11547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.418368][T11547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.421934][T11547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.424635][T11547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.650355][T11553] fuse: fd is not a fuse device [ 188.919278][ T9] misc userio: Buffer overflowed, userio client isn't keeping up [ 188.970509][ T5751] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 188.972027][ T5757] Bluetooth: hci4: command 0x1003 tx timeout [ 189.289273][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 189.564985][T11592] overlayfs: failed to clone upperpath [ 189.991800][ T9] input: PS/2 Generic Mouse as /devices/serio4/input/input18 [ 190.009603][T11607] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2307'. [ 190.027732][T11609] netlink: 'syz.5.2308': attribute type 1 has an invalid length. [ 190.037506][T11609] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.2308'. [ 190.081657][T11613] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2310'. [ 190.085497][T11613] netem: incorrect gi model size [ 190.089536][T11613] netem: change failed [ 190.219241][ T9] psmouse serio4: Failed to enable mouse on [ 190.339231][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 190.551449][T11653] netlink: 208240 bytes leftover after parsing attributes in process `syz.5.2328'. [ 190.563168][T11647] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 190.571164][T11647] bond2: (slave lo): Enslaving as an active interface with an up link [ 190.578307][T11647] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 190.612015][T11659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.643926][T11663] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.2333'. [ 190.667272][T11665] syz_tun: left promiscuous mode [ 190.680575][T11665] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.681614][T11671] netlink: 'syz.3.2335': attribute type 21 has an invalid length. [ 190.683153][T11665] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.685318][T11671] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2335'. [ 190.734378][T11665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.742932][T11665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.845953][T11671] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2335'. [ 190.852241][ T46] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.854918][ T46] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.857903][ T46] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.860582][ T46] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.985691][T11680] ip6tnl0: Caught tx_queue_len zero misconfig [ 191.042139][T11684] binder: 11683:11684 ioctl c0306201 80000640 returned -22 [ 191.099783][T11687] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2344'. [ 191.355788][T11699] gre0: left promiscuous mode [ 191.357312][T11699] gre0: left allmulticast mode [ 191.379342][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 191.391291][T11699] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.393570][T11699] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.465384][T11699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.477292][T11699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.593837][T11699] vxlan0: left promiscuous mode [ 191.603020][ T85] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.606659][ T85] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.615873][ T85] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.619726][ T85] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.623711][ T85] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.627302][ T85] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.631880][ T85] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.634585][ T85] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.970938][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880241e3400: rx timeout, send abort [ 191.976599][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff8880241e3400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 192.030416][T11717] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2356'. [ 192.066374][T11722] overlayfs: failed to clone upperpath [ 192.419292][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 192.553117][T11728] netlink: 'syz.1.2362': attribute type 1 has an invalid length. [ 192.556159][T11728] netlink: 'syz.1.2362': attribute type 2 has an invalid length. [ 192.559254][T11728] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2362'. [ 192.683209][T11737] input: syz0 as /devices/virtual/input/input19 [ 192.835170][ T40] audit: type=1326 audit(1780701962.668:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11758 comm="syz.5.2375" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f94f7c code=0x0 [ 193.283040][ T40] audit: type=1800 audit(1780701963.118:67): pid=11788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2384" name=06 dev="tmpfs" ino=2964 res=0 errno=0 [ 193.418565][T11805] input: syz0 as /devices/virtual/input/input20 [ 193.449295][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 194.489236][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 194.674787][T11901] xt_policy: too many policy elements [ 194.720538][ T9] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 194.787244][ T40] audit: type=1800 audit(1780701964.618:68): pid=11904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2418" name="bus" dev="9p" ino=72877975 res=0 errno=0 [ 194.881264][ T9] usb 11-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 111, setting to 64 [ 194.884766][ T9] usb 11-1: config 0 interface 0 has no altsetting 0 [ 194.888430][ T9] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 194.891733][ T9] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 194.894539][ T9] usb 11-1: Product: syz [ 194.896023][ T9] usb 11-1: Manufacturer: syz [ 194.897587][ T9] usb 11-1: SerialNumber: syz [ 194.901608][ T9] usb 11-1: config 0 descriptor?? [ 194.907076][T11898] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 194.920807][ T9] usb 11-1: selecting invalid altsetting 0 [ 195.124783][T11898] usb 11-1: BOGUS urb xfer, pipe 0 != type 3 [ 195.176534][ T5853] usb 11-1: USB disconnect, device number 4 [ 195.176550][ C1] usb 11-1: Unable to submit urb #1: -19 at snd_usb_queue_pending_output_urbs [ 195.529347][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 195.658663][T11924] overlayfs: failed to clone upperpath [ 196.039380][T11943] IPv6: sit3: Disabled Multicast RS [ 196.223516][T11962] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 196.333392][T11976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.336732][T11976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.579220][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 196.932111][T12007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.935507][T12007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.448603][T12040] tls_set_device_offload_rx: netdev not found [ 197.485869][ T40] audit: type=1800 audit(1780701967.318:69): pid=12045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2478" name="nullb0" dev="tmpfs" ino=1844 res=0 errno=0 [ 197.602048][T12055] overlayfs: statfs failed on './file0' [ 197.620001][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 198.425828][T12128] fuse: fd is not a fuse device [ 198.649243][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 198.892741][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.895388][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.937141][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 198.942355][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 198.999461][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 199.001706][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 199.209438][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 199.211408][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 199.259340][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 199.261413][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 199.548811][T12179] syz.5.2532 (12179) used greatest stack depth: 18936 bytes left [ 199.699263][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 199.720569][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 199.723322][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 199.764950][T12146] ceph: No mds server is up or the cluster is laggy [ 199.765032][T12149] ceph: No mds server is up or the cluster is laggy [ 199.783576][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 199.786743][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 199.806156][T12187] __nla_validate_parse: 9 callbacks suppressed [ 199.806172][T12187] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2525'. [ 199.811880][T12187] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2525'. [ 200.075518][ T40] audit: type=1326 audit(1780701969.908:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12192 comm="syz.6.2527" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffef7c code=0x0 [ 200.739234][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 200.822276][T12221] mac80211_hwsim hwsim12 »»»»»»: renamed from wlan0 (while UP) [ 201.274409][ T24] libceph: connect (1)[c::]:6789 error -99 [ 201.277980][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 201.299929][ T5846] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 201.326036][ T24] libceph: connect (1)[c::]:6789 error -99 [ 201.328053][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 201.469214][ T5846] usb 11-1: Using ep0 maxpacket: 8 [ 201.472112][ T5846] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.475565][ T5846] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.478984][ T5846] usb 11-1: config 0 interface 0 has no altsetting 0 [ 201.481304][ T5846] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 201.484122][ T5846] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.490075][ T5846] usb 11-1: config 0 descriptor?? [ 201.549405][ T24] libceph: connect (1)[c::]:6789 error -99 [ 201.551579][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 201.599509][ T24] libceph: connect (1)[c::]:6789 error -99 [ 201.601919][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 201.769455][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 201.901768][ T5846] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 201.904746][ T5846] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 201.906961][ T5846] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 201.909261][ T5846] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 201.911398][ T5846] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 201.913876][ T5846] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 202.059369][ T24] libceph: connect (1)[c::]:6789 error -99 [ 202.061712][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 202.105201][T12255] ceph: No mds server is up or the cluster is laggy [ 202.105269][T12250] ceph: No mds server is up or the cluster is laggy [ 202.110148][ T5853] usb 11-1: USB disconnect, device number 5 [ 202.112151][ T24] libceph: connect (1)[c::]:6789 error -99 [ 202.115027][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 202.195060][T12263] random: crng reseeded on system resumption [ 202.438189][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2576'. [ 202.641978][T12294] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2566'. [ 202.645884][T12294] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2566'. [ 202.665396][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2575'. [ 202.809269][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 203.380084][T12337] netlink: 'syz.6.2591': attribute type 1 has an invalid length. [ 203.401219][T12337] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.505975][T12344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2594'. [ 203.692949][T12364] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.2604'. [ 203.696852][T12364] netlink: Conntrack attr has 4 unknown bytes [ 203.836997][ T40] audit: type=1326 audit(1780701973.668:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12376 comm="syz.6.2610" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffef7c code=0x0 [ 203.849241][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 203.888062][T12388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.894097][T12388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.889263][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 204.907336][T12433] loop6: detected capacity change from 0 to 7 [ 204.915471][T12433] Dev loop6: unable to read RDB block 7 [ 204.919440][T12433] loop6: unable to read partition table [ 204.921325][T12433] loop6: partition table beyond EOD, truncated [ 204.928025][T12433] loop_reread_partitions: partition scan of loop6 (þ被xü^>±à– ) failed (rc=-5) [ 205.074358][T12448] capability: warning: `syz.5.2641' uses deprecated v2 capabilities in a way that may be insecure [ 205.108556][T12450] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2642'. [ 205.318765][T12469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.322083][T12469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.652164][T12481] gretap0: refused to change device tx_queue_len [ 205.655296][T12481] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 205.939429][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 206.454954][T12533] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2679'. [ 206.468434][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2679'. [ 206.734163][T12549] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 206.737204][T12549] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 206.777790][T12551] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2688'. [ 206.800047][T12558] netlink: 'syz.6.2690': attribute type 10 has an invalid length. [ 206.803719][T12558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.806692][T12558] team0: Port device bond0 added [ 206.882735][T12569] sit3: entered allmulticast mode [ 206.892392][T12567] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 206.969226][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 207.285543][T12593] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2706'. [ 207.288553][T12593] netlink: Unknown conntrack attr (0) [ 207.664809][T12621] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2718'. [ 207.731250][T12627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.735003][T12627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.009307][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 208.042024][T12657] tls_set_device_offload: netdev not found [ 208.456700][T12674] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2742'. [ 209.049701][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 209.263967][T12711] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 209.372068][T12716] 9pnet: p9_errstr2errno: server reported unknown error ./file0 [ 209.615292][T12742] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2773'. [ 209.631867][T12739] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2772'. [ 209.686295][ T844] libceph: connect (1)[c::]:6789 error -101 [ 209.688232][ T844] libceph: mon0 (1)[c::]:6789 connect error [ 209.782989][T12745] ceph: No mds server is up or the cluster is laggy [ 210.070010][T12786] batadv_slave_1: entered promiscuous mode [ 210.076950][T12784] fjî: entered promiscuous mode [ 210.082925][T12785] batadv_slave_1: left promiscuous mode [ 210.089219][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 210.545093][T12832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2810'. [ 210.705587][T12846] netlink: 212328 bytes leftover after parsing attributes in process `syz.5.2817'. [ 210.705699][T12846] netlink: Unknown conntrack attr (type=2304, max=9) [ 211.139218][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 211.342876][T12880] netlink: 'syz.3.2829': attribute type 1 has an invalid length. [ 211.364953][T12880] bond1: entered promiscuous mode [ 211.365280][T12880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.391780][T12880] bond1: (slave bridge1): making interface the new active one [ 211.391802][T12880] bridge1: entered promiscuous mode [ 211.395902][T12880] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 212.169362][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 212.451853][T12916] 9p: Invalid gid '0x00000000ffffffff' [ 212.605963][ T40] audit: type=1326 audit(1780701982.438:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12924 comm="syz.1.2847" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702ef7c code=0x0 [ 212.712617][T12937] ip6tnl2: entered allmulticast mode [ 213.020497][T12959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.024300][T12959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.158043][ T844] IPVS: starting estimator thread 0... [ 213.192170][T12973] netlink: 'syz.6.2866': attribute type 1 has an invalid length. [ 213.204762][T12973] bond4: entered promiscuous mode [ 213.207122][T12973] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.209375][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 213.230337][T12973] bond4: (slave bridge1): making interface the new active one [ 213.232828][T12973] bridge1: entered promiscuous mode [ 213.235035][T12973] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 213.270057][T12969] IPVS: using max 44 ests per chain, 105600 per kthread [ 213.475970][T12989] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2872'. [ 213.565629][T12991] "syz.1.2873" (12991) uses obsolete ecb(arc4) skcipher [ 213.828363][T13013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.832436][T13013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.038938][ T844] libceph: connect (1)[c::]:6789 error -101 [ 214.041692][ T844] libceph: mon0 (1)[c::]:6789 connect error [ 214.065307][T13028] fuse: fd is not a fuse device [ 214.135426][T13024] ceph: No mds server is up or the cluster is laggy [ 214.228607][T13040] A link change request failed with some changes committed already. Interface sit4 may have been left with an inconsistent configuration, please check. [ 214.249357][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 214.360525][T13051] 9p: Bad value for 'rfdno' [ 214.523012][T13069] netlink: 'syz.3.2903': attribute type 1 has an invalid length. [ 214.543265][T13069] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.289332][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 215.749068][T13109] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2925'. [ 215.762965][T13110] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2917'. [ 215.901630][T13131] lo speed is unknown, defaulting to 1000 [ 215.907043][T13131] lo speed is unknown, defaulting to 1000 [ 215.910443][T13131] lo speed is unknown, defaulting to 1000 [ 216.069049][T13141] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2930'. [ 216.107559][ T844] lo speed is unknown, defaulting to 1000 [ 216.109257][T13131] infiniband sz1: set down [ 216.109594][T13131] infiniband sz1: added lo [ 216.124809][T13131] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 216.130570][T13131] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 216.135941][T13131] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 216.170157][T13131] RDS/IB: sz1: added [ 216.172268][T13131] smc: adding ib device sz1 with port count 1 [ 216.174896][T13131] smc: ib device sz1 port 1 has no pnetid [ 216.181508][ T844] lo speed is unknown, defaulting to 1000 [ 216.185878][T13131] lo speed is unknown, defaulting to 1000 [ 216.328961][T13131] lo speed is unknown, defaulting to 1000 [ 216.329237][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 216.485603][T13131] lo speed is unknown, defaulting to 1000 [ 216.668882][T13131] lo speed is unknown, defaulting to 1000 [ 216.804546][T13131] lo speed is unknown, defaulting to 1000 [ 217.192068][T13209] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2965'. [ 217.213808][ T110] libceph: connect (1)[c::]:6789 error -101 [ 217.217103][ T110] libceph: mon0 (1)[c::]:6789 connect error [ 217.290684][T13206] ceph: No mds server is up or the cluster is laggy [ 217.369268][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 217.709694][T13231] fuse: fd is not a fuse device [ 218.224132][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2977'. [ 218.229092][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2977'. [ 218.233807][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2977'. [ 218.275350][ T40] audit: type=1326 audit(1780701988.108:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13254 comm="syz.3.2978" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705ef7c code=0x0 [ 218.409286][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 219.048423][T13266] option changes via remount are deprecated (pid=13262 comm=syz.6.2982) [ 219.269455][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2986'. [ 219.274475][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2986'. [ 219.286141][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2986'. [ 219.449227][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 219.632741][ T40] audit: type=1326 audit(1780701989.468:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13293 comm="syz.1.2993" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702ef7c code=0x0 [ 219.737144][T13300] overlayfs: failed to resolve './cgroup': -2 [ 220.368175][ T5833] libceph: connect (1)[c::]:6789 error -101 [ 220.370777][ T5833] libceph: mon0 (1)[c::]:6789 connect error [ 220.454759][T13324] ceph: No mds server is up or the cluster is laggy [ 220.489230][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 221.054830][ T40] audit: type=1326 audit(1780701990.888:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13355 comm="syz.5.3017" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f94f7c code=0x0 [ 221.220141][T13369] overlayfs: failed to clone upperpath [ 221.529340][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 221.931144][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 221.933068][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 222.021409][T13374] ceph: No mds server is up or the cluster is laggy [ 222.389029][ T9] libceph: connect (1)[c::]:6789 error -101 [ 222.391629][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 222.499252][T13395] ceph: No mds server is up or the cluster is laggy [ 222.569283][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 222.623381][ T40] audit: type=1326 audit(1780701992.458:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13411 comm="syz.1.3035" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702ef7c code=0x0 [ 222.664692][T13416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.669641][T13416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.589565][ T844] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 223.609240][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 223.753508][ T844] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.761011][ T844] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.764750][ T844] usb 11-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 223.768127][ T844] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.792311][ T844] usb 11-1: config 0 descriptor?? [ 224.229673][ T844] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 224.232789][ T844] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 224.252284][ T844] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0D8C:0022.000C/input/input21 [ 224.300524][ T844] cm6533_jd 0003:0D8C:0022.000C: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 224.429835][ T5833] usb 11-1: USB disconnect, device number 6 [ 224.504599][T13445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.509602][T13445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.659231][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 225.077146][ T110] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 225.131346][ T110] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 225.393149][T13465] hid-generic 0003:0627:0001.0001: pid 13465 passed too short report [ 225.689353][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 226.530510][T13514] tls_set_device_offload: netdev not found [ 226.739295][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 226.963492][T13526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.966229][T13526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.327236][T13534] tls_set_device_offload: netdev not found [ 227.769313][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 228.809291][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 229.849236][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 230.388644][T13593] netlink: 'syz.6.3114': attribute type 10 has an invalid length. [ 230.395100][T13593] netlink: 'syz.6.3114': attribute type 10 has an invalid length. [ 230.889254][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 231.929563][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 232.479522][T13655] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3135'. [ 232.493360][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 232.497917][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 232.501883][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 232.504500][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 232.573118][T13661] udevd[13661]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 232.578471][T13661] udevd[13661]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 232.592997][T13657] ceph: No mds server is up or the cluster is laggy [ 232.791923][T13683] rdma_rxe: rxe_newlink: failed to add lo [ 232.887799][T13683] lo speed is unknown, defaulting to 1000 [ 232.969234][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 233.077420][T13692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3151'. [ 233.099312][ T9] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 233.155003][ T5846] IPVS: starting estimator thread 0... [ 233.251472][ T9] usb 11-1: config 0 has no interfaces? [ 233.253435][ T9] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.256323][ T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.261349][ T9] usb 11-1: config 0 descriptor?? [ 233.262073][T13697] IPVS: using max 44 ests per chain, 105600 per kthread [ 233.327763][T13584] udevd[13584]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 233.340738][T13661] udevd[13661]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 233.513093][T13683] smc: removing ib device sz1 [ 233.557605][T13683] smbdirect: ib_dev[sz1] removed [ 233.904615][T13731] overlayfs: failed to clone upperpath [ 234.009323][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 234.429066][ T5846] usb 11-1: USB disconnect, device number 7 [ 235.049013][T13751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3172'. [ 235.059299][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 235.505780][T13775] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3181'. [ 235.914083][T13661] udevd[13661]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 235.943015][T13805] fuse: No fuse device found [ 236.089260][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 236.142073][T13816] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3199'. [ 236.297276][T13661] udevd[13661]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 236.670518][T13852] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3212'. [ 237.129248][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 237.500889][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3228'. [ 237.505456][T13891] bridge2: entered promiscuous mode [ 237.507167][T13891] bridge2: entered allmulticast mode [ 238.169374][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 238.246763][T13938] bridge0: port 3(vlan2) entered blocking state [ 238.249740][T13938] bridge0: port 3(vlan2) entered disabled state [ 238.252524][T13938] vlan2: entered allmulticast mode [ 238.254767][T13938] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 238.260661][T13938] vlan2: entered promiscuous mode [ 238.262879][T13938] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 238.516891][T13946] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 238.756667][T13965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3257'. [ 238.816948][ T40] audit: type=1800 audit(1780702008.648:77): pid=13970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3259" name="nullb0" dev="tmpfs" ino=4676 res=0 errno=0 [ 239.209330][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 239.269404][T14005] overlayfs: failed to clone upperpath [ 240.249316][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 240.655624][T14062] geneve2: entered promiscuous mode [ 240.660272][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.665603][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.670662][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.674710][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.732591][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3300'. [ 241.205886][T14091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3312'. [ 241.267557][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3314'. [ 241.271431][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3314'. [ 241.275231][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3314'. [ 241.299249][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 241.402549][T14099] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3316'. [ 241.407329][T14099] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3316'. [ 241.683368][T14113] fuse: fd is not a fuse device [ 241.708782][T14114] lo: entered promiscuous mode [ 241.711422][T14114] batadv_slave_0: entered promiscuous mode [ 241.713809][T14112] batadv_slave_0: left promiscuous mode [ 241.723388][T14112] lo: left promiscuous mode [ 241.951009][T14121] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3324'. [ 242.046223][T14128] gre2: entered promiscuous mode [ 242.329258][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 243.369273][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 243.553131][T14181] fuse: fd is not a fuse device [ 244.096113][T14211] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3357'. [ 244.409280][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 244.939551][ T40] audit: type=1800 audit(1780702014.768:78): pid=14250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3364" name="file0" dev="overlay" ino=4199 res=0 errno=0 [ 245.148410][T14262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.155662][T14262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.365557][T14262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.368447][T14262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.449256][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 246.489262][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 247.529843][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 248.569247][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 248.762636][T14338] fuse: fd is not a fuse device [ 248.935176][T14342] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3408'. [ 249.136269][T14361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3403'. [ 249.619292][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 249.681186][T14386] fuse: fd is not a fuse device [ 250.006700][T14394] overlayfs: failed to clone upperpath [ 250.207772][T14406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3417'. [ 250.649247][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 251.689383][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 251.879302][ T5846] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 252.041979][ T5846] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 252.045001][ T5846] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 252.048262][ T5846] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 252.051440][ T5846] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 252.055413][ T5846] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 252.061823][ T5846] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 252.065196][ T5846] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 252.069269][ T5846] usb 11-1: Product: syz [ 252.070712][ T5846] usb 11-1: Manufacturer: syz [ 252.082141][ T5846] cdc_wdm 11-1:1.0: skipping garbage [ 252.084129][ T5846] cdc_wdm 11-1:1.0: skipping garbage [ 252.092761][ T5846] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 252.094736][ T5846] cdc_wdm 11-1:1.0: Unknown control protocol [ 252.307468][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 252.309616][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 252.311743][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 252.313928][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 252.316136][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 252.318302][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 252.320851][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 252.323531][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 252.326285][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 252.328838][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 252.333977][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 252.336750][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 252.339573][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 252.342034][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 252.344122][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 252.346160][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 252.348922][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 252.351632][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 252.354390][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 252.357162][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 252.360624][ T5846] usb 11-1: USB disconnect, device number 8 [ 252.363109][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 252.729411][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 253.425196][T14497] netlink: 208240 bytes leftover after parsing attributes in process `syz.6.3441'. [ 253.518374][ T40] audit: type=1326 audit(1780702023.348:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.5.3454" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f7c code=0x7ffc0000 [ 253.528569][ T40] audit: type=1326 audit(1780702023.358:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.5.3454" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f7c code=0x7ffc0000 [ 253.536026][ T40] audit: type=1326 audit(1780702023.358:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.5.3454" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f7c code=0x7ffc0000 [ 253.571804][ T40] audit: type=1326 audit(1780702023.408:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.5.3454" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f7c code=0x7ffc0000 [ 253.579036][ T40] audit: type=1326 audit(1780702023.408:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.5.3454" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f94f7c code=0x7ffc0000 [ 253.588583][ T40] audit: type=1326 audit(1780702023.408:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.5.3454" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f7c code=0x7ffc0000 [ 253.595529][ T40] audit: type=1326 audit(1780702023.408:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.5.3454" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f7c code=0x7ffc0000 [ 253.603497][ T40] audit: type=1326 audit(1780702023.418:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.5.3454" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f7c code=0x7ffc0000 [ 253.610584][ T40] audit: type=1326 audit(1780702023.418:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.5.3454" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f94f7c code=0x7ffc0000 [ 253.618197][ T40] audit: type=1326 audit(1780702023.418:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14507 comm="syz.5.3454" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f7c code=0x7ffc0000 [ 253.709195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 253.769258][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 253.795212][T14522] fuse: fd is not a fuse device [ 253.850967][T14527] overlayfs: failed to clone upperpath [ 254.809355][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 254.883306][T14568] netlink: 'syz.5.3479': attribute type 10 has an invalid length. [ 254.887374][T14568] netlink: 'syz.5.3479': attribute type 10 has an invalid length. [ 255.345117][T14572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3471'. [ 255.849237][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 256.223728][T14611] fuse: fd is not a fuse device [ 256.560101][T14624] overlayfs: failed to clone upperpath [ 256.899286][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 257.088854][T14638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3489'. [ 257.289578][ T5757] Bluetooth: hci2: command 0x0406 tx timeout [ 257.929264][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 258.027829][ T9] libceph: connect (1)[c::]:6789 error -101 [ 258.032934][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 258.109942][T14675] ceph: No mds server is up or the cluster is laggy [ 258.254977][T14696] fuse: fd is not a fuse device [ 258.969325][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 259.399303][ T9] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 259.552993][ T9] usb 11-1: Using ep0 maxpacket: 32 [ 259.579994][ T9] usb 11-1: config 0 has an invalid interface number: 67 but max is 0 [ 259.583000][ T9] usb 11-1: config 0 has no interface number 0 [ 259.585499][ T9] usb 11-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 259.589475][ T9] usb 11-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 259.690858][ T9] usb 11-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 259.693604][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.696116][ T9] usb 11-1: Product: syz [ 259.697554][ T9] usb 11-1: Manufacturer: syz [ 259.699078][ T9] usb 11-1: SerialNumber: syz [ 259.711879][ T9] usb 11-1: config 0 descriptor?? [ 259.716882][ T9] smsc95xx 11-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 259.722702][ T9] smsc95xx 11-1:0.67: probe with driver smsc95xx failed with error -22 [ 260.009373][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 260.356278][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.361797][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.665193][T14754] Cache volume key already in use (9p,syz,) [ 261.049345][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 262.089384][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 262.173093][ T5846] usb 11-1: USB disconnect, device number 9 [ 262.235728][T14799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.239308][T14799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.409344][ T5751] Bluetooth: hci0: command 0x0406 tx timeout [ 263.129257][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 263.773855][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3560'. [ 264.169289][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 265.209295][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 266.082296][T14889] bridge2: entered promiscuous mode [ 266.084636][T14889] bridge2: entered allmulticast mode [ 266.249276][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 266.582006][T14905] fuse: fd is not a fuse device [ 267.024417][T14937] fuse: fd is not a fuse device [ 267.289285][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 268.339259][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 269.278308][T14995] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 269.369230][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 270.419308][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 271.449420][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 272.401726][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3651'. [ 272.465022][T15080] overlayfs: failed to clone upperpath [ 272.489269][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 273.529352][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 274.082004][T15122] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3677'. [ 274.110114][T15121] gre1: entered promiscuous mode [ 274.112817][T15122] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3677'. [ 274.390150][T15129] geneve2: entered promiscuous mode [ 274.569325][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 275.323891][T15156] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3679'. [ 275.468922][T15159] fuse: fd is not a fuse device [ 275.619278][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 276.586268][T15182] overlayfs: failed to clone upperpath [ 276.649288][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 277.261949][T15217] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 277.265030][T15217] overlayfs: failed to set xattr on upper [ 277.267371][T15217] overlayfs: ...falling back to redirect_dir=nofollow. [ 277.271433][T15217] overlayfs: ...falling back to index=off. [ 277.274793][T15217] overlayfs: conflicting lowerdir path [ 277.689260][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 278.729257][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 279.769273][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 280.097083][T15284] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.3728'. [ 280.292250][T15295] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 280.467619][T15306] bridge_slave_0 (unregistering): left allmulticast mode [ 280.470429][T15306] bridge_slave_0 (unregistering): left promiscuous mode [ 280.472641][T15306] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.730802][T15312] VFS: Mount too revealing [ 280.809768][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 280.941042][T15329] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 281.441742][T15350] netlink: 212344 bytes leftover after parsing attributes in process `syz.6.3756'. [ 281.495666][T15355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3755'. [ 281.620196][T15364] overlayfs: failed to clone upperpath [ 281.849224][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 282.007975][T15385] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3768'. [ 282.420538][T15402] fuse: fd is not a fuse device [ 282.620533][T15410] overlayfs: failed to clone upperpath [ 282.759366][T15423] netlink: 'syz.5.3781': attribute type 1 has an invalid length. [ 282.794473][T15423] bond3: (slave geneve3): making interface the new active one [ 282.798296][T15423] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 282.804388][ T46] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 282.807012][ T46] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 282.809588][ T46] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 282.812133][ T46] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 282.889238][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 283.011295][T15433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3786'. [ 283.016172][T15433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3786'. [ 283.626814][T15440] syz.3.3790: vmalloc error: size 2147479872, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 283.637232][T15440] CPU: 1 UID: 0 PID: 15440 Comm: syz.3.3790 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.637252][T15440] Tainted: [L]=SOFTLOCKUP [ 283.637257][T15440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 283.637263][T15440] Call Trace: [ 283.637268][T15440] [ 283.637273][T15440] dump_stack_lvl+0x100/0x190 [ 283.637297][T15440] warn_alloc.cold+0x95/0x1c1 [ 283.637309][T15440] ? __pfx_warn_alloc+0x10/0x10 [ 283.637336][T15440] ? __lock_acquire+0x4a5/0x2630 [ 283.637354][T15440] ? __lock_acquire+0x4a5/0x2630 [ 283.637374][T15440] __vmalloc_node_range_noprof+0x136c/0x1630 [ 283.637388][T15440] ? reacquire_held_locks+0xce/0x1e0 [ 283.637405][T15440] ? release_sock+0x21/0x280 [ 283.637417][T15440] ? do_raw_spin_lock+0x128/0x260 [ 283.637430][T15440] ? netlink_alloc_large_skb+0x9b/0x150 [ 283.637446][T15440] ? alloc_pages_mpol+0x25a/0x540 [ 283.637461][T15440] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 283.637478][T15440] ? rcu_is_watching+0x12/0xc0 [ 283.637494][T15440] __kvmalloc_node_noprof+0x3de/0xa00 [ 283.637505][T15440] ? netlink_alloc_large_skb+0x9b/0x150 [ 283.637521][T15440] ? netlink_alloc_large_skb+0x9b/0x150 [ 283.637539][T15440] netlink_alloc_large_skb+0x9b/0x150 [ 283.637553][T15440] netlink_sendmsg+0x680/0xda0 [ 283.637570][T15440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.637586][T15440] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 283.637600][T15440] sock_write_iter+0x524/0x5a0 [ 283.637613][T15440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.637627][T15440] ? __pfx_sock_write_iter+0x10/0x10 [ 283.637640][T15440] ? futex_hash+0x141/0x370 [ 283.637661][T15440] ? bpf_lsm_file_permission+0x9/0x10 [ 283.637672][T15440] ? security_file_permission+0x76/0x210 [ 283.637688][T15440] ? rw_verify_area+0xce/0x6d0 [ 283.637700][T15440] vfs_write+0x6ac/0x1070 [ 283.637713][T15440] ? __pfx_sock_write_iter+0x10/0x10 [ 283.637727][T15440] ? __pfx_vfs_write+0x10/0x10 [ 283.637738][T15440] ? find_held_lock+0x2b/0x80 [ 283.637760][T15440] ksys_write+0x1f8/0x250 [ 283.637772][T15440] ? __pfx_ksys_write+0x10/0x10 [ 283.637785][T15440] ? rcu_is_watching+0x12/0xc0 [ 283.637799][T15440] __do_fast_syscall_32+0xe7/0x970 [ 283.637818][T15440] do_fast_syscall_32+0x32/0x70 [ 283.637833][T15440] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.637847][T15440] RIP: 0023:0xf705ef7c [ 283.637856][T15440] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 283.637867][T15440] RSP: 002b:00000000f544d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 283.637879][T15440] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000280 [ 283.637886][T15440] RDX: 00000000ffffff03 RSI: 0000000000000000 RDI: 0000000000000000 [ 283.637892][T15440] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.637898][T15440] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 283.637904][T15440] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.637918][T15440] [ 283.638035][T15440] Mem-Info: [ 283.653473][T15444] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 283.674738][T15440] active_anon:26509 inactive_anon:15560 isolated_anon:0 [ 283.674738][T15440] active_file:7659 inactive_file:16991 isolated_file:0 [ 283.674738][T15440] unevictable:1804 dirty:485 writeback:0 [ 283.674738][T15440] slab_reclaimable:6283 slab_unreclaimable:57621 [ 283.674738][T15440] mapped:22439 shmem:40465 pagetables:1792 [ 283.674738][T15440] sec_pagetables:304 bounce:0 [ 283.674738][T15440] kernel_misc_reclaimable:0 [ 283.674738][T15440] free:37436 free_pcp:3273 free_cma:0 [ 283.675987][T15444] overlayfs: failed to set xattr on upper [ 283.679523][T15440] Node 0 active_anon:916kB inactive_anon:68kB active_file:376kB inactive_file:28kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:36kB writeback:0kB shmem:4448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9100kB pagetables:1808kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 283.683545][T15444] overlayfs: ...falling back to redirect_dir=nofollow. [ 283.686436][T15440] Node 1 active_anon:105120kB inactive_anon:62172kB active_file:30260kB inactive_file:67936kB unevictable:3680kB isolated(anon):0kB isolated(file):0kB mapped:89704kB dirty:1904kB writeback:0kB shmem:157412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:5524kB pagetables:5360kB sec_pagetables:88kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 283.686652][T15444] overlayfs: ...falling back to index=off. [ 283.686659][T15444] overlayfs: ...falling back to uuid=null. [ 283.686663][T15444] overlayfs: ...falling back to xino=off. [ 283.686688][T15444] overlayfs: conflicting lowerdir path [ 283.798287][T15440] Node 0 DMA free:3196kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.807951][T15440] lowmem_reserve[]: 0 285 285 285 285 [ 283.809793][T15440] Node 0 DMA32 free:24832kB boost:10240kB min:23336kB low:26608kB high:29880kB reserved_highatomic:0KB free_highatomic:0KB active_anon:916kB inactive_anon:68kB active_file:368kB inactive_file:28kB unevictable:3536kB writepending:32kB zspages:2436kB present:1032196kB managed:292748kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB [ 283.819810][T15440] lowmem_reserve[]: 0 0 0 0 0 [ 283.821464][T15440] Node 1 DMA32 free:121344kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:0KB free_highatomic:0KB active_anon:105020kB inactive_anon:62172kB active_file:30260kB inactive_file:67936kB unevictable:3580kB writepending:1904kB zspages:3984kB present:1048432kB managed:948212kB mlocked:44kB bounce:0kB free_pcp:11476kB local_pcp:1876kB free_cma:0kB [ 283.832414][T15440] lowmem_reserve[]: 0 0 0 0 0 [ 283.834124][T15440] Node 0 DMA: 125*4kB (U) 29*8kB (U) 12*16kB (U) 13*32kB (U) 5*64kB (U) 4*128kB (U) 2*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 3196kB [ 283.840007][T15440] Node 0 DMA32: 760*4kB (UME) 180*8kB (UME) 57*16kB (UME) 134*32kB (UME) 47*64kB (UME) 19*128kB (UME) 10*256kB (UM) 4*512kB (UM) 3*1024kB (U) 1*2048kB (M) 0*4096kB = 24848kB [ 283.846468][T15440] Node 1 DMA32: 2589*4kB (UE) 2881*8kB (UME) 1951*16kB (UE) 72*32kB (UME) 183*64kB (UME) 90*128kB (UME) 49*256kB (UME) 32*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 121132kB [ 283.853079][T15440] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.856436][T15440] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 283.860368][T15440] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.864143][T15440] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 283.867630][T15440] 66471 total pagecache pages [ 283.869535][T15440] 1360 pages in swap cache [ 283.871238][T15440] Free swap = 67912kB [ 283.872827][T15440] Total swap = 124996kB [ 283.874436][T15440] 524155 pages RAM [ 283.875882][T15440] 0 pages HighMem/MovableOnly [ 283.877705][T15440] 210075 pages reserved [ 283.879495][T15440] 0 pages cma reserved [ 283.929275][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 283.953492][T15455] overlayfs: failed to clone upperpath [ 284.310177][ T5757] Bluetooth: hci2: unexpected event for opcode 0x100c [ 284.655581][T15477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.716433][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 284.716444][ T40] audit: type=1326 audit(1780702054.548:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15478 comm="syz.3.3803" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705ef7c code=0x0 [ 284.757131][T15485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.969236][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 285.023596][T15490] fuse: fd is not a fuse device [ 285.083542][T15492] overlayfs: failed to clone upperpath [ 285.648353][T15513] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.3815'. [ 285.653927][T15515] overlayfs: failed to clone upperpath [ 285.857028][ T40] audit: type=1326 audit(1780702055.688:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.5.3820" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f94f7c code=0x7ffc0000 [ 285.868456][ T40] audit: type=1326 audit(1780702055.698:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.5.3820" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f94fa7 code=0x7ffc0000 [ 285.875380][ T40] audit: type=1326 audit(1780702055.698:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.5.3820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f7c code=0x7ffc0000 [ 285.883026][ T40] audit: type=1326 audit(1780702055.698:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.5.3820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f7c code=0x7ffc0000 [ 285.894086][ T40] audit: type=1326 audit(1780702055.698:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.5.3820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f7c code=0x7ffc0000 [ 285.907926][ T40] audit: type=1326 audit(1780702055.698:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.5.3820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f7c code=0x7ffc0000 [ 285.915499][ T40] audit: type=1326 audit(1780702055.698:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.5.3820" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94f7c code=0x7ffc0000 [ 285.922304][ T40] audit: type=1326 audit(1780702055.698:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.5.3820" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f94f7c code=0x7ffc0000 [ 285.928794][ T40] audit: type=1326 audit(1780702055.698:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15521 comm="syz.5.3820" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f94fa7 code=0x7ffc0000 [ 286.009269][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 286.768752][T15573] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3842'. [ 286.772750][T15573] netlink: 'syz.6.3842': attribute type 7 has an invalid length. [ 286.775344][T15573] netlink: 'syz.6.3842': attribute type 8 has an invalid length. [ 286.778125][T15573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3842'. [ 286.958322][T15579] tipc: Enabling of bearer rejected, already enabled [ 287.006388][T15588] hsr0: entered promiscuous mode [ 287.028158][T15579] tipc: Enabling of bearer rejected, failed to enable media [ 287.049282][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 287.131410][T15596] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3849'. [ 287.433147][T15613] overlayfs: failed to clone upperpath [ 287.557791][T15618] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.3861'. [ 287.563100][T15619] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.3862'. [ 287.616959][T15623] netlink: 'syz.6.3864': attribute type 1 has an invalid length. [ 287.668470][T15623] bond5: (slave geneve3): making interface the new active one [ 287.674633][T15623] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 287.677636][ T1203] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 287.681111][ T1203] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 287.683959][ T1203] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 287.686844][ T1203] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 287.845805][T15630] input: syz0 as /devices/virtual/input/input22 [ 287.855543][T15632] netlink: 'syz.1.3873': attribute type 1 has an invalid length. [ 287.968859][T15632] bond4: (slave geneve3): making interface the new active one [ 287.972750][T15632] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 287.976325][ T46] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 287.983032][ T46] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 287.995986][ T46] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 288.001984][ T46] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 288.099279][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 288.439096][T15662] tipc: Enabling of bearer rejected, failed to enable media [ 288.448594][T15662] tipc: Enabling of bearer rejected, failed to enable media [ 288.494962][T15664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.500937][T15664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.003881][ T5757] Bluetooth: hci2: unexpected event for opcode 0x0804 [ 289.129656][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 289.151518][T15675] hsr0: entered promiscuous mode [ 289.287089][T15678] hsr0: left promiscuous mode [ 289.912415][T15682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.979628][T15685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.169328][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 290.225223][T15692] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 290.842061][T15706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3891'. [ 290.845958][T15706] netlink: 'syz.1.3891': attribute type 7 has an invalid length. [ 290.849231][T15706] netlink: 'syz.1.3891': attribute type 8 has an invalid length. [ 290.852371][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3891'. [ 290.908809][T15709] input: syz0 as /devices/virtual/input/input23 [ 291.209265][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 292.226239][T15744] fuse: fd is not a fuse device [ 292.259334][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 292.299071][T15748] overlayfs: failed to clone upperpath [ 292.590163][ T40] kauditd_printk_skb: 109 callbacks suppressed [ 292.590180][ T40] audit: type=1326 audit(1780702062.428:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.3.3910" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf705ef7c code=0x7ffc0000 [ 292.609290][ T40] audit: type=1326 audit(1780702062.428:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.3.3910" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf705efa7 code=0x7ffc0000 [ 292.618260][ T40] audit: type=1326 audit(1780702062.428:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.3.3910" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf705ef7c code=0x7ffc0000 [ 292.627843][ T40] audit: type=1326 audit(1780702062.428:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.3.3910" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf705efa7 code=0x7ffc0000 [ 292.641165][ T40] audit: type=1326 audit(1780702062.428:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.3.3910" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf705ef7c code=0x7ffc0000 [ 292.659283][ T40] audit: type=1326 audit(1780702062.428:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.3.3910" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf705efa7 code=0x7ffc0000 [ 292.666003][ T40] audit: type=1326 audit(1780702062.428:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.3.3910" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf705ef7c code=0x7ffc0000 [ 292.673618][ T40] audit: type=1326 audit(1780702062.428:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.3.3910" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf705efa7 code=0x7ffc0000 [ 292.680740][ T40] audit: type=1326 audit(1780702062.428:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.3.3910" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf705ef7c code=0x7ffc0000 [ 292.687943][ T40] audit: type=1326 audit(1780702062.428:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15757 comm="syz.3.3910" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf705efa7 code=0x7ffc0000 [ 292.918146][T15771] netlink: 'syz.5.3916': attribute type 2 has an invalid length. [ 293.289326][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 294.339419][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 295.120261][T15846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.145546][T15846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.369394][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 296.409308][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 296.467970][T15894] fuse: fd is not a fuse device [ 296.473527][T15894] overlayfs: failed to clone upperpath [ 296.553120][T15892] kvm: apic: phys broadcast and lowest prio [ 296.577658][T15896] 9p: Bad value for 'wfdno' [ 296.652188][T15900] overlayfs: failed to clone lowerpath [ 296.712350][T15903] overlayfs: failed to clone lowerpath [ 297.449271][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 297.959540][T15925] openvswitch: netlink: Duplicate or invalid key (type 0). [ 297.964738][T15925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.234958][T15941] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3991'. [ 298.489391][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 299.401004][T15973] loop2: detected capacity change from 0 to 7 [ 299.411646][T15973] Dev loop2: unable to read RDB block 7 [ 299.413363][T15973] loop2: unable to read partition table [ 299.421632][T15973] loop2: partition table beyond EOD, truncated [ 299.423582][T15973] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 299.529318][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 299.903056][T15992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4013'. [ 299.908884][T15992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4013'. [ 299.913261][T15992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4013'. [ 300.569616][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 300.596879][T16006] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.4018'. [ 300.721438][T16014] overlayfs: failed to clone upperpath [ 301.451740][T15994] bridge0: port 3(erspan0) entered blocking state [ 301.454751][T15994] bridge0: port 3(erspan0) entered disabled state [ 301.457763][T15994] erspan0: entered allmulticast mode [ 301.461984][T15994] erspan0: entered promiscuous mode [ 301.465473][T15995] erspan0: left allmulticast mode [ 301.467047][T15995] erspan0: left promiscuous mode [ 301.472858][T15995] bridge0: port 3(erspan0) entered disabled state [ 301.550765][ T5757] Bluetooth: hci1: hcon ffff88802a268000 sent 0 < count 8 [ 301.609395][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 302.200817][T16038] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4030'. [ 302.318561][T16042] fuse: fd is not a fuse device [ 302.381037][T16044] overlayfs: failed to clone upperpath [ 302.649342][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 302.669112][T16056] netlink: 'syz.5.4037': attribute type 1 has an invalid length. [ 302.806756][T16056] bond4: entered promiscuous mode [ 302.814097][T16056] 8021q: adding VLAN 0 to HW filter on device bond4 [ 302.937383][T16066] 8021q: adding VLAN 0 to HW filter on device bond4 [ 302.946732][T16066] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 302.954827][T16066] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 302.973488][T16066] bond4: (slave vti0): making interface the new active one [ 302.979247][T16066] vti0: entered promiscuous mode [ 302.986107][T16066] bond4: (slave vti0): Enslaving as an active interface with an up link [ 303.114368][T16080] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.4042'. [ 303.352029][T16093] overlayfs: failed to clone upperpath [ 303.449537][T16096] team0: entered allmulticast mode [ 303.453923][T16096] team_slave_0: entered allmulticast mode [ 303.455841][T16096] team_slave_1: entered allmulticast mode [ 303.472139][T16096] team0: left allmulticast mode [ 303.473757][T16096] team_slave_0: left allmulticast mode [ 303.477713][T16096] team_slave_1: left allmulticast mode [ 303.689707][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 304.356538][T16113] binder: 16111:16113 ioctl c0306201 80000480 returned -14 [ 304.513431][T16123] netlink: 'syz.1.4057': attribute type 1 has an invalid length. [ 304.559676][T16123] gretap0: entered allmulticast mode [ 304.571759][T16123] bond5: (slave gretap0): making interface the new active one [ 304.575221][T16123] bond5: (slave gretap0): Enslaving as an active interface with an up link [ 304.729278][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 305.409102][ T5846] usb 8-1: USB disconnect, device number 12 [ 306.027524][ T5751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 306.037489][ T5751] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 306.043612][ T5751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 306.066584][ T5751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 306.072322][ T5751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 306.367024][T16186] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4083'. [ 306.424921][T16187] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4083'. [ 306.601635][T16164] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.604579][T16164] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.607454][T16164] bridge_slave_0: entered allmulticast mode [ 306.611654][T16164] bridge_slave_0: entered promiscuous mode [ 306.616893][T16164] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.619526][T16164] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.622146][T16164] bridge_slave_1: entered allmulticast mode [ 306.625163][T16164] bridge_slave_1: entered promiscuous mode [ 306.683197][T16164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.224520][T16164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.306200][T16164] team0: Port device team_slave_0 added [ 307.314569][T16164] team0: Port device team_slave_1 added [ 307.350585][T16164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.356633][T16164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.369896][T16164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.376315][T16164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.380107][T16164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.391179][T16164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.430729][T16164] hsr_slave_0: entered promiscuous mode [ 307.434149][T16164] hsr_slave_1: entered promiscuous mode [ 307.437203][T16164] debugfs: 'hsr0' already exists in 'hsr' [ 307.440172][T16164] Cannot create hsr debugfs directory [ 307.466557][T16207] fuse: fd is not a fuse device [ 307.674914][T16164] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 307.695190][T16164] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 307.699066][T16164] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 307.706909][T16218] fuse: fd is not a fuse device [ 307.985831][T16164] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 308.069360][T16164] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 308.077839][T16164] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 308.087358][T16164] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 308.089624][ T5751] Bluetooth: hci1: command tx timeout [ 308.101100][T16164] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 308.218375][T16164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.231864][T16164] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.238140][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.241028][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.252538][ T1203] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.254899][ T1203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.594182][T16248] fuse: fd is not a fuse device [ 308.629139][T16250] fuse: fd is not a fuse device [ 308.747386][T16253] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.795621][T16164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.030942][T16164] veth0_vlan: entered promiscuous mode [ 309.041045][T16164] veth1_vlan: entered promiscuous mode [ 309.062638][T16164] veth0_macvtap: entered promiscuous mode [ 309.070402][T16164] veth1_macvtap: entered promiscuous mode [ 309.094437][T16164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.108809][T16164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.123440][ T1196] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.127178][ T1196] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.144344][ T1196] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.151096][ T1196] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.367406][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.371843][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.416319][ T1196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.419882][ T1196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.879824][T16284] fuse: fd is not a fuse device [ 310.169623][ T5751] Bluetooth: hci1: command tx timeout [ 310.232815][T16298] netlink: 'syz.1.4113': attribute type 10 has an invalid length. [ 310.239283][T16298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4113'. [ 310.257997][T16298] team0: Port device geneve1 added [ 310.481702][T16308] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.4115'. [ 312.249653][ T5751] Bluetooth: hci1: command tx timeout [ 312.610064][ T844] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 312.683944][T16381] fuse: fd is not a fuse device [ 312.867656][ T844] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 312.884538][ T844] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 312.892037][ T844] usb 12-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 312.894756][ T844] usb 12-1: Product: syz [ 312.906326][ T844] usb 12-1: Manufacturer: syz [ 312.910193][ T844] usb 12-1: SerialNumber: syz [ 312.932708][ T844] usb 12-1: config 0 descriptor?? [ 313.342122][ T844] usb 12-1: USB disconnect, device number 2 [ 314.136140][T16419] fuse: fd is not a fuse device [ 314.329507][ T5751] Bluetooth: hci1: command tx timeout [ 315.383506][ T5897] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 315.724789][ T5897] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 315.745269][ T5897] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 315.749036][ T5897] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 315.761161][ T5897] usb 11-1: Product: syz [ 315.763028][ T5897] usb 11-1: Manufacturer: syz [ 315.765096][ T5897] usb 11-1: SerialNumber: syz [ 315.818150][ T5897] usb 11-1: config 0 descriptor?? [ 315.867564][ T34] IPVS: starting estimator thread 0... [ 315.959927][T16475] IPVS: using max 43 ests per chain, 103200 per kthread [ 317.949673][ T5897] usb 11-1: USB disconnect, device number 10 [ 318.593995][T16533] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 318.903933][T16552] loop2: detected capacity change from 0 to 7 [ 318.907183][T16552] Dev loop2: unable to read RDB block 7 [ 318.909636][T16552] loop2: unable to read partition table [ 318.911665][T16552] loop2: partition table beyond EOD, truncated [ 318.916983][T16552] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 318.951342][ T5157] Dev loop2: unable to read RDB block 7 [ 318.953154][ T5157] loop2: unable to read partition table [ 318.959140][ T5157] loop2: partition table beyond EOD, truncated [ 319.288079][T16568] fuse: fd is not a fuse device [ 319.523051][ T40] kauditd_printk_skb: 3224 callbacks suppressed [ 319.523065][ T40] audit: type=1804 audit(1780702089.358:3502): pid=16584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4215" name="/newroot/19/file0" dev="tmpfs" ino=119 res=1 errno=0 [ 319.550695][T16585] overlayfs: failed to clone upperpath [ 320.887252][T16621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.770826][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.773235][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.112594][ T185] Bluetooth: (null): Invalid header checksum [ 322.755681][T16671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4242'. [ 323.201219][T16692] input: syz1 as /devices/virtual/input/input24 [ 324.619231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 324.689206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 325.880677][T16742] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4266'. [ 328.114767][T16799] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4287'. [ 328.118486][T16799] netlink: 'syz.5.4287': attribute type 7 has an invalid length. [ 328.121752][T16799] netlink: 'syz.5.4287': attribute type 8 has an invalid length. [ 328.126137][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4287'. [ 329.613941][T16832] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4299'. [ 329.728640][T16835] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4299'. [ 329.752143][T16835] nbd: device at index 64 is going down [ 330.008219][T15222] udevd[15222]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 330.035141][T15222] udevd[15222]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 330.975586][T16878] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4314'. [ 331.067789][T16885] gtp1: entered allmulticast mode [ 332.058387][T16922] netlink: 'syz.5.4327': attribute type 1 has an invalid length. [ 332.147283][T16924] bond5: (slave ip6erspan0): making interface the new active one [ 332.158604][T16924] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 332.506086][T16926] overlayfs: failed to clone upperpath [ 333.673705][T16955] overlayfs: failed to clone upperpath [ 333.868285][T16964] tipc: Enabling of bearer rejected, failed to enable media [ 334.981816][T16990] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4354'. [ 335.194711][T17007] tipc: Started in network mode [ 335.197146][T17007] tipc: Node identity 4, cluster identity 4711 [ 335.200014][T17007] tipc: Node number set to 4 [ 335.391431][T17024] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4370'. [ 335.998134][T17049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4382'. [ 336.227390][T17057] syzkaller0: entered promiscuous mode [ 336.230649][T17057] syzkaller0: entered allmulticast mode [ 336.603981][T17039] overlayfs: statfs failed on './file0' [ 336.612931][T17072] netlink: 'syz.5.4392': attribute type 1 has an invalid length. [ 336.616070][T17072] netlink: 'syz.5.4392': attribute type 4 has an invalid length. [ 336.618925][T17072] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.4392'. [ 339.245035][T17099] netlink: 'syz.1.4403': attribute type 1 has an invalid length. [ 339.304966][T17099] bond6: entered promiscuous mode [ 339.307227][T17099] 8021q: adding VLAN 0 to HW filter on device bond6 [ 339.383913][T17099] 8021q: adding VLAN 0 to HW filter on device bond6 [ 339.387135][T17099] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 339.391602][T17099] bond6: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 339.398789][T17099] bond6: (slave vti0): making interface the new active one [ 339.404144][T17099] vti0: entered promiscuous mode [ 339.411142][T17099] bond6: (slave vti0): Enslaving as an active interface with an up link [ 339.466419][T17087] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 339.468907][T17087] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 339.495271][T17087] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 339.497426][T17087] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 339.705042][T17087] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 339.708476][T17087] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 340.138467][T17087] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 341.111486][ T10] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 341.257220][T17148] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 341.261135][ T10] usb 12-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.267553][T17148] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 341.268863][ T10] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 341.274519][ T10] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 341.277995][ T10] usb 12-1: Product: syz [ 341.280994][ T10] usb 12-1: Manufacturer: syz [ 341.282891][ T10] usb 12-1: SerialNumber: syz [ 341.317179][T17152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4423'. [ 341.509102][ T10] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 341.529346][ T5751] Bluetooth: hci0: command 0x0406 tx timeout [ 341.531192][ T5757] Bluetooth: hci2: command 0x0406 tx timeout [ 341.779384][ T5757] Bluetooth: hci1: command 0x0c1a tx timeout [ 342.193254][T17163] netlink: 'syz.6.4426': attribute type 1 has an invalid length. [ 342.207472][T17163] 8021q: adding VLAN 0 to HW filter on device bond6 [ 342.246577][T17163] bond6: (slave gretap2): making interface the new active one [ 342.252652][T17163] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 342.397344][T17170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4429'. [ 343.032274][T17178] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4432'. [ 343.481244][T17182] macvlan2: entered promiscuous mode [ 343.489713][T17182] macvlan2: entered allmulticast mode [ 343.609633][ T5757] Bluetooth: hci0: command 0x0406 tx timeout [ 343.633821][ T5757] Bluetooth: hci2: command 0x0406 tx timeout [ 343.849647][ T5757] Bluetooth: hci1: command 0x0c1a tx timeout [ 345.929481][ T5757] Bluetooth: hci1: command 0x0c1a tx timeout [ 348.433084][ T5846] usb 12-1: USB disconnect, device number 3 [ 348.440731][ T5846] usblp0: removed [ 349.110075][T17221] fuse: fd is not a fuse device [ 349.338216][T17233] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.342186][T17233] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.346095][T17233] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 349.484038][T17233] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.521821][T17233] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.531347][T17233] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 349.761971][T17233] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.771423][T17233] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.783214][T17233] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 349.895754][T17233] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.904111][T17233] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.911991][T17233] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 350.573379][ T85] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.575996][ T85] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 350.578519][ T85] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 350.629216][ T13] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.715623][ T13] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 350.716594][T17251] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 350.738153][ T13] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 350.758057][ T1196] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.765540][ T1196] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 350.769283][ T1196] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 350.798137][ T1196] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.800796][ T1196] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 350.804201][ T1196] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 352.353443][T17295] overlayfs: failed to clone upperpath [ 352.665076][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4481'. [ 353.085320][ T40] audit: type=1800 audit(1780702122.918:3503): pid=17315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4484" name="bus" dev="overlay" ino=404 res=0 errno=0 [ 353.463851][T17334] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4493'. [ 353.475251][T17334] geneve2: entered promiscuous mode [ 357.962782][T17413] fuse: fd is not a fuse device [ 358.991612][T17439] netlink: 'syz.1.4534': attribute type 1 has an invalid length. [ 359.009468][T17439] bond7: entered promiscuous mode [ 359.011879][T17439] 8021q: adding VLAN 0 to HW filter on device bond7 [ 359.671430][T17441] 8021q: adding VLAN 0 to HW filter on device bond7 [ 359.674662][T17441] bond7: (slave gre1): The slave device specified does not support setting the MAC address [ 359.678776][T17441] bond7: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 359.699814][T17441] bond7: (slave gre1): making interface the new active one [ 359.703459][T17441] gre1: entered promiscuous mode [ 359.706004][T17441] bond7: (slave gre1): Enslaving as an active interface with an up link [ 360.548132][T17478] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4548'. [ 360.575163][T17465] hsr0: left promiscuous mode [ 362.489951][T17537] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4572'. [ 363.076095][T17549] netlink: 'syz.5.4576': attribute type 1 has an invalid length. [ 363.528962][T17550] bond6: (slave bridge2): making interface the new active one [ 363.533540][T17550] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 364.699532][T17605] fuse: fd is not a fuse device [ 365.121376][T17614] syzkaller0: entered promiscuous mode [ 365.123574][T17614] syzkaller0: entered allmulticast mode [ 365.130282][T17614] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 365.468898][ T40] audit: type=1326 audit(1780702138.291:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17615 comm="syz.6.4601" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6ffef7c code=0x0 [ 365.677777][ T40] audit: type=1326 audit(1780702138.501:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17626 comm="syz.7.4605" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705ef7c code=0x0 [ 365.979129][T17641] fuse: fd is not a fuse device [ 366.044901][T17639] ref_ctr increment failed for inode: 0xf30 offset: 0x7 ref_ctr_offset: 0x80002 of mm: 0xffff88802633c980 [ 366.378780][T17650] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4613'. [ 366.809273][ T9] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 366.959360][ T9] usb 12-1: Using ep0 maxpacket: 32 [ 366.964008][ T9] usb 12-1: config 217 has too many interfaces: 192, using maximum allowed: 32 [ 366.971658][ T9] usb 12-1: config 217 has 1 interface, different from the descriptor's value: 192 [ 366.978293][ T9] usb 12-1: config 217 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.985980][ T9] usb 12-1: config 217 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 16 [ 366.993445][ T9] usb 12-1: config 217 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 128 [ 366.998416][ T9] usb 12-1: config 217 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 367.004336][ T9] usb 12-1: config 217 interface 0 has no altsetting 0 [ 367.009279][ T9] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 367.013246][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 367.016701][ T9] usb 12-1: SerialNumber: syz [ 367.021827][T17655] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 367.027917][T17655] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 367.240794][ T9] hub 12-1:217.0: bad descriptor, ignoring hub [ 367.244744][ T9] hub 12-1:217.0: probe with driver hub failed with error -5 [ 367.248362][ T9] cdc_acm 12-1:217.0: skipping garbage [ 367.258811][ T9] cdc_acm 12-1:217.0: ttyACM0: USB ACM device [ 367.282487][ T9] usb 12-1: USB disconnect, device number 4 [ 367.312995][T17670] fuse: fd is not a fuse device [ 367.536274][T17676] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4624'. [ 368.558543][T17706] fuse: fd is not a fuse device [ 368.820600][T17714] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4636'. [ 368.858796][T17714] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4636'. [ 369.159598][T17724] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4638'. [ 369.730449][T17729] syzkaller0: entered promiscuous mode [ 369.732925][T17729] syzkaller0: entered allmulticast mode [ 371.001901][T17753] loop3: detected capacity change from 0 to 7 [ 371.022647][T17753] Dev loop3: unable to read RDB block 7 [ 371.024677][T17753] loop3: unable to read partition table [ 371.032344][T17753] loop3: partition table beyond EOD, truncated [ 371.041680][T17753] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 371.493300][T17768] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4657'. [ 372.165947][ T5757] Bluetooth: hci0: unexpected event for opcode 0x2060 [ 372.738295][T17795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4664'. [ 373.370339][T17802] overlayfs: failed to clone upperpath [ 374.069239][ T5833] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 374.221086][ T5833] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 374.224463][ T5833] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.227826][ T5833] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.232190][ T5833] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 374.237826][ T5833] usb 11-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 374.241338][ T5833] usb 11-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 374.244822][ T5833] usb 11-1: Manufacturer: syz [ 374.253211][ T5833] usb 11-1: config 0 descriptor?? [ 374.481693][ T5757] Bluetooth: hci2: Unknown advertising packet type: 0x31 [ 374.481739][ T5757] Bluetooth: hci2: adv larger than maximum supported [ 374.484162][ T5757] Bluetooth: hci2: Malformed LE Event: 0x0d [ 374.634401][T17834] netlink: 'syz.1.4680': attribute type 4 has an invalid length. [ 374.672103][ T5833] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 374.678873][ T5833] appleir 0003:05AC:8243.000E: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 374.687509][T17835] netlink: 'syz.1.4680': attribute type 4 has an invalid length. [ 375.004534][ T46] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.007453][ T46] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 375.012632][ T46] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.015708][ T46] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 375.032853][ T46] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.035865][ T46] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 375.062921][ T46] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.069682][ T46] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 375.394454][ T34] usb 11-1: USB disconnect, device number 11 [ 375.933219][T17863] loop6: detected capacity change from 0 to 8 [ 375.992961][T17864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.018875][T17863] loop6: detected capacity change from 8 to 7 [ 376.079319][T17865] loop6: detected capacity change from 7 to 0 [ 376.086104][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 376.090400][ C3] buffer_io_error: 10 callbacks suppressed [ 376.090413][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 376.097032][T17863] ldm_validate_partition_table(): Disk read failed. [ 376.100828][T17863] Dev loop6: unable to read RDB block 0 [ 376.103240][T17863] loop6: unable to read partition table [ 376.106728][T17863] loop6: partition table beyond EOD, truncated [ 376.109866][T17863] loop_reread_partitions: partition scan of loop6 (ÛuêƒG Ÿ­Ü±.:ˆÊåë0„Çñ™Àü¿Ð [ 376.109866][T17863] å’ [ 400.536695][ T238] tipc: Left network mode [ 400.653959][T18475] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 400.756906][ T5460] 8021q: adding VLAN 0 to HW filter on device eth14 [ 400.773687][ T5751] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 400.805180][ T5751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 400.826410][ T5751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 400.842791][ T5751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 400.852110][ T5751] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 401.136769][ T238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.178279][ T238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.270481][T18512] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4927'. [ 401.666547][ T238] team0 (unregistering): Port device team_slave_1 removed [ 401.688248][ T238] team0 (unregistering): Port device team_slave_0 removed [ 401.838720][ T5460] 8021q: adding VLAN 0 to HW filter on device eth15 [ 402.093814][T18476] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.096085][T18476] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.098366][T18476] bridge_slave_0: entered allmulticast mode [ 402.101239][T18476] bridge_slave_0: entered promiscuous mode [ 402.104433][T18476] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.106713][T18476] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.108947][T18476] bridge_slave_1: entered allmulticast mode [ 402.111838][T18476] bridge_slave_1: entered promiscuous mode [ 402.126376][T18476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.130646][T18476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.145079][T18476] team0: Port device team_slave_0 added [ 402.148286][T18476] team0: Port device team_slave_1 added [ 402.161505][T18476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.163621][T18476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.171827][T18476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.186064][T18476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.188272][T18476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.204441][T18476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.226740][T18476] hsr_slave_0: entered promiscuous mode [ 402.229086][T18476] hsr_slave_1: entered promiscuous mode [ 402.231513][T18476] debugfs: 'hsr0' already exists in 'hsr' [ 402.233391][T18476] Cannot create hsr debugfs directory [ 402.242651][ T5460] 8021q: adding VLAN 0 to HW filter on device eth16 [ 402.443005][T18476] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 402.449016][T18476] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.452283][T18476] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 402.456689][T18476] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.460142][T18476] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 402.467081][T18476] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.472062][T18476] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 402.477930][T18476] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 402.507528][T18476] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.510506][T18476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.513579][T18476] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.516555][T18476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.546886][T18476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.563503][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.570364][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.596649][T18476] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.619052][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.621983][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.637883][ T5460] 8021q: adding VLAN 0 to HW filter on device eth17 [ 402.645078][ T238] IPVS: stop unused estimator thread 0... [ 402.657712][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.660618][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.889322][ T5757] Bluetooth: hci0: command tx timeout [ 402.950102][T18476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.964185][T18588] overlayfs: failed to clone upperpath [ 402.991965][T18592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4942'. [ 402.994348][T18594] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4941'. [ 403.170920][T18602] netlink: 2036 bytes leftover after parsing attributes in process `syz.7.4943'. [ 403.175018][T18602] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4943'. [ 403.197288][T18476] veth0_vlan: entered promiscuous mode [ 403.208653][T18476] veth1_vlan: entered promiscuous mode [ 403.237334][T18476] veth0_macvtap: entered promiscuous mode [ 403.254045][T18476] veth1_macvtap: entered promiscuous mode [ 403.266452][T18476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.274705][T18476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.282807][ T1203] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.286084][ T1203] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.290419][ T1203] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.293939][ T1203] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.556692][ T1203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.562783][ T1203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.590996][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.594499][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.615027][T18613] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.4946'. [ 403.618956][T18613] netlink: Conntrack attr type has unexpected length (type=5, length=0, expected=16) [ 403.898571][T18624] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4950'. [ 404.233473][T18669] fuse: fd is not a fuse device [ 404.772156][ T40] audit: type=1326 audit(1780702177.591:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.8.4959" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 404.791385][ T40] audit: type=1326 audit(1780702177.591:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.8.4959" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 404.820223][ T40] audit: type=1326 audit(1780702177.601:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.8.4959" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 404.839682][ T40] audit: type=1326 audit(1780702177.601:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.8.4959" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 404.850217][ T40] audit: type=1326 audit(1780702177.601:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.8.4959" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 404.858265][ T40] audit: type=1326 audit(1780702177.601:3511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.8.4959" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 404.890643][ T40] audit: type=1326 audit(1780702177.601:3512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.8.4959" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 404.903220][ T40] audit: type=1326 audit(1780702177.601:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.8.4959" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 404.910873][ T40] audit: type=1326 audit(1780702177.601:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.8.4959" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 404.918444][ T40] audit: type=1326 audit(1780702177.601:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18688 comm="syz.8.4959" exe="/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf7f52f7c code=0x7ffc0000 [ 404.927811][T18693] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4962'. [ 404.969273][ T5757] Bluetooth: hci0: command tx timeout [ 405.094178][T18697] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4964'. [ 405.670312][T18715] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4969'. [ 406.642610][ T5537] libceph: connect (1)[c::]:6789 error -101 [ 406.645921][ T5537] libceph: mon0 (1)[c::]:6789 connect error [ 406.652082][ T24] libceph: connect (1)[c::]:6789 error -101 [ 406.655424][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 406.726122][T18748] ceph: No mds server is up or the cluster is laggy [ 406.841632][T18756] netlink: set zone limit has 4 unknown bytes [ 407.049245][ T5757] Bluetooth: hci0: command tx timeout [ 407.185307][T18773] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4990'. [ 407.722928][ T8197] libceph: connect (1)[c::]:6789 error -101 [ 407.727988][ T8197] libceph: mon0 (1)[c::]:6789 connect error [ 407.811910][T18796] ceph: No mds server is up or the cluster is laggy [ 407.948393][T18804] fuse: fd is not a fuse device [ 408.392017][T18819] __nla_validate_parse: 1 callbacks suppressed [ 408.392085][T18819] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5008'. [ 408.797776][T18831] ceph: No mds server is up or the cluster is laggy [ 408.925378][T18838] netlink: 'syz.1.5021': attribute type 5 has an invalid length. [ 409.139268][ T5757] Bluetooth: hci0: command tx timeout [ 409.582470][ C1] ------------[ cut here ]------------ [ 409.584604][ C1] len > ((int)(~0U >> 1)) [ 409.584615][ C1] WARNING: ./include/linux/skbuff.h:2865 at qdisc_pkt_len_segs_init+0x7af/0xb30, CPU#1: syz.8.5026/18870 [ 409.590455][ C1] Modules linked in: [ 409.592051][ C1] CPU: 1 UID: 0 PID: 18870 Comm: syz.8.5026 Tainted: G L syzkaller #0 PREEMPT(full) [ 409.596246][ C1] Tainted: [L]=SOFTLOCKUP [ 409.597920][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 409.601795][ C1] RIP: 0010:qdisc_pkt_len_segs_init+0x7af/0xb30 [ 409.604183][ C1] Code: 89 fa 48 c1 ea 03 0f b6 04 02 84 c0 0f 84 38 fd ff ff 3c 03 0f 8f 30 fd ff ff e8 fc 47 19 f9 e9 26 fd ff ff e8 a2 5a ac f8 90 <0f> 0b 90 e9 2f fb ff ff 48 89 cf e8 e1 47 19 f9 e9 b6 f8 ff ff e8 [ 409.611282][ C1] RSP: 0018:ffffc90000590708 EFLAGS: 00010246 [ 409.613557][ C1] RAX: 0000000000000000 RBX: ffff88804c977900 RCX: ffffffff895b9c2d [ 409.616502][ C1] RDX: ffff8880490f8000 RSI: ffffffff895ba0fe RDI: ffff8880490f8000 [ 409.619524][ C1] RBP: ffff88806eaa9840 R08: 0000000000000005 R09: 0000000000000000 [ 409.622461][ C1] R10: 00000000fffffffe R11: 0000000000000000 R12: 00000000ffffffea [ 409.625344][ C1] R13: ffff88804c977928 R14: 00000000fffffffe R15: 0000000000000001 [ 409.628267][ C1] FS: 0000000000000000(0000) GS:ffff88809728e000(0063) knlGS:00000000f53f5b40 [ 409.631591][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 409.634011][ C1] CR2: 00000000f53f4ff4 CR3: 000000005a26e000 CR4: 0000000000352ef0 [ 409.637075][ C1] Call Trace: [ 409.638335][ C1] [ 409.639492][ C1] __netif_receive_skb_core.constprop.0+0x1144/0x3530 [ 409.642026][ C1] ? find_held_lock+0x2b/0x80 [ 409.643832][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 409.646444][ C1] ? is_bpf_text_address+0x94/0x1a0 [ 409.648372][ C1] ? kernel_text_address+0x8d/0x100 [ 409.650409][ C1] ? __kernel_text_address+0xd/0x30 [ 409.652302][ C1] ? stack_depot_save_flags+0x479/0x9d0 [ 409.654356][ C1] ? rcu_is_watching+0x12/0xc0 [ 409.656147][ C1] __netif_receive_skb_list_core+0x353/0x940 [ 409.658399][ C1] ? kfree_skbmem+0x15d/0x210 [ 409.660192][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 409.662595][ C1] ? lock_acquire+0x1b1/0x370 [ 409.664483][ C1] ? tun_get_user+0x1e31/0x3c20 [ 409.666463][ C1] ? tun_chr_write_iter+0xdc/0x200 [ 409.668170][ C1] ? vfs_write+0x6ac/0x1070 [ 409.669507][ C1] ? ksys_write+0x12a/0x250 [ 409.670932][ C1] netif_receive_skb_list_internal+0x722/0xd40 [ 409.673110][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 409.674918][ C1] ? __lock_acquire+0x4a5/0x2630 [ 409.676342][ C1] ? dev_gro_receive+0x238/0x3060 [ 409.677825][ C1] napi_complete_done+0x221/0x940 [ 409.679232][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 409.680858][ C1] ? find_held_lock+0x2b/0x80 [ 409.682160][ C1] ? gro_cell_poll+0x441/0x690 [ 409.683483][ C1] ? gro_cell_poll+0x441/0x690 [ 409.684807][ C1] gro_cell_poll+0x46e/0x690 [ 409.686147][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 409.687646][ C1] net_rx_action+0xa40/0xf20 [ 409.688918][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 409.690632][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 409.692047][ C1] ? hrtimer_bases_first+0x1a0/0x210 [ 409.693543][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 409.694994][ C1] ? sched_clock+0x38/0x60 [ 409.696220][ C1] ? sched_clock_cpu+0x6c/0x570 [ 409.697587][ C1] ? sched_clock+0x38/0x60 [ 409.698830][ C1] ? rcu_is_watching+0x12/0xc0 [ 409.700199][ C1] handle_softirqs+0x1ea/0xa00 [ 409.701528][ C1] ? __sysvec_apic_timer_interrupt+0x10b/0x460 [ 409.703282][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 409.705182][ C1] ? irqtime_account_irq+0x176/0x2d0 [ 409.707123][ C1] ? tun_rx_batched.isra.0+0x402/0x750 [ 409.708879][ C1] do_softirq+0xac/0xe0 [ 409.710157][ C1] [ 409.710974][ C1] [ 409.711802][ C1] __local_bh_enable_ip+0xf8/0x120 [ 409.713183][ C1] tun_rx_batched.isra.0+0x407/0x750 [ 409.714649][ C1] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 409.716242][ C1] ? rcu_is_watching+0x12/0xc0 [ 409.717587][ C1] ? tun_get_user+0x1cc8/0x3c20 [ 409.718917][ C1] tun_get_user+0x1e31/0x3c20 [ 409.720255][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 409.721647][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 409.723153][ C1] ? find_held_lock+0x2b/0x80 [ 409.724454][ C1] ? tun_get+0x191/0x370 [ 409.725621][ C1] ? tun_get+0x191/0x370 [ 409.726805][ C1] tun_chr_write_iter+0xdc/0x200 [ 409.728165][ C1] vfs_write+0x6ac/0x1070 [ 409.729404][ C1] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 409.731204][ C1] ? __pfx_vfs_write+0x10/0x10 [ 409.732522][ C1] ? find_held_lock+0x2b/0x80 [ 409.733819][ C1] ksys_write+0x12a/0x250 [ 409.735090][ C1] ? __pfx_ksys_write+0x10/0x10 [ 409.736381][ C1] ? rcu_is_watching+0x12/0xc0 [ 409.737685][ C1] __do_fast_syscall_32+0xe7/0x970 [ 409.739098][ C1] do_fast_syscall_32+0x32/0x70 [ 409.740509][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 409.742355][ C1] RIP: 0023:0xf7f52f7c [ 409.743513][ C1] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 409.750284][ C1] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 409.753306][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 409.756204][ C1] RDX: 000000000000007a RSI: 0000000000000000 RDI: 0000000000000000 [ 409.759072][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 409.762038][ C1] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 409.764930][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 409.767810][ C1] [ 409.768957][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 409.771590][ C1] CPU: 1 UID: 0 PID: 18870 Comm: syz.8.5026 Tainted: G L syzkaller #0 PREEMPT(full) [ 409.775467][ C1] Tainted: [L]=SOFTLOCKUP [ 409.777036][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 409.780608][ C1] Call Trace: [ 409.781838][ C1] [ 409.782896][ C1] dump_stack_lvl+0x100/0x190 [ 409.784635][ C1] vpanic+0x552/0x970 [ 409.786127][ C1] ? __pfx_vpanic+0x10/0x10 [ 409.787823][ C1] panic+0xd1/0xe0 [ 409.789230][ C1] ? __pfx_panic+0x10/0x10 [ 409.790890][ C1] ? check_panic_on_warn+0x1f/0x90 [ 409.792765][ C1] check_panic_on_warn.cold+0x19/0x34 [ 409.794782][ C1] ? qdisc_pkt_len_segs_init+0x7af/0xb30 [ 409.796830][ C1] __warn.cold+0x191/0x328 [ 409.798478][ C1] __report_bug+0x296/0x3d0 [ 409.800131][ C1] ? qdisc_pkt_len_segs_init+0x7af/0xb30 [ 409.802249][ C1] ? __pfx___report_bug+0x10/0x10 [ 409.804151][ C1] ? __lock_acquire+0x4a5/0x2630 [ 409.806042][ C1] ? __lock_acquire+0x4a5/0x2630 [ 409.807954][ C1] ? qdisc_pkt_len_segs_init+0x7af/0xb30 [ 409.810057][ C1] report_bug+0xb2/0x220 [ 409.811684][ C1] ? qdisc_pkt_len_segs_init+0x7af/0xb30 [ 409.813796][ C1] handle_bug+0x16a/0x2a0 [ 409.815456][ C1] exc_invalid_op+0x17/0x50 [ 409.817204][ C1] asm_exc_invalid_op+0x1a/0x20 [ 409.819043][ C1] RIP: 0010:qdisc_pkt_len_segs_init+0x7af/0xb30 [ 409.821393][ C1] Code: 89 fa 48 c1 ea 03 0f b6 04 02 84 c0 0f 84 38 fd ff ff 3c 03 0f 8f 30 fd ff ff e8 fc 47 19 f9 e9 26 fd ff ff e8 a2 5a ac f8 90 <0f> 0b 90 e9 2f fb ff ff 48 89 cf e8 e1 47 19 f9 e9 b6 f8 ff ff e8 [ 409.828506][ C1] RSP: 0018:ffffc90000590708 EFLAGS: 00010246 [ 409.830793][ C1] RAX: 0000000000000000 RBX: ffff88804c977900 RCX: ffffffff895b9c2d [ 409.833768][ C1] RDX: ffff8880490f8000 RSI: ffffffff895ba0fe RDI: ffff8880490f8000 [ 409.836721][ C1] RBP: ffff88806eaa9840 R08: 0000000000000005 R09: 0000000000000000 [ 409.839696][ C1] R10: 00000000fffffffe R11: 0000000000000000 R12: 00000000ffffffea [ 409.842651][ C1] R13: ffff88804c977928 R14: 00000000fffffffe R15: 0000000000000001 [ 409.845605][ C1] ? qdisc_pkt_len_segs_init+0x2dd/0xb30 [ 409.847678][ C1] ? qdisc_pkt_len_segs_init+0x7ae/0xb30 [ 409.849746][ C1] ? qdisc_pkt_len_segs_init+0x7ae/0xb30 [ 409.851476][ C1] __netif_receive_skb_core.constprop.0+0x1144/0x3530 [ 409.853365][ C1] ? find_held_lock+0x2b/0x80 [ 409.854702][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 409.856629][ C1] ? is_bpf_text_address+0x94/0x1a0 [ 409.858109][ C1] ? kernel_text_address+0x8d/0x100 [ 409.859558][ C1] ? __kernel_text_address+0xd/0x30 [ 409.860999][ C1] ? stack_depot_save_flags+0x479/0x9d0 [ 409.862517][ C1] ? rcu_is_watching+0x12/0xc0 [ 409.863851][ C1] __netif_receive_skb_list_core+0x353/0x940 [ 409.865527][ C1] ? kfree_skbmem+0x15d/0x210 [ 409.866877][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 409.868672][ C1] ? lock_acquire+0x1b1/0x370 [ 409.870007][ C1] ? tun_get_user+0x1e31/0x3c20 [ 409.871311][ C1] ? tun_chr_write_iter+0xdc/0x200 [ 409.872582][ C1] ? vfs_write+0x6ac/0x1070 [ 409.873823][ C1] ? ksys_write+0x12a/0x250 [ 409.875292][ C1] netif_receive_skb_list_internal+0x722/0xd40 [ 409.877585][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 409.880071][ C1] ? __lock_acquire+0x4a5/0x2630 [ 409.881974][ C1] ? dev_gro_receive+0x238/0x3060 [ 409.883446][ C1] napi_complete_done+0x221/0x940 [ 409.884853][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 409.886399][ C1] ? find_held_lock+0x2b/0x80 [ 409.887722][ C1] ? gro_cell_poll+0x441/0x690 [ 409.889058][ C1] ? gro_cell_poll+0x441/0x690 [ 409.890488][ C1] gro_cell_poll+0x46e/0x690 [ 409.891870][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 409.893406][ C1] net_rx_action+0xa40/0xf20 [ 409.894728][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 409.896352][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 409.897818][ C1] ? hrtimer_bases_first+0x1a0/0x210 [ 409.899291][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 409.900738][ C1] ? sched_clock+0x38/0x60 [ 409.901994][ C1] ? sched_clock_cpu+0x6c/0x570 [ 409.903362][ C1] ? sched_clock+0x38/0x60 [ 409.904619][ C1] ? rcu_is_watching+0x12/0xc0 [ 409.905960][ C1] handle_softirqs+0x1ea/0xa00 [ 409.907331][ C1] ? __sysvec_apic_timer_interrupt+0x10b/0x460 [ 409.909039][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 409.910448][ C1] ? irqtime_account_irq+0x176/0x2d0 [ 409.911915][ C1] ? tun_rx_batched.isra.0+0x402/0x750 [ 409.913430][ C1] do_softirq+0xac/0xe0 [ 409.914609][ C1] [ 409.915427][ C1] [ 409.916265][ C1] __local_bh_enable_ip+0xf8/0x120 [ 409.917691][ C1] tun_rx_batched.isra.0+0x407/0x750 [ 409.919169][ C1] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 409.921086][ C1] ? rcu_is_watching+0x12/0xc0 [ 409.922864][ C1] ? tun_get_user+0x1cc8/0x3c20 [ 409.924661][ C1] tun_get_user+0x1e31/0x3c20 [ 409.925984][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 409.927407][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 409.928923][ C1] ? find_held_lock+0x2b/0x80 [ 409.930252][ C1] ? tun_get+0x191/0x370 [ 409.931436][ C1] ? tun_get+0x191/0x370 [ 409.932630][ C1] tun_chr_write_iter+0xdc/0x200 [ 409.934036][ C1] vfs_write+0x6ac/0x1070 [ 409.935288][ C1] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 409.936836][ C1] ? __pfx_vfs_write+0x10/0x10 [ 409.938187][ C1] ? find_held_lock+0x2b/0x80 [ 409.939507][ C1] ksys_write+0x12a/0x250 [ 409.940718][ C1] ? __pfx_ksys_write+0x10/0x10 [ 409.942083][ C1] ? rcu_is_watching+0x12/0xc0 [ 409.943423][ C1] __do_fast_syscall_32+0xe7/0x970 [ 409.944853][ C1] do_fast_syscall_32+0x32/0x70 [ 409.946315][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 409.948393][ C1] RIP: 0023:0xf7f52f7c [ 409.949773][ C1] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 409.955956][ C1] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 409.959064][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800004c0 [ 409.962003][ C1] RDX: 000000000000007a RSI: 0000000000000000 RDI: 0000000000000000 [ 409.964952][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 409.967916][ C1] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 409.970852][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 409.973814][ C1] [ 409.975649][ C1] Kernel Offset: disabled [ 409.977293][ C1] Rebooting in 86400 seconds..