last executing test programs: 11m38.635021421s ago: executing program 2 (id=258): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) 11m38.529172063s ago: executing program 2 (id=259): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000100)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f) close(r1) 11m36.944527748s ago: executing program 2 (id=262): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0xa000, 0x0, 0xffffffffffffffff, 0x80000}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x19, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000180), &(0x7f0000000440)=ANY=[@ANYBLOB], 0x2, 0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x14d002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) close_range(r1, 0xffffffffffffffff, 0x0) 11m26.272876267s ago: executing program 2 (id=278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x9, 0x6, 0x5, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 11m23.497279841s ago: executing program 2 (id=281): socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb402000008000000b703000034120000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000440)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0000000500000002000000"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 11m23.130035047s ago: executing program 2 (id=284): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_AIE_ON(r9, 0x7001) ioctl$RTC_SET_TIME(r9, 0x4024700a, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) write$rfkill(r5, &(0x7f0000000080)={0xff, 0x1, 0x3, 0x1, 0x4}, 0x8) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904"], 0x0) fsopen(&(0x7f0000000140)='binder\x00', 0x0) r11 = socket$inet6(0xa, 0x1, 0x10001) setsockopt$inet6_opts(r11, 0x29, 0x37, &(0x7f00000001c0)=@srh={0x33, 0x2, 0x4, 0x1, 0xf, 0x10, 0x1400, [@remote]}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) 11m11.104878038s ago: executing program 1 (id=295): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x4) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000080)="dfd9", 0x2, 0xfffffffffffffffc) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x8, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x3, 0x14a}}) ioctl$TCSETS2(r7, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefc9, 0x7f9, 0xb2, "20ab9809006ea4a7446c180000cd681ec267a0", 0x7, 0x200008}) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000000)) syz_io_uring_setup(0x2da4, &(0x7f0000000100)={0x0, 0x722a, 0x20, 0x1, 0xa5}, &(0x7f0000000240), &(0x7f0000000340)) ioctl$BTRFS_IOC_SNAP_CREATE(r5, 0x50009401, &(0x7f0000000880)={{r3}, "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"}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x2c, &(0x7f0000000280), 0x14) 11m8.467921469s ago: executing program 1 (id=300): getpid() r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0xa000, 0x0, 0xffffffffffffffff, 0x80000}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x19, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000180), &(0x7f0000000440)=ANY=[@ANYBLOB], 0x2, 0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x14d002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) mq_notify(r0, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11m7.823169379s ago: executing program 32 (id=284): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_AIE_ON(r9, 0x7001) ioctl$RTC_SET_TIME(r9, 0x4024700a, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) write$rfkill(r5, &(0x7f0000000080)={0xff, 0x1, 0x3, 0x1, 0x4}, 0x8) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904"], 0x0) fsopen(&(0x7f0000000140)='binder\x00', 0x0) r11 = socket$inet6(0xa, 0x1, 0x10001) setsockopt$inet6_opts(r11, 0x29, 0x37, &(0x7f00000001c0)=@srh={0x33, 0x2, 0x4, 0x1, 0xf, 0x10, 0x1400, [@remote]}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) 11m1.071804776s ago: executing program 1 (id=309): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2}, 0x14) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) 10m54.690529978s ago: executing program 1 (id=316): socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb402000008000000b703000034120000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000440)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 10m54.399904562s ago: executing program 1 (id=318): getpid() r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0xa000, 0x0, 0xffffffffffffffff, 0x80000}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x19, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000180), &(0x7f0000000440)=ANY=[@ANYBLOB], 0x2, 0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x14d002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) mq_notify(r0, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10m48.334950868s ago: executing program 1 (id=323): syz_open_dev$tty1(0xc, 0x4, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f00000002c0)="240000001a005f0214f9d4010400000004000000000000000009000000000400012a46cdd3", 0x25) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) write(r3, &(0x7f0000000040)="cb", 0xfffffdef) 10m32.972958331s ago: executing program 33 (id=323): syz_open_dev$tty1(0xc, 0x4, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff72, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f00000002c0)="240000001a005f0214f9d4010400000004000000000000000009000000000400012a46cdd3", 0x25) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) write(r3, &(0x7f0000000040)="cb", 0xfffffdef) 2m17.668854719s ago: executing program 5 (id=1309): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x80002, 0xfffffffd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2f, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES8=r1, @ANYRES16=r0], 0x64}, 0x1, 0x0, 0x0, 0x24000894}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000380), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f00000002c0)={&(0x7f00000010c0)=[0x0], 0x0, r6, 0x0, '\x00', 0x1}) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x6, 0x2, 0x3, 0x0, 0x20000000006, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) 2m16.39274809s ago: executing program 5 (id=1311): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x5, {0x3, 0x1, 0x0, 0x400000000000000, 0xfffffffd, 0x0, {0x6, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1001a}}, 0x50) poll(&(0x7f0000000140)=[{r0, 0x210}], 0x1, 0x100) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x8000000000000, 0x28dc, 0x0, 0x440000, 0x1, {0x1, 0xfffffffffffffffd, 0x0, 0x1000, 0xfffffffffffffffc, 0x100, 0x0, 0x0, 0x4, 0xc000, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/file0\x00') 2m16.249025602s ago: executing program 5 (id=1313): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80003, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m14.492324629s ago: executing program 5 (id=1319): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x1, 0x14f, &(0x7f0000000900)="$eJzs2r9Kw1AUBvAzFCodHZ0KlSho/mtddRQ33yC0uWnwxpREkPYFxElwuA6+hOAT+AgZ3XQR9CUi197aNhXrUBuL32/pR05IT28ut8vRkziyWaoTbXevj19WkziqN929FrOZRwOHRFSXIcvzG4OmPH3Ws5yML274VZVZN6y/DT4bm4E4umQh950FtAUAAAAAAAAAAAAAAAAAAAAAAPOg1VSodUR0wULu22PVtNc/8Tj3k7Sk9kqn1dUMFzHBb+X6uBP1rVcibV+mUBwksm5N1KvDsNER/Lm4vuZZ1DXTXl8PIy/wA//UcdymtWNZu4758Syz+ETtTvVEWX5vTY+TaWPzZo8/mTdT77+yFoqr8+K3jd4/wvxCProit0fp/fzbsKK2+V/pZ4nCzHNlWQz//9pVt/Egzz+jFfO2uriI5SzxtwPAN94DAAD//zRDNTE=") setpgid(r1, r1) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file1/file0\x00', 0x40000, 0x0, 0x0, 0x0, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$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") 2m9.994937511s ago: executing program 5 (id=1328): r0 = openat$yama_ptrace_scope(0xffffff9c, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x1, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0xd0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x1010, r0, 0xecc35000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) syz_open_procfs(0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x118) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffd, r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) bind$tipc(r2, &(0x7f0000000340)=@name={0x1e, 0x2, 0x2, {{0xa24b74be0a81d2f8, 0x3}, 0x2}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 2m9.444363979s ago: executing program 5 (id=1332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80003, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m6.645965064s ago: executing program 34 (id=1332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80003, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m0.977099675s ago: executing program 6 (id=1446): mknod$loop(0x0, 0xfff, 0x0) execve(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00030008001c"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window={0x3, 0x16}, @window={0x3, 0x0, 0xfffc}, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r1, 0x0, 0x0, 0xa00, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) openat$nvram(0xffffff9c, &(0x7f0000001580), 0x80, 0x0) openat$nvram(0xffffff9c, &(0x7f0000004240), 0x20000, 0x0) 59.880128702s ago: executing program 6 (id=1448): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 59.552984387s ago: executing program 6 (id=1450): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmmsg$unix(r0, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 59.115281874s ago: executing program 6 (id=1452): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f60c01a83d88008135048567c566a31077d12879017186ecd8521f2b5fb"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) 55.085564998s ago: executing program 6 (id=1459): socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 54.742588703s ago: executing program 6 (id=1462): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001bb05110000000000000000000000000004000000040"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000001}) creat(0x0, 0xc3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000280)={0x1d, 0x0, 0x8, {0x2}, 0x1}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x801, 0x7, 0x8000, 0xc, 0x59c, 0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x22d1, 0x0) unshare(0x68040200) 39.519625035s ago: executing program 35 (id=1462): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001bb05110000000000000000000000000004000000040"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000001}) creat(0x0, 0xc3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000280)={0x1d, 0x0, 0x8, {0x2}, 0x1}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x801, 0x7, 0x8000, 0xc, 0x59c, 0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x22d1, 0x0) unshare(0x68040200) 13.816903822s ago: executing program 4 (id=1523): syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) migrate_pages(0x0, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f00000002c0)="240000001a005f0214f9d4010400000004000000000000000009000000000400012a", 0x22) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) write(r3, &(0x7f0000000040)="cb", 0xfffffdef) 12.816209078s ago: executing program 4 (id=1525): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 12.162939478s ago: executing program 4 (id=1526): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='cpuset\x00', 0x802082, &(0x7f00000002c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x6a, 0x2, 0x0, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_PROTOCOL={0x5}]}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0xb, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x8b, 0x100000500) socket$nl_sock_diag(0x10, 0x3, 0x4) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r10, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_mount_image$befs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x4, &(0x7f0000009e80), 0xfd, 0x9de4, &(0x7f0000013cc0)="$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") sendto$inet(r10, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r10, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 9.817424015s ago: executing program 0 (id=1528): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x6803, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa2808060001080000000000000000ffffffe00000301ef650fdb23a6fc1"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0x55, &(0x7f0000000880)={@local, @remote, @void, {@x25={0x805, {0x3, 0x1, 0xfd, "7786cc5b2a40543b377ed54f2f461544ee0c76d4961bdb24a14afc5ea1eec8511ec1628173935b0f9bfb9abcdf2b42b7d785a5df2e4e720849467ced8cf7fd6a47403a75"}}}}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000340)={'\x00', 0x9, 0x9, 0xfffffffe, 0x2, 0x5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) close(r0) writev(r2, &(0x7f00000001c0), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50) 8.424762437s ago: executing program 4 (id=1530): setxattr$security_capability(&(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000140), &(0x7f0000000280)=@v3={0x3000000, [{0x7, 0x8}, {0x10001, 0xd0}]}, 0x18, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) r0 = socket$inet6(0xa, 0x2, 0x0) syz_mount_image$bfs(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000600)=ANY=[], 0x8, 0xad, &(0x7f0000000040)="$eJzs0btpA0EUBdC7H/xJ7ALcg3tw6twVbOjQkY3BjlSGOlArKmE7ULCpkhHLrkChEAhJcA7MzA3mwYW33q5e8pSUv6SUUu6SPGbKX98/nx/v490kyTJt7jPZv9y4ej4P486fp7x5y+L/4E8//HZ9la4fyuyChQEAgJPVeZ1TdfxQm6Q5VyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA67ILAAD//1vZIlc=") open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x10, 0x3}, 0x94) nanosleep(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r5) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2004c804}, 0x810) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x0, @mcast1, 0x6}, 0x1c) mremap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) 6.461214018s ago: executing program 0 (id=1532): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cgroups\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0xca1, &(0x7f0000000400)={0x0, 0x8de3, 0x800, 0xfffffffe, 0x4a}, &(0x7f00000003c0), &(0x7f0000000200)) getsockopt$inet6_int(r3, 0x29, 0x3a, 0x0, 0x0) tee(r4, 0xffffffffffffffff, 0x103, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='kvm_unmap_hva_range\x00', r6}, 0x18) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) 6.236891452s ago: executing program 3 (id=1533): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1ffe6}, {0xfff2, 0x1}, {0x0, 0xf}}}, 0x24}}, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtfilter={0x40, 0x2c, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0xa}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 5.69596842s ago: executing program 3 (id=1534): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r0, 0x24, 0x0, 0xd8, &(0x7f0000000000), 0x40000016, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.429928255s ago: executing program 3 (id=1535): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 5.128978009s ago: executing program 3 (id=1536): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000004900000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000021000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000400000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000300000000000000ffff0000000000000000000000000000000062726983676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e617400"/630]}, 0x2ee) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) dup(r6) syz_io_uring_setup(0x10c, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340), &(0x7f0000000280)) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x120, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000009b80)={0x2020}, 0x2020) 5.0647609s ago: executing program 4 (id=1537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback={0x200000000000000}}]}, 0x28}}, 0x84) 4.907248013s ago: executing program 0 (id=1538): syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @random="97c4864ef7a3", @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) 3.889296589s ago: executing program 3 (id=1539): syz_mount_image$ocfs2(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x8c0, &(0x7f0000000400)={[{@preferred_slot={'preferred_slot', 0x3d, 0x6}}, {@heartbeat_none}, {@data_ordered}, {@err_ro}, {@journal_async_commit}, {@nouser_xattr}, {@coherency_full}, {@commit={'commit', 0x3d, 0x3ff}}]}, 0x1, 0x4421, &(0x7f0000004500)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x14550, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000001b80)="$eJzs3E+LW1UYB+C3cWrHqfNHrdV2oQfduLo0s3AlSJApyASU2gitINw6NxpyTUJuGIiI1ZVbP4e4dCeIX2A2fgZ3s3HZhXiFpLVNTdUuOpH6PJv7kvf8cu8hEDjhnBy/8c2n/W6VdfNJNE6disYoIt1KkaIRd7y0P79eu77farf3rqR0uXW1+XpKaevlHz/4/LtXfpqcff/7rR/OxNHOh8e/7v5ydP7owvHvVz/pValXpcFwkvJ0Yzic5DfKIh30qn6W0rtlkVdF6g2qYrzQ75bD0Wia8sHB5sZoXFRVygfT1C+maTJMk/E05R/nvUHKsixtbgQPdPqfh3S+vVXXdURdn44no67r+qnYiLPxdGzGVnwZEc/Es/FcnIvn43y8EC/Ghdmok3h8AAAAAAAAAAAAAAAAAAAA+P/4u/P/27Hj/D8AAAAAAAAAAAAAAAAAAACcgPeuXd9vtdt7V1Jajyi/PuwcdubXeb/VjV6UUcSl2I7fYnb6f25eX367vXcpzezEV+XN2/mbh50nFvPN2d8J3M6vzXp38s15Pi3mz8TGvfnd2I5zy++/uzS/Hq+9ek8+i+34+aMYRhkHs3vfzX/RTOmtd9r35S/OxgEAAMDjIEt/Wrp+z7IH9ef5h/h94L719VpcXFvt3Imopp/187IsxovF+l9eUfz7ovGI3rkR/5EJKh7/YtXfTJyEux/6qp8EAAAAAAAAAACAh/GIdxGuxZKdZW+uZqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//99CzUo=") r1 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x6042, 0x144) sendfile(r2, r1, 0x0, 0x80000002) 3.81517761s ago: executing program 4 (id=1540): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d000905"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x4000) r1 = socket(0x28, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x30, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_usb_disconnect(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 3.8032612s ago: executing program 0 (id=1541): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.534706055s ago: executing program 0 (id=1542): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x4a) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, &(0x7f0000003700)=ANY=[]) 1.469456797s ago: executing program 0 (id=1543): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0xa000, 0x0, 0xffffffffffffffff, 0x80000}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x19, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./bus\x00', &(0x7f0000000180), &(0x7f0000000440)=ANY=[@ANYBLOB], 0x2, 0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x14d002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) close_range(r1, 0xffffffffffffffff, 0x0) 872.807747ms ago: executing program 3 (id=1544): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'das16m1\x00', [0x2f03, 0x404, 0xd09a, 0xffffff33, 0x0, 0xfffffffe, 0x1, 0x6, 0xffe, 0x1, 0xc, 0x5, 0x7, 0x4, 0xffff, 0x4, 0xffffffa7, 0x175, 0x82f, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x3, 0x1, 0x9, 0x8, 0x6, 0x4, 0x70d]}) 340.476325ms ago: executing program 8 (id=1489): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r0, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) 0s ago: executing program 8 (id=1545): r0 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000180)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@noautodefrag}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x7, 0x32, 0x38, 0x2d, 0x32, 0x36, 0x78, 0x2d, 0x2d, 0x37]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000580)={0x1}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x0, {0x5, 0x7fff, 0x4, 0x3, 0x6a5e}}) chdir(&(0x7f0000000240)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): ap entered promiscuous mode [ 313.760022][ T5842] device veth1_macvtap entered promiscuous mode [ 313.985290][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 314.624881][ T6154] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 314.631567][ T6154] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 314.640275][ T6154] vhci_hcd vhci_hcd.0: Device attached [ 314.653423][ T6155] vhci_hcd: connection closed [ 314.654971][ T11] vhci_hcd: stop threads [ 314.918737][ T5305] usb 41-1: new high-speed USB device number 6 using vhci_hcd [ 315.119271][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 315.127687][ T11] vhci_hcd: release socket [ 315.130014][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.143390][ T11] vhci_hcd: disconnect device [ 315.177218][ T5305] usb 41-1: enqueue for inactive port 0 [ 315.186081][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.202087][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.214402][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.224705][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.235554][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.251768][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.262673][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.268866][ T5305] vhci_hcd: vhci_device speed not set [ 315.274938][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.289257][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 315.316954][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 315.384012][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.409876][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.448009][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.499189][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.524981][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.548949][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.570641][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.588672][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.610561][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.629945][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 315.646819][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 315.666021][ T6173] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 315.671883][ T5842] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.672684][ T6173] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 315.689086][ T5842] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.698895][ T6176] fuse: Bad value for 'fd' [ 315.718267][ T5842] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.737762][ T6173] vhci_hcd vhci_hcd.0: Device attached [ 315.756989][ T5842] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.877160][ T6167] fuse: Bad value for 'fd' [ 315.938982][ T4320] vhci_hcd: vhci_device speed not set [ 315.960796][ T6174] vhci_hcd: connection closed [ 315.965240][ T56] vhci_hcd: stop threads [ 316.012699][ T4320] usb 39-1: new full-speed USB device number 6 using vhci_hcd [ 316.028886][ T56] vhci_hcd: release socket [ 316.037417][ T6160] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 316.037417][ T6160] program syz.5.394 not setting count and/or reply_len properly [ 316.064728][ T56] vhci_hcd: disconnect device [ 316.374389][ T6186] autofs4:pid:6186:autofs_fill_super: called with bogus options [ 316.394720][ T2901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.438284][ T2901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.598476][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 316.640391][ T4733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.718734][ T4733] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.773495][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 317.655239][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.661811][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.768968][ T4278] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 318.001182][ T6203] netlink: 772 bytes leftover after parsing attributes in process `syz.5.403'. [ 319.262950][ T6228] fuse: Bad value for 'fd' [ 319.369696][ T6223] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 319.376292][ T6223] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 319.432924][ T6222] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 319.439612][ T6222] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 319.463548][ T6210] block nbd0: shutting down sockets [ 319.479732][ T6223] vhci_hcd vhci_hcd.0: Device attached [ 319.488115][ T6222] vhci_hcd vhci_hcd.0: Device attached [ 319.526068][ T6224] vhci_hcd: connection closed [ 319.526693][ T56] vhci_hcd: stop threads [ 319.544990][ T56] vhci_hcd: release socket [ 319.558487][ T56] vhci_hcd: disconnect device [ 319.588129][ T6229] vhci_hcd: connection reset by peer [ 319.657249][ T56] vhci_hcd: stop threads [ 319.719028][ T56] vhci_hcd: release socket [ 319.810055][ T56] vhci_hcd: disconnect device [ 320.373367][ T6235] autofs4:pid:6235:autofs_fill_super: called with bogus options [ 321.168765][ T4320] vhci_hcd: vhci_device speed not set [ 321.251459][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 322.694426][ T6254] random: crng reseeded on system resumption [ 322.959836][ T4278] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 323.860891][ T6272] netlink: 772 bytes leftover after parsing attributes in process `syz.6.418'. [ 324.696024][ T6280] rdma_rxe: rxe_register_device failed with error -23 [ 324.703421][ T6280] rdma_rxe: failed to add geneve1 [ 325.139557][ T6286] fuse: Bad value for 'fd' [ 325.166343][ T6283] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 325.172905][ T6283] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 325.209172][ T6284] autofs4:pid:6284:autofs_fill_super: called with bogus options [ 325.250749][ T6283] vhci_hcd vhci_hcd.0: Device attached [ 325.405006][ T6285] vhci_hcd: connection closed [ 325.405687][ T11] vhci_hcd: stop threads [ 325.417925][ T11] vhci_hcd: release socket [ 325.448865][ T14] vhci_hcd: vhci_device speed not set [ 325.520371][ T14] usb 41-1: new full-speed USB device number 7 using vhci_hcd [ 325.550424][ T11] vhci_hcd: disconnect device [ 329.399068][ T4329] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 329.588721][ T4329] usb 5-1: Using ep0 maxpacket: 8 [ 329.596273][ T4329] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 329.596418][ T4329] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 329.596478][ T4329] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 329.596534][ T4329] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 329.596592][ T4329] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 329.596647][ T4329] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.596914][ T4329] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 329.596976][ T4329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.349849][ T4329] usb 5-1: usb_control_msg returned -32 [ 330.355590][ T4329] usbtmc 5-1:16.0: can't read capabilities [ 330.705770][ T14] vhci_hcd: vhci_device speed not set [ 330.939470][ T6338] autofs4:pid:6338:autofs_fill_super: called with bogus options [ 331.827671][ T6346] rdma_rxe: rxe_register_device failed with error -23 [ 331.835681][ T6346] rdma_rxe: failed to add geneve1 [ 332.031710][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 332.143414][ T6319] usbtmc 5-1:16.0: Unable to send data, error -71 [ 334.188146][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 334.188162][ T26] audit: type=1400 audit(1753172692.162:25): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=6355 comm="syz.6.439" [ 336.868195][ T4320] usb 5-1: USB disconnect, device number 3 [ 341.258246][ T6395] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 341.264801][ T6395] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 341.277948][ T6395] vhci_hcd vhci_hcd.0: Device attached [ 341.286952][ T6395] fuse: Bad value for 'fd' [ 341.468675][ T4329] vhci_hcd: vhci_device speed not set [ 341.538647][ T4329] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 341.549686][ T6396] vhci_hcd: connection reset by peer [ 341.557288][ T4363] vhci_hcd: stop threads [ 341.567770][ T4363] vhci_hcd: release socket [ 341.604329][ T6398] device ipvlan2 entered promiscuous mode [ 341.617943][ T4363] vhci_hcd: disconnect device [ 346.689676][ T4329] vhci_hcd: vhci_device speed not set [ 346.933383][ T6443] device syzkaller0 entered promiscuous mode [ 347.320054][ T6449] 9pnet_fd: Insufficient options for proto=fd [ 351.894137][ T6476] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 351.900735][ T6476] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 351.919896][ T6476] vhci_hcd vhci_hcd.0: Device attached [ 351.943077][ T6476] fuse: Bad value for 'fd' [ 351.957028][ T6484] tmpfs: Unknown parameter 'usrquota' [ 352.979782][ T6477] vhci_hcd: connection closed [ 352.981869][ T5339] vhci_hcd: vhci_device speed not set [ 353.117161][ T4363] vhci_hcd: stop threads [ 353.121640][ T4363] vhci_hcd: release socket [ 353.126321][ T4363] vhci_hcd: disconnect device [ 353.134425][ T6489] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 353.141091][ T6489] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 353.158931][ T5339] usb 41-1: new full-speed USB device number 8 using vhci_hcd [ 353.219699][ T6493] rdma_rxe: rxe_register_device failed with error -23 [ 353.227372][ T6493] rdma_rxe: failed to add geneve1 [ 353.407168][ T5339] usb 41-1: enqueue for inactive port 0 [ 353.472259][ T6489] vhci_hcd vhci_hcd.0: Device attached [ 353.508697][ T5339] vhci_hcd: vhci_device speed not set [ 353.589788][ T6490] vhci_hcd: connection closed [ 353.592097][ T4421] vhci_hcd: stop threads [ 353.758846][ T4351] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 354.284955][ T4421] vhci_hcd: release socket [ 354.289647][ T4421] vhci_hcd: disconnect device [ 359.499037][ T4351] vhci_hcd: vhci_device speed not set [ 359.688692][ T6522] rdma_rxe: rxe_register_device failed with error -23 [ 359.696113][ T6522] rdma_rxe: failed to add geneve1 [ 360.501970][ T6531] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 360.508567][ T6531] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 360.554099][ T6531] vhci_hcd vhci_hcd.0: Device attached [ 360.580973][ T6532] vhci_hcd: connection closed [ 360.581171][ T46] vhci_hcd: stop threads [ 360.640835][ T46] vhci_hcd: release socket [ 360.731856][ T46] vhci_hcd: disconnect device [ 360.748645][ T4327] vhci_hcd: vhci_device speed not set [ 360.910901][ T6534] device ipvlan3 entered promiscuous mode [ 361.027262][ T6540] device ipvlan3 entered promiscuous mode [ 362.242341][ T4278] Bluetooth: hci6: unexpected event 0x03 length: 1 < 11 [ 362.472431][ T6571] rdma_rxe: already configured on geneve1 [ 364.880719][ T6585] ieee802154 phy0 wpan0: encryption failed: -22 [ 365.072282][ T6593] rdma_rxe: rxe_register_device failed with error -23 [ 365.079640][ T6593] rdma_rxe: failed to add geneve1 [ 365.344458][ T6591] overlayfs: './bus' not a directory [ 366.879234][ T4278] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 367.450674][ T6612] device ipvlan4 entered promiscuous mode [ 367.532862][ T6625] 9pnet_fd: Insufficient options for proto=fd [ 368.265468][ T6637] rdma_rxe: rxe_register_device failed with error -23 [ 368.272947][ T6637] rdma_rxe: failed to add geneve1 [ 370.102004][ T6648] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.656660][ T6659] rdma_rxe: already configured on geneve1 [ 373.694834][ T6678] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 373.694856][ T6678] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 373.694932][ T6678] vhci_hcd vhci_hcd.0: Device attached [ 373.696507][ T6679] vhci_hcd: connection closed [ 373.696881][ T4402] vhci_hcd: stop threads [ 373.696896][ T4402] vhci_hcd: release socket [ 373.696913][ T4402] vhci_hcd: disconnect device [ 373.940149][ T6669] block nbd4: shutting down sockets [ 375.155266][ T6697] rdma_rxe: rxe_register_device failed with error -23 [ 375.162889][ T6697] rdma_rxe: failed to add geneve1 [ 376.360895][ T6708] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.952476][ T6720] netlink: 36 bytes leftover after parsing attributes in process `syz.4.523'. [ 378.053925][ T6720] netlink: 36 bytes leftover after parsing attributes in process `syz.4.523'. [ 378.270348][ T6732] 9pnet_fd: Insufficient options for proto=fd [ 378.506598][ T6737] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 378.513279][ T6737] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 378.521327][ T6737] vhci_hcd vhci_hcd.0: Device attached [ 378.691727][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.698363][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.749354][ T6739] vhci_hcd: connection closed [ 378.750270][ T41] vhci_hcd: stop threads [ 378.802007][ T41] vhci_hcd: release socket [ 378.808928][ T4320] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 378.873038][ T41] vhci_hcd: disconnect device [ 380.326124][ T6757] rdma_rxe: rxe_register_device failed with error -23 [ 380.326541][ T6757] rdma_rxe: failed to add geneve1 [ 380.768828][ T4271] Bluetooth: hci6: command 0x0406 tx timeout [ 383.542120][ T6776] block nbd0: shutting down sockets [ 383.699906][ T6778] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.968778][ T4320] vhci_hcd: vhci_device speed not set [ 389.440771][ T6833] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.756957][ T6870] block nbd6: shutting down sockets [ 399.788781][ T4320] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 399.998638][ T4320] usb 5-1: Using ep0 maxpacket: 8 [ 400.007801][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 400.121205][ T4320] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 400.179484][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.248918][ T26] audit: type=1400 audit(1753172758.232:26): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=6925 comm="syz.3.569" [ 400.488202][ T6919] block nbd6: shutting down sockets [ 400.554324][ T4320] usb 5-1: config 0 descriptor?? [ 400.884430][ T4320] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 405.016813][ T4313] usb 5-1: USB disconnect, device number 4 [ 406.474651][ T6953] netlink: 'syz.3.575': attribute type 4 has an invalid length. [ 408.627548][ T26] audit: type=1400 audit(1753172766.602:27): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=6972 comm="syz.0.581" [ 410.889618][ T6996] device ipvlan2 entered promiscuous mode [ 411.148138][ T7007] autofs4:pid:7007:autofs_fill_super: called with bogus options [ 411.406179][ T7010] netlink: 'syz.3.589': attribute type 4 has an invalid length. [ 411.858998][ T7002] block nbd4: shutting down sockets [ 412.258375][ T7028] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.872170][ T7064] netlink: 'syz.0.602': attribute type 4 has an invalid length. [ 414.879937][ T7062] autofs4:pid:7062:autofs_fill_super: called with bogus options [ 415.431822][ T7075] tmpfs: Unknown parameter 'usrquota' [ 415.588897][ T7080] rdma_rxe: rxe_register_device failed with error -23 [ 415.589351][ T7080] rdma_rxe: failed to add geneve1 [ 419.116878][ T7125] netlink: 'syz.6.616': attribute type 4 has an invalid length. [ 419.126454][ T7123] autofs4:pid:7123:autofs_fill_super: called with bogus options [ 419.226542][ T7129] tmpfs: Unknown parameter 'usrquota' [ 420.519700][ T7116] block nbd5: shutting down sockets [ 420.739283][ T7139] rdma_rxe: rxe_register_device failed with error -23 [ 420.746695][ T7139] rdma_rxe: failed to add geneve1 [ 423.840415][ T26] audit: type=1400 audit(1753172781.822:28): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=7167 comm="syz.3.626" [ 425.665741][ T7180] tmpfs: Unknown parameter 'usrquota' [ 426.045779][ T7185] netlink: 'syz.0.629': attribute type 4 has an invalid length. [ 427.095207][ T7191] tmpfs: Bad value for 'mpol' [ 427.241659][ T7201] rdma_rxe: rxe_register_device failed with error -23 [ 427.249021][ T7201] rdma_rxe: failed to add geneve1 [ 429.119049][ T7224] block nbd5: shutting down sockets [ 429.600440][ T26] audit: type=1400 audit(1753172787.582:29): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=7228 comm="syz.0.640" [ 433.078153][ T7237] block nbd3: shutting down sockets [ 433.291688][ T7253] tmpfs: Unknown parameter 'usrquota' [ 435.389737][ T7265] rdma_rxe: rxe_register_device failed with error -23 [ 435.397102][ T7265] rdma_rxe: failed to add geneve1 [ 436.514142][ T7273] rdma_rxe: rxe_register_device failed with error -23 [ 436.521539][ T7273] rdma_rxe: failed to add geneve1 [ 437.168806][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 437.510758][ T7277] 9pnet_fd: Insufficient options for proto=fd [ 437.517734][ T26] audit: type=1400 audit(1753172795.492:30): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=7274 comm="syz.6.652" [ 439.280573][ T7279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.134385][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.141029][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.617236][ T7303] tmpfs: Unknown parameter 'usrquota' [ 440.625195][ T7304] tmpfs: Unknown parameter 'usrquota' [ 440.651987][ T7302] block nbd4: shutting down sockets [ 441.394747][ T7315] vivid-001: disconnect [ 442.095571][ T7314] vivid-001: reconnect [ 444.554885][ T7347] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.746594][ T7335] block nbd6: shutting down sockets [ 445.090016][ T26] audit: type=1400 audit(1753172803.072:31): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=7351 comm="syz.4.668" [ 448.707528][ T7376] tipc: Enabling of bearer rejected, failed to enable media [ 450.871019][ T7397] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.910638][ T7401] tmpfs: Unknown parameter 'usrquota' [ 453.072936][ T7409] block nbd5: shutting down sockets [ 454.189927][ T7414] Bluetooth: hci1: Frame reassembly failed (-84) [ 454.196508][ T5575] Bluetooth: hci1: Frame reassembly failed (-84) [ 454.209353][ T5575] Bluetooth: hci1: Frame reassembly failed (-84) [ 454.259092][ T7405] blktrace: Concurrent blktraces are not allowed on sg0 [ 454.278235][ T7405] lo speed is unknown, defaulting to 1000 [ 454.279546][ T7405] geneve1 speed is unknown, defaulting to 1000 [ 456.208663][ T4271] Bluetooth: hci1: command 0x1003 tx timeout [ 456.215055][ T4278] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 459.500417][ T7445] block nbd0: shutting down sockets [ 459.537548][ T7460] ieee802154 phy0 wpan0: encryption failed: -22 [ 459.594520][ T26] audit: type=1400 audit(1753172817.572:32): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=7457 comm="syz.3.692" [ 459.895041][ T7469] tmpfs: Unknown parameter 'usrquota' [ 461.419334][ T7482] blktrace: Concurrent blktraces are not allowed on sg0 [ 465.355704][ T7482] lo speed is unknown, defaulting to 1000 [ 465.449794][ T7482] geneve1 speed is unknown, defaulting to 1000 [ 466.788631][ T4327] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 466.988612][ T4327] usb 6-1: Using ep0 maxpacket: 8 [ 466.995569][ T4327] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 467.010955][ T7510] ieee802154 phy0 wpan0: encryption failed: -22 [ 467.111626][ T4327] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 467.121042][ T4327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.124031][ T4327] usb 6-1: config 0 descriptor?? [ 467.348355][ T4327] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 467.536616][ T7519] tmpfs: Unknown parameter 'usrquota' [ 467.571405][ T7518] Bluetooth: hci1: Frame reassembly failed (-84) [ 467.763311][ T9] Bluetooth: hci1: Frame reassembly failed (-84) [ 467.833820][ T4257] usb 6-1: USB disconnect, device number 2 [ 468.349453][ T7537] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 468.416961][ T7537] cramfs: wrong magic [ 469.648649][ T4271] Bluetooth: hci1: command 0x1003 tx timeout [ 469.655061][ T4278] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 470.356319][ T7565] rdma_rxe: already configured on geneve1 [ 471.262921][ T7567] blktrace: Concurrent blktraces are not allowed on sg0 [ 472.969585][ T7567] lo speed is unknown, defaulting to 1000 [ 473.013458][ T7567] geneve1 speed is unknown, defaulting to 1000 [ 474.323957][ T7568] block nbd0: shutting down sockets [ 475.195013][ T7589] tmpfs: Unknown parameter 'usrquota' [ 475.908637][ T4327] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 476.798660][ T4327] usb 4-1: Using ep0 maxpacket: 8 [ 476.918866][ T4327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 476.948710][ T4327] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 476.976520][ T4327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.019591][ T4327] usb 4-1: config 0 descriptor?? [ 478.044398][ T4327] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 478.602279][ T4327] usb 4-1: USB disconnect, device number 2 [ 478.689598][ T7626] vivid-001: disconnect [ 478.715369][ T7625] vivid-001: reconnect [ 480.210724][ T7643] tmpfs: Unknown parameter 'usrquota' [ 482.058059][ T7661] Bluetooth: hci1: Frame reassembly failed (-84) [ 482.447920][ T7663] netlink: 16 bytes leftover after parsing attributes in process `syz.5.738'. [ 483.454364][ T7664] block nbd0: shutting down sockets [ 484.027347][ T7686] vivid-004: disconnect [ 484.049224][ T4271] Bluetooth: hci1: command 0x1003 tx timeout [ 484.057174][ T4278] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 484.220246][ T7685] vivid-004: reconnect [ 485.046145][ T7695] tmpfs: Unknown parameter 'usrquota' [ 485.084430][ T7696] rdma_rxe: rxe_register_device failed with error -23 [ 485.091929][ T7696] rdma_rxe: failed to add geneve1 [ 486.541680][ T4313] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 486.828958][ T4313] usb 5-1: Using ep0 maxpacket: 8 [ 487.420720][ T4313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 487.503994][ T4313] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 487.558529][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.669313][ T4313] usb 5-1: config 0 descriptor?? [ 487.882836][ T4313] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 489.508186][ T4278] Bluetooth: hci6: unexpected event 0x03 length: 1 < 11 [ 490.673296][ T4313] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 492.092730][ T4313] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.177442][ T126] usb 5-1: USB disconnect, device number 5 [ 492.229141][ T4313] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 492.238825][ T4313] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 492.247945][ T4313] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.260023][ T4313] usb 6-1: config 0 descriptor?? [ 492.610647][ T26] audit: type=1400 audit(1753172850.592:33): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=7744 comm="syz.4.757" [ 494.907395][ T4313] usb 6-1: string descriptor 0 read error: -71 [ 495.913445][ T4313] usb 6-1: USB disconnect, device number 3 [ 496.122547][ T7766] tmpfs: Unknown parameter 'noswap' [ 496.575690][ T7772] Bluetooth: hci1: Frame reassembly failed (-84) [ 496.596962][ T11] Bluetooth: hci1: Frame reassembly failed (-84) [ 498.028609][ T4313] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 498.028843][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 498.178534][ T4313] usb 5-1: device descriptor read/64, error -32 [ 498.448574][ T4313] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 498.448827][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 498.598557][ T4313] usb 5-1: device descriptor read/64, error -32 [ 498.608852][ T4278] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 498.718704][ T4313] usb usb5-port1: attempt power cycle [ 499.128587][ T4313] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 499.169040][ T4313] usb 5-1: Using ep0 maxpacket: 8 [ 499.185694][ T4313] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 499.185738][ T4313] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 499.185768][ T4313] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 499.199638][ T4313] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 499.199682][ T4313] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 499.199711][ T4313] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 499.205879][ T4313] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 499.205926][ T4313] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 499.205956][ T4313] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 499.206900][ T4271] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 499.217117][ T4313] usb 5-1: string descriptor 0 read error: -22 [ 499.217229][ T4313] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 499.217256][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.224460][ T4313] adutux 5-1:168.0: interrupt endpoints not found [ 499.468838][ T4747] usb 5-1: USB disconnect, device number 8 [ 499.830103][ T7779] tty tty2: ldisc open failed (-12), clearing slot 1 [ 500.243786][ T7784] block nbd6: shutting down sockets [ 501.572012][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.578423][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.468586][ T4747] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 504.598565][ T4747] usb 7-1: Using ep0 maxpacket: 8 [ 504.649459][ T4747] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 504.665900][ T4747] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 504.675183][ T4747] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.685516][ T4747] usb 7-1: config 0 descriptor?? [ 504.912946][ T4747] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 505.436805][ T126] usb 7-1: USB disconnect, device number 2 [ 507.133100][ T26] audit: type=1400 audit(1753172865.112:34): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=7850 comm="syz.6.776" [ 510.919891][ T7866] block nbd6: shutting down sockets [ 514.504717][ T7893] block nbd5: shutting down sockets [ 515.233500][ T7899] 9pnet_virtio: no channels available for device syz [ 516.293995][ T7905] block device autoloading is deprecated and will be removed. [ 516.378991][ T7908] IPv6: NLM_F_REPLACE set, but no existing node found! [ 517.074002][ T26] audit: type=1400 audit(1753172875.052:35): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=7912 comm="syz.4.789" [ 524.727398][ T7959] rdma_rxe: rxe_register_device failed with error -23 [ 524.735071][ T7959] rdma_rxe: failed to add geneve1 [ 528.005824][ T7980] block nbd0: shutting down sockets [ 530.246926][ T7942] netlink: 'syz.4.795': attribute type 4 has an invalid length. [ 530.275686][ T7965] netlink: 16 bytes leftover after parsing attributes in process `syz.6.800'. [ 530.275967][ T7854] lo speed is unknown, defaulting to 1000 [ 531.933901][ T7995] lo speed is unknown, defaulting to 1000 [ 531.965198][ T7995] geneve1 speed is unknown, defaulting to 1000 [ 532.473532][ T8018] rdma_rxe: rxe_register_device failed with error -23 [ 532.481076][ T8018] rdma_rxe: failed to add geneve1 [ 533.768647][ T4388] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 534.248686][ T8033] tmpfs: Unknown parameter 'grpquota' [ 535.498709][ T4388] usb 7-1: Using ep0 maxpacket: 8 [ 535.508777][ T8039] netlink: 'syz.5.815': attribute type 4 has an invalid length. [ 535.519048][ T4388] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 535.569710][ T8038] tmpfs: Unknown parameter 'usrquota' [ 535.584499][ T4388] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 535.654578][ T4388] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 535.686354][ T8048] vivid-002: disconnect [ 535.692433][ T4388] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 535.696269][ T8047] vivid-002: reconnect [ 535.705305][ T4388] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 535.725039][ T4388] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 535.744494][ T4388] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 535.754065][ T4388] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.889741][ T8046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.817'. [ 536.001241][ T4388] usb 7-1: usb_control_msg returned -32 [ 536.008968][ T4388] usbtmc 7-1:16.0: can't read capabilities [ 537.508710][ T5305] usb 7-1: USB disconnect, device number 3 [ 537.757562][ T26] audit: type=1400 audit(1753172895.732:36): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=8076 comm="syz.5.824" [ 538.174811][ T8082] rdma_rxe: rxe_register_device failed with error -23 [ 538.182156][ T8082] rdma_rxe: failed to add geneve1 [ 538.938277][ T8093] netlink: 'syz.0.829': attribute type 4 has an invalid length. [ 538.957356][ T8094] vivid-002: disconnect [ 538.986444][ T8092] vivid-002: reconnect [ 539.169328][ T4271] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 540.038304][ T8111] tmpfs: Unknown parameter 'usrquota' [ 543.488251][ T8149] rdma_rxe: rxe_register_device failed with error -23 [ 543.496296][ T8149] rdma_rxe: failed to add geneve1 [ 544.663151][ T8158] vivid-002: disconnect [ 544.689004][ T8160] netlink: 'syz.5.843': attribute type 4 has an invalid length. [ 544.692167][ T8153] vivid-002: reconnect [ 545.206901][ T8168] tmpfs: Unknown parameter 'usrquota' [ 545.748318][ T26] audit: type=1400 audit(1753172903.722:37): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=8173 comm="syz.4.850" [ 545.766017][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.858962][ T4271] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 547.450120][ T26] audit: type=1400 audit(1753172905.432:38): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=8199 comm="syz.6.855" [ 547.548782][ T4349] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 548.965135][ T4349] usb 4-1: Using ep0 maxpacket: 32 [ 548.993335][ T8214] netlink: 'syz.4.859': attribute type 4 has an invalid length. [ 549.002586][ T4349] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.043346][ T4349] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.083451][ T4349] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 549.142634][ T4349] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 549.171044][ T4349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.210944][ T4349] usb 4-1: config 0 descriptor?? [ 549.420509][ T8223] vivid-003: disconnect [ 549.558814][ T8228] random: crng reseeded on system resumption [ 550.522697][ T8220] vivid-003: reconnect [ 551.259832][ T4349] usbhid 4-1:0.0: can't add hid device: -71 [ 551.266525][ T4349] usbhid: probe of 4-1:0.0 failed with error -71 [ 551.276421][ T4349] usb 4-1: USB disconnect, device number 3 [ 552.859903][ T26] audit: type=1400 audit(1753172910.842:39): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=8242 comm="syz.5.866" [ 553.066833][ T8257] device syzkaller0 entered promiscuous mode [ 553.476999][ T8266] lo speed is unknown, defaulting to 1000 [ 553.560369][ T26] audit: type=1400 audit(1753172911.542:40): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=8274 comm="syz.3.872" [ 553.595344][ T8266] geneve1 speed is unknown, defaulting to 1000 [ 558.315401][ T8310] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 558.322097][ T8310] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 558.330072][ T8310] vhci_hcd vhci_hcd.0: Device attached [ 558.374599][ T8311] vhci_hcd: connection closed [ 558.608620][ T4257] usb 43-1: new high-speed USB device number 4 using vhci_hcd [ 559.481304][ T4355] vhci_hcd: stop threads [ 559.485632][ T4355] vhci_hcd: release socket [ 559.492131][ T8307] vivid-002: disconnect [ 559.519471][ T8303] vivid-002: reconnect [ 559.523898][ T4355] vhci_hcd: disconnect device [ 559.918805][ T26] audit: type=1400 audit(1753172917.902:41): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=8317 comm="syz.6.880" [ 560.483637][ T8333] device syzkaller0 entered promiscuous mode [ 560.784050][ T8339] fuse: Bad value for 'group_id' [ 560.929943][ T26] audit: type=1400 audit(1753172918.912:42): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=8341 comm="syz.3.887" [ 561.416228][ T8355] device ipvlan3 entered promiscuous mode [ 563.022392][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.028931][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.698803][ T4257] vhci_hcd: vhci_device speed not set [ 565.756472][ T8376] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 565.763160][ T8376] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 565.771178][ T8376] vhci_hcd vhci_hcd.0: Device attached [ 565.796587][ T8377] vhci_hcd: connection closed [ 565.797851][ T41] vhci_hcd: stop threads [ 566.509608][ T8378] fuse: Bad value for 'group_id' [ 566.515663][ T8375] vivid-004: disconnect [ 566.553066][ T8369] vivid-004: reconnect [ 566.558773][ T41] vhci_hcd: release socket [ 566.575688][ T41] vhci_hcd: disconnect device [ 566.752049][ T4257] vhci_hcd: vhci_device speed not set [ 566.922229][ T8396] tmpfs: Unknown parameter 'usrquota' [ 567.079898][ T8394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.899'. [ 567.195459][ T8393] lo speed is unknown, defaulting to 1000 [ 567.257909][ T8393] geneve1 speed is unknown, defaulting to 1000 [ 567.284838][ T8401] device syzkaller0 entered promiscuous mode [ 567.370283][ T8404] fuse: Bad value for 'group_id' [ 568.967177][ T8435] block nbd4: shutting down sockets [ 568.997742][ T8441] fuse: Bad value for 'group_id' [ 569.610613][ T8448] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 569.617270][ T8448] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 569.625032][ T8448] vhci_hcd vhci_hcd.0: Device attached [ 569.646250][ T8450] vhci_hcd: connection closed [ 569.646568][ T4363] vhci_hcd: stop threads [ 569.666675][ T4363] vhci_hcd: release socket [ 569.722213][ T4363] vhci_hcd: disconnect device [ 570.101169][ T8459] fuse: Bad value for 'group_id' [ 570.382576][ T8464] tmpfs: Unknown parameter 'usrquota' [ 571.828818][ T4257] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 572.078660][ T4257] usb 1-1: Using ep0 maxpacket: 8 [ 573.544367][ T4257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 573.666738][ T4257] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 573.858664][ T4257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.890011][ T8489] fuse: Bad value for 'group_id' [ 573.902867][ T4257] usb 1-1: config 0 descriptor?? [ 573.991490][ T8491] netlink: 'syz.6.923': attribute type 4 has an invalid length. [ 574.148054][ T4257] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 574.388129][ T8512] tmpfs: Unknown parameter 'usrquota' [ 574.633269][ T129] usb 1-1: USB disconnect, device number 2 [ 576.707499][ T8528] vivid-003: disconnect [ 576.719526][ T8526] vivid-003: reconnect [ 577.199766][ T8550] netlink: 'syz.4.936': attribute type 4 has an invalid length. [ 577.878637][ T8557] block nbd3: shutting down sockets [ 579.818636][ T4278] Bluetooth: hci1: command 0x1003 tx timeout [ 579.825099][ T4271] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 580.200506][ T8584] tmpfs: Unknown parameter 'usrquota' [ 584.293675][ T8595] vivid-003: disconnect [ 584.307192][ T8593] vivid-003: reconnect [ 584.722821][ T8613] netlink: 'syz.6.947': attribute type 4 has an invalid length. [ 585.041971][ T8623] tmpfs: Unknown parameter 'usrquota' [ 590.025427][ T8645] netlink: 48 bytes leftover after parsing attributes in process `syz.6.952'. [ 590.314162][ T8652] tmpfs: Unknown parameter 'usrquota' [ 590.350117][ T8646] device ipvlan4 entered promiscuous mode [ 592.113220][ T26] audit: type=1400 audit(1753172950.092:43): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=8674 comm="syz.0.958" [ 592.382535][ T8681] netlink: 'syz.6.960': attribute type 4 has an invalid length. [ 592.765433][ T8693] rdma_rxe: rxe_register_device failed with error -23 [ 592.772985][ T8693] rdma_rxe: failed to add geneve1 [ 595.129625][ T8700] vivid-001: disconnect [ 595.129843][ T8699] vivid-001: reconnect [ 595.428036][ T8714] 9pnet_fd: Insufficient options for proto=fd [ 595.535427][ T8719] tmpfs: Unknown parameter 'usrquota' [ 597.585419][ T8739] netlink: 'syz.5.974': attribute type 4 has an invalid length. [ 597.627467][ T26] audit: type=1400 audit(1753172955.602:44): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=8740 comm="syz.0.976" [ 601.001645][ T8770] tmpfs: Unknown parameter 'usrquota' [ 601.209194][ T8775] 9pnet_fd: Insufficient options for proto=fd [ 603.169362][ T8799] netlink: 'syz.6.989': attribute type 4 has an invalid length. [ 603.308283][ T26] audit: type=1400 audit(1753172961.282:45): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=8800 comm="syz.4.990" [ 604.845928][ T8831] 9pnet_fd: Insufficient options for proto=fd [ 604.888681][ T129] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 605.080544][ T129] usb 7-1: config 0 has no interfaces? [ 605.089936][ T129] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 605.140417][ T129] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 605.182758][ T129] usb 7-1: Product: syz [ 605.197656][ T129] usb 7-1: Manufacturer: syz [ 606.049537][ T129] usb 7-1: SerialNumber: syz [ 606.114098][ T129] usb 7-1: config 0 descriptor?? [ 606.463013][ T129] usb 7-1: USB disconnect, device number 4 [ 609.005282][ T26] audit: type=1400 audit(1753172966.982:46): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=8871 comm="syz.6.1008" [ 609.095791][ T8874] netlink: 'syz.5.1006': attribute type 4 has an invalid length. [ 609.564497][ T8884] 9pnet_fd: Insufficient options for proto=fd [ 610.363141][ T8906] siw: device registration error -23 [ 612.534922][ T8910] block nbd3: shutting down sockets [ 621.196033][ T26] audit: type=1400 audit(1753172979.172:47): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=8993 comm="syz.5.1031" [ 621.745311][ T8999] Bluetooth: hci1: Frame reassembly failed (-84) [ 623.220001][ T9015] netlink: 'syz.3.1037': attribute type 4 has an invalid length. [ 623.810078][ T4279] Bluetooth: hci1: command 0x1003 tx timeout [ 623.810140][ T8581] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 624.453803][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.465692][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.941461][ T9040] tmpfs: Unknown parameter 'usrquota' [ 630.303643][ T9051] block nbd0: shutting down sockets [ 630.911767][ T9061] Bluetooth: hci1: Frame reassembly failed (-84) [ 632.652803][ T9079] netlink: 'syz.4.1050': attribute type 4 has an invalid length. [ 632.928735][ T8581] Bluetooth: hci1: command 0x1003 tx timeout [ 632.935200][ T4279] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 633.110915][ T9085] blktrace: Concurrent blktraces are not allowed on sg0 [ 633.186158][ T9085] lo speed is unknown, defaulting to 1000 [ 633.197405][ T9085] geneve1 speed is unknown, defaulting to 1000 [ 635.986078][ T9090] device ipvlan2 entered promiscuous mode [ 636.099304][ T9094] 9pnet_virtio: no channels available for device syz [ 639.278243][ T4279] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 639.629644][ T9102] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.636911][ T9102] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.941028][ T9102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.054485][ T9102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.272634][ T9102] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.288748][ T9102] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.314119][ T9102] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.351360][ T9102] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.550521][ T9155] block nbd3: shutting down sockets [ 642.993914][ T9131] netlink: 'syz.5.1062': attribute type 4 has an invalid length. [ 644.718758][ T9171] random: crng reseeded on system resumption [ 646.341127][ T9167] device ipvlan5 entered promiscuous mode [ 648.477214][ T9196] Bluetooth: hci1: Frame reassembly failed (-84) [ 648.747787][ T26] audit: type=1400 audit(1753173006.722:48): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=9208 comm="syz.6.1076" [ 649.766495][ T9222] Bluetooth: hci5: Frame reassembly failed (-84) [ 650.530172][ T4279] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 650.530318][ T4271] Bluetooth: hci1: command 0x1003 tx timeout [ 650.610325][ T9220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 651.364481][ T9224] tty tty3: ldisc open failed (-12), clearing slot 2 [ 651.534399][ T9229] netlink: 'syz.0.1079': attribute type 4 has an invalid length. [ 651.543126][ T9229] netlink: 'syz.0.1079': attribute type 4 has an invalid length. [ 651.728579][ T4279] Bluetooth: hci5: command 0x1003 tx timeout [ 651.736208][ T8581] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 659.081615][ T9300] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1095'. [ 659.357686][ T9306] tmpfs: Unknown parameter 'usrquota' [ 664.125658][ T9337] Bluetooth: hci1: Frame reassembly failed (-84) [ 666.187532][ T4279] Bluetooth: hci1: command 0x1003 tx timeout [ 666.199111][ T8581] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 666.427795][ T8581] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 669.348634][ T9368] random: crng reseeded on system resumption [ 674.721392][ T9406] tmpfs: Unknown parameter 'usrquota' [ 676.585506][ T8581] Bluetooth: hci6: unexpected event 0x03 length: 1 < 11 [ 678.428523][ T4320] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 679.775272][ T26] audit: type=1400 audit(1753173037.752:49): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=9432 comm="syz.5.1130" [ 679.870408][ T4320] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 679.884344][ T4320] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 679.897166][ T4320] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 679.907538][ T4320] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 679.923720][ T4320] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.118144][ T9424] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 680.187641][ T4320] usb 7-1: can't set config #27, error -71 [ 680.216952][ T4320] usb 7-1: USB disconnect, device number 5 [ 680.457943][ T9443] vivid-003: disconnect [ 680.463898][ T9442] vivid-003: reconnect [ 680.586040][ T9444] Bluetooth: hci1: Frame reassembly failed (-84) [ 682.628548][ T4279] Bluetooth: hci1: command 0x1003 tx timeout [ 682.630382][ T8581] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 685.159328][ T4271] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 685.892208][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.898779][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.866221][ T9484] vivid-001: disconnect [ 686.871427][ T9482] vivid-001: reconnect [ 687.450186][ T26] audit: type=1400 audit(1753173045.432:50): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=9492 comm="syz.6.1147" [ 689.103754][ T4271] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 694.317865][ T9567] Bluetooth: hci1: Frame reassembly failed (-84) [ 694.429662][ T8581] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 694.825629][ T9582] tmpfs: Unknown parameter 'usrquota' [ 694.837598][ T9579] tmpfs: Unknown parameter 'usrquota' [ 696.368563][ T8581] Bluetooth: hci1: command 0x1003 tx timeout [ 696.375270][ T4271] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 698.310523][ T9596] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 698.340717][ T9597] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 698.589884][ T9600] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 698.673347][ T9595] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9) [ 698.679939][ T9595] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 698.981912][ T9596] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 699.349927][ T9595] vhci_hcd vhci_hcd.0: Device attached [ 699.369964][ T9595] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 699.489504][ T9595] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 699.520365][ T9595] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 699.564005][ T4388] vhci_hcd: vhci_device speed not set [ 699.595639][ T9595] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(19) [ 699.602323][ T9595] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 699.630744][ T9595] vhci_hcd vhci_hcd.0: Device attached [ 699.638656][ T4388] usb 33-3: new full-speed USB device number 4 using vhci_hcd [ 699.648331][ T9594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 699.691422][ T9608] vhci_hcd: connection closed [ 699.691624][ T9602] vhci_hcd: connection reset by peer [ 699.701991][ T4421] vhci_hcd: stop threads [ 699.706439][ T4421] vhci_hcd: release socket [ 699.728136][ T4421] vhci_hcd: disconnect device [ 699.764575][ T4421] vhci_hcd: stop threads [ 699.773541][ T4421] vhci_hcd: release socket [ 699.783487][ T4421] vhci_hcd: disconnect device [ 699.923359][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.930881][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.675683][ T4271] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 704.768790][ T4388] vhci_hcd: vhci_device speed not set [ 706.435841][ T9585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.528341][ T9649] Bluetooth: hci1: Frame reassembly failed (-84) [ 706.549893][ T11] Bluetooth: hci1: Frame reassembly failed (-84) [ 706.617096][ T9585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.602254][ T9585] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.611534][ T9585] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.620796][ T9585] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.629852][ T9585] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.649123][ T9585] infiniband syz1: set down [ 707.802794][ T9637] device ipvlan5 entered promiscuous mode [ 707.828279][ T4320] geneve1 speed is unknown, defaulting to 1000 [ 707.845244][ T4747] geneve1 speed is unknown, defaulting to 1000 [ 708.560510][ T8581] Bluetooth: hci1: command 0x1003 tx timeout [ 708.567038][ T4271] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 711.040175][ T9668] tmpfs: Unknown parameter 'usrquota' [ 712.738753][ T9671] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 712.745342][ T9671] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 712.792083][ T9671] vhci_hcd vhci_hcd.0: Device attached [ 713.078500][ T4320] usb 43-1: new high-speed USB device number 5 using vhci_hcd [ 713.119653][ T9672] vhci_hcd: connection closed [ 713.120048][ T2901] vhci_hcd: stop threads [ 714.506362][ T2901] vhci_hcd: release socket [ 714.577025][ T2901] vhci_hcd: disconnect device [ 716.671886][ T4279] Bluetooth: hci6: unexpected event 0x03 length: 1 < 11 [ 716.777682][ T9695] bridge0: port 3(syz_tun) entered blocking state [ 716.808622][ T9695] bridge0: port 3(syz_tun) entered disabled state [ 716.864302][ T9695] device syz_tun entered promiscuous mode [ 716.886575][ T9695] bridge0: port 3(syz_tun) entered blocking state [ 716.893702][ T9695] bridge0: port 3(syz_tun) entered forwarding state [ 716.937205][ T9697] device ipvlan6 entered promiscuous mode [ 717.029228][ T9704] loop4: detected capacity change from 0 to 512 [ 717.036910][ T9704] EXT4-fs: Ignoring removed oldalloc option [ 717.132893][ T9704] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c01c, mo2=0002] [ 717.141577][ T9704] System zones: 1-12 [ 717.170986][ T9704] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1205: Parent and EA inode have the same ino 15 [ 717.246657][ T9704] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 717.260172][ T9704] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1205: Parent and EA inode have the same ino 15 [ 717.292011][ T9704] EXT4-fs (loop4): 1 orphan inode deleted [ 717.297837][ T9704] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 717.304590][ T9708] loop3: detected capacity change from 0 to 2048 [ 717.460113][ T9708] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 717.476106][ T9688] loop6: detected capacity change from 0 to 32768 [ 717.504510][ T9688] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.1200 (9688) [ 717.615980][ T9688] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 717.648339][ T9718] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 717.654915][ T9718] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 717.658334][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 717.673804][ T9688] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 717.689755][ T9688] BTRFS info (device loop6): using free space tree [ 717.689989][ T9718] vhci_hcd vhci_hcd.0: Device attached [ 717.713064][ T9719] vhci_hcd: connection closed [ 717.713328][ T9666] vhci_hcd: stop threads [ 717.758528][ T9666] vhci_hcd: release socket [ 717.787756][ T9666] vhci_hcd: disconnect device [ 717.906253][ T9739] tmpfs: Unknown parameter 'usrquota' [ 717.995705][ T9688] BTRFS info (device loop6): enabling ssd optimizations [ 719.705737][ T26] audit: type=1804 audit(1753173077.682:51): pid=9688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1200" name="/newroot/174/bus/bus" dev="loop6" ino=263 res=1 errno=0 [ 719.748494][ T4320] vhci_hcd: vhci_device speed not set [ 719.752241][ T26] audit: type=1804 audit(1753173077.712:52): pid=9688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1200" name="/newroot/174/bus/bus" dev="loop6" ino=263 res=1 errno=0 [ 719.815858][ T9666] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 720.014411][ T9666] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 712 with error 28 [ 720.061956][ T9666] EXT4-fs (loop3): This should not happen!! Data will be lost [ 720.061956][ T9666] [ 720.088134][ T9666] EXT4-fs (loop3): Total free blocks count 0 [ 720.107842][ T9759] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 720.114439][ T9759] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 720.133221][ T9759] vhci_hcd vhci_hcd.0: Device attached [ 720.173098][ T9666] EXT4-fs (loop3): Free/Dirty block details [ 720.203709][ T9666] EXT4-fs (loop3): free_blocks=2415919104 [ 720.229087][ T9666] EXT4-fs (loop3): dirty_blocks=720 [ 720.306156][ T9666] EXT4-fs (loop3): Block reservation details [ 720.398544][ T4329] usb 33-1: new high-speed USB device number 5 using vhci_hcd [ 720.952312][ T9761] vhci_hcd: connection closed [ 721.607357][ T4963] vhci_hcd: stop threads [ 721.874029][ T9666] EXT4-fs (loop3): i_reserved_data_blocks=45 [ 722.136846][ T9] Bluetooth: hci1: Frame reassembly failed (-84) [ 722.186802][ T9760] Bluetooth: hci1: Frame reassembly failed (-84) [ 722.198273][ T9] Bluetooth: hci1: Frame reassembly failed (-84) [ 722.203585][ T4963] vhci_hcd: release socket [ 722.204626][ T4963] vhci_hcd: disconnect device [ 722.556770][ T4329] usb 33-1: enqueue for inactive port 0 [ 722.712759][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 722.778985][ T4329] vhci_hcd: vhci_device speed not set [ 723.029551][ T9769] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 723.036234][ T9769] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 723.048757][ T9769] vhci_hcd vhci_hcd.0: Device attached [ 723.052600][ T9776] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 723.215870][ T9779] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 723.248559][ T4320] vhci_hcd: vhci_device speed not set [ 723.604808][ T9769] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 723.800541][ T9769] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 723.934277][ T9776] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 724.129843][ T4279] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 724.136446][ T8581] Bluetooth: hci1: command 0x1003 tx timeout [ 724.628599][ T4320] usb 39-1: new full-speed USB device number 7 using vhci_hcd [ 724.813923][ T5842] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 727.050922][ T9784] loop0: detected capacity change from 0 to 32768 [ 727.089024][ T9784] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.1218 (9784) [ 727.187602][ T9784] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 727.212246][ T9772] vhci_hcd: connection reset by peer [ 727.217790][ T4477] vhci_hcd: stop threads [ 727.223800][ T4477] vhci_hcd: release socket [ 727.233003][ T4477] vhci_hcd: disconnect device [ 727.240592][ T9784] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 727.253262][ T9803] tmpfs: Unknown parameter 'usrquota' [ 727.284328][ T9784] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 727.338918][ T9784] BTRFS info (device loop0): use zstd compression, level 3 [ 727.346209][ T9784] BTRFS info (device loop0): using free space tree [ 727.429348][ T9805] device vlan2 entered promiscuous mode [ 727.489236][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1223'. [ 727.508883][ T9814] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 727.515485][ T9814] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 727.619769][ T9814] vhci_hcd vhci_hcd.0: Device attached [ 728.464400][ T9815] vhci_hcd: connection closed [ 728.464650][ T4421] vhci_hcd: stop threads [ 728.483921][ T4421] vhci_hcd: release socket [ 728.502036][ T4421] vhci_hcd: disconnect device [ 728.725630][ T9796] loop5: detected capacity change from 0 to 40427 [ 728.769170][ T9796] F2FS-fs (loop5): build fault injection attr: rate: 13815, type: 0x3ffff [ 728.802646][ T9796] F2FS-fs (loop5): Unrecognized mount option "su" or missing value [ 729.728584][ T4320] vhci_hcd: vhci_device speed not set [ 730.608977][ T9842] loop4: detected capacity change from 0 to 8 [ 730.627293][ T9784] BTRFS error (device loop0): open_ctree failed: -12 [ 730.666425][ T4392] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by udevd (4392) [ 730.680150][ T9842] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 730.710355][ T9841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.791888][ T4382] udevd[4382]: incorrect cramfs checksum on /dev/loop4 [ 730.961602][ T4382] udevd[4382]: incorrect cramfs checksum on /dev/loop4 [ 732.877858][ T9866] Bluetooth: hci1: Frame reassembly failed (-84) [ 733.003388][ T9868] rdma_rxe: already configured on geneve1 [ 733.825772][ T9874] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 733.895683][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1236'. [ 733.908447][ T9843] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 734.098617][ T9843] usb 7-1: Using ep0 maxpacket: 8 [ 734.113751][ T9843] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.715358][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1236'. [ 734.878143][ T9843] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 734.899406][ T9843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.928673][ T4279] Bluetooth: hci1: command 0x1003 tx timeout [ 734.937180][ T8581] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 734.959425][ T9843] usb 7-1: config 0 descriptor?? [ 734.991561][ T9843] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 735.909485][ T9887] fuse: Bad value for 'rootmode' [ 736.029899][ T9885] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 736.036584][ T9885] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 736.071647][ T9885] vhci_hcd vhci_hcd.0: Device attached [ 736.328887][ T9895] vhci_hcd: connection closed [ 736.331234][ T56] vhci_hcd: stop threads [ 736.388589][ T9843] usb 39-1: new high-speed USB device number 8 using vhci_hcd [ 737.751405][ T56] vhci_hcd: release socket [ 737.829284][ T56] vhci_hcd: disconnect device [ 738.319104][ T5305] usb 7-1: USB disconnect, device number 6 [ 738.335062][ T9901] tmpfs: Unknown parameter 'usrquota' [ 739.736273][ T9906] loop3: detected capacity change from 0 to 128 [ 739.859097][ T9906] ======================================================= [ 739.859097][ T9906] WARNING: The mand mount option has been deprecated and [ 739.859097][ T9906] and is ignored by this kernel. Remove the mand [ 739.859097][ T9906] option from the mount to silence this warning. [ 739.859097][ T9906] ======================================================= [ 739.939924][ T26] audit: type=1400 audit(1753173097.922:53): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=9907 comm="syz.6.1245" [ 741.703255][ T26] audit: type=1400 audit(1753173099.682:54): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=9922 comm="syz.4.1248" [ 742.848677][ T9843] vhci_hcd: vhci_device speed not set [ 743.228638][ T9940] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 743.235286][ T9940] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 743.243089][ T9934] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 743.254759][ T9940] vhci_hcd vhci_hcd.0: Device attached [ 743.421725][ T9932] loop3: detected capacity change from 0 to 32768 [ 743.528494][ T4320] usb 43-1: new high-speed USB device number 6 using vhci_hcd [ 743.809864][ T9942] vhci_hcd: connection closed [ 743.810018][ T4477] vhci_hcd: stop threads [ 745.008638][ T8581] Bluetooth: hci2: command 0x0405 tx timeout [ 745.268122][ T4477] vhci_hcd: release socket [ 745.379731][ T4477] vhci_hcd: disconnect device [ 745.706620][ T9932] JBD2: recovery failed [ 745.718511][ T9932] (syz.3.1251,9932,1):ocfs2_journal_load:1134 ERROR: Failed to load journal! [ 745.761172][ T9932] (syz.3.1251,9932,1):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5 [ 745.783856][ T9932] (syz.3.1251,9932,0):ocfs2_check_volume:2489 ERROR: status = -5 [ 745.793554][ T26] audit: type=1400 audit(1753173103.772:55): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=9954 comm="syz.0.1257" [ 745.813252][ T9932] (syz.3.1251,9932,0):ocfs2_mount_volume:1821 ERROR: status = -5 [ 745.846734][ T9932] (syz.3.1251,9932,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 745.986329][ T9958] tmpfs: Unknown parameter 'usrquota' [ 747.667188][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.673616][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.701171][ T9977] Bluetooth: hci1: Frame reassembly failed (-84) [ 749.711202][ T4963] Bluetooth: hci1: Frame reassembly failed (-84) [ 749.762150][ T4279] Bluetooth: hci6: unexpected event 0x03 length: 1 < 11 [ 749.867471][ T4402] Bluetooth: hci5: Frame reassembly failed (-84) [ 749.884614][ T9989] Bluetooth: hci5: Frame reassembly failed (-84) [ 750.528542][ T4320] vhci_hcd: vhci_device speed not set [ 751.798606][ T4271] Bluetooth: hci1: command 0x1003 tx timeout [ 751.807192][ T8581] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 751.888573][ T4279] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 751.888638][ T8581] Bluetooth: hci5: command 0x1003 tx timeout [ 752.072515][ T9998] device ipvlan3 entered promiscuous mode [ 752.153091][T10009] blktrace: Concurrent blktraces are not allowed on sg0 [ 753.549855][T10009] lo speed is unknown, defaulting to 1000 [ 753.560062][T10009] geneve1 speed is unknown, defaulting to 1000 [ 754.578905][T10011] tmpfs: Unknown parameter 'usrquota' [ 757.403658][T10028] loop4: detected capacity change from 0 to 256 [ 757.444329][T10028] exfat: Deprecated parameter 'namecase' [ 757.535913][T10028] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 757.698944][T10036] 9pnet_fd: Insufficient options for proto=fd [ 757.742332][T10028] syz.4.1271: attempt to access beyond end of device [ 757.742332][T10028] loop4: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 757.798176][T10028] syz.4.1271: attempt to access beyond end of device [ 757.798176][T10028] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 758.981687][ T26] audit: type=1800 audit(1753173116.052:56): pid=10028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1271" name="file1" dev="loop4" ino=1048615 res=0 errno=0 [ 759.419683][ T26] audit: type=1400 audit(1753173117.392:57): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=10048 comm="syz.6.1277" [ 761.482319][T10064] blktrace: Concurrent blktraces are not allowed on sg0 [ 761.546343][T10064] lo speed is unknown, defaulting to 1000 [ 761.557336][T10064] geneve1 speed is unknown, defaulting to 1000 [ 762.320683][T10071] tmpfs: Unknown parameter 'usrquota' [ 764.476728][ T9] Bluetooth: hci1: Frame reassembly failed (-84) [ 764.483886][ T9] Bluetooth: hci1: Frame reassembly failed (-84) [ 765.701680][T10072] device ipvlan2 entered promiscuous mode [ 766.448606][ T8581] Bluetooth: hci1: command 0x1003 tx timeout [ 766.448643][ T4279] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 768.011125][T10110] fuse: Unknown parameter 'group_id00000000000000000000' [ 768.691462][ T56] Bluetooth: hci5: Frame reassembly failed (-84) [ 769.640231][ T26] audit: type=1400 audit(1753173127.622:58): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=10124 comm="syz.6.1293" [ 770.688598][ T4279] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 771.490707][T10132] tmpfs: Unknown parameter 'usrquota' [ 775.077659][T10171] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 775.084263][T10171] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 775.244255][T10171] vhci_hcd vhci_hcd.0: Device attached [ 775.508808][ T4320] usb 39-1: new high-speed USB device number 9 using vhci_hcd [ 775.847236][T10174] vhci_hcd: connection closed [ 775.848179][ T4363] vhci_hcd: stop threads [ 777.277335][ T4363] vhci_hcd: release socket [ 777.322806][ T4363] vhci_hcd: disconnect device [ 777.396008][ T26] audit: type=1400 audit(1753173135.372:59): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=10179 comm="syz.4.1303" [ 777.644868][T10183] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 777.651459][T10183] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 777.660929][T10183] vhci_hcd vhci_hcd.0: Device attached [ 777.689893][T10183] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 777.700598][T10183] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 777.727126][T10183] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 777.754037][T10183] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 777.814046][T10183] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 777.858591][ T4257] vhci_hcd: vhci_device speed not set [ 777.928457][ T4257] usb 33-1: new full-speed USB device number 6 using vhci_hcd [ 779.148316][T10188] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 779.155002][T10188] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 779.162992][T10188] vhci_hcd vhci_hcd.0: Device attached [ 779.176301][T10189] vhci_hcd: connection closed [ 779.177460][ T46] vhci_hcd: stop threads [ 779.559254][ T46] vhci_hcd: release socket [ 779.593706][ T46] vhci_hcd: disconnect device [ 779.908792][ T4388] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 780.118559][ T4388] usb 5-1: Using ep0 maxpacket: 8 [ 780.134909][ T4388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 780.135009][ T4388] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 780.135066][ T4388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.186650][ T4388] usb 5-1: config 0 descriptor?? [ 780.220989][ T4388] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 780.699521][T10203] loop3: detected capacity change from 0 to 1024 [ 780.943411][T10203] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 781.084749][T10212] tmpfs: Unknown parameter 'usrquota' [ 782.212907][ T4275] EXT4-fs (loop3): unmounting filesystem. [ 782.228318][T10223] fuse: Bad value for 'user_id' [ 782.248263][T10184] vhci_hcd: connection reset by peer [ 782.254523][ T4963] vhci_hcd: stop threads [ 782.259347][ T4963] vhci_hcd: release socket [ 782.292070][ T4963] vhci_hcd: disconnect device [ 782.370381][ T4320] vhci_hcd: vhci_device speed not set [ 782.436418][T10225] device syzkaller0 entered promiscuous mode [ 782.867084][ T4388] usb 5-1: USB disconnect, device number 9 [ 783.533657][T10231] Bluetooth: hci1: Frame reassembly failed (-84) [ 783.540213][ T4257] vhci_hcd: vhci_device speed not set [ 783.608711][ T4601] Bluetooth: hci1: Frame reassembly failed (-84) [ 783.615320][ T4419] Bluetooth: hci1: Frame reassembly failed (-84) [ 783.711199][ T26] audit: type=1400 audit(1753173141.692:60): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=10238 comm="syz.4.1316" [ 785.137436][T10254] loop5: detected capacity change from 0 to 24 [ 785.158970][T10258] tmpfs: Unknown parameter 'usrquota' [ 785.196922][ T4392] udevd[4392]: incorrect romfs checksum on /dev/loop5 [ 785.326272][T10254] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 785.568566][ T8581] Bluetooth: hci1: command 0x1003 tx timeout [ 785.578705][ T4279] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 786.762012][T10254] romfs: bad initial checksum on dev loop5. [ 787.852459][T10251] loop5: detected capacity change from 0 to 512 [ 788.041381][T10251] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 788.103758][T10274] rdma_rxe: already configured on geneve1 [ 788.186387][T10251] EXT4-fs (loop5): orphan cleanup on readonly fs [ 788.261884][T10251] EXT4-fs warning (device loop5): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 788.277110][T10251] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 788.283816][T10251] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.1319: bad orphan inode 768 [ 788.305364][T10251] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 788.368682][T10279] fuse: Bad value for 'user_id' [ 788.521260][ T5640] EXT4-fs (loop5): unmounting filesystem. [ 788.979079][ T22] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 789.279145][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 789.293839][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 789.304086][ T22] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 789.313422][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.428583][ T22] usb 5-1: config 0 descriptor?? [ 789.596134][ T22] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 789.747589][ T4601] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.879556][T10296] tmpfs: Unknown parameter 'usrquota' [ 789.881620][ T26] audit: type=1400 audit(1753173147.862:61): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=10293 comm="syz.0.1331" [ 791.697229][ T4601] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.825172][ T22] usb 5-1: USB disconnect, device number 10 [ 791.960482][ T4601] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.646737][T10309] rdma_rxe: already configured on geneve1 [ 794.297086][ T4601] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.447509][T10350] tmpfs: Unknown parameter 'usrquota' [ 798.820448][ T8581] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 798.832136][ T8581] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 798.842138][ T8581] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 798.852734][ T8581] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 798.861404][ T8581] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 798.869186][ T8581] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 799.269834][ T22] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 799.773729][ T22] usb 7-1: Using ep0 maxpacket: 8 [ 799.801029][ T22] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 799.829828][ T22] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 799.863451][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.915003][ T22] usb 7-1: config 0 descriptor?? [ 799.920392][T10367] tmpfs: Unknown parameter 'usrquota' [ 799.953573][ T22] iowarrior 7-1:0.0: no interrupt-in endpoint found [ 800.146236][T10356] lo speed is unknown, defaulting to 1000 [ 800.928751][ T8581] Bluetooth: hci1: command 0x0409 tx timeout [ 801.676026][T10356] geneve1 speed is unknown, defaulting to 1000 [ 802.611188][ T22] usb 7-1: USB disconnect, device number 7 [ 803.008580][ T8581] Bluetooth: hci1: command 0x041b tx timeout [ 803.065971][T10383] rdma_rxe: already configured on geneve1 [ 803.594475][T10398] Bluetooth: hci5: Frame reassembly failed (-84) [ 805.230317][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 805.367772][T10403] tty tty1: ldisc open failed (-12), clearing slot 0 [ 805.458606][T10404] tty tty1: ldisc open failed (-12), clearing slot 0 [ 805.648604][ T4271] Bluetooth: hci5: command 0x1003 tx timeout [ 805.656529][ T8581] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 805.806538][T10414] tmpfs: Unknown parameter 'usrquota' [ 806.283481][T10429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 807.003525][ T26] audit: type=1400 audit(1753173164.982:62): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=10439 comm="syz.0.1361" [ 807.248411][ T8581] Bluetooth: hci1: command 0x0419 tx timeout [ 808.771232][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.777603][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.126956][T10356] chnl_net:caif_netlink_parms(): no params data found [ 809.464124][T10455] rdma_rxe: rxe_register_device failed with error -23 [ 811.082562][T10455] rdma_rxe: failed to add geneve1 [ 811.499276][T10452] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 811.505839][T10452] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 811.533590][T10454] vhci_hcd: connection closed [ 811.535033][T10452] vhci_hcd vhci_hcd.0: Device attached [ 811.712670][ T4355] vhci_hcd: stop threads [ 811.717146][ T4355] vhci_hcd: release socket [ 812.506685][ T4257] usb 41-1: new high-speed USB device number 10 using vhci_hcd [ 812.518045][ T4355] vhci_hcd: disconnect device [ 813.851850][T10356] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.920021][T10356] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.979664][T10356] device bridge_slave_0 entered promiscuous mode [ 814.000458][ T4601] device hsr_slave_0 left promiscuous mode [ 814.044162][ T4601] device hsr_slave_1 left promiscuous mode [ 814.068925][ T4601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.085056][T10484] tmpfs: Unknown parameter 'usrquota' [ 814.089472][ T4601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.117386][ T4601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.130698][ T4601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.169718][ T4601] device bridge_slave_1 left promiscuous mode [ 814.176032][ T4601] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.189434][ T4601] device bridge_slave_0 left promiscuous mode [ 814.195901][ T4601] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.237024][ T4601] device veth1_macvtap left promiscuous mode [ 814.349929][ T4601] device veth0_macvtap left promiscuous mode [ 814.366094][ T4601] device veth1_vlan left promiscuous mode [ 817.467865][T10487] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 817.474437][T10487] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 817.482343][T10487] vhci_hcd vhci_hcd.0: Device attached [ 817.488006][T10488] vhci_hcd: connection closed [ 817.491441][ T41] vhci_hcd: stop threads [ 817.569590][ T4601] device veth0_vlan left promiscuous mode [ 817.647892][ T41] vhci_hcd: release socket [ 817.658459][ T4257] vhci_hcd: vhci_device speed not set [ 817.700419][ T41] vhci_hcd: disconnect device [ 818.315158][T10508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 818.460591][ T26] audit: type=1400 audit(1753173176.442:63): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=10505 comm="syz.3.1373" [ 820.800723][T10520] 9pnet: Could not find request transport: fd0x0000000000000003 [ 821.850153][T10533] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 821.856758][T10533] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 821.940866][T10533] vhci_hcd vhci_hcd.0: Device attached [ 822.388555][ T22] usb 41-1: new high-speed USB device number 11 using vhci_hcd [ 822.649494][T10536] vhci_hcd: connection closed [ 822.734475][ T4402] vhci_hcd: stop threads [ 823.704609][ T4402] vhci_hcd: release socket [ 824.046309][ T4402] vhci_hcd: disconnect device [ 824.401389][T10550] loop6: detected capacity change from 0 to 1024 [ 824.468874][T10550] EXT4-fs: Ignoring removed bh option [ 824.521421][T10550] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 824.809044][T10550] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 825.760921][T10550] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3841: comm syz.6.1383: Allocating blocks 497-513 which overlap fs metadata [ 825.844758][T10550] EXT4-fs (loop6): Remounting filesystem read-only [ 826.044308][T10565] 9pnet: Could not find request transport: fd0x0000000000000003 [ 826.082960][ T5842] EXT4-fs (loop6): unmounting filesystem. [ 826.327973][T10575] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 826.334551][T10575] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 826.770278][T10579] blktrace: Concurrent blktraces are not allowed on sg0 [ 827.223686][T10575] vhci_hcd vhci_hcd.0: Device attached [ 827.438417][ T4320] usb 39-1: new high-speed USB device number 10 using vhci_hcd [ 827.506528][T10577] vhci_hcd: connection closed [ 827.612628][ T4402] vhci_hcd: stop threads [ 828.057371][ T4402] vhci_hcd: release socket [ 828.077672][ T4402] vhci_hcd: disconnect device [ 828.079421][ T4601] team0 (unregistering): Port device team_slave_1 removed [ 828.146855][ T4601] team0 (unregistering): Port device team_slave_0 removed [ 828.309774][ T4601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.480970][ T4601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.780293][ T22] vhci_hcd: vhci_device speed not set [ 830.915423][T10608] 9pnet_fd: Insufficient options for proto=fd [ 832.035551][T10619] tmpfs: Unknown parameter 'usrquota' [ 833.024502][T10621] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 833.031084][T10621] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 833.039026][T10621] vhci_hcd vhci_hcd.0: Device attached [ 833.184998][ T4320] vhci_hcd: vhci_device speed not set [ 833.216046][T10622] vhci_hcd: connection closed [ 833.216951][ T46] vhci_hcd: stop threads [ 833.264353][ T46] vhci_hcd: release socket [ 833.337294][ T46] vhci_hcd: disconnect device [ 833.358854][ T22] usb 45-1: new high-speed USB device number 3 using vhci_hcd [ 833.831071][ T4601] bond0 (unregistering): Released all slaves [ 834.867338][T10356] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.908681][T10356] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.930402][T10356] device bridge_slave_1 entered promiscuous mode [ 835.911476][T10649] Bluetooth: hci5: Frame reassembly failed (-84) [ 835.989889][T10573] lo speed is unknown, defaulting to 1000 [ 835.990608][T10573] geneve1 speed is unknown, defaulting to 1000 [ 836.271672][T10356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.274136][T10356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.537859][T10356] team0: Port device team_slave_0 added [ 837.279042][T10356] team0: Port device team_slave_1 added [ 837.970132][ T4271] Bluetooth: hci5: command 0x1003 tx timeout [ 837.970201][ T8581] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 838.528478][ T22] vhci_hcd: vhci_device speed not set [ 838.589163][T10356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.596178][T10356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.637085][T10676] tmpfs: Unknown parameter 'usrquota' [ 838.678540][T10356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.870493][T10356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.899274][T10356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.006949][T10356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.208627][ T4257] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 839.223796][T10356] device hsr_slave_0 entered promiscuous mode [ 839.260024][T10356] device hsr_slave_1 entered promiscuous mode [ 839.284700][T10356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 839.314044][T10356] Cannot create hsr debugfs directory [ 839.428594][ T4257] usb 5-1: Using ep0 maxpacket: 32 [ 839.442112][ T4257] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 839.479970][ T4257] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 839.519512][ T4257] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 839.550111][ T4257] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 839.598368][ T4257] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 839.638403][ T4257] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 839.694704][ T4257] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 839.737448][ T4257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.845030][ T4257] usb 5-1: config 0 descriptor?? [ 840.028020][T10679] loop0: detected capacity change from 0 to 32768 [ 840.822753][ T4257] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 840.915909][T10679] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 840.946716][T10679] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 841.058961][T10356] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 841.069370][T10679] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 841.182779][ T4257] usb 5-1: USB disconnect, device number 11 [ 841.204693][T10679] BTRFS info (device loop0): use zstd compression, level 3 [ 841.232182][ T4257] usblp0: removed [ 841.248387][T10679] BTRFS info (device loop0): using free space tree [ 841.292703][T10356] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 841.355846][T10356] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 841.424605][T10356] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 842.408577][T10679] BTRFS error (device loop0): open_ctree failed: -12 [ 843.057213][T10734] blktrace: Concurrent blktraces are not allowed on sg0 [ 843.235412][T10734] lo speed is unknown, defaulting to 1000 [ 843.269718][T10734] geneve1 speed is unknown, defaulting to 1000 [ 843.535368][T10356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.868247][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 844.246056][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 844.266460][T10356] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.296012][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 844.296796][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 844.297350][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.297476][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.308463][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 844.367186][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 844.367996][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 844.370135][ T4419] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.370213][ T4419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.418946][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 844.423236][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 844.499665][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 844.501009][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 844.501680][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 844.502394][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 844.643467][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 844.690753][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 844.691391][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 844.694841][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 844.695429][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 844.697943][T10356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 846.064848][T10767] fuse: Unknown parameter '00000000000000000000003' [ 846.148487][ T22] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 846.456320][ T22] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 846.630279][ T22] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 846.857229][ T22] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 847.166518][ T22] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 847.175950][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.265609][T10762] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 848.109863][ T41] Bluetooth: hci5: Frame reassembly failed (-84) [ 848.126548][T10775] Bluetooth: hci5: Frame reassembly failed (-84) [ 848.190317][T10790] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1428'. [ 848.368881][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 848.376679][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 848.451162][T10356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 850.128670][ T4271] Bluetooth: hci5: command 0x1003 tx timeout [ 850.137294][ T8581] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 850.779133][T10823] blktrace: Concurrent blktraces are not allowed on sg0 [ 850.911702][T10823] lo speed is unknown, defaulting to 1000 [ 850.926199][T10823] geneve1 speed is unknown, defaulting to 1000 [ 851.635690][ T129] usb 7-1: USB disconnect, device number 8 [ 851.673881][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 851.736211][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 852.715775][T10356] device veth0_vlan entered promiscuous mode [ 852.757630][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 852.780513][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 852.829719][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 852.848110][ T2901] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 852.964328][T10836] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 852.970928][T10836] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 853.017951][T10836] vhci_hcd vhci_hcd.0: Device attached [ 853.508416][ T22] usb 45-1: new high-speed USB device number 4 using vhci_hcd [ 853.783898][T10838] vhci_hcd: connection closed [ 853.785065][ T9] vhci_hcd: stop threads [ 856.330395][ T9] vhci_hcd: release socket [ 856.334956][ T9] vhci_hcd: disconnect device [ 857.369104][T10853] loop0: detected capacity change from 0 to 1024 [ 857.376470][T10853] EXT4-fs: Ignoring removed bh option [ 857.468491][T10853] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 857.652429][T10853] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 858.808807][ T8581] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 858.821695][ T8581] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 858.845994][ T8581] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 858.849852][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 858.895796][ T8581] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 858.906525][ T8581] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 858.916770][ T8581] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 859.137800][T10872] lo speed is unknown, defaulting to 1000 [ 859.213505][T10872] geneve1 speed is unknown, defaulting to 1000 [ 859.828503][ T27] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 860.022690][ T27] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 860.048784][ T22] vhci_hcd: vhci_device speed not set [ 860.203461][ T27] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 860.515767][ T27] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 860.731729][ T27] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 860.755313][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.786056][T10894] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 860.895231][T10897] loop4: detected capacity change from 0 to 32768 [ 860.921986][T10897] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1453 (10897) [ 861.008688][ T8581] Bluetooth: hci1: command 0x0409 tx timeout [ 861.024941][T10897] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 861.057272][T10897] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 861.066532][T10897] BTRFS info (device loop4): setting nodatacow, compression disabled [ 861.080605][T10897] BTRFS info (device loop4): max_inline at 0 [ 861.086669][T10897] BTRFS info (device loop4): enabling disk space caching [ 861.098110][T10897] BTRFS info (device loop4): turning off barriers [ 861.274145][T10897] BTRFS info (device loop4): turning on flush-on-commit [ 861.302857][T10897] BTRFS info (device loop4): doing ref verification [ 861.348149][T10897] BTRFS info (device loop4): force clearing of disk cache [ 861.633680][T10897] BTRFS info (device loop4): enabling ssd optimizations [ 861.988981][T10897] BTRFS info (device loop4): max_inline at 4096 [ 862.011611][T10897] BTRFS info (device loop4): disk space caching is enabled [ 862.074403][T10914] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1452'. [ 862.127051][ T4327] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 862.241180][T10872] chnl_net:caif_netlink_parms(): no params data found [ 862.315460][T10897] BTRFS info (device loop4): rebuilding free space tree [ 862.338281][ T4327] usb 1-1: Using ep0 maxpacket: 8 [ 862.345230][ T4327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 862.368691][ T4327] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 862.388171][ T4327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.416183][ T4327] usb 1-1: config 0 descriptor?? [ 862.707254][ T4327] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 863.088672][ T8581] Bluetooth: hci1: command 0x041b tx timeout [ 863.113776][T10897] BTRFS info (device loop4): disabling free space tree [ 863.140500][T10897] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 863.152899][T10897] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 863.227441][ T9843] usb 7-1: USB disconnect, device number 9 [ 863.336539][T10872] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.388455][T10872] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.410460][T10872] device bridge_slave_0 entered promiscuous mode [ 863.457790][ T4280] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 863.571228][T10872] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.599949][T10872] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.658280][T10872] device bridge_slave_1 entered promiscuous mode [ 863.970706][T10960] blktrace: Concurrent blktraces are not allowed on sg0 [ 864.446379][ T4388] usb 1-1: USB disconnect, device number 3 [ 865.010986][T10960] lo speed is unknown, defaulting to 1000 [ 865.239150][ T8581] Bluetooth: hci1: command 0x040f tx timeout [ 865.307127][T10851] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop4 scanned by udevd (10851) [ 865.320181][T10960] geneve1 speed is unknown, defaulting to 1000 [ 865.330979][T10872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.430401][T10872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.655931][T10975] block nbd0: shutting down sockets [ 867.229256][T10872] team0: Port device team_slave_0 added [ 867.248431][ T4271] Bluetooth: hci1: command 0x0419 tx timeout [ 867.317510][T10872] team0: Port device team_slave_1 added [ 867.478505][T10872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.659393][T10872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.685317][ C1] vkms_vblank_simulate: vblank timer overrun [ 868.758684][T10872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.800933][T10872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.856866][T10872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 868.984966][T10872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.045814][ T46] device hsr_slave_0 left promiscuous mode [ 869.062090][ T46] device hsr_slave_1 left promiscuous mode [ 869.094573][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.119190][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.188428][ T46] device bridge_slave_1 left promiscuous mode [ 869.194663][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.274781][ T46] device bridge_slave_0 left promiscuous mode [ 869.308591][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.514218][ T46] device veth0_vlan left promiscuous mode [ 870.212549][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.219010][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.893910][T11019] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1469'. [ 871.428703][T10969] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 871.648772][T10969] usb 5-1: Using ep0 maxpacket: 8 [ 871.665142][T10969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 871.696722][T10969] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 871.726305][T10969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.741380][T10969] usb 5-1: config 0 descriptor?? [ 871.833953][ T46] team0 (unregistering): Port device team_slave_1 removed [ 871.967607][T10969] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 871.987429][ T46] team0 (unregistering): Port device team_slave_0 removed [ 872.534890][T10969] usb 5-1: USB disconnect, device number 12 [ 872.768523][ T4271] Bluetooth: hci5: command 0x1003 tx timeout [ 872.768690][ T8581] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 872.911454][T11038] tmpfs: Unknown parameter 'usrquota' [ 874.597052][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.047427][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.668998][T11044] block nbd4: shutting down sockets [ 877.246915][T11046] loop0: detected capacity change from 0 to 32768 [ 877.292543][T11046] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1478 (11046) [ 877.311210][T11046] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 877.355814][T11046] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 877.386584][T11046] BTRFS info (device loop0): using free space tree [ 877.420735][T11060] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1483'. [ 877.791490][T11046] BTRFS info (device loop0): enabling ssd optimizations [ 878.690436][ T4266] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 879.215168][T11098] block nbd4: shutting down sockets [ 879.496586][ T4271] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 879.508163][ T4271] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 879.520050][ T4271] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 879.536460][ T4271] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 879.544519][ T4271] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 879.553253][ T4271] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 879.727616][ T46] bond0 (unregistering): Released all slaves [ 879.988871][T10966] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 880.051736][T10872] device hsr_slave_0 entered promiscuous mode [ 880.071546][T10872] device hsr_slave_1 entered promiscuous mode [ 880.129545][T10872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 880.137218][T10872] Cannot create hsr debugfs directory [ 880.153584][T11103] lo speed is unknown, defaulting to 1000 [ 880.177381][T11103] geneve1 speed is unknown, defaulting to 1000 [ 880.188487][T10966] usb 1-1: Using ep0 maxpacket: 8 [ 880.195421][T10966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 880.291792][T10966] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 880.337138][T10966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.407614][T10966] usb 1-1: config 0 descriptor?? [ 880.647293][T10966] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 881.118750][T10958] usb 1-1: USB disconnect, device number 4 [ 881.648546][ T4271] Bluetooth: hci5: command 0x0409 tx timeout [ 882.998864][T11103] chnl_net:caif_netlink_parms(): no params data found [ 883.728537][ T4271] Bluetooth: hci5: command 0x041b tx timeout [ 884.010391][T10872] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 884.100467][T10872] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 884.225961][T10872] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 884.263670][T10872] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 884.374721][ T56] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.569355][T11103] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.585762][T11103] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.609827][T11103] device bridge_slave_0 entered promiscuous mode [ 884.893922][ T56] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.736742][T11103] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.744383][T11103] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.753192][T11103] device bridge_slave_1 entered promiscuous mode [ 885.810915][ T4271] Bluetooth: hci5: command 0x040f tx timeout [ 885.892246][T11148] loop4: detected capacity change from 0 to 32768 [ 885.952492][ T56] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.967613][T11148] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 886.007707][T11148] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 886.058852][T11148] BTRFS info (device loop4): using free space tree [ 886.210252][ T56] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.291361][T11103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.336487][T11103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.351866][T11148] BTRFS info (device loop4): enabling ssd optimizations [ 886.585230][T11103] team0: Port device team_slave_0 added [ 886.660770][T10872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.692825][T11103] team0: Port device team_slave_1 added [ 886.728929][T11186] BTRFS info (device loop4): balance: start -s [ 886.804400][T11186] BTRFS info (device loop4): left=0, need=98304, flags=2 [ 886.818252][T11186] BTRFS info (device loop4): space_info SYSTEM has 0 free, is not full [ 886.827680][T11186] BTRFS info (device loop4): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 886.841406][T11186] BTRFS info (device loop4): global_block_rsv: size 1441792 reserved 1441792 [ 886.851102][T11186] BTRFS info (device loop4): trans_block_rsv: size 0 reserved 0 [ 886.858853][T11186] BTRFS info (device loop4): chunk_block_rsv: size 0 reserved 0 [ 886.866560][T11186] BTRFS info (device loop4): delayed_block_rsv: size 0 reserved 0 [ 886.874492][T11186] BTRFS info (device loop4): delayed_refs_rsv: size 0 reserved 0 [ 886.970970][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 886.991995][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 886.995031][T11186] BTRFS info (device loop4): relocating block group 1048576 flags system [ 887.022125][T10872] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.043398][T11186] BTRFS info (device loop4): balance: canceled [ 887.046325][T11166] loop3: detected capacity change from 0 to 32768 [ 887.060806][T11103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.087934][T11166] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1499 (11166) [ 887.095216][T11103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.135800][T11103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.160676][T11166] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 887.191664][T11103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.195487][T11166] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 887.214865][T11103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.228529][T11166] BTRFS info (device loop3): using free space tree [ 887.249259][T11103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.279025][ T4280] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 887.331810][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 887.409837][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 887.439546][ T4419] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.446761][ T4419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.518874][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 887.556687][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 887.595541][ T4419] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.602783][ T4419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 887.670994][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 887.701816][T11166] BTRFS info (device loop3): enabling ssd optimizations [ 887.713952][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 887.864079][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 887.888642][ T4271] Bluetooth: hci5: command 0x0419 tx timeout [ 887.911390][ T26] audit: type=1804 audit(1753173245.892:64): pid=11208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1499" name="/newroot/317/file0/bus" dev="loop3" ino=264 res=1 errno=0 [ 887.966316][T11103] device hsr_slave_0 entered promiscuous mode [ 887.982275][ T26] audit: type=1804 audit(1753173245.912:65): pid=11208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1499" name="/newroot/317/file0/bus" dev="loop3" ino=264 res=1 errno=0 [ 888.054384][T11103] device hsr_slave_1 entered promiscuous mode [ 888.184191][T11103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 888.254802][ T26] audit: type=1400 audit(1753173245.932:66): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=11206 comm="syz.4.1500" [ 888.296672][T11103] Cannot create hsr debugfs directory [ 888.366750][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 888.489545][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 888.593023][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 888.736808][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 888.826708][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 888.884911][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 888.972620][T10872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 889.039507][T10872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 890.887864][ T4355] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 890.901749][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 891.054781][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 891.074592][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 891.336761][T11210] syz.3.1499 (11210) used greatest stack depth: 19008 bytes left [ 891.362670][ T4275] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 895.571279][T11267] tmpfs: Unknown parameter 'usrquota' [ 895.590240][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 895.597874][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 895.774477][T10872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.823749][T11103] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 896.106904][T11103] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 896.167117][T11103] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 896.206114][T11103] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 897.682267][ T26] audit: type=1400 audit(1753173255.662:67): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=11275 comm="syz.3.1510" [ 900.051377][ T4271] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 900.822937][T11103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.110174][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 901.119244][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 901.187016][T11103] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.248816][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 901.288956][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 901.375327][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.382551][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.428236][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 901.442407][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 901.457512][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 901.559563][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.566783][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.298660][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 902.554946][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 902.611941][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 902.663303][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 902.685891][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 902.717050][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 902.768088][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 902.806861][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 902.865481][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 902.906283][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 902.935265][T11103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 902.981942][T11337] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 902.988537][T11337] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 903.008806][T11337] vhci_hcd vhci_hcd.0: Device attached [ 903.017758][T11342] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 903.030428][ T56] device hsr_slave_0 left promiscuous mode [ 903.057578][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.074778][T11337] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 903.085483][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.093874][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.104304][T11337] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 903.113660][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.122459][T11337] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 903.132805][T11337] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 903.155432][ T56] device bridge_slave_1 left promiscuous mode [ 903.188663][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.197506][ T56] device bridge_slave_0 left promiscuous mode [ 903.208574][ T4388] vhci_hcd: vhci_device speed not set [ 903.228632][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.288559][ T4388] usb 33-1: new full-speed USB device number 7 using vhci_hcd [ 903.339971][ T56] device veth1_macvtap left promiscuous mode [ 903.366420][ T56] device veth0_macvtap left promiscuous mode [ 903.383111][ T56] device veth1_vlan left promiscuous mode [ 903.398507][ T56] device veth0_vlan left promiscuous mode [ 904.276899][T11350] loop3: detected capacity change from 0 to 32768 [ 904.376466][T11347] loop4: detected capacity change from 0 to 40427 [ 904.387832][T11337] loop0: detected capacity change from 0 to 32768 [ 904.432243][T11347] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 904.446269][T11347] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 904.455891][T11347] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 904.483769][T11337] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 904.503471][T11337] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 904.524327][T11350] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 904.597756][T11337] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 904.692255][ T4349] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 904.710022][ T4349] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 904.812262][ T4275] ocfs2: Unmounting device (7,3) on (node local) [ 904.914890][ T4271] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 904.958540][ T4349] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 248ms [ 905.059783][ T4349] gfs2: fsid=syz:syz.0: jid=0: Done [ 905.066454][T11337] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 906.278428][ T56] team0 (unregistering): Port device team_slave_1 removed [ 906.438137][ T56] team0 (unregistering): Port device team_slave_0 removed [ 906.559753][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 906.669132][T11381] loop4: detected capacity change from 0 to 128 [ 906.706086][T11381] befs: (loop4): No write support. Marking filesystem read-only [ 906.753449][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 906.756623][T11381] befs: (loop4): invalid magic header [ 906.847832][T11338] vhci_hcd: connection reset by peer [ 906.861318][ T4355] vhci_hcd: stop threads [ 906.866434][ T4355] vhci_hcd: release socket [ 906.898721][ T4355] vhci_hcd: disconnect device [ 908.665955][ T4388] vhci_hcd: vhci_device speed not set [ 908.899018][ T56] bond0 (unregistering): Released all slaves [ 909.085004][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 909.261101][T11379] device macvtap0 entered promiscuous mode [ 909.336012][T11379] device macvtap0 left promiscuous mode [ 909.549342][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 909.614369][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 909.920944][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 909.949488][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 909.982622][T10872] device veth0_vlan entered promiscuous mode [ 910.273150][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 910.310176][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 910.393079][T10872] device veth1_vlan entered promiscuous mode [ 910.463957][T11403] loop4: detected capacity change from 0 to 64 [ 910.645136][T10872] device veth0_macvtap entered promiscuous mode [ 910.689916][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 910.719787][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 911.225029][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 911.249380][T10872] device veth1_macvtap entered promiscuous mode [ 911.385446][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 911.886238][T11408] device ipvlan6 entered promiscuous mode [ 911.930032][T10872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 911.983284][T10872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 911.994933][T10872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 912.005295][T10872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 912.015959][T10872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 912.027555][T10872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 912.050043][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 912.099360][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 912.121805][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 912.140718][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 912.156710][T10872] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.166938][T10872] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.186076][T10872] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.241188][T10872] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 912.344573][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 912.366551][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 912.444167][T11103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 912.646242][ T4963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.673028][ T4963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.727820][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 912.750597][ T4477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.796804][ T4477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.834060][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 913.714393][T11450] netlink: 'syz.4.1537': attribute type 11 has an invalid length. [ 914.745389][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 914.769271][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 914.832813][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 914.852252][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 914.903789][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 914.929595][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 915.099810][T11103] device veth0_vlan entered promiscuous mode [ 915.106954][ T8581] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 915.118022][ T8581] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 915.129899][ T8581] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 915.139271][ T8581] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 915.147307][ T8581] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 915.154843][ T8581] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 915.162060][T11198] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 915.184234][T11103] device veth1_vlan entered promiscuous mode [ 915.210962][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 915.229838][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 915.255948][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 915.284396][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 915.327909][T11103] device veth0_macvtap entered promiscuous mode [ 915.348401][ T4388] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 915.390947][T11198] usb 5-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x0, skipping [ 915.425763][T11198] usb 5-1: config 0 interface 0 has no altsetting 0 [ 915.463612][T11198] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 915.482937][T11198] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 915.495404][ T4402] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.498641][T11198] usb 5-1: Product: syz [ 915.520863][T11198] usb 5-1: Manufacturer: syz [ 915.525541][T11198] usb 5-1: SerialNumber: syz [ 915.538600][ T4388] usb 1-1: Using ep0 maxpacket: 8 [ 915.554535][ T4388] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 915.556888][T11198] usb 5-1: config 0 descriptor?? [ 915.579475][ T4388] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 915.612811][ T4388] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.623643][T11198] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 915.626204][T11459] loop3: detected capacity change from 0 to 32768 [ 915.656079][T11103] device veth1_macvtap entered promiscuous mode [ 915.665343][ T4388] usb 1-1: config 0 descriptor?? [ 915.718038][T11466] lo speed is unknown, defaulting to 1000 [ 915.749116][T11459] JBD2: Ignoring recovery information on journal [ 915.791181][T10851] udevd[10851]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 915.810866][ T4402] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.845722][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 915.874784][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 915.880048][T11459] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 915.903671][ T4388] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 915.962645][T11466] geneve1 speed is unknown, defaulting to 1000 [ 915.972558][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.004209][ T7854] usb 5-1: USB disconnect, device number 13 [ 916.031399][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.061847][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 916.092920][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.125464][T11103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 916.228223][ T4402] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.263244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 916.272817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 916.295054][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.333471][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.358426][T11103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 916.388493][T11103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 916.400334][T11198] usb 1-1: USB disconnect, device number 5 [ 916.423949][T11103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 916.479383][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 916.499093][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 916.610257][ T4402] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.632681][T11103] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.652344][T11103] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.668355][T11103] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.684675][T11103] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.065412][ T26] audit: type=1800 audit(1753173275.042:68): pid=11459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1539" name="file1" dev="loop3" ino=17059 res=0 errno=0 [ 917.086153][ C0] vkms_vblank_simulate: vblank timer overrun [ 917.325432][ T8581] Bluetooth: hci1: command 0x0409 tx timeout [ 917.387406][ T4355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.518568][ T4355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.649057][T11499] block nbd0: shutting down sockets [ 917.689358][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 917.698207][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 917.710949][ T4275] ocfs2: Unmounting device (7,3) on (node local) [ 917.748529][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.852556][T11466] chnl_net:caif_netlink_parms(): no params data found [ 917.884789][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 918.471815][T11508] ================================================================================ [ 918.529715][T11466] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.536882][T11466] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.575155][T11508] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/das16m1.c:525:9 [ 918.585105][T11466] device bridge_slave_0 entered promiscuous mode [ 918.595454][T11508] shift exponent 1028 is too large for 32-bit type 'int' [ 918.606673][T11466] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.617571][T11508] CPU: 1 PID: 11508 Comm: syz.3.1544 Not tainted 6.1.146-syzkaller #0 [ 918.625767][T11508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 918.635896][T11508] Call Trace: [ 918.639197][T11508] [ 918.642131][T11508] dump_stack_lvl+0x168/0x22e [ 918.646823][T11508] ? show_regs_print_info+0x12/0x12 [ 918.652043][T11508] ? load_image+0x3b0/0x3b0 [ 918.656566][T11508] ? __lock_acquire+0x7c50/0x7c50 [ 918.661604][T11508] ? do_raw_write_lock+0x119/0x250 [ 918.666732][T11508] ubsan_epilogue+0xa/0x30 [ 918.671172][T11508] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 918.677614][T11508] ? __comedi_request_region+0x70/0x130 [ 918.683176][T11508] das16m1_attach+0x8c9/0xb00 [ 918.687871][T11508] comedi_device_attach+0x515/0x650 [ 918.693093][T11508] comedi_unlocked_ioctl+0x5ec/0xe90 [ 918.698407][T11508] ? tomoyo_path_number_perm+0x4ae/0x600 [ 918.704079][T11508] ? comedi_poll+0x8b0/0x8b0 [ 918.708740][T11508] ? __fget_files+0x28/0x4d0 [ 918.713354][T11508] ? bpf_lsm_file_ioctl+0x5/0x10 [ 918.718318][T11508] ? security_file_ioctl+0x7c/0xa0 [ 918.723492][T11508] ? comedi_poll+0x8b0/0x8b0 [ 918.728114][T11508] __se_sys_ioctl+0xfa/0x170 [ 918.732727][T11508] do_syscall_64+0x4c/0xa0 [ 918.737147][T11508] ? clear_bhb_loop+0x60/0xb0 [ 918.741834][T11508] ? clear_bhb_loop+0x60/0xb0 [ 918.746521][T11508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 918.752437][T11508] RIP: 0033:0x7f24e498e9a9 [ 918.756872][T11508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.776505][T11508] RSP: 002b:00007f24e58ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 918.784958][T11508] RAX: ffffffffffffffda RBX: 00007f24e4bb5fa0 RCX: 00007f24e498e9a9 [ 918.792951][T11508] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003 [ 918.800942][T11508] RBP: 00007f24e4a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 918.808925][T11508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 918.816906][T11508] R13: 0000000000000000 R14: 00007f24e4bb5fa0 R15: 00007ffddcc1a818 [ 918.824902][T11508] [ 918.846611][T11466] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.877041][T11466] device bridge_slave_1 entered promiscuous mode [ 919.140500][T11466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.239838][T11466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.372372][T11466] team0: Port device team_slave_0 added [ 919.409470][ T8581] Bluetooth: hci1: command 0x041b tx timeout [ 919.429249][T11508] ================================================================================ [ 919.439385][T11508] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 919.446623][T11508] CPU: 0 PID: 11508 Comm: syz.3.1544 Not tainted 6.1.146-syzkaller #0 [ 919.454809][T11508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 919.464898][T11508] Call Trace: [ 919.468187][T11508] [ 919.471127][T11508] dump_stack_lvl+0x168/0x22e [ 919.475818][T11508] ? memcpy+0x3c/0x60 [ 919.479824][T11508] ? show_regs_print_info+0x12/0x12 [ 919.485037][T11508] ? load_image+0x3b0/0x3b0 [ 919.489570][T11508] panic+0x2c9/0x710 [ 919.493482][T11508] ? bpf_jit_dump+0xd0/0xd0 [ 919.498007][T11508] check_panic_on_warn+0x80/0xa0 [ 919.502956][T11508] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 919.509403][T11508] ? __comedi_request_region+0x70/0x130 [ 919.514965][T11508] das16m1_attach+0x8c9/0xb00 [ 919.519658][T11508] comedi_device_attach+0x515/0x650 [ 919.524877][T11508] comedi_unlocked_ioctl+0x5ec/0xe90 [ 919.530175][T11508] ? tomoyo_path_number_perm+0x4ae/0x600 [ 919.535817][T11508] ? comedi_poll+0x8b0/0x8b0 [ 919.540453][T11508] ? __fget_files+0x28/0x4d0 [ 919.545064][T11508] ? bpf_lsm_file_ioctl+0x5/0x10 [ 919.550020][T11508] ? security_file_ioctl+0x7c/0xa0 [ 919.555143][T11508] ? comedi_poll+0x8b0/0x8b0 [ 919.559744][T11508] __se_sys_ioctl+0xfa/0x170 [ 919.564346][T11508] do_syscall_64+0x4c/0xa0 [ 919.568775][T11508] ? clear_bhb_loop+0x60/0xb0 [ 919.573482][T11508] ? clear_bhb_loop+0x60/0xb0 [ 919.578188][T11508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 919.584104][T11508] RIP: 0033:0x7f24e498e9a9 [ 919.588527][T11508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 919.608145][T11508] RSP: 002b:00007f24e58ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 919.616570][T11508] RAX: ffffffffffffffda RBX: 00007f24e4bb5fa0 RCX: 00007f24e498e9a9 [ 919.624552][T11508] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003 [ 919.632530][T11508] RBP: 00007f24e4a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 919.640507][T11508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 919.648484][T11508] R13: 0000000000000000 R14: 00007f24e4bb5fa0 R15: 00007ffddcc1a818 [ 919.656473][T11508] [ 919.659922][T11508] Kernel Offset: disabled [ 919.664358][T11508] Rebooting in 86400 seconds..