last executing test programs: 27m8.367060485s ago: executing program 32 (id=417): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82187202, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000000) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8006, 0x145}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r2, 0x6e2, 0x600, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 25m5.51411156s ago: executing program 33 (id=621): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, 0x0, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000001f) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000024) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xb8, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) 24m16.418878113s ago: executing program 34 (id=695): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x40) r3 = eventfd(0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) r5 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r3) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) 23m32.518892113s ago: executing program 35 (id=768): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) close(0x4) 22m22.923218037s ago: executing program 36 (id=858): openat$fb0(0xffffffffffffff9c, 0x0, 0x2a0d01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) r3 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858", 0x31, 0x2400c0c7, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 20m19.926740274s ago: executing program 37 (id=1022): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="b70b2cbd7000fcdbdf250f0000000e0002"], 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x2000c88c) setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) 19m14.750805988s ago: executing program 38 (id=1135): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x2040400) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x118d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0xc2}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) epoll_create1(0x80000) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 19m12.238191707s ago: executing program 4 (id=1140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r3, &(0x7f0000000080), 0x0}, 0x20) 19m9.950601016s ago: executing program 4 (id=1142): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x4c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) 19m8.647967173s ago: executing program 4 (id=1144): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000600)={0x0, 0xb}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x8000000000001de, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ffff00000000000000040000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200007d18c55932c62572030000008500000006000000554a0800"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x6e, &(0x7f0000000580)=""/110, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x2, 0xffffff80, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x3, 0x1, 0xc, 0x8}, {0x3, 0x1, 0x2, 0xb}, {0x5, 0x4, 0x1, 0x1}], 0x10, 0x1}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000380)='hpfs\x00', 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x42060200) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x457}, &(0x7f0000000340)=0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 19m5.765198455s ago: executing program 4 (id=1146): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x2, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4, 0x0, 0x6}, 0x10) r5 = socket(0x1e, 0x4, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}}, 0x20}}, 0x0) lseek(r0, 0x10, 0x3) 19m3.338347954s ago: executing program 4 (id=1148): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x2, 0x4, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0xfffc, 0x0, @local, 0x3}}, @sadb_sa={0x2, 0x1, 0x0, 0x3, 0x0, 0xe9, 0x0, 0x20000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x70}}, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000009c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x29, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x1, 0xf5, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x8, 0x8, 0x9}}}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x141, 0x0, 0xad, 0x0, 0x20, 0x40}, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="0531050000"], 0x1, [{0x6f, &(0x7f0000000900)=ANY=[@ANYBLOB="6f03952bdc0d551aabb8ea7b54eacaab1cfdff3d746aeb64fac34ce90e4c691dfd879566af79d18c315da1b16657156d2916e97c07d325f9f09ba565387d211edc093782e20b365aa0c0a460d64d042a55bd5cc0aa97a4627632318ae1d30fb5d626b6f1f2ca1885b39b9fd2da4c40"]}]}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="01a6"]) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000440)={0xc, &(0x7f0000000340)={0x20, 0x5, 0xa6, {0xa6, 0xf, "0883109d3da9872dfcee4af7c4af070c90caedfbe86d77055640d9f0d8b6c6166d5a535c889dd49d5e7fe514b094f0a9bc8fa4515b8313c9097bcbe2dc256ed3acdb2a7426b1f7a82007ebce009887850106805cb4f5c817a6ccf458fba0dade4e12179e0ea6d5f9ef58f0b25770ad2cf3f621a318d4d636d2de06997751c6591d2b49876622b66e6853d0664ef1e24dce929aebc2306914735a40099ce09880e95b36b5"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x24, &(0x7f0000000480)={0x40, 0x10, 0x30, "ca67af35bf6918bfa08ae29e61327a759169cd21a4d8cecd6c5d381c21a8be791769927f536dd58d0cdcd732d24c71dc"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x1, 0x200, 0x7fffffff, 0x1, 0x6, 0x8, 0x8000, 0xd46f, 0xd9, 0x81, 0x401, 0x799f}}, &(0x7f0000000580)={0x20, 0x85, 0x4, 0xe}, &(0x7f00000005c0)={0x20, 0x83, 0x2}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x404}, &(0x7f0000000640)={0x20, 0x89, 0x2}}) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x28802, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) r6 = socket$inet(0x2, 0x2, 0x307fea7b) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xe, &(0x7f0000000280)=ANY=[@ANYRES32=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x1}, 0x10}, 0x94) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000007c0)) r9 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) poll(&(0x7f00000002c0)=[{r6, 0x8}, {r0, 0x80}, {r8, 0x2004}, {r9}, {0xffffffffffffffff, 0x3000}, {r4, 0x20}, {r7, 0x23}, {0xffffffffffffffff, 0x6025}, {r7, 0x80}, {r9, 0x288}], 0xa, 0xffff) remap_file_pages(&(0x7f0000686000/0x1000)=nil, 0x1000, 0x0, 0x600, 0x40) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) 18m59.060144897s ago: executing program 4 (id=1156): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000600)={0x0, 0xb}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x8000000000001de, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ffff00000000000000040000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200007d18c55932c62572030000008500000006000000554a0800"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x6e, &(0x7f0000000580)=""/110, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x2, 0xffffff80, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x3, 0x1, 0xc, 0x8}, {0x3, 0x1, 0x2, 0xb}, {0x5, 0x4, 0x1, 0x1}], 0x10, 0x1}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000380)='hpfs\x00', 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) unshare(0x42060200) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYRES32=0x0], 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 18m42.98808385s ago: executing program 39 (id=1156): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000600)={0x0, 0xb}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x8000000000001de, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ffff00000000000000040000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200007d18c55932c62572030000008500000006000000554a0800"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x6e, &(0x7f0000000580)=""/110, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x2, 0xffffff80, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x3, 0x1, 0xc, 0x8}, {0x3, 0x1, 0x2, 0xb}, {0x5, 0x4, 0x1, 0x1}], 0x10, 0x1}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000380)='hpfs\x00', 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) unshare(0x42060200) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYRES32=0x0], 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 16m50.113081121s ago: executing program 8 (id=1324): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x2]}, 0x6) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e9, &(0x7f00000004c0)="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") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90) syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 16m39.970715981s ago: executing program 8 (id=1338): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x3, 0x801) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000000c0)={0x0, r2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) fallocate(0xffffffffffffffff, 0x8, 0x2000, 0x10000) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000010091bfb36cbeaa6fc92ea0d900006688337e00"], &(0x7f0000000240), 0x400) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) sched_setscheduler(r3, 0x5, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) clock_nanosleep(0x8, 0x1, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r5, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000540)="e8691a91", 0x4}, {0x0}], 0x2, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x38}, 0x0) 16m35.924058409s ago: executing program 8 (id=1342): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x2]}, 0x6) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$sock_proto_private(r4, 0x89e9, &(0x7f00000004c0)="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") bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 16m26.044519348s ago: executing program 8 (id=1357): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@void, @void, @ipv6=@tcp={0x3, 0x6, "85f04c", 0xb4, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, @empty, {[@routing={0x2e, 0x4, 0x2, 0xff, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @remote]}, @fragment={0x3a, 0x0, 0x2, 0x0, 0x0, 0x8, 0x68}, @fragment={0x32, 0x0, 0x93, 0x1, 0x0, 0xa, 0x67}, @srh={0x33, 0xc, 0x4, 0x6, 0x0, 0x40, 0x8c69, [@dev={0xfe, 0x80, '\x00', 0x1c}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @dev={0xfe, 0x80, '\x00', 0xb}, @mcast2, @loopback]}], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x865, 0x0, 0x7fff}}}}}, 0xdc) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000400)={0x20, 0x6, 0xd, "5eb20000000000000020cb0000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16m21.777381907s ago: executing program 8 (id=1363): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0) 16m20.403420979s ago: executing program 8 (id=1367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0], 0x1, 0x19e, &(0x7f0000000440)="$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") rseq(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000002c0)='./file2\x00', 0x1800880, &(0x7f00000059c0)=ANY=[], 0x1, 0x214, &(0x7f0000000840)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r5, 0x403) fadvise64(r5, 0x0, 0x403, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50}}) 16m4.555340131s ago: executing program 40 (id=1367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0], 0x1, 0x19e, &(0x7f0000000440)="$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") rseq(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000002c0)='./file2\x00', 0x1800880, &(0x7f00000059c0)=ANY=[], 0x1, 0x214, &(0x7f0000000840)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r5, 0x403) fadvise64(r5, 0x0, 0x403, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_coalesce={0x50}}) 15m2.58901052s ago: executing program 0 (id=1470): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000600)={0x0, 0xb}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x8000000000001de, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ffff00000000000000040000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200007d18c55932c62572030000008500000006000000554a0800"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x6e, &(0x7f0000000580)=""/110, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x2, 0xffffff80, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x3, 0x1, 0xc, 0x8}, {0x3, 0x1, 0x2, 0xb}, {0x5, 0x4, 0x1, 0x1}], 0x10, 0x1}, 0x94) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000380)='hpfs\x00', 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) unshare(0x42060200) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000500)=ANY=[@ANYRES32=0x0], 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 14m59.838945536s ago: executing program 0 (id=1472): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYBLOB="23341129bfb4fcc388a80c49b4f4d96254cb9356759776b03b581050240d2d9a5cf3440e76c886f1e5c860656a3648101223fc288fc5274f0e609cfed0fc738d84eb544791dd1cb959421db9fbcb634df876aa2133fd62e245fb6b1ead07ca04772d78564af8f42015e5be557ab3bd60824768691005cbd3d295402693d934226595deeba1ff748b7dde9c617749aa38096ef667700a6b3668cb7296b024fbcf9f74e50bf0f834159f51737baac184f94dd13a9793b76946208f290637d8def94e5f56f1181da3eed500440f", @ANYRES32=0x0, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$eJzs3U1rE1scx/HfmaRteht6pw+XC3fZa0E3UutG3KRIXoS4ELWJUAwVbQV1YxVXIrp371vwLQhuFN+Arlz5AiIII+fMZJJJJzMxNDMNfj9gmMycM+d/Mg/n/AfsCMAf60rzy9uL3+w/I1VUkV5cljxJNakq6R/9W3uwf7h32Gm3MvbTDRxbyyisaY4V2t1vp9WtKaoR8e23quqD6zAdQRDsfJV0UHYgKJW7+lN40kJ0dbrttcIjy/Z0wnpHJxzHrDFddfVQy2XHAQAoVzT+e9E4X4/m754nbUbD/qkc/yfVLTuAqQsytw6M/y7LCow9vn+7Tf18z6VwdrvXyxLHaXlu6Pu8wjMrMcE0eVmli8VbvL3XaZ/fvdtpeXqmRmSg2Lr7bIWnbk9OtBspuWmGMfpu0meUS64Pc7YP2yPiX5uwxYmZD+aTuW58vVErnv9VA2MPkztS/tCRCuPfGr1H10vfllJ022g0Gl6iyIpr5L+ohUhOL2vpGYl6Z9SKkg8I/Lw4Xa3VoVph7y7k1FoLa+0sJmpt976NqLWeaMv2Jj6bR7c3beaVuWo29F3v1ByY/3s2vk1lXpn9q8ZshkOB+8XD/synN1d1+/SPjRxHulZProl/xYVRof/IvqdhyJOMbS91S5e0fPDo8Z1Kp9O+bxdupizcq8dr5p5LqWVKWPDUX6Oj/qYFhQ8ij9XqDUpFhnruRHdo7x+5he1VVkgHT82ZUMZC82OxJ1IZCwXdo1Cq/kHPLfq+kIBQNDfvCvO/gXxly0327IefMU/PnZBFewzsHDvOgGqJ+qtu6a/fyuCWRmdw4+Zc/5+VzsSrfgY5LfpRnLMhyJr6Waapz7rB838AAAAAAAAAAAAAAAAAAIBZU8R/Jyi7jwAAAAAAAAAAAAAAAAAAAAAAzLr4/b/qvf9X473/d/gvf1fCN7ycyPt/X++L9/8C0/crAAD//zZmik0=") socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0xfffffc93, &(0x7f0000000400)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) 14m58.30980373s ago: executing program 0 (id=1473): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x4, 0x36, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x62, 0x0, 0x0, 0x6}, 0x28) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000000)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x5000}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, 0x0, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000100)=0xfffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x2, 0x0) read$msr(r3, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="0100fcffffff000000004900000008007300000000000e0001006e657464657673696d0008000600000000000000657673696d300000"], 0x3c}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x4, 0x80782) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)) 14m56.714590298s ago: executing program 0 (id=1479): socket$inet(0x2, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sysfs$2(0x2, 0x19, &(0x7f0000000080)=""/101) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 14m50.106124876s ago: executing program 0 (id=1487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x721701, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xfffffffffffffe5f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) write(r2, &(0x7f00000001c0)="240000005800410f9c00f4f90085", 0xe) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x4800}, 0x5) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r7, 0xd55319eec59dfa33, 0xfffffffe, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x67}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) 14m48.114303001s ago: executing program 0 (id=1490): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x2]}, 0x6) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$sock_proto_private(r4, 0x89e9, &(0x7f00000004c0)="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") bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) syz_open_dev$dri(0x0, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 14m32.908820194s ago: executing program 41 (id=1490): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x2]}, 0x6) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$sock_proto_private(r4, 0x89e9, &(0x7f00000004c0)="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") bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) syz_open_dev$dri(0x0, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 9m33.445678675s ago: executing program 7 (id=2005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9m30.767695379s ago: executing program 7 (id=2011): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40800181}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x840) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689", 0x21}], 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x46401905ed3ee4d9}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44001) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x21c) 9m28.302339513s ago: executing program 7 (id=2014): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40800181}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x38, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x840) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689", 0x21}], 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x511, 0xfeffffff, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x64, 0x21c) 9m26.418446294s ago: executing program 7 (id=2018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x1c) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r4}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), 0x0) 9m18.251571275s ago: executing program 7 (id=2029): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$random(0xffffffffffffff9c, 0x0, 0x80100, 0x0) timer_create(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capget(0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x4009}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 9m15.622392377s ago: executing program 7 (id=2036): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x2]}, 0x6) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$sock_proto_private(r4, 0x89e9, &(0x7f00000004c0)="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") sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_open_dev$dri(0x0, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 9m0.446450716s ago: executing program 42 (id=2036): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x2]}, 0x6) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$sock_proto_private(r4, 0x89e9, &(0x7f00000004c0)="ae87349028fafb5b9258e27a47a2f87a95de6532b5e46275090a69da406e68b2ef3c49247c88e77ab5dd88728df575f3cee80ed87d04958bf3145f5a703a088c60e6723e5424cab2ac0e5b943f960e3f516d6e561b141c83147a9d3a4cc26b6b9d8b800e2f93ef0173fc6561bc998bf7507db0b8db56394a8c26fa121af9df21e95a8c590f9fb5a69f0539a4ba8c38072144c2d57c89e221fd79ef0970963a9466616cee497fe5635980c803a1d56fa3917b61bab5f9a8b90f369e228a951a82792bb5e2efcddbb39ca82e980dbe9b4d7459d0d80dee93b6e67dc04d481383a201dcad03880740d53dafc89edda17bba994296e2e507b2cc365e") sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_open_dev$dri(0x0, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m35.090970201s ago: executing program 2 (id=2672): syz_open_dev$radio(0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, 0x0, 0x0) clock_adjtime(0x0, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='i2c_result\x00', r4}, 0x10) r5 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x80001) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000380)={0x0, 0xa, 0x2, &(0x7f0000000280)={0x1d, "adab9c9a9e4547d89bef0e7390cb22260923413d6fc20230db6c829745e60b6c5c"}}) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 2m32.526137857s ago: executing program 2 (id=2676): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x2, 0x3, 0xfff, 0xf344, r1}) mlockall(0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) 2m31.160114677s ago: executing program 2 (id=2677): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0080000001, 0xffffffe7, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r5, 0x0, 0x0, 0x400001) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 2m19.727835815s ago: executing program 2 (id=2696): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x7, @loopback, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m17.567556763s ago: executing program 2 (id=2700): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x2, 0x3, 0xfff, 0xf344, r1}) mlockall(0x2) r10 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r10, 0x0) 2m15.78349828s ago: executing program 2 (id=2705): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x400001) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 2m0.019128938s ago: executing program 43 (id=2705): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x400001) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) 52.68000157s ago: executing program 3 (id=2817): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000001600), 0xfc, 0x559e, &(0x7f0000005680)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x841, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000600)="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") r5 = open(&(0x7f00000000c0)='./file2\x00', 0x66842, 0x21) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, 0x0, 0x0) truncate(0x0, 0x148452) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 49.05649802s ago: executing program 3 (id=2821): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x40}, {{@in6=@remote, 0x2000, 0x3c}, 0x2, @in6=@dev}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x0, @in=@remote, 0x3502}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x81}, 0x4000) 47.156096643s ago: executing program 3 (id=2826): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x3c, @remote, 0x4e20, 0x2, 'fo\x00', 0x38, 0x0, 0x1}, {@multicast2, 0x4e23, 0x4, 0x0, 0xb, 0x4f}}, 0x44) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) close(r0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb) unshare(0x60600) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 45.837449238s ago: executing program 5 (id=2828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x18) socket(0x10, 0x3, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socket$netlink(0x10, 0x3, 0x0) r7 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_current(r7, &(0x7f0000000500)=@hat={'permhat ', 0x0, 0x5e, ['{,!^\x00', ')\x00']}, 0x22) 45.377889881s ago: executing program 3 (id=2829): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x1a1) fcntl$setlease(r1, 0x400, 0x1) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 44.12476767s ago: executing program 5 (id=2831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) 42.842518391s ago: executing program 3 (id=2833): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x1004006, &(0x7f0000000740)={[{@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@grpid}, {@noquota}, {@quota}]}, 0x1, 0x43c, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$pppl2tp(0x18, 0x1, 0x1) close(r5) 42.638722905s ago: executing program 5 (id=2834): sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r1 = dup(0xffffffffffffffff) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES32=r1], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xe) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x40, @SEQ_NOTEON=@note=0x7}) ioprio_get$pid(0x3, 0x0) 40.570691881s ago: executing program 3 (id=2836): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000002000010000000000000000000a0020400000daba000000001400110076657468095f746f5f628ed7646765001400030076657468315f766c616e00000000000014000200fe8000000000eba81edef557bda58e05097ae02adab500000000000000000017e049b6b45ccb88fa8d07c216533a8761a15d73eae476d05fd64cc7950147ee61a27d969086ddaec593eaa7c28b85275ca028b48c606743bc819dccad3693ca1b16b03889f158ec3a82c3710347d45f83ec55597e1d298ce12c873298cc721de0f2511883867f1f197f06c717ad0825f15fcd"], 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) r5 = syz_open_dev$radio(&(0x7f0000000280), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x80, 0xfa000, 0x8}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}}}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00"/28], 0x3c}, 0x1, 0x11}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000000)) 40.018418882s ago: executing program 5 (id=2839): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) write$bt_hci(r5, &(0x7f0000000000)=ANY=[], 0x6) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) keyctl$revoke(0x3, r0) 38.789965623s ago: executing program 5 (id=2841): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ptrace$getsig(0x4202, r0, 0x6, &(0x7f0000000180)) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 36.492877471s ago: executing program 5 (id=2845): r0 = socket$inet6(0xa, 0x5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000001f) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x80000024) fcntl$notify(r5, 0x402, 0x80000032) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xb8, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) socket$inet6(0xa, 0x5, 0x0) 24.800944798s ago: executing program 44 (id=2836): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000002000010000000000000000000a0020400000daba000000001400110076657468095f746f5f628ed7646765001400030076657468315f766c616e00000000000014000200fe8000000000eba81edef557bda58e05097ae02adab500000000000000000017e049b6b45ccb88fa8d07c216533a8761a15d73eae476d05fd64cc7950147ee61a27d969086ddaec593eaa7c28b85275ca028b48c606743bc819dccad3693ca1b16b03889f158ec3a82c3710347d45f83ec55597e1d298ce12c873298cc721de0f2511883867f1f197f06c717ad0825f15fcd"], 0x58}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106}}, 0x20) r5 = syz_open_dev$radio(&(0x7f0000000280), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x80, 0xfa000, 0x8}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}}}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00"/28], 0x3c}, 0x1, 0x11}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) ioctl$BLKDISCARDZEROES(0xffffffffffffffff, 0x127c, &(0x7f0000000000)) 21.084784387s ago: executing program 45 (id=2845): r0 = socket$inet6(0xa, 0x5, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000001f) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x80000024) fcntl$notify(r5, 0x402, 0x80000032) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0xb8, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x1}, @enter_looper, @acquire, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1100}, @fda={0x66646185, 0x5, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/98, 0x62, 0x0, 0x24}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}, @register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0x2, 0x2, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/209, 0xd1, 0x1, 0x40}, @ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x0, 0x28}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}, 0x40}], 0x7, 0x0, &(0x7f0000000440)="553fc696f4b1a1"}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) socket$inet6(0xa, 0x5, 0x0) 17.955181674s ago: executing program 9 (id=2872): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x3c, @remote, 0x4e20, 0x2, 'fo\x00', 0x38, 0x0, 0x1}, {@multicast2, 0x4e23, 0x4, 0x0, 0xb, 0x4f}}, 0x44) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$kcm(0x10, 0x2, 0x4) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) unshare(0x60600) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 15.204782043s ago: executing program 9 (id=2875): sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8010) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000300000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 14.620647246s ago: executing program 1 (id=2877): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1, 0x0, 0xffff8000}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x150) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000001, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000c00)=ANY=[], 0x1, 0x0, 0x0) 14.2990389s ago: executing program 9 (id=2879): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x3c, @remote, 0x4e20, 0x2, 'fo\x00', 0x38, 0x0, 0x1}, {@multicast2, 0x4e23, 0x4, 0x0, 0xb, 0x4f}}, 0x44) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) close(r0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb) unshare(0x60600) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setxattr(0x0, &(0x7f00000000c0)=@known='security.selinux\x00', 0x0, 0x0, 0x3) 13.344301743s ago: executing program 1 (id=2880): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r2}, 0x18) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x141b82, 0x180) write$cgroup_int(r4, &(0x7f0000000040)=0x9, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xd, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.541513831s ago: executing program 9 (id=2881): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf6}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/consoles\x00', 0x0, 0x0) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x8804}, 0x2400c835) mlockall(0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0) 10.973399038s ago: executing program 1 (id=2883): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4004810) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = userfaultfd(0x80001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000498000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe3000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x5e}, 0x68) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) pipe(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffe, 0x3, 0x1000, 0x3a, 0x0, 0x0, 0x7}, 0x75) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0xc, 0x7, 0xffffffff, 0x0, "4d6b5ccb00"}) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000a80)=""/4096, 0x1000}], 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000a40)=0x42) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.446378219s ago: executing program 1 (id=2885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021000000000000", @ANYBLOB], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000e2000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') 7.396095221s ago: executing program 1 (id=2886): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x140942, 0x1) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x84, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}}) 7.253175365s ago: executing program 1 (id=2888): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x3c, @remote, 0x4e20, 0x2, 'fo\x00', 0x38, 0x0, 0x1}, {@multicast2, 0x4e23, 0x4, 0x0, 0xb, 0x4f}}, 0x44) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) close(r0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xb) unshare(0x60600) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setxattr(0x0, &(0x7f00000000c0)=@known='security.selinux\x00', 0x0, 0x0, 0x3) 6.498129644s ago: executing program 6 (id=2890): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2298, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) 5.652046956s ago: executing program 6 (id=2891): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x18) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r6 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_current(r6, &(0x7f0000000500)=@hat={'permhat ', 0x0, 0x5e, ['{,!^\x00', ')\x00']}, 0x22) 4.389834778s ago: executing program 6 (id=2892): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r4, 0x100000000000f7) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) keyctl$revoke(0x3, r0) 3.333971932s ago: executing program 6 (id=2893): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) 1.700435842s ago: executing program 9 (id=2894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x18) socket(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000040)={0x7, 0x2, {0x3, 0x1, 0x6, 0x0, 0x7b42}, 0x7}) r7 = openat$apparmor_thread_current(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_current(r7, &(0x7f0000000500)=@hat={'permhat ', 0x0, 0x5e, ['{,!^\x00', ')\x00']}, 0x22) 1.602461576s ago: executing program 6 (id=2895): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x8, 0x80000) fanotify_mark(r5, 0x105, 0x4800003a, r4, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x80001}, 0x6, 0x100, 0x2, 0x0, 0x0, 0x7, 'syz0\x00', 0x0}) 138.573976ms ago: executing program 6 (id=2896): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) setrlimit(0x9, &(0x7f0000000800)={0x5838, 0x2}) shmctl$IPC_RMID(0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f0000000840)=""/242) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 0s ago: executing program 9 (id=2897): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0x20, [0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5f1], [0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x80, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0xfff, 0x71f, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, 0x0, 0x101, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_DESTROY(r0, 0x5502) kernel console output (not intermixed with test programs): acity change from 0 to 2048 [ 1219.013083][T15269] ceph: No mds server is up or the cluster is laggy [ 1219.021629][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 1219.076817][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 1219.106618][T15270] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1220.675706][T15292] loop5: detected capacity change from 0 to 1024 [ 1222.618314][ T5928] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1222.721337][ T8882] hfsplus: b-tree write err: -5, ino 4 [ 1222.826727][ T5928] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.868697][ T5928] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1222.966487][ T5928] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1223.024348][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.060414][ T5928] usb 7-1: Product: syz [ 1223.077565][ T5928] usb 7-1: Manufacturer: syz [ 1223.092469][ T5928] usb 7-1: SerialNumber: syz [ 1223.111289][ T5928] usb 7-1: config 0 descriptor?? [ 1223.521281][T15308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1223.531470][T15308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1223.657444][ T9426] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1223.888738][ T9426] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1223.969399][ T9426] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.043253][ T9426] usb 6-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1224.077177][ T9426] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.099262][ T9426] usb 6-1: config 0 descriptor?? [ 1224.312492][T15320] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1816'. [ 1225.112769][ T9426] usbhid 6-1:0.0: can't add hid device: -71 [ 1225.113894][T13593] Bluetooth: hci3: command 0x0406 tx timeout [ 1225.152857][ T9426] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1225.307558][ T9426] usb 6-1: USB disconnect, device number 21 [ 1226.875259][T15348] loop2: detected capacity change from 0 to 1024 [ 1226.882746][T15348] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1226.902893][T15351] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1227.075228][T15348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1227.355925][ T9426] usb 7-1: USB disconnect, device number 14 [ 1228.834564][T15377] loop1: detected capacity change from 0 to 32768 [ 1229.723627][ T30] audit: type=1800 audit(1762372591.004:183): pid=15381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1825" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 1230.563600][T12904] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1231.091101][T15394] loop7: detected capacity change from 0 to 1024 [ 1232.200784][T15403] loop2: detected capacity change from 0 to 1024 [ 1232.238925][T15403] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1232.388772][T15403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1234.041492][ T8873] hfsplus: b-tree write err: -5, ino 4 [ 1234.362308][T15419] loop7: detected capacity change from 0 to 1024 [ 1234.504492][T15419] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1234.593618][T15419] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1234.677726][T12904] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1235.186429][T15432] fuse: Bad value for 'fd' [ 1236.029250][T14190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.059843][T15438] loop3: detected capacity change from 0 to 1024 [ 1236.079482][T15438] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1236.141635][ T30] audit: type=1326 audit(1762372598.004:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15439 comm="syz.5.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9cb8f6c9 code=0x7ffc0000 [ 1236.207285][T15438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1236.243317][ T977] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1236.290638][ T30] audit: type=1326 audit(1762372598.004:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15439 comm="syz.5.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9cb8f6c9 code=0x7ffc0000 [ 1236.316664][ T30] audit: type=1326 audit(1762372598.004:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15439 comm="syz.5.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f6d9cb8f6c9 code=0x7ffc0000 [ 1236.339773][ T30] audit: type=1326 audit(1762372598.004:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15439 comm="syz.5.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9cb8f6c9 code=0x7ffc0000 [ 1236.823307][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 1236.877084][ T977] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.935025][ T30] audit: type=1326 audit(1762372598.004:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15439 comm="syz.5.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d9cb8f6c9 code=0x7ffc0000 [ 1237.036814][ T977] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1237.196420][ T977] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1237.363258][ T30] audit: type=1326 audit(1762372598.004:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15439 comm="syz.5.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9cb8f6c9 code=0x7ffc0000 [ 1237.386127][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.428681][ T977] usbtmc 3-1:16.0: bulk endpoints not found [ 1237.469121][ T30] audit: type=1326 audit(1762372598.004:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15439 comm="syz.5.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d9cb8f6c9 code=0x7ffc0000 [ 1237.615492][ T30] audit: type=1326 audit(1762372598.004:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15439 comm="syz.5.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9cb8f6c9 code=0x7ffc0000 [ 1237.661795][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.730227][ T30] audit: type=1326 audit(1762372598.004:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15439 comm="syz.5.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6d9cb8f6c9 code=0x7ffc0000 [ 1237.879906][ T30] audit: type=1326 audit(1762372598.004:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15439 comm="syz.5.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9cb8f6c9 code=0x7ffc0000 [ 1238.153574][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.160029][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.311241][T15450] syz.6.1839 (15450): drop_caches: 2 [ 1238.734869][T15466] fuse: Bad value for 'fd' [ 1239.126240][ T5928] usb 3-1: USB disconnect, device number 39 [ 1245.312712][T15523] ceph: No mds server is up or the cluster is laggy [ 1245.322714][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 1245.354407][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 1245.362011][T15518] vxfs: WRONG superblock magic 00000000 at 1 [ 1245.368503][T15518] vxfs: WRONG superblock magic 00000000 at 8 [ 1245.374632][T15518] vxfs: can't find superblock. [ 1245.401519][T15518] loop7: detected capacity change from 0 to 2048 [ 1245.420538][T15518] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1247.344734][T15547] netlink: 212 bytes leftover after parsing attributes in process `syz.5.1859'. [ 1249.801819][T15569] loop2: detected capacity change from 0 to 32768 [ 1250.937417][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1250.937436][ T30] audit: type=1800 audit(1762372612.794:215): pid=15575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1862" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 1255.837454][T15619] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1256.121442][T15626] loop5: detected capacity change from 0 to 1024 [ 1256.134534][T15626] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1256.268437][T15626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1257.316398][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1876'. [ 1257.346175][T15643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1876'. [ 1260.158720][T15664] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1262.298329][T15691] loop7: detected capacity change from 0 to 1024 [ 1262.580320][T15692] loop2: detected capacity change from 0 to 1024 [ 1262.727740][T15692] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1263.054561][T15692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1263.745329][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1264.268558][T12904] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1265.559374][T11765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1270.686893][T15774] loop2: detected capacity change from 0 to 1024 [ 1270.901703][T15777] netlink: 'syz.1.1900': attribute type 5 has an invalid length. [ 1271.139282][ T30] audit: type=1326 audit(1762372633.004:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd798f6c9 code=0x7ffc0000 [ 1271.346344][ T30] audit: type=1326 audit(1762372633.004:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd798f6c9 code=0x7ffc0000 [ 1271.497328][ T30] audit: type=1326 audit(1762372633.004:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f1bd798f6c9 code=0x7ffc0000 [ 1271.591448][ T30] audit: type=1326 audit(1762372633.004:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd798f6c9 code=0x7ffc0000 [ 1271.625660][ T50] hfsplus: b-tree write err: -5, ino 4 [ 1271.696374][ T30] audit: type=1326 audit(1762372633.004:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bd798f6c9 code=0x7ffc0000 [ 1271.847459][ T30] audit: type=1326 audit(1762372633.004:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd798f6c9 code=0x7ffc0000 [ 1271.970563][ T30] audit: type=1326 audit(1762372633.004:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bd798f6c9 code=0x7ffc0000 [ 1271.992988][ C0] vkms_vblank_simulate: vblank timer overrun [ 1272.068640][ T30] audit: type=1326 audit(1762372633.004:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd798f6c9 code=0x7ffc0000 [ 1272.091125][ C0] vkms_vblank_simulate: vblank timer overrun [ 1272.357636][ T30] audit: type=1326 audit(1762372633.004:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd798f6c9 code=0x7ffc0000 [ 1272.998911][ T30] audit: type=1326 audit(1762372633.004:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15776 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1bd798f6c9 code=0x7ffc0000 [ 1273.088712][T15795] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1274.959131][T15819] loop6: detected capacity change from 0 to 1024 [ 1275.034496][T15819] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1275.306026][T15819] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1277.103438][T11733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1279.394553][T15877] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1917'. [ 1279.417749][T15877] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1917'. [ 1282.539362][T15895] syz.1.1922 (15895): drop_caches: 2 [ 1282.633067][T15888] syz.2.1921 (15888): drop_caches: 2 [ 1282.868650][T15903] loop5: detected capacity change from 0 to 1024 [ 1282.884906][T15903] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1283.045842][T15903] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1286.764131][T11765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1289.980571][T15965] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1932'. [ 1290.001493][T15965] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1932'. [ 1290.940814][T15969] loop6: detected capacity change from 0 to 1024 [ 1291.126999][T15973] loop1: detected capacity change from 0 to 1024 [ 1291.147090][T15969] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1291.838976][T15973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1291.879811][T15934] syz.2.1928 (15934): drop_caches: 2 [ 1292.015858][T15969] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1292.042616][T15973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1292.166929][T15951] syz.7.1930 (15951): drop_caches: 2 [ 1293.758965][T12062] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1294.421220][T16001] loop5: detected capacity change from 0 to 1024 [ 1294.552999][T16001] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1295.075207][T16001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1295.369424][T15997] syz.7.1940 (15997): drop_caches: 2 [ 1295.737226][T16004] syz.1.1941 (16004): drop_caches: 2 [ 1295.795106][T16004] syz.1.1941 (16004): drop_caches: 2 [ 1295.907556][T15991] syz.3.1939 (15991): drop_caches: 2 [ 1296.259069][T16019] syz.7.1944 (16019): drop_caches: 2 [ 1296.269711][T16019] syz.7.1944 (16019): drop_caches: 2 [ 1296.761407][T11765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1297.242983][T16027] syz.1.1947 (16027): drop_caches: 2 [ 1297.250760][T16027] syz.1.1947 (16027): drop_caches: 2 [ 1298.208606][T16037] loop2: detected capacity change from 0 to 1024 [ 1298.215282][T16033] syz.7.1949 (16033): drop_caches: 2 [ 1298.226238][T16037] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1298.482468][T16034] dvmrp0: entered allmulticast mode [ 1298.494135][T16034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1948'. [ 1298.696652][T16034] syz.5.1948 (16034) used greatest stack depth: 17832 bytes left [ 1298.769748][T16033] syz.7.1949 (16033): drop_caches: 2 [ 1298.876084][T16037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1299.580219][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.593360][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.024795][T16054] loop7: detected capacity change from 0 to 1024 [ 1300.058531][T12904] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.071722][T16054] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1300.172758][T16054] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1300.179650][T11733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1300.911622][T16064] loop6: detected capacity change from 0 to 1024 [ 1300.962049][T16064] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1301.506201][T16076] syz.1.1957 (16076): drop_caches: 2 [ 1301.704800][T16076] syz.1.1957 (16076): drop_caches: 2 [ 1301.749483][T16064] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1303.055785][T14190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1305.380878][T16096] syz.7.1960 (16096): drop_caches: 2 [ 1305.526091][T16096] syz.7.1960 (16096): drop_caches: 2 [ 1306.798573][T16111] loop3: detected capacity change from 0 to 1024 [ 1306.859082][T16111] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1307.185729][T16111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1308.208031][T16120] syz.7.1965 (16120): drop_caches: 2 [ 1308.217221][T16120] syz.7.1965 (16120): drop_caches: 2 [ 1308.715758][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1309.396685][T16128] kthread_run failed with err -4 [ 1310.068755][T16132] syz.1.1967 (16132): drop_caches: 2 [ 1310.206977][T16132] syz.1.1967 (16132): drop_caches: 2 [ 1310.367073][T16140] syz.3.1968 (16140): drop_caches: 2 [ 1310.376581][T16140] syz.3.1968 (16140): drop_caches: 2 [ 1310.729760][T16141] netlink: 4456 bytes leftover after parsing attributes in process `syz.7.1969'. [ 1310.751731][T11733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.771384][T16138] loop2: detected capacity change from 0 to 1024 [ 1310.809310][T16138] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1311.128127][T16138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1312.635520][T16158] syz.1.1974 (16158): drop_caches: 2 [ 1312.739894][T16158] syz.1.1974 (16158): drop_caches: 2 [ 1312.840611][T16157] loop5: detected capacity change from 0 to 1024 [ 1313.077101][T16157] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1313.103792][T16156] syz.6.1971 (16156): drop_caches: 2 [ 1313.158008][T16156] syz.6.1971 (16156): drop_caches: 2 [ 1313.255542][T12904] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1313.266619][T16157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1315.823375][T16180] dvmrp0: entered allmulticast mode [ 1315.970068][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1975'. [ 1316.265832][T11765] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1317.165488][ T978] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 1318.321375][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1318.321423][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1318.321468][ T978] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1318.321496][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.330026][ T978] usb 3-1: config 0 descriptor?? [ 1318.360019][T16191] syz.6.1981 (16191): drop_caches: 2 [ 1318.436640][T16191] syz.6.1981 (16191): drop_caches: 2 [ 1318.532721][T16183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1979'. [ 1318.538031][ T978] usbhid 3-1:0.0: can't add hid device: -71 [ 1318.538153][ T978] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1318.559189][ T978] usb 3-1: USB disconnect, device number 40 [ 1321.491976][T16221] syz.2.1986 (16221): drop_caches: 2 [ 1321.840604][T16224] syz.3.1987 (16224): drop_caches: 2 [ 1321.874475][T16224] syz.3.1987 (16224): drop_caches: 2 [ 1322.125206][T16221] syz.2.1986 (16221): drop_caches: 2 [ 1322.657358][T16229] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1988'. [ 1323.568333][T16234] loop7: detected capacity change from 0 to 1024 [ 1323.698251][T16234] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1324.161703][T16234] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1324.397945][T16245] loop3: detected capacity change from 0 to 1024 [ 1324.425386][T16245] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1324.559959][T16245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1328.286121][T16277] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1331.069400][T14190] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.102877][T16316] syz.7.2001 (16316): drop_caches: 2 [ 1333.270028][T16316] syz.7.2001 (16316): drop_caches: 2 [ 1333.308096][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1334.156738][T16322] dvmrp0: entered allmulticast mode [ 1334.291244][T16322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2003'. [ 1336.940302][T16349] loop6: detected capacity change from 0 to 1024 [ 1337.108772][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 1337.863816][T16349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1337.930433][T16358] syz.7.2011 (16358): drop_caches: 2 [ 1338.203526][T16358] syz.7.2011 (16358): drop_caches: 2 [ 1338.337025][T16349] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1338.665925][T16369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 1339.916582][T16377] syz.7.2014 (16377): drop_caches: 2 [ 1340.009494][T16377] syz.7.2014 (16377): drop_caches: 2 [ 1340.410392][T11733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.973567][T16384] syz.5.2015 (16384): drop_caches: 2 [ 1341.053010][T16384] syz.5.2015 (16384): drop_caches: 2 [ 1342.498482][T16403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2016'. [ 1344.857128][T16416] loop6: detected capacity change from 0 to 1024 [ 1344.974240][T16416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1345.461637][T16416] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1346.115333][T16422] syz.1.2023 (16422): drop_caches: 2 [ 1346.198490][T16422] syz.1.2023 (16422): drop_caches: 2 [ 1346.207878][T11733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1347.923045][T16444] vxfs: WRONG superblock magic 00000000 at 1 [ 1347.931534][T16444] vxfs: WRONG superblock magic 00000000 at 8 [ 1347.937813][T16444] vxfs: can't find superblock. [ 1348.562662][T16435] syz.6.2024 (16435): drop_caches: 2 [ 1348.568704][T16435] syz.6.2024 (16435): drop_caches: 2 [ 1348.749239][T16445] syz.1.2027 (16445): drop_caches: 2 [ 1348.759204][T16445] syz.1.2027 (16445): drop_caches: 2 [ 1351.761496][T16472] syz.1.2033 (16472): drop_caches: 2 [ 1351.907360][T16472] syz.1.2033 (16472): drop_caches: 2 [ 1352.503698][T16484] bridge1: entered promiscuous mode [ 1352.509036][T16484] bridge1: entered allmulticast mode [ 1353.369113][T16485] vxfs: WRONG superblock magic 00000000 at 1 [ 1353.377876][T16485] vxfs: WRONG superblock magic 00000000 at 8 [ 1353.384066][T16485] vxfs: can't find superblock. [ 1354.585448][T16501] bridge2: entered promiscuous mode [ 1354.590859][T16501] bridge2: entered allmulticast mode [ 1355.417495][T16503] vxfs: WRONG superblock magic 00000000 at 1 [ 1355.426431][T16503] vxfs: WRONG superblock magic 00000000 at 8 [ 1355.432505][T16503] vxfs: can't find superblock. [ 1355.657160][T16503] loop6: detected capacity change from 0 to 2048 [ 1355.766914][T16502] ceph: No mds server is up or the cluster is laggy [ 1355.805850][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 1355.812004][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 1355.869364][T16503] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1356.170698][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 1356.591370][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 1357.382162][T16519] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.2043'. [ 1359.040702][T16530] syz.2.2044 (16530): drop_caches: 2 [ 1359.333921][T16527] syz.6.2042 (16527): drop_caches: 2 [ 1359.340920][T16527] syz.6.2042 (16527): drop_caches: 2 [ 1359.391400][T16530] syz.2.2044 (16530): drop_caches: 2 [ 1360.015260][T16534] syz.3.2045 (16534): drop_caches: 2 [ 1360.021403][T16534] syz.3.2045 (16534): drop_caches: 2 [ 1362.107085][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.403551][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.280804][T16558] vxfs: WRONG superblock magic 00000000 at 1 [ 1363.288593][T16558] vxfs: WRONG superblock magic 00000000 at 8 [ 1363.294759][T16558] vxfs: can't find superblock. [ 1364.837472][T16563] lo speed is unknown, defaulting to 1000 [ 1364.844144][T16563] lo speed is unknown, defaulting to 1000 [ 1364.866325][T16563] lo speed is unknown, defaulting to 1000 [ 1364.928558][T16563] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1365.055414][T16563] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1365.499843][T16563] lo speed is unknown, defaulting to 1000 [ 1365.507485][T16563] lo speed is unknown, defaulting to 1000 [ 1365.516165][T16563] lo speed is unknown, defaulting to 1000 [ 1365.524132][T16563] lo speed is unknown, defaulting to 1000 [ 1365.531347][T16563] lo speed is unknown, defaulting to 1000 [ 1365.538606][T16563] lo speed is unknown, defaulting to 1000 [ 1366.157036][T16567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2051'. [ 1366.866577][T16555] syz.2.2050 (16555): drop_caches: 2 [ 1366.876372][T16555] syz.2.2050 (16555): drop_caches: 2 [ 1368.572095][T16580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2056'. [ 1368.613682][ T5928] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1369.129114][ T5928] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1369.830180][ T5928] usb 4-1: config 0 has no interface number 0 [ 1369.837380][ T5928] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1369.848314][ T5928] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1369.862777][ T5928] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1369.910069][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.966244][ T5928] usb 4-1: Product: syz [ 1369.970566][ T5928] usb 4-1: Manufacturer: syz [ 1370.153302][ T5928] usb 4-1: SerialNumber: syz [ 1370.175589][ T5928] usb 4-1: config 0 descriptor?? [ 1370.183016][T16577] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1370.302543][T16598] siw: device registration error -23 [ 1371.163323][ T5928] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1371.373783][ T5928] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1372.452805][T16605] syz.1.2061 (16605): drop_caches: 2 [ 1372.461306][T16605] syz.1.2061 (16605): drop_caches: 2 [ 1372.931133][ T5928] usb 4-1: USB disconnect, device number 28 [ 1373.003519][ T5928] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1373.064029][ T5928] cyberjack 4-1:0.69: device disconnected [ 1373.355677][ T9228] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1373.364742][ T9228] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1373.384404][ T9228] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1373.392701][ T9228] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1373.400585][ T9228] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1374.835594][T16627] lo speed is unknown, defaulting to 1000 [ 1374.908554][T16628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2063'. [ 1374.912932][T16625] dvmrp0: entered allmulticast mode [ 1375.262667][T16624] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1375.793537][T16619] lo speed is unknown, defaulting to 1000 [ 1376.375281][T16626] Bluetooth: hci4: command tx timeout [ 1377.034869][T16645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2067'. [ 1377.193856][T16645] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2067'. [ 1377.204276][T16645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2067'. [ 1377.251496][T16645] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2067'. [ 1377.261210][T16645] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2067'. [ 1377.832335][T16648] syz.3.2068 (16648): drop_caches: 2 [ 1377.958733][T16648] syz.3.2068 (16648): drop_caches: 2 [ 1378.453489][T16626] Bluetooth: hci4: command tx timeout [ 1378.722213][ T8882] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.295568][T16659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2069'. [ 1380.543743][T16626] Bluetooth: hci4: command tx timeout [ 1380.639247][T16662] bridge0: port 3(gretap0) entered blocking state [ 1380.645898][T16662] bridge0: port 3(gretap0) entered disabled state [ 1380.652502][T16662] gretap0: entered allmulticast mode [ 1380.663124][T16659] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1380.672717][T16659] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1380.683222][T16659] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1381.438298][ T8882] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.422883][T16681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2074'. [ 1382.806144][T16626] Bluetooth: hci4: command tx timeout [ 1382.831787][T16681] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1382.842356][T16619] chnl_net:caif_netlink_parms(): no params data found [ 1382.850286][T16681] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1382.863323][T16681] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1383.543018][T16694] siw: device registration error -23 [ 1384.847578][ T8882] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.087696][T16619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.113494][T16619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.393596][T16619] bridge_slave_0: entered allmulticast mode [ 1385.401663][T16619] bridge_slave_0: entered promiscuous mode [ 1385.782029][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2080'. [ 1386.346793][ T8882] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.528975][T16722] siw: device registration error -23 [ 1387.084799][T16715] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1387.094375][T16715] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1387.104083][T16715] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1387.350448][T16619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.361457][T16619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.373625][T16619] bridge_slave_1: entered allmulticast mode [ 1387.381658][T16619] bridge_slave_1: entered promiscuous mode [ 1387.682943][T16728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2082'. [ 1388.450868][T16619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1388.537502][T16619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1390.304721][T16619] team0: Port device team_slave_0 added [ 1390.383229][T16619] team0: Port device team_slave_1 added [ 1391.824076][T16619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1391.882106][T16619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.003321][T16619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.262957][T16619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.413544][T16770] syz.3.2090 (16770): drop_caches: 2 [ 1392.516517][T16619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1392.552077][T16770] syz.3.2090 (16770): drop_caches: 2 [ 1392.590678][T16619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.690995][ T8882] bridge_slave_1: left allmulticast mode [ 1392.715891][ T8882] bridge_slave_1: left promiscuous mode [ 1392.775687][ T8882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.942775][ T8882] bridge_slave_0: left allmulticast mode [ 1392.964646][ T8882] bridge_slave_0: left promiscuous mode [ 1393.074130][ T8882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.086960][T16792] ceph: No mds server is up or the cluster is laggy [ 1395.094303][ T5928] libceph: connect (1)[c::]:6789 error -101 [ 1395.107711][ T5928] libceph: mon0 (1)[c::]:6789 connect error [ 1395.141795][T16795] /dev/nullb0: Can't open blockdev [ 1395.435349][T16795] loop5: detected capacity change from 0 to 2048 [ 1395.523073][T16795] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1396.427185][ T8882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1396.448643][ T8882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1396.467744][ T8882] bond0 (unregistering): Released all slaves [ 1396.724063][T16619] hsr_slave_0: entered promiscuous mode [ 1396.752225][T16619] hsr_slave_1: entered promiscuous mode [ 1396.774230][T16619] debugfs: 'hsr0' already exists in 'hsr' [ 1396.780008][T16619] Cannot create hsr debugfs directory [ 1396.949247][T16780] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2091'. [ 1397.162384][T16801] syz.6.2095 (16801): drop_caches: 2 [ 1397.199280][T16801] syz.6.2095 (16801): drop_caches: 2 [ 1398.203400][T16811] siw: device registration error -23 [ 1400.901320][ T8882] hsr_slave_0: left promiscuous mode [ 1400.943828][ T8882] hsr_slave_1: left promiscuous mode [ 1400.983899][ T8882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1401.016729][ T8882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1401.251133][ T8882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1401.925210][ T8882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1402.009216][ T8882] veth1_macvtap: left promiscuous mode [ 1402.017163][ T8882] veth0_macvtap: left promiscuous mode [ 1402.023614][ T8882] veth1_vlan: left promiscuous mode [ 1402.029349][ T8882] veth0_vlan: left promiscuous mode [ 1403.281818][T16840] syz.3.2103 (16840): drop_caches: 2 [ 1403.314025][T16840] syz.3.2103 (16840): drop_caches: 2 [ 1403.847988][T16842] syz.5.2105 (16842): drop_caches: 2 [ 1403.854262][T16842] syz.5.2105 (16842): drop_caches: 2 [ 1404.171378][ T8882] team0 (unregistering): Port device team_slave_1 removed [ 1404.276017][ T8882] team0 (unregistering): Port device team_slave_0 removed [ 1405.717565][T16839] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2104'. [ 1405.764395][T16839] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2104'. [ 1405.814520][T16839] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2104'. [ 1405.875934][T16839] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2104'. [ 1406.024175][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2107'. [ 1406.096165][T16839] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2104'. [ 1406.689230][T16864] syz.5.2109 (16864): drop_caches: 2 [ 1406.742340][T16864] syz.5.2109 (16864): drop_caches: 2 [ 1406.749296][T16865] syz.2.2108 (16865): drop_caches: 2 [ 1406.756562][T16865] syz.2.2108 (16865): drop_caches: 2 [ 1407.797568][T16877] syz.1.2113 (16877): drop_caches: 2 [ 1407.896256][T16877] syz.1.2113 (16877): drop_caches: 2 [ 1408.665872][T16619] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1408.671376][T16883] syz.6.2114 (16883): drop_caches: 2 [ 1408.713004][T16619] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1408.740812][T16619] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1408.808833][T16883] syz.6.2114 (16883): drop_caches: 2 [ 1408.823754][T16619] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1409.145195][T16899] syz.3.2116 (16899): drop_caches: 2 [ 1409.186116][T16899] syz.3.2116 (16899): drop_caches: 2 [ 1409.224352][T16619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1409.418034][T16619] 8021q: adding VLAN 0 to HW filter on device team0 [ 1409.479343][ T8882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.486648][ T8882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1409.552367][ T8882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.559752][ T8882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1410.472685][T16912] syz.3.2118 (16912): drop_caches: 2 [ 1410.510623][T16912] syz.3.2118 (16912): drop_caches: 2 [ 1411.443325][T16922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2119'. [ 1412.577110][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 1413.948123][T16619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1416.242495][T16969] dvmrp0: entered allmulticast mode [ 1416.402438][T16969] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2128'. [ 1416.689812][T16967] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2127'. [ 1416.699249][T16967] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2127'. [ 1416.708470][T16967] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2127'. [ 1416.717827][T16967] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2127'. [ 1416.727430][T16967] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2127'. [ 1418.058141][T16988] syz.6.2130 (16988): drop_caches: 2 [ 1418.090146][T16988] syz.6.2130 (16988): drop_caches: 2 [ 1418.264929][T16980] syz.5.2129 (16980): drop_caches: 2 [ 1418.279545][T16980] syz.5.2129 (16980): drop_caches: 2 [ 1418.837421][T16994] syz.6.2131 (16994): drop_caches: 2 [ 1418.941296][T16994] syz.6.2131 (16994): drop_caches: 2 [ 1418.966850][T16619] veth0_vlan: entered promiscuous mode [ 1419.039545][T16619] veth1_vlan: entered promiscuous mode [ 1419.396474][T16619] veth0_macvtap: entered promiscuous mode [ 1419.487547][T16619] veth1_macvtap: entered promiscuous mode [ 1419.534897][T17002] warning: `syz.6.2132' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1420.166372][T16619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1420.211697][T16619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1420.350184][ T4467] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.405746][ T4467] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.575002][ T4467] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.674769][ T8882] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.795345][T17009] syz.2.2133 (17009): drop_caches: 2 [ 1422.031297][T17009] syz.2.2133 (17009): drop_caches: 2 [ 1422.494418][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.500869][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.855133][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1422.996516][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.061161][T17027] syz.6.2136 (17027): drop_caches: 2 [ 1423.147820][T17027] syz.6.2136 (17027): drop_caches: 2 [ 1423.266113][T11428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.334830][T11428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.168507][T17060] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2143'. [ 1426.216528][T17060] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2143'. [ 1426.234129][T17060] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2143'. [ 1426.249089][T17060] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2143'. [ 1426.268841][T17060] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2143'. [ 1426.403329][ T5928] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1426.636743][ T5928] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1426.963355][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.971456][ T5928] usb 6-1: Product: syz [ 1427.003406][ T5928] usb 6-1: Manufacturer: syz [ 1427.008077][ T5928] usb 6-1: SerialNumber: syz [ 1427.073044][ T5928] usb 6-1: config 0 descriptor?? [ 1427.079176][T17073] syz.6.2146 (17073): drop_caches: 2 [ 1427.111898][T17073] syz.6.2146 (17073): drop_caches: 2 [ 1427.356530][ T5928] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1427.545678][T17078] syz.1.2148 (17078): drop_caches: 2 [ 1427.558651][T17078] syz.1.2148 (17078): drop_caches: 2 [ 1427.663224][T17079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2147'. [ 1427.672541][T17079] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2147'. [ 1427.684039][T17079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2147'. [ 1427.695467][T17079] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2147'. [ 1427.705159][T17079] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2147'. [ 1428.252674][T17082] loop6: detected capacity change from 0 to 1024 [ 1428.307581][T17082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1428.379271][T17082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1429.021417][ T5928] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1429.043889][ T5928] usb 6-1: USB disconnect, device number 22 [ 1429.932317][T11733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1432.244650][T17109] __nla_validate_parse: 1 callbacks suppressed [ 1432.244669][T17109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2154'. [ 1432.343389][T17109] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2154'. [ 1432.352486][T17109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2154'. [ 1432.425653][T17109] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2154'. [ 1432.515424][T17109] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2154'. [ 1433.729289][T17131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2159'. [ 1436.157133][T17142] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2161'. [ 1437.090343][T17151] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1437.100438][T17151] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1437.110626][T17151] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1437.174259][T17154] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2165'. [ 1437.189594][T17154] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2165'. [ 1437.200209][T17154] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2165'. [ 1438.610252][T17168] syz.5.2167 (17168): drop_caches: 2 [ 1438.616585][T17168] syz.5.2167 (17168): drop_caches: 2 [ 1448.208700][T17267] __nla_validate_parse: 2 callbacks suppressed [ 1448.208758][T17267] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2189'. [ 1448.898857][T17260] syz.5.2187 (17260): drop_caches: 2 [ 1449.631622][T17260] syz.5.2187 (17260): drop_caches: 2 [ 1449.735514][T17271] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1449.745269][T17271] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1449.755254][T17271] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1452.037035][T17287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2194'. [ 1452.625141][T17291] syz.2.2193 (17291): drop_caches: 2 [ 1452.635144][T17291] syz.2.2193 (17291): drop_caches: 2 [ 1454.571154][T17315] syz.5.2199 (17315): drop_caches: 2 [ 1454.585904][T17315] syz.5.2199 (17315): drop_caches: 2 [ 1455.247894][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1455.247913][ T30] audit: type=1326 audit(1762372817.064:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17319 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3718f6c9 code=0x7ffc0000 [ 1455.398583][ T30] audit: type=1326 audit(1762372817.064:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17319 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f4d3718f6c9 code=0x7ffc0000 [ 1455.532484][ T30] audit: type=1326 audit(1762372817.064:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17319 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3718f6c9 code=0x7ffc0000 [ 1455.836978][ T30] audit: type=1326 audit(1762372817.064:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17319 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d3718f6c9 code=0x7ffc0000 [ 1455.862171][ T30] audit: type=1326 audit(1762372817.064:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17319 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3718f6c9 code=0x7ffc0000 [ 1455.885387][ T30] audit: type=1326 audit(1762372817.064:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17319 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d3718f6c9 code=0x7ffc0000 [ 1455.924445][ T30] audit: type=1326 audit(1762372817.064:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17319 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3718f6c9 code=0x7ffc0000 [ 1456.124985][ T30] audit: type=1326 audit(1762372817.064:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17319 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f4d3718f6c9 code=0x7ffc0000 [ 1456.167359][ T30] audit: type=1326 audit(1762372817.064:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17319 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3718f6c9 code=0x7ffc0000 [ 1456.256037][T17332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2203'. [ 1457.044632][ T30] audit: type=1326 audit(1762372817.074:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17319 comm="syz.3.2200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3718f6c9 code=0x7ffc0000 [ 1457.241139][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2205'. [ 1458.009275][T17341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2204'. [ 1459.450512][T17362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2210'. [ 1459.460116][T17362] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2210'. [ 1459.469553][T17362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2210'. [ 1459.483881][T17362] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2210'. [ 1459.492894][T17362] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2210'. [ 1459.890012][T17357] syz.6.2208 (17357): drop_caches: 2 [ 1467.349820][T17421] syz.6.2221 (17421): drop_caches: 2 [ 1467.372006][T17421] syz.6.2221 (17421): drop_caches: 2 [ 1467.602221][T17426] syz.9.2222 (17426): drop_caches: 2 [ 1467.608495][T17426] syz.9.2222 (17426): drop_caches: 2 [ 1469.760058][T17447] syz.3.2226 (17447): drop_caches: 2 [ 1469.929080][T17447] syz.3.2226 (17447): drop_caches: 2 [ 1470.095898][T17449] syz.9.2225 (17449): drop_caches: 2 [ 1470.154956][T17449] syz.9.2225 (17449): drop_caches: 2 [ 1471.653977][T17460] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2229'. [ 1472.395405][T17461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2228'. [ 1472.598836][T17461] netlink: 440 bytes leftover after parsing attributes in process `syz.2.2228'. [ 1473.159295][T17475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2232'. [ 1474.790163][T17486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2233'. [ 1475.433197][T17488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2234'. [ 1475.442324][T17488] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2234'. [ 1475.451832][T17488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2234'. [ 1475.463683][T17488] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2234'. [ 1475.472673][T17488] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2234'. [ 1475.953690][ T978] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1476.156576][ T43] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1476.156576][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 1476.283374][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.370869][ T43] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1476.399362][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1476.452961][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.458700][ T978] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1476.516232][ T43] usb 7-1: Product: syz [ 1476.689836][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.703501][ T43] usb 7-1: Manufacturer: syz [ 1476.725590][ T978] usb 3-1: config 0 descriptor?? [ 1477.514656][ T43] usb 7-1: SerialNumber: syz [ 1477.530075][ T43] usb 7-1: config 0 descriptor?? [ 1477.755838][ T43] usb 7-1: can't set config #0, error -71 [ 1478.546217][ T978] ft260 0003:0403:6030.0013: unknown main item tag 0x7 [ 1478.569710][ T43] usb 7-1: USB disconnect, device number 15 [ 1478.891287][ T978] ft260 0003:0403:6030.0013: failed to retrieve chip version [ 1479.581369][ T978] ft260 0003:0403:6030.0013: probe with driver ft260 failed with error -5 [ 1480.161067][T17520] netlink: 'syz.5.2241': attribute type 5 has an invalid length. [ 1480.317580][ T30] audit: type=1326 audit(1762372842.184:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17516 comm="syz.5.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9cb8f6c9 code=0x7ffc0000 [ 1480.574143][T17529] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2242'. [ 1480.605686][ T30] audit: type=1326 audit(1762372842.214:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17516 comm="syz.5.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f6d9cb8f6c9 code=0x7ffc0000 [ 1480.858211][ T30] audit: type=1326 audit(1762372842.214:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17516 comm="syz.5.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9cb8f6c9 code=0x7ffc0000 [ 1480.967369][ T978] usb 3-1: USB disconnect, device number 41 [ 1481.065256][ T30] audit: type=1326 audit(1762372842.224:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17516 comm="syz.5.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9cb8f6c9 code=0x7ffc0000 [ 1481.381844][ T30] audit: type=1326 audit(1762372842.224:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17516 comm="syz.5.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d9cb8f6c9 code=0x7ffc0000 [ 1481.690581][ T30] audit: type=1326 audit(1762372842.224:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17516 comm="syz.5.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9cb8f6c9 code=0x7ffc0000 [ 1481.874576][T17540] bridge1: entered promiscuous mode [ 1481.879926][T17540] bridge1: entered allmulticast mode [ 1482.392527][ T30] audit: type=1326 audit(1762372842.224:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17516 comm="syz.5.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9cb8f6c9 code=0x7ffc0000 [ 1482.561886][ T30] audit: type=1326 audit(1762372842.224:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17516 comm="syz.5.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d9cb8f6c9 code=0x7ffc0000 [ 1482.817193][ T30] audit: type=1326 audit(1762372842.224:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17516 comm="syz.5.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9cb8f6c9 code=0x7ffc0000 [ 1482.900298][T17538] syz.5.2243 (17538): drop_caches: 2 [ 1482.963690][ T30] audit: type=1326 audit(1762372842.224:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17516 comm="syz.5.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6d9cb8f6c9 code=0x7ffc0000 [ 1483.163978][T17554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2247'. [ 1483.213485][T17554] netlink: 440 bytes leftover after parsing attributes in process `syz.1.2247'. [ 1483.387973][T17557] syz.2.2245 (17557): drop_caches: 2 [ 1483.504484][T17557] syz.2.2245 (17557): drop_caches: 2 [ 1484.513886][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.520239][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.718352][T17574] syz.3.2251 (17574): drop_caches: 2 [ 1485.839815][T17577] syz.1.2250 (17577): drop_caches: 2 [ 1485.885592][T17577] syz.1.2250 (17577): drop_caches: 2 [ 1486.057527][T17574] syz.3.2251 (17574): drop_caches: 2 [ 1486.655395][ T978] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 1487.432962][ T978] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1487.463321][ T978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.493928][ T978] usb 7-1: Product: syz [ 1487.498118][ T978] usb 7-1: Manufacturer: syz [ 1487.502691][ T978] usb 7-1: SerialNumber: syz [ 1487.531898][ T978] usb 7-1: config 0 descriptor?? [ 1487.855437][ T978] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1487.874546][T17598] bridge1: entered promiscuous mode [ 1487.879804][T17598] bridge1: entered allmulticast mode [ 1489.017886][T17609] kthread_run failed with err -4 [ 1489.649114][ T978] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1489.698820][ T978] usb 7-1: USB disconnect, device number 16 [ 1491.181423][T17625] syz.6.2258 (17625): drop_caches: 2 [ 1491.392832][T17625] syz.6.2258 (17625): drop_caches: 2 [ 1491.570114][T17629] syz.2.2259 (17629): drop_caches: 2 [ 1491.645822][T17629] syz.2.2259 (17629): drop_caches: 2 [ 1494.025084][T17656] netlink: 'syz.3.2264': attribute type 5 has an invalid length. [ 1494.102465][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1494.102539][ T30] audit: type=1326 audit(1762372855.954:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17654 comm="syz.3.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3718f6c9 code=0x7ffc0000 [ 1494.315380][ T30] audit: type=1326 audit(1762372855.954:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17654 comm="syz.3.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3718f6c9 code=0x7ffc0000 [ 1494.638028][ T30] audit: type=1326 audit(1762372855.954:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17654 comm="syz.3.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f4d3718f6c9 code=0x7ffc0000 [ 1494.913320][ T30] audit: type=1326 audit(1762372855.954:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17654 comm="syz.3.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3718f6c9 code=0x7ffc0000 [ 1495.613835][ T30] audit: type=1326 audit(1762372855.954:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17654 comm="syz.3.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d3718f6c9 code=0x7ffc0000 [ 1495.787407][ T30] audit: type=1326 audit(1762372855.954:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17654 comm="syz.3.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3718f6c9 code=0x7ffc0000 [ 1495.809873][ C1] vkms_vblank_simulate: vblank timer overrun [ 1495.842566][ T30] audit: type=1326 audit(1762372855.954:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17654 comm="syz.3.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3718f6c9 code=0x7ffc0000 [ 1495.984572][ T30] audit: type=1326 audit(1762372855.954:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17654 comm="syz.3.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d3718f6c9 code=0x7ffc0000 [ 1496.009393][ C1] vkms_vblank_simulate: vblank timer overrun [ 1496.207398][T17675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2269'. [ 1496.216915][T17675] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2269'. [ 1496.226339][T17675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2269'. [ 1496.242171][T17675] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2269'. [ 1496.251326][T17675] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2269'. [ 1496.600701][ T30] audit: type=1326 audit(1762372855.954:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17654 comm="syz.3.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3718f6c9 code=0x7ffc0000 [ 1497.273417][ T30] audit: type=1326 audit(1762372855.964:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17654 comm="syz.3.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3718f6c9 code=0x7ffc0000 [ 1497.295800][ C1] vkms_vblank_simulate: vblank timer overrun [ 1497.435856][T17685] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2270'. [ 1499.275462][T17709] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2273'. [ 1499.387879][T17709] netlink: 440 bytes leftover after parsing attributes in process `syz.9.2273'. [ 1501.349044][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 1503.391134][T17729] syz.2.2277 (17729): drop_caches: 2 [ 1503.676304][T17742] syz.5.2281 (17742): drop_caches: 2 [ 1503.684226][T17742] syz.5.2281 (17742): drop_caches: 2 [ 1506.125270][T17765] syz.2.2287 (17765): drop_caches: 2 [ 1506.358103][T17765] syz.2.2287 (17765): drop_caches: 2 [ 1509.170903][T17791] syz.9.2290 (17791): drop_caches: 2 [ 1509.375754][T17791] syz.9.2290 (17791): drop_caches: 2 [ 1512.113428][T17813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2295'. [ 1514.419847][T17828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2297'. [ 1514.429904][T17828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2297'. [ 1518.322634][T17861] bridge1: entered promiscuous mode [ 1518.328054][T17861] bridge1: entered allmulticast mode [ 1524.697339][T17898] bridge2: entered promiscuous mode [ 1524.702646][T17898] bridge2: entered allmulticast mode [ 1526.152925][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2313'. [ 1526.302899][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2313'. [ 1526.723353][T17912] lo speed is unknown, defaulting to 1000 [ 1526.729930][T17912] lo speed is unknown, defaulting to 1000 [ 1526.747052][T17912] lo speed is unknown, defaulting to 1000 [ 1526.786084][T17912] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1526.860191][T17912] lo speed is unknown, defaulting to 1000 [ 1526.877681][T17912] lo speed is unknown, defaulting to 1000 [ 1526.915881][T17912] lo speed is unknown, defaulting to 1000 [ 1526.968831][T17912] lo speed is unknown, defaulting to 1000 [ 1527.002394][T17912] lo speed is unknown, defaulting to 1000 [ 1527.036354][T17912] lo speed is unknown, defaulting to 1000 [ 1527.775445][T17920] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2317'. [ 1527.784881][T17920] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2317'. [ 1527.794210][T17920] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2317'. [ 1527.809338][T17920] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2317'. [ 1527.818693][T17920] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2317'. [ 1528.177716][T17914] syz.5.2316 (17914): drop_caches: 2 [ 1528.903750][ T5928] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1529.165304][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1529.451946][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1529.730528][ T5928] usb 7-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1530.442737][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.678722][ T5928] usb 7-1: config 0 descriptor?? [ 1531.585830][T17930] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2320'. [ 1532.049524][ T5928] usbhid 7-1:0.0: can't add hid device: -71 [ 1532.087835][ T5928] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1532.187514][ T5928] usb 7-1: USB disconnect, device number 17 [ 1538.570626][T18024] binder: 18017:18024 ioctl 4018620d 0 returned -22 [ 1539.561236][T18018] syz.5.2333 (18018): drop_caches: 2 [ 1540.445665][T18018] syz.5.2333 (18018): drop_caches: 2 [ 1540.745476][T18034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2336'. [ 1540.754833][T18034] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2336'. [ 1540.764378][T18034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2336'. [ 1540.777217][T18034] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2336'. [ 1540.786365][T18034] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2336'. [ 1542.643333][ T9425] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 1542.835077][ T9425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1542.863469][ T9425] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1542.924253][ T9425] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1542.976990][ T9425] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.106499][ T9425] usb 3-1: config 0 descriptor?? [ 1543.394475][T18055] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2340'. [ 1543.632055][ T9425] usbhid 3-1:0.0: can't add hid device: -71 [ 1543.702637][ T9425] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1544.234235][ T9425] usb 3-1: USB disconnect, device number 42 [ 1545.352144][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.358597][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.461516][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1545.461555][ T30] audit: type=1326 audit(1766567211.325:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18069 comm="syz.2.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9651b8f6c9 code=0x7ffc0000 [ 1545.626169][ T30] audit: type=1326 audit(1766567211.325:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18069 comm="syz.2.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9651b8f6c9 code=0x7ffc0000 [ 1545.683430][ T30] audit: type=1326 audit(1766567211.325:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18069 comm="syz.2.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f9651b8f6c9 code=0x7ffc0000 [ 1545.846450][ T30] audit: type=1326 audit(1766567211.325:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18069 comm="syz.2.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9651b8f6c9 code=0x7ffc0000 [ 1545.982950][ T30] audit: type=1326 audit(1766567211.325:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18069 comm="syz.2.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9651b8f6c9 code=0x7ffc0000 [ 1546.051670][T18088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2345'. [ 1546.126999][ T30] audit: type=1326 audit(1766567211.365:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18069 comm="syz.2.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9651b8f6c9 code=0x7ffc0000 [ 1547.919910][ T30] audit: type=1326 audit(1766567211.365:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18069 comm="syz.2.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9651b8f6c9 code=0x7ffc0000 [ 1547.965098][T18098] loop6: detected capacity change from 0 to 32768 [ 1548.870589][ T30] audit: type=1326 audit(1766567211.365:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18069 comm="syz.2.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9651b8f6c9 code=0x7ffc0000 [ 1549.001948][ T30] audit: type=1326 audit(1766567211.365:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18069 comm="syz.2.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9651b8f6c9 code=0x7ffc0000 [ 1549.074258][ T30] audit: type=1326 audit(1766567211.365:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18069 comm="syz.2.2344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9651b8f6c9 code=0x7ffc0000 [ 1549.246369][T18108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'. [ 1549.348668][T18094] bridge3: entered promiscuous mode [ 1549.354010][T18094] bridge3: entered allmulticast mode [ 1555.150983][T18147] syz.2.2359 (18147): drop_caches: 2 [ 1555.560772][T18147] syz.2.2359 (18147): drop_caches: 2 [ 1557.073246][T18174] binder: 18170:18174 ioctl c0306201 0 returned -14 [ 1559.014618][T18187] syz.5.2365 (18187): drop_caches: 2 [ 1559.036928][T18187] syz.5.2365 (18187): drop_caches: 2 [ 1562.132487][T18209] bridge2: entered promiscuous mode [ 1562.137928][T18209] bridge2: entered allmulticast mode [ 1565.052972][T18227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2373'. [ 1565.075181][T18227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2373'. [ 1566.548299][T18235] netlink: 164 bytes leftover after parsing attributes in process `syz.9.2374'. [ 1570.113320][T18273] syz.2.2382 (18273): drop_caches: 2 [ 1570.258581][T18273] syz.2.2382 (18273): drop_caches: 2 [ 1571.442988][T18282] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2383'. [ 1571.467864][T18282] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2383'. [ 1572.663031][T18287] siw: device registration error -23 [ 1573.682441][T18292] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2385'. [ 1575.267535][T18304] syz.3.2388 (18304): drop_caches: 2 [ 1575.633702][T18304] syz.3.2388 (18304): drop_caches: 2 [ 1576.039538][T18317] syz.2.2391 (18317): drop_caches: 2 [ 1576.055805][T18317] syz.2.2391 (18317): drop_caches: 2 [ 1576.517971][T18313] syz.5.2390 (18313): drop_caches: 2 [ 1576.546176][T18313] syz.5.2390 (18313): drop_caches: 2 [ 1583.554417][T18376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2401'. [ 1587.068219][T18381] syz.1.2402 (18381): drop_caches: 2 [ 1589.288387][T18409] syz.2.2408 (18409): drop_caches: 2 [ 1589.321920][T18410] syz.5.2409 (18410): drop_caches: 2 [ 1589.335528][T18410] syz.5.2409 (18410): drop_caches: 2 [ 1589.429060][T18409] syz.2.2408 (18409): drop_caches: 2 [ 1589.463644][ T5928] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1589.842715][ T5928] usb 10-1: Using ep0 maxpacket: 32 [ 1589.885706][ T5928] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1590.765727][ T5928] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1590.825222][ T5928] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1592.639089][ T5928] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.685711][ T5928] usb 10-1: config 0 descriptor?? [ 1593.033410][ T5928] usb 10-1: can't set config #0, error -71 [ 1593.133968][T18438] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2415'. [ 1593.978847][T18442] loop1: detected capacity change from 0 to 32768 [ 1594.150975][ T5928] usb 10-1: USB disconnect, device number 8 [ 1595.121370][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1595.121395][ T30] audit: type=1800 audit(1766567260.365:346): pid=18450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2417" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 1595.717464][ T5928] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1595.969788][ T5928] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1596.010574][ T5928] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.053596][ T5928] usb 10-1: Product: syz [ 1596.063603][ T5928] usb 10-1: Manufacturer: syz [ 1596.083639][ T5928] usb 10-1: SerialNumber: syz [ 1596.108002][ T5928] usb 10-1: config 0 descriptor?? [ 1596.323358][ T5928] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1598.064802][ T5928] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1599.175048][T16903] usb 10-1: USB disconnect, device number 9 [ 1603.435084][T18496] bridge4: entered promiscuous mode [ 1603.440615][T18496] bridge4: entered allmulticast mode [ 1605.065321][T18485] syz.9.2425 (18485): drop_caches: 2 [ 1605.485842][ T9425] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1605.648983][T18513] siw: device registration error -23 [ 1606.436316][ T9425] usb 4-1: Using ep0 maxpacket: 32 [ 1606.468293][ T9425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1606.507359][ T9425] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1606.543615][ T9425] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1606.720201][ T9425] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.751959][ T9425] usb 4-1: config 0 descriptor?? [ 1606.780377][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.786837][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.515272][ T9425] ft260 0003:0403:6030.0014: unknown main item tag 0x7 [ 1607.851049][ T9425] ft260 0003:0403:6030.0014: chip code: b200 0000 [ 1607.935762][ T9425] ft260 0003:0403:6030.0014: failed to retrieve system status [ 1607.966805][ T9425] ft260 0003:0403:6030.0014: probe with driver ft260 failed with error -5 [ 1608.837309][ T9425] usb 4-1: USB disconnect, device number 29 [ 1613.875496][ T43] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 1614.255450][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1614.302052][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1614.337411][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1614.397155][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.683346][ T43] usb 3-1: Product: syz [ 1614.698195][ T43] usb 3-1: Manufacturer: syz [ 1614.702880][ T43] usb 3-1: SerialNumber: syz [ 1614.968772][ T43] usb 3-1: cannot find UAC_HEADER [ 1614.995089][T18587] syz.6.2445 (18587): drop_caches: 2 [ 1615.115722][ T43] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1615.253748][ T43] usb 3-1: USB disconnect, device number 43 [ 1615.312839][ T6177] udevd[6177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1616.548949][T18602] siw: device registration error -23 [ 1617.660319][T18609] siw: device registration error -23 [ 1619.394995][T18611] syz.3.2450 (18611): drop_caches: 2 [ 1619.985845][T18626] overlayfs: missing 'lowerdir' [ 1620.171652][T18632] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1620.248167][T18624] syz.9.2452 (18624): drop_caches: 2 [ 1620.375692][T18624] syz.9.2452 (18624): drop_caches: 2 [ 1622.551721][T18648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2454'. [ 1622.933431][ T978] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1623.085813][ T978] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 1623.107605][ T978] usb 3-1: config 0 has no interface number 0 [ 1623.143390][ T978] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1623.216516][ T978] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1623.269035][ T978] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1623.287554][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.305717][ T978] usb 3-1: Product: syz [ 1623.325275][ T978] usb 3-1: Manufacturer: syz [ 1623.340261][ T978] usb 3-1: SerialNumber: syz [ 1623.375086][ T978] usb 3-1: config 0 descriptor?? [ 1623.438351][T18644] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1623.496311][ T978] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1623.571771][ T978] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1623.797590][T18644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1623.834118][T18644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1623.908271][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1624.016559][T18663] syz.9.2459 (18663): drop_caches: 2 [ 1624.056051][T18663] syz.9.2459 (18663): drop_caches: 2 [ 1624.075548][T18664] syz.6.2460 (18664): drop_caches: 2 [ 1624.371621][T18664] syz.6.2460 (18664): drop_caches: 2 [ 1626.104201][T18685] siw: device registration error -23 [ 1626.922306][T16903] usb 3-1: USB disconnect, device number 44 [ 1626.932063][T16903] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1627.088044][T16903] cyberjack 3-1:0.69: device disconnected [ 1631.395029][T18731] overlayfs: missing 'lowerdir' [ 1632.338350][T18729] syz.5.2472 (18729): drop_caches: 2 [ 1633.780512][T18739] syz.9.2474 (18739): drop_caches: 2 [ 1633.792792][T18739] syz.9.2474 (18739): drop_caches: 2 [ 1637.874610][T18774] siw: device registration error -23 [ 1639.467161][T18789] syz.6.2483 (18789): drop_caches: 2 [ 1640.514377][T18789] syz.6.2483 (18789): drop_caches: 2 [ 1641.668853][T18803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2487'. [ 1641.692008][T18803] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2487'. [ 1644.329146][T18829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2491'. [ 1646.232633][T18844] blktrace: Concurrent blktraces are not allowed on loop3 [ 1652.248307][T18895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2503'. [ 1652.272623][T18895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2503'. [ 1653.914318][T18901] kthread_run failed with err -4 [ 1654.643333][ T43] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1655.696826][ T43] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1655.727348][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.756954][ T43] usb 6-1: Product: syz [ 1655.772049][ T43] usb 6-1: Manufacturer: syz [ 1655.801024][ T43] usb 6-1: SerialNumber: syz [ 1656.106901][ T43] usb 6-1: config 0 descriptor?? [ 1656.386306][ T43] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1657.005950][T18927] loop9: detected capacity change from 0 to 1024 [ 1657.079232][T18927] EXT4-fs: Ignoring removed bh option [ 1657.315234][T18927] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1657.479223][T18927] overlayfs: missing 'lowerdir' [ 1657.623467][T18930] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1657.631725][T16619] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1657.685992][T18930] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1657.988321][ T43] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1658.695371][T18930] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1658.712955][T18930] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1658.914561][ T43] usb 6-1: USB disconnect, device number 23 [ 1659.399901][T18930] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1659.413474][T16626] Bluetooth: hci4: command 0x0406 tx timeout [ 1659.472829][T18930] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1659.596917][T18961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2514'. [ 1659.606592][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 1659.840657][T18930] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1659.855672][T18930] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1660.502972][T18930] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1660.518398][T18930] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1660.694263][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 1661.453375][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 1661.567498][T18980] loop9: detected capacity change from 0 to 1024 [ 1661.575408][T18980] EXT4-fs: Ignoring removed bh option [ 1661.653927][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 1661.913094][ T5841] Bluetooth: hci6: command 0x0406 tx timeout [ 1661.937294][T18980] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1661.975704][T18980] overlayfs: failed to resolve './bus': -2 [ 1662.583341][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 1662.773354][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 1662.807252][T16619] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1663.595079][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 1664.279760][ T5841] Bluetooth: hci6: command 0x0406 tx timeout [ 1664.683279][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 1664.779019][T19000] fuse: Unknown parameter 'group_i00000000000000000000' [ 1666.415399][T19017] syz.5.2526 (19017): drop_caches: 2 [ 1666.435240][ T9425] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1666.655276][ T9425] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1666.713800][T19017] syz.5.2526 (19017): drop_caches: 2 [ 1666.723610][ T9425] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.967469][ T9425] usb 4-1: Product: syz [ 1666.988700][ T9425] usb 4-1: Manufacturer: syz [ 1667.015424][ T9425] usb 4-1: SerialNumber: syz [ 1667.064012][ T9425] usb 4-1: config 0 descriptor?? [ 1667.316471][ T9425] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1668.237412][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.250226][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.288481][ T9425] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1670.835624][ T43] usb 4-1: USB disconnect, device number 30 [ 1673.381217][ T978] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1673.398906][T19087] syz.1.2538 (19087): drop_caches: 2 [ 1673.608279][ T978] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1673.633265][ T978] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1673.657775][ T978] usb 4-1: Product: syz [ 1673.674361][ T978] usb 4-1: Manufacturer: syz [ 1673.679145][ T978] usb 4-1: SerialNumber: syz [ 1674.009679][T19093] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2539'. [ 1674.544767][ T978] usb 4-1: config 0 descriptor?? [ 1674.621674][T19083] syz.5.2536 (19083): drop_caches: 2 [ 1674.666702][ T978] ch341 4-1:0.0: ch341-uart converter detected [ 1674.747810][T19087] syz.1.2538 (19087): drop_caches: 2 [ 1675.508556][T19098] syz.6.2541 (19098): drop_caches: 2 [ 1675.574289][T19098] syz.6.2541 (19098): drop_caches: 2 [ 1675.654832][ T978] ch341-uart ttyUSB0: failed to read break control: -71 [ 1675.857179][ T978] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1675.989189][T19110] siw: device registration error -23 [ 1676.552774][ T978] usb 4-1: USB disconnect, device number 31 [ 1676.560823][ T978] ch341 4-1:0.0: device disconnected [ 1678.302411][T19121] loop6: detected capacity change from 0 to 32768 [ 1678.853257][ T30] audit: type=1800 audit(1787538864.701:347): pid=19128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2546" name="file1" dev="loop6" ino=7 res=0 errno=0 [ 1679.005276][T19129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2548'. [ 1680.836399][T19144] : renamed from bridge_slave_0 [ 1682.136500][T19126] fuse: Bad value for 'group_id' [ 1682.142105][T19126] fuse: Bad value for 'group_id' [ 1685.620329][T19171] syz.6.2553 (19171): drop_caches: 2 [ 1685.740582][T19171] syz.6.2553 (19171): drop_caches: 2 [ 1685.743057][T19179] : renamed from bridge_slave_0 (while UP) [ 1686.295007][T19187] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2556'. [ 1686.317773][T19187] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2556'. [ 1688.984105][ T978] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 1689.121122][T19197] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1689.221494][T19197] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1689.249067][T19197] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1689.261726][T19197] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1689.331643][T19197] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1689.346769][ T978] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1689.613383][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.317963][ T978] usb 6-1: Product: syz [ 1690.322173][ T978] usb 6-1: Manufacturer: syz [ 1690.327646][ T978] usb 6-1: SerialNumber: syz [ 1690.606432][ T978] usb 6-1: config 0 descriptor?? [ 1691.266549][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 1691.273277][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 1691.279365][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 1691.339243][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 1691.349362][T19207] Bluetooth: hci6: command 0x0406 tx timeout [ 1691.463329][ T978] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1692.062205][ T978] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1694.202466][ T978] usb 6-1: USB disconnect, device number 24 [ 1696.261332][T19272] : renamed from bridge_slave_0 [ 1697.982129][T19287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2575'. [ 1699.003659][T16904] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1699.224123][T16904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1699.379776][T16904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1699.435027][T16904] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1700.603254][T16904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.737492][T16904] usb 4-1: config 0 descriptor?? [ 1701.146513][T19289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1701.166950][T19289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1701.245028][T19289] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2576'. [ 1701.364378][T16904] usbhid 4-1:0.0: can't add hid device: -71 [ 1701.370430][T16904] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1701.412128][T16904] usb 4-1: USB disconnect, device number 32 [ 1701.783281][ T9425] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1701.997555][ T9425] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 1702.077031][ T9425] usb 6-1: config 0 has no interface number 0 [ 1702.108268][ T9425] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1702.224189][ T9425] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1702.324048][ T9425] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1702.511194][ T9425] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.520070][ T9425] usb 6-1: Product: syz [ 1702.524541][ T9425] usb 6-1: Manufacturer: syz [ 1702.529152][ T9425] usb 6-1: SerialNumber: syz [ 1702.552620][ T9425] usb 6-1: config 0 descriptor?? [ 1702.576395][T19316] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1703.329353][ T9425] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1703.443096][T19316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1703.466349][ T9425] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1703.514159][T19316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1703.565622][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1703.641161][ T43] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1703.881144][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 1703.892164][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1703.918833][ T43] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1703.946987][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.064913][ T43] usb 3-1: Product: syz [ 1704.146267][ T43] usb 3-1: Manufacturer: syz [ 1704.179615][ T43] usb 3-1: SerialNumber: syz [ 1704.260949][ T43] usb 3-1: config 0 descriptor?? [ 1704.713630][T19345] siw: device registration error -23 [ 1705.485704][ T43] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1705.573684][ T43] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 1705.582462][ T43] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1705.653592][ T43] usb 3-1: USB disconnect, device number 45 [ 1706.851882][ T24] usb 6-1: USB disconnect, device number 25 [ 1706.879259][ T24] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1706.918270][ T24] cyberjack 6-1:0.69: device disconnected [ 1709.723288][ T43] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1709.896575][ T43] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 1709.916141][ T43] usb 3-1: config 0 has no interface number 0 [ 1709.923603][ T43] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1709.945345][ T43] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1709.961859][ T43] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1709.971663][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.979997][ T43] usb 3-1: Product: syz [ 1709.984623][ T43] usb 3-1: Manufacturer: syz [ 1709.989345][ T43] usb 3-1: SerialNumber: syz [ 1710.004686][ T43] usb 3-1: config 0 descriptor?? [ 1710.010632][T19391] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1710.045654][ T43] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1710.073132][ T43] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1711.119667][T19389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1711.433311][T19389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1711.480507][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1712.365476][ T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1712.611335][T19427] fuse: Bad value for 'group_id' [ 1712.616614][T19427] fuse: Bad value for 'group_id' [ 1712.677812][ T24] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1712.727987][ T24] usb 7-1: config 0 has no interface number 0 [ 1712.740244][ T24] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1712.782645][ T24] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1712.825301][ T24] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1712.871011][ T24] usb 7-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1712.955052][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.990751][ T24] usb 7-1: config 0 descriptor?? [ 1713.488700][ T977] usb 3-1: USB disconnect, device number 46 [ 1713.655770][ T977] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1713.694237][ T977] cyberjack 3-1:0.69: device disconnected [ 1713.703354][ T24] usbhid 7-1:0.1: can't add hid device: -71 [ 1713.753381][ T24] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 1713.803745][ T24] usb 7-1: USB disconnect, device number 18 [ 1717.601555][T19469] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1717.601804][T19469] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1717.602073][T19469] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1717.602279][T19469] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1717.780540][T19469] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1718.504528][ T24] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1718.706868][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1718.736021][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1718.826744][ T24] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1718.878824][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.027598][ T24] usb 3-1: config 0 descriptor?? [ 1719.495545][T19503] bridge3: entered promiscuous mode [ 1719.500909][T19503] bridge3: entered allmulticast mode [ 1719.913208][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 1719.922056][ T5841] Bluetooth: hci6: command 0x0406 tx timeout [ 1719.926306][T19477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1719.929201][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 1719.938131][T19207] Bluetooth: hci5: command 0x0406 tx timeout [ 1719.942593][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 1719.969982][T19477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.183769][T19477] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2611'. [ 1721.121413][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 1721.132934][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1721.347681][ T24] usb 3-1: USB disconnect, device number 47 [ 1721.714890][T19516] loop9: detected capacity change from 0 to 32768 [ 1721.751099][T19516] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2617 (19516) [ 1721.770065][T19516] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1721.780614][T19516] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm [ 1722.533885][T19517] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1722.559749][T19517] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1722.570494][T19516] BTRFS info (device loop9): enabling ssd optimizations [ 1722.577583][T19516] BTRFS info (device loop9): turning on async discard [ 1722.584417][T19516] BTRFS info (device loop9): enabling free space tree [ 1722.673742][T19517] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1722.829574][T19517] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1723.593760][T19517] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1723.914121][T16619] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1725.035395][T19505] Bluetooth: hci1: command 0x0406 tx timeout [ 1725.035391][T16626] Bluetooth: hci5: command 0x0406 tx timeout [ 1725.035459][T16626] Bluetooth: hci2: command 0x0406 tx timeout [ 1725.041450][T19505] Bluetooth: hci6: command 0x0406 tx timeout [ 1725.392086][T19563] syz.5.2623 (19563): drop_caches: 2 [ 1725.402571][T19563] syz.5.2623 (19563): drop_caches: 2 [ 1725.653328][T19505] Bluetooth: hci4: command 0x0406 tx timeout [ 1727.883356][ T9425] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1728.121324][T19554] syz.1.2620 (19554): drop_caches: 2 [ 1729.147926][ T9425] usb 7-1: Using ep0 maxpacket: 32 [ 1729.268437][ T9425] usb 7-1: device descriptor read/all, error -71 [ 1729.453999][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1729.563277][T16904] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1729.657154][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.663551][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1729.795843][T16904] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1729.859340][T16904] usb 10-1: not running at top speed; connect to a high speed hub [ 1729.874617][ T977] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1729.876628][ T24] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 1729.901881][T16904] usb 10-1: config 0 has no interfaces? [ 1729.943310][T16904] usb 10-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1729.952469][T16904] usb 10-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1730.015713][T16904] usb 10-1: Product: syz [ 1730.020019][T16904] usb 10-1: Manufacturer: syz [ 1730.033277][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 1730.046458][T16904] usb 10-1: SerialNumber: syz [ 1730.064130][ T977] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1730.094566][ T977] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1730.113388][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.132316][ T977] usb 3-1: Product: syz [ 1730.162606][ T977] usb 3-1: Manufacturer: syz [ 1730.168369][ T977] usb 3-1: SerialNumber: syz [ 1730.260008][T16904] usb 10-1: config 0 descriptor?? [ 1730.269007][ T977] usb 3-1: config 0 descriptor?? [ 1730.833082][ T9426] usb 10-1: USB disconnect, device number 10 [ 1730.957478][ T24] usb 4-1: config 0 has no interface number 0 [ 1730.993409][ T977] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1731.016650][ T24] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1731.111501][ T24] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1731.202864][ T977] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 1731.220031][ T977] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1731.301511][ T977] usb 3-1: USB disconnect, device number 48 [ 1731.304160][ T24] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1731.418743][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.498335][ T24] usb 4-1: Product: syz [ 1731.502544][ T24] usb 4-1: Manufacturer: syz [ 1731.541212][ T24] usb 4-1: SerialNumber: syz [ 1731.583311][T19134] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1731.615380][ T24] usb 4-1: config 0 descriptor?? [ 1731.621163][T19579] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1731.704366][ T24] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1731.886857][T19579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1731.973648][T19579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1732.000983][ T24] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1732.674269][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1732.829737][T19134] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1732.919784][T19134] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1733.237568][T19134] usb 7-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1733.271005][T19134] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.300724][T19134] usb 7-1: config 0 descriptor?? [ 1733.528570][T19602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1733.563732][T19602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1733.593588][T19602] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2631'. [ 1733.617734][T19134] usbhid 7-1:0.0: can't add hid device: -71 [ 1733.705152][T19134] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1733.801923][T19134] usb 7-1: USB disconnect, device number 21 [ 1733.933369][ T977] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1734.061486][T19627] loop1: detected capacity change from 0 to 2048 [ 1734.113804][ T977] usb 10-1: Using ep0 maxpacket: 16 [ 1734.122580][ T977] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.167629][ T977] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1734.169046][T19627] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1734.202576][ T977] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1734.213358][ T977] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.302899][ T977] usb 10-1: Product: syz [ 1734.328851][ T977] usb 10-1: Manufacturer: syz [ 1734.350152][ T977] usb 10-1: SerialNumber: syz [ 1734.979467][ T977] usb 10-1: 0:2 : does not exist [ 1735.062985][ T977] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 1735.155359][T19134] usb 4-1: USB disconnect, device number 33 [ 1735.226465][T19134] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1735.290619][T19134] cyberjack 4-1:0.69: device disconnected [ 1735.346176][ T977] usb 10-1: USB disconnect, device number 11 [ 1736.100776][ T6177] udevd[6177]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1737.516448][T19663] blktrace: Concurrent blktraces are not allowed on loop3 [ 1739.441206][T19678] hub 2-0:1.0: USB hub found [ 1739.446354][T19678] hub 2-0:1.0: 1 port detected [ 1739.454966][T19673] capability: warning: `syz.6.2647' uses 32-bit capabilities (legacy support in use) [ 1740.216957][T19681] hub 2-0:1.0: USB hub found [ 1740.222212][T19681] hub 2-0:1.0: 1 port detected [ 1740.413305][ T9426] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1740.640687][ T9426] usb 10-1: config 0 has an invalid interface number: 69 but max is 0 [ 1740.684915][ T9426] usb 10-1: config 0 has no interface number 0 [ 1740.706159][ T9426] usb 10-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1740.735879][ T9426] usb 10-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1740.765119][ T9426] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1740.781707][ T9426] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.826232][ T9426] usb 10-1: Product: syz [ 1740.863357][ T9426] usb 10-1: Manufacturer: syz [ 1740.878489][ T9426] usb 10-1: SerialNumber: syz [ 1740.920164][ T9426] usb 10-1: config 0 descriptor?? [ 1740.958066][T19674] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1741.046717][ T9426] cyberjack 10-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1741.314777][T19674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1741.338647][ T978] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1742.151967][ T9426] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1742.184128][T18296] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 1742.354333][T19674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1742.428672][ T24] usb 10-1: USB disconnect, device number 12 [ 1742.465803][T18296] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1742.517170][T18296] usb 7-1: not running at top speed; connect to a high speed hub [ 1742.528656][ T24] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1742.730182][T19704] loop2: detected capacity change from 0 to 32768 [ 1742.737989][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 1742.864021][T18296] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1742.979342][ T978] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.004246][ T978] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1743.007110][ T24] cyberjack 10-1:0.69: device disconnected [ 1743.587626][T18296] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1743.640672][ T978] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1743.648378][T18296] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1743.826324][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.836155][ T978] usb 2-1: Product: syz [ 1743.840759][ T978] usb 2-1: Manufacturer: syz [ 1743.845682][ T978] usb 2-1: SerialNumber: syz [ 1743.957670][T18296] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1744.134767][T18296] usb 7-1: Product: syz [ 1744.143269][T18296] usb 7-1: SerialNumber: syz [ 1744.169906][T18296] usb 7-1: config 0 descriptor?? [ 1744.246153][ C1] raw-gadget.2 gadget.6: ignoring, device is not running [ 1744.254354][T18296] usb 7-1: can't set config #0, error -32 [ 1744.324004][ T978] usb 2-1: can't set config #1, error -71 [ 1744.364710][T18296] usb 7-1: USB disconnect, device number 22 [ 1744.371794][ T978] usb 2-1: USB disconnect, device number 15 [ 1744.860790][T19721] loop6: detected capacity change from 0 to 32768 [ 1744.899647][T19721] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1744.908036][T19721] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1744.931219][T19721] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 1744.939515][T19134] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 1744.958234][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1744.977460][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1745.210170][T19134] usb 10-1: config 232 has an invalid interface number: 157 but max is 1 [ 1745.223414][ T978] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1745.298189][T19134] usb 10-1: config 232 has an invalid interface number: 204 but max is 1 [ 1745.433952][T19134] usb 10-1: config 232 has no interface number 0 [ 1745.463604][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 1745.481174][ T978] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1745.489262][T19134] usb 10-1: config 232 has no interface number 1 [ 1745.489320][T19134] usb 10-1: config 232 interface 157 has no altsetting 0 [ 1745.489346][T19134] usb 10-1: config 232 interface 204 has no altsetting 0 [ 1745.524366][T19134] usb 10-1: New USB device found, idVendor=0f88, idProduct=3012, bcdDevice=c8.fd [ 1745.559212][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 581ms [ 1745.585566][T19134] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.635450][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 1745.658205][T19134] usb 10-1: Product: syz [ 1745.681598][T19721] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1745.723537][T19134] usb 10-1: Manufacturer: syz [ 1745.774448][ T978] usb 2-1: config 0 has no interface number 0 [ 1745.801849][T19134] usb 10-1: SerialNumber: syz [ 1745.821428][ T978] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1745.879646][T19721] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1745.983395][ T978] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1746.092135][ T978] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1746.183319][T19134] usb 10-1: USB disconnect, device number 13 [ 1746.187266][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.360078][ T978] usb 2-1: config 0 descriptor?? [ 1746.633417][T11733] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 404 [ 1746.683244][T11733] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 1746.702879][T11733] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:11733 [syz-executor] gfs2_quota_sync+0x359/0x460 [ 1746.816802][ T978] usbhid 2-1:0.1: can't add hid device: -71 [ 1746.823008][ T978] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1746.877456][ T978] usb 2-1: USB disconnect, device number 16 [ 1746.903929][T11733] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 1747.003330][T11733] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1749.006072][T19761] syz.1.2663 (19761): drop_caches: 2 [ 1749.633495][T19775] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1750.039166][T19134] kernel read not supported for file /dsp1 (pid: 19134 comm: kworker/1:3) [ 1750.555691][T19777] loop5: detected capacity change from 0 to 2048 [ 1750.632445][T19777] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1751.851915][T19790] hub 2-0:1.0: USB hub found [ 1751.857450][T19790] hub 2-0:1.0: 1 port detected [ 1752.324950][T11733] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 1752.366017][T11733] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 1752.459859][T11733] gfs2: fsid=syz:syz.0: File system withdrawn [ 1752.538767][T11733] CPU: 0 UID: 0 PID: 11733 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1752.538801][T11733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1752.538816][T11733] Call Trace: [ 1752.538830][T11733] [ 1752.538840][T11733] dump_stack_lvl+0x189/0x250 [ 1752.538882][T11733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1752.538913][T11733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1752.538946][T11733] ? __pfx__printk+0x10/0x10 [ 1752.538971][T11733] ? kobject_uevent_env+0x36b/0x8c0 [ 1752.539010][T11733] gfs2_withdraw+0xb30/0x1430 [ 1752.539063][T11733] ? __pfx_gfs2_withdraw+0x10/0x10 [ 1752.539095][T11733] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1752.539132][T11733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1752.539168][T11733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1752.539195][T11733] ? gfs2_consist_inode_i+0xf5/0x110 [ 1752.539234][T11733] inode_go_instantiate+0xaf7/0x1260 [ 1752.539265][T11733] ? __pfx_bit_wait+0x10/0x10 [ 1752.539309][T11733] ? __pfx_inode_go_instantiate+0x10/0x10 [ 1752.539346][T11733] ? __pfx_wake_bit_function+0x10/0x10 [ 1752.539388][T11733] gfs2_instantiate+0x168/0x220 [ 1752.539434][T11733] gfs2_glock_wait+0x1d4/0x2a0 [ 1752.539473][T11733] do_sync+0x46f/0xc60 [ 1752.539498][T11733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1752.539525][T11733] ? _raw_spin_unlock+0x28/0x50 [ 1752.539554][T11733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1752.539581][T11733] ? gfs2_quota_sync+0x359/0x460 [ 1752.539619][T11733] ? __pfx_do_sync+0x10/0x10 [ 1752.539658][T11733] ? gfs2_quota_sync+0x359/0x460 [ 1752.539684][T11733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1752.539717][T11733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1752.539744][T11733] ? do_raw_spin_unlock+0x122/0x240 [ 1752.539785][T11733] gfs2_quota_sync+0x359/0x460 [ 1752.539825][T11733] gfs2_sync_fs+0x4c/0xb0 [ 1752.539851][T11733] sync_filesystem+0xee/0x230 [ 1752.539882][T11733] generic_shutdown_super+0x6f/0x2c0 [ 1752.539920][T11733] kill_block_super+0x44/0x90 [ 1752.539958][T11733] deactivate_locked_super+0xbc/0x130 [ 1752.539992][T11733] cleanup_mnt+0x425/0x4c0 [ 1752.540021][T11733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1752.540049][T11733] ? lockdep_hardirqs_on+0x9c/0x150 [ 1752.540087][T11733] task_work_run+0x1d4/0x260 [ 1752.540129][T11733] ? __pfx_task_work_run+0x10/0x10 [ 1752.540163][T11733] ? __x64_sys_umount+0x122/0x160 [ 1752.540202][T11733] ? exit_to_user_mode_loop+0x40/0x130 [ 1752.540231][T11733] exit_to_user_mode_loop+0xe9/0x130 [ 1752.540256][T11733] do_syscall_64+0x2bd/0xfa0 [ 1752.540289][T11733] ? lockdep_hardirqs_on+0x9c/0x150 [ 1752.540323][T11733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1752.540347][T11733] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1752.540375][T11733] ? exc_page_fault+0xab/0x100 [ 1752.540410][T11733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1752.540442][T11733] RIP: 0033:0x7f00baf909f7 [ 1752.540465][T11733] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1752.540487][T11733] RSP: 002b:00007ffe003ea928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1752.540514][T11733] RAX: 0000000000000000 RBX: 00007f00bb011d7d RCX: 00007f00baf909f7 [ 1752.540532][T11733] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe003ea9e0 [ 1752.540548][T11733] RBP: 00007ffe003ea9e0 R08: 0000000000000000 R09: 0000000000000000 [ 1752.540564][T11733] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe003eba70 [ 1752.540581][T11733] R13: 00007f00bb011d7d R14: 00000000001aa55f R15: 00007ffe003ebab0 [ 1752.540622][T11733] [ 1753.293375][ T978] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1754.296623][T19806] hub 2-0:1.0: USB hub found [ 1754.301636][T19806] hub 2-0:1.0: 1 port detected [ 1754.846228][ T978] usb 4-1: Using ep0 maxpacket: 16 [ 1754.858818][ T978] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.869021][ T978] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1754.984593][ T978] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1754.996496][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1755.017559][ T978] usb 4-1: Product: syz [ 1755.021756][ T978] usb 4-1: Manufacturer: syz [ 1755.028219][ T978] usb 4-1: SerialNumber: syz [ 1755.938463][T19815] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1755.977188][T19816] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1755.986008][ T978] usb 4-1: 0:2 : does not exist [ 1756.020284][ T978] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1756.059602][ T978] usb 4-1: USB disconnect, device number 34 [ 1756.422239][ T6177] udevd[6177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1760.618387][T19848] siw: device registration error -23 [ 1760.765019][ T978] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1761.037213][ T978] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1761.138435][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.221185][ T978] usb 4-1: config 0 descriptor?? [ 1761.251736][ T978] cp210x 4-1:0.0: cp210x converter detected [ 1761.461978][ T978] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1761.516452][ T978] cp210x 4-1:0.0: querying part number failed [ 1762.403708][ T978] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1762.958105][T19873] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1762.990956][T19134] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 1763.675757][T19134] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1763.734995][T19134] usb 7-1: not running at top speed; connect to a high speed hub [ 1763.766500][T19134] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 1763.820754][ T978] usb 4-1: USB disconnect, device number 35 [ 1763.846923][T19134] usb 7-1: config 0 has no interface number 0 [ 1763.910576][ T978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1763.925714][T19134] usb 7-1: config 0 interface 88 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1763.960130][ T978] cp210x 4-1:0.0: device disconnected [ 1764.055882][T19134] usb 7-1: config 0 interface 88 has no altsetting 0 [ 1764.125743][T19134] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1764.198167][T19134] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1764.288291][T19134] usb 7-1: Product: syz [ 1764.292498][T19134] usb 7-1: Manufacturer: syz [ 1764.369877][T19134] usb 7-1: SerialNumber: syz [ 1764.418895][T19134] usb 7-1: config 0 descriptor?? [ 1764.688137][T19134] usb 7-1: USB disconnect, device number 23 [ 1764.841802][T19887] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2691'. [ 1765.728077][T19893] loop9: detected capacity change from 0 to 16 [ 1765.784354][T19893] erofs (device loop9): too large lz4 pclusterblks 16832 [ 1765.905196][T19505] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1768.972080][ T978] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1769.719795][ T978] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1769.800558][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.417807][ T978] usb 2-1: Product: syz [ 1770.422010][ T978] usb 2-1: Manufacturer: syz [ 1770.427832][ T978] usb 2-1: SerialNumber: syz [ 1770.435644][ T978] usb 2-1: config 0 descriptor?? [ 1770.763624][ T978] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 1770.771552][ T978] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1770.804395][ T978] usb 2-1: USB disconnect, device number 17 [ 1770.930670][T19925] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1770.946585][ T24] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 1771.651998][ T24] usb 10-1: config 232 has an invalid interface number: 157 but max is 0 [ 1771.673272][ T24] usb 10-1: config 232 has no interface number 0 [ 1771.679786][ T24] usb 10-1: config 232 interface 157 has no altsetting 0 [ 1771.717197][ T24] usb 10-1: New USB device found, idVendor=0f88, idProduct=3012, bcdDevice=c8.fd [ 1772.493853][ T9425] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1772.501544][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.596004][T19927] fuse: Bad value for 'fd' [ 1772.774652][ T24] usb 10-1: Product: syz [ 1772.807553][ T24] usb 10-1: Manufacturer: syz [ 1772.827779][ T24] usb 10-1: SerialNumber: syz [ 1773.033893][ T9425] usb 7-1: Using ep0 maxpacket: 16 [ 1773.050211][ T9425] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1773.060855][ T9425] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1773.122531][ T9425] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1773.138132][ T9425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.164314][ T9425] usb 7-1: Product: syz [ 1773.182074][ T9425] usb 7-1: Manufacturer: syz [ 1773.274953][ T9425] usb 7-1: SerialNumber: syz [ 1773.598978][T19955] loop1: detected capacity change from 0 to 16 [ 1773.623731][T19505] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1773.675513][T19955] erofs (device loop1): too large lz4 pclusterblks 16832 [ 1775.651228][ T9425] usb 7-1: 0:2 : does not exist [ 1775.722614][ T9425] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1775.791417][ T9425] usb 7-1: USB disconnect, device number 24 [ 1776.004767][ T977] usb 10-1: USB disconnect, device number 14 [ 1776.624215][T19967] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1776.920497][T19964] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1778.361016][ T6177] udevd[6177]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1778.791722][T19982] bridge2: entered promiscuous mode [ 1778.797149][T19982] bridge2: entered allmulticast mode [ 1779.894899][T19992] hub 2-0:1.0: USB hub found [ 1779.900174][T19992] hub 2-0:1.0: 1 port detected [ 1781.057480][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 1781.270914][T20007] loop9: detected capacity change from 0 to 16 [ 1782.151245][T20007] erofs (device loop9): too large lz4 pclusterblks 16832 [ 1783.477939][T20015] loop3: detected capacity change from 0 to 16 [ 1784.644127][T20015] erofs (device loop3): too large lz4 pclusterblks 16832 [ 1786.186991][T20027] : renamed from bridge_slave_0 (while UP) [ 1786.285513][ T9425] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1786.297384][T20034] loop3: detected capacity change from 0 to 64 [ 1786.893685][ T9425] usb 7-1: Using ep0 maxpacket: 32 [ 1786.913785][ T9425] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1786.921989][ T9425] usb 7-1: config 0 has no interface number 0 [ 1786.990582][ T9425] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1787.021536][ T9425] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1787.166133][ T9425] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.395986][ T9425] usb 7-1: Product: syz [ 1787.400212][ T9425] usb 7-1: Manufacturer: syz [ 1787.439085][ T9425] usb 7-1: SerialNumber: syz [ 1787.499330][ T9425] usb 7-1: config 0 descriptor?? [ 1787.561077][ T9425] f81534 7-1:0.12: required endpoints missing [ 1787.709058][T20046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2729'. [ 1787.773326][T20046] netlink: 440 bytes leftover after parsing attributes in process `syz.3.2729'. [ 1789.092482][ T5902] usb 7-1: USB disconnect, device number 25 [ 1790.628840][T15866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1790.694499][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1790.755648][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1790.800220][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1790.823600][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1790.832562][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1791.128073][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.134525][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.455904][T15866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.483936][ T5902] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1791.688836][T20070] lo speed is unknown, defaulting to 1000 [ 1791.706811][ T5902] usb 10-1: Using ep0 maxpacket: 32 [ 1791.771816][ T5902] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1791.794740][ T5902] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1791.892641][ T5902] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.970053][ T5902] usb 10-1: Product: syz [ 1791.988868][ T5902] usb 10-1: Manufacturer: syz [ 1792.050334][ T5902] usb 10-1: SerialNumber: syz [ 1792.061842][T20089] syz.5.2737 (20089): drop_caches: 2 [ 1792.073474][ T5902] usb 10-1: config 0 descriptor?? [ 1792.108754][T20089] syz.5.2737 (20089): drop_caches: 2 [ 1792.145782][T15866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.419034][T15866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.537411][ T5902] gs_usb 10-1:0.0: Couldn't get device config: (err=-121) [ 1792.594100][ T5902] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -121 [ 1792.933380][ T5841] Bluetooth: hci3: command tx timeout [ 1793.529637][T20109] syz.5.2740 (20109): drop_caches: 2 [ 1793.618123][T20070] chnl_net:caif_netlink_parms(): no params data found [ 1793.638493][T20109] syz.5.2740 (20109): drop_caches: 2 [ 1793.716450][T15866] bridge_slave_1: left allmulticast mode [ 1793.756133][T15866] bridge_slave_1: left promiscuous mode [ 1793.787698][T15866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1793.894958][T15866] : left allmulticast mode [ 1793.912323][T15866] : left promiscuous mode [ 1793.918714][T20115] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2741'. [ 1793.939217][T15866] bridge0: port 1() entered disabled state [ 1793.963146][T20115] netlink: 440 bytes leftover after parsing attributes in process `syz.5.2741'. [ 1794.130696][T19134] usb 10-1: USB disconnect, device number 15 [ 1795.013433][ T5841] Bluetooth: hci3: command tx timeout [ 1797.355247][ T5841] Bluetooth: hci3: command tx timeout [ 1797.728843][T15866] dvmrp0 (unregistering): left allmulticast mode [ 1798.673328][T20166] fuse: Unknown parameter 'group_i00000000000000000000' [ 1799.125066][T15866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1799.139171][T15866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1799.151954][T15866] bond0 (unregistering): Released all slaves [ 1799.381072][T20149] bridge5: entered promiscuous mode [ 1799.386401][T20149] bridge5: entered allmulticast mode [ 1799.493292][ T5841] Bluetooth: hci3: command tx timeout [ 1799.548325][T20172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2751'. [ 1799.814408][T20177] loop5: detected capacity change from 0 to 128 [ 1799.984029][T20177] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1800.918425][T20177] ext4 filesystem being mounted at /267/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1802.037566][T11765] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1802.079777][T20186] loop6: detected capacity change from 0 to 64 [ 1803.553314][ T978] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 1803.638273][T20070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1803.656195][T20070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1803.696810][T20070] bridge_slave_0: entered allmulticast mode [ 1803.724869][ T978] usb 7-1: config 232 has an invalid interface number: 204 but max is 0 [ 1803.755049][ T978] usb 7-1: config 232 has no interface number 0 [ 1803.773310][T20070] bridge_slave_0: entered promiscuous mode [ 1803.793279][ T978] usb 7-1: config 232 interface 204 has no altsetting 0 [ 1803.823299][ T978] usb 7-1: New USB device found, idVendor=0f88, idProduct=3012, bcdDevice=c8.fd [ 1803.858960][ T978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.893089][ T978] usb 7-1: Product: syz [ 1803.908601][ T978] usb 7-1: Manufacturer: syz [ 1803.924200][T15866] hsr_slave_0: left promiscuous mode [ 1803.973364][ T978] usb 7-1: SerialNumber: syz [ 1804.048164][T15866] hsr_slave_1: left promiscuous mode [ 1804.129076][T15866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1804.305195][T15866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1804.532813][T15866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1804.620401][T15866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1805.077464][T20227] loop1: detected capacity change from 0 to 16 [ 1805.107038][T20227] erofs (device loop1): too large lz4 pclusterblks 16832 [ 1806.035203][T15866] veth1_macvtap: left promiscuous mode [ 1806.040807][T15866] veth0_macvtap: left promiscuous mode [ 1807.415183][ T978] usb 7-1: USB disconnect, device number 26 [ 1807.508111][T20239] loop9: detected capacity change from 0 to 128 [ 1807.686597][T20246] fuse: Unknown parameter 'user_id00000000000000000000' [ 1807.758247][T20239] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1807.808239][T20249] kernel profiling enabled (shift: 63) [ 1807.814810][T20249] profiling shift: 63 too large [ 1807.844301][T20239] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1808.835915][T16619] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1809.334639][T20254] loop9: detected capacity change from 0 to 32768 [ 1809.344398][T20254] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2767 (20254) [ 1809.391958][T20254] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1809.402248][T20254] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm [ 1809.551096][T20254] BTRFS info (device loop9): enabling ssd optimizations [ 1809.558397][T20254] BTRFS info (device loop9): turning on async discard [ 1809.565255][T20254] BTRFS info (device loop9): enabling free space tree [ 1810.581006][T16619] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1811.333896][T20276] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2769'. [ 1811.342981][T20276] netlink: 440 bytes leftover after parsing attributes in process `syz.6.2769'. [ 1813.480511][T15866] team_slave_1 (unregistering): left promiscuous mode [ 1813.501259][T15866] team0 (unregistering): Port device team_slave_1 removed [ 1813.629892][T15866] team_slave_0 (unregistering): left promiscuous mode [ 1813.722298][T15866] team0 (unregistering): Port device team_slave_0 removed [ 1816.135034][T20302] loop6: detected capacity change from 0 to 32768 [ 1816.148924][T20302] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2776 (20302) [ 1816.175213][T20302] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1816.186075][T20302] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 1816.423675][T20302] BTRFS info (device loop6): enabling ssd optimizations [ 1816.430659][T20302] BTRFS info (device loop6): turning on async discard [ 1816.437561][T20302] BTRFS info (device loop6): enabling free space tree [ 1817.520151][T11733] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1817.572478][T20070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.593479][T20070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1817.600843][T20070] bridge_slave_1: entered allmulticast mode [ 1817.659476][T20070] bridge_slave_1: entered promiscuous mode [ 1817.691471][T20233] bridge3: entered promiscuous mode [ 1817.697088][T20233] bridge3: entered allmulticast mode [ 1818.383711][T20278] lo speed is unknown, defaulting to 1000 [ 1819.629301][T20070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1819.727111][T20070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1820.042036][T20347] loop1: detected capacity change from 0 to 128 [ 1820.132479][T20347] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1820.178686][T20347] ext4 filesystem being mounted at /267/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1820.256135][T20070] team0: Port device team_slave_0 added [ 1821.276867][T20070] team0: Port device team_slave_1 added [ 1821.375509][T12062] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1821.734590][T20365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2785'. [ 1821.931949][T20070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1822.153434][T18296] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1822.487766][T20070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1822.534844][T20360] syz.6.2784 (20360): drop_caches: 2 [ 1822.663433][T20070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1822.704881][T18296] usb 2-1: Using ep0 maxpacket: 16 [ 1822.730929][T18296] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1822.772312][T20360] syz.6.2784 (20360): drop_caches: 2 [ 1822.782595][T20070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1822.789766][T18296] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.821564][T20070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1822.863542][T18296] usb 2-1: Product: syz [ 1822.893374][T18296] usb 2-1: Manufacturer: syz [ 1822.916112][T18296] usb 2-1: SerialNumber: syz [ 1822.927841][T18296] usb 2-1: config 0 descriptor?? [ 1822.996291][T18296] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1823.183022][T20378] loop9: detected capacity change from 0 to 32768 [ 1823.209435][T20378] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2788 (20378) [ 1823.228376][T20378] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1823.238585][T20378] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm [ 1823.254737][T20070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1823.418940][T18296] ssu100 2-1:0.0: probe with driver ssu100 failed with error -32 [ 1823.724041][T20378] BTRFS info (device loop9): enabling ssd optimizations [ 1823.731053][T20378] BTRFS info (device loop9): turning on async discard [ 1823.737929][T20378] BTRFS info (device loop9): enabling free space tree [ 1824.255210][T20070] hsr_slave_0: entered promiscuous mode [ 1824.271550][T20070] hsr_slave_1: entered promiscuous mode [ 1824.284179][T20070] debugfs: 'hsr0' already exists in 'hsr' [ 1824.290594][T20070] Cannot create hsr debugfs directory [ 1824.752910][ T30] audit: type=1800 audit(1804316226.347:348): pid=20405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2788" name="file2" dev="loop9" ino=261 res=0 errno=0 [ 1825.734086][T16904] usb 2-1: USB disconnect, device number 18 [ 1826.016760][T20411] loop1: detected capacity change from 0 to 256 [ 1826.159988][ C1] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1826.164047][T20411] loop1: detected capacity change from 256 to 0 [ 1826.256727][T20413] FAT-fs (loop1): unable to read boot sector to mark fs as dirty [ 1826.438805][T12062] FAT-fs (loop1): unable to read boot sector to mark fs as dirty [ 1826.609026][T20414] loop6: detected capacity change from 0 to 32768 [ 1826.728247][T20414] BTRFS info: device /dev/loop6 (7:6) using temp-fsid 270e3956-d854-4a19-88ab-31ce2aaa9eeb [ 1826.738934][T20414] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2791 (20414) [ 1826.771374][T20414] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1826.781819][T20414] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 1826.878989][T16619] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1826.989028][T20414] BTRFS info (device loop6): enabling ssd optimizations [ 1826.998029][T20414] BTRFS info (device loop6): turning on async discard [ 1827.004884][T20414] BTRFS info (device loop6): enabling free space tree [ 1829.132633][ T30] audit: type=1800 audit(1804316230.187:349): pid=20436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2791" name="file2" dev="loop6" ino=261 res=0 errno=0 [ 1830.114512][T20444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2794'. [ 1831.207249][T11733] BTRFS info (device loop6): last unmount of filesystem 270e3956-d854-4a19-88ab-31ce2aaa9eeb [ 1831.486668][T20453] loop3: detected capacity change from 0 to 32768 [ 1831.494950][T20453] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2795 (20453) [ 1831.510215][T20453] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1831.520436][T20453] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1831.653346][T20173] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1831.767876][ T6177] udevd[6177]: symlink '../../loop6' '/dev/disk/by-label/\x60g4\x1e\xab\xf5\xd7\xe3\xc4_\x7d\x7c\xfb\xd8\xc8e\xeb\x93\xe6\x19\x8a\xc2O\xdc1\xa0\xefS\x96v\x3e\xaa\xb2\xc2j\x990\xef\x2c\x28\x91\xf1\xb3\x12\xd9\x60\x1a\x015\x13\x02\xfa\xe4\x3fwڲ0P\x8bb\xcc\xdb\xdc\x1ag6\xbfI\xec\x5e\x9a+\xec-\x8c\xb2#\x20\x26.tmp-b7:6' failed: File name too long [ 1831.860648][T20173] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1831.922478][T20173] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1831.947947][T20173] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1831.958004][T20173] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1831.983459][T20173] usb 6-1: Product: syz [ 1831.987764][T20173] usb 6-1: Manufacturer: syz [ 1831.992816][T20173] usb 6-1: SerialNumber: syz [ 1832.011442][T20453] BTRFS info (device loop3): enabling ssd optimizations [ 1832.018637][T20453] BTRFS info (device loop3): turning on async discard [ 1832.025563][T20453] BTRFS info (device loop3): enabling free space tree [ 1832.040042][T20173] usb 6-1: config 0 descriptor?? [ 1832.102855][T20173] usb 6-1: selecting invalid altsetting 0 [ 1832.612138][T20476] hub 2-0:1.0: USB hub found [ 1832.703493][T20476] hub 2-0:1.0: 1 port detected [ 1834.412989][ T30] audit: type=1800 audit(1804316235.357:350): pid=20480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2795" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 1834.864864][T20173] usb 6-1: USB disconnect, device number 26 [ 1835.714240][T20488] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1835.958734][ T6020] udevd[6020]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1836.704913][ T5821] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1839.886374][T20516] loop3: detected capacity change from 0 to 32768 [ 1839.948897][T20516] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2806 (20516) [ 1840.010963][T20516] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1840.021252][T20516] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1840.122122][T20522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2804'. [ 1840.312141][T20516] BTRFS info (device loop3): enabling ssd optimizations [ 1840.319241][T20516] BTRFS info (device loop3): turning on async discard [ 1840.326119][T20516] BTRFS info (device loop3): enabling free space tree [ 1841.732677][T20070] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1841.755545][ T30] audit: type=1800 audit(1804316242.777:351): pid=20542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2806" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 1842.194628][T20070] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1842.309341][T20070] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1842.343648][T20545] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2807'. [ 1842.408549][T20070] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1842.904907][T20558] fuse: Unknown parameter 'user00000000000000000000' [ 1843.636143][ T5821] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1843.869038][T20070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1844.101678][T20070] 8021q: adding VLAN 0 to HW filter on device team0 [ 1844.165646][ T8873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1844.172803][ T8873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1844.329669][ T8873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1844.336908][ T8873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1845.944791][T20571] loop6: detected capacity change from 0 to 32768 [ 1845.989573][T20571] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2810 (20571) [ 1846.012406][T20571] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1846.022637][T20571] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 1846.316079][T20577] loop3: detected capacity change from 0 to 32768 [ 1846.349124][T20577] BTRFS info: device /dev/loop3 (7:3) using temp-fsid 6d515851-4007-4a5f-bf93-fd3f4fbb1714 [ 1846.359471][T20577] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2811 (20577) [ 1846.383110][T20577] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1846.393902][T20577] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 1846.597544][T20571] BTRFS info (device loop6): enabling ssd optimizations [ 1846.604728][T20571] BTRFS info (device loop6): turning on async discard [ 1846.611583][T20571] BTRFS info (device loop6): enabling free space tree [ 1848.274157][T20577] BTRFS info (device loop3): enabling ssd optimizations [ 1848.281337][T20577] BTRFS info (device loop3): turning on async discard [ 1848.288298][T20577] BTRFS info (device loop3): enabling free space tree [ 1848.397107][ T30] audit: type=1800 audit(1804316248.997:352): pid=20610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2810" name="file2" dev="loop6" ino=261 res=0 errno=0 [ 1849.234173][ T30] audit: type=1800 audit(1804316250.997:353): pid=20622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2811" name="file2" dev="loop3" ino=261 res=0 errno=0 [ 1851.122926][T20625] loop5: detected capacity change from 0 to 32768 [ 1851.178391][T20625] BTRFS info: device /dev/loop5 (7:5) using temp-fsid ffd68875-4772-4d86-b0a2-3a363dceb10f [ 1851.179385][T11733] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1851.188544][T20625] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2812 (20625) [ 1851.229479][T20625] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1851.239931][T20625] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 1851.275144][ T5821] BTRFS info (device loop3): last unmount of filesystem 6d515851-4007-4a5f-bf93-fd3f4fbb1714 [ 1851.536940][T20625] BTRFS info (device loop5): enabling ssd optimizations [ 1851.544100][T20625] BTRFS info (device loop5): turning on async discard [ 1851.550884][T20625] BTRFS info (device loop5): enabling free space tree [ 1852.454886][ T30] audit: type=1800 audit(1804316254.167:354): pid=20654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2812" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 1853.034006][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.040593][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.378415][T20661] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1854.933959][T11765] BTRFS info (device loop5): last unmount of filesystem ffd68875-4772-4d86-b0a2-3a363dceb10f [ 1855.065599][T19505] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1855.096592][T19505] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1855.114258][T19505] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1855.127005][T19505] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1855.143679][T19505] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1855.353975][T20673] overlayfs: missing 'lowerdir' [ 1855.390761][T20668] lo speed is unknown, defaulting to 1000 [ 1855.665600][T20675] loop6: detected capacity change from 0 to 32768 [ 1856.000630][T20678] loop1: detected capacity change from 0 to 32768 [ 1856.063514][T20683] loop3: detected capacity change from 0 to 128 [ 1856.349830][T20678] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2818 (20678) [ 1856.389458][T20678] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1856.399856][T20678] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 1856.848058][ T30] audit: type=1800 audit(1804316258.667:355): pid=20686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2813" name="file1" dev="loop6" ino=7 res=0 errno=0 [ 1856.866467][ T5888] udevd[5888]: symlink '../../loop5' '/dev/disk/by-label/\x60g4\x1e\xab\xf5\xd7\xe3\xc4_\x7d\x7c\xfb\xd8\xc8e\xeb\x93\xe6\x19\x8a\xc2O\xdc1\xa0\xefS\x96v\x3e\xaa\xb2\xc2j\x990\xef\x2c\x28\x91\xf1\xb3\x12\xd9\x60\x1a\x015\x13\x02\xfa\xe4\x3fwڲ0P\x8bb\xcc\xdb\xdc\x1ag6\xbfI\xec\x5e\x9a+\xec-\x8c\xb2#\x20\x26.tmp-b7:5' failed: File name too long [ 1856.904696][T20683] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1856.924384][T20683] ext4 filesystem being mounted at /525/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1857.137632][ T30] audit: type=1800 audit(1804316258.957:356): pid=20681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2817" name="file2" dev="loop3" ino=13 res=0 errno=0 [ 1857.278763][ T5841] Bluetooth: hci6: command tx timeout [ 1858.416729][ T5821] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1858.431784][T20678] BTRFS info (device loop1): enabling ssd optimizations [ 1858.438890][T20678] BTRFS info (device loop1): turning on async discard [ 1858.445816][T20678] BTRFS info (device loop1): enabling free space tree [ 1858.629953][T12062] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1859.494310][T20723] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1859.893541][ T5841] Bluetooth: hci6: command tx timeout [ 1861.983305][ T5841] Bluetooth: hci6: command tx timeout [ 1862.588426][ T30] audit: type=1400 audit(1804316264.447:357): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=20742 comm="syz.5.2828" [ 1863.351175][T20754] loop1: detected capacity change from 0 to 128 [ 1864.053481][ T5841] Bluetooth: hci6: command tx timeout [ 1864.290272][T20754] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1864.307389][T20754] ext4 filesystem being mounted at /275/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1864.414644][ T30] audit: type=1800 audit(1804316266.247:358): pid=20754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2823" name="file2" dev="loop1" ino=13 res=0 errno=0 [ 1864.805528][T20767] loop3: detected capacity change from 0 to 512 [ 1864.837408][T20767] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1864.966686][T20767] EXT4-fs (loop3): 1 truncate cleaned up [ 1865.061963][T20767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1867.471505][T20785] loop6: detected capacity change from 0 to 512 [ 1867.501694][ T5821] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1867.514735][T12062] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1867.718120][T20785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1868.337310][T20795] EXT4-fs (loop6): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 1868.931848][T11733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1870.467919][T20815] overlayfs: failed to resolve './bus': -2 [ 1872.220404][T20828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2845'. [ 1873.911045][ T30] audit: type=1400 audit(1804316275.777:359): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=20832 comm="syz.9.2846" [ 1874.428701][T20668] chnl_net:caif_netlink_parms(): no params data found [ 1877.014772][T20860] loop6: detected capacity change from 0 to 64 [ 1877.024231][T20860] minix: Unknown parameter '017777777777777777777770x0000000000000000(;7t ǐ lS [ 1877.024231][T20860] DMJp0_ʨ?(`/OؾsE!ѢϟsoAIHUw~J!!3d`ʒzuʷ' [ 1878.399830][T20875] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1878.411517][T20875] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1879.135430][ T30] audit: type=1400 audit(1804316280.997:360): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=20870 comm="syz.9.2853" [ 1881.019696][T20668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1881.041697][T20668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1881.093977][T20668] bridge_slave_0: entered allmulticast mode [ 1881.143567][T20668] bridge_slave_0: entered promiscuous mode [ 1881.214505][T20668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1881.221693][T20668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1882.049915][ T30] audit: type=1400 audit(1804316283.817:361): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=20890 comm="syz.9.2856" [ 1882.214514][T20668] bridge_slave_1: entered allmulticast mode [ 1882.222674][T20668] bridge_slave_1: entered promiscuous mode [ 1882.313626][ T13] bridge_slave_1: left allmulticast mode [ 1882.346563][ T13] bridge_slave_1: left promiscuous mode [ 1882.352375][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1882.604367][ T13] bridge_slave_0: left allmulticast mode [ 1882.610240][ T13] bridge_slave_0: left promiscuous mode [ 1882.708215][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1886.322438][T20922] loop6: detected capacity change from 0 to 128 [ 1886.423636][T20922] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1886.983581][T20922] ext4 filesystem being mounted at /284/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1889.105978][T20943] loop9: detected capacity change from 0 to 128 [ 1889.127695][T20943] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1889.163786][T20943] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1889.344769][T11733] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1889.354993][T19505] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1889.408798][T19505] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1889.427234][T19505] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1889.445054][T19505] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1889.463563][T19505] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1889.563716][T16619] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1889.662739][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1889.672060][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1889.680289][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1889.863379][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1889.880772][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1891.804101][ T5841] Bluetooth: hci1: command tx timeout [ 1892.067396][T20964] loop6: detected capacity change from 0 to 1024 [ 1892.131358][T20964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1892.153566][ T5841] Bluetooth: hci3: command tx timeout [ 1892.222782][T20949] loop1: detected capacity change from 0 to 32768 [ 1892.235813][T20949] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2871 (20949) [ 1892.296109][T20949] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 1892.309786][T11733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1892.321770][T20949] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1892.447607][T20949] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1892.456498][T20949] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1892.497702][T20949] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1892.529148][T20985] loop6: detected capacity change from 0 to 512 [ 1892.565490][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1892.599892][T20949] BTRFS error (device loop1): open_ctree failed: -12 [ 1892.651524][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1892.680789][T20985] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1892.731127][ T13] bond0 (unregistering): Released all slaves [ 1892.812795][T20985] EXT4-fs (loop6): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 1893.018817][T11733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1893.611786][T20668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1893.833269][ T5841] Bluetooth: hci1: command tx timeout [ 1894.214139][ T5841] Bluetooth: hci3: command tx timeout [ 1894.827943][ T13] hsr_slave_0: left promiscuous mode [ 1894.883598][ T13] hsr_slave_1: left promiscuous mode [ 1894.894134][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1894.949470][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1895.775529][T21009] loop6: detected capacity change from 0 to 64 [ 1895.945388][T21011] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1895.962803][ T5841] Bluetooth: hci1: command tx timeout [ 1896.230486][T21009] minix: Unknown parameter '017777777777777777777770x0000000000000000(;7t ǐ lS [ 1896.230486][T21009] DMJp0_ʨ?(`/OؾsE!ѢϟsoAIHUw~J!!3d`ʒzuʷ' [ 1896.265406][T21001] kernel profiling enabled (shift: 9) [ 1896.293413][ T5841] Bluetooth: hci3: command tx timeout [ 1896.483211][T21013] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1896.492981][T21013] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1897.958834][T21020] syz.6.2884: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 1897.973482][ T5841] Bluetooth: hci1: command tx timeout [ 1897.979789][T21020] CPU: 0 UID: 0 PID: 21020 Comm: syz.6.2884 Not tainted syzkaller #0 PREEMPT(full) [ 1897.979820][T21020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1897.979836][T21020] Call Trace: [ 1897.979847][T21020] [ 1897.979857][T21020] dump_stack_lvl+0x189/0x250 [ 1897.979897][T21020] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1897.979938][T21020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1897.979973][T21020] ? __pfx__printk+0x10/0x10 [ 1897.980000][T21020] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1897.980040][T21020] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1897.980076][T21020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1897.980112][T21020] warn_alloc+0x214/0x310 [ 1897.980150][T21020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1897.980177][T21020] ? stack_depot_save_flags+0x41b/0x860 [ 1897.980221][T21020] ? __pfx_warn_alloc+0x10/0x10 [ 1897.980261][T21020] ? kasan_save_track+0x3e/0x80 [ 1897.980294][T21020] ? __kasan_kmalloc+0x93/0xb0 [ 1897.980333][T21020] ? xsk_setsockopt+0x4dc/0x8d0 [ 1897.980361][T21020] ? do_sock_setsockopt+0x17c/0x1b0 [ 1897.980385][T21020] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 1897.980408][T21020] ? do_syscall_64+0xfa/0xfa0 [ 1897.980447][T21020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1897.980483][T21020] __vmalloc_node_range_noprof+0x125/0x12d0 [ 1897.980555][T21020] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1897.980596][T21020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1897.980623][T21020] ? __kasan_kmalloc+0x93/0xb0 [ 1897.980661][T21020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1897.980695][T21020] vmalloc_user_noprof+0xad/0xf0 [ 1897.980731][T21020] ? xskq_create+0xbf/0x170 [ 1897.980764][T21020] xskq_create+0xbf/0x170 [ 1897.980799][T21020] xsk_init_queue+0xb0/0x110 [ 1897.980833][T21020] xsk_setsockopt+0x4dc/0x8d0 [ 1897.980866][T21020] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1897.980892][T21020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1897.980920][T21020] ? lockdep_hardirqs_on+0x9c/0x150 [ 1897.980955][T21020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1897.980999][T21020] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1897.981030][T21020] do_sock_setsockopt+0x17c/0x1b0 [ 1897.981061][T21020] __x64_sys_setsockopt+0x13f/0x1b0 [ 1897.981094][T21020] do_syscall_64+0xfa/0xfa0 [ 1897.981126][T21020] ? lockdep_hardirqs_on+0x9c/0x150 [ 1897.981159][T21020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1897.981182][T21020] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1897.981210][T21020] ? exc_page_fault+0xab/0x100 [ 1897.981245][T21020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1897.981270][T21020] RIP: 0033:0x7f00baf8f6c9 [ 1897.981292][T21020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1897.981312][T21020] RSP: 002b:00007f00bbef3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1897.981338][T21020] RAX: ffffffffffffffda RBX: 00007f00bb1e6090 RCX: 00007f00baf8f6c9 [ 1897.981356][T21020] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1897.981372][T21020] RBP: 00007f00bb011f91 R08: 0000000000000004 R09: 0000000000000000 [ 1897.981388][T21020] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 1897.981404][T21020] R13: 00007f00bb1e6128 R14: 00007f00bb1e6090 R15: 00007ffe003eb698 [ 1897.981449][T21020] [ 1897.981493][T21020] Mem-Info: [ 1898.486418][T21020] active_anon:19022 inactive_anon:0 isolated_anon:0 [ 1898.486418][T21020] active_file:19913 inactive_file:40731 isolated_file:0 [ 1898.486418][T21020] unevictable:768 dirty:190 writeback:0 [ 1898.486418][T21020] slab_reclaimable:7501 slab_unreclaimable:103760 [ 1898.486418][T21020] mapped:43804 shmem:11998 pagetables:1580 [ 1898.486418][T21020] sec_pagetables:0 bounce:0 [ 1898.486418][T21020] kernel_misc_reclaimable:0 [ 1898.486418][T21020] free:1273940 free_pcp:20994 free_cma:0 [ 1898.532976][ T5841] Bluetooth: hci3: command tx timeout [ 1899.332375][T21020] Node 0 active_anon:64580kB inactive_anon:0kB active_file:79644kB inactive_file:162728kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:163808kB dirty:516kB writeback:40kB shmem:35056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13136kB pagetables:6188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1899.365606][T21020] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1899.395973][T21020] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1899.426403][T21020] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 1899.434187][T21020] Node 0 DMA32 free:1189848kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:64880kB inactive_anon:0kB active_file:79644kB inactive_file:162728kB unevictable:1536kB writepending:556kB zspages:0kB present:3129332kB managed:2565168kB mlocked:0kB bounce:0kB free_pcp:69420kB local_pcp:21644kB free_cma:0kB [ 1899.467763][T21020] lowmem_reserve[]: 0 0 0 0 0 [ 1899.472740][T21020] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1899.502287][T21020] lowmem_reserve[]: 0 0 0 0 0 [ 1899.507742][T21020] Node 1 Normal free:3890552kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:25760kB local_pcp:25760kB free_cma:0kB [ 1899.541273][T21020] lowmem_reserve[]: 0 0 0 0 0 [ 1899.546421][T21020] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1899.560168][T21020] Node 0 DMA32: 2527*4kB (UE) 1078*8kB (UE) 130*16kB (UME) 52*32kB (UME) 201*64kB (UME) 117*128kB (UME) 79*256kB (UME) 24*512kB (UME) 25*1024kB (UME) 6*2048kB (UE) 261*4096kB (UM) = 1189772kB [ 1899.580673][T21020] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1899.593223][T21020] Node 1 Normal: 240*4kB (UME) 77*8kB (UE) 53*16kB (UME) 278*32kB (UME) 123*64kB (UME) 41*128kB (UME) 12*256kB (UME) 3*512kB (UM) 1*1024kB (M) 5*2048kB (UME) 940*4096kB (UM) = 3890552kB [ 1899.613276][T21020] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1899.622957][T21020] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1899.632479][T21020] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1899.642777][T21020] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1899.652616][T21020] 69774 total pagecache pages [ 1899.657518][T21020] 0 pages in swap cache [ 1899.661750][T21020] Free swap = 124996kB [ 1899.666053][T21020] Total swap = 124996kB [ 1899.670277][T21020] 2097051 pages RAM [ 1899.674271][T21020] 0 pages HighMem/MovableOnly [ 1899.679051][T21020] 424117 pages reserved [ 1899.683308][T21020] 0 pages cma reserved [ 1900.087596][T21027] 9pnet_fd: Insufficient options for proto=fd [ 1900.812682][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1901.031465][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1901.191105][T21040] xt_cgroup: invalid path, errno=-2 [ 1902.538755][ T30] audit: type=1400 audit(1804316304.347:362): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=21041 comm="syz.6.2891" [ 1905.518072][T20668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1907.006652][ T30] audit: type=1400 audit(1804316308.187:363): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=21055 comm="syz.9.2894" [ 1907.497374][T20668] team0: Port device team_slave_0 added [ 1907.522596][T20668] team0: Port device team_slave_1 added [ 1907.606017][T20946] lo speed is unknown, defaulting to 1000 [ 1908.218775][T20952] lo speed is unknown, defaulting to 1000 [ 1908.236192][T20668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1908.293689][T20668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1908.467945][T20668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1908.508420][T20668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1908.716474][T20668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1908.887504][T20668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1909.025077][T21081] loop6: detected capacity change from 0 to 64 [ 1909.048931][T21081] minix: Unknown parameter '017777777777777777777770x0000000000000000(;7t ǐ lS [ 1909.048931][T21081] DMJp0_ʨ?(`/OؾsE!ѢϟsoAIHUw~J!!3d`ʒzuʷ' [ 1909.379718][T21085] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1909.486637][T21085] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1910.743298][ T30] audit: type=1400 audit(1804316312.217:364): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=21087 comm="syz.9.2900" [ 1911.135903][T21098] loop9: detected capacity change from 0 to 512 [ 1911.148333][T21098] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1911.181001][T21098] EXT4-fs (loop9): 1 truncate cleaned up [ 1911.188653][T21098] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1914.139696][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.156753][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.198180][T16619] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1914.583690][T21115] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1916.617375][T19505] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1916.627721][T19505] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1916.636277][T19505] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1916.662405][T19505] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1916.672681][T19505] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1916.887938][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1916.897613][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1916.905671][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1916.913935][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1916.921603][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1917.504624][T20952] chnl_net:caif_netlink_parms(): no params data found [ 1918.111673][ T30] audit: type=1400 audit(1804316319.937:365): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=21123 comm="syz.6.2906" [ 1918.229120][T20946] chnl_net:caif_netlink_parms(): no params data found [ 1918.423566][T21128] lo speed is unknown, defaulting to 1000 [ 1918.726945][T21126] lo speed is unknown, defaulting to 1000 [ 1918.855837][ T5841] Bluetooth: hci0: command tx timeout [ 1919.024317][ T5841] Bluetooth: hci6: command tx timeout [ 1919.218049][T20952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1919.225774][T20952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1919.232999][T20952] bridge_slave_0: entered allmulticast mode [ 1919.241228][T20952] bridge_slave_0: entered promiscuous mode [ 1919.255739][T20952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1919.262876][T20952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1919.270204][T20952] bridge_slave_1: entered allmulticast mode [ 1919.281249][T20952] bridge_slave_1: entered promiscuous mode [ 1919.353074][T20946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1919.374035][T20946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1919.381352][T20946] bridge_slave_0: entered allmulticast mode [ 1919.393991][T20946] bridge_slave_0: entered promiscuous mode [ 1919.445988][T20946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1919.453399][T20946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1919.460578][T20946] bridge_slave_1: entered allmulticast mode [ 1919.468629][T20946] bridge_slave_1: entered promiscuous mode [ 1919.512127][T20952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1919.557981][T20946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1919.588191][T20952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1919.616527][T20946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1919.655084][T20952] team0: Port device team_slave_0 added [ 1919.697875][T20952] team0: Port device team_slave_1 added [ 1919.768632][T20952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1919.776098][T20952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1919.803065][T20952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1919.820369][T20946] team0: Port device team_slave_0 added [ 1919.829124][T20946] team0: Port device team_slave_1 added [ 1919.861341][T20952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1919.868404][T20952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1919.895063][T20952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1920.088256][T20946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1920.095626][T20946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1920.123083][T20946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1920.141661][T20946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1920.149018][T20946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1920.176413][T20946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1920.220305][T20952] hsr_slave_0: entered promiscuous mode [ 1920.226872][T20952] hsr_slave_1: entered promiscuous mode [ 1920.233485][T20952] debugfs: 'hsr0' already exists in 'hsr' [ 1920.239227][T20952] Cannot create hsr debugfs directory [ 1920.267404][T21126] chnl_net:caif_netlink_parms(): no params data found [ 1920.311134][T21128] chnl_net:caif_netlink_parms(): no params data found [ 1920.517592][T20946] hsr_slave_0: entered promiscuous mode [ 1920.524828][T20946] hsr_slave_1: entered promiscuous mode [ 1920.531442][T20946] debugfs: 'hsr0' already exists in 'hsr' [ 1920.537284][T20946] Cannot create hsr debugfs directory [ 1920.651304][T21126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1920.658624][T21126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1920.666141][T21126] bridge_slave_0: entered allmulticast mode [ 1920.674128][T21126] bridge_slave_0: entered promiscuous mode [ 1920.729624][T21126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1920.738348][T21126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1920.746969][T21126] bridge_slave_1: entered allmulticast mode [ 1920.755025][T21126] bridge_slave_1: entered promiscuous mode [ 1920.836968][T21128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1920.844808][T21128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1920.852059][T21128] bridge_slave_0: entered allmulticast mode [ 1920.861993][T21128] bridge_slave_0: entered promiscuous mode [ 1920.871681][T21128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1920.879403][T21128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1920.886825][T21128] bridge_slave_1: entered allmulticast mode [ 1920.894637][T21128] bridge_slave_1: entered promiscuous mode [ 1920.933385][ T5841] Bluetooth: hci0: command tx timeout [ 1920.992790][T21126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1921.005978][T21126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1921.040160][T21128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1921.052704][T21128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1921.093672][ T5841] Bluetooth: hci6: command tx timeout [ 1921.166783][T21126] team0: Port device team_slave_0 added [ 1921.176607][T21126] team0: Port device team_slave_1 added [ 1921.261006][T21128] team0: Port device team_slave_0 added [ 1921.268520][T21126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1921.275974][T21126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1921.303270][T21126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1921.329989][T21128] team0: Port device team_slave_1 added [ 1921.336908][ T13] bridge_slave_1: left allmulticast mode [ 1921.342729][ T13] bridge_slave_1: left promiscuous mode [ 1921.349230][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.359303][ T13] : left allmulticast mode [ 1921.363953][ T13] : left promiscuous mode [ 1921.368536][ T13] bridge0: port 1() entered disabled state [ 1921.389564][ T13] gretap0: left allmulticast mode [ 1921.395687][ T13] bridge0: port 3(gretap0) entered disabled state [ 1921.404679][ T13] bridge_slave_1: left allmulticast mode [ 1921.410327][ T13] bridge_slave_1: left promiscuous mode [ 1921.421556][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1921.432387][ T13] : left allmulticast mode [ 1921.437520][ T13] : left promiscuous mode [ 1921.442128][ T13] bridge0: port 1() entered disabled state [ 1921.609062][ T13] dvmrp0 (unregistering): left allmulticast mode [ 1922.075041][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1922.085856][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1922.096304][ T13] bond0 (unregistering): Released all slaves [ 1922.258215][ T13] dvmrp0 (unregistering): left allmulticast mode [ 1922.607257][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1922.616284][ T13] bond_slave_0: left promiscuous mode [ 1922.622958][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1922.632335][ T13] bond_slave_1: left promiscuous mode [ 1922.638236][ T13] bond0 (unregistering): Released all slaves [ 1922.654517][T21126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1922.661488][T21126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1922.688378][T21126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1922.865652][T21128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1922.872627][T21128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1922.899298][T21128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1922.953050][T21128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1922.960714][T21128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1922.988865][T21128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1923.018081][ T5841] Bluetooth: hci0: command tx timeout [ 1923.100251][T21126] hsr_slave_0: entered promiscuous mode [ 1923.107770][T21126] hsr_slave_1: entered promiscuous mode [ 1923.114420][T21126] debugfs: 'hsr0' already exists in 'hsr' [ 1923.120151][T21126] Cannot create hsr debugfs directory [ 1923.173292][ T5841] Bluetooth: hci6: command tx timeout [ 1923.186713][T21128] hsr_slave_0: entered promiscuous mode [ 1923.193939][T21128] hsr_slave_1: entered promiscuous mode [ 1923.200240][T21128] debugfs: 'hsr0' already exists in 'hsr' [ 1923.206470][T21128] Cannot create hsr debugfs directory [ 1923.616811][ T13] hsr_slave_0: left promiscuous mode [ 1923.622866][ T13] hsr_slave_1: left promiscuous mode [ 1923.629387][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1923.640477][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1923.652063][ T13] hsr_slave_0: left promiscuous mode [ 1923.658709][ T13] hsr_slave_1: left promiscuous mode [ 1923.665264][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1923.672965][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1923.909537][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1923.959324][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1924.667452][ T13] team_slave_1 (unregistering): left promiscuous mode [ 1924.675508][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1924.722980][ T13] team_slave_0 (unregistering): left promiscuous mode [ 1924.731390][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1925.104311][ T5841] Bluetooth: hci0: command tx timeout [ 1925.263328][ T5841] Bluetooth: hci6: command tx timeout [ 1925.398738][T20946] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1925.410402][T20946] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1925.421704][T20946] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1925.457090][T20946] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1925.569528][T20952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1925.598981][T20952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1925.651237][T20952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1925.667045][T20952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1925.736966][ T13] IPVS: stop unused estimator thread 0... [ 1925.858135][T20946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1925.976402][T20946] 8021q: adding VLAN 0 to HW filter on device team0 [ 1925.996385][ T8882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1926.003602][ T8882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1926.015490][ T8882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1926.022651][ T8882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1926.061859][T20952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1926.112888][T20946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1926.125791][T20946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1926.281203][T20952] 8021q: adding VLAN 0 to HW filter on device team0 [ 1926.306971][ T8882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1926.314142][ T8882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1926.358187][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 1926.365402][ T5971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1926.541693][ T13] bridge_slave_1: left allmulticast mode [ 1926.549385][ T13] bridge_slave_1: left promiscuous mode [ 1926.555843][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1926.572569][ T13] bridge_slave_0: left allmulticast mode [ 1926.578353][ T13] bridge_slave_0: left promiscuous mode [ 1926.584522][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1926.597580][ T13] bridge_slave_1: left allmulticast mode [ 1926.603867][ T13] bridge_slave_1: left promiscuous mode [ 1926.609575][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1926.623767][ T13] bridge_slave_0: left allmulticast mode [ 1926.629520][ T13] bridge_slave_0: left promiscuous mode [ 1926.635692][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1926.783733][ T13] dvmrp0 (unregistering): left allmulticast mode [ 1927.002293][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1927.013105][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1927.022838][ T13] bond0 (unregistering): Released all slaves [ 1927.141510][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1927.153697][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1927.166201][ T13] bond0 (unregistering): Released all slaves [ 1927.192799][T20946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1927.481386][T21128] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1927.519182][T21128] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1927.602499][T21128] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1927.617625][T21128] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1927.706653][ T13] hsr_slave_0: left promiscuous mode [ 1927.712942][ T13] hsr_slave_1: left promiscuous mode [ 1927.720806][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1927.729293][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1927.746591][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1927.755294][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1928.067655][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1928.102506][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1928.551454][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1928.591143][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1928.864386][T21126] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1928.895140][T21126] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1928.918195][T21126] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1928.939162][T21126] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1928.980779][T20952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1929.141186][T20946] veth0_vlan: entered promiscuous mode [ 1929.251367][T20946] veth1_vlan: entered promiscuous mode [ 1929.308317][T21128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1929.352119][T21126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1929.375804][T20952] veth0_vlan: entered promiscuous mode [ 1929.392880][T21128] 8021q: adding VLAN 0 to HW filter on device team0 [ 1929.410878][T20952] veth1_vlan: entered promiscuous mode [ 1929.420855][T20946] veth0_macvtap: entered promiscuous mode [ 1929.442449][T21126] 8021q: adding VLAN 0 to HW filter on device team0 [ 1929.465583][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1929.472716][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1929.484931][T20946] veth1_macvtap: entered promiscuous mode [ 1929.500759][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1929.507907][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1929.526457][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1929.533648][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1929.561033][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1929.568198][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1929.589115][T20946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1929.619992][T20946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1929.639321][T20952] veth0_macvtap: entered promiscuous mode [ 1929.666628][T20952] veth1_macvtap: entered promiscuous mode [ 1929.680768][ T8882] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1929.695471][ T8882] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1929.723149][ T8873] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1929.750350][ T8873] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1929.814351][T20952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1929.870467][T20952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1929.926675][ T5971] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1929.957382][ T5971] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.007035][ T5971] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.044539][ T5971] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1930.119276][T20236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1930.137722][T20236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1930.268084][ T5971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1930.293403][ T5971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1930.365693][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1930.401883][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1930.515403][T21234] loop8: detected capacity change from 0 to 256 [ 1930.518699][T21128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1930.530664][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1930.554077][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1930.601888][T21126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1930.628428][T21234] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x6f16a1e2, utbl_chksum : 0xe619d30d) [ 1930.669271][T21234] exFAT-fs (loop8): bogus allocation bitmap size(need : 2, cur : 256) [ 1931.226287][T21128] veth0_vlan: entered promiscuous mode [ 1931.240318][T21128] veth1_vlan: entered promiscuous mode [ 1931.358036][T21128] veth0_macvtap: entered promiscuous mode [ 1931.388907][T21126] veth0_vlan: entered promiscuous mode [ 1931.405889][T21128] veth1_macvtap: entered promiscuous mode [ 1931.430862][T21126] veth1_vlan: entered promiscuous mode [ 1931.464612][T21128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1931.490698][T21128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1931.526654][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.554882][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.565455][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.580750][T21126] veth0_macvtap: entered promiscuous mode [ 1931.592121][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.605413][T21126] veth1_macvtap: entered promiscuous mode [ 1931.681431][T21126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1931.714758][T21126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1931.767248][ T8882] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.785396][ T5971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1931.811753][ T5971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1931.822574][ T8882] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.858237][ T8882] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.870673][ T8882] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1931.952802][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1931.975957][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1932.022751][ T8882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1932.043395][ T8882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1932.128207][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1932.138817][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1932.271030][T21276] loop7: detected capacity change from 0 to 512 [ 1932.300992][T21276] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1932.354512][T21276] EXT4-fs (loop7): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 1932.452705][T21126] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1975.418889][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.433273][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2013.333350][T22600] Bluetooth: hci1: command 0x0406 tx timeout [ 2013.343874][T22600] Bluetooth: hci3: command 0x0406 tx timeout [ 2036.859663][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2036.868872][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.933585][T19505] Bluetooth: hci0: command 0x0406 tx timeout [ 2044.063545][T16626] Bluetooth: hci6: command 0x0406 tx timeout [ 2098.297064][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.306120][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2159.747499][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2159.754062][ T1297] ieee802154 phy1 wpan1: encryption failed: -22