last executing test programs: 22.870396639s ago: executing program 2 (id=612): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000780)={0x7e, 0x0, 0x0, &(0x7f0000000740)=[0x3, 0x4, 0x2, 0x5, 0x5]}, 0x20) socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0xfffffffffffffe1b}], 0x0, 0x4498bda7e2139f37, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x4, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffa, 0x40003, 0x0, 0x200004, 0x0, 0x2, 0x0, 0x1], 0x80a0000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18.566002727s ago: executing program 3 (id=623): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) rt_sigqueueinfo(r3, 0x2a, &(0x7f0000000680)={0x1a, 0x5, 0x8}) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 16.910680929s ago: executing program 0 (id=624): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r5 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x8000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x5}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) 16.833731423s ago: executing program 3 (id=625): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r1, &(0x7f0000000480)=[{0x0}], 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000006c0)=0x5e3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'vlan0\x00'}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r4 = syz_io_uring_setup(0x746, &(0x7f0000000640)={0x0, 0x3855, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0xbe4, 0x0, 0x6e, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000004640)="59c71cce15335f6e15907925c83ed6bc", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) 15.173985807s ago: executing program 0 (id=627): syz_open_procfs(0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x53) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) 14.872471687s ago: executing program 2 (id=629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000000}, 0x48) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x41, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) 12.589919485s ago: executing program 3 (id=631): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) move_mount(0xffffffffffffffff, &(0x7f0000000900)='./file0\x00', 0xffffffffffffffff, 0x0, 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="3000000000000000290000000b0000000002"], 0x30}, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x30}, 0x18) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, &(0x7f0000000300)='trans=rdma,') 12.589531084s ago: executing program 4 (id=632): syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) unshare(0x2a020480) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187013, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000220001002cbd7000fddbdf2502000000af8364204351d299949dbd1da725c6d7782fa93a7014a394e6b6c805f93949c8dc79b2c79c4168"], 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r3 = syz_io_uring_setup(0xd38, &(0x7f0000000280)={0x0, 0x7732, 0x80, 0x1, 0x350}, &(0x7f00000000c0)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 12.586426612s ago: executing program 0 (id=641): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r1, &(0x7f0000000480)=[{0x0}], 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000006c0)=0x5e3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'vlan0\x00'}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r4 = syz_io_uring_setup(0x746, &(0x7f0000000640)={0x0, 0x3855, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0xbe4, 0x0, 0x6e, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000004640)="59c71cce15335f6e15907925c83ed6bc", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) 12.302886894s ago: executing program 2 (id=633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x38, 0x1403, 0x400, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg0\x00'}}]}, 0xa}, 0x1, 0x0, 0x0, 0x24040895}, 0x40800) recvmsg$can_raw(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) 11.54264258s ago: executing program 3 (id=634): r0 = socket(0xa, 0x3, 0x87) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c0000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000110000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) syz_open_dev$video(&(0x7f00000000c0), 0x1, 0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000007c0)={0x0, 0x3561, 0x80, 0x0, 0x271}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x6ad4a871, 0x1000001000, 0x9c7}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x2) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1) sendto(r0, 0x0, 0x0, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="9272616e733d66742c8b66646e6f3d41bffb28290fd716601a73960f823aea3f30be99e54bf2136102", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 10.377798022s ago: executing program 4 (id=636): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) close_range(r4, 0xffffffffffffffff, 0x0) 10.015951723s ago: executing program 2 (id=638): openat$iommufd(0xffffffffffffff9c, 0x0, 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x6, 0x2b, 0x0, 0x74efdfe049b861ab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0xb6, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 10.013347415s ago: executing program 3 (id=639): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000000780)={0x7e, 0x0, 0x0, &(0x7f0000000740)=[0x3, 0x4, 0x2, 0x5, 0x5]}, 0x20) socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0xfffffffffffffe1b}], 0x0, 0x4498bda7e2139f37, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x4, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffa, 0x40003, 0x0, 0x200004, 0x0, 0x2, 0x0, 0x1], 0x80a0000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.027415164s ago: executing program 2 (id=640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000000}, 0x48) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x0) fcntl$getownex(r1, 0x10, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) 7.769895632s ago: executing program 0 (id=643): socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40c8, &(0x7f0000000040)={[{@nombcache}]}, 0xfb, 0x496, &(0x7f0000000f40)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0x20002, 0x80195760, 0x1000000, 0x8000000}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) 6.717706206s ago: executing program 0 (id=644): r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x109440, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x6040) r3 = io_uring_setup(0x1148, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_open_procfs(0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x28040085) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x44050) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000240)) 6.27773399s ago: executing program 3 (id=645): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff020000000000000000000000000001890090780000000020410000000000000000000000000001fe800000000000000000000000000038220560aeb59d3fb13258c6f29dd7eed9c5aaa04a18f74d2a890000000000000000001c000000000000"], 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/252], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700"/148, 0x94, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 6.089136192s ago: executing program 1 (id=646): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) move_mount(0xffffffffffffffff, &(0x7f0000000900)='./file0\x00', 0xffffffffffffffff, 0x0, 0x200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x46, 0x0, 0x0) sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="3000000000000000290000000b0000000002"], 0x30}, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x30}, 0x18) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, &(0x7f0000000300)='trans=rdma,') 5.965631309s ago: executing program 4 (id=647): openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) socket$igmp(0x2, 0x3, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) socket$kcm(0x2, 0x5, 0x84) mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000300)={0x0, 0x7736, 0x80, 0x1, 0xfb}, &(0x7f0000000240)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.945792877s ago: executing program 1 (id=648): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) quotactl$Q_GETFMT(0xffffffff80000402, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000240)={0x17}) 3.882017618s ago: executing program 1 (id=649): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1408400, &(0x7f0000000080)=ANY=[], 0x85, 0x68b, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x125042, 0x7) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x44042, 0x1ff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) sendfile(r2, r3, 0x0, 0x20fffe82) sendfile(r0, r1, 0x0, 0xfffe82) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000280)='./file1\x00', 0x30008c0, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES64=r4, @ANYRES64, @ANYRES8, @ANYRESDEC=r4], 0x11, 0x2fe, &(0x7f00000004c0)="$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") ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0xa020}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x1) syz_emit_vhci(&(0x7f0000002c00)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x8, 0x2}, {0x6}}}}, 0xf) fcntl$setlease(r5, 0x400, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 3.87262569s ago: executing program 2 (id=650): syz_usb_connect(0xf4175eb3f2bfb60d, 0x2d, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4eb4}, 0x5e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) socket$pptp(0x18, 0x1, 0x2) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076655468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000"], 0xc8}}, 0x0) 3.769573474s ago: executing program 4 (id=651): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[], 0x118) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) 2.667176006s ago: executing program 4 (id=652): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_io_uring_setup(0x790e, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x0) open$dir(0x0, 0x4000, 0x74) syz_io_uring_submit(0x0, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r0, 0x0) 2.194193599s ago: executing program 1 (id=653): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000440)={0x200000, 0x200001, 0x4, 0x4000, 0x1}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x800) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r4, 0x8, r5) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f00000008c0)='wchan\x00') pread64(r7, &(0x7f0000000280)=""/252, 0xfc, 0x0) 1.228895003s ago: executing program 0 (id=654): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x80}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ce7776c412"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x3}, @NL80211_ATTR_KEY={0x64, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x14, 0x4, "f71a62d234ec53360582281941a47d57"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x14, 0x4, "3480b8bcb1b99140532e41780c7c6b14"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "3c1092a16e"}, @NL80211_KEY_SEQ={0xa, 0x4, "15b04a483b35"}, @NL80211_KEY_IDX={0x5}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) socket(0x28, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) exit(0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r3, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 1.023854074s ago: executing program 4 (id=655): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) 1.022208725s ago: executing program 1 (id=656): futex(&(0x7f0000000040)=0x2, 0x5, 0x1, 0x0, &(0x7f0000000100), 0x43000002) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) syz_mount_image$cramfs(&(0x7f0000000440), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xfc, 0x15e, &(0x7f0000000480)="$eJzs0U1rE0Ecx/Hv7E4ewIQoRggeTG5Gg5AH9CYhKwYDxgVFEE+BuKKQEDGgPTb02kOg1xz6cC19C0nbQ2lJLn0VveRW6HHL7CYs7Wv4f27zm+H3n519/3ZRVETeDfp//nrDofej8NltN79cTacNk8eB5J398PysAb/QzDQsR2Di0zT8/N3zrO6gZ9bLBiQA58Eqp59Zz3OympGGCr69zk4SwTlrNTLMnsA3el6NWLB+qsHJhH1lYL4Hz/FxHoVZBbgGbFDKXN5PhEWtUv6xgo1J6ejw4tP8vPXqZd3brjbHL1I5uwTs46jkmRU9yWLe/ui23UWtWn2TLFcsXl+aQjbH6A+pf/BdgTZ9FkFfnNwz/RW2FOwEs5bHKm0+YvfG7Yf3qJuC/3YBVH7S7eRiB53sQwu7qM2uzz3mFwU70YsIIYQQQgghhBBCCCGEEEIIIYQQkdsAAAD//7ILTbU=") r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x34}, 0x1, 0x40030000000000, 0x0, 0x40004}, 0x40080) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r5, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 1 (id=657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d4"], 0xd0060) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_RMID(r3, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.98' (ED25519) to the list of known hosts. [ 71.699934][ T5851] cgroup: Unknown subsys name 'net' [ 71.848518][ T5851] cgroup: Unknown subsys name 'cpuset' [ 71.857072][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.202075][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.606170][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.613798][ T5868] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.627507][ T5881] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.645357][ T5881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.654501][ T5868] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.664467][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.671315][ T5883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.678781][ T5881] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.679593][ T5883] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.698143][ T5883] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.705593][ T5881] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.705993][ T5883] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.723714][ T5883] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.732122][ T5883] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.739768][ T5879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.740292][ T5883] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.747841][ T5879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.761709][ T5879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.770044][ T5879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.771227][ T5868] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.778004][ T5879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.786887][ T5868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.799300][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.807278][ T5868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.816884][ T5868] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.313178][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 76.549396][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 76.600491][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 76.654471][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.662078][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.669971][ T5862] bridge_slave_0: entered allmulticast mode [ 76.677149][ T5862] bridge_slave_0: entered promiscuous mode [ 76.685407][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 76.753604][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.762056][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.770084][ T5862] bridge_slave_1: entered allmulticast mode [ 76.777862][ T5862] bridge_slave_1: entered promiscuous mode [ 76.846128][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.888229][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.897703][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 76.955975][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.963142][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.970703][ T5861] bridge_slave_0: entered allmulticast mode [ 76.977672][ T5861] bridge_slave_0: entered promiscuous mode [ 77.026410][ T5862] team0: Port device team_slave_0 added [ 77.032639][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.039908][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.047527][ T5861] bridge_slave_1: entered allmulticast mode [ 77.054620][ T5861] bridge_slave_1: entered promiscuous mode [ 77.061383][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.068844][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.076040][ T5871] bridge_slave_0: entered allmulticast mode [ 77.082940][ T5871] bridge_slave_0: entered promiscuous mode [ 77.109918][ T5862] team0: Port device team_slave_1 added [ 77.140466][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.147722][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.154958][ T5871] bridge_slave_1: entered allmulticast mode [ 77.161908][ T5871] bridge_slave_1: entered promiscuous mode [ 77.232367][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.239429][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.265337][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.280146][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.301750][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.309320][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.316779][ T5867] bridge_slave_0: entered allmulticast mode [ 77.323785][ T5867] bridge_slave_0: entered promiscuous mode [ 77.337586][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.344994][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.370896][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.384847][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.400261][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.409771][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.417064][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.424216][ T5867] bridge_slave_1: entered allmulticast mode [ 77.431313][ T5867] bridge_slave_1: entered promiscuous mode [ 77.472031][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.517887][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.525146][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.532255][ T5875] bridge_slave_0: entered allmulticast mode [ 77.539646][ T5875] bridge_slave_0: entered promiscuous mode [ 77.584584][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.593819][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.601370][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.608767][ T5875] bridge_slave_1: entered allmulticast mode [ 77.616309][ T5875] bridge_slave_1: entered promiscuous mode [ 77.625029][ T5861] team0: Port device team_slave_0 added [ 77.632665][ T5871] team0: Port device team_slave_0 added [ 77.652329][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.674062][ T5861] team0: Port device team_slave_1 added [ 77.682370][ T5871] team0: Port device team_slave_1 added [ 77.753478][ T5862] hsr_slave_0: entered promiscuous mode [ 77.760536][ T5862] hsr_slave_1: entered promiscuous mode [ 77.781448][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.817520][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.825251][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.852023][ T5868] Bluetooth: hci2: command tx timeout [ 77.857930][ T5185] Bluetooth: hci0: command tx timeout [ 77.858230][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.863699][ T5874] Bluetooth: hci1: command tx timeout [ 77.879166][ T5867] team0: Port device team_slave_0 added [ 77.887807][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.897732][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.904719][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.930947][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.930983][ T5874] Bluetooth: hci4: command tx timeout [ 77.941516][ T5868] Bluetooth: hci3: command tx timeout [ 77.943839][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.959480][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.985911][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.016550][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.023510][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.049637][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.062327][ T5867] team0: Port device team_slave_1 added [ 78.097544][ T5875] team0: Port device team_slave_0 added [ 78.131740][ T5875] team0: Port device team_slave_1 added [ 78.225643][ T5861] hsr_slave_0: entered promiscuous mode [ 78.231961][ T5861] hsr_slave_1: entered promiscuous mode [ 78.238192][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 78.243973][ T5861] Cannot create hsr debugfs directory [ 78.250772][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.257986][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.284032][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.332986][ T5871] hsr_slave_0: entered promiscuous mode [ 78.339911][ T5871] hsr_slave_1: entered promiscuous mode [ 78.346979][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 78.352718][ T5871] Cannot create hsr debugfs directory [ 78.359272][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.366891][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.394381][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.417630][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.425134][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.451971][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.483522][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.490592][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.516618][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.648447][ T5867] hsr_slave_0: entered promiscuous mode [ 78.655026][ T5867] hsr_slave_1: entered promiscuous mode [ 78.661066][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 78.666974][ T5867] Cannot create hsr debugfs directory [ 78.751244][ T5875] hsr_slave_0: entered promiscuous mode [ 78.758517][ T5875] hsr_slave_1: entered promiscuous mode [ 78.764919][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 78.770717][ T5875] Cannot create hsr debugfs directory [ 79.097445][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.109918][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.147053][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.183548][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.245628][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.263494][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.272908][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.285282][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.382318][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.399605][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.428474][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.438704][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.518913][ T5867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.531341][ T5867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.559165][ T5867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.591017][ T5867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.627984][ T5875] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.640256][ T5875] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.650587][ T5875] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.673883][ T5875] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.723703][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.737703][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.798517][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.819524][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.846307][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.853562][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.890904][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.898096][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.909067][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.916177][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.927452][ T5874] Bluetooth: hci1: command tx timeout [ 79.927715][ T5868] Bluetooth: hci2: command tx timeout [ 79.932863][ T5874] Bluetooth: hci0: command tx timeout [ 79.945885][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.952963][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.005843][ T5874] Bluetooth: hci4: command tx timeout [ 80.005852][ T5868] Bluetooth: hci3: command tx timeout [ 80.022702][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.081504][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.124226][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.163412][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.170540][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.184115][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.203928][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.211114][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.244230][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.251448][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.319793][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.331394][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.338638][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.397809][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.446399][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.481716][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.488929][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.502167][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.509356][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.641172][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.656034][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.818356][ T5862] veth0_vlan: entered promiscuous mode [ 80.872595][ T5871] veth0_vlan: entered promiscuous mode [ 80.888435][ T5862] veth1_vlan: entered promiscuous mode [ 80.948204][ T5871] veth1_vlan: entered promiscuous mode [ 81.027810][ T5862] veth0_macvtap: entered promiscuous mode [ 81.042037][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.070599][ T5862] veth1_macvtap: entered promiscuous mode [ 81.120457][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.131776][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.158672][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.179166][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.206343][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.216234][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.228988][ T5871] veth0_macvtap: entered promiscuous mode [ 81.257937][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.268035][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.303043][ T5871] veth1_macvtap: entered promiscuous mode [ 81.360731][ T5861] veth0_vlan: entered promiscuous mode [ 81.392110][ T5861] veth1_vlan: entered promiscuous mode [ 81.448340][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.475242][ T5867] veth0_vlan: entered promiscuous mode [ 81.489450][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.520973][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.547100][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.556323][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.589976][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.600273][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.633296][ T5867] veth1_vlan: entered promiscuous mode [ 81.654096][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.690500][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.700525][ T5861] veth0_macvtap: entered promiscuous mode [ 81.706898][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.763894][ T5861] veth1_macvtap: entered promiscuous mode [ 81.864755][ T5875] veth0_vlan: entered promiscuous mode [ 81.908057][ T5867] veth0_macvtap: entered promiscuous mode [ 81.916627][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.952306][ T5875] veth1_vlan: entered promiscuous mode [ 81.967676][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.989859][ T5867] veth1_macvtap: entered promiscuous mode [ 82.014759][ T5874] Bluetooth: hci0: command tx timeout [ 82.016332][ T5868] Bluetooth: hci2: command tx timeout [ 82.020268][ T5874] Bluetooth: hci1: command tx timeout [ 82.065383][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.074547][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.084583][ T5874] Bluetooth: hci4: command tx timeout [ 82.088190][ T5868] Bluetooth: hci3: command tx timeout [ 82.125405][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.170951][ T1110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.187679][ T1110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.204107][ T1110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.213007][ T1110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.227514][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.244713][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.266622][ T5875] veth0_macvtap: entered promiscuous mode [ 82.278642][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.485227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.508696][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.517364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.545302][ T5875] veth1_macvtap: entered promiscuous mode [ 82.634416][ T3010] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.643224][ T3010] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.645186][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.704068][ T3010] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.732352][ T3010] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.755041][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.764007][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.935355][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.964683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.973623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.010765][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.028280][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.054505][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.095204][ T1166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.146173][ T1166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.164596][ T5870] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.204046][ T1166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.213272][ T1166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.222801][ T3010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.233529][ T3010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.246000][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.253823][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.323314][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.339989][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.354678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 83.378035][ T5870] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 83.397781][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.417101][ T5870] usb 1-1: Product: syz [ 83.427704][ T5870] usb 1-1: Manufacturer: syz [ 83.435383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.452163][ T5870] usb 1-1: SerialNumber: syz [ 83.503163][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.605996][ T5870] usb 1-1: config 0 descriptor?? [ 83.619209][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.630143][ T5870] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 83.659603][ T5870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 84.154395][ T5868] Bluetooth: hci1: command tx timeout [ 84.159924][ T5874] Bluetooth: hci2: command tx timeout [ 84.165976][ T5874] Bluetooth: hci0: command tx timeout [ 84.171392][ T5185] Bluetooth: hci4: command tx timeout [ 84.174915][ T5872] Bluetooth: hci3: command tx timeout [ 84.226644][ T5870] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 84.436148][ T5870] usb 1-1: media controller created [ 84.467468][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 84.489001][ T3010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.114748][ T3010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.173434][ T5870] DVB: Unable to find symbol mt352_attach() [ 85.215114][ T6004] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.461451][ T5870] DVB: Unable to find symbol nxt6000_attach() [ 85.852009][ T5870] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 86.253523][ T5870] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 86.324802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.540179][ T5870] dvb-usb: schedule remote query interval to 1000 msecs. [ 86.547579][ T5870] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 86.558625][ T5870] dvb-usb: bulk message failed: -22 (7/0) [ 86.867668][ T10] cfg80211: failed to load regulatory.db [ 86.891412][ T5870] dvb-usb: bulk message failed: -22 (7/0) [ 87.027967][ T5870] usb 1-1: USB disconnect, device number 2 [ 87.978104][ T6016] cgroup: No subsys list or none specified [ 88.295534][ T6023] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 88.376144][ T5870] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 89.557796][ T6025] loop0: detected capacity change from 0 to 512 [ 89.570208][ T6025] EXT4-fs (loop0): Test dummy encryption mode enabled [ 89.577012][ T6025] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.590371][ T6025] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 89.816610][ T6025] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.10: bad orphan inode 131083 [ 89.859230][ T6025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.517708][ T5871] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.000554][ T6056] loop4: detected capacity change from 0 to 64 [ 93.000615][ T6051] loop0: detected capacity change from 0 to 2048 [ 93.931555][ T6051] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.052127][ T6064] bridge0: entered promiscuous mode [ 95.052291][ T6064] macvlan2: entered promiscuous mode [ 96.644098][ T6081] ip6tnl1: entered promiscuous mode [ 96.651891][ T6081] ip6tnl1: entered allmulticast mode [ 97.131417][ T6078] mmap: syz.0.18 (6078) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.534364][ T6085] capability: warning: `syz.1.22' uses deprecated v2 capabilities in a way that may be insecure [ 98.621043][ T6092] process 'syz.1.22' launched './file1' with NULL argv: empty string added [ 99.498041][ T6096] loop3: detected capacity change from 0 to 40427 [ 99.587197][ T6096] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 99.595148][ T6096] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 99.630568][ T6096] F2FS-fs (loop3): invalid crc value [ 99.996559][ T89] libceph: connect (1)[c::]:6789 error -101 [ 100.003081][ T89] libceph: mon0 (1)[c::]:6789 connect error [ 100.032815][ T6100] ceph: No mds server is up or the cluster is laggy [ 100.386111][ T6096] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 100.458980][ T6104] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 100.465660][ T6104] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 100.474001][ T6108] vhci_hcd: connection closed [ 100.475114][ T6104] vhci_hcd vhci_hcd.0: Device attached [ 100.508389][ T89] libceph: connect (1)[c::]:6789 error -101 [ 100.535908][ T12] vhci_hcd: stop threads [ 100.592774][ T12] vhci_hcd: release socket [ 100.626404][ T6096] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 100.633573][ T6096] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 100.806598][ T12] vhci_hcd: disconnect device [ 102.522665][ T89] libceph: mon0 (1)[c::]:6789 connect error [ 105.329406][ T6153] loop4: detected capacity change from 0 to 256 [ 105.410485][ T6153] ======================================================= [ 105.410485][ T6153] WARNING: The mand mount option has been deprecated and [ 105.410485][ T6153] and is ignored by this kernel. Remove the mand [ 105.410485][ T6153] option from the mount to silence this warning. [ 105.410485][ T6153] ======================================================= [ 105.446213][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.525084][ T6153] FAT-fs (loop4): count of clusters too big (66845694) [ 105.532141][ T6153] FAT-fs (loop4): Can't find a valid FAT filesystem [ 107.214093][ T6159] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.819419][ T6167] loop1: detected capacity change from 0 to 1024 [ 110.941299][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'. [ 112.023937][ T60] hfsplus: b-tree write err: -5, ino 4 [ 112.254569][ T981] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.246909][ T981] usb 5-1: Using ep0 maxpacket: 16 [ 113.926757][ T6201] 9pnet_virtio: no channels available for device syz [ 114.343834][ T6202] netlink: 'syz.4.41': attribute type 1 has an invalid length. [ 114.351885][ T6202] netlink: 224 bytes leftover after parsing attributes in process `syz.4.41'. [ 114.799438][ T6205] netlink: 'syz.2.45': attribute type 1 has an invalid length. [ 114.807425][ T6205] netlink: 14436 bytes leftover after parsing attributes in process `syz.2.45'. [ 115.160475][ T6203] tipc: Failed to remove unknown binding: 66,1,1/0:186980752/186980754 [ 115.246975][ T6203] tipc: Failed to remove unknown binding: 66,1,1/0:186980752/186980754 [ 115.678526][ T981] usb 5-1: unable to get BOS descriptor or descriptor too short [ 115.709980][ T981] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 115.717901][ T981] usb 5-1: can't read configurations, error -71 [ 117.209095][ T6222] loop3: detected capacity change from 0 to 1024 [ 117.369200][ T30] audit: type=1800 audit(1758662150.873:2): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.50" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 117.424396][ T30] audit: type=1800 audit(1758662150.873:3): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.50" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 119.297923][ T30] audit: type=1804 audit(1758662152.823:4): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.50" name="/newroot/9/file1/file1" dev="loop3" ino=20 res=1 errno=0 [ 121.987856][ T6260] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.112795][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'. [ 122.392978][ T6261] bridge_slave_1: left allmulticast mode [ 122.400554][ T6261] bridge_slave_1: left promiscuous mode [ 122.486405][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.852444][ T6261] bridge_slave_0: left allmulticast mode [ 122.874741][ T6261] bridge_slave_0: left promiscuous mode [ 122.881029][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.300756][ T6294] random: crng reseeded on system resumption [ 127.101318][ T6304] loop3: detected capacity change from 0 to 8 [ 127.130470][ T6304] squashfs image failed sanity check [ 127.254344][ T5953] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 128.184320][ T5953] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.304584][ T6306] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 128.330560][ T5953] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 128.418393][ T5953] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 128.534468][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.594599][ T5954] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 128.600949][ T5953] usb 2-1: config 0 descriptor?? [ 128.987657][ T5953] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 128.994680][ T5953] dvb-usb: bulk message failed: -22 (3/0) [ 129.012810][ T5953] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 129.038794][ T5953] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 129.049689][ T5953] usb 2-1: media controller created [ 129.060603][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.078053][ T5953] dvb-usb: bulk message failed: -22 (6/0) [ 129.090377][ T5953] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 129.103279][ T5953] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 129.105266][ T5954] usb 1-1: Using ep0 maxpacket: 8 [ 129.164820][ T5953] dvb-usb: schedule remote query interval to 150 msecs. [ 129.180958][ T5953] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 129.293113][ T5954] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 129.334389][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 129.342596][ T5954] usb 1-1: Product: syz [ 129.356886][ T5954] usb 1-1: Manufacturer: syz [ 129.368456][ T5954] usb 1-1: SerialNumber: syz [ 129.397205][ T5870] dvb-usb: bulk message failed: -22 (1/0) [ 129.426914][ T5870] dvb-usb: error while querying for an remote control event. [ 129.931536][ T5872] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 129.931687][ T6319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.018780][ T5954] usb 1-1: config 0 descriptor?? [ 130.091476][ T6326] tipc: Started in network mode [ 130.096539][ T6326] tipc: Node identity 5e3abcfa7332, cluster identity 4711 [ 130.104079][ T6326] tipc: Enabled bearer , priority 0 [ 130.113474][ T6326] syzkaller0: entered promiscuous mode [ 130.119104][ T6326] syzkaller0: entered allmulticast mode [ 130.169842][ T6326] tipc: Resetting bearer [ 130.204674][ T6325] tipc: Resetting bearer [ 130.230146][ T6325] tipc: Disabling bearer [ 130.243633][ T5870] dvb-usb: bulk message failed: -22 (1/0) [ 130.250088][ T5870] dvb-usb: error while querying for an remote control event. [ 130.293572][ T5953] usb 2-1: USB disconnect, device number 2 [ 131.081447][ T5953] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 133.166290][ T5954] usb 1-1: USB disconnect, device number 3 [ 133.184191][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.195827][ T6339] veth1_to_bond: entered allmulticast mode [ 133.237343][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'. [ 135.065631][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.107458][ T6339] bond0: (slave bond_slave_1): Releasing backup interface [ 135.152274][ T6355] tipc: Failed to remove unknown binding: 66,1,1/0:2996459269/2996459271 [ 135.767012][ T6358] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 140.225754][ T6394] netlink: 'syz.0.91': attribute type 1 has an invalid length. [ 146.708360][ T6435] loop1: detected capacity change from 0 to 1024 [ 147.123415][ T30] audit: type=1800 audit(1758662180.633:5): pid=6435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.99" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 147.283343][ T30] audit: type=1800 audit(1758662180.633:6): pid=6435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.99" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 147.404694][ T30] audit: type=1804 audit(1758662180.813:7): pid=6435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.99" name="/newroot/20/file1/file1" dev="loop1" ino=20 res=1 errno=0 [ 147.735512][ T6454] loop0: detected capacity change from 0 to 128 [ 147.771922][ T6454] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.996027][ T6454] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 148.902997][ T6454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.103'. [ 148.912423][ T6454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 148.921715][ T6454] netlink: 72 bytes leftover after parsing attributes in process `syz.0.103'. [ 149.063521][ T5871] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.767957][ T6531] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.790401][ T6531] block device autoloading is deprecated and will be removed. [ 155.959303][ T6545] loop0: detected capacity change from 0 to 8 [ 155.970930][ T6545] squashfs image failed sanity check [ 156.964448][ T6547] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 158.529200][ T6567] loop0: detected capacity change from 0 to 64 [ 158.541492][ T6567] hfs: Bad value for 'gid' [ 159.153916][ T6571] loop1: detected capacity change from 0 to 512 [ 160.063310][ T6571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.234404][ T6571] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.270415][ T6583] loop0: detected capacity change from 0 to 16 [ 160.474555][ T6583] erofs (device loop0): unsupported i_format 32 of nid 36 [ 160.474795][ T6584] netlink: 'syz.1.122': attribute type 29 has an invalid length. [ 160.710380][ T6584] netlink: 'syz.1.122': attribute type 29 has an invalid length. [ 161.023510][ T5862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.195127][ T6588] lo speed is unknown, defaulting to 1000 [ 161.201566][ T6588] lo speed is unknown, defaulting to 1000 [ 161.210281][ T6588] lo speed is unknown, defaulting to 1000 [ 161.222496][ T6588] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 161.239453][ T6588] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 161.283534][ T6588] lo speed is unknown, defaulting to 1000 [ 161.291683][ T6588] lo speed is unknown, defaulting to 1000 [ 161.299501][ T6588] lo speed is unknown, defaulting to 1000 [ 161.307821][ T6588] lo speed is unknown, defaulting to 1000 [ 161.316309][ T6588] lo speed is unknown, defaulting to 1000 [ 161.324062][ T6588] lo speed is unknown, defaulting to 1000 [ 161.896346][ T6595] loop0: detected capacity change from 0 to 256 [ 161.937707][ T6595] FAT-fs (loop0): count of clusters too big (66845694) [ 161.944958][ T6595] FAT-fs (loop0): Can't find a valid FAT filesystem [ 169.354542][ T6637] netlink: 'syz.0.140': attribute type 11 has an invalid length. [ 169.373129][ T6637] netlink: 224 bytes leftover after parsing attributes in process `syz.0.140'. [ 170.287862][ T6649] lo speed is unknown, defaulting to 1000 [ 174.904445][ T30] audit: type=1326 audit(1758662208.403:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe524d8eec9 code=0x7ffc0000 [ 175.054346][ T6683] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 175.060898][ T6683] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 175.116790][ T30] audit: type=1326 audit(1758662208.543:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe524d8eec9 code=0x7ffc0000 [ 175.121415][ T6683] vhci_hcd vhci_hcd.0: Device attached [ 175.196275][ T30] audit: type=1326 audit(1758662208.553:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe524d8eec9 code=0x7ffc0000 [ 175.434328][ T5870] vhci_hcd: vhci_device speed not set [ 175.483851][ T30] audit: type=1326 audit(1758662208.553:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe524d8eec9 code=0x7ffc0000 [ 175.566427][ T5870] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 175.815838][ T30] audit: type=1326 audit(1758662208.553:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe524d8eec9 code=0x7ffc0000 [ 175.936606][ T6683] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 176.009938][ T30] audit: type=1326 audit(1758662208.553:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe524d8eec9 code=0x7ffc0000 [ 176.033244][ T30] audit: type=1326 audit(1758662208.553:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe524d8eec9 code=0x7ffc0000 [ 176.048285][ T6688] vhci_hcd: connection reset by peer [ 176.653056][ T30] audit: type=1326 audit(1758662208.553:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe524d8eec9 code=0x7ffc0000 [ 176.849178][ T1100] vhci_hcd: stop threads [ 176.853462][ T1100] vhci_hcd: release socket [ 176.874305][ T30] audit: type=1326 audit(1758662208.553:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe524d8eec9 code=0x7ffc0000 [ 176.908378][ T1100] vhci_hcd: disconnect device [ 176.936418][ T6709] loop3: detected capacity change from 0 to 128 [ 176.949941][ T6709] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 176.983053][ T30] audit: type=1326 audit(1758662208.553:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.4.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe524d8eec9 code=0x7ffc0000 [ 177.676592][ T6709] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.995511][ T6730] overlayfs: missing 'lowerdir' [ 179.872125][ T6735] loop4: detected capacity change from 0 to 1024 [ 179.956637][ T6742] /dev/nullb0: Can't open blockdev [ 181.000736][ T5870] vhci_hcd: vhci_device speed not set [ 184.900623][ T6799] loop3: detected capacity change from 0 to 64 [ 185.984948][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 185.994277][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 190.335236][ T6845] syz_tun: entered allmulticast mode [ 190.805726][ C1] mroute: pending queue full, dropping entries [ 190.969801][ T6845] mroute: pending queue full, dropping entries [ 191.028174][ T6842] syz_tun: left allmulticast mode [ 194.290668][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.891005][ T6916] loop1: detected capacity change from 0 to 1024 [ 198.763013][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 198.763025][ T30] audit: type=1800 audit(1758662232.283:47): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.198" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 198.850205][ T6923] /dev/nullb0: Can't open blockdev [ 199.425590][ T30] audit: type=1800 audit(1758662232.283:48): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.198" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 199.508329][ T30] audit: type=1804 audit(1758662233.033:49): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.198" name="/newroot/41/file1/file1" dev="loop1" ino=20 res=1 errno=0 [ 200.886763][ T6956] loop1: detected capacity change from 0 to 4096 [ 200.920386][ T6956] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 201.525050][ T5879] Bluetooth: hci1: command 0x0406 tx timeout [ 201.531414][ T5879] Bluetooth: hci2: command 0x0406 tx timeout [ 201.548436][ T5881] Bluetooth: hci0: command 0x0406 tx timeout [ 201.554987][ T5883] Bluetooth: hci4: command 0x0406 tx timeout [ 201.561108][ T5866] Bluetooth: hci3: command 0x0406 tx timeout [ 202.476156][ T6980] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 202.772635][ T1166] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 202.812205][ T6985] loop4: detected capacity change from 0 to 512 [ 202.823041][ T5862] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 202.830233][ T5862] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 202.840873][ T5862] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 202.864658][ T1166] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 202.882072][ T6985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.113619][ T6985] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.837281][ T5875] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.975310][ T6999] tipc: Started in network mode [ 203.981558][ T6999] tipc: Node identity ac14140f, cluster identity 4711 [ 203.996219][ T6999] tipc: New replicast peer: 255.255.255.255 [ 204.010371][ T6999] tipc: Enabled bearer , priority 10 [ 204.124053][ T6999] loop1: detected capacity change from 0 to 512 [ 204.345367][ T6999] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 205.140552][ T5953] tipc: Node number set to 2886997007 [ 205.309852][ T7012] loop0: detected capacity change from 0 to 8 [ 205.317524][ T7012] squashfs image failed sanity check [ 205.480027][ T7016] loop1: detected capacity change from 0 to 1024 [ 206.825499][ T30] audit: type=1800 audit(1758662240.313:50): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.215" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 206.951021][ T30] audit: type=1800 audit(1758662240.313:51): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.215" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 206.983399][ T30] audit: type=1804 audit(1758662240.503:52): pid=7016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.215" name="/newroot/45/file1/file1" dev="loop1" ino=20 res=1 errno=0 [ 209.984750][ T7057] loop2: detected capacity change from 0 to 1024 [ 210.684926][ T30] audit: type=1800 audit(1758662244.203:53): pid=7057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.222" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 211.354112][ T7072] loop3: detected capacity change from 0 to 1024 [ 212.010078][ T30] audit: type=1800 audit(1758662245.533:54): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.226" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 212.150325][ T30] audit: type=1800 audit(1758662245.533:55): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.226" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 212.206736][ T7080] loop2: detected capacity change from 0 to 8 [ 212.223794][ T7080] squashfs image failed sanity check [ 212.294816][ T30] audit: type=1804 audit(1758662245.813:56): pid=7078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.226" name="/newroot/43/file1/file1" dev="loop3" ino=20 res=1 errno=0 [ 212.502039][ T7082] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 212.561322][ T7087] loop0: detected capacity change from 0 to 512 [ 212.687371][ T7087] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.230: casefold flag without casefold feature [ 212.774630][ T7087] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.230: couldn't read orphan inode 15 (err -117) [ 212.835789][ T7087] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.211616][ T7099] netlink: 40 bytes leftover after parsing attributes in process `syz.0.230'. [ 213.820394][ T5871] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.900098][ T7100] loop3: detected capacity change from 0 to 1024 [ 213.972137][ T30] audit: type=1800 audit(1758662247.493:57): pid=7100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.232" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 214.078036][ T30] audit: type=1800 audit(1758662247.513:58): pid=7100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.232" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 214.181241][ T30] audit: type=1804 audit(1758662247.623:59): pid=7101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.232" name="/newroot/44/file1/file1" dev="loop3" ino=20 res=1 errno=0 [ 217.499201][ T7130] loop2: detected capacity change from 0 to 1024 [ 217.623047][ T30] audit: type=1800 audit(1758662251.133:60): pid=7130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.237" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 217.716973][ T7138] tipc: Failed to remove unknown binding: 66,1,1/2886997007:177323593/177323595 [ 218.914318][ T5953] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 219.836274][ T5953] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 220.403184][ T5953] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 220.428961][ T5953] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 220.604338][ T5953] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 220.685073][ T5953] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 220.761838][ T5953] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 220.772200][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 221.361454][ T5953] usb 3-1: Product: syz [ 221.366011][ T5953] usb 3-1: Manufacturer: syz [ 221.390295][ T5953] cdc_wdm 3-1:1.0: skipping garbage [ 221.438913][ T5953] cdc_wdm 3-1:1.0: skipping garbage [ 221.475823][ T5953] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 221.507997][ T5953] cdc_wdm 3-1:1.0: Unknown control protocol [ 221.589059][ T43] usb 3-1: USB disconnect, device number 2 [ 222.497004][ T7171] siw: device registration error -23 [ 225.583888][ T7187] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 225.626824][ T7187] macvtap1: entered promiscuous mode [ 225.662686][ T7187] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 228.436251][ T7221] siw: device registration error -23 [ 229.883588][ T7225] loop0: detected capacity change from 0 to 2048 [ 229.891037][ T7225] nilfs2: Bad value for 'errors' [ 231.623581][ T7238] loop1: detected capacity change from 0 to 1024 [ 231.895463][ T30] audit: type=1800 audit(1758662265.393:61): pid=7238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.269" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 231.915755][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.472819][ T30] audit: type=1800 audit(1758662265.393:62): pid=7238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.269" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 232.970025][ T7244] lo speed is unknown, defaulting to 1000 [ 233.535841][ T7260] loop2: detected capacity change from 0 to 8 [ 233.643761][ T7260] SQUASHFS error: lzo decompression failed, data probably corrupt [ 233.651677][ T7260] SQUASHFS error: Failed to read block 0x144: -5 [ 233.659002][ T7260] SQUASHFS error: Unable to read metadata cache entry [142] [ 233.666433][ T7260] SQUASHFS error: Unable to read inode 0x11f [ 233.821364][ T7264] loop1: detected capacity change from 0 to 8 [ 233.912457][ T7264] squashfs image failed sanity check [ 235.228729][ T7274] siw: device registration error -23 [ 238.070890][ T6017] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 238.854317][ T6017] usb 3-1: device descriptor read/64, error -71 [ 239.374366][ T6017] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 240.902251][ T7313] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.285' sets config #-1 [ 242.291253][ T7329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.289'. [ 242.539593][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880551e6c00: rx timeout, send abort [ 243.508090][ T7346] siw: device registration error -23 [ 244.455657][ T7356] loop1: detected capacity change from 0 to 64 [ 250.658547][ T7401] loop0: detected capacity change from 0 to 1024 [ 251.233235][ T30] audit: type=1800 audit(1758662284.753:63): pid=7401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.305" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 251.393335][ T30] audit: type=1800 audit(1758662284.753:64): pid=7401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.305" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 251.889671][ T30] audit: type=1804 audit(1758662285.403:65): pid=7410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.305" name="/newroot/69/file1/file1" dev="loop0" ino=20 res=1 errno=0 [ 255.692305][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.339029][ T5872] Bluetooth: hci2: unexpected event for opcode 0x0c7a [ 256.567366][ T7454] tipc: Started in network mode [ 256.572271][ T7454] tipc: Node identity cee94b31d72a, cluster identity 4711 [ 256.589866][ T7454] tipc: Enabled bearer , priority 0 [ 256.614727][ T7454] syzkaller0: entered promiscuous mode [ 256.638861][ T7454] syzkaller0: entered allmulticast mode [ 256.691611][ T7454] tipc: Resetting bearer [ 256.700972][ T7454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.724597][ T7453] tipc: Resetting bearer [ 256.747521][ T7453] tipc: Disabling bearer [ 260.204411][ T5984] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 260.968395][ T5984] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 261.148693][ T5984] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 261.193946][ T5984] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 261.237343][ T7491] netlink: 'syz.3.327': attribute type 21 has an invalid length. [ 261.245270][ T7491] netlink: 128 bytes leftover after parsing attributes in process `syz.3.327'. [ 261.254372][ T7491] netlink: 'syz.3.327': attribute type 5 has an invalid length. [ 261.262070][ T7491] netlink: 'syz.3.327': attribute type 6 has an invalid length. [ 261.269919][ T7491] netlink: 3 bytes leftover after parsing attributes in process `syz.3.327'. [ 261.662703][ T5984] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 261.694440][ T7474] kvm: kvm [7472]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x3900000000 [ 261.864409][ T5984] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 261.864658][ T7474] kvm: kvm [7472]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3800000000 [ 261.896459][ T5984] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 262.003736][ T7496] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 262.013440][ T7496] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 262.028827][ T7496] overlayfs: failed to get uuid (60/file1, err=-13); falling back to uuid=null. [ 262.108363][ T5984] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 262.422010][ T5984] usb 1-1: Product: syz [ 262.426474][ T5984] usb 1-1: Manufacturer: syz [ 262.461742][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 262.476667][ T5984] usb 1-1: can't set config #1, error -32 [ 262.535871][ T7503] loop3: detected capacity change from 0 to 8 [ 262.640354][ T7503] squashfs image failed sanity check [ 262.665354][ T5984] usb 1-1: USB disconnect, device number 4 [ 262.929755][ T7508] loop2: detected capacity change from 0 to 256 [ 264.967753][ T5872] Bluetooth: hci2: unexpected event for opcode 0x0c7a [ 266.361516][ T7536] siw: device registration error -23 [ 266.528379][ T7538] netlink: 'syz.0.340': attribute type 21 has an invalid length. [ 266.536323][ T7538] netlink: 128 bytes leftover after parsing attributes in process `syz.0.340'. [ 266.546196][ T7538] netlink: 'syz.0.340': attribute type 5 has an invalid length. [ 266.553900][ T7538] netlink: 'syz.0.340': attribute type 6 has an invalid length. [ 266.561640][ T7538] netlink: 3 bytes leftover after parsing attributes in process `syz.0.340'. [ 268.300590][ T7546] loop0: detected capacity change from 0 to 8 [ 268.826221][ T7546] squashfs image failed sanity check [ 271.755888][ T5872] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 271.819474][ T7574] loop1: detected capacity change from 0 to 256 [ 272.185174][ T7574] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 272.198429][ T7576] loop4: detected capacity change from 0 to 512 [ 272.234374][ T7574] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 272.246776][ T7576] EXT4-fs: Ignoring removed orlov option [ 272.252483][ T7576] ext2: Unknown parameter 'obj_role' [ 272.460280][ T7574] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 272.491944][ T7574] exFAT-fs (loop1): failed to load alloc-bitmap [ 272.672849][ T7582] netlink: 384 bytes leftover after parsing attributes in process `syz.4.350'. [ 272.683040][ T7582] netlink: 'syz.4.350': attribute type 2 has an invalid length. [ 273.125285][ T7574] exFAT-fs (loop1): failed to recognize exfat type [ 273.198446][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.352'. [ 273.226033][ T7585] netlink: 'syz.2.351': attribute type 10 has an invalid length. [ 273.272202][ T7584] ipvlan2: entered promiscuous mode [ 273.310790][ T7584] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 273.509855][ T7585] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 273.602863][ T7579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.915237][ T7598] loop4: detected capacity change from 0 to 8 [ 274.017509][ T7598] squashfs image failed sanity check [ 274.025183][ T5984] IPVS: starting estimator thread 0... [ 274.130673][ T7600] IPVS: using max 49 ests per chain, 117600 per kthread [ 276.446390][ T7631] netlink: 'syz.0.361': attribute type 1 has an invalid length. [ 277.016595][ T7644] tipc: Cannot configure node identity twice [ 282.115143][ T7695] netlink: 'syz.1.378': attribute type 1 has an invalid length. [ 282.572536][ T7692] netlink: 44 bytes leftover after parsing attributes in process `syz.0.379'. [ 283.006347][ T5964] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 283.117801][ T7705] netlink: 'syz.1.381': attribute type 21 has an invalid length. [ 283.125854][ T7705] netlink: 128 bytes leftover after parsing attributes in process `syz.1.381'. [ 283.136300][ T7705] netlink: 'syz.1.381': attribute type 5 has an invalid length. [ 283.144010][ T7705] netlink: 'syz.1.381': attribute type 6 has an invalid length. [ 283.151781][ T7705] netlink: 3 bytes leftover after parsing attributes in process `syz.1.381'. [ 283.585315][ T5964] usb 1-1: Using ep0 maxpacket: 8 [ 283.594638][ T5964] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 283.607259][ T5964] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 283.622181][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 283.635167][ T5964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 283.833981][ T5964] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.858859][ T5964] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 284.422204][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.916746][ T7714] loop2: detected capacity change from 0 to 2048 [ 284.933784][ T5964] usb 1-1: Product: syz [ 284.938304][ T5964] usb 1-1: Manufacturer: syz [ 284.964424][ T7714] EXT4-fs: Ignoring removed mblk_io_submit option [ 284.971474][ T5964] usb 1-1: SerialNumber: syz [ 285.588008][ T7717] syz.1.383 (7717) used greatest stack depth: 15320 bytes left [ 285.636963][ T5863] udevd[5863]: incorrect ext4 checksum on /dev/loop2 [ 285.745165][ T5964] usb 1-1: config 0 descriptor?? [ 285.804610][ T5964] usb 1-1: can't set config #0, error -71 [ 285.825309][ T5863] udevd[5863]: incorrect ext4 checksum on /dev/loop2 [ 285.834406][ T5964] usb 1-1: USB disconnect, device number 5 [ 285.856621][ T7714] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 286.204432][ T6017] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 287.288630][ T6017] usb 2-1: device descriptor read/all, error -71 [ 287.744731][ T7745] netlink: 'syz.0.392': attribute type 1 has an invalid length. [ 288.777822][ T6017] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 288.964942][ T6017] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 289.002905][ T6017] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 289.056827][ T6017] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 289.109041][ T6017] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 289.202022][ T6017] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 289.349872][ T6017] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 289.374718][ T6017] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 289.383150][ T6017] usb 2-1: Product: syz [ 289.394760][ T6017] usb 2-1: Manufacturer: syz [ 289.467829][ T6017] cdc_wdm 2-1:1.0: skipping garbage [ 289.473504][ T6017] cdc_wdm 2-1:1.0: skipping garbage [ 289.483514][ T6017] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 289.496562][ T6017] cdc_wdm 2-1:1.0: Unknown control protocol [ 290.000388][ T7766] cgroup: fork rejected by pids controller in /syz2 [ 291.137386][ T7845] netlink: 'syz.2.399': attribute type 1 has an invalid length. [ 291.779450][ T7852] netlink: 'syz.4.400': attribute type 1 has an invalid length. [ 292.341298][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 292.343407][ T5964] usb 2-1: USB disconnect, device number 4 [ 292.348112][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 292.348134][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 293.994296][ T5964] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 294.163944][ T7871] ieee802154 phy0 wpan0: encryption failed: -22 [ 294.196456][ T5964] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 294.215476][ T5964] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 294.240462][ T5964] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 294.271858][ T5964] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 294.309117][ T5964] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 294.346938][ T5964] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 294.374476][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 294.394832][ T5964] usb 2-1: Product: syz [ 294.413308][ T5964] usb 2-1: Manufacturer: syz [ 294.433299][ T5964] cdc_wdm 2-1:1.0: skipping garbage [ 294.464295][ T5964] cdc_wdm 2-1:1.0: skipping garbage [ 294.497958][ T5964] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 294.503890][ T5964] cdc_wdm 2-1:1.0: Unknown control protocol [ 295.171165][ T7882] program syz.2.408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.772773][ T5872] Bluetooth: hci4: unexpected event for opcode 0x0c7a [ 295.783309][ T7873] loop0: detected capacity change from 0 to 40427 [ 295.848304][ T7873] F2FS-fs (loop0): build fault injection rate: 771 [ 295.910645][ T7873] F2FS-fs (loop0): invalid crc value [ 296.368992][ T981] usb 2-1: USB disconnect, device number 5 [ 296.559787][ T7897] loop4: detected capacity change from 0 to 1764 [ 296.626983][ T7873] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 296.860263][ T7901] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 297.297577][ T7897] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 298.352884][ T7917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.260720][ T7926] loop0: detected capacity change from 0 to 32768 [ 300.267743][ T7926] jfs: Unknown parameter '' [ 301.279166][ T7938] Zero length message leads to an empty skb [ 301.694396][ T6017] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 301.883221][ T7939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 301.884504][ T6017] usb 4-1: config 0 has no interfaces? [ 302.047942][ T6017] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 302.057104][ T6017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.842864][ T6017] usb 4-1: config 0 descriptor?? [ 303.306352][ T7954] syz.0.425 uses obsolete (PF_INET,SOCK_PACKET) [ 306.574557][ T5870] usb 4-1: USB disconnect, device number 2 [ 306.687018][ T7962] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 306.696510][ T7962] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 306.711221][ T7962] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 308.400274][ T7990] virtio-fs: tag not found [ 308.432699][ T7990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.434'. [ 310.540454][ T7997] bridge0: port 3(gretap0) entered blocking state [ 310.547052][ T7997] bridge0: port 3(gretap0) entered disabled state [ 310.553638][ T7997] gretap0: entered allmulticast mode [ 310.561608][ T7997] gretap0: entered promiscuous mode [ 310.567556][ T7997] bridge0: port 3(gretap0) entered blocking state [ 310.574089][ T7997] bridge0: port 3(gretap0) entered forwarding state [ 311.473438][ T8035] kvm: pic: non byte read [ 311.604629][ T8035] kvm: pic: non byte read [ 311.645249][ T8035] kvm: pic: non byte read [ 311.649695][ T8035] kvm: pic: non byte read [ 311.654105][ T8035] kvm: pic: non byte read [ 311.663681][ T8035] kvm: pic: non byte read [ 311.670194][ T8035] kvm: pic: non byte read [ 311.678949][ T8035] kvm: pic: non byte read [ 311.715618][ T8035] kvm: pic: non byte read [ 311.789097][ T8035] kvm: pic: non byte read [ 314.718439][ T8069] loop4: detected capacity change from 0 to 8 [ 315.088257][ T8069] squashfs image failed sanity check [ 315.765020][ T8080] delete_channel: no stack [ 316.322521][ T8074] delete_channel: no stack [ 316.996558][ T8089] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.452'. [ 317.109365][ T8091] loop4: detected capacity change from 0 to 1024 [ 317.153171][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.160629][ T8091] EXT4-fs: Ignoring removed bh option [ 317.266796][ T8091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.359730][ T8102] netlink: 312 bytes leftover after parsing attributes in process `syz.1.454'. [ 318.783545][ T5875] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.839483][ T8126] loop0: detected capacity change from 0 to 8 [ 321.050864][ T8126] squashfs image failed sanity check [ 322.354897][ T8139] evm: overlay not supported [ 322.835312][ T8141] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 324.067006][ T8143] loop1: detected capacity change from 0 to 1024 [ 324.103346][ T30] audit: type=1800 audit(1758662357.623:66): pid=8143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.466" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 324.172840][ T30] audit: type=1800 audit(1758662357.663:67): pid=8143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.466" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 324.505437][ T30] audit: type=1804 audit(1758662358.033:68): pid=8143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.466" name="/newroot/97/file1/file1" dev="loop1" ino=20 res=1 errno=0 [ 324.975753][ T8170] ptrace attach of "./syz-executor exec"[5861] was attempted by " [ 326.370129][ T8178] loop1: detected capacity change from 0 to 2048 [ 327.274939][ T8178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.319852][ T5862] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.237570][ T8204] loop4: detected capacity change from 0 to 32768 [ 332.366559][ T8223] netlink: 'syz.3.481': attribute type 1 has an invalid length. [ 333.252552][ T8225] sctp: [Deprecated]: syz.4.482 (pid 8225) Use of struct sctp_assoc_value in delayed_ack socket option. [ 333.252552][ T8225] Use struct sctp_sack_info instead [ 333.454356][ T8225] 9pnet_fd: Insufficient options for proto=fd [ 334.176750][ T8241] loop3: detected capacity change from 0 to 64 [ 339.921008][ T8268] loop0: detected capacity change from 0 to 2048 [ 347.909852][ T30] audit: type=1804 audit(1758662381.413:69): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.508" name="/newroot/97/file0" dev="tmpfs" ino=555 res=1 errno=0 [ 348.955425][ T8333] loop1: detected capacity change from 0 to 4096 [ 349.923066][ T8353] Bluetooth: MGMT ver 1.23 [ 349.975193][ T8353] netlink: 755 bytes leftover after parsing attributes in process `syz.0.515'. [ 350.079446][ T8355] ptrace attach of "./syz-executor exec"[5862] was attempted by ""[8355] [ 353.145948][ T8379] loop3: detected capacity change from 0 to 256 [ 353.572504][ T8379] FAT-fs (loop3): Directory bread(block 64) failed [ 353.637328][ T8379] FAT-fs (loop3): Directory bread(block 65) failed [ 353.672682][ T8382] netlink: 'syz.0.521': attribute type 1 has an invalid length. [ 353.689452][ T8379] FAT-fs (loop3): Directory bread(block 66) failed [ 353.841972][ T8379] FAT-fs (loop3): Directory bread(block 67) failed [ 353.865182][ T8379] FAT-fs (loop3): Directory bread(block 68) failed [ 354.271987][ T8379] FAT-fs (loop3): Directory bread(block 69) failed [ 354.295216][ T8379] FAT-fs (loop3): Directory bread(block 70) failed [ 354.306401][ T8379] FAT-fs (loop3): Directory bread(block 71) failed [ 354.313752][ T8379] FAT-fs (loop3): Directory bread(block 72) failed [ 354.335904][ T8379] FAT-fs (loop3): Directory bread(block 73) failed [ 355.391214][ T8403] loop3: detected capacity change from 0 to 512 [ 355.398270][ T8403] journal_path: Non-blockdev passed as './bus' [ 355.413594][ T8403] EXT4-fs: error: could not find journal device path [ 356.393956][ T8408] loop2: detected capacity change from 0 to 64 [ 356.418161][ T8408] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 356.997075][ T8418] netlink: 'syz.3.531': attribute type 1 has an invalid length. [ 357.844326][ T8419] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 358.020624][ T8419] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 359.454300][ T8417] gretap1: entered promiscuous mode [ 359.654918][ T8417] bond1: (slave gretap1): making interface the new active one [ 359.718389][ T8417] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 359.806220][ T8418] macvlan3: entered promiscuous mode [ 359.811589][ T8418] macvlan3: entered allmulticast mode [ 359.823006][ T8418] bond1: entered promiscuous mode [ 359.829251][ T8418] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 359.853870][ T8418] bond1: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 359.913003][ T8418] bond1: left promiscuous mode [ 360.144077][ T8449] loop2: detected capacity change from 0 to 64 [ 360.707684][ T8451] tipc: Started in network mode [ 360.712571][ T8451] tipc: Node identity c2236945319a, cluster identity 4711 [ 360.720108][ T8451] tipc: Enabled bearer , priority 0 [ 360.739654][ T8451] syzkaller0: entered promiscuous mode [ 360.754229][ T8451] syzkaller0: entered allmulticast mode [ 360.795898][ T8451] tipc: Resetting bearer [ 360.807790][ T8450] tipc: Resetting bearer [ 360.825622][ T8450] tipc: Disabling bearer [ 362.055301][ T8462] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 362.055301][ T8462] program syz.0.541 not setting count and/or reply_len properly [ 365.654685][ T8480] loop1: detected capacity change from 0 to 16 [ 367.929162][ T8480] erofs: Unexpected value for 'user_xattr' [ 368.549014][ T8483] loop0: detected capacity change from 0 to 1024 [ 368.763790][ T30] audit: type=1800 audit(1758662402.283:70): pid=8483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.548" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 368.838985][ T8495] netlink: 'syz.1.552': attribute type 3 has an invalid length. [ 368.954063][ T8495] loop1: detected capacity change from 0 to 1764 [ 368.968015][ T8495] iso9660: Bad value for 'uid' [ 368.972849][ T8495] iso9660: Bad value for 'uid' [ 369.039183][ T8495] loop1: detected capacity change from 0 to 128 [ 369.298485][ T8486] virtio-fs: tag not found [ 369.319939][ T30] audit: type=1800 audit(1758662402.283:71): pid=8494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.548" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 369.345065][ T8493] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 369.351598][ T8493] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 369.359900][ T8493] vhci_hcd vhci_hcd.0: Device attached [ 369.385680][ T8486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.549'. [ 369.421779][ T30] audit: type=1804 audit(1758662402.943:72): pid=8483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.548" name="/newroot/118/file1/file1" dev="loop0" ino=20 res=1 errno=0 [ 369.473285][ T8498] vhci_hcd: connection closed [ 369.493498][ T1087] vhci_hcd: stop threads [ 369.549135][ T1087] vhci_hcd: release socket [ 369.721677][ T1087] vhci_hcd: disconnect device [ 374.699375][ T89] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 375.357859][ T89] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 375.363888][ T8562] tipc: Enabled bearer , priority 0 [ 375.404506][ T8562] syzkaller0: entered promiscuous mode [ 375.410354][ T8562] syzkaller0: entered allmulticast mode [ 375.786320][ T89] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 375.797405][ T89] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 375.806482][ T89] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 375.817498][ T89] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 375.848384][ T89] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 375.866369][ T8562] tipc: Resetting bearer [ 375.882219][ T89] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 375.895290][ T89] usb 4-1: Product: syz [ 375.899757][ T8561] tipc: Resetting bearer [ 375.906857][ T89] usb 4-1: Manufacturer: syz [ 375.958350][ T89] cdc_wdm 4-1:1.0: skipping garbage [ 375.983065][ T89] cdc_wdm 4-1:1.0: skipping garbage [ 375.991655][ T8561] tipc: Disabling bearer [ 376.010299][ T89] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 376.021337][ T89] cdc_wdm 4-1:1.0: Unknown control protocol [ 376.477014][ T8573] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 378.573798][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.831663][ T8596] loop4: detected capacity change from 0 to 128 [ 378.846002][ T8596] adfs: Bad value for 'uid' [ 378.850596][ T8596] adfs: Bad value for 'uid' [ 379.241450][ T8595] loop2: detected capacity change from 0 to 1024 [ 379.376175][ T8596] loop4: detected capacity change from 0 to 128 [ 379.447568][ T8596] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 379.460620][ T8596] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 379.522043][ T5984] usb 4-1: USB disconnect, device number 3 [ 379.532133][ T30] audit: type=1800 audit(1758662412.973:73): pid=8595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.575" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 379.780982][ T30] audit: type=1800 audit(1758662413.053:74): pid=8595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.575" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 380.015769][ T8608] /dev/nullb0: Can't open blockdev [ 380.256334][ T30] audit: type=1804 audit(1758662413.433:75): pid=8595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.575" name="/newroot/114/file1/file1" dev="loop2" ino=20 res=1 errno=0 [ 380.897107][ T8613] loop3: detected capacity change from 0 to 128 [ 381.287906][ T8622] warning: `syz.3.579' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 381.314005][ T5872] Bluetooth: hci4: unexpected event for opcode 0x0c7a [ 381.692741][ T8612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.048796][ T8625] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 382.661420][ T8630] loop4: detected capacity change from 0 to 1024 [ 382.786881][ T30] audit: type=1800 audit(1758662416.283:76): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.583" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 383.116428][ T30] audit: type=1800 audit(1758662416.293:77): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.583" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 383.555625][ T30] audit: type=1804 audit(1758662417.083:78): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.583" name="/newroot/112/file1/file1" dev="loop4" ino=20 res=1 errno=0 [ 384.903309][ T8647] loop1: detected capacity change from 0 to 1024 [ 385.239791][ T8652] futex_wake_op: syz.4.590 tries to shift op by 32; fix this program [ 385.426004][ T30] audit: type=1800 audit(1758662418.923:79): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.588" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 385.754530][ T5984] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 385.985706][ T30] audit: type=1800 audit(1758662418.923:80): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.588" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 386.304598][ T5984] usb 5-1: Using ep0 maxpacket: 16 [ 386.311819][ T5984] usb 5-1: config 4 has an invalid interface number: 9 but max is 0 [ 386.324185][ T5984] usb 5-1: config 4 has no interface number 0 [ 386.330309][ T5984] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 386.343634][ T5984] usb 5-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 386.354449][ T5984] usb 5-1: config 4 interface 9 has no altsetting 0 [ 386.446028][ T5984] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 386.952165][ T5984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.049981][ T5984] usb 5-1: Product: syz [ 387.055822][ T5984] usb 5-1: Manufacturer: syz [ 387.061257][ T5984] usb 5-1: SerialNumber: syz [ 387.092960][ T8652] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 387.255400][ T8652] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 387.298043][ T5984] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 388.149177][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.590'. [ 388.380124][ T12] usb 5-1: Failed to submit usb control message: -110 [ 388.885539][ T12] usb 5-1: unable to send the bmi data to the device: -110 [ 388.940923][ T12] usb 5-1: unable to get target info from device [ 388.958100][ T12] usb 5-1: could not get target info (-110) [ 388.971020][ T12] usb 5-1: could not probe fw (-110) [ 390.134550][ T43] usb 5-1: USB disconnect, device number 4 [ 391.157698][ T8708] loop4: detected capacity change from 0 to 1024 [ 391.427514][ T30] audit: type=1800 audit(1758662424.943:81): pid=8708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.603" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 393.715533][ T8724] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 394.621550][ T8727] tipc: Enabled bearer , priority 0 [ 395.290406][ T8732] syzkaller0: entered promiscuous mode [ 395.404627][ T8732] syzkaller0: entered allmulticast mode [ 395.490713][ T8727] tipc: Resetting bearer [ 395.651745][ T8726] tipc: Resetting bearer [ 395.934319][ T89] tipc: Node number set to 4089014597 [ 395.984720][ T8726] tipc: Disabling bearer [ 396.901752][ T8748] loop1: detected capacity change from 0 to 1024 [ 397.654411][ T30] audit: type=1800 audit(1758662431.143:82): pid=8748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.614" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 397.784496][ T30] audit: type=1800 audit(1758662431.293:83): pid=8754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.614" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 397.846677][ T30] audit: type=1804 audit(1758662431.353:84): pid=8748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.614" name="/newroot/126/file1/file1" dev="loop1" ino=20 res=1 errno=0 [ 397.914332][ T8759] loop4: detected capacity change from 0 to 1024 [ 398.172877][ T30] audit: type=1800 audit(1758662431.693:85): pid=8759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.616" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 399.434267][ T8777] netlink: 'syz.3.619': attribute type 16 has an invalid length. [ 401.390598][ T8789] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 401.396676][ T8789] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 401.442862][ T8789] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 401.448838][ T8789] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 401.552643][ T8789] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 401.558603][ T8789] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 401.747471][ T8789] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 401.753392][ T8789] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 401.847293][ T8789] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 401.853224][ T8789] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 403.568526][ T981] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 403.818104][ T981] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 404.774296][ T981] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 404.823948][ T981] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 404.836953][ T981] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 404.954952][ T981] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 405.011738][ T981] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 405.023003][ T981] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 405.041381][ T981] usb 4-1: Product: syz [ 405.054454][ T981] usb 4-1: Manufacturer: syz [ 405.837765][ T981] cdc_wdm 4-1:1.0: skipping garbage [ 405.843002][ T981] cdc_wdm 4-1:1.0: skipping garbage [ 406.171672][ T981] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 406.185461][ T981] cdc_wdm 4-1:1.0: Unknown control protocol [ 406.258567][ T981] usb 4-1: USB disconnect, device number 4 [ 406.554678][ T5870] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 406.975012][ T5870] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 407.115099][ T5870] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 407.132904][ T5870] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 407.142357][ T5870] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 407.156763][ T5870] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 407.232340][ T5870] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 407.262035][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 407.285793][ T5870] usb 1-1: Product: syz [ 407.289985][ T5870] usb 1-1: Manufacturer: syz [ 407.395581][ T5870] cdc_wdm 1-1:1.0: skipping garbage [ 408.354070][ T5870] cdc_wdm 1-1:1.0: skipping garbage [ 408.361426][ T5870] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 408.367579][ T5870] cdc_wdm 1-1:1.0: Unknown control protocol [ 408.603071][ T8850] overlayfs: bad index found (index=index/00fb2100017a039157054f4a19a25bd060210e89a3f5f9ba22d302000000000000, ftype=2000, origin ftype=a000). [ 410.804231][ T981] usb 1-1: USB disconnect, device number 6 [ 411.089956][ T30] audit: type=1326 audit(1758662444.593:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d31f8eec9 code=0x7ffc0000 [ 411.159239][ T8887] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 411.162226][ T30] audit: type=1326 audit(1758662444.593:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d31f8eec9 code=0x7ffc0000 [ 411.165797][ T8887] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 411.248470][ T8885] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 411.255017][ T8885] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 411.293412][ T8887] vhci_hcd vhci_hcd.0: Device attached [ 411.339857][ T8895] loop0: detected capacity change from 0 to 512 [ 411.350512][ T30] audit: type=1326 audit(1758662444.603:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d31f8eec9 code=0x7ffc0000 [ 411.407426][ T8887] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 411.413947][ T8887] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 411.444315][ T30] audit: type=1326 audit(1758662444.603:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d31f8eec9 code=0x7ffc0000 [ 411.467835][ T30] audit: type=1326 audit(1758662444.603:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d31f8eec9 code=0x7ffc0000 [ 411.468168][ T8895] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #17: comm syz.0.643: iget: bogus i_mode (0) [ 411.490646][ T30] audit: type=1326 audit(1758662444.603:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d31f8eec9 code=0x7ffc0000 [ 411.524237][ T5870] usb 35-2: new low-speed USB device number 2 using vhci_hcd [ 411.531879][ T30] audit: type=1326 audit(1758662444.603:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d31f8eec9 code=0x7ffc0000 [ 411.550559][ T8885] vhci_hcd vhci_hcd.0: Device attached [ 411.554579][ T30] audit: type=1326 audit(1758662444.603:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d31f8eec9 code=0x7ffc0000 [ 411.581792][ T30] audit: type=1326 audit(1758662444.603:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9d31f90e1a code=0x7ffc0000 [ 411.607940][ T8895] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.643: couldn't read orphan inode 17 (err -117) [ 411.614787][ T8887] vhci_hcd vhci_hcd.0: Device attached [ 411.682803][ T8895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.698760][ T8901] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(12) [ 411.705404][ T8901] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 411.737275][ T30] audit: type=1326 audit(1758662444.613:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8883 comm="syz.1.642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9d31f8d710 code=0x7ffc0000 [ 411.804364][ T8901] vhci_hcd vhci_hcd.0: Device attached [ 411.824194][ T8904] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 411.830821][ T8904] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 412.054084][ T8904] vhci_hcd vhci_hcd.0: Device attached [ 412.126013][ T8902] vhci_hcd: connection closed [ 412.126232][ T8890] vhci_hcd: connection reset by peer [ 412.126238][ T8897] vhci_hcd: connection closed [ 412.138078][ T6033] vhci_hcd: stop threads [ 412.148234][ T8889] vhci_hcd: connection closed [ 412.204155][ T6033] vhci_hcd: release socket [ 412.214402][ T5871] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.233666][ T6033] vhci_hcd: disconnect device [ 412.239896][ T8906] vhci_hcd: connection closed [ 412.249395][ T6033] vhci_hcd: stop threads [ 412.264005][ T6033] vhci_hcd: release socket [ 412.286169][ T6033] vhci_hcd: disconnect device [ 412.297097][ T6033] vhci_hcd: stop threads [ 412.303587][ T6033] vhci_hcd: release socket [ 412.322602][ T6033] vhci_hcd: disconnect device [ 412.337797][ T6033] vhci_hcd: stop threads [ 412.348832][ T6033] vhci_hcd: release socket [ 412.365005][ T6033] vhci_hcd: disconnect device [ 412.375065][ T6033] vhci_hcd: stop threads [ 412.383832][ T6033] vhci_hcd: release socket [ 412.434425][ T6033] vhci_hcd: disconnect device [ 415.057803][ T8940] loop1: detected capacity change from 0 to 1024 [ 416.247737][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 416.247755][ T30] audit: type=1804 audit(1758662449.773:126): pid=8952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.649" name="/newroot/134/file1/file1" dev="loop1" ino=20 res=1 errno=0 [ 416.674974][ T5870] vhci_hcd: vhci_device speed not set [ 416.680616][ T30] audit: type=1800 audit(1758662449.823:127): pid=8952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.649" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 417.110788][ T8968] capability: warning: `syz.1.653' uses 32-bit capabilities (legacy support in use) [ 418.180818][ T8977] loop1: detected capacity change from 0 to 16 [ 418.205261][ T8977] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 418.872028][ T8980] BUG: sleeping function called from invalid context at fs/inode.c:1928 [ 418.881354][ T8980] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 8980, name: syz.4.655 [ 418.890880][ T8980] preempt_count: 1, expected: 0 [ 418.896222][ T8980] RCU nest depth: 0, expected: 0 [ 418.901174][ T8980] 2 locks held by syz.4.655/8980: [ 418.906693][ T8980] #0: ffff888052ca00e0 (&type->s_umount_key#67){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 418.917422][ T8980] #1: ffff888052ca0998 (&s->s_inode_list_lock){+.+.}-{3:3}, at: hook_sb_delete+0xae/0xbd0 [ 418.927932][ T8980] Preemption disabled at: [ 418.927946][ T8980] [<0000000000000000>] 0x0 [ 418.937439][ T8980] CPU: 0 UID: 0 PID: 8980 Comm: syz.4.655 Not tainted syzkaller #0 PREEMPT(full) [ 418.937465][ T8980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 418.937487][ T8980] Call Trace: [ 418.937495][ T8980] [ 418.937504][ T8980] dump_stack_lvl+0x189/0x250 [ 418.937539][ T8980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.937562][ T8980] ? __pfx__printk+0x10/0x10 [ 418.937591][ T8980] ? print_lock_name+0xde/0x100 [ 418.937622][ T8980] __might_resched+0x495/0x610 [ 418.937659][ T8980] ? __pfx___might_resched+0x10/0x10 [ 418.937687][ T8980] ? __lock_acquire+0xab9/0xd20 [ 418.937732][ T8980] iput+0x2b/0xc50 [ 418.937757][ T8980] ? hook_sb_delete+0x1a8/0xbd0 [ 418.937788][ T8980] hook_sb_delete+0x6b5/0xbd0 [ 418.937813][ T8980] ? hook_sb_delete+0x1a8/0xbd0 [ 418.937845][ T8980] ? __pfx_hook_sb_delete+0x10/0x10 [ 418.937871][ T8980] ? __pfx_fsnotify_sb_delete+0x10/0x10 [ 418.937892][ T8980] ? evict_inodes+0x684/0x6d0 [ 418.937916][ T8980] ? __pfx_evict_inodes+0x10/0x10 [ 418.937945][ T8980] security_sb_delete+0x80/0x150 [ 418.937973][ T8980] generic_shutdown_super+0xaa/0x2c0 [ 418.938006][ T8980] kill_litter_super+0x76/0xb0 [ 418.938027][ T8980] deactivate_locked_super+0xbc/0x130 [ 418.938058][ T8980] cleanup_mnt+0x425/0x4c0 [ 418.938084][ T8980] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.938114][ T8980] task_work_run+0x1d4/0x260 [ 418.938142][ T8980] ? __pfx_task_work_run+0x10/0x10 [ 418.938164][ T8980] ? __x64_sys_umount+0x122/0x160 [ 418.938194][ T8980] ? exit_to_user_mode_loop+0x40/0x130 [ 418.938225][ T8980] exit_to_user_mode_loop+0xe9/0x130 [ 418.938252][ T8980] do_syscall_64+0x2bd/0xfa0 [ 418.938277][ T8980] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.938303][ T8980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.938323][ T8980] ? clear_bhb_loop+0x60/0xb0 [ 418.938348][ T8980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.938367][ T8980] RIP: 0033:0x7fe524d8eec9 [ 418.938384][ T8980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.938400][ T8980] RSP: 002b:00007fe525bcb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 418.938419][ T8980] RAX: 0000000000000000 RBX: 00007fe524fe5fa0 RCX: 00007fe524d8eec9 [ 418.938432][ T8980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 418.938444][ T8980] RBP: 00007fe524e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 418.938455][ T8980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.938466][ T8980] R13: 00007fe524fe6038 R14: 00007fe524fe5fa0 R15: 00007fff30490e28 [ 418.938498][ T8980] [ 419.237694][ T5953] usb usb36-port1: attempt power cycle [ 420.051450][ T5953] usb usb36-port1: unable to enumerate USB device