last executing test programs: 13m14.966179453s ago: executing program 3 (id=3193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xf, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x64, r3, 0x1, 0x170bd2b, 0x60, {0x3}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x355c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x64}, 0x1, 0x300}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000411) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0x0) listen(r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r6, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x2e, &(0x7f0000000000)=0x21ea, 0x4) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}, 0x2100}], 0x414, 0x406, 0x0) openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000080)={0x26000000, 0xd000000}) 13m14.093444802s ago: executing program 3 (id=3197): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$panthor(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffdffffc, 0xd2, 0x7d, 0x0, 0xc, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x7b6e, 0x100009, 0x0, 0xa, 0x80000006, 0x5561}, 0x0, 0x0) 13m13.201545155s ago: executing program 3 (id=3202): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='m'}) syz_clone3(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 13m12.280483823s ago: executing program 3 (id=3210): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffd, 0xd1, 0x0, 0x0, @multicast2, @broadcast}}}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="821d0216e5b9e94733950d1d6fc7", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x10507e, 0xa6) io_setup(0x79, &(0x7f0000000600)=0x0) r4 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {0x80000}, 0x0, 0x4000}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x21) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000180)=ANY=[@ANYBLOB="0004000000000000ff"]) io_submit(r3, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffffffffffdef, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r2}]) 13m12.032500794s ago: executing program 3 (id=3212): socket$packet(0x11, 0xa, 0x300) r0 = socket(0x1e, 0x4, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="e6ba65ebdc0c417bd22114ebad3401b1d5d219103ddbd5b127318fb233bf082fde482e640b3c91c019571645656da5627b3619073b3d3e1c6699c12901c34c216c7f3c9118f31c1896bb0ab54d5337ea0682a48f712fef5c4264ecbb8c25a4bc6d9fc1c04a30099f7dbe12d9f64bf175fe592fb45bbc200f497b6b52e569daa6b82ef9cb9ec293a32b76e7783584f10205a79b4959709ac4b994790020763cd67b6f3c36618b5d769ad430b8cd50284878fad91c8046c566110e803c074d0ae567f39171726a4d0c7031d9c7579908688c36be72969d49528ab17cd1ec365eb35e3cc4fbe06c800fc02711ae971fb1", 0xef}, {&(0x7f00000002c0)="a91adc3429eac11168baf3b6c28ea84628f1551dcd7b3d59e97e17c5387dc53f66720d686748192a7ccb27b502f36a9a320fb0ef63709d08046f8218d57e5a00ac82dabd84b952205d47f604a64b7dfc6dd8c29669749c93f2fde602553f7ea384bdd1", 0x63}], 0x2}, 0x20000015) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1, 0x20}]}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) symlinkat(&(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', r2, &(0x7f0000000400)='./cgroup.cpu/cgroup.procs\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendfile(r5, r5, 0x0, 0x1002000ff) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaffffaaaa1bffffffffffff88a800008100380086dd63cec919001021fffc010000000000000000000000000001fe8000000000000000000000000000bb4e214e2404d19078306c83ef02336245"], 0x0) 13m10.827237518s ago: executing program 3 (id=3219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xf, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x64, r3, 0x1, 0x170bd2b, 0x60, {0x3}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x355c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x64}, 0x1, 0x300}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000411) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0x0) listen(r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r6, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x2e, &(0x7f0000000000)=0x21ea, 0x4) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}, 0x2100}], 0x414, 0x406, 0x0) openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000080)={0x26000000, 0xd000000}) 13m10.74506504s ago: executing program 32 (id=3219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xf, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x64, r3, 0x1, 0x170bd2b, 0x60, {0x3}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x355c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x64}, 0x1, 0x300}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000411) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0x0) listen(r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r6, 0x1) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x2e, &(0x7f0000000000)=0x21ea, 0x4) recvmmsg(r6, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}, 0x2100}], 0x414, 0x406, 0x0) openat$fuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000080)={0x26000000, 0xd000000}) 11.609294823s ago: executing program 4 (id=6745): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000004500)={0x2020}, 0xfffffe0c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d00)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x14c, 0x1d8, 0x1d8, 0x14c, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x98, 0xb8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x9, 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @empty, 0xffffffff, 0xffffff00, 'veth0_to_bridge\x00', 'caif0\x00', {}, {}, 0x5c, 0x1, 0x6c}, 0x9400, 0x70, 0x94, 0x94}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x23c) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000010000000100000a20000000000a050000000000000000000100fffc0900010073797a30000000002c000000030a010200000000000000000100fffd0900010073797a30000000000900030073797a310000000060000000060a010400000000000000000100000008000b400000000038000480340001800a0001006d6174636800000024000280080003000000000008000240000000000e000100636f6e6e6c6162656c0000000900010073797a30"], 0xd4}}, 0x0) 10.399298675s ago: executing program 4 (id=6747): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dca30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec907000000ba5ae65e31f00e641832d29ed658b91f349b80e830fa29fc891b8b0d2de59d006ce210a0351b6bbd06c77c9aa67b5d7287fc1bfa1d0bf035ccdd4b20d7f95b5c77afde046b146ce8b395126f00000000000000000000aa7c93213bc6ef4da9e28ef7", 0x135, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x42583) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYRES64=r6, @ANYRES64=r1, @ANYRES32=0xee00, @ANYBLOB="ff01"], 0x10c}, 0x1, 0x0, 0x0, 0x4000009}, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x1}, 0x6) 9.415405268s ago: executing program 4 (id=6751): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a380)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xffffffffffeffff5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x18d001, 0x20) ioctl$OCFS2_IOC_RESVSP(r1, 0x402c5828, 0x0) 9.096563345s ago: executing program 1 (id=6752): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, &(0x7f0000001780)="6ac2550eed22f88f23a9da26467024f76c49d045234de8bfb73cf0bfe50b9c91146e7448898ccf9e23e6f18501c97e24edc0bb5238a13a97e132f8a2e1ff5746e7943f484053248657cc3b5eda0605cfa3bb1cf018a2d81c66da345b6ff9ef54ca7d9538f14e920b759ba86f6a5441e9e308d356c5e20d70e061", &(0x7f0000001640)=""/96, 0x4}, 0x69) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0x89fd, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth0_to_bridge\x00'}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = socket(0x2, 0xdf31b01d9a15c7e2, 0x400) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000c5773e60ec735eab360cb460c517f52398c9d256aa2dc537cab6a22ebdec54bf288a3122cb22c2b6d0e3ed1830e2410499798dc83e89cd4eb82e392935ea99b8b7581d4a", @ANYRESHEX=r0, @ANYRESDEC=r3], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xe8}}, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000000)='@+]\x00', &(0x7f00000000c0)="86", 0x1) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r4], 0x14}}, 0x0) setrlimit(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 9.092569857s ago: executing program 2 (id=6753): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$OCFS2_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000000)={0x0, 0x2, 0x9, 0xa4a5, 0x3b176eb, 0xf3}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000195000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="1100000000000000", @ANYRES32=r4, @ANYBLOB, @ANYRES32, @ANYRES8=0x0, @ANYRES32=r2], 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) 8.778591155s ago: executing program 2 (id=6755): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1fe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x20000000) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getpid() mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c7734c0", 0xc8) 7.093787602s ago: executing program 4 (id=6756): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1fe}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000000) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d28", 0x96) 5.334289063s ago: executing program 1 (id=6757): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1fe}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000000) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba", 0x64) 4.498882269s ago: executing program 0 (id=6759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 4.330411602s ago: executing program 2 (id=6760): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, &(0x7f0000001780)="6ac2550eed22f88f23a9da26467024f76c49d045234de8bfb73cf0bfe50b9c91146e7448898ccf9e23e6f18501c97e24edc0bb5238a13a97e132f8a2e1ff5746e7943f484053248657cc3b5eda0605cfa3bb1cf018a2d81c66da345b6ff9ef54ca7d9538f14e920b759ba86f6a5441e9e308d356c5e20d70e061", &(0x7f0000001640)=""/96, 0x4}, 0x69) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0x89fd, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth0_to_bridge\x00'}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = socket(0x2, 0xdf31b01d9a15c7e2, 0x400) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000c5773e60ec735eab360cb460c517f52398c9d256aa2dc537cab6a22ebdec54bf288a3122cb22c2b6d0e3ed1830e2410499798dc83e89cd4eb82e392935ea99b8b7581d4a", @ANYRESHEX=r0, @ANYRESDEC=r3], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xe8}}, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000000)='@+]\x00', &(0x7f00000000c0)="86", 0x1) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r4], 0x14}}, 0x0) setrlimit(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 4.299983651s ago: executing program 0 (id=6761): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz1\x00', {0x0, 0xfffd, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0xa, 0x0, 0x1, 0x0, 0x0, 0xf5b1, 0xd6, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xffffffff, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x3b, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0xa], [0x3, 0xfffff41a, 0xaed, 0x0, 0x4, 0x7, 0x2000000, 0xedc0, 0xfffffffc, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x3, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x500, 0xfffffffd, 0xfffffffd, 0x4, 0x5, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffffb86], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0xfffffff8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x100000, 0x2, 0xfffffffc, 0x0, 0xffffffff, 0xfffffffd, 0x7f631ab5, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x8c68, 0x6, 0x0, 0x9, 0x200, 0x0, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x2], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x40000, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x54c, 0xffffffff, 0x0, 0x0, 0xce1d, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xc4e, 0x0, 0xea, 0x0, 0xffffffff, 0x0, 0x8000000, 0x4, 0x7f, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x8000, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x17, 0x300, 0x70bd25, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x20000010) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x2c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 4.019070597s ago: executing program 0 (id=6762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='md0\n\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r2, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000010000000000000000000000000000000000000000000000000000000201000000000100") ioctl(r2, 0x40140921, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3', @ANYRES16, @ANYRESDEC=r1, @ANYRES32=r0]) chdir(&(0x7f00000002c0)='./sys/module/md_mod/parameters/new_array\x00') creat(&(0x7f0000000340)='./sys/module/md_mod/parameters/new_array\x00', 0x150) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000900, 0x0, &(0x7f0000000440)) ioctl(r2, 0x40140921, 0x0) ioctl(r2, 0x400c0930, &(0x7f0000000500)='\x00'/12) ioctl(r2, 0x40140921, &(0x7f0000000440)="020000000100000002000000ffffffff00000000") r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) close(r3) pwrite64(r2, &(0x7f0000001000), 0x1000, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) 3.570147033s ago: executing program 1 (id=6763): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f0000006400), 0x0, &(0x7f0000000980)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e2d7ae6a21d056c2c51a416a76b1a03dc55ea62d43c809e0ed6e56162fdab317afd5c34d614367e4425bb9a97e38b8beb840200549eed5aaa86dbe646fc95b4b88e2afb55ae6f1229bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dca30a47d9ae02000000e2b855845f39806305f56d918cc5b4023fdbe9cae4147c84583ec907000000ba5ae65e31f00e641832d29ed658b91f349b80e830fa29fc891b8b0d2de59d006ce210a0351b6bbd06c77c9aa67b5d7287fc1bfa1d0bf035ccdd4b20d7f95b5c77afde046b146ce8b395126f00000000000000000000aa7c93213bc6ef4da9e28ef7", 0x135, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x42583) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYRES64=r6, @ANYRES64=r1, @ANYRES32=0xee00, @ANYBLOB="ff01"], 0x10c}, 0x1, 0x0, 0x0, 0x4000009}, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x1}, 0x6) 3.252812927s ago: executing program 4 (id=6764): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1fe}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000000) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000700), 0x0) 2.788499588s ago: executing program 0 (id=6765): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1fe}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000000) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5", 0xaf) 2.668086582s ago: executing program 1 (id=6766): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$OCFS2_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000000)={0x0, 0x2, 0x9, 0xa4a5, 0x3b176eb, 0xf3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000195000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) epoll_create1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) 2.361693414s ago: executing program 1 (id=6767): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, &(0x7f0000001780)="6ac2550eed22f88f23a9da26467024f76c49d045234de8bfb73cf0bfe50b9c91146e7448898ccf9e23e6f18501c97e24edc0bb5238a13a97e132f8a2e1ff5746e7943f484053248657cc3b5eda0605cfa3bb1cf018a2d81c66da345b6ff9ef54ca7d9538f14e920b759ba86f6a5441e9e308d356c5e20d70e061", &(0x7f0000001640)=""/96, 0x4}, 0x69) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0x89fd, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth0_to_bridge\x00'}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r2 = socket(0x2, 0xdf31b01d9a15c7e2, 0x400) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000c5773e60ec735eab360cb460c517f52398c9d256aa2dc537cab6a22ebdec54bf288a3122cb22c2b6d0e3ed1830e2410499798dc83e89cd4eb82e392935ea99b8b7581d4a", @ANYRESHEX=r0, @ANYRESDEC=r3], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xe8}}, 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000000)='@+]\x00', &(0x7f00000000c0)="86", 0x1) socket(0x10, 0x3, 0x0) tkill(r7, 0x1d) setrlimit(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2.307205825s ago: executing program 2 (id=6768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='md0\n\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r2, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000010000000000000000000000000000000000000000000000000000000201000000000100") ioctl(r2, 0x40140921, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3', @ANYRES16, @ANYRESDEC=r1, @ANYRES32=r0]) chdir(&(0x7f00000002c0)='./sys/module/md_mod/parameters/new_array\x00') creat(&(0x7f0000000340)='./sys/module/md_mod/parameters/new_array\x00', 0x150) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000900, 0x0, 0x0) ioctl(r2, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006000000") ioctl(r2, 0x400c0930, &(0x7f0000000500)='\x00'/12) ioctl(r2, 0x40140921, &(0x7f0000000440)="020000000100000002000000ffffffff00000000") r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) close(r3) pwrite64(r2, &(0x7f0000001000), 0x1000, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) 1.429367908s ago: executing program 2 (id=6769): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000200)={0x11, 0x2e, 0x1, 0x1, 0x0, 0x6, @random="57903d317fb9"}, 0x14) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x880) write(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfe7, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59eda", 0x4b}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="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", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.366150424s ago: executing program 0 (id=6770): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='* ./export_dir 32\n', 0x12) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x1000000, 0x0, 0x0}, 0x218) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r5, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x43, 0x0) chdir(0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 280.27082ms ago: executing program 4 (id=6771): syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x20140, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000000280)="f697079a161c050002311e629acd", 0xe}, {&(0x7f0000001640)="5273027e0a4e47adad", 0x9}], 0x3, 0x0, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r3}, 0x10) bind$xdp(r2, &(0x7f00000000c0)={0x2c, 0x2, r4, 0x1c}, 0x10) capget(0x0, &(0x7f0000000740)={0x1, 0x7ff, 0xa10f, 0x8, 0x903, 0x1}) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) unshare(0x38060000) 176.810789ms ago: executing program 2 (id=6772): syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1fe}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000000) mkdir(&(0x7f0000000540)='./sys\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x48885) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d28", 0x96) 126.453166ms ago: executing program 1 (id=6773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='md0\n\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r2, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000010000000000000000000000000000000000000000000000000000000201000000000100") ioctl(r2, 0x40140921, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3', @ANYRES16, @ANYRESDEC=r1, @ANYRES32=r0]) chdir(&(0x7f00000002c0)='./sys/module/md_mod/parameters/new_array\x00') creat(&(0x7f0000000340)='./sys/module/md_mod/parameters/new_array\x00', 0x150) quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000900, 0x0, &(0x7f0000000440)) ioctl(r2, 0x40140921, &(0x7f0000000420)) ioctl(r2, 0x400c0930, &(0x7f0000000500)='\x00'/12) ioctl(r2, 0x40140921, &(0x7f0000000440)="020000000100000002000000ffffffff00000000") r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) close(r3) pwrite64(r2, &(0x7f0000001000), 0x1000, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) 0s ago: executing program 0 (id=6774): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f0000006400), 0x0, &(0x7f0000000980)="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", 0x135, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x42583) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYRES64=r6, @ANYRES64=r1, @ANYRES32=0xee00, @ANYBLOB="ff01"], 0x10c}, 0x1, 0x0, 0x0, 0x4000009}, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x1}, 0x6) kernel console output (not intermixed with test programs): urned -71 [ 1325.416199][ T1351] usbtmc 6-1:16.0: can't read capabilities [ 1325.434296][ T1351] usb 6-1: USB disconnect, device number 114 [ 1325.447225][T30684] [drm] Found bochs VGA, ID 0xb0c5. [ 1325.447242][T30684] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1325.511956][T30684] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1326.698046][T30684] Console: switching to colour frame buffer device 160x50 [ 1326.818599][T30684] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1326.864683][T30697] Console: switching to colour dummy device 80x25 [ 1327.457036][ T5741] Bluetooth: hci0: command 0x0c1a tx timeout [ 1327.508416][T30698] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1327.520110][T30698] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1327.520213][T30698] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1327.520404][T30698] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1327.520920][T30698] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1327.532772][T30698] pci 0000:00:01.0: Adding to iommu group 1 [ 1327.539278][T30698] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1327.539298][T30698] pci 0000:00:01.0: vgaarb: bridge control possible [ 1327.539311][T30698] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1327.549194][T30698] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1327.549348][T30698] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1327.551204][T30698] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1327.560359][T30698] [drm] Found bochs VGA, ID 0xb0c5. [ 1327.560375][T30698] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1327.571244][T30698] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1327.657044][T30698] Console: switching to colour frame buffer device 160x50 [ 1327.686009][T30698] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1327.968556][T30709] gadgetfs: bound to dummy_udc driver [ 1327.980540][ T44] kauditd_printk_skb: 29 callbacks suppressed [ 1327.980557][ T44] audit: type=1800 audit(1790423167.519:3743): pid=30709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6390" name="ep1in-bulk" dev="gadgetfs" ino=116373 res=0 errno=0 [ 1328.217810][ T5781] usb 6-1: new full-speed USB device number 115 using dummy_hcd [ 1328.218041][ C1] gadgetfs: connected [ 1328.218159][ T5781] gadgetfs: disconnected [ 1328.327176][T30699] gadgetfs: suspended from state 2 [ 1328.559842][ T5781] usb 6-1: device not accepting address 115, error -71 [ 1330.326889][T30734] gadgetfs: bound to dummy_udc driver [ 1330.391533][ T44] audit: type=1800 audit(1790423169.909:3744): pid=30734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6397" name="ep1in-bulk" dev="gadgetfs" ino=116422 res=0 errno=0 [ 1330.586757][T15003] usb 6-1: new full-speed USB device number 117 using dummy_hcd [ 1330.587168][ C1] gadgetfs: connected [ 1330.587350][T15003] gadgetfs: disconnected [ 1330.610928][T30739] Console: switching to colour dummy device 80x25 [ 1330.740294][ C1] gadgetfs: connected [ 1330.745129][T15003] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1330.745702][T15003] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1330.745722][T15003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.758808][ C1] gadgetfs: configuration #1 [ 1330.841805][T30718] gadgetfs: suspended from state 3 [ 1330.842835][ T5882] usb 6-1: USB disconnect, device number 117 [ 1330.853709][T30718] gadgetfs: disconnected [ 1331.060298][T30737] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1331.079908][T30737] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1331.080052][T30737] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1331.083583][T30737] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1331.098448][T30737] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1331.128387][T30737] pci 0000:00:01.0: Adding to iommu group 1 [ 1331.131339][T30737] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1331.131352][T30737] pci 0000:00:01.0: vgaarb: bridge control possible [ 1331.131360][T30737] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1331.159831][T30737] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1331.162210][T30737] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1331.208332][T30737] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1331.243992][T30737] [drm] Found bochs VGA, ID 0xb0c5. [ 1331.244010][T30737] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1331.288888][T30737] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1332.184666][T30749] netlink: 'syz.2.6404': attribute type 1 has an invalid length. [ 1332.281187][T30749] bond3: entered promiscuous mode [ 1332.281982][T30749] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1332.456236][T30737] Console: switching to colour frame buffer device 160x50 [ 1332.610269][T30749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6404'. [ 1332.633302][T30749] bond3 (unregistering): Released all slaves [ 1332.654121][T30737] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1332.746261][T30746] Console: switching to colour dummy device 80x25 [ 1332.905941][T30747] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1332.927848][T30747] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1332.927954][T30747] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1332.928131][T30747] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1332.928477][T30747] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1332.955533][T30747] pci 0000:00:01.0: Adding to iommu group 1 [ 1332.970642][T30747] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1332.970665][T30747] pci 0000:00:01.0: vgaarb: bridge control possible [ 1332.970677][T30747] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1332.999968][T30747] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1333.000122][T30747] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1333.003942][T30747] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1333.058793][T30755] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1333.068734][T30747] [drm] Found bochs VGA, ID 0xb0c5. [ 1333.068748][T30747] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1333.086814][T30755] md: array md0 already has disks! [ 1333.142227][T30747] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1333.196765][T30757] md: could not open device unknown-block(1,1). [ 1333.196818][T30757] md: error, md_import_device() returned -16 [ 1333.363720][T30755] md: pers->run() failed ... [ 1333.364085][T30757] md: could not open device unknown-block(1,2). [ 1333.364161][T30757] md: error, md_import_device() returned -16 [ 1333.384802][T30761] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1333.385247][T30755] IPVS: stopping backup sync thread 30761 ... [ 1333.408048][T30747] Console: switching to colour frame buffer device 160x50 [ 1333.437245][T30747] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1333.978040][T30769] netlink: 'syz.1.6409': attribute type 1 has an invalid length. [ 1334.002894][T30769] bond4: entered promiscuous mode [ 1334.003090][T30769] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1334.049714][T30769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6409'. [ 1334.060408][T30769] bond4 (unregistering): Released all slaves [ 1335.681696][T30802] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1335.726950][T30802] md: array md0 already has disks! [ 1335.779118][T30802] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1335.907058][T30803] md: pers->run() failed ... [ 1335.907170][T30802] md: could not open device unknown-block(1,1). [ 1335.907196][T30802] md: error, md_import_device() returned -16 [ 1335.907359][T30805] md: could not open device unknown-block(1,2). [ 1335.907382][T30805] md: error, md_import_device() returned -16 [ 1335.923733][T30802] IPVS: stopping backup sync thread 30807 ... [ 1337.249653][T30835] Console: switching to colour dummy device 80x25 [ 1337.518620][T30836] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1337.537041][T30836] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1337.537163][T30836] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1337.537368][T30836] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1337.537801][T30836] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1337.545667][T30836] pci 0000:00:01.0: Adding to iommu group 1 [ 1337.550383][T30836] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1337.550403][T30836] pci 0000:00:01.0: vgaarb: bridge control possible [ 1337.550414][T30836] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1337.558880][T30836] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1337.559042][T30836] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1337.562086][T30836] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1337.581488][T30836] [drm] Found bochs VGA, ID 0xb0c5. [ 1337.581503][T30836] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1337.615749][T30836] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1337.841240][T30839] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1337.869526][T30836] Console: switching to colour frame buffer device 160x50 [ 1337.870441][T30839] md: array md0 already has disks! [ 1337.913160][T30836] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1337.925754][T30842] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1338.088230][T30839] md: pers->run() failed ... [ 1338.088396][T30842] md: could not open device unknown-block(1,1). [ 1338.088437][T30842] md: error, md_import_device() returned -16 [ 1338.088651][T30844] md: could not open device unknown-block(1,2). [ 1338.088688][T30844] md: error, md_import_device() returned -16 [ 1338.105221][T30848] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1338.105482][T30839] IPVS: stopping backup sync thread 30848 ... [ 1338.396689][T30853] input: syz1 as /devices/virtual/input/input27 [ 1338.493213][T30854] netlink: 'syz.4.6433': attribute type 1 has an invalid length. [ 1338.799988][T30853] bond3: (slave veth0_to_bond): Releasing active interface [ 1338.832857][T30853] bond4: (slave veth0_to_bond): making interface the new active one [ 1338.844933][T30853] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1339.633313][T30878] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1339.676748][T30878] md: array md0 already has disks! [ 1339.727851][T30878] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1339.736757][T29461] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1339.776779][T30878] md: could not open device unknown-block(1,1). [ 1339.776810][T30878] md: error, md_import_device() returned -16 [ 1339.845585][T30878] md: pers->run() failed ... [ 1339.846955][T30882] md: could not open device unknown-block(1,2). [ 1339.846983][T30882] md: error, md_import_device() returned -16 [ 1339.850808][T30884] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1339.850867][T30878] IPVS: stopping backup sync thread 30884 ... [ 1339.896592][T29461] usb 7-1: Using ep0 maxpacket: 8 [ 1339.898108][T29461] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1339.898990][T29461] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1339.899019][T29461] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1339.899030][T29461] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1339.899042][T29461] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1339.899054][T29461] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1339.899073][T29461] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.218328][T30889] Console: switching to colour dummy device 80x25 [ 1340.309253][T29461] usb 7-1: usb_control_msg returned -32 [ 1340.309276][T29461] usbtmc 7-1:16.0: can't read capabilities [ 1340.370647][T30890] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1340.381277][T30890] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1340.381529][T30890] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1340.381903][T30890] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1340.384935][T30890] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1340.469176][T30890] pci 0000:00:01.0: Adding to iommu group 1 [ 1340.473001][T30890] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1340.473018][T30890] pci 0000:00:01.0: vgaarb: bridge control possible [ 1340.473030][T30890] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1340.479383][T30890] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1340.479648][T30890] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1340.484204][T30890] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1340.538593][T30890] [drm] Found bochs VGA, ID 0xb0c5. [ 1340.538641][T30890] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1340.592365][T30890] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1340.916428][T29461] usb 7-1: USB disconnect, device number 70 [ 1340.934105][T30876] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 1341.009193][T30890] Console: switching to colour frame buffer device 160x50 [ 1341.029672][T30890] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1341.111390][T30897] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -19 [ 1341.131230][T30898] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -19 [ 1342.819662][T30906] FAULT_INJECTION: forcing a failure. [ 1342.819662][T30906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1342.819685][T30906] CPU: 2 UID: 0 PID: 30906 Comm: syz.0.6447 Tainted: G L syzkaller #0 PREEMPT(full) [ 1342.819701][T30906] Tainted: [L]=SOFTLOCKUP [ 1342.819705][T30906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1342.819712][T30906] Call Trace: [ 1342.819750][T30906] [ 1342.819755][T30906] dump_stack_lvl+0x100/0x190 [ 1342.819808][T30906] should_fail_ex.cold+0x5/0xa [ 1342.819823][T30906] copy_fpstate_to_sigframe+0x82d/0xae0 [ 1342.819841][T30906] ? kmem_cache_free+0x127/0x6c0 [ 1342.819871][T30906] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1342.819891][T30906] ? collect_signal+0x271/0x550 [ 1342.819904][T30906] ? x86_task_fpu+0x5f/0x90 [ 1342.819918][T30906] get_sigframe+0x3fb/0x940 [ 1342.819935][T30906] ? __pfx_get_sigframe+0x10/0x10 [ 1342.819950][T30906] ? rcu_is_watching+0x13/0xc0 [ 1342.819962][T30906] ? siginfo_layout+0x1b1/0x290 [ 1342.819980][T30906] ia32_setup_rt_frame+0xe7/0xaf0 [ 1342.819994][T30906] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 1342.820007][T30906] ? __lock_acquire+0x5c0/0x1f40 [ 1342.820024][T30906] arch_do_signal_or_restart+0x459/0x7a0 [ 1342.820040][T30906] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1342.820059][T30906] ? find_held_lock+0x2b/0x80 [ 1342.820070][T30906] ? __might_fault+0xc5/0x140 [ 1342.820084][T30906] exit_to_user_mode_loop+0x139/0x700 [ 1342.820105][T30906] ? rcu_is_watching+0x13/0xc0 [ 1342.820118][T30906] __do_fast_syscall_32+0x59f/0x8b0 [ 1342.820151][T30906] ? lockdep_hardirqs_on+0x7d/0x110 [ 1342.820164][T30906] do_fast_syscall_32+0x32/0x70 [ 1342.820177][T30906] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1342.820191][T30906] RIP: 0023:0xf7ff6fec [ 1342.820205][T30906] Code: Unable to access opcode bytes at 0xf7ff6fc2. [ 1342.820228][T30906] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 00000000000000ee [ 1342.820240][T30906] RAX: 0000000000000000 RBX: 0000000000000462 RCX: 0000000000000021 [ 1342.820247][T30906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1342.820254][T30906] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1342.820260][T30906] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1342.820267][T30906] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1342.820280][T30906] [ 1342.982686][T30910] Console: switching to colour dummy device 80x25 [ 1343.577906][ T5737] libceph: connect (1)[c::]:6789 error -101 [ 1343.578846][ T5737] libceph: mon0 (1)[c::]:6789 connect error [ 1343.626254][T30912] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1343.660757][T30912] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1343.660860][T30912] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1343.661035][T30912] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1343.662623][T30912] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1343.684433][T30912] pci 0000:00:01.0: Adding to iommu group 1 [ 1343.689851][T30912] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1343.689864][T30912] pci 0000:00:01.0: vgaarb: bridge control possible [ 1343.689872][T30912] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1343.697806][T30912] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1343.697930][T30912] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1343.699303][T30912] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1343.704349][T30912] [drm] Found bochs VGA, ID 0xb0c5. [ 1343.704358][T30912] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1343.711631][T30912] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1343.826132][T30912] Console: switching to colour frame buffer device 160x50 [ 1343.854803][T30912] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1343.857157][ T42] libceph: connect (1)[c::]:6789 error -101 [ 1343.857299][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 1343.901613][T30908] ceph: No mds server is up or the cluster is laggy [ 1344.846614][T30935] batman_adv: batadv0: Adding interface: syzkaller0 [ 1344.846626][T30935] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1344.846642][T30935] batman_adv: batadv0: Interface activated: syzkaller0 [ 1344.867962][T30934] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1344.887633][T30934] batman_adv: batadv0: Removing interface: syzkaller0 [ 1345.750828][T30947] fuse: Bad value for 'fd' [ 1346.895809][T30961] Console: switching to colour dummy device 80x25 [ 1347.490585][T30962] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1347.525349][T30962] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1347.526090][T30962] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1347.526803][T30962] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1347.529868][T30962] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1347.654325][T30962] pci 0000:00:01.0: Adding to iommu group 1 [ 1347.684554][T30962] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1347.684570][T30962] pci 0000:00:01.0: vgaarb: bridge control possible [ 1347.684579][T30962] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1347.693278][T30962] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1347.693605][T30962] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1347.701286][T30962] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1347.742607][T30962] [drm] Found bochs VGA, ID 0xb0c5. [ 1347.742720][T30962] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1347.955905][T30962] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1348.175720][T30975] input: syz1 as /devices/virtual/input/input28 [ 1348.212779][T30962] Console: switching to colour frame buffer device 160x50 [ 1348.242444][T30962] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1348.631096][T30983] input: syz1 as /devices/virtual/input/input29 [ 1348.683433][T30983] netlink: 'syz.0.6469': attribute type 1 has an invalid length. [ 1348.780345][T30986] fuse: Bad value for 'fd' [ 1349.777643][T31002] input: syz1 as /devices/virtual/input/input30 [ 1350.472153][T31014] input: syz1 as /devices/virtual/input/input31 [ 1350.494484][T31014] netlink: 'syz.2.6479': attribute type 1 has an invalid length. [ 1350.816596][ T44] audit: type=1326 audit(1790423190.289:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31011 comm="syz.4.6478" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 1350.816633][ T44] audit: type=1326 audit(1790423190.289:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31011 comm="syz.4.6478" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 1350.816661][ T44] audit: type=1326 audit(1790423190.349:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31011 comm="syz.4.6478" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71475ab code=0x7ffc0000 [ 1350.816683][ T44] audit: type=1326 audit(1790423190.349:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31011 comm="syz.4.6478" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 1350.816702][ T44] audit: type=1326 audit(1790423190.349:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31011 comm="syz.4.6478" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 1350.816762][ T44] audit: type=1326 audit(1790423190.349:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31011 comm="syz.4.6478" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700efec code=0x7ffc0000 [ 1350.816784][ T44] audit: type=1326 audit(1790423190.349:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31011 comm="syz.4.6478" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 1350.816803][ T44] audit: type=1326 audit(1790423190.349:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31011 comm="syz.4.6478" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 1350.816822][ T44] audit: type=1326 audit(1790423190.349:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31011 comm="syz.4.6478" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700efec code=0x7ffc0000 [ 1350.816842][ T44] audit: type=1326 audit(1790423190.349:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31011 comm="syz.4.6478" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700efec code=0x7ffc0000 [ 1350.829683][T31020] IPVS: ip_vs_add_dest(): server weight less than zero [ 1350.845840][T31020] fuse: Unknown parameter 'group_' [ 1350.905159][T22845] IPVS: starting estimator thread 0... [ 1350.996632][T31022] IPVS: using max 43 ests per chain, 103200 per kthread [ 1351.446657][T31027] Console: switching to colour dummy device 80x25 [ 1352.045686][T31026] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1352.056036][T31026] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1352.056296][T31026] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1352.056729][T31026] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1352.058568][T31026] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1352.078219][T31026] pci 0000:00:01.0: Adding to iommu group 1 [ 1352.114722][T31026] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1352.114737][T31026] pci 0000:00:01.0: vgaarb: bridge control possible [ 1352.114745][T31026] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1352.124403][T31026] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1352.124753][T31026] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1352.127427][T31026] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1352.158295][T31026] [drm] Found bochs VGA, ID 0xb0c5. [ 1352.158434][T31026] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1352.331874][T31026] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1352.655043][T31026] Console: switching to colour frame buffer device 160x50 [ 1352.782029][T31026] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1353.327951][T31039] tmpfs: Bad value for 'mpol' [ 1354.055709][T31053] Console: switching to colour dummy device 80x25 [ 1354.192889][T31054] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1354.201630][T31054] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1354.201852][T31054] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1354.202205][T31054] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1354.203669][T31054] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1354.236601][ T42] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1354.251047][T31054] pci 0000:00:01.0: Adding to iommu group 1 [ 1354.255869][T31054] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1354.255888][T31054] pci 0000:00:01.0: vgaarb: bridge control possible [ 1354.255900][T31054] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1354.284697][T31054] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1354.284810][T31054] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1354.286155][T31054] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1354.301813][T31054] [drm] Found bochs VGA, ID 0xb0c5. [ 1354.301825][T31054] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1354.326609][T31054] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 1354.426976][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 1354.429788][ T42] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1354.433250][ T42] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1354.433275][ T42] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1354.433287][ T42] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1354.433298][ T42] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1354.433310][ T42] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1354.433329][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.557530][T31054] Console: switching to colour frame buffer device 160x50 [ 1354.598760][T31054] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1354.730670][T31052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.730874][T31052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.730972][ T42] usb 7-1: usb_control_msg returned -32 [ 1354.730993][ T42] usbtmc 7-1:16.0: can't read capabilities [ 1356.645526][T31073] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1356.697014][T31073] md: array md0 already has disks! [ 1356.761246][T31074] tmpfs: Unknown parameter '˙˙00000000000000000004' [ 1356.798499][T31076] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1356.844962][ T5737] usb 7-1: USB disconnect, device number 71 [ 1356.867020][T31073] md: could not open device unknown-block(1,1). [ 1356.867150][T31073] md: error, md_import_device() returned -16 [ 1357.004527][T31082] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1357.005106][T31079] IPVS: stopping backup sync thread 31082 ... [ 1357.013980][T31073] md: pers->run() failed ... [ 1357.014108][T31074] md: could not open device unknown-block(1,2). [ 1357.014143][T31074] md: error, md_import_device() returned -16 [ 1357.180445][T31087] input: syz1 as /devices/virtual/input/input32 [ 1357.284150][T31087] bond4: (slave veth0_to_bond): Releasing active interface [ 1357.953560][T16400] libceph: connect (1)[c::]:6789 error -101 [ 1357.953661][T16400] libceph: mon0 (1)[c::]:6789 connect error [ 1358.175479][T31076] ceph: No mds server is up or the cluster is laggy [ 1358.486550][ T43] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1358.646632][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 1358.647314][ T43] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1358.648821][ T43] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 1358.648857][ T43] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1358.648878][ T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1358.648897][ T43] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1358.648916][ T43] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1358.648935][ T43] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1358.648965][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.225853][T31108] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1359.225964][T31108] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1359.226067][T31108] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1359.265593][T31118] IPv6: Can't replace route, no match found [ 1359.487282][ T25] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1359.666745][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 1359.668360][ T25] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1359.670423][ T25] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1359.670447][ T25] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1359.670458][ T25] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1359.670470][ T25] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1359.670481][ T25] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1359.670501][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.810311][T31124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6513'. [ 1359.813325][T31124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6513'. [ 1360.131754][ T25] usb 9-1: usb_control_msg returned -32 [ 1360.131779][ T25] usbtmc 9-1:16.0: can't read capabilities [ 1360.141174][T31113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.141529][T31113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.268027][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 1360.268059][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.056837][ T5741] Bluetooth: hci3: command 0x0c1a tx timeout [ 1361.264232][T31108] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1361.264990][ T43] usb 6-1: usb_control_msg returned -71 [ 1361.265025][ T43] usbtmc 6-1:16.0: can't read capabilities [ 1361.270099][ T43] usb 6-1: USB disconnect, device number 118 [ 1361.299795][ T5741] Bluetooth: hci4: command 0x0c1a tx timeout [ 1361.299833][ T5741] Bluetooth: hci0: command 0x0c1a tx timeout [ 1361.489700][T31134] input: syz1 as /devices/virtual/input/input33 [ 1361.508544][T31134] netlink: 'syz.0.6516': attribute type 1 has an invalid length. [ 1361.749305][ T43] usb 9-1: USB disconnect, device number 10 [ 1362.544407][T31157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.544789][T31157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.546731][T31155] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1362.587540][T31155] md: array md0 already has disks! [ 1362.638414][T31155] tmpfs: Unknown parameter '˙˙00000000000000000004' [ 1362.712625][T31157] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1362.712748][T31157] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1362.712833][T31157] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1362.785471][T31160] md: pers->run() failed ... [ 1362.785678][T31155] md: could not open device unknown-block(1,1). [ 1362.785728][T31155] md: error, md_import_device() returned -16 [ 1362.785844][T31163] md: could not open device unknown-block(1,2). [ 1362.785885][T31163] md: error, md_import_device() returned -16 [ 1362.786705][ T5781] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1362.828534][T31165] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1362.828870][T31155] IPVS: stopping backup sync thread 31165 ... [ 1362.956508][ T5781] usb 9-1: Using ep0 maxpacket: 32 [ 1362.956990][ T5781] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1362.960040][ T5781] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1362.962270][ T5781] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1362.962283][ T5781] usb 9-1: Product: syz [ 1362.962291][ T5781] usb 9-1: Manufacturer: syz [ 1362.962298][ T5781] usb 9-1: SerialNumber: syz [ 1362.964912][ T5781] usb 9-1: config 0 descriptor?? [ 1362.965427][T31153] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1362.971683][ T5781] hub 9-1:0.0: bad descriptor, ignoring hub [ 1362.971697][ T5781] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1363.612292][T31153] usb 9-1: reset high-speed USB device number 11 using dummy_hcd [ 1363.615579][T31153] usb 9-1: device reset changed ep0 maxpacket size! [ 1363.622836][T26281] usb 9-1: USB disconnect, device number 11 [ 1363.757636][T26281] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1363.907279][T26281] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1363.907683][T26281] usb 9-1: config 0 has no interfaces? [ 1363.907700][T26281] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.908904][T26281] usb 9-1: config 0 descriptor?? [ 1364.128837][ T43] usb 9-1: USB disconnect, device number 12 [ 1364.210997][T31186] input: syz1 as /devices/virtual/input/input35 [ 1364.228954][T31186] netlink: 'syz.1.6531': attribute type 1 has an invalid length. [ 1364.277610][T31189] netlink: 'syz.1.6532': attribute type 1 has an invalid length. [ 1364.286926][T31189] bond5: entered promiscuous mode [ 1364.287104][T31189] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1364.291584][T31189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6532'. [ 1364.298160][T31189] bond5 (unregistering): Released all slaves [ 1364.656649][ T5741] Bluetooth: hci3: command 0x0c1a tx timeout [ 1364.736731][ T5741] Bluetooth: hci0: command 0x0c1a tx timeout [ 1364.736758][ T5741] Bluetooth: hci4: command 0x0c1a tx timeout [ 1365.141027][T31201] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1365.279665][T31203] Console: switching to colour dummy device 80x25 [ 1365.349342][T31206] tmpfs: Unknown parameter '˙˙00000000000000000004' [ 1365.407955][T31201] md: array md0 already has disks! [ 1365.609849][T31205] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1365.622092][T31205] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1365.622357][T31205] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1365.622766][T31205] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1365.623852][T31201] md: could not open device unknown-block(1,1). [ 1365.624195][T31201] md: error, md_import_device() returned -16 [ 1365.625453][T31205] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1365.652748][T31205] pci 0000:00:01.0: Adding to iommu group 1 [ 1365.665451][T31205] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1365.665465][T31205] pci 0000:00:01.0: vgaarb: bridge control possible [ 1365.665473][T31205] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1365.672723][T31205] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1365.673072][T31205] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1365.678600][T31205] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1365.713615][T31205] [drm] Found bochs VGA, ID 0xb0c5. [ 1365.713715][T31205] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1365.848237][T31205] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1366.276327][T31157] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1366.277619][T31211] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1366.277885][T31206] IPVS: stopping backup sync thread 31211 ... [ 1366.434268][T31205] Console: switching to colour frame buffer device 160x50 [ 1366.445770][T31204] md: pers->run() failed ... [ 1366.495316][T31205] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1366.719137][T31223] input: syz1 as /devices/virtual/input/input36 [ 1366.738142][T31223] netlink: 'syz.2.6540': attribute type 1 has an invalid length. [ 1366.818572][T31225] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1366.876876][T31222] md: array md0 already has disks! [ 1366.932815][T31222] tmpfs: Unknown parameter 'grpquota_b˙˙00000000000000000004' [ 1367.105180][T31237] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1367.105488][T31236] IPVS: stopping backup sync thread 31237 ... [ 1367.332175][T31225] md: pers->run() failed ... [ 1367.332829][T31222] md: could not open device unknown-block(1,1). [ 1367.332875][T31222] md: error, md_import_device() returned -16 [ 1367.333198][T31235] md: could not open device unknown-block(1,2). [ 1367.333242][T31235] md: error, md_import_device() returned -16 [ 1367.477612][T31242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6545'. [ 1367.791594][T31251] Console: switching to colour dummy device 80x25 [ 1367.880074][T31248] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1367.916682][T31248] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1367.916816][T31248] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1367.917004][T31248] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1367.917443][T31248] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1367.921922][T31248] pci 0000:00:01.0: Adding to iommu group 1 [ 1367.937447][T31248] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1367.937462][T31248] pci 0000:00:01.0: vgaarb: bridge control possible [ 1367.937469][T31248] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1367.942613][T31248] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1367.942931][T31248] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1367.944285][T31248] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1367.956064][T31248] [drm] Found bochs VGA, ID 0xb0c5. [ 1367.956075][T31248] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1367.961773][T31248] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1368.153652][T31248] Console: switching to colour frame buffer device 160x50 [ 1368.161806][T31255] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1368.196619][T31255] md: array md0 already has disks! [ 1368.205624][T31248] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1368.249229][T31256] tmpfs: Unknown parameter 'grpquota_block_har˙˙00000000000000000004' [ 1368.296636][T31256] md: could not open device unknown-block(1,1). [ 1368.296671][T31256] md: error, md_import_device() returned -16 [ 1368.336582][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 1368.383258][T31255] md: pers->run() failed ... [ 1368.387648][T31256] md: could not open device unknown-block(1,2). [ 1368.387677][T31256] md: error, md_import_device() returned -16 [ 1368.391003][T31259] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1368.391112][T31255] IPVS: stopping backup sync thread 31259 ... [ 1368.597715][T31261] trusted_key: encrypted_key: insufficient parameters specified [ 1368.655297][T31263] FAULT_INJECTION: forcing a failure. [ 1368.655297][T31263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1368.655331][T31263] CPU: 1 UID: 0 PID: 31263 Comm: syz.0.6550 Tainted: G L syzkaller #0 PREEMPT(full) [ 1368.655356][T31263] Tainted: [L]=SOFTLOCKUP [ 1368.655362][T31263] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1368.655373][T31263] Call Trace: [ 1368.655414][T31263] [ 1368.655422][T31263] dump_stack_lvl+0x100/0x190 [ 1368.655495][T31263] should_fail_ex.cold+0x5/0xa [ 1368.655519][T31263] _copy_from_user+0x2e/0xd0 [ 1368.655569][T31263] ppp_write+0x1a0/0x400 [ 1368.655623][T31263] ? __pfx_ppp_write+0x10/0x10 [ 1368.655648][T31263] vfs_writev+0x5ed/0xdd0 [ 1368.655674][T31263] ? __pfx_vfs_writev+0x10/0x10 [ 1368.655699][T31263] ? lock_acquire+0x1d1/0x380 [ 1368.655723][T31263] ? __fget_files+0x34/0x3d0 [ 1368.655753][T31263] ? __fget_files+0x21f/0x3d0 [ 1368.655781][T31263] ? do_pwritev+0x1ac/0x270 [ 1368.655799][T31263] do_pwritev+0x1ac/0x270 [ 1368.655820][T31263] ? __pfx_do_pwritev+0x10/0x10 [ 1368.655837][T31263] ? trace_syscall_enter+0xcc/0x120 [ 1368.655862][T31263] __do_fast_syscall_32+0x13a/0x8b0 [ 1368.655908][T31263] ? lockdep_hardirqs_on+0x7d/0x110 [ 1368.655930][T31263] do_fast_syscall_32+0x32/0x70 [ 1368.655952][T31263] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1368.655975][T31263] RIP: 0023:0xf7ff6fec [ 1368.656000][T31263] Code: Unable to access opcode bytes at 0xf7ff6fc2. [ 1368.656032][T31263] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 000000000000014e [ 1368.656050][T31263] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000400 [ 1368.656062][T31263] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000008 [ 1368.656073][T31263] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1368.656084][T31263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1368.656095][T31263] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1368.656119][T31263] [ 1368.739801][T31269] netlink: 'syz.0.6553': attribute type 1 has an invalid length. [ 1368.783784][T31269] bond3: entered promiscuous mode [ 1368.784910][T31269] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1369.867113][T31286] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1369.970932][T31288] tmpfs: Unknown parameter 'grpquota_block_har˙˙00000000000000000004' [ 1370.152218][T31294] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1370.152451][T31293] IPVS: stopping backup sync thread 31294 ... [ 1370.785899][T31289] md: pers->run() failed ... [ 1370.787753][T31286] md: array md0 already has disks! [ 1370.856765][T31288] md: could not open device unknown-block(1,1). [ 1370.856799][T31288] md: error, md_import_device() returned -16 [ 1371.102758][T26281] usb 5-1: USB disconnect, device number 6 [ 1371.707586][T31313] Console: switching to colour dummy device 80x25 [ 1371.774842][T31321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6567'. [ 1371.774865][T31321] netlink: 'syz.0.6567': attribute type 30 has an invalid length. [ 1371.786813][T31315] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1371.800436][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1371.800480][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1371.800512][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1371.800542][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1371.817689][T31315] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1371.817814][T31315] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1371.818004][T31315] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1371.818411][T31315] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1371.837247][T31315] pci 0000:00:01.0: Adding to iommu group 1 [ 1371.843520][T31315] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1371.843533][T31315] pci 0000:00:01.0: vgaarb: bridge control possible [ 1371.843541][T31315] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1371.868654][T31315] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1371.868812][T31315] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1371.873624][T31315] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1371.899001][T31315] [drm] Found bochs VGA, ID 0xb0c5. [ 1371.899013][T31315] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1371.920590][T31315] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1372.140610][T31315] Console: switching to colour frame buffer device 160x50 [ 1372.172186][T31315] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1372.373695][T31330] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1372.407647][T31330] md: array md0 already has disks! [ 1372.460983][T31331] tmpfs: Unknown parameter 'grpquota_block_har˙˙00000000000000000004' [ 1372.507362][T31331] md: could not open device unknown-block(1,1). [ 1372.507410][T31331] md: error, md_import_device() returned -16 [ 1372.580565][T31330] md: pers->run() failed ... [ 1372.613137][T31334] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1372.613444][T31330] IPVS: stopping backup sync thread 31334 ... [ 1372.618432][T31331] md: could not open device unknown-block(1,2). [ 1372.618476][T31331] md: error, md_import_device() returned -16 [ 1374.159736][T31359] input: syz1 as /devices/virtual/input/input37 [ 1374.252821][T31362] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1374.304009][T31359] netlink: 'syz.4.6579': attribute type 1 has an invalid length. [ 1374.309871][T31362] md: array md0 already has disks! [ 1374.330927][T31359] bond5: (slave veth0_to_bond): making interface the new active one [ 1374.331827][T31359] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1374.348241][T31362] tmpfs: Unknown parameter 'grpquota_block_hardlim˙˙00000000000000000004' [ 1374.387319][T31362] md: could not open device unknown-block(1,1). [ 1374.387370][T31362] md: error, md_import_device() returned -16 [ 1374.499467][T31367] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1374.499691][T31366] IPVS: stopping backup sync thread 31367 ... [ 1374.662114][T31360] Console: switching to colour dummy device 80x25 [ 1374.782415][T31362] md: pers->run() failed ... [ 1374.782667][T31365] md: could not open device unknown-block(1,2). [ 1374.782719][T31365] md: error, md_import_device() returned -16 [ 1374.883193][T31368] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1374.891495][T31368] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1374.892071][T31368] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1374.892950][T31368] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1374.894734][T31368] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1375.031134][T31368] pci 0000:00:01.0: Adding to iommu group 1 [ 1375.053840][T31368] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1375.053878][T31368] pci 0000:00:01.0: vgaarb: bridge control possible [ 1375.053892][T31368] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1375.338996][T31368] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1375.357577][T31368] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1375.392442][T31368] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1375.789674][T31368] [drm] Found bochs VGA, ID 0xb0c5. [ 1375.790795][T31368] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1376.172799][T31368] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1376.196022][T31383] netlink: 'syz.0.6585': attribute type 4 has an invalid length. [ 1376.204202][T31383] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1376.263564][T31368] Console: switching to colour frame buffer device 160x50 [ 1376.300083][T31368] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1376.311254][T31384] md: could not open device unknown-block(1,0). [ 1376.332802][T31375] Console: switching to colour dummy device 80x25 [ 1376.358831][T31380] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1376.365563][T31380] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1376.365668][T31380] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1376.365843][T31380] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1376.377665][T31380] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1376.377685][T31380] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 11225 usecs [ 1376.384575][T31380] pci 0000:00:01.0: Adding to iommu group 1 [ 1376.396177][T31380] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1376.396190][T31380] pci 0000:00:01.0: vgaarb: bridge control possible [ 1376.396197][T31380] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1376.411900][T31380] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1376.412018][T31380] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1376.412994][T31380] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1376.418050][T31380] [drm] Found bochs VGA, ID 0xb0c5. [ 1376.418061][T31380] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1376.418496][T31383] md: md0 stopped. [ 1376.427793][T31380] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1376.544620][T31380] Console: switching to colour frame buffer device 160x50 [ 1376.599472][T31380] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1376.800155][T31394] netlink: 'syz.0.6589': attribute type 11 has an invalid length. [ 1376.823166][T31394] netlink: 'syz.0.6589': attribute type 10 has an invalid length. [ 1376.823828][T31394] syz_tun: entered promiscuous mode [ 1376.830548][T31394] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1376.871162][T31394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1377.132072][T31398] Console: switching to colour dummy device 80x25 [ 1377.399668][T31408] tmpfs: Unknown parameter 'grpquota_block_hardlim˙˙00000000000000000004' [ 1377.415829][T31409] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1377.416122][T31408] IPVS: stopping backup sync thread 31409 ... [ 1377.430263][T31405] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1377.481460][T31399] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1377.488348][T31399] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1377.488682][T31399] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1377.489136][T31399] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1377.490776][T31399] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1377.568235][T31399] pci 0000:00:01.0: Adding to iommu group 1 [ 1377.570567][T31399] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1377.570581][T31399] pci 0000:00:01.0: vgaarb: bridge control possible [ 1377.570589][T31399] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1377.605170][T31399] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1377.605316][T31399] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1377.622537][T31399] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1377.751019][T31399] [drm] Found bochs VGA, ID 0xb0c5. [ 1377.751033][T31399] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1377.788110][T31399] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1377.909991][T31399] Console: switching to colour frame buffer device 160x50 [ 1377.939900][T31399] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1378.430856][T31421] input: syz1 as /devices/virtual/input/input38 [ 1378.459919][T31421] netlink: 'syz.2.6597': attribute type 1 has an invalid length. [ 1378.470817][T31424] FAULT_INJECTION: forcing a failure. [ 1378.470817][T31424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1378.470838][T31424] CPU: 1 UID: 0 PID: 31424 Comm: syz.0.6598 Tainted: G L syzkaller #0 PREEMPT(full) [ 1378.470853][T31424] Tainted: [L]=SOFTLOCKUP [ 1378.470858][T31424] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1378.470864][T31424] Call Trace: [ 1378.470894][T31424] [ 1378.470899][T31424] dump_stack_lvl+0x100/0x190 [ 1378.470953][T31424] should_fail_ex.cold+0x5/0xa [ 1378.470969][T31424] _copy_to_user+0x32/0xd0 [ 1378.471006][T31424] simple_read_from_buffer+0xcb/0x170 [ 1378.471022][T31424] proc_fail_nth_read+0x1af/0x230 [ 1378.471036][T31424] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1378.471049][T31424] ? rw_verify_area+0xce/0x6d0 [ 1378.471060][T31424] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1378.471073][T31424] vfs_read+0x1e4/0xb40 [ 1378.471086][T31424] ? lock_acquire+0x1d1/0x380 [ 1378.471102][T31424] ? __fget_files+0x34/0x3d0 [ 1378.471115][T31424] ? __pfx_vfs_read+0x10/0x10 [ 1378.471126][T31424] ? find_held_lock+0x2b/0x80 [ 1378.471139][T31424] ? __fget_files+0x215/0x3d0 [ 1378.471154][T31424] ? __fget_files+0x21f/0x3d0 [ 1378.471171][T31424] ksys_read+0x12a/0x250 [ 1378.471183][T31424] ? __pfx_ksys_read+0x10/0x10 [ 1378.471194][T31424] ? trace_syscall_enter+0xcc/0x120 [ 1378.471221][T31424] do_int80_emulation+0x166/0x650 [ 1378.471257][T31424] asm_int80_emulation+0x1a/0x20 [ 1378.471268][T31424] RIP: 0023:0xf71f75ab [ 1378.471278][T31424] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1378.471289][T31424] RSP: 002b:00000000f54b64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1378.471319][T31424] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54b65d0 [ 1378.471326][T31424] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1378.471332][T31424] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1378.471339][T31424] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1378.471346][T31424] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1378.471360][T31424] [ 1378.499357][T31421] bond5: (slave veth0_to_bond): making interface the new active one [ 1378.503190][T31421] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1378.808733][T31432] Console: switching to colour dummy device 80x25 [ 1379.117197][T31436] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1379.121805][T31433] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1379.138596][T31433] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1379.138829][T31433] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1379.139346][T31433] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1379.140710][T31433] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1379.178433][T31436] tmpfs: Unknown parameter 'grpquota_block_hardlim˙˙00000000000000000004' [ 1379.189701][T31433] pci 0000:00:01.0: Adding to iommu group 1 [ 1379.235300][T31433] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1379.235320][T31433] pci 0000:00:01.0: vgaarb: bridge control possible [ 1379.235333][T31433] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1379.251097][T31433] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1379.251656][T31433] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1379.254675][T31433] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1379.285721][T31436] md/raid10:md0: not clean -- starting background reconstruction [ 1379.285733][T31436] md/raid10:md0: active with 1 out of 2 devices [ 1379.288789][T31436] md0: detected capacity change from 0 to 2048 [ 1379.307025][T31433] [drm] Found bochs VGA, ID 0xb0c5. [ 1379.307071][T31433] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1379.308224][T31440] md: resync of RAID array md0 [ 1379.335834][T31440] md: md0: resync done. [ 1379.375595][T31433] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1379.413519][T31442] md: recover of RAID array md0 [ 1379.422973][T31443] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1379.423376][T31436] IPVS: stopping backup sync thread 31443 ... [ 1379.429156][T31442] md: md0: recover done. [ 1379.465801][T31445] input: syz1 as /devices/virtual/input/input39 [ 1379.560362][T31445] netlink: 'syz.2.6603': attribute type 1 has an invalid length. [ 1379.684057][T31445] bond5: (slave veth0_to_bond): Releasing active interface [ 1379.812688][T31445] bond6: (slave veth0_to_bond): making interface the new active one [ 1379.836662][T31445] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1379.871896][T31433] Console: switching to colour frame buffer device 160x50 [ 1379.895783][T31433] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1380.078682][T31455] FAULT_INJECTION: forcing a failure. [ 1380.078682][T31455] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1380.078712][T31455] CPU: 2 UID: 0 PID: 31455 Comm: syz.0.6607 Tainted: G L syzkaller #0 PREEMPT(full) [ 1380.078733][T31455] Tainted: [L]=SOFTLOCKUP [ 1380.078739][T31455] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1380.078748][T31455] Call Trace: [ 1380.078754][T31455] [ 1380.078760][T31455] dump_stack_lvl+0x100/0x190 [ 1380.078842][T31455] should_fail_ex.cold+0x5/0xa [ 1380.078856][T31455] ? prepare_alloc_pages+0x16d/0x5b0 [ 1380.078893][T31455] should_fail_alloc_page+0xeb/0x140 [ 1380.078914][T31455] prepare_alloc_pages+0x1f0/0x5b0 [ 1380.078932][T31455] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 1380.078948][T31455] ? lock_acquire+0x1d1/0x380 [ 1380.078964][T31455] ? unwind_next_frame+0xbd/0x2090 [ 1380.078981][T31455] ? lock_acquire+0x1d1/0x380 [ 1380.078996][T31455] ? is_bpf_text_address+0x25/0x1a0 [ 1380.079013][T31455] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1380.079027][T31455] ? bpf_ksym_find+0x124/0x1c0 [ 1380.079040][T31455] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1380.079056][T31455] ? is_bpf_text_address+0x94/0x1a0 [ 1380.079071][T31455] ? kernel_text_address+0x8d/0x100 [ 1380.079086][T31455] ? __kernel_text_address+0xd/0x30 [ 1380.079100][T31455] ? unwind_get_return_address+0x59/0xa0 [ 1380.079120][T31455] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 1380.079140][T31455] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1380.079157][T31455] ? policy_nodemask+0xed/0x4f0 [ 1380.079174][T31455] alloc_pages_mpol+0x201/0x550 [ 1380.079191][T31455] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1380.079207][T31455] ? __lock_acquire+0x5c0/0x1f40 [ 1380.079225][T31455] folio_alloc_mpol_noprof+0x36/0x260 [ 1380.079237][T31455] vma_alloc_folio_noprof+0xed/0x1d0 [ 1380.079248][T31455] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1380.079264][T31455] do_anonymous_page+0xac9/0x2050 [ 1380.079286][T31455] ? __pfx_do_anonymous_page+0x10/0x10 [ 1380.079302][T31455] ? rcu_read_unlock+0x2d/0xb0 [ 1380.079312][T31455] ? rcu_read_unlock+0x2d/0xb0 [ 1380.079323][T31455] ? __pte_offset_map+0x179/0x310 [ 1380.079338][T31455] __handle_mm_fault+0x1ff3/0x2f60 [ 1380.079359][T31455] ? __pfx___handle_mm_fault+0x10/0x10 [ 1380.079375][T31455] ? __pfx_mt_find+0x10/0x10 [ 1380.079418][T31455] ? find_vma+0xbf/0x140 [ 1380.079431][T31455] ? __pfx_find_vma+0x10/0x10 [ 1380.079446][T31455] handle_mm_fault+0x363/0xa20 [ 1380.079466][T31455] do_user_addr_fault+0x745/0x12f0 [ 1380.079483][T31455] exc_page_fault+0x6f/0xd0 [ 1380.079496][T31455] asm_exc_page_fault+0x26/0x30 [ 1380.079507][T31455] RIP: 0010:_copy_to_iter+0x38c/0x1720 [ 1380.079523][T31455] Code: 00 00 00 00 e9 4d ff ff ff e8 00 46 e4 fc 4c 8b 74 24 18 44 89 fe 4c 89 f7 e8 f0 ba 56 fd 0f 01 cb 4c 89 f9 48 89 df 4c 89 f6 a4 0f 1f 00 48 89 cb 0f 01 ca 4c 89 f8 48 29 c8 48 89 44 24 08 [ 1380.079533][T31455] RSP: 0018:ffffc90003d2fad8 EFLAGS: 00050246 [ 1380.079543][T31455] RAX: 0000000000000001 RBX: 00000000800037c0 RCX: 0000000000000002 [ 1380.079550][T31455] RDX: 0000000000000001 RSI: ffff8880651d2000 RDI: 00000000800037c0 [ 1380.079557][T31455] RBP: ffffc90003d2fd68 R08: 0000000000000000 R09: ffffed100ca3a400 [ 1380.079564][T31455] R10: ffff8880651d2001 R11: 0000000000000001 R12: 00000000800037c2 [ 1380.079571][T31455] R13: 00007ffffffff000 R14: ffff8880651d2000 R15: 0000000000000002 [ 1380.079585][T31455] ? _copy_to_iter+0x380/0x1720 [ 1380.079601][T31455] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1380.079616][T31455] ? __pfx__copy_to_iter+0x10/0x10 [ 1380.079630][T31455] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1380.079646][T31455] ? kernfs_put_active+0x93/0xe0 [ 1380.079663][T31455] seq_read_iter+0xdab/0x1270 [ 1380.079683][T31455] kernfs_fop_read_iter+0x46c/0x610 [ 1380.079694][T31455] ? rw_verify_area+0xce/0x6d0 [ 1380.079705][T31455] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1380.079717][T31455] vfs_read+0x82e/0xb40 [ 1380.079731][T31455] ? __pfx_vfs_read+0x10/0x10 [ 1380.079742][T31455] ? find_held_lock+0x2b/0x80 [ 1380.079763][T31455] ksys_read+0x12a/0x250 [ 1380.079775][T31455] ? __pfx_ksys_read+0x10/0x10 [ 1380.079786][T31455] ? trace_syscall_enter+0xcc/0x120 [ 1380.079801][T31455] __do_fast_syscall_32+0x13a/0x8b0 [ 1380.079814][T31455] ? lockdep_hardirqs_on+0x7d/0x110 [ 1380.079827][T31455] do_fast_syscall_32+0x32/0x70 [ 1380.079840][T31455] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1380.079854][T31455] RIP: 0023:0xf7ff6fec [ 1380.079867][T31455] Code: Unable to access opcode bytes at 0xf7ff6fc2. [ 1380.079872][T31455] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 1380.079882][T31455] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0 [ 1380.079889][T31455] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 1380.079896][T31455] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1380.079902][T31455] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1380.079912][T31455] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1380.079927][T31455] [ 1380.424307][T31461] Console: switching to colour dummy device 80x25 [ 1380.654086][T31464] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1380.664468][T31464] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1380.664975][T31464] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1380.665546][T31464] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1380.668019][T31464] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1380.735446][T31464] pci 0000:00:01.0: Adding to iommu group 1 [ 1380.743732][T31464] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1380.743754][T31464] pci 0000:00:01.0: vgaarb: bridge control possible [ 1380.743765][T31464] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1380.767776][T31464] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1380.767929][T31464] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1380.771600][T31464] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1380.794653][T31464] [drm] Found bochs VGA, ID 0xb0c5. [ 1380.794667][T31464] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1380.808507][T31464] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1380.968963][ T5737] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1380.994865][T31464] Console: switching to colour frame buffer device 160x50 [ 1381.036887][T31464] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1381.102043][T31470] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1381.140452][ T5737] usb 6-1: Using ep0 maxpacket: 8 [ 1381.141314][ T5737] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1381.142435][ T5737] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 1381.142469][ T5737] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1381.142487][ T5737] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1381.142504][ T5737] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1381.142521][ T5737] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1381.142536][ T5737] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1381.142563][ T5737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.190259][T31470] md: couldn't update array info. -22 [ 1381.198293][T31470] tmpfs: Unknown parameter 'grpquota_block_hardlimit˙˙00000000000000000004' [ 1381.258075][T31470] md: could not open device unknown-block(1,1). [ 1381.258155][T31470] md: md_import_device returned -16 [ 1381.306756][T31470] md: could not open device unknown-block(1,2). [ 1381.306860][T31470] md: md_import_device returned -16 [ 1381.329228][T31472] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1381.329609][T31470] IPVS: stopping backup sync thread 31472 ... [ 1381.617645][T31467] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1381.617764][T31467] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1381.617891][T31467] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1381.916600][ T5882] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1382.186534][ T5882] usb 7-1: Using ep0 maxpacket: 8 [ 1382.187875][ T5882] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1382.189924][ T5882] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1382.190090][ T5882] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1382.190208][ T5882] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1382.190329][ T5882] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1382.190465][ T5882] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1382.190654][ T5882] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1382.190730][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.067077][T29461] libceph: connect (1)[c::]:6789 error -101 [ 1383.166032][T29461] libceph: mon0 (1)[c::]:6789 connect error [ 1383.185005][T31488] input: syz1 as /devices/virtual/input/input40 [ 1383.253584][T31488] netlink: 'syz.4.6616': attribute type 1 has an invalid length. [ 1383.315579][T31488] bond5: (slave veth0_to_bond): Releasing active interface [ 1383.329002][T31488] bond6: (slave veth0_to_bond): making interface the new active one [ 1383.347626][T31488] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1383.415056][T31483] ceph: No mds server is up or the cluster is laggy [ 1383.421517][ T43] libceph: connect (1)[c::]:6789 error -101 [ 1383.421610][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1383.551850][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 1383.709768][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 1383.709787][ T5741] Bluetooth: hci4: command 0x0c1a tx timeout [ 1383.758530][T31467] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1383.758916][ T5737] usb 6-1: usb_control_msg returned -71 [ 1383.758938][ T5737] usbtmc 6-1:16.0: can't read capabilities [ 1383.769254][ T5737] usb 6-1: USB disconnect, device number 119 [ 1383.779624][T31496] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1384.447516][ T5737] libceph: connect (1)[c::]:6789 error -101 [ 1384.448167][ T5737] libceph: mon0 (1)[c::]:6789 connect error [ 1384.719059][ T5737] libceph: connect (1)[c::]:6789 error -101 [ 1384.719303][ T5737] libceph: mon0 (1)[c::]:6789 connect error [ 1384.872017][T31500] ceph: No mds server is up or the cluster is laggy [ 1385.108546][ T5882] usb 7-1: usb_control_msg returned -71 [ 1385.108569][ T5882] usbtmc 7-1:16.0: can't read capabilities [ 1385.127975][ T5882] usb 7-1: USB disconnect, device number 72 [ 1385.193203][T31512] input: syz1 as /devices/virtual/input/input41 [ 1385.379327][T31515] netlink: 'syz.2.6622': attribute type 1 has an invalid length. [ 1385.580748][T31512] bond6: (slave veth0_to_bond): Releasing active interface [ 1385.594624][T31512] bond7: (slave veth0_to_bond): making interface the new active one [ 1385.610228][T31512] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1385.787155][ T5741] Bluetooth: hci0: command 0x0c1a tx timeout [ 1386.864662][T31529] input: syz1 as /devices/virtual/input/input42 [ 1386.930490][T31529] netlink: 'syz.2.6625': attribute type 1 has an invalid length. [ 1386.979747][T31529] bond7: (slave veth0_to_bond): Releasing active interface [ 1387.041712][T31529] bond8: (slave veth0_to_bond): making interface the new active one [ 1387.053977][T31529] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1387.821159][T16406] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1387.914629][T31540] Console: switching to colour dummy device 80x25 [ 1388.286548][T16406] usb 9-1: Using ep0 maxpacket: 8 [ 1388.290254][T16406] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1388.331605][T16406] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 1388.331637][T16406] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1388.331651][T16406] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1388.331664][T16406] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1388.331676][T16406] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1388.331688][T16406] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1388.331709][T16406] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.500101][T31541] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1388.513262][T31541] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1388.513571][T31541] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1388.514388][T31541] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1388.516054][T31541] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1388.682521][T31541] pci 0000:00:01.0: Adding to iommu group 1 [ 1388.690713][T31549] netlink: 'syz.1.6631': attribute type 4 has an invalid length. [ 1388.695267][T31541] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1388.695289][T31541] pci 0000:00:01.0: vgaarb: bridge control possible [ 1388.695301][T31541] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1388.715258][T31541] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1388.715479][T31541] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1388.717415][T31541] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1388.725360][T31541] [drm] Found bochs VGA, ID 0xb0c5. [ 1388.725374][T31541] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1388.753124][T31549] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1388.762884][T31541] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1388.969975][T31549] md: md0: raid1 would not accept array [ 1389.244192][T31541] Console: switching to colour frame buffer device 160x50 [ 1389.384475][T31541] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1390.187966][T31558] Console: switching to colour dummy device 80x25 [ 1390.375215][T31559] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1390.385074][T31559] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1390.385227][T31559] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1390.385901][T31559] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1390.387866][T31559] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1390.404363][T31552] md0: detected capacity change from 2048 to 0 [ 1390.404384][T31552] md: md0 stopped. [ 1390.545187][T31559] pci 0000:00:01.0: Adding to iommu group 1 [ 1390.548402][T31559] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1390.548415][T31559] pci 0000:00:01.0: vgaarb: bridge control possible [ 1390.548422][T31559] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1390.594337][T31559] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1390.594517][T31559] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1390.602757][T31559] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1390.641000][T31559] [drm] Found bochs VGA, ID 0xb0c5. [ 1390.641013][T31559] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1390.674539][T31559] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1390.682756][T16406] usb 9-1: usb_control_msg returned -71 [ 1390.682780][T16406] usbtmc 9-1:16.0: can't read capabilities [ 1390.698557][T16406] usb 9-1: USB disconnect, device number 13 [ 1390.979401][T31559] Console: switching to colour frame buffer device 160x50 [ 1391.028487][T31559] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1391.035577][T31567] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1391.512521][T29461] libceph: connect (1)[c::]:6789 error -101 [ 1391.512870][T29461] libceph: mon0 (1)[c::]:6789 connect error [ 1391.536518][ T5781] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1391.686549][ T5781] usb 7-1: Using ep0 maxpacket: 8 [ 1391.687325][ T5781] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1391.688752][ T5781] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1391.688793][ T5781] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1391.688815][ T5781] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1391.688835][ T5781] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1391.688857][ T5781] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1391.688876][ T5781] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1391.688909][ T5781] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.776388][T29461] libceph: connect (1)[c::]:6789 error -101 [ 1391.777665][T29461] libceph: mon0 (1)[c::]:6789 connect error [ 1392.287092][ T43] libceph: connect (1)[c::]:6789 error -101 [ 1392.287508][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1392.347753][T31568] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1392.352980][T31568] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1392.353078][T31568] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1392.863282][T31570] ceph: No mds server is up or the cluster is laggy [ 1393.399427][T31586] input: syz1 as /devices/virtual/input/input43 [ 1393.409496][T31584] Console: switching to colour dummy device 80x25 [ 1393.487938][T31586] netlink: 'syz.1.6638': attribute type 1 has an invalid length. [ 1393.630353][T31582] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1393.635435][T31582] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1393.635532][T31582] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1393.635689][T31582] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1393.636293][T31582] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1393.637325][T31586] bond5: (slave veth0_to_bond): making interface the new active one [ 1393.638894][T31586] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1393.641021][T31582] pci 0000:00:01.0: Adding to iommu group 1 [ 1393.643513][T31582] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1393.643525][T31582] pci 0000:00:01.0: vgaarb: bridge control possible [ 1393.643533][T31582] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1393.647292][T31582] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1393.647413][T31582] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1393.648374][T31582] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1393.653456][T31582] [drm] Found bochs VGA, ID 0xb0c5. [ 1393.653468][T31582] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1393.663108][T31582] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1393.735450][T31582] Console: switching to colour frame buffer device 160x50 [ 1393.753777][T31582] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1393.825371][T31589] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1393.854650][T31594] input: syz1 as /devices/virtual/input/input44 [ 1393.867028][T31592] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1393.867332][T31592] block device autoloading is deprecated and will be removed. [ 1393.907812][T31594] netlink: 'syz.1.6639': attribute type 1 has an invalid length. [ 1394.016589][ T5741] Bluetooth: hci3: command 0x0c1a tx timeout [ 1394.026964][T31594] bond5: (slave veth0_to_bond): Releasing active interface [ 1394.061762][T31594] bond6: (slave veth0_to_bond): making interface the new active one [ 1394.086856][T31594] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1394.218845][T31589] tmpfs: Unknown parameter 'grpquota_block_hardlimit˙˙00000000000000000004' [ 1394.290815][T31577] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1394.291487][ T5781] usb 7-1: usb_control_msg returned -71 [ 1394.291523][ T5781] usbtmc 7-1:16.0: can't read capabilities [ 1394.300935][ T5781] usb 7-1: USB disconnect, device number 73 [ 1394.335107][T31589] md/raid10:md0: not clean -- starting background reconstruction [ 1394.335124][T31589] md/raid10:md0: active with 1 out of 2 devices [ 1394.336132][T31589] md0: detected capacity change from 0 to 2048 [ 1394.365731][T31600] md: resync of RAID array md0 [ 1394.375024][T31603] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1394.375175][T31589] IPVS: stopping backup sync thread 31603 ... [ 1394.404991][T31600] md: md0: resync done. [ 1394.416562][ T5741] Bluetooth: hci0: command 0x0c1a tx timeout [ 1394.416598][ T5741] Bluetooth: hci4: command 0x0c1a tx timeout [ 1394.459095][T31608] md: recover of RAID array md0 [ 1394.483188][T31608] md: md0: recover done. [ 1394.627256][T31605] Console: switching to colour dummy device 80x25 [ 1394.716399][T31611] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1394.739427][T31611] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1394.739565][T31611] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1394.739784][T31611] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1394.740382][T31611] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1394.747264][T31611] pci 0000:00:01.0: Adding to iommu group 1 [ 1394.750975][T31611] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1394.750988][T31611] pci 0000:00:01.0: vgaarb: bridge control possible [ 1394.750996][T31611] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1394.785096][T31611] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1394.785212][T31611] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1394.787664][T31611] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1394.801160][T31611] [drm] Found bochs VGA, ID 0xb0c5. [ 1394.801177][T31611] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1394.820053][T31611] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1394.969950][T31611] Console: switching to colour frame buffer device 160x50 [ 1394.999055][T31611] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1396.496603][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 1396.945648][T31634] Console: switching to colour dummy device 80x25 [ 1397.173503][T31635] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1397.191093][T31635] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1397.191508][T31635] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1397.197324][T31635] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1397.199273][T31635] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1397.209107][T31635] pci 0000:00:01.0: Adding to iommu group 1 [ 1397.218717][T31635] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1397.218731][T31635] pci 0000:00:01.0: vgaarb: bridge control possible [ 1397.218738][T31635] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1397.225369][T31635] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1397.225634][T31635] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1397.232698][T31635] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1397.271459][T31635] [drm] Found bochs VGA, ID 0xb0c5. [ 1397.271564][T31635] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1397.299888][T31635] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1397.353670][T31642] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1397.446548][ T5781] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1397.600007][ T5781] usb 5-1: Using ep0 maxpacket: 8 [ 1397.619585][ T5781] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1397.641913][ T5781] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1397.642036][ T5781] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1397.642077][ T5781] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1397.642119][ T5781] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1397.642164][ T5781] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1397.642234][ T5781] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1397.642294][ T5781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.667125][T31635] Console: switching to colour frame buffer device 160x50 [ 1397.718219][T31635] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1397.777755][T31645] Console: switching to colour dummy device 80x25 [ 1398.452002][T31646] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1398.474210][T31646] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1398.474494][T31646] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1398.476209][T31646] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1398.481861][T31646] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1398.545693][T31646] pci 0000:00:01.0: Adding to iommu group 1 [ 1398.610110][T31646] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1398.610124][T31646] pci 0000:00:01.0: vgaarb: bridge control possible [ 1398.610132][T31646] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1398.657643][T31646] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1398.658011][T31646] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1398.671511][T31646] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1398.740227][T31646] [drm] Found bochs VGA, ID 0xb0c5. [ 1398.740365][T31646] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1399.034342][T31646] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1399.070664][ T43] libceph: connect (1)[c::]:6789 error -101 [ 1399.071253][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1399.584546][T29461] libceph: connect (1)[c::]:6789 error -101 [ 1399.590789][T29461] libceph: mon0 (1)[c::]:6789 connect error [ 1399.642973][T31647] ceph: No mds server is up or the cluster is laggy [ 1400.000027][T31638] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1400.000225][T31638] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1400.000350][T31638] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1400.038557][T31646] Console: switching to colour frame buffer device 160x50 [ 1400.088943][T31646] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1400.089789][T31660] input: syz1 as /devices/virtual/input/input45 [ 1400.170401][T31660] netlink: 'syz.2.6657': attribute type 1 has an invalid length. [ 1400.187248][T31655] Console: switching to colour dummy device 80x25 [ 1400.267356][T31663] bond8: (slave veth0_to_bond): Releasing active interface [ 1400.286607][T31663] bond9: (slave veth0_to_bond): making interface the new active one [ 1400.293456][T31663] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1400.356101][T31661] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1400.374756][T31661] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1400.374903][T31661] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1400.375167][T31661] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1400.376168][T31661] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1400.399494][T31661] pci 0000:00:01.0: Adding to iommu group 1 [ 1400.429346][T31661] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1400.429368][T31661] pci 0000:00:01.0: vgaarb: bridge control possible [ 1400.429380][T31661] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1400.451973][T31661] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1400.452179][T31661] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1400.453755][T31661] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1400.483132][T31661] [drm] Found bochs VGA, ID 0xb0c5. [ 1400.483143][T31661] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1400.515386][T31661] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1400.820441][T31661] Console: switching to colour frame buffer device 160x50 [ 1400.890095][T31661] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1401.420760][T31638] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1401.421651][ T5781] usb 5-1: usb_control_msg returned -71 [ 1401.421687][ T5781] usbtmc 5-1:16.0: can't read capabilities [ 1401.431296][ T5781] usb 5-1: USB disconnect, device number 7 [ 1401.765553][T31680] Console: switching to colour dummy device 80x25 [ 1401.833341][T31681] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1401.841575][T31681] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1401.841678][T31681] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1401.841859][T31681] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1401.842246][T31681] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1401.846564][T31681] pci 0000:00:01.0: Adding to iommu group 1 [ 1401.849250][T31681] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1401.849287][T31681] pci 0000:00:01.0: vgaarb: bridge control possible [ 1401.849295][T31681] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1401.854790][T31681] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1401.855214][T31681] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1401.856417][T31681] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1401.863237][T31681] [drm] Found bochs VGA, ID 0xb0c5. [ 1401.863374][T31681] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1402.016790][ T5741] Bluetooth: hci0: command 0x0c1a tx timeout [ 1402.017297][ T5741] Bluetooth: hci4: command 0x0c1a tx timeout [ 1402.020397][ T5741] Bluetooth: hci3: command 0x0c1a tx timeout [ 1402.195974][T31681] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1402.368738][T31681] Console: switching to colour frame buffer device 160x50 [ 1402.385347][T31681] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1402.471584][T31685] Console: switching to colour dummy device 80x25 [ 1402.514948][T31693] netlink: 'syz.1.6665': attribute type 4 has an invalid length. [ 1402.527806][T31693] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1403.337430][T31693] md: md0: raid1 would not accept array [ 1403.519341][T31700] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1403.645463][T31687] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1403.653037][T31687] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1403.653220][T31687] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1403.653407][T31687] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1403.653846][T31687] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1403.691074][T31687] pci 0000:00:01.0: Adding to iommu group 1 [ 1403.702504][T31687] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1403.702522][T31687] pci 0000:00:01.0: vgaarb: bridge control possible [ 1403.702533][T31687] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1403.728027][T31687] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1403.728140][T31687] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1403.734603][T31687] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1403.752672][T31687] [drm] Found bochs VGA, ID 0xb0c5. [ 1403.752684][T31687] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1403.776612][T31687] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1403.878204][ T5781] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1403.936761][T31687] Console: switching to colour frame buffer device 160x50 [ 1403.958482][T31687] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1404.047297][ T5781] usb 7-1: Using ep0 maxpacket: 8 [ 1404.049865][ T5781] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1404.050691][ T5781] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1404.050726][ T5781] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1404.050749][ T5781] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1404.050767][ T5781] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1404.050786][ T5781] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1404.050806][ T5781] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1404.050833][ T5781] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.096665][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 1404.197067][ T42] libceph: connect (1)[c::]:6789 error -101 [ 1404.197473][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 1404.462863][ T42] libceph: connect (1)[c::]:6789 error -101 [ 1404.465458][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 1404.572469][T16406] libceph: connect (1)[c::]:6789 error -101 [ 1404.573283][T16406] libceph: mon0 (1)[c::]:6789 connect error [ 1404.827351][T16406] libceph: connect (1)[c::]:6789 error -101 [ 1404.827592][T16406] libceph: mon0 (1)[c::]:6789 connect error [ 1404.953046][T31705] ceph: No mds server is up or the cluster is laggy [ 1404.980799][ T42] libceph: connect (1)[c::]:6789 error -101 [ 1404.980926][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 1405.124757][T31703] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1405.124885][T31703] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1405.124971][T31703] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1405.143901][T31706] ceph: No mds server is up or the cluster is laggy [ 1405.273062][T31719] input: syz1 as /devices/virtual/input/input46 [ 1405.322583][T31719] netlink: 'syz.0.6669': attribute type 1 has an invalid length. [ 1405.382815][T31719] bond4: (slave veth0_to_bond): making interface the new active one [ 1405.383372][T31719] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1405.871496][T31724] Console: switching to colour dummy device 80x25 [ 1406.032475][T31728] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1406.046679][T31728] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1406.046828][T31728] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1406.047067][T31728] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1406.049045][T31728] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1406.055560][T31728] pci 0000:00:01.0: Adding to iommu group 1 [ 1406.063846][T31728] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1406.063867][T31728] pci 0000:00:01.0: vgaarb: bridge control possible [ 1406.063879][T31728] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1406.079359][T31728] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1406.079474][T31728] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1406.081839][T31728] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1406.107223][T31728] [drm] Found bochs VGA, ID 0xb0c5. [ 1406.107238][T31728] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1406.167139][T31728] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1406.419967][T31728] Console: switching to colour frame buffer device 160x50 [ 1406.467275][T31728] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1407.056581][ T5741] Bluetooth: hci3: command 0x0c1a tx timeout [ 1407.120037][T31716] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1407.120783][ T5781] usb 7-1: usb_control_msg returned -71 [ 1407.120818][ T5781] usbtmc 7-1:16.0: can't read capabilities [ 1407.130631][ T5781] usb 7-1: USB disconnect, device number 74 [ 1407.136824][ T5741] Bluetooth: hci0: command 0x0c1a tx timeout [ 1407.136852][ T5741] Bluetooth: hci4: command 0x0c1a tx timeout [ 1407.965184][T31741] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1408.001827][T31748] input: syz1 as /devices/virtual/input/input47 [ 1408.445990][T31750] netlink: 'syz.0.6679': attribute type 1 has an invalid length. [ 1408.463629][T31751] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1408.557485][T31753] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1408.557617][T31741] IPVS: stopping backup sync thread 31753 ... [ 1408.633692][T31748] bond4: (slave veth0_to_bond): Releasing active interface [ 1408.636213][T31748] bond5: (slave veth0_to_bond): making interface the new active one [ 1408.650684][T31748] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1409.094540][T31762] input: syz1 as /devices/virtual/input/input48 [ 1409.216526][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 1409.259902][T31762] netlink: 'syz.4.6682': attribute type 1 has an invalid length. [ 1409.563730][T31757] Console: switching to colour dummy device 80x25 [ 1409.731529][T31760] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1409.779002][T31760] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1409.779108][T31760] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1409.783361][T31760] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1409.786346][T31760] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1409.860494][T31762] bond6: (slave veth0_to_bond): Releasing active interface [ 1409.862225][T31760] pci 0000:00:01.0: Adding to iommu group 1 [ 1409.873708][T31760] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1409.873723][T31760] pci 0000:00:01.0: vgaarb: bridge control possible [ 1409.873731][T31760] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1409.877078][T31762] bond7: (slave veth0_to_bond): making interface the new active one [ 1409.881563][T31762] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1409.891302][T31760] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1409.893057][T31760] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1409.899186][T31760] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1409.941427][T31760] [drm] Found bochs VGA, ID 0xb0c5. [ 1409.941439][T31760] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1409.977986][T31760] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1410.432819][T31760] Console: switching to colour frame buffer device 160x50 [ 1410.467923][T31760] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1411.436756][T16371] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1411.596572][T16371] usb 6-1: Using ep0 maxpacket: 8 [ 1411.598810][T16371] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1411.603373][T16371] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 1411.603568][T16371] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1411.603648][T16371] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1411.603726][T16371] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1411.603824][T16371] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1411.603929][T16371] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1411.604177][T16371] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.205311][T31776] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1412.206126][T31776] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1412.211906][T31776] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1413.589820][T31785] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1413.717676][ T5737] libceph: connect (1)[c::]:6789 error -101 [ 1413.718398][ T5737] libceph: mon0 (1)[c::]:6789 connect error [ 1413.867958][ T5737] libceph: connect (1)[c::]:6789 error -101 [ 1413.868473][ T5737] libceph: mon0 (1)[c::]:6789 connect error [ 1414.006304][T31774] ceph: No mds server is up or the cluster is laggy [ 1414.096701][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 1414.201089][T31790] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1414.226163][T31775] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1414.228446][T16371] usb 6-1: usb_control_msg returned -71 [ 1414.228484][T16371] usbtmc 6-1:16.0: can't read capabilities [ 1414.229980][T31790] md: couldn't update array info. -22 [ 1414.250115][T16371] usb 6-1: USB disconnect, device number 120 [ 1414.258244][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 1414.258282][ T65] Bluetooth: hci4: command 0x0c1a tx timeout [ 1414.289769][T31790] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1414.348874][T31792] md: could not open device unknown-block(1,2). [ 1414.348949][T31792] md: md_import_device returned -16 [ 1414.414602][T31796] input: syz1 as /devices/virtual/input/input49 [ 1414.437453][T31790] md: could not open device unknown-block(1,1). [ 1414.437750][T31790] md: md_import_device returned -16 [ 1414.444949][T31798] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1414.445081][T31790] IPVS: stopping backup sync thread 31798 ... [ 1415.037966][T31796] netlink: 'syz.1.6690': attribute type 1 has an invalid length. [ 1415.174552][T31801] bond6: (slave veth0_to_bond): Releasing active interface [ 1415.221005][T31801] bond7: (slave veth0_to_bond): making interface the new active one [ 1415.226654][T31801] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1415.226902][T31800] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1416.337075][ T5741] Bluetooth: hci0: command 0x0c1a tx timeout [ 1416.462562][T31563] libceph: connect (1)[c::]:6789 error -101 [ 1416.462922][T31563] libceph: mon0 (1)[c::]:6789 connect error [ 1416.578192][ T5737] libceph: connect (1)[c::]:6789 error -101 [ 1416.578778][ T5737] libceph: mon0 (1)[c::]:6789 connect error [ 1416.717997][T31563] libceph: connect (1)[c::]:6789 error -101 [ 1416.718781][T31563] libceph: mon0 (1)[c::]:6789 connect error [ 1416.849070][ T5737] libceph: connect (1)[c::]:6789 error -101 [ 1416.849864][ T5737] libceph: mon0 (1)[c::]:6789 connect error [ 1417.210326][T31797] ceph: No mds server is up or the cluster is laggy [ 1417.226870][T31563] libceph: connect (1)[c::]:6789 error -101 [ 1417.226961][T31563] libceph: mon0 (1)[c::]:6789 connect error [ 1417.378500][ T42] libceph: connect (1)[c::]:6789 error -101 [ 1417.378959][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 1417.805636][T31814] input: syz1 as /devices/virtual/input/input50 [ 1417.926283][T31814] netlink: 'syz.4.6695': attribute type 1 has an invalid length. [ 1417.980128][T31807] ceph: No mds server is up or the cluster is laggy [ 1418.264807][T31820] bond7: (slave veth0_to_bond): Releasing active interface [ 1418.288109][T31820] bond8: (slave veth0_to_bond): making interface the new active one [ 1418.295767][T31820] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1418.651230][T31827] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1418.839093][T31825] Console: switching to colour dummy device 80x25 [ 1418.973275][T31830] input: syz1 as /devices/virtual/input/input51 [ 1419.137454][T31830] netlink: 'syz.0.6698': attribute type 1 has an invalid length. [ 1419.173224][T31830] bond5: (slave veth0_to_bond): Releasing active interface [ 1419.182715][T31830] bond6: (slave veth0_to_bond): making interface the new active one [ 1419.183354][T31830] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1419.398912][ T5781] libceph: connect (1)[c::]:6789 error -101 [ 1419.399381][ T5781] libceph: mon0 (1)[c::]:6789 connect error [ 1419.651860][T31841] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1419.659605][T31841] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1419.659747][T31841] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1419.659986][T31841] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1419.660747][T31841] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1419.663284][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 1419.663540][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 1419.666771][T31841] pci 0000:00:01.0: Adding to iommu group 1 [ 1419.672280][T31841] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1419.672300][T31841] pci 0000:00:01.0: vgaarb: bridge control possible [ 1419.672319][T31841] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1419.678025][T31841] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1419.678199][T31841] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1419.679612][T31841] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1419.689083][T31841] [drm] Found bochs VGA, ID 0xb0c5. [ 1419.689100][T31841] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1419.752099][T31841] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1419.841547][T31841] Console: switching to colour frame buffer device 160x50 [ 1419.859127][T31841] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1420.184953][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 1420.185909][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 1420.625298][T31831] ceph: No mds server is up or the cluster is laggy [ 1420.840348][T31848] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1420.843439][T31850] input: syz1 as /devices/virtual/input/input52 [ 1420.894900][T31850] netlink: 'syz.0.6704': attribute type 1 has an invalid length. [ 1420.896826][T31848] md: couldn't update array info. -22 [ 1420.950282][T31848] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1421.049201][T31859] bond6: (slave veth0_to_bond): Releasing active interface [ 1421.058130][T31848] md: could not open device unknown-block(1,1). [ 1421.058160][T31848] md: md_import_device returned -16 [ 1421.066767][T31863] md: could not open device unknown-block(1,2). [ 1421.066857][T31863] md: md_import_device returned -16 [ 1421.067974][T31859] bond7: (slave veth0_to_bond): making interface the new active one [ 1421.068859][T31859] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1421.207367][T31872] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1421.207495][T31857] IPVS: stopping backup sync thread 31872 ... [ 1421.708059][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 1421.708155][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 1421.880942][T31877] Console: switching to colour dummy device 80x25 [ 1422.063785][T31877] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1422.070293][T31877] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1422.070408][T31877] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1422.070632][T31877] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1422.071039][T31877] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1422.074748][T31877] pci 0000:00:01.0: Adding to iommu group 1 [ 1422.077133][T31877] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1422.077147][T31877] pci 0000:00:01.0: vgaarb: bridge control possible [ 1422.077154][T31877] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1422.081387][T31877] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1422.081519][T31877] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1422.082635][T31877] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1422.089947][T31877] [drm] Found bochs VGA, ID 0xb0c5. [ 1422.089956][T31877] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1422.103795][T31877] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1422.193076][T31877] Console: switching to colour frame buffer device 160x50 [ 1422.210278][T31877] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1422.572705][T31888] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1422.669658][T31892] netlink: 'syz.2.6718': attribute type 1 has an invalid length. [ 1422.718372][T31892] bond9: (slave veth0_to_bond): Releasing active interface [ 1422.726146][T31892] bond10: (slave veth0_to_bond): making interface the new active one [ 1422.730135][T31892] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1422.844762][T31896] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1422.876923][T31896] md: couldn't update array info. -22 [ 1422.946901][T31897] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1422.987096][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 1422.987619][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 1423.011607][T31897] md: could not open device unknown-block(1,1). [ 1423.011701][T31897] md: md_import_device returned -16 [ 1423.011984][T31896] md: could not open device unknown-block(1,2). [ 1423.012055][T31896] md: md_import_device returned -16 [ 1423.116382][T31904] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1423.121021][T31896] IPVS: stopping backup sync thread 31904 ... [ 1423.206723][ T43] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1423.260284][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 1423.260963][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 1423.356756][ T43] usb 9-1: Using ep0 maxpacket: 8 [ 1423.357228][ T43] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1423.361725][ T43] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 1423.361751][ T43] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1423.361765][ T43] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1423.361777][ T43] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1423.361790][ T43] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1423.361801][ T43] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1423.361821][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.409187][T31906] fuse: Bad value for 'group_id' [ 1423.409200][T31906] fuse: Bad value for 'group_id' [ 1423.658196][T31894] ceph: No mds server is up or the cluster is laggy [ 1423.975794][T31902] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1423.975995][T31902] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1423.976110][T31902] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1424.714007][T31925] netlink: 'syz.0.6727': attribute type 1 has an invalid length. [ 1424.753470][T31925] bond7: (slave veth0_to_bond): Releasing active interface [ 1424.762189][T31925] bond8: (slave veth0_to_bond): making interface the new active one [ 1424.763215][T31925] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1424.830435][T31931] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1424.886797][T31931] md: couldn't update array info. -22 [ 1424.937375][T31931] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1424.988910][T31931] md: could not open device unknown-block(1,1). [ 1424.988963][T31931] md: md_import_device returned -16 [ 1425.086873][T31931] md: could not open device unknown-block(1,2). [ 1425.086913][T31931] md: md_import_device returned -16 [ 1425.257437][T31937] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1425.259315][T31931] IPVS: stopping backup sync thread 31937 ... [ 1425.776563][ T5741] Bluetooth: hci3: command 0x0c1a tx timeout [ 1426.016249][T31900] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1426.016806][ T43] usb 9-1: usb_control_msg returned -71 [ 1426.016830][ T43] usbtmc 9-1:16.0: can't read capabilities [ 1426.017497][ T5741] Bluetooth: hci4: command 0x0c1a tx timeout [ 1426.017523][ T5741] Bluetooth: hci0: command 0x0c1a tx timeout [ 1426.023037][ T43] usb 9-1: USB disconnect, device number 14 [ 1426.154809][T31943] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1427.776345][ T43] libceph: connect (1)[c::]:6789 error -101 [ 1427.777035][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1428.053907][ T43] libceph: connect (1)[c::]:6789 error -101 [ 1428.055287][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1428.096765][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 1428.400246][T31946] ceph: No mds server is up or the cluster is laggy [ 1428.410921][ T1351] libceph: connect (1)[c::]:6789 error -101 [ 1428.411063][ T1351] libceph: mon0 (1)[c::]:6789 connect error [ 1428.556849][ T43] libceph: connect (1)[c::]:6789 error -101 [ 1428.556937][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1428.666776][ T43] libceph: connect (1)[c::]:6789 error -101 [ 1428.666865][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1428.901622][T31940] ceph: No mds server is up or the cluster is laggy [ 1429.341461][T31966] netlink: 'syz.2.6737': attribute type 1 has an invalid length. [ 1429.426317][T31964] bond10: (slave veth0_to_bond): Releasing active interface [ 1429.507184][T31964] bond11: (slave veth0_to_bond): making interface the new active one [ 1429.510424][T31964] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1429.635116][T31972] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1429.676759][T31972] md: couldn't update array info. -22 [ 1429.719324][T31972] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1429.808079][T31974] md: could not open device unknown-block(1,2). [ 1429.808133][T31974] md: md_import_device returned -16 [ 1429.930881][T31977] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1429.931362][T31972] IPVS: stopping backup sync thread 31977 ... [ 1430.734815][T31983] netlink: 'syz.4.6742': attribute type 4 has an invalid length. [ 1430.745840][T31983] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1430.766644][T31986] Console: switching to colour dummy device 80x25 [ 1430.834751][T31987] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1430.856258][T31987] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1430.856411][T31987] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1430.862824][T31987] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1430.864130][T31987] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1430.888830][T31987] pci 0000:00:01.0: Adding to iommu group 1 [ 1430.903916][T31987] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1430.903931][T31987] pci 0000:00:01.0: vgaarb: bridge control possible [ 1430.903938][T31987] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1430.926649][T31987] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1430.926911][T31987] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1430.937748][T31987] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1430.975541][T31987] [drm] Found bochs VGA, ID 0xb0c5. [ 1430.975602][T31987] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1430.997379][T31987] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1431.235781][T31987] Console: switching to colour frame buffer device 160x50 [ 1431.265509][T31987] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1431.274991][T31989] Console: switching to colour dummy device 80x25 [ 1431.325143][T31994] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1431.333960][T31994] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1431.334255][T31994] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1431.334510][T31994] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1431.335019][T31994] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1431.342555][T31994] pci 0000:00:01.0: Adding to iommu group 1 [ 1431.406727][T31994] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1431.406753][T31994] pci 0000:00:01.0: vgaarb: bridge control possible [ 1431.406767][T31994] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1431.422112][T31994] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1431.424675][T31994] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1431.428956][T31994] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1431.461924][T31994] [drm] Found bochs VGA, ID 0xb0c5. [ 1431.461937][T31994] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1431.481496][T31994] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1431.778009][T31994] Console: switching to colour frame buffer device 160x50 [ 1431.813077][T31994] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1433.005812][T32010] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1433.037300][T32012] input: syz1 as /devices/virtual/input/input56 [ 1433.046970][T32010] md: couldn't update array info. -22 [ 1433.083466][T32012] netlink: 'syz.2.6750': attribute type 1 has an invalid length. [ 1433.101540][T32016] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1433.125425][T32012] bond11: (slave veth0_to_bond): Releasing active interface [ 1433.141354][T32012] bond12: (slave veth0_to_bond): making interface the new active one [ 1433.141987][T32012] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1433.199567][T32010] md: could not open device unknown-block(1,2). [ 1433.199723][T32010] md: md_import_device returned -16 [ 1433.281652][T32019] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1433.281817][T32010] IPVS: stopping backup sync thread 32019 ... [ 1433.411785][T32023] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1434.434467][ T1351] libceph: connect (1)[c::]:6789 error -101 [ 1434.434647][ T1351] libceph: mon0 (1)[c::]:6789 connect error [ 1434.620184][T32035] Console: switching to colour dummy device 80x25 [ 1434.686877][ T1351] libceph: connect (1)[c::]:6789 error -101 [ 1434.687013][ T1351] libceph: mon0 (1)[c::]:6789 connect error [ 1435.038774][T32036] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1435.081738][T32036] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1435.081842][T32036] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1435.082016][T32036] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1435.082355][T32036] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1435.125079][T32036] pci 0000:00:01.0: Adding to iommu group 1 [ 1435.153548][T32036] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1435.153564][T32036] pci 0000:00:01.0: vgaarb: bridge control possible [ 1435.153571][T32036] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1435.197677][ T1351] libceph: connect (1)[c::]:6789 error -101 [ 1435.197964][ T1351] libceph: mon0 (1)[c::]:6789 connect error [ 1435.215585][T32036] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1435.222266][T32036] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1435.223926][T32036] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1435.335290][T32036] [drm] Found bochs VGA, ID 0xb0c5. [ 1435.335309][T32036] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1435.366060][T32036] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1435.418348][T32028] ceph: No mds server is up or the cluster is laggy [ 1435.878367][T32036] Console: switching to colour frame buffer device 160x50 [ 1435.933878][T32036] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1436.963576][T32041] Console: switching to colour dummy device 80x25 [ 1437.396369][T32045] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1437.403605][T32045] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1437.403742][T32045] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1437.403977][T32045] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1437.404713][T32045] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1437.410744][T32045] pci 0000:00:01.0: Adding to iommu group 1 [ 1437.414895][T32045] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1437.414915][T32045] pci 0000:00:01.0: vgaarb: bridge control possible [ 1437.414928][T32045] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1437.420157][T32045] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1437.420340][T32045] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1437.422114][T32045] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1437.430681][T32045] [drm] Found bochs VGA, ID 0xb0c5. [ 1437.430696][T32045] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1437.870262][T32045] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1437.980922][T32045] Console: switching to colour frame buffer device 160x50 [ 1438.007736][T32045] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1438.159986][T32053] input: syz1 as /devices/virtual/input/input57 [ 1438.174484][T32054] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1438.261021][T32055] netlink: 'syz.0.6761': attribute type 1 has an invalid length. [ 1438.302750][T32053] bond8: (slave veth0_to_bond): Releasing active interface [ 1438.319581][T32053] bond9: (slave veth0_to_bond): making interface the new active one [ 1438.333526][T32053] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1438.565796][T32059] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1438.626742][T32059] md: couldn't update array info. -22 [ 1438.669244][T32059] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1438.727336][T16371] libceph: connect (1)[c::]:6789 error -101 [ 1438.728329][T16371] libceph: mon0 (1)[c::]:6789 connect error [ 1438.799014][T32059] md: could not open device unknown-block(1,2). [ 1438.799072][T32059] md: md_import_device returned -16 [ 1438.841416][T32067] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1438.841658][T32059] IPVS: stopping backup sync thread 32067 ... [ 1438.986789][T31563] libceph: connect (1)[c::]:6789 error -101 [ 1438.986877][T31563] libceph: mon0 (1)[c::]:6789 connect error [ 1439.508228][T31563] libceph: connect (1)[c::]:6789 error -101 [ 1439.508859][T31563] libceph: mon0 (1)[c::]:6789 connect error [ 1439.871961][T32073] Console: switching to colour dummy device 80x25 [ 1439.943148][T32057] ceph: No mds server is up or the cluster is laggy [ 1439.944145][T32075] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1439.969733][T32075] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1439.969874][T32075] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1439.970095][T32075] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1439.970547][T32075] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1440.068705][T32075] pci 0000:00:01.0: Adding to iommu group 1 [ 1440.071190][T32075] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1440.071206][T32075] pci 0000:00:01.0: vgaarb: bridge control possible [ 1440.071213][T32075] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1440.101512][T32079] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1440.111357][T32075] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1440.119556][T32075] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1440.123719][T32075] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1440.172283][T32075] [drm] Found bochs VGA, ID 0xb0c5. [ 1440.172304][T32075] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1440.195446][T32075] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1440.296146][T32081] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1440.356615][T32081] md: couldn't update array info. -22 [ 1440.385620][T32075] Console: switching to colour frame buffer device 160x50 [ 1440.410600][T32081] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1440.434168][T32075] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1440.453792][T32071] Console: switching to colour dummy device 80x25 [ 1440.477864][T32081] md: could not open device unknown-block(1,1). [ 1440.477897][T32081] md: md_import_device returned -16 [ 1440.477989][T32083] md: could not open device unknown-block(1,2). [ 1440.478012][T32083] md: md_import_device returned -16 [ 1440.603406][T32085] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1440.606121][T32081] IPVS: stopping backup sync thread 32085 ... [ 1440.971557][ T1351] libceph: connect (1)[c::]:6789 error -101 [ 1440.973999][ T1351] libceph: mon0 (1)[c::]:6789 connect error [ 1441.229105][ T1351] libceph: connect (1)[c::]:6789 error -101 [ 1441.230197][ T1351] libceph: mon0 (1)[c::]:6789 connect error [ 1441.738721][ T43] libceph: connect (1)[c::]:6789 error -101 [ 1441.740086][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1441.914881][T32097] gadgetfs: bound to dummy_udc driver [ 1441.937589][ T44] kauditd_printk_skb: 28 callbacks suppressed [ 1441.937610][ T44] audit: type=1800 audit(1790423281.479:3783): pid=32097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6770" name="ep1in-bulk" dev="gadgetfs" ino=123342 res=0 errno=0 [ 1442.170397][T32084] ceph: No mds server is up or the cluster is laggy [ 1442.176898][ T5882] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 1442.177312][ C1] gadgetfs: connected [ 1442.177394][ T5882] gadgetfs: disconnected [ 1442.381979][T32103] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1442.417500][T32103] md: couldn't update array info. -22 [ 1442.472260][T32105] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 1442.537011][T32105] [ 1442.538089][T32105] ====================================================== [ 1442.541434][T32105] WARNING: possible circular locking dependency detected [ 1442.544154][T32105] syzkaller #0 Tainted: G L [ 1442.546554][T31563] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1442.549786][T32105] ------------------------------------------------------ [ 1442.552595][T32105] syz.1.6773/32105 is trying to acquire lock: [ 1442.555109][T32105] ffffffff8f9be780 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 1442.558878][T32105] [ 1442.558878][T32105] but task is already holding lock: [ 1442.561880][T32105] ffff8880136c0358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_ioctl+0x111d/0x36d0 [ 1442.565686][T32105] [ 1442.565686][T32105] which lock already depends on the new lock. [ 1442.565686][T32105] [ 1442.568293][T32100] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1442.575387][T32100] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1442.575528][T32100] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1442.575786][T32100] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1442.579119][T32100] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1442.584847][T32100] pci 0000:00:01.0: Adding to iommu group 1 [ 1442.587234][T32100] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1442.587252][T32100] pci 0000:00:01.0: vgaarb: bridge control possible [ 1442.587267][T32100] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1442.593307][T32100] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1442.593478][T32100] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1442.594932][T32100] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1442.601143][T32100] [drm] Found bochs VGA, ID 0xb0c5. [ 1442.601157][T32100] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1442.619906][T32105] [ 1442.619906][T32105] the existing dependency chain (in reverse order) is: [ 1442.623694][T32105] [ 1442.623694][T32105] -> #3 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 1442.627226][T32105] lock_acquire+0x1d1/0x380 [ 1442.629439][T32105] __mutex_lock+0x1a4/0x1bd0 [ 1442.631650][T32105] md_start_sync+0xc4/0xea0 [ 1442.633832][T32105] process_one_work+0xac7/0x1b10 [ 1442.636145][T32105] worker_thread+0x5ef/0xe50 [ 1442.638352][T32105] kthread+0x373/0x450 [ 1442.640327][T32105] ret_from_fork+0x730/0xd60 [ 1442.642524][T32105] ret_from_fork_asm+0x1a/0x30 [ 1442.644955][T32105] [ 1442.644955][T32105] -> #2 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 1442.648945][T32105] lock_acquire+0x1d1/0x380 [ 1442.651121][T32105] process_one_work+0xa32/0x1b10 [ 1442.653447][T32105] worker_thread+0x5ef/0xe50 [ 1442.655616][T32105] kthread+0x373/0x450 [ 1442.657590][T32105] ret_from_fork+0x730/0xd60 [ 1442.659777][T32105] ret_from_fork_asm+0x1a/0x30 [ 1442.662184][T32105] [ 1442.662184][T32105] -> #1 ((wq_completion)md_misc){+.+.}-{0:0}: [ 1442.666025][T32105] lock_acquire+0x1d1/0x380 [ 1442.668110][T32105] touch_wq_lockdep_map+0xad/0x1c0 [ 1442.670502][T32105] __flush_workqueue+0x131/0x1200 [ 1442.672860][T32105] md_alloc+0x30/0x10a0 [ 1442.674886][T32105] md_probe+0x73/0xf0 [ 1442.676836][T32105] blk_probe_dev+0x149/0x1e0 [ 1442.679095][T32105] blk_request_module+0x16/0xc0 [ 1442.681403][T32105] blkdev_get_no_open+0x9b/0xf0 [ 1442.683691][T32105] blkdev_open+0x141/0x4f0 [ 1442.685818][T32105] do_dentry_open+0x6ab/0x14d0 [ 1442.687899][T32100] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 1442.691376][T32105] vfs_open+0x82/0x3f0 [ 1442.693405][T32105] path_openat+0x19fa/0x2440 [ 1442.695681][T32105] do_file_open+0x20e/0x430 [ 1442.697862][T32105] do_sys_openat2+0x10f/0x1e0 [ 1442.700032][T32105] __ia32_compat_sys_openat+0x12d/0x210 [ 1442.702536][T32105] __do_fast_syscall_32+0x13a/0x8b0 [ 1442.705098][T32105] do_fast_syscall_32+0x32/0x70 [ 1442.707405][T32105] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1442.710300][T32105] [ 1442.710300][T32105] -> #0 (major_names_lock){+.+.}-{4:4}: [ 1442.713527][T32105] check_prev_add+0xeb/0xe60 [ 1442.715718][T32105] __lock_acquire+0x1528/0x1f40 [ 1442.718014][T32105] lock_acquire+0x1d1/0x380 [ 1442.720167][T32105] __mutex_lock+0x1a4/0x1bd0 [ 1442.722207][T32105] blk_probe_dev+0x28/0x1e0 [ 1442.723863][T32105] blk_request_module+0x16/0xc0 [ 1442.725597][T32105] blkdev_get_no_open+0x9b/0xf0 [ 1442.727354][T32105] bdev_file_open_by_dev+0x70/0x210 [ 1442.729263][T32105] md_import_device+0x120/0x360 [ 1442.731149][T32105] md_add_new_disk+0xcc0/0x1820 [ 1442.733129][T32105] md_ioctl+0x2bec/0x36d0 [ 1442.735110][T32105] compat_blkdev_ioctl+0x682/0x7b0 [ 1442.736625][T31563] usb 9-1: Using ep0 maxpacket: 8 [ 1442.739430][T32105] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1442.741756][T32105] __do_fast_syscall_32+0x13a/0x8b0 [ 1442.744042][T32105] do_fast_syscall_32+0x32/0x70 [ 1442.745814][T32105] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1442.748029][T32105] [ 1442.748029][T32105] other info that might help us debug this: [ 1442.748029][T32105] [ 1442.752329][T32105] Chain exists of: [ 1442.752329][T32105] major_names_lock --> (work_completion)(&mddev->sync_work) --> &mddev->reconfig_mutex [ 1442.752329][T32105] [ 1442.759028][T32105] Possible unsafe locking scenario: [ 1442.759028][T32105] [ 1442.762333][T32105] CPU0 CPU1 [ 1442.764741][T32105] ---- ---- [ 1442.767146][T32105] lock(&mddev->reconfig_mutex); [ 1442.769450][T32105] lock((work_completion)(&mddev->sync_work)); [ 1442.773121][T32105] lock(&mddev->reconfig_mutex); [ 1442.775565][T32105] lock(major_names_lock); [ 1442.776978][T32105] [ 1442.776978][T32105] *** DEADLOCK *** [ 1442.776978][T32105] [ 1442.779511][T32105] locks held by syz.1.6773/32105: 1, last CPU#2: [ 1442.781514][T32105] #0: ffff8880136c0358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_ioctl+0x111d/0x36d0 [ 1442.784843][T32105] [ 1442.784843][T32105] stack backtrace: [ 1442.786593][T32105] CPU: 2 UID: 0 PID: 32105 Comm: syz.1.6773 Tainted: G L syzkaller #0 PREEMPT(full) [ 1442.790845][T32105] Tainted: [L]=SOFTLOCKUP [ 1442.792307][T32105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1442.795450][T32105] Call Trace: [ 1442.796551][T32105] [ 1442.797585][T32105] dump_stack_lvl+0x100/0x190 [ 1442.799107][T32105] print_circular_bug.cold+0x178/0x1be [ 1442.800995][T32105] check_noncircular+0x146/0x160 [ 1442.802823][T32105] check_prev_add+0xeb/0xe60 [ 1442.804521][T32105] __lock_acquire+0x1528/0x1f40 [ 1442.806202][T32105] lock_acquire+0x1d1/0x380 [ 1442.807789][T32105] ? blk_probe_dev+0x28/0x1e0 [ 1442.809377][T32105] ? __pfx___might_resched+0x10/0x10 [ 1442.811210][T32105] ? do_fast_syscall_32+0x32/0x70 [ 1442.812768][T32105] __mutex_lock+0x1a4/0x1bd0 [ 1442.814536][T32105] ? blk_probe_dev+0x28/0x1e0 [ 1442.816493][T32105] ? blk_probe_dev+0x28/0x1e0 [ 1442.818503][T32105] ? lock_acquire+0x1d1/0x380 [ 1442.820404][T32105] ? find_inode_fast+0xa5/0xa30 [ 1442.822171][T32105] ? find_held_lock+0x2b/0x80 [ 1442.823769][T32105] ? __pfx___mutex_lock+0x10/0x10 [ 1442.825431][T32105] ? find_inode_fast+0x1fa/0xa30 [ 1442.827208][T32105] ? blk_probe_dev+0x28/0x1e0 [ 1442.828854][T32105] blk_probe_dev+0x28/0x1e0 [ 1442.830361][T32105] blk_request_module+0x16/0xc0 [ 1442.831904][T32105] blkdev_get_no_open+0x9b/0xf0 [ 1442.833952][T32105] bdev_file_open_by_dev+0x70/0x210 [ 1442.835869][T32105] md_import_device+0x120/0x360 [ 1442.837886][T32105] md_add_new_disk+0xcc0/0x1820 [ 1442.839490][T32105] md_ioctl+0x2bec/0x36d0 [ 1442.840997][T32105] ? __pfx_md_ioctl+0x10/0x10 [ 1442.842799][T32105] ? do_vfs_ioctl+0x226/0x13e0 [ 1442.844791][T32105] ? __fget_files+0x34/0x3d0 [ 1442.846606][T32105] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1442.848755][T32105] ? __pfx_md_compat_ioctl+0x10/0x10 [ 1442.850689][T32105] compat_blkdev_ioctl+0x682/0x7b0 [ 1442.852633][T32105] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1442.855044][T32105] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1442.857113][T32105] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 1442.859098][T32105] __do_fast_syscall_32+0x13a/0x8b0 [ 1442.861102][T32105] do_fast_syscall_32+0x32/0x70 [ 1442.862971][T32105] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1442.865280][T32105] RIP: 0023:0xf702efec [ 1442.866835][T32105] Code: Unable to access opcode bytes at 0xf702efc2. [ 1442.869355][T32105] RSP: 002b:00000000f53fc50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1442.872382][T32105] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040140921 [ 1442.875225][T32105] RDX: 0000000080000420 RSI: 0000000000000000 RDI: 0000000000000000 [ 1442.877895][T32105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1442.880681][T32105] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1442.883443][T32105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1442.886416][T32105] [ 1442.894881][T31563] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1442.896269][T31563] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 1442.896302][T31563] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1442.896323][T31563] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1442.896388][T31563] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1442.896411][T31563] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1442.896429][T31563] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1442.896521][T31563] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.020662][T32100] Console: switching to colour frame buffer device 160x50 [ 1443.080641][T32100] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 1443.102297][T32114] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1443.104771][T32113] IPVS: stopping backup sync thread 32114 ... [ 1443.108656][T32105] md: could not open device unknown-block(0,0). [ 1443.108693][T32105] md: md_import_device returned -6 [ 1443.108785][T32103] md: could not open device unknown-block(1,2). [ 1443.108814][T32103] md: md_import_device returned -16 [ 1443.693816][T32101] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1443.693926][T32101] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1443.693992][T32101] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1445.253950][T32098] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1445.254496][T31563] usb 9-1: usb_control_msg returned -71 [ 1445.254513][T31563] usbtmc 9-1:16.0: can't read capabilities [ 1445.255510][T31563] usb 9-1: USB disconnect, device number 15 [ 1445.696634][ T5741] Bluetooth: hci0: command 0x0c1a tx timeout [ 1445.696659][ T5741] Bluetooth: hci3: command 0x0c1a tx timeout [ 1445.697031][ T65] Bluetooth: hci4: command 0x0c1a tx timeout [ 1447.776648][T32120] Bluetooth: hci0: command 0x0c1a tx timeout