last executing test programs: 11m58.91271418s ago: executing program 2 (id=1340): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x4}}, 0x20) r3 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0xfffffffd, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x21, 0x0, 0x0) 11m56.617938755s ago: executing program 2 (id=1342): socket$netlink(0x10, 0x3, 0x12) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) unshare(0xc040400) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) close(r3) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 11m55.619081549s ago: executing program 2 (id=1346): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000400)='./file1/file0\x00', 0x0, 0x100000, 0x0) 11m54.586466638s ago: executing program 2 (id=1347): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x4000000, 0x0, 0x0, 'queue0\x00', 0x9}) r1 = syz_open_dev$video4linux(&(0x7f0000000500), 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setfsuid(0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0xb110f000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000180)={0x3, 0x20980903, 0x7}) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) 11m53.010666008s ago: executing program 2 (id=1349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbb721000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000001d80)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8080410}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x18, r4, 0x309, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) read$msr(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x1) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r7, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) gettid() mount$bpf(0x0, &(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000280), 0x18, &(0x7f0000000040)=ANY=[]) 11m50.412836254s ago: executing program 2 (id=1357): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000007840)=[{&(0x7f0000002900)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000004a40)=[{&(0x7f0000002940)="c6942a1a955ebe", 0x7}], 0x1, &(0x7f0000004a80)=[@dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @init={0x18, 0x84, 0x0, {0x8ef, 0x1, 0x0, 0xfeb9}}], 0x30, 0x8002}], 0x1, 0x4081) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'icmp6\x00'}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) unshare(0x40020000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r3, 0x0, 0x2}, 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="080000020001000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000ffffffff00"/21], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f00000000c0)={r4, r4, 0x206, 0x0, 0x0, 0x2, 0x84, 0x8, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 11m34.147702611s ago: executing program 32 (id=1357): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000007840)=[{&(0x7f0000002900)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000004a40)=[{&(0x7f0000002940)="c6942a1a955ebe", 0x7}], 0x1, &(0x7f0000004a80)=[@dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @init={0x18, 0x84, 0x0, {0x8ef, 0x1, 0x0, 0xfeb9}}], 0x30, 0x8002}], 0x1, 0x4081) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'icmp6\x00'}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, @void, @value}, 0x28) unshare(0x40020000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r3, 0x0, 0x2}, 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="080000020001000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000ffffffff00"/21], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f00000000c0)={r4, r4, 0x206, 0x0, 0x0, 0x2, 0x84, 0x8, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 10m36.555008785s ago: executing program 5 (id=1520): mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x100010, 0xffffffffffffffff, 0x7ba4c000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) close(0xffffffffffffffff) close(0x3) ftruncate(0xffffffffffffffff, 0xc17a) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000540)=""/137, 0x89}, {&(0x7f0000001a00)=""/126, 0x7e}, {&(0x7f0000000400)=""/212, 0xd4}], 0x5}, 0xd}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x2}], 0x4, 0x40000000, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r6, &(0x7f00000008c0)=[{0x0, 0x38, 0x0, 0xfd, @time, {}, {0xe}, @result}], 0x1c) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 10m34.989651494s ago: executing program 5 (id=1523): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1a0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0x1c}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e26, 0x0, @mcast2}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) personality(0x5000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x4, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x201, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000000c0)=[r7], 0x0}) socket$inet(0x2, 0x1, 0x100) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8000003a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0xfffffffd, 0x0, 0xffffffff, 0xe661, 0x8, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x6, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x7fff, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0x1000f9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x2, 0x78, 0xee4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x9, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0xb, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0xdf, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x9, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) socket(0x10, 0x3, 0x0) 10m33.370671205s ago: executing program 5 (id=1528): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(0x0, 0xfff7fffffffffffe, 0x2) r0 = socket(0x1e, 0x4, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb13}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) memfd_create(0x0, 0x1) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0xac05, 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4) sendto$inet(r3, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=""/156, 0x9c}, 0x3}], 0x1, 0x3072, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000004c0)={{}, {0x77359400}}, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 10m28.422872007s ago: executing program 5 (id=1535): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, 0x0) 10m27.993975896s ago: executing program 5 (id=1539): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b0000000000000000000000100000000000d89614e090df447c0000", @ANYRES32=r3, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="03000000020000000100"/28], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fddbdf250b0000000c00058008000100756470004dd0ac8b11023d7ffd96a91ec797847859a3623f1b9d9dcf3e1935ed1741350686ef5cd061a9eb61eb68ef086c71db9411a3167ffaf89f3cef48af4131412014d231470e608a71e74c6b3694a2d91dc0bd7f1a82972c775ba066254d735b271febfd202baabeb92017ed64eb580cfd4c9acb82f85a304f216e0fe22ec4d0701f103257f92125e03b845d00"], 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) 10m23.758057019s ago: executing program 5 (id=1545): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x86a80) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x6}) r3 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_open_procfs$pagemap(r1, &(0x7f0000000800)) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3ff}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}}, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) syz_open_dev$cec(0x0, 0x0, 0x82a80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = socket$caif_stream(0x25, 0x1, 0x2) recvmmsg(r6, &(0x7f0000002ac0)=[{{&(0x7f00000001c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000340)=""/149, 0x95}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000600)=""/212, 0xd4}, {0x0}, {&(0x7f0000000700)=""/160, 0xa0}, {&(0x7f0000000440)=""/15, 0xf}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x58b}], 0x2, 0x440649714b33c6a8, 0x0) 10m7.878654507s ago: executing program 33 (id=1545): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x86a80) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x6}) r3 = userfaultfd(0x801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_open_procfs$pagemap(r1, &(0x7f0000000800)) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3ff}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}}, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) syz_open_dev$cec(0x0, 0x0, 0x82a80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = socket$caif_stream(0x25, 0x1, 0x2) recvmmsg(r6, &(0x7f0000002ac0)=[{{&(0x7f00000001c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002880)=[{&(0x7f0000000340)=""/149, 0x95}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000000600)=""/212, 0xd4}, {0x0}, {&(0x7f0000000700)=""/160, 0xa0}, {&(0x7f0000000440)=""/15, 0xf}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x58b}], 0x2, 0x440649714b33c6a8, 0x0) 9m0.57284545s ago: executing program 4 (id=1715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000280), &(0x7f0000000440), &(0x7f0000000340)="94c14146f79c29fb4016c9d17e8040b8940ebf9c2db88dbad8af3b5516979a57e80b5f5e73001f8713f6b1c051cb6d08d2d082ac6c01b7e858f2b274a79a870bfa354e6b301c26b9d484ee1c9e28c336d013be7aa5d3edc593293845a375dff3401004440c50360a68b8a16c1f3cfacd9c9b0ee79d30cde69f397089ca03919d41aa483f8891b1c5c038c530f6caf30b1f3c15d4f7c0f7964230aa7199d63b0237f18e5ca8d130516c031f4afacc6576ddacc3ec81898561154adce958145d74", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$revoke(0x3, r4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) setregid(0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x880) ioctl$CEC_RECEIVE(r6, 0xc0386106, &(0x7f0000000100)={0x2, 0x1e021fe1, 0x9, 0xa40, 0x8, 0x966, "6aa5f6c3a55353193d4a33335756767e", 0x9, 0xa0, 0x6, 0x6, 0x7, 0x4, 0x3}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'macsec0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x32, 0x2, 0x3, {0x4, @sctp_ip4_spec={@private=0xa010102, @remote, 0x4e20, 0x4e23, 0x40}, {0x0, @multicast, 0xe14, 0x4, [0x9, 0x7aa]}, @sctp_ip6_spec={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4e21, 0x4e22}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0x4f3, 0x1, [0x40, 0xffffffff]}, 0x401, 0xda39}}}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r9, r10, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) 8m59.135802892s ago: executing program 4 (id=1719): socket$inet(0x2, 0x5, 0xfffffffd) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001500010000000000000000000e"], 0x14}}, 0x0) 8m57.79019118s ago: executing program 4 (id=1721): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000028000380240000800400028004000780040001"], 0xe8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 8m57.416718247s ago: executing program 4 (id=1722): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x4000000, 0x0, 0x0, 'queue0\x00', 0x9}) r1 = syz_open_dev$video4linux(&(0x7f0000000500), 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0xb110f000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000180)={0x3, 0x20980903, 0x7}) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) 8m55.583828742s ago: executing program 4 (id=1725): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) 8m52.541636342s ago: executing program 4 (id=1733): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 8m37.236658714s ago: executing program 34 (id=1733): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 52.689128475s ago: executing program 0 (id=2693): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x1e) 52.532773405s ago: executing program 0 (id=2696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000280), &(0x7f0000000440), &(0x7f0000000340)="94c14146f79c29fb4016c9d17e8040b8940ebf9c2db88dbad8af3b5516979a57e80b5f5e73001f8713f6b1c051cb6d08d2d082ac6c01b7e858f2b274a79a870bfa354e6b301c26b9d484ee1c9e28c336d013be7aa5d3edc593293845a375dff3401004440c50360a68b8a16c1f3cfacd9c9b0ee79d30cde69f397089ca03919d41aa483f8891b1c5c038c530f6caf30b1f3c15d4f7c0f7964230aa7199d63b0237f18e5ca8d130516c031f4afacc6576ddacc3ec81898561154adce958145d74", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$revoke(0x3, r3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) setregid(0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x880) ioctl$CEC_RECEIVE(r5, 0xc0386106, &(0x7f0000000100)={0x2, 0x1e021fe1, 0x9, 0xa40, 0x8, 0x966, "6aa5f6c3a55353193d4a33335756767e", 0x9, 0xa0, 0x6, 0x6, 0x7, 0x4, 0x3}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r8, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r6, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r10}) socket(0x2, 0x80805, 0x0) 51.387077159s ago: executing program 0 (id=2699): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000680)={[{@nouuid}, {@gquota}, {@swalloc}, {@uquota}, {}, {@sysvgroups}, {@noquota}], [{@flag='nomand'}]}, 0x4, 0x96d2, &(0x7f0000009680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0c0586d, &(0x7f0000000180)={0x400000000000401, 0x205, 0x8}) 47.428840654s ago: executing program 0 (id=2707): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) 43.667353698s ago: executing program 0 (id=2712): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) 42.736341912s ago: executing program 0 (id=2715): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001daa18c4089612d187301010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 17.153248627s ago: executing program 3 (id=2764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f0000000940)={0x1000000, 0x0, 0x103, 0x2, {0x0, 0x0, 0x9, 0xffffffff}}) 16.217876819s ago: executing program 3 (id=2766): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, 0x0, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x4, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, 0x0, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, 0x0) 15.377796281s ago: executing program 3 (id=2769): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000a00)="$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") mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 12.928928198s ago: executing program 7 (id=2775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000900), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f0000000940)={0x1000000, 0x0, 0x103, 0x2, {0x0, 0x0, 0x9, 0xffffffff}}) 11.800213883s ago: executing program 7 (id=2778): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, 0x0, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x4, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, 0x0, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, 0x0) 11.298932129s ago: executing program 3 (id=2780): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x8, 0x408040) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000040)=0x1) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x4a, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth0_to_team\x00'}) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @remote}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x8, {0x2, 0x0, @empty}, 'veth1_to_team\x00'}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000a80)={{0x2, 0xffff, @private=0xa010100}, {0x0, @multicast}, 0x0, {0x2, 0x4e23, @multicast1}, 'wg1\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r4, 0x70b85000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f0000000080)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, 0x0, 0x40408c0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0xcbf, 0x4, @remote, @local, 0x0, 0x8, 0x0, 0xd66}}) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 11.179526249s ago: executing program 7 (id=2781): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x71, 0x40000009, r2, 0x0) 11.147572008s ago: executing program 1 (id=2782): r0 = socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xa, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f00004ce000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000440)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f0000000740)) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) 10.940093701s ago: executing program 7 (id=2784): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4808}, 0x880) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x91, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.177505877s ago: executing program 1 (id=2785): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) fcntl$dupfd(r4, 0x0, r4) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0), 0x8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x0, 0x0, 'none\x00', 0x0, 0xfffffffc}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 7.603263117s ago: executing program 1 (id=2787): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000180)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,iocharset=macgreek,iocharset=cp775,integrity,nodiscard,iocharset=default,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c0094f040425b300877fabf17381913b355282af20d33df5b16991f23c7b688bdd22462f2223e755c34a5cea95fbcdb6a0c6e1cdcf2a3c2f2c2c3102d8800"/72], 0x24, 0x61b6, &(0x7f00000075c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwrite64(r0, &(0x7f0000000100)='m', 0x1, 0xeb2f) pwrite64(r0, &(0x7f0000000000)='#', 0x1, 0x2709d) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 5.560076098s ago: executing program 1 (id=2790): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, 0x0, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x4, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, 0x0, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, 0x0) 4.898482607s ago: executing program 1 (id=2791): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = open(0x0, 0x14927e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair(0x28, 0x800, 0x8003, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/136], 0x110) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0xffff, @private=0xa010100}}}, 0x108) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-serpent-sse2)\x00'}, 0x58) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.616597855s ago: executing program 6 (id=2792): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000a00)="$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") mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 4.372629816s ago: executing program 6 (id=2793): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0xe07e0e5e0d2a7803, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mount$9p_xen(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x1002000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=xen,uname=,cache=fscache,fowne#C', @ANYBLOB=',\x00']) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x67) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x11d7, 0x800, 0x4, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_gettime(0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x240) write$cgroup_int(r7, 0x0, 0x0) accept4$rose(r7, 0x0, &(0x7f0000000100), 0x80800) io_uring_enter(r4, 0x3516, 0x0, 0x4, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) 4.186142909s ago: executing program 6 (id=2794): r0 = socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0xa, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f00004ce000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000440)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x6, 0x0, &(0x7f0000000740)) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) 3.183870736s ago: executing program 6 (id=2795): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[], 0x1c}}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040), 0x4, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000380)={0x201, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000000c0)=[r7], 0x0}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8000003a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0xfffffffd, 0x0, 0xffffffff, 0xe661, 0x8, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x6, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x7fff, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0x1000f9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x2, 0x78, 0xee4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x9, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0xb, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0xdf, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x9, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}}, 0x0) 2.218962976s ago: executing program 6 (id=2796): socket(0x10, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) pipe(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) fcntl$dupfd(r4, 0x0, r4) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000001c0), 0x8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x0, 0x0, 'none\x00', 0x0, 0xfffffffc}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 1.889182969s ago: executing program 3 (id=2797): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f00000023c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r2, {0x7}}, 0x18) write$FUSE_IOCTL(r0, 0x0, 0x0) getdents64(r1, 0x0, 0x300) statx(r1, 0x0, 0x5800, 0x8, 0x0) write$FUSE_INTERRUPT(r0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x6d0c, &(0x7f0000000340)={0x0, 0x66, 0x10100}, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x184d, 0x0, 0x0, 0x0, 0x0) 1.888346753s ago: executing program 7 (id=2798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000780)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000001000b70800000000e7057b8af9ff0000000007020000f8ffffffb703000008000000170a5cb7040000000000008500000016000000950000000000000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f0000000800)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x8005}, 0x24000041) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.18913826s ago: executing program 6 (id=2799): syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x3809049, 0x0, 0x41, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) sendmsg$inet(r0, &(0x7f0000000f00)={0x0, 0x0, 0x0}, 0x40095) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) move_mount(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000002080)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYRES8=r1, @ANYRES64=r1], 0xfd, 0x5a7a, &(0x7f0000006680)="$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") sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 101.87268ms ago: executing program 7 (id=2800): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioperm(0x0, 0x2, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="580100001200000328bd700000000000640101010000fa000000000000000000fe88000000000000010000002108000100000000000000020000408087000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0100000000000000000000000000010000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000080000000000000000000000000030000000000000280000000000000000000000000000000feffffffffffffff0000000000000000feffffffffffffff0900000000000000000000002fbd7000000000000a00018000000000000000004c0014007368613100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000001c00040000004e224e2100"], 0x158}}, 0x0) listen(r2, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x7fa962bffffa, 0x11, r5, 0x0) r6 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='utf8', &(0x7f0000000440)='\x00dev\a\x00\x00\x00\x00\x00h&{|\xed\x0f\xb8\x93:\x1a\xea\xf8\n\xb7\xec\x16\xb5r\v\x12\xd7\xe7\x85]OI\xdaZ\xb9\"^\xd9\x91r\x93<\xfa\xd6\xd7\x17z\x04\xe8\x05N!\x01.\xcc\x8cR\xbc\xff\'\xbf;*\xdf\xdf\xe6 \x92>\xffre\x19FZ\x94\x1c\x13h', 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xe, {"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", 0xffffffffffffff01}}, 0xffffffea) r9 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x1, &(0x7f00000000c0)='\x00', 0x9, 0x1, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'}) 2.761582ms ago: executing program 1 (id=2801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbb721000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000001d80)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8080410}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x18, r4, 0x309, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x1) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r7, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) gettid() mount$bpf(0x0, &(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000280), 0x18, &(0x7f0000000040)=ANY=[]) 0s ago: executing program 3 (id=2802): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x44090) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) kernel console output (not intermixed with test programs): [ T49] veth0_vlan: left promiscuous mode [ 878.885062][ T30] kauditd_printk_skb: 273 callbacks suppressed [ 878.885087][ T30] audit: type=1326 audit(1748299712.493:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5878e969 code=0x7fc00000 [ 879.022218][ T30] audit: type=1326 audit(1748299712.503:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8a5878e969 code=0x7fc00000 [ 879.077339][ T30] audit: type=1326 audit(1748299712.503:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5878e969 code=0x7fc00000 [ 879.100276][ T30] audit: type=1326 audit(1748299712.503:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5878e969 code=0x7fc00000 [ 879.124406][ T30] audit: type=1326 audit(1748299712.503:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5878e969 code=0x7fc00000 [ 879.147239][ T30] audit: type=1326 audit(1748299712.503:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5878e969 code=0x7fc00000 [ 879.169695][ T30] audit: type=1326 audit(1748299712.503:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5878e969 code=0x7fc00000 [ 879.192978][ T30] audit: type=1326 audit(1748299712.503:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5878e969 code=0x7fc00000 [ 879.215452][ T30] audit: type=1326 audit(1748299712.503:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5878e969 code=0x7fc00000 [ 879.267401][ T30] audit: type=1326 audit(1748299712.503:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.0.1748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5878e969 code=0x7fc00000 [ 880.380890][T12640] netlink: 'syz.1.1750': attribute type 1 has an invalid length. [ 880.798395][ T49] team0 (unregistering): Port device team_slave_1 removed [ 880.850506][ T49] team0 (unregistering): Port device team_slave_0 removed [ 881.373208][T12612] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1746'. [ 881.427210][T12556] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.452218][T12556] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 881.672264][T12440] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.693420][T12440] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.700713][T12440] bridge_slave_0: entered allmulticast mode [ 881.743483][T12440] bridge_slave_0: entered promiscuous mode [ 882.844677][T12556] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.872249][T12556] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 883.116200][T12440] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.494557][T12440] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.063511][T12440] bridge_slave_1: entered allmulticast mode [ 884.071652][T12440] bridge_slave_1: entered promiscuous mode [ 884.163441][T12667] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 884.192024][T12667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 884.207956][T12667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 884.216325][T12667] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 884.224441][T12667] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 884.927707][T12440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.023634][ T9726] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 885.315595][ T9726] usb 2-1: Using ep0 maxpacket: 32 [ 885.416551][T12440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.435551][ T9726] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 885.443936][ T9726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.482833][ T9726] usb 2-1: config 0 has no interface number 0 [ 885.512958][ T9726] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 885.582942][ T9726] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 885.638097][ T9726] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 885.690443][ T9726] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 885.738320][ T9726] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 885.782643][T12440] team0: Port device team_slave_0 added [ 885.789607][ T9726] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 885.828999][T12666] lo speed is unknown, defaulting to 1000 [ 885.858789][ T9726] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 885.878555][T12556] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 885.906597][ T9726] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 885.930666][ T9726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.939025][T12556] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 885.976864][ T9726] usb 2-1: Product: syz [ 885.981174][ T9726] usb 2-1: Manufacturer: syz [ 885.992275][T12440] team0: Port device team_slave_1 added [ 886.008747][ T9726] usb 2-1: SerialNumber: syz [ 886.025895][ T9726] usb 2-1: config 0 descriptor?? [ 886.052669][T12675] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 886.077581][ T9726] microtek usb (rev 0.4.3): expecting 3 got 2 endpoints! Bailing out. [ 886.234948][T12440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.272616][T12440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.306961][ T5848] Bluetooth: hci0: command tx timeout [ 886.368095][T12440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.471457][T12556] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 886.508572][T12556] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 886.541336][T12440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 886.566641][T12440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.670237][T12440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.803903][T12683] siw: device registration error -23 [ 886.812141][T12556] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 886.833752][T12556] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 887.094756][T12556] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 887.151084][T12556] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 887.858245][ T5894] usb 2-1: USB disconnect, device number 11 [ 888.106837][T12440] hsr_slave_0: entered promiscuous mode [ 888.125766][T12440] hsr_slave_1: entered promiscuous mode [ 888.132382][T12440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 888.148938][T12440] Cannot create hsr debugfs directory [ 888.208258][T12708] netlink: 'syz.0.1763': attribute type 1 has an invalid length. [ 888.402843][ T5848] Bluetooth: hci0: command tx timeout [ 889.169728][T12708] 8021q: adding VLAN 0 to HW filter on device bond1 [ 890.463368][ T5848] Bluetooth: hci0: command tx timeout [ 892.402567][T10917] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 892.450424][T10917] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 892.552936][ T5848] Bluetooth: hci0: command tx timeout [ 892.786414][T10917] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 892.851687][T10917] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 893.029847][T10917] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 893.102376][T10917] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 893.204457][T12666] chnl_net:caif_netlink_parms(): no params data found [ 893.336109][T10917] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 893.376015][T10917] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 894.092343][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1771'. [ 894.101636][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1771'. [ 894.288040][T12768] siw: device registration error -23 [ 894.991177][T12666] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.007599][T12666] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.037429][T12666] bridge_slave_0: entered allmulticast mode [ 895.065128][T12666] bridge_slave_0: entered promiscuous mode [ 895.172332][T12666] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.181901][T12666] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.190275][T12666] bridge_slave_1: entered allmulticast mode [ 895.209409][T12666] bridge_slave_1: entered promiscuous mode [ 895.324708][T12440] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 895.415406][T12666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.459716][T12440] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 895.499195][T12440] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 895.524619][T12666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.617271][T12440] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 897.604762][T12666] team0: Port device team_slave_0 added [ 898.107079][T12666] team0: Port device team_slave_1 added [ 898.530269][T10917] bridge_slave_1: left allmulticast mode [ 898.536048][T10917] bridge_slave_1: left promiscuous mode [ 898.541923][T10917] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.634043][T10917] bridge_slave_0: left allmulticast mode [ 898.651418][T10917] bridge_slave_0: left promiscuous mode [ 898.700604][T10917] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.901768][T12842] tmpfs: Unknown parameter 'usrquota_block' [ 901.970506][ T9726] IPVS: starting estimator thread 0... [ 902.160420][T12841] IPVS: using max 23 ests per chain, 55200 per kthread [ 902.567494][T10917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.580058][T10917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 902.590650][T10917] bond0 (unregistering): Released all slaves [ 902.643091][T12666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.650254][T12666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 902.676227][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.688083][T12666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.712696][T12666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.722556][T12666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 902.748554][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.779788][T12666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.816165][T12666] hsr_slave_0: entered promiscuous mode [ 903.843142][T12666] hsr_slave_1: entered promiscuous mode [ 903.849736][T12666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 903.873504][T12666] Cannot create hsr debugfs directory [ 907.645109][T12869] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 907.651216][T12869] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 908.387721][T12869] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 908.393795][T12869] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 908.708181][T12878] udevd[12878]: failed to send result of seq 16042 to main daemon: Connection refused [ 910.353743][T12888] netlink: 'syz.3.1796': attribute type 1 has an invalid length. [ 910.512198][T12888] 8021q: adding VLAN 0 to HW filter on device bond1 [ 910.851168][T12440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.081800][T12666] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 914.275471][T12914] netlink: 'syz.0.1801': attribute type 7 has an invalid length. [ 914.342358][T10917] hsr_slave_0: left promiscuous mode [ 914.358413][T10917] hsr_slave_1: left promiscuous mode [ 914.408349][T10917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 914.432710][T10917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 914.517112][T10917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 914.529141][T10917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.500880][T10917] veth1_macvtap: left promiscuous mode [ 915.525567][T10917] veth0_macvtap: left promiscuous mode [ 915.616905][T10917] veth1_vlan: left promiscuous mode [ 915.659373][T10917] veth0_vlan: left promiscuous mode [ 917.739788][T10917] team0 (unregistering): Port device team_slave_1 removed [ 917.849328][T10917] team0 (unregistering): Port device team_slave_0 removed [ 919.618973][T12576] smc: removing ib device syz0 [ 919.641476][T12666] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 920.359851][T12666] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 920.402656][T12666] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 920.528845][T12667] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 920.544345][T12667] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 920.554897][T12667] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 920.563378][T12667] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 920.572516][T12667] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 920.588192][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 920.600339][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 920.618290][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 920.629375][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 920.637404][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 921.121387][T12666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.715242][ T5848] Bluetooth: hci4: command tx timeout [ 923.227267][T12977] netlink: 'syz.0.1816': attribute type 1 has an invalid length. [ 923.565379][T12666] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.666293][T10921] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.673561][T10921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.793196][ T5848] Bluetooth: hci4: command tx timeout [ 926.477744][T10921] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.485141][T10921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.852014][T12990] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 926.875745][ T5848] Bluetooth: hci4: command tx timeout [ 926.891754][T12990] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 927.672606][T12929] chnl_net:caif_netlink_parms(): no params data found [ 931.874703][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.986550][T12929] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.994008][T12929] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.003186][T12929] bridge_slave_0: entered allmulticast mode [ 933.011738][T12929] bridge_slave_0: entered promiscuous mode [ 933.051362][T12929] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.059958][T12929] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.067542][T12929] bridge_slave_1: entered allmulticast mode [ 933.081048][T12929] bridge_slave_1: entered promiscuous mode [ 933.214254][T12929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 933.235055][T12929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.290921][T12666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.982137][T12929] team0: Port device team_slave_0 added [ 934.219009][T12929] team0: Port device team_slave_1 added [ 936.197013][T12929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 936.417318][T12929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 936.639405][T12929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 936.683339][T12929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 936.889030][T12929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 936.915161][ C1] vkms_vblank_simulate: vblank timer overrun [ 937.739058][T12929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.168930][ T5886] IPVS: starting estimator thread 0... [ 938.697094][T13110] IPVS: using max 24 ests per chain, 57600 per kthread [ 941.245797][T13121] xt_cgroup: invalid path, errno=-2 [ 941.299245][T12929] hsr_slave_0: entered promiscuous mode [ 941.311566][T12929] hsr_slave_1: entered promiscuous mode [ 941.335935][T12929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 941.359277][T12929] Cannot create hsr debugfs directory [ 941.509867][T13121] IPVS: Unknown mcast interface: vlan0 [ 941.743259][T13129] syz.3.1844: attempt to access beyond end of device [ 941.743259][T13129] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 941.757152][T13129] hpfs: hpfs_map_sector(): read error [ 941.832661][T13130] o2cb: This node has not been configured. [ 941.838637][T13130] o2cb: Cluster check failed. Fix errors before retrying. [ 941.846117][T13130] (syz.3.1844,13130,1):user_dlm_register:674 ERROR: status = -22 [ 941.854120][T13130] (syz.3.1844,13130,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 942.744900][T13128] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1844'. [ 943.491677][T13140] lo speed is unknown, defaulting to 1000 [ 943.570205][T13142] sp0: Synchronizing with TNC [ 943.571979][T13140] lo speed is unknown, defaulting to 1000 [ 943.582557][T13140] lo speed is unknown, defaulting to 1000 [ 943.594748][T13140] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 943.612283][T13140] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 944.712104][T13149] syz.3.1848: attempt to access beyond end of device [ 944.712104][T13149] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 944.725197][T13149] hpfs: hpfs_map_sector(): read error [ 944.785205][T13140] lo speed is unknown, defaulting to 1000 [ 944.793342][T13140] lo speed is unknown, defaulting to 1000 [ 944.800577][T13140] lo speed is unknown, defaulting to 1000 [ 944.808516][T13140] lo speed is unknown, defaulting to 1000 [ 944.826643][T12667] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 944.847895][T12667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 944.857151][T12667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 944.871194][T12667] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 944.880419][T12667] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 944.966798][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 944.993803][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 945.007433][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 945.014806][T13148] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1848'. [ 945.105339][T13140] lo speed is unknown, defaulting to 1000 [ 945.112660][T13140] lo speed is unknown, defaulting to 1000 [ 945.214610][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 945.263406][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 947.871083][ T5848] Bluetooth: hci0: command tx timeout [ 947.921733][T13166] xt_cgroup: invalid path, errno=-2 [ 947.936544][T13150] lo speed is unknown, defaulting to 1000 [ 948.120963][T13166] IPVS: Unknown mcast interface: vlan0 [ 948.382679][T13174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 949.156237][T10917] bridge_slave_1: left allmulticast mode [ 949.161955][T10917] bridge_slave_1: left promiscuous mode [ 950.619521][T10917] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.621650][ T5848] Bluetooth: hci0: command tx timeout [ 950.871182][T13191] syz.1.1856: attempt to access beyond end of device [ 950.871182][T13191] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 950.884784][T13191] hpfs: hpfs_map_sector(): read error [ 950.959454][T13192] o2cb: This node has not been configured. [ 950.965455][T13192] o2cb: Cluster check failed. Fix errors before retrying. [ 950.972870][T13192] (syz.1.1856,13192,1):user_dlm_register:674 ERROR: status = -22 [ 950.980681][T13192] (syz.1.1856,13192,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 951.494207][T10917] bridge_slave_0: left allmulticast mode [ 951.503160][T10917] bridge_slave_0: left promiscuous mode [ 951.509135][T10917] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.668943][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1858'. [ 951.691339][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1858'. [ 952.494327][T10917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 952.512421][T10917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 952.524420][T10917] bond0 (unregistering): Released all slaves [ 952.669458][T13190] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1856'. [ 952.703580][ T5848] Bluetooth: hci0: command tx timeout [ 952.921004][T10917] hsr_slave_0: left promiscuous mode [ 952.932178][T10917] hsr_slave_1: left promiscuous mode [ 952.940017][T10917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.221729][T13214] syz.0.1859: attempt to access beyond end of device [ 953.221729][T13214] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 953.235196][T13214] hpfs: hpfs_map_sector(): read error [ 953.659369][T10917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.820752][ T5848] Bluetooth: hci0: command tx timeout [ 956.154386][T13229] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 956.823965][T10917] team0 (unregistering): Port device team_slave_1 removed [ 957.107080][T10917] team0 (unregistering): Port device team_slave_0 removed [ 957.567188][T13213] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1859'. [ 957.710720][T13234] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 957.727231][T13234] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 958.239397][T13150] chnl_net:caif_netlink_parms(): no params data found [ 960.009514][T13261] syz.1.1869: attempt to access beyond end of device [ 960.009514][T13261] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 960.022575][T13261] hpfs: hpfs_map_sector(): read error [ 960.100815][T13262] o2cb: This node has not been configured. [ 960.106919][T13262] o2cb: Cluster check failed. Fix errors before retrying. [ 960.114174][T13262] (syz.1.1869,13262,1):user_dlm_register:674 ERROR: status = -22 [ 960.122044][T13262] (syz.1.1869,13262,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 960.153081][T13258] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1869'. [ 962.436025][T12929] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 963.394293][T12929] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 963.527254][T13150] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.566845][T13150] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.613917][T13150] bridge_slave_0: entered allmulticast mode [ 963.683067][T13150] bridge_slave_0: entered promiscuous mode [ 963.743702][T12929] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 963.990148][T13150] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.052194][T13150] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.563353][T13150] bridge_slave_1: entered allmulticast mode [ 964.595028][T13150] bridge_slave_1: entered promiscuous mode [ 964.620507][T12929] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 964.764291][T13306] netlink: 'syz.3.1880': attribute type 1 has an invalid length. [ 964.948004][T13306] 8021q: adding VLAN 0 to HW filter on device bond2 [ 965.308073][T13150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 966.404055][T13150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 966.538824][T13326] tmpfs: Unknown parameter 'usrquota_block' [ 968.078165][T13150] team0: Port device team_slave_0 added [ 968.265457][T13150] team0: Port device team_slave_1 added [ 968.470484][T13150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 968.479206][T13150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 968.509663][T13150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.534550][T13150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.543050][T13150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 968.611759][T13150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.754014][T12929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 969.060689][T13150] hsr_slave_0: entered promiscuous mode [ 969.077831][T13150] hsr_slave_1: entered promiscuous mode [ 969.121169][T13150] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 969.170039][T13150] Cannot create hsr debugfs directory [ 969.280841][T10920] bridge_slave_1: left allmulticast mode [ 969.290181][T10920] bridge_slave_1: left promiscuous mode [ 969.299072][T10920] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.314401][T10920] bridge_slave_0: left allmulticast mode [ 969.320180][T10920] bridge_slave_0: left promiscuous mode [ 969.326697][T10920] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.829816][T10920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 972.511562][T10920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 972.556615][T10920] bond0 (unregistering): Released all slaves [ 974.066350][T10920] hsr_slave_0: left promiscuous mode [ 974.585847][T10920] hsr_slave_1: left promiscuous mode [ 974.601995][T10920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 974.703560][T10920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.757913][T12667] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 975.768292][T12667] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 975.777125][T12667] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 975.785652][T12667] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 975.793674][T12667] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 975.808400][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 975.816117][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 975.823821][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 975.832172][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 975.841518][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 976.236834][T13402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 977.412389][T12676] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 977.906146][ T5848] Bluetooth: hci5: command tx timeout [ 978.032912][T10920] team0 (unregistering): Port device team_slave_1 removed [ 978.087328][T12676] usb 4-1: Using ep0 maxpacket: 32 [ 978.108322][T12676] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 978.546813][T12676] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 978.812890][T12676] usb 4-1: config 0 has no interface number 0 [ 978.820036][T12676] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 978.840811][T12676] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 978.858837][T12676] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 978.870708][T12676] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 978.886138][T12676] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 978.899748][T12676] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 978.921877][T12676] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 978.940280][T12676] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 978.955313][T10920] team0 (unregistering): Port device team_slave_0 removed [ 978.968249][T12676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.987053][T12676] usb 4-1: Product: syz [ 978.991449][T12676] usb 4-1: Manufacturer: syz [ 979.011784][T12676] usb 4-1: SerialNumber: syz [ 979.042545][T12676] usb 4-1: config 0 descriptor?? [ 979.060241][T13410] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 979.070994][T12676] microtek usb (rev 0.4.3): expecting 3 got 2 endpoints! Bailing out. [ 979.984899][ T5848] Bluetooth: hci5: command tx timeout [ 980.395944][T12676] usb 4-1: USB disconnect, device number 15 [ 981.982414][T13399] lo speed is unknown, defaulting to 1000 [ 982.065800][ T5848] Bluetooth: hci5: command tx timeout [ 982.684770][T13447] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 983.592983][ T9726] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 983.763420][ T9726] usb 4-1: Using ep0 maxpacket: 16 [ 983.788121][ T9726] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.840044][ T9726] usb 4-1: config 0 has no interfaces? [ 983.884878][ T9726] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 983.961520][ T9726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.078689][ T9726] usb 4-1: Product: syz [ 984.133385][ T9726] usb 4-1: Manufacturer: syz [ 984.202897][ T5848] Bluetooth: hci5: command tx timeout [ 984.314594][ T9726] usb 4-1: SerialNumber: syz [ 984.464132][ T9726] usb 4-1: config 0 descriptor?? [ 984.696571][T11496] usb 4-1: USB disconnect, device number 16 [ 985.623800][T13399] chnl_net:caif_netlink_parms(): no params data found [ 985.640833][T13150] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 985.670285][T13150] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 985.693661][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1914'. [ 985.712980][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1914'. [ 985.810590][T13150] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 985.874370][T13150] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 986.955742][T10920] bridge_slave_1: left allmulticast mode [ 986.961480][T10920] bridge_slave_1: left promiscuous mode [ 986.990074][T10920] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.024823][T10920] bridge_slave_0: left allmulticast mode [ 987.042816][T10920] bridge_slave_0: left promiscuous mode [ 987.048967][T10920] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.547363][T10920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.591330][T10920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.607725][T10920] bond0 (unregistering): Released all slaves [ 989.681623][T13399] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.711301][T13399] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.720043][T13399] bridge_slave_0: entered allmulticast mode [ 989.730030][T13399] bridge_slave_0: entered promiscuous mode [ 989.739121][T13399] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.746770][T13399] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.755036][T13399] bridge_slave_1: entered allmulticast mode [ 989.763669][T13399] bridge_slave_1: entered promiscuous mode [ 990.011550][T10920] hsr_slave_0: left promiscuous mode [ 990.023997][T10920] hsr_slave_1: left promiscuous mode [ 990.075415][T10920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.148073][T10920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.102297][T10920] team0 (unregistering): Port device team_slave_1 removed [ 991.383787][T10920] team0 (unregistering): Port device team_slave_0 removed [ 991.635157][T13531] syz.1.1922: attempt to access beyond end of device [ 991.635157][T13531] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 991.711742][T13532] o2cb: This node has not been configured. [ 991.726239][T13531] hpfs: hpfs_map_sector(): read error [ 991.778241][T13532] o2cb: Cluster check failed. Fix errors before retrying. [ 991.821255][T13532] (syz.1.1922,13532,1):user_dlm_register:674 ERROR: status = -22 [ 991.846961][T13532] (syz.1.1922,13532,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 992.044747][T13535] netlink: 'syz.0.1926': attribute type 1 has an invalid length. [ 992.233932][T13522] netlink: 'syz.3.1924': attribute type 12 has an invalid length. [ 992.241821][T13522] netlink: 'syz.3.1924': attribute type 29 has an invalid length. [ 992.253500][T13522] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1924'. [ 992.267852][T13526] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1922'. [ 992.375511][T13399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.486221][T13399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.200319][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.476347][T13399] team0: Port device team_slave_0 added [ 993.529707][T13399] team0: Port device team_slave_1 added [ 993.584567][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1927'. [ 993.628814][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1927'. [ 993.799519][T13150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 993.841787][T13399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.850363][T13399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.880480][T13399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.926315][T13399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.937658][T13399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.968445][T13399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.143645][T13399] hsr_slave_0: entered promiscuous mode [ 994.176811][T13399] hsr_slave_1: entered promiscuous mode [ 994.200728][T13399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 994.218358][T13399] Cannot create hsr debugfs directory [ 994.243339][T13150] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.450264][T12192] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.457525][T12192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.543822][T12192] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.551099][T12192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 996.291050][T13150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 996.480282][T13399] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 996.520091][T13399] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 996.561599][T13399] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 996.677686][T13399] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 999.917380][T13582] netlink: 'syz.0.1936': attribute type 12 has an invalid length. [ 999.935714][T13582] netlink: 'syz.0.1936': attribute type 29 has an invalid length. [ 999.947306][T13582] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1936'. [ 1000.071302][T13399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.150597][T13399] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.198481][T10917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.205795][T10917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.246936][T10917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.254285][T10917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.396054][T13150] veth0_vlan: entered promiscuous mode [ 1000.609185][T13589] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1001.247798][T13150] veth1_vlan: entered promiscuous mode [ 1002.391438][T13150] veth0_macvtap: entered promiscuous mode [ 1002.436692][T13150] veth1_macvtap: entered promiscuous mode [ 1005.403399][T13622] netlink: 'syz.1.1945': attribute type 12 has an invalid length. [ 1005.426045][T13622] netlink: 'syz.1.1945': attribute type 29 has an invalid length. [ 1005.483542][T13622] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1945'. [ 1006.045210][T13632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1006.567115][T13399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1006.953344][T12667] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1006.963796][T12667] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1006.972218][T12667] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1006.993364][T12667] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1007.009306][T12667] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1007.055377][T13629] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 1007.305173][T13629] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 1007.326544][T13629] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 1008.007765][T13634] lo speed is unknown, defaulting to 1000 [ 1009.157081][ T5848] Bluetooth: hci4: command tx timeout [ 1011.193028][ T5848] Bluetooth: hci4: command tx timeout [ 1013.406814][T13698] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1013.434384][ T5848] Bluetooth: hci4: command tx timeout [ 1013.920887][T13634] chnl_net:caif_netlink_parms(): no params data found [ 1013.941461][T13399] veth0_vlan: entered promiscuous mode [ 1013.994273][T13399] veth1_vlan: entered promiscuous mode [ 1014.142120][T12135] bridge_slave_1: left allmulticast mode [ 1014.148590][T12135] bridge_slave_1: left promiscuous mode [ 1014.157522][T12135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.170933][T12135] bridge_slave_0: left allmulticast mode [ 1014.177291][T12135] bridge_slave_0: left promiscuous mode [ 1014.206419][T12135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.747378][T13709] random: crng reseeded on system resumption [ 1014.802611][T13710] kvm: kvm [13699]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 1015.537454][ T5848] Bluetooth: hci4: command tx timeout [ 1016.700642][T12135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.759717][T12135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.770470][T12135] bond0 (unregistering): Released all slaves [ 1017.804294][T13399] veth0_macvtap: entered promiscuous mode [ 1018.928888][T12135] hsr_slave_0: left promiscuous mode [ 1018.947566][T12135] hsr_slave_1: left promiscuous mode [ 1018.963574][T12135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1018.981256][T12135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.258148][T12135] veth1_macvtap: left promiscuous mode [ 1019.269536][T12135] veth0_macvtap: left promiscuous mode [ 1019.275881][T12135] veth1_vlan: left promiscuous mode [ 1019.281338][T12135] veth0_vlan: left promiscuous mode [ 1023.364517][T12135] team0 (unregistering): Port device team_slave_1 removed [ 1024.327540][T13773] random: crng reseeded on system resumption [ 1024.377798][T13776] kvm: kvm [13765]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 1024.764522][T12135] team0 (unregistering): Port device team_slave_0 removed [ 1025.593061][T13634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.614146][T13634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.643101][T13634] bridge_slave_0: entered allmulticast mode [ 1025.677825][T13634] bridge_slave_0: entered promiscuous mode [ 1025.714301][T13634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.733873][T13634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.741308][T13634] bridge_slave_1: entered allmulticast mode [ 1025.761284][T13634] bridge_slave_1: entered promiscuous mode [ 1025.771237][T13399] veth1_macvtap: entered promiscuous mode [ 1026.844782][T13634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.906766][T13634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.072247][T13399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.099478][T13634] team0: Port device team_slave_0 added [ 1027.156569][T13634] team0: Port device team_slave_1 added [ 1027.202845][T13419] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1027.358369][T13419] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1027.390619][T13419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1027.402983][T13399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.421051][T13399] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.429913][T13399] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.439002][T13399] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.447792][T13399] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.462231][T13419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1027.496101][T13419] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1027.530949][T13419] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1027.551457][T13419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.587384][T13419] usb 2-1: config 0 descriptor?? [ 1027.667130][T13634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.696574][T13634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.727217][T13634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.742405][T13634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.757959][T13634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.788433][T13634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.804059][T13799] vcan0: tx drop: invalid sa for name 0x00000000000000f0 [ 1027.922590][T13634] hsr_slave_0: entered promiscuous mode [ 1027.930033][T13634] hsr_slave_1: entered promiscuous mode [ 1027.940699][T13634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1027.956565][T13634] Cannot create hsr debugfs directory [ 1028.093271][T13419] usbhid 2-1:0.0: can't add hid device: -71 [ 1028.099382][T13419] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1028.115305][T13419] usb 2-1: USB disconnect, device number 12 [ 1028.231052][T10917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.259629][T10917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.116010][T10916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.187072][T10916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.843735][T13812] siw: device registration error -23 [ 1031.467406][T13832] kvm: kvm [13823]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 1031.467429][T13826] random: crng reseeded on system resumption [ 1032.328494][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 1032.328551][ T30] audit: type=1326 audit(1748299874.695:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13836 comm="syz.1.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa362b8e969 code=0x7fc00000 [ 1033.940159][ T30] audit: type=1326 audit(1748299874.695:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13836 comm="syz.1.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa362b8e969 code=0x7fc00000 [ 1034.458125][ T30] audit: type=1326 audit(1748299874.695:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13836 comm="syz.1.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa362b8e969 code=0x7fc00000 [ 1034.480924][ T30] audit: type=1326 audit(1748299874.695:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13836 comm="syz.1.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa362b8e969 code=0x7fc00000 [ 1034.503563][ T30] audit: type=1326 audit(1748299874.705:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13836 comm="syz.1.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa362b8e969 code=0x7fc00000 [ 1034.526106][ T30] audit: type=1326 audit(1748299874.705:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13836 comm="syz.1.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa362b8e969 code=0x7fc00000 [ 1034.548914][ T30] audit: type=1326 audit(1748299874.705:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13836 comm="syz.1.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa362b8e969 code=0x7fc00000 [ 1034.571648][ T30] audit: type=1326 audit(1748299874.735:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13836 comm="syz.1.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa362b8e969 code=0x7fc00000 [ 1034.594411][ T30] audit: type=1326 audit(1748299874.735:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13836 comm="syz.1.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa362b8e969 code=0x7fc00000 [ 1034.668543][ T30] audit: type=1326 audit(1748299874.735:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13836 comm="syz.1.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa362b8e969 code=0x7fc00000 [ 1035.265216][T13851] rdma_rxe: rxe_newlink: failed to add lo [ 1035.748319][T13851] netlink: 'syz.6.1989': attribute type 1 has an invalid length. [ 1035.756446][T13851] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1989'. [ 1036.595064][T13857] syz.3.1990: attempt to access beyond end of device [ 1036.595064][T13857] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1036.608099][T13857] hpfs: hpfs_map_sector(): read error [ 1036.683203][T13858] o2cb: This node has not been configured. [ 1036.689188][T13858] o2cb: Cluster check failed. Fix errors before retrying. [ 1036.696767][T13858] (syz.3.1990,13858,1):user_dlm_register:674 ERROR: status = -22 [ 1036.704908][T13858] (syz.3.1990,13858,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1036.800004][T13856] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1990'. [ 1037.046857][T13634] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1037.412486][T13867] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1037.440283][T13634] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1037.999784][T13634] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1038.152000][T13634] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1039.492331][T13634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.377599][T13892] random: crng reseeded on system resumption [ 1040.571711][T13902] kvm: kvm [13884]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 1040.630958][T13634] 8021q: adding VLAN 0 to HW filter on device team0 [ 1040.884662][T12194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.891848][T12194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.937412][T12194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.944616][T12194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.260720][T13634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1041.587253][T13913] rdma_rxe: rxe_newlink: failed to add lo [ 1042.007102][T13913] netlink: 'syz.3.2002': attribute type 1 has an invalid length. [ 1042.015174][T13913] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2002'. [ 1042.697320][T13916] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2003'. [ 1042.709929][T13916] syz.1.2003: attempt to access beyond end of device [ 1042.709929][T13916] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1042.722887][T13916] hpfs: hpfs_map_sector(): read error [ 1042.744224][T13916] o2cb: This node has not been configured. [ 1042.750086][T13916] o2cb: Cluster check failed. Fix errors before retrying. [ 1042.757311][T13916] (syz.1.2003,13916,1):user_dlm_register:674 ERROR: status = -22 [ 1042.765111][T13916] (syz.1.2003,13916,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1043.325673][T13928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1044.557058][ T9726] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1045.379788][T13634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1045.426051][ T9726] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1045.472232][ T9726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1046.472527][ T9726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1046.485349][ T9726] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1046.547796][ T9726] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1046.666572][ T9726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.721743][ T9726] usb 1-1: config 0 descriptor?? [ 1046.774962][ T9726] usb 1-1: can't set config #0, error -71 [ 1047.004855][ T9726] usb 1-1: USB disconnect, device number 17 [ 1048.377899][T13634] veth0_vlan: entered promiscuous mode [ 1048.459404][T13634] veth1_vlan: entered promiscuous mode [ 1048.801637][T13634] veth0_macvtap: entered promiscuous mode [ 1048.817149][T13634] veth1_macvtap: entered promiscuous mode [ 1049.023041][T14004] syz.1.2017: attempt to access beyond end of device [ 1049.023041][T14004] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1049.036583][T14004] hpfs: hpfs_map_sector(): read error [ 1049.108929][T14005] o2cb: This node has not been configured. [ 1049.115032][T14005] o2cb: Cluster check failed. Fix errors before retrying. [ 1049.122977][T14005] (syz.1.2017,14005,1):user_dlm_register:674 ERROR: status = -22 [ 1049.130850][T14005] (syz.1.2017,14005,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1049.504571][T14003] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2017'. [ 1049.664556][T13634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.701118][T13634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1049.722237][T13634] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.738699][T13634] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.748633][T13634] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.757825][T13634] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.478509][T10916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.691261][T10916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.148636][T10913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.252423][T10913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.319385][T14027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1053.824445][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2025'. [ 1054.635289][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.673007][ T30] kauditd_printk_skb: 417 callbacks suppressed [ 1056.673027][ T30] audit: type=1326 audit(1748299899.045:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14058 comm="syz.7.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894478e969 code=0x7fc00000 [ 1056.733213][ T30] audit: type=1326 audit(1748299899.045:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14058 comm="syz.7.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f894478e969 code=0x7fc00000 [ 1056.932187][ T30] audit: type=1326 audit(1748299899.045:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14058 comm="syz.7.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894478e969 code=0x7fc00000 [ 1056.955619][ T30] audit: type=1326 audit(1748299899.045:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14058 comm="syz.7.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894478e969 code=0x7fc00000 [ 1056.990471][ T30] audit: type=1326 audit(1748299899.045:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14058 comm="syz.7.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894478e969 code=0x7fc00000 [ 1057.736910][ T30] audit: type=1326 audit(1748299899.045:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14058 comm="syz.7.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894478e969 code=0x7fc00000 [ 1057.778516][ T30] audit: type=1326 audit(1748299899.045:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14058 comm="syz.7.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894478e969 code=0x7fc00000 [ 1057.808541][ T30] audit: type=1326 audit(1748299899.045:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14058 comm="syz.7.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894478e969 code=0x7fc00000 [ 1057.834109][ T30] audit: type=1326 audit(1748299899.045:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14058 comm="syz.7.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894478e969 code=0x7fc00000 [ 1057.882987][ T30] audit: type=1326 audit(1748299899.045:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14058 comm="syz.7.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f894478e969 code=0x7fc00000 [ 1062.982000][T14109] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1065.200323][T14155] siw: device registration error -23 [ 1069.557490][T14188] loop1: detected capacity change from 0 to 512 [ 1069.625420][T14181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1070.362374][T14188] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.2055: corrupted in-inode xattr: overlapping e_value [ 1070.435304][T14188] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.2055: couldn't read orphan inode 15 (err -117) [ 1070.549182][T14188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1071.391990][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.040172][T14227] siw: device registration error -23 [ 1078.265734][T14272] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2074'. [ 1078.349127][T14272] syz.6.2074: attempt to access beyond end of device [ 1078.349127][T14272] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1078.364583][T14272] hpfs: hpfs_map_sector(): read error [ 1080.246433][ T5848] Bluetooth: Frame is too long (len 26, expected len 8) [ 1082.592859][T12881] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1082.873987][T14318] netlink: 196 bytes leftover after parsing attributes in process `syz.7.2087'. [ 1082.885392][T14318] syz.7.2087: attempt to access beyond end of device [ 1082.885392][T14318] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1082.898508][T14318] hpfs: hpfs_map_sector(): read error [ 1082.920078][T12881] usb 7-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1082.948209][T12881] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.983293][T12881] usb 7-1: Product: syz [ 1082.997583][T12881] usb 7-1: Manufacturer: syz [ 1083.012786][T12881] usb 7-1: SerialNumber: syz [ 1083.041671][T12881] usb 7-1: config 0 descriptor?? [ 1084.385982][T12881] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1084.518095][T12881] asix 7-1:0.0: probe with driver asix failed with error -71 [ 1084.565090][T12881] usb 7-1: USB disconnect, device number 2 [ 1086.076571][T14363] loop6: detected capacity change from 0 to 2048 [ 1086.586749][T14363] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1086.639207][T14372] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1087.587415][ T5908] libceph: connect (1)[c::]:6789 error -101 [ 1087.633881][ T5908] libceph: mon0 (1)[c::]:6789 connect error [ 1087.782621][T14385] ceph: No mds server is up or the cluster is laggy [ 1088.232877][ T5908] libceph: connect (1)[c::]:6789 error -101 [ 1088.272997][ T5908] libceph: mon0 (1)[c::]:6789 connect error [ 1088.365965][T14394] loop3: detected capacity change from 0 to 2048 [ 1088.386097][T14394] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1088.420347][T14394] NILFS (loop3): mounting unchecked fs [ 1089.536372][T14394] NILFS (loop3): recovery complete [ 1089.602219][T14408] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1090.180303][T14415] rdma_rxe: rxe_newlink: failed to add lo [ 1090.412781][T14415] netlink: 'syz.6.2102': attribute type 1 has an invalid length. [ 1090.420724][T14415] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2102'. [ 1096.457723][T14464] rdma_rxe: rxe_newlink: failed to add lo [ 1096.740936][T14464] netlink: 'syz.3.2115': attribute type 1 has an invalid length. [ 1096.748934][T14464] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2115'. [ 1098.761556][T14478] netlink: 196 bytes leftover after parsing attributes in process `syz.7.2119'. [ 1098.772171][T14478] syz.7.2119: attempt to access beyond end of device [ 1098.772171][T14478] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1098.785651][T14478] hpfs: hpfs_map_sector(): read error [ 1099.429425][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2124'. [ 1099.438657][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2124'. [ 1102.912876][T12667] Bluetooth: hci5: command 0x0406 tx timeout [ 1106.566122][T14541] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2135'. [ 1106.578110][T14541] syz.0.2135: attempt to access beyond end of device [ 1106.578110][T14541] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1106.591333][T14541] hpfs: hpfs_map_sector(): read error [ 1108.875902][T12881] IPVS: starting estimator thread 0... [ 1109.073298][T14573] IPVS: using max 23 ests per chain, 55200 per kthread [ 1109.542581][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2137'. [ 1109.608560][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2137'. [ 1113.567645][T14593] loop6: detected capacity change from 0 to 256 [ 1113.602628][T14593] vfat: Unknown parameter 'nnonumtail' [ 1113.700248][T14593] binder: 14592:14593 ioctl c0306201 0 returned -14 [ 1116.088131][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.275119][T14654] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.2166'. [ 1121.839727][T11496] libceph: connect (1)[c::]:6789 error -101 [ 1121.889519][T11496] libceph: mon0 (1)[c::]:6789 connect error [ 1122.036014][T14668] ceph: No mds server is up or the cluster is laggy [ 1122.463875][T11496] libceph: connect (1)[c::]:6789 error -101 [ 1122.471985][T11496] libceph: mon0 (1)[c::]:6789 connect error [ 1123.902341][T14702] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.2179'. [ 1127.869095][T14734] loop0: detected capacity change from 0 to 256 [ 1128.024139][T14734] exfat: Deprecated parameter 'namecase' [ 1128.186651][T14734] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1128.373140][ T5886] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1128.692777][ T5886] usb 7-1: Using ep0 maxpacket: 16 [ 1128.710488][ T5886] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.846211][ T5886] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1129.865601][ T5886] usb 7-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1130.128310][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.172879][ T5886] usb 7-1: Product: syz [ 1130.177115][ T5886] usb 7-1: Manufacturer: syz [ 1130.212600][ T5886] usb 7-1: SerialNumber: syz [ 1130.253948][ T5886] usb 7-1: config 0 descriptor?? [ 1130.485896][ T5886] usb 7-1: USB disconnect, device number 3 [ 1130.605382][T14766] rdma_rxe: rxe_newlink: failed to add lo [ 1130.867951][T14766] netlink: 'syz.0.2192': attribute type 1 has an invalid length. [ 1130.875959][T14766] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2192'. [ 1131.569203][T14770] loop3: detected capacity change from 0 to 64 [ 1132.605222][ T30] kauditd_printk_skb: 2981 callbacks suppressed [ 1132.605253][ T30] audit: type=1800 audit(1748299976.988:4230): pid=14770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2194" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 1133.789610][T14793] loop3: detected capacity change from 0 to 512 [ 1134.233444][T14793] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1134.383861][T14793] EXT4-fs (loop3): 1 orphan inode deleted [ 1134.980843][T10921] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1134.998300][T10921] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 1 [ 1135.020960][T14793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1135.039949][T14793] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1135.951901][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2202'. [ 1136.090998][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.245870][T14826] loop3: detected capacity change from 0 to 256 [ 1136.570315][T14835] rdma_rxe: rxe_newlink: failed to add lo [ 1137.445227][T14835] netlink: 'syz.6.2206': attribute type 1 has an invalid length. [ 1137.453200][T14835] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2206'. [ 1137.626181][T14826] FAT-fs (loop3): Directory bread(block 64) failed [ 1137.648548][T14826] FAT-fs (loop3): Directory bread(block 65) failed [ 1137.672823][T14826] FAT-fs (loop3): Directory bread(block 66) failed [ 1137.886299][T14826] FAT-fs (loop3): Directory bread(block 67) failed [ 1137.947075][T14826] FAT-fs (loop3): Directory bread(block 68) failed [ 1137.968629][T14826] FAT-fs (loop3): Directory bread(block 69) failed [ 1138.049899][T14826] FAT-fs (loop3): Directory bread(block 70) failed [ 1138.583288][T14826] FAT-fs (loop3): Directory bread(block 71) failed [ 1138.594669][T14826] FAT-fs (loop3): Directory bread(block 72) failed [ 1138.633630][T14826] FAT-fs (loop3): Directory bread(block 73) failed [ 1140.573188][T14867] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2213'. [ 1140.584488][T14867] syz.3.2213: attempt to access beyond end of device [ 1140.584488][T14867] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1140.597395][T14867] hpfs: hpfs_map_sector(): read error [ 1144.254349][T14910] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2223'. [ 1144.311312][T14910] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2223'. [ 1146.560610][T14939] siw: device registration error -23 [ 1149.590607][T14968] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1149.598460][T14968] UDF-fs: Scanning with blocksize 512 failed [ 1149.607723][T14968] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1149.615465][T14968] UDF-fs: Scanning with blocksize 1024 failed [ 1149.623699][T14968] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1149.648302][T14968] UDF-fs: Scanning with blocksize 2048 failed [ 1149.656582][T14968] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1149.664753][T14968] UDF-fs: Scanning with blocksize 4096 failed [ 1151.437403][T14986] rdma_rxe: rxe_newlink: failed to add lo [ 1151.893122][T14986] netlink: 'syz.6.2240': attribute type 1 has an invalid length. [ 1151.901085][T14986] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2240'. [ 1152.517420][T14993] loop7: detected capacity change from 0 to 64 [ 1152.813544][ T30] audit: type=1800 audit(1748299997.178:4231): pid=14993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2242" name="file1" dev="loop7" ino=18 res=0 errno=0 [ 1152.870579][T14998] siw: device registration error -23 [ 1153.543814][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2243'. [ 1154.379787][T15005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1154.499098][T15000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2243'. [ 1155.444096][T15029] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2251'. [ 1155.466599][T15029] syz.3.2251: attempt to access beyond end of device [ 1155.466599][T15029] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1155.482315][T15029] hpfs: hpfs_map_sector(): read error [ 1156.027574][T15039] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1156.035319][T15039] UDF-fs: Scanning with blocksize 512 failed [ 1156.044739][T15039] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1156.052365][T15039] UDF-fs: Scanning with blocksize 1024 failed [ 1156.062438][T15039] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1156.070167][T15039] UDF-fs: Scanning with blocksize 2048 failed [ 1156.078315][T15039] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1156.086102][T15039] UDF-fs: Scanning with blocksize 4096 failed [ 1157.141786][T15040] siw: device registration error -23 [ 1157.454351][T15046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2255'. [ 1157.681957][T15052] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1160.187448][ T978] libceph: connect (1)[c::]:6789 error -101 [ 1160.195041][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 1160.259188][T15076] ceph: No mds server is up or the cluster is laggy [ 1160.561483][ T978] libceph: connect (1)[c::]:6789 error -101 [ 1160.857420][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 1162.725228][T15099] rdma_rxe: rxe_newlink: failed to add lo [ 1162.913178][T15099] netlink: 'syz.7.2267': attribute type 1 has an invalid length. [ 1162.921560][T15099] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2267'. [ 1163.570464][T15105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2271'. [ 1165.008308][T15117] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1165.284321][T15120] siw: device registration error -23 [ 1167.616799][ T5886] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1168.783941][ T5886] usb 8-1: device descriptor read/64, error -71 [ 1169.436632][ T5886] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1169.813147][ T5886] usb 8-1: device descriptor read/64, error -71 [ 1169.947764][ T5886] usb usb8-port1: attempt power cycle [ 1170.013130][ T43] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1170.192814][ T43] usb 1-1: device descriptor read/64, error -71 [ 1170.242796][T13419] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1170.413198][T13419] usb 2-1: Using ep0 maxpacket: 32 [ 1171.030434][T15182] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1171.077764][ T43] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1171.264471][T13419] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 1171.291594][T13419] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.369849][T13419] usb 2-1: config 0 has no interface number 0 [ 1171.391587][T13419] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1171.423491][T13419] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1171.454408][T13419] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1171.475048][T13419] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1171.487919][T13419] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1171.491645][ T43] usb 1-1: device descriptor read/64, error -71 [ 1171.500939][T13419] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1171.629866][T13419] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1171.652229][T13419] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1171.664736][T13419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.723677][ T43] usb usb1-port1: attempt power cycle [ 1171.752007][T13419] usb 2-1: Product: syz [ 1172.584137][T15190] siw: device registration error -23 [ 1172.735182][T13419] usb 2-1: Manufacturer: syz [ 1172.758858][T13419] usb 2-1: SerialNumber: syz [ 1172.773294][ T59] kworker/u8:4 (59) used greatest stack depth: 17984 bytes left [ 1173.044725][T13419] usb 2-1: config 0 descriptor?? [ 1173.050497][T13419] usb 2-1: can't set config #0, error -71 [ 1173.060097][T13419] usb 2-1: USB disconnect, device number 13 [ 1173.853554][T15203] random: crng reseeded on system resumption [ 1173.990633][T15206] kvm: kvm [15197]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 1175.383367][T15218] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1177.103626][T15232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1177.813553][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.912751][ T43] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1180.333278][T12881] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1180.362746][ T43] usb 2-1: device descriptor read/64, error -71 [ 1181.022937][T12881] usb 8-1: Using ep0 maxpacket: 32 [ 1181.030564][T12881] usb 8-1: config 0 has an invalid interface number: 146 but max is 0 [ 1181.072957][ T43] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1181.072971][T12881] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.072995][T12881] usb 8-1: config 0 has no interface number 0 [ 1181.159216][T12881] usb 8-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1181.223235][ T43] usb 2-1: device descriptor read/64, error -71 [ 1181.225944][T12881] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1181.248231][T12881] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1181.706017][ T43] usb usb2-port1: attempt power cycle [ 1181.892952][T12881] usb 8-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1181.907434][T12881] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1181.958953][T12881] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1182.842779][T12881] usb 8-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1182.863229][T12881] usb 8-1: string descriptor 0 read error: -71 [ 1182.869596][T12881] usb 8-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1182.892865][T12881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.944420][T12881] usb 8-1: config 0 descriptor?? [ 1182.957150][T12881] usb 8-1: can't set config #0, error -71 [ 1183.014101][T12881] usb 8-1: USB disconnect, device number 5 [ 1183.110910][T15280] siw: device registration error -23 [ 1183.506056][ T9726] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1183.711736][T15289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1183.792940][ T9726] usb 4-1: device descriptor read/64, error -71 [ 1184.192819][ T9726] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1184.349997][ T9726] usb 4-1: device descriptor read/64, error -71 [ 1184.484459][ T9726] usb usb4-port1: attempt power cycle [ 1184.862857][ T9726] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1184.924233][ T9726] usb 4-1: device descriptor read/8, error -71 [ 1185.165991][ T9726] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1185.226586][ T9726] usb 4-1: device descriptor read/8, error -71 [ 1185.296981][T11496] libceph: connect (1)[c::]:6789 error -101 [ 1185.303565][T11496] libceph: mon0 (1)[c::]:6789 connect error [ 1185.366654][ T9726] usb usb4-port1: unable to enumerate USB device [ 1185.575901][T11496] libceph: connect (1)[c::]:6789 error -101 [ 1185.623499][T15309] ceph: No mds server is up or the cluster is laggy [ 1185.648858][T11496] libceph: mon0 (1)[c::]:6789 connect error [ 1185.927026][T15318] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2314'. [ 1185.985101][T15318] syz.6.2314: attempt to access beyond end of device [ 1185.985101][T15318] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1185.999668][T15318] hpfs: hpfs_map_sector(): read error [ 1186.223193][T12881] libceph: connect (1)[c::]:6789 error -101 [ 1186.229407][T12881] libceph: mon0 (1)[c::]:6789 connect error [ 1186.794681][ T43] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1187.833074][ T43] usb 1-1: device descriptor read/64, error -71 [ 1189.112919][T12881] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1189.117498][ T43] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1189.263123][T12881] usb 8-1: Using ep0 maxpacket: 32 [ 1189.265034][ T43] usb 1-1: device descriptor read/64, error -71 [ 1189.265522][T12881] usb 8-1: config 0 has an invalid interface number: 146 but max is 0 [ 1189.265548][T12881] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.265568][T12881] usb 8-1: config 0 has no interface number 0 [ 1189.265609][T12881] usb 8-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1189.265632][T12881] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1189.265660][T12881] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1189.265688][T12881] usb 8-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1189.265714][T12881] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1189.265740][T12881] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1189.265763][T12881] usb 8-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1189.304082][T12881] usb 8-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1189.304106][T12881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.304122][T12881] usb 8-1: Product: syz [ 1189.304135][T12881] usb 8-1: Manufacturer: syz [ 1189.304146][T12881] usb 8-1: SerialNumber: syz [ 1189.307516][T12881] usb 8-1: config 0 descriptor?? [ 1189.308150][T15348] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1189.318505][T12881] microtek usb (rev 0.4.3): expecting 3 got 2 endpoints! Bailing out. [ 1189.373285][ T43] usb usb1-port1: attempt power cycle [ 1190.272488][T15380] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2328'. [ 1190.290146][T15380] syz.1.2328: attempt to access beyond end of device [ 1190.290146][T15380] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1190.322212][T15380] hpfs: hpfs_map_sector(): read error [ 1190.432749][T13419] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1190.662716][T12881] usb 8-1: USB disconnect, device number 6 [ 1190.692754][T13419] usb 4-1: Using ep0 maxpacket: 16 [ 1190.714009][T13419] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.745306][T13419] usb 4-1: config 0 has no interfaces? [ 1190.778813][T13419] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1190.798221][T13419] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.822730][T13419] usb 4-1: Product: syz [ 1190.826984][T13419] usb 4-1: Manufacturer: syz [ 1190.853920][T13419] usb 4-1: SerialNumber: syz [ 1190.884482][T13419] usb 4-1: config 0 descriptor?? [ 1191.532015][T13419] usb 4-1: USB disconnect, device number 21 [ 1193.992830][ T43] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1194.242756][ T43] usb 7-1: device descriptor read/64, error -71 [ 1194.513735][ T43] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1194.682907][ T43] usb 7-1: device descriptor read/64, error -71 [ 1195.124206][T15426] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1195.753799][ T43] usb usb7-port1: attempt power cycle [ 1196.103160][ T43] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1196.126877][ T43] usb 7-1: device descriptor read/8, error -71 [ 1197.462744][ T43] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1197.483642][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 1197.486189][ T43] usb 7-1: config 0 has an invalid interface number: 146 but max is 0 [ 1197.486219][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.486242][ T43] usb 7-1: config 0 has no interface number 0 [ 1197.486283][ T43] usb 7-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1197.486306][ T43] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1197.486333][ T43] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1197.486361][ T43] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1197.486386][ T43] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1197.486421][ T43] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1197.486444][ T43] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1197.489885][ T43] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1197.489918][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.489941][ T43] usb 7-1: Product: syz [ 1197.489957][ T43] usb 7-1: Manufacturer: syz [ 1197.489974][ T43] usb 7-1: SerialNumber: syz [ 1198.870146][ T43] usb 7-1: config 0 descriptor?? [ 1198.873101][T15450] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1198.908564][ T43] microtek usb (rev 0.4.3): expecting 3 got 2 endpoints! Bailing out. [ 1200.282737][ T43] usb 7-1: USB disconnect, device number 7 [ 1202.120686][T15486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1203.095970][T15496] siw: device registration error -23 [ 1203.462974][ T5886] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1203.592942][ T5886] usb 1-1: device descriptor read/64, error -71 [ 1203.832803][ T5886] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1203.962767][ T5886] usb 1-1: device descriptor read/64, error -71 [ 1204.073251][ T5886] usb usb1-port1: attempt power cycle [ 1205.714765][ T5886] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1206.502804][ T5886] usb 1-1: device not accepting address 26, error -71 [ 1207.403935][T15533] tmpfs: Unknown parameter 'usrquota_block' [ 1208.494552][T15537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1211.949294][T15569] loop0: detected capacity change from 0 to 512 [ 1212.111607][T15569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1212.112271][T15569] ext4 filesystem being mounted at /519/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1212.887680][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.219588][T15579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1213.255547][ T5908] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1213.387243][ T5908] usb 7-1: device descriptor read/64, error -71 [ 1213.642981][ T5908] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1213.772776][ T5908] usb 7-1: device descriptor read/64, error -71 [ 1214.286667][ T5908] usb usb7-port1: attempt power cycle [ 1215.062765][ T5908] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1215.091954][ T5908] usb 7-1: device descriptor read/8, error -71 [ 1215.851610][ T5908] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1216.422865][ T5908] usb 7-1: device not accepting address 11, error -71 [ 1216.431598][ T5908] usb usb7-port1: unable to enumerate USB device [ 1218.094986][T15617] tmpfs: Unknown parameter 'usrquota_block' [ 1222.477471][ T5886] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1222.776586][T15668] loop7: detected capacity change from 0 to 4096 [ 1222.904676][ T5886] usb 7-1: device descriptor read/64, error -71 [ 1223.142851][ T5886] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1223.342955][ T5886] usb 7-1: device descriptor read/64, error -71 [ 1223.471319][ T5886] usb usb7-port1: attempt power cycle [ 1223.848187][ T5886] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1223.928587][ T5886] usb 7-1: device descriptor read/8, error -71 [ 1227.826398][T15693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1228.119063][T15698] tmpfs: Unknown parameter 'usrquota_block' [ 1228.748831][T12881] libceph: connect (1)[c::]:6789 error -101 [ 1228.762884][T12881] libceph: mon0 (1)[c::]:6789 connect error [ 1228.853720][T15704] ceph: No mds server is up or the cluster is laggy [ 1229.045508][T12881] libceph: connect (1)[c::]:6789 error -101 [ 1229.120581][T12881] libceph: mon0 (1)[c::]:6789 connect error [ 1229.706947][T15718] loop7: detected capacity change from 0 to 64 [ 1229.832931][T15720] loop6: detected capacity change from 0 to 512 [ 1229.886050][T15720] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1230.192179][T15720] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1230.647103][T15720] EXT4-fs (loop6): 1 truncate cleaned up [ 1230.670543][T15720] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1230.721426][T15720] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2398'. [ 1230.887620][T15736] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2401'. [ 1230.896793][T15736] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2401'. [ 1230.898665][ T5886] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1230.924099][T15720] netlink: 'syz.6.2398': attribute type 1 has an invalid length. [ 1231.074281][T15720] netlink: 'syz.6.2398': attribute type 2 has an invalid length. [ 1231.087033][T15713] loop1: detected capacity change from 0 to 32768 [ 1231.173356][T15713] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2395 (15713) [ 1231.252736][T15713] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1231.264063][T13399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1231.280105][T15713] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1231.294903][ T5886] usb 4-1: device descriptor read/64, error -71 [ 1231.322857][T15713] BTRFS info (device loop1): using free-space-tree [ 1232.400928][T15713] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1232.416727][T15713] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1232.443109][ T5886] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1232.462901][T15713] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1232.465548][T15713] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 1232.619217][T15713] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 1232.645950][T15713] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1232.731267][T15713] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1232.781833][T15713] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1232.803948][ T5886] usb 4-1: device descriptor read/64, error -71 [ 1232.982152][T15713] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 1233.139484][ T5886] usb usb4-port1: attempt power cycle [ 1233.150617][T15713] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1233.589270][T15713] BTRFS error (device loop1): open_ctree failed: -12 [ 1234.289421][T15789] syz.0.2408: attempt to access beyond end of device [ 1234.289421][T15789] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1234.290511][T15789] hpfs: hpfs_map_sector(): read error [ 1235.783287][T15806] tmpfs: Unknown parameter 'usrquota_block' [ 1236.048842][T13419] IPVS: starting estimator thread 0... [ 1236.143714][T15805] IPVS: using max 26 ests per chain, 62400 per kthread [ 1236.475084][T10921] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1237.703096][T11496] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1238.022458][T11496] usb 2-1: Using ep0 maxpacket: 16 [ 1238.358313][T11496] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.602256][T11496] usb 2-1: config 0 has no interfaces? [ 1238.612594][T11496] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1238.621998][T11496] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.630283][T11496] usb 2-1: Product: syz [ 1238.634722][T11496] usb 2-1: Manufacturer: syz [ 1238.639354][T11496] usb 2-1: SerialNumber: syz [ 1238.707054][T11496] usb 2-1: config 0 descriptor?? [ 1239.003769][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.015163][T11496] usb 2-1: USB disconnect, device number 17 [ 1241.958695][T15866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1243.084367][T11496] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0 [ 1243.103420][T11496] hid-generic 0005:16BF:5505.0004: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1244.177565][T15899] tmpfs: Unknown parameter 'usrquota_block' [ 1246.833476][T13419] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1246.974600][T15931] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2438'. [ 1247.254283][T15932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1247.972752][T13419] usb 8-1: Using ep0 maxpacket: 16 [ 1248.620443][T13419] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.638387][T13419] usb 8-1: config 0 has no interfaces? [ 1248.648442][T13419] usb 8-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1248.657725][T13419] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.667468][T13419] usb 8-1: Product: syz [ 1248.672245][T13419] usb 8-1: Manufacturer: syz [ 1248.682899][T13419] usb 8-1: SerialNumber: syz [ 1248.691618][T13419] usb 8-1: config 0 descriptor?? [ 1248.963966][ T5908] usb 8-1: USB disconnect, device number 7 [ 1252.911848][T15972] loop1: detected capacity change from 0 to 512 [ 1254.223728][T15982] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1254.992959][T15972] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1256.063609][T15997] tmpfs: Unknown parameter 'usrquota_block' [ 1256.322333][T15972] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1256.391165][T16001] loop3: detected capacity change from 0 to 64 [ 1256.426033][ T5841] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1256.443130][ T30] audit: type=1800 audit(1748300100.818:4232): pid=16001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2455" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 1259.022088][T16035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1265.643122][T16099] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2486'. [ 1266.647091][T16099] syz.0.2486: attempt to access beyond end of device [ 1266.647091][T16099] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1266.660245][T16099] hpfs: hpfs_map_sector(): read error [ 1267.873701][T16132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1270.065342][T16146] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1273.324212][T16173] nfs4: Unknown parameter 'noa' [ 1273.446767][T16174] loop6: detected capacity change from 0 to 4096 [ 1273.456713][T16174] ntfs3: Unknown parameter '0x00000000000000051844674407370955161501777777777777777777777' [ 1273.691764][T16159] loop7: detected capacity change from 0 to 32768 [ 1273.827134][T16181] loop3: detected capacity change from 0 to 1024 [ 1273.916556][T16184] loop6: detected capacity change from 0 to 16 [ 1273.956480][T16184] erofs (device loop6): mounted with root inode @ nid 36. [ 1274.148473][ T5848] erofs (device loop6): failed to decompress -26 in[46, 0] out[9000] [ 1274.188577][T16184] erofs (device loop6): failed to decompress -26 in[46, 4050] out[8192] [ 1274.198135][T16184] erofs (device loop6): read error -117 @ 0 of nid 89 [ 1274.669105][ T30] audit: type=1800 audit(1748300118.588:4233): pid=16184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2509" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 1274.710313][T16181] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1276.710261][T16202] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1277.941539][T16220] trusted_key: encrypted_key: insufficient parameters specified [ 1278.309792][T16226] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2526'. [ 1281.708147][T16255] loop6: detected capacity change from 0 to 64 [ 1281.951738][T16255] syz.6.2535: attempt to access beyond end of device [ 1281.951738][T16255] loop6: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 1281.966455][T16255] Buffer I/O error on dev loop6, logical block 134217734, async page read [ 1282.070905][T16255] Trying to free block not in datazone [ 1283.456542][T16273] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2544'. [ 1283.712673][T16276] trusted_key: encrypted_key: insufficient parameters specified [ 1289.203643][T16301] binder: 16300:16301 ioctl c0306201 200000000540 returned -22 [ 1289.309293][T16306] binder: 16300:16306 ioctl c0306201 200000000640 returned -22 [ 1289.578153][T16311] syz.0.2556: attempt to access beyond end of device [ 1289.578153][T16311] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1289.591563][T16311] hpfs: hpfs_map_sector(): read error [ 1290.961440][T16325] trusted_key: encrypted_key: insufficient parameters specified [ 1292.085332][T16339] syz.0.2568: attempt to access beyond end of device [ 1292.085332][T16339] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1292.098660][T16339] hpfs: hpfs_map_sector(): read error [ 1292.849364][T16319] loop7: detected capacity change from 0 to 32768 [ 1293.691881][T16319] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1295.654222][T13634] ocfs2: Unmounting device (7,7) on (node local) [ 1296.097869][T16350] binder: 16349:16350 ioctl c0306201 200000000540 returned -22 [ 1296.158129][T16351] binder: 16349:16351 ioctl c0306201 200000000640 returned -22 [ 1298.672550][T16374] syz.0.2579: attempt to access beyond end of device [ 1298.672550][T16374] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1298.685634][T16374] hpfs: hpfs_map_sector(): read error [ 1300.401157][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.372002][T16401] binder: 16399:16401 ioctl c0306201 200000000540 returned -22 [ 1303.439568][T16404] binder: 16399:16404 ioctl c0306201 200000000640 returned -22 [ 1303.872545][T16414] lo speed is unknown, defaulting to 1000 [ 1303.879212][T16414] lo speed is unknown, defaulting to 1000 [ 1303.890386][T16414] lo speed is unknown, defaulting to 1000 [ 1303.930495][T16414] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1304.069218][T16415] batadv_slave_0: mtu less than device minimum [ 1304.113893][T16414] lo speed is unknown, defaulting to 1000 [ 1304.133227][T16414] lo speed is unknown, defaulting to 1000 [ 1304.150540][T16414] lo speed is unknown, defaulting to 1000 [ 1304.159760][T16414] lo speed is unknown, defaulting to 1000 [ 1304.198514][T16414] lo speed is unknown, defaulting to 1000 [ 1306.774239][T16431] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2597'. [ 1306.798385][T16431] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2597'. [ 1307.827927][T16438] loop6: detected capacity change from 0 to 1024 [ 1307.978554][T16438] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1310.523092][ T5908] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1312.198623][ T5908] usb 8-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1312.207821][ T5908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.217567][ T5908] usb 8-1: Product: syz [ 1312.221809][ T5908] usb 8-1: Manufacturer: syz [ 1312.227839][ T5908] usb 8-1: SerialNumber: syz [ 1312.235677][ T5908] usb 8-1: config 0 descriptor?? [ 1312.461309][T16473] fuse: Bad value for 'fd' [ 1312.732330][T16479] loop0: detected capacity change from 0 to 1024 [ 1312.851350][T16479] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1313.216996][ T30] audit: type=1326 audit(1748300157.598:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16485 comm="syz.0.2616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a5878e969 code=0x0 [ 1313.238941][ C1] vkms_vblank_simulate: vblank timer overrun [ 1313.520032][ T5908] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1313.561844][ T5908] asix 8-1:0.0: probe with driver asix failed with error -32 [ 1313.835469][ T5908] usb 8-1: USB disconnect, device number 8 [ 1314.395540][T16504] loop0: detected capacity change from 0 to 512 [ 1314.544056][T16504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1314.603858][T16504] ext4 filesystem being mounted at /573/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1315.676072][T16504] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000d40000 ro. [ 1315.856738][ T5840] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1316.466726][T16509] loop6: detected capacity change from 0 to 131072 [ 1316.535087][T16509] XFS (loop6): Mounting V5 Filesystem f37484a6-847f-4c37-be64-3b143b6edc4c [ 1316.610876][T16509] XFS (loop6): Ending clean mount [ 1316.935939][T13399] XFS (loop6): Unmounting Filesystem f37484a6-847f-4c37-be64-3b143b6edc4c [ 1317.293169][T16528] loop0: detected capacity change from 0 to 1024 [ 1317.348437][T16528] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1319.772823][T16548] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2632'. [ 1320.722842][T12881] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1320.914805][T12881] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1320.938369][T12881] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1321.115007][T12881] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1321.134798][T12881] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1321.257826][T16565] sp0: Synchronizing with TNC [ 1321.816692][T12881] usb 8-1: Product: syz [ 1321.823853][T12881] usb 8-1: Manufacturer: syz [ 1321.828597][T12881] usb 8-1: SerialNumber: syz [ 1321.837821][T16566] fuse: Bad value for 'fd' [ 1321.843702][T12881] usb 8-1: config 0 descriptor?? [ 1321.857778][T12881] usb 8-1: selecting invalid altsetting 0 [ 1321.977607][T12667] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1321.991732][T12667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1322.007275][T12667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1322.017822][T12667] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1322.026213][T12667] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1322.077999][T12192] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.089959][T12192] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1322.125093][T12881] usb 8-1: USB disconnect, device number 9 [ 1322.310047][T12192] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.347286][T12192] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1322.458953][T16567] lo speed is unknown, defaulting to 1000 [ 1322.467423][T16567] lo speed is unknown, defaulting to 1000 [ 1323.354703][T12192] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1323.387080][T12192] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1323.984566][T12192] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.007843][T12192] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1324.143026][T12667] Bluetooth: hci0: command tx timeout [ 1325.392735][T16607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1325.560720][T16567] chnl_net:caif_netlink_parms(): no params data found [ 1325.610516][T12192] bridge_slave_1: left allmulticast mode [ 1325.623816][T12192] bridge_slave_1: left promiscuous mode [ 1325.636089][T12192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.801975][T12192] bridge_slave_0: left allmulticast mode [ 1325.809062][T12192] bridge_slave_0: left promiscuous mode [ 1325.820464][T12192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.927163][T16612] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1326.230822][T12667] Bluetooth: hci0: command tx timeout [ 1326.390551][T16619] fuse: Bad value for 'fd' [ 1327.671385][T16631] Falling back ldisc for ptm0. [ 1328.323464][T12667] Bluetooth: hci0: command tx timeout [ 1328.697974][T13419] libceph: connect (1)[c::]:6789 error -101 [ 1328.720817][T13419] libceph: mon0 (1)[c::]:6789 connect error [ 1328.741752][T12192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.820861][T12192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.857524][T12192] bond0 (unregistering): Released all slaves [ 1328.917545][T16643] ceph: No mds server is up or the cluster is laggy [ 1329.044145][T13419] libceph: connect (1)[c::]:6789 error -101 [ 1329.132825][T13419] libceph: mon0 (1)[c::]:6789 connect error [ 1329.816603][T12192] bond1 (unregistering): Released all slaves [ 1330.391576][T12667] Bluetooth: hci0: command tx timeout [ 1330.467375][T12192] bond2 (unregistering): Released all slaves [ 1330.531612][T16622] bridge_slave_0: left promiscuous mode [ 1330.538071][T16622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.608361][T16622] bridge_slave_1: left promiscuous mode [ 1330.645585][T16622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.681487][T16622] bond0: (slave bond_slave_0): Releasing backup interface [ 1330.696087][T16622] bond0: (slave bond_slave_1): Releasing backup interface [ 1330.760975][T16622] team0: Port device team_slave_0 removed [ 1330.905733][T16622] team0: Port device team_slave_1 removed [ 1330.911969][T16622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1331.009724][T16622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1332.598974][T16673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1332.881655][T16567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.889654][T16567] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.897171][T16567] bridge_slave_0: entered allmulticast mode [ 1332.906027][T16567] bridge_slave_0: entered promiscuous mode [ 1333.407762][T16567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1333.415852][T16567] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.423631][T16567] bridge_slave_1: entered allmulticast mode [ 1333.432191][T16567] bridge_slave_1: entered promiscuous mode [ 1333.460831][T16681] loop7: detected capacity change from 0 to 512 [ 1333.474996][T12192] hsr_slave_0: left promiscuous mode [ 1333.503096][T12192] hsr_slave_1: left promiscuous mode [ 1333.510228][T12192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1333.518449][T12192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1333.526865][T12192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1333.535028][T12192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1333.539056][T16683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2663'. [ 1333.630335][T12192] veth1_macvtap: left promiscuous mode [ 1333.630876][T16681] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1333.648273][T12192] veth0_macvtap: left promiscuous mode [ 1333.657891][T16681] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1333.789868][T13634] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1338.297106][T16720] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1339.434483][T16730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2675'. [ 1340.212173][T16567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1340.246470][ T5886] lo speed is unknown, defaulting to 1000 [ 1340.326508][ T5886] infiniband syz2: ib_query_port failed (-19) [ 1340.344897][T16567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1341.124092][T16748] loop7: detected capacity change from 0 to 1024 [ 1341.127206][T16567] team0: Port device team_slave_0 added [ 1341.142731][T11496] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1341.157973][T16748] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1341.162735][T16567] team0: Port device team_slave_1 added [ 1341.281402][T16567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1341.288721][T16567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1341.339135][T16567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1341.356486][T16567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1341.363933][T16567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1341.390299][ C1] vkms_vblank_simulate: vblank timer overrun [ 1341.399017][T16567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1341.434265][T11496] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1341.452452][T11496] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.461717][T11496] usb 2-1: Product: syz [ 1341.477361][T11496] usb 2-1: Manufacturer: syz [ 1341.482133][T11496] usb 2-1: SerialNumber: syz [ 1341.496193][T11496] usb 2-1: config 0 descriptor?? [ 1342.078219][T16761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1342.752300][T16567] hsr_slave_0: entered promiscuous mode [ 1342.759934][T12192] IPVS: stop unused estimator thread 0... [ 1342.804652][T16567] hsr_slave_1: entered promiscuous mode [ 1342.810999][T16567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1342.852714][T16567] Cannot create hsr debugfs directory [ 1342.870183][T11496] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1342.917020][T11496] asix 2-1:0.0: probe with driver asix failed with error -32 [ 1342.958710][T11496] usb 2-1: USB disconnect, device number 18 [ 1343.102756][T16767] loop7: detected capacity change from 0 to 32768 [ 1343.112740][T16767] jfs_mount: Failed to read FILESYSTEM_I [ 1343.119366][T16767] Mount JFS Failure: -5 [ 1343.123697][T16767] jfs_mount failed w/return code = -5 [ 1343.563046][T16770] tipc: Started in network mode [ 1343.568037][T16770] tipc: Node identity 7f000001, cluster identity 4711 [ 1343.576425][T16770] tipc: Enabled bearer , priority 10 [ 1343.621369][T16772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2688'. [ 1344.498541][T16785] loop1: detected capacity change from 0 to 1024 [ 1345.460538][ T9726] tipc: Node number set to 2130706433 [ 1345.488629][T16785] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1346.712764][T16804] rdma_rxe: rxe_newlink: failed to add lo [ 1346.746151][T16803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1346.941855][T16804] netlink: 'syz.7.2694': attribute type 1 has an invalid length. [ 1346.949894][T16804] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2694'. [ 1347.584802][T16567] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1347.663000][ T5886] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1347.810976][T16567] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1348.013093][ T5886] usb 7-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1348.033760][T16567] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1348.076629][ T5886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.112281][T16567] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1348.136437][ T5886] usb 7-1: Product: syz [ 1348.165817][ T5886] usb 7-1: Manufacturer: syz [ 1348.182802][ T5886] usb 7-1: SerialNumber: syz [ 1348.205112][ T5886] usb 7-1: config 0 descriptor?? [ 1348.339450][T16820] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2701'. [ 1348.382218][T16567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1348.678458][T16567] 8021q: adding VLAN 0 to HW filter on device team0 [ 1349.074637][T16694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.081881][T16694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1349.119471][T16811] loop0: detected capacity change from 0 to 32768 [ 1349.337944][T12576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.345210][T12576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1349.531096][ T5886] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1349.625942][T16811] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1349.652430][ T5886] asix 7-1:0.0: probe with driver asix failed with error -32 [ 1350.023691][ T5886] usb 7-1: USB disconnect, device number 16 [ 1350.311287][T16811] XFS (loop0): Ending clean mount [ 1351.340690][ T5840] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1352.731403][T16847] loop6: detected capacity change from 0 to 40427 [ 1352.768704][T16847] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1352.777005][T16847] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1352.796154][T16847] F2FS-fs (loop6): invalid crc value [ 1352.965481][T16847] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1352.972955][T16847] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1353.280797][T16857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1354.443636][T16567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1354.950858][T16868] rdma_rxe: rxe_newlink: failed to add lo [ 1355.067683][T16567] veth0_vlan: entered promiscuous mode [ 1355.092449][T16567] veth1_vlan: entered promiscuous mode [ 1355.165518][T16868] netlink: 'syz.7.2709': attribute type 1 has an invalid length. [ 1355.173466][T16868] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2709'. [ 1355.611219][T16567] veth0_macvtap: entered promiscuous mode [ 1355.644010][T16567] veth1_macvtap: entered promiscuous mode [ 1355.671796][T16567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1355.686230][T16567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1355.701725][T16567] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.702980][T16871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2712'. [ 1355.734172][T16567] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.760153][T16567] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.789716][T16567] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.803675][T12576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.811567][T12576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.919216][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.928697][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1357.013336][T12881] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1359.177671][T12881] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1359.340332][T12881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.652649][T12881] usb 1-1: Product: syz [ 1359.656892][T12881] usb 1-1: Manufacturer: syz [ 1359.661540][T12881] usb 1-1: SerialNumber: syz [ 1359.708510][T12881] usb 1-1: config 0 descriptor?? [ 1360.010573][T16906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1360.236721][T12881] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1360.253600][T12881] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1360.281906][T12881] usb 1-1: USB disconnect, device number 28 [ 1360.768903][T16909] loop3: detected capacity change from 0 to 4096 [ 1360.795426][T16909] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 1361.037432][T16915] rdma_rxe: rxe_newlink: failed to add lo [ 1361.316258][T16915] netlink: 'syz.7.2723': attribute type 1 has an invalid length. [ 1361.324204][T16915] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2723'. [ 1361.829809][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.870781][T16918] netlink: 'syz.6.2724': attribute type 1 has an invalid length. [ 1362.069512][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1362.081222][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1362.091466][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1362.102662][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1362.113322][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1362.185973][T16918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1363.209923][T16694] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.193915][T12667] Bluetooth: hci1: command tx timeout [ 1364.336884][T16922] bridge_slave_0: left allmulticast mode [ 1364.347381][T16922] bridge_slave_0: left promiscuous mode [ 1364.353387][T16922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.376081][T16922] bridge_slave_1: left allmulticast mode [ 1364.381809][T16922] bridge_slave_1: left promiscuous mode [ 1364.390183][T16922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.412672][T16922] bond0: (slave bond_slave_0): Releasing backup interface [ 1364.445376][T16922] bond0: (slave bond_slave_1): Releasing backup interface [ 1364.491633][T16922] team0: Port device team_slave_0 removed [ 1364.520487][T16922] team0: Port device team_slave_1 removed [ 1364.554172][T16922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1364.606356][T16922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1364.734961][T16922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1364.742515][T16922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1365.977514][T16694] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.232864][T12667] Bluetooth: hci1: command tx timeout [ 1367.336676][T16927] lo speed is unknown, defaulting to 1000 [ 1368.302856][T12667] Bluetooth: hci1: command tx timeout [ 1369.390597][T16970] rdma_rxe: rxe_newlink: failed to add lo [ 1369.490961][T16970] netlink: 'syz.1.2734': attribute type 1 has an invalid length. [ 1369.498821][T16970] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2734'. [ 1369.561453][T16694] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.640609][T16978] netlink: 'syz.6.2737': attribute type 1 has an invalid length. [ 1369.689697][T16982] loop3: detected capacity change from 0 to 512 [ 1369.709519][T16978] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1369.823798][T16694] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.918328][T16982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1369.934403][T16982] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1370.394593][T12667] Bluetooth: hci1: command tx timeout [ 1370.771843][T17000] loop1: detected capacity change from 0 to 512 [ 1370.933148][T16994] bridge_slave_0: left allmulticast mode [ 1370.941350][T16994] bridge_slave_0: left promiscuous mode [ 1370.991781][T17000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1371.006797][T16994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.087344][T17000] ext4 filesystem being mounted at /586/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1371.111522][T16994] bridge_slave_1: left allmulticast mode [ 1371.155998][T17000] ext4: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 1371.179075][T16994] bridge_slave_1: left promiscuous mode [ 1371.377331][T16994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.577545][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1371.598044][T16994] bond0: (slave bond_slave_0): Releasing backup interface [ 1371.707260][T16994] bond0: (slave bond_slave_1): Releasing backup interface [ 1371.825854][T16994] team0: Port device team_slave_0 removed [ 1371.848606][T16567] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1371.869534][T16994] team0: Port device team_slave_1 removed [ 1371.900054][T16994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1371.940083][T16994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1371.961636][T16994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1371.990964][T16994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1372.249099][T17022] rdma_rxe: rxe_newlink: failed to add lo [ 1372.592328][T17022] netlink: 'syz.7.2747': attribute type 1 has an invalid length. [ 1372.600500][T17022] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2747'. [ 1373.307831][T17032] loop6: detected capacity change from 0 to 256 [ 1373.316394][T17032] vfat: Unknown parameter 'nnonumtail' [ 1374.303205][T16694] bridge_slave_1: left allmulticast mode [ 1374.318457][T17039] loop6: detected capacity change from 0 to 512 [ 1374.329504][T16694] bridge_slave_1: left promiscuous mode [ 1374.339960][T16694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.595153][T16694] bridge_slave_0: left allmulticast mode [ 1374.598540][T17039] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1374.608648][T16694] bridge_slave_0: left promiscuous mode [ 1374.631833][T17039] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1375.576392][T16694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.618470][T17039] ext4: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 1376.836075][T13399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1376.940192][T17054] loop3: detected capacity change from 0 to 128 [ 1376.995191][T17054] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1377.047774][T17054] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1377.378175][T17054] syz.3.2754 (pid 17054) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1377.831771][T16567] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1378.007167][T17065] loop3: detected capacity change from 0 to 128 [ 1378.089400][T17065] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1378.108062][T17065] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1378.480120][T17074] rdma_rxe: rxe_newlink: failed to add lo [ 1378.716124][T17074] netlink: 'syz.7.2758': attribute type 1 has an invalid length. [ 1378.724044][T17074] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2758'. [ 1379.158140][T16567] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1381.624092][T16694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1381.647897][T16694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1381.661169][T16694] bond0 (unregistering): Released all slaves [ 1382.404307][T16694] bond1 (unregistering): Released all slaves [ 1382.430436][T16927] chnl_net:caif_netlink_parms(): no params data found [ 1382.747986][T17108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1385.576990][T17131] loop3: detected capacity change from 0 to 512 [ 1385.720469][T16927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.752763][T16927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.782992][T16927] bridge_slave_0: entered allmulticast mode [ 1385.813157][T16927] bridge_slave_0: entered promiscuous mode [ 1386.363500][T17139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1387.042661][T16927] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.050106][T16927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.057879][T16927] bridge_slave_1: entered allmulticast mode [ 1387.066390][T16927] bridge_slave_1: entered promiscuous mode [ 1387.095403][T17131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1387.220428][T17131] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1387.289255][T17131] overlayfs: failed to resolve './bus': -2 [ 1387.418015][T17160] loop6: detected capacity change from 0 to 47 [ 1387.481283][T16567] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1387.599639][T16694] hsr_slave_0: left promiscuous mode [ 1387.644135][T16694] hsr_slave_1: left promiscuous mode [ 1387.652144][T16694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1387.666096][T16694] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1387.687423][T16694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1387.701677][T16694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1387.736538][T16694] veth1_macvtap: left promiscuous mode [ 1387.761820][T16694] veth0_macvtap: left promiscuous mode [ 1390.863738][T17192] Falling back ldisc for ptm0. [ 1391.290754][T17200] input: syz1 as /devices/virtual/input/input15 [ 1392.304455][T17198] loop1: detected capacity change from 0 to 32768 [ 1393.825923][T16694] team0 (unregistering): Port device team_slave_1 removed [ 1394.146356][T16694] team0 (unregistering): Port device team_slave_0 removed [ 1394.241073][T17223] loop6: detected capacity change from 0 to 512 [ 1394.288382][T17223] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1394.306858][T17223] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1394.356877][T17223] overlayfs: failed to resolve './bus': -2 [ 1394.406094][T13399] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1396.651362][T16927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1396.685894][T16927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1397.029558][T16927] team0: Port device team_slave_0 added [ 1397.279029][T16927] team0: Port device team_slave_1 added [ 1397.499681][T17241] Falling back ldisc for ptm0. [ 1398.088453][T17246] loop6: detected capacity change from 0 to 32768 [ 1398.755668][T17246] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0 [ 1398.797270][T17246] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 1398.797270][T17246] allowing incompatible features above 0.0: (unknown version) [ 1398.797270][T17246] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1398.842234][ C1] vkms_vblank_simulate: vblank timer overrun [ 1398.849027][T17246] bcachefs (loop6): initializing new filesystem [ 1398.866312][T17246] bcachefs (loop6): going read-write [ 1398.999328][T16927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1399.031045][T16927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1399.084496][ C1] vkms_vblank_simulate: vblank timer overrun [ 1399.103398][T17270] ODEBUG: object ffffc9000b5b7b90 is on stack ffffc9000b5b0000, but NOT annotated. [ 1399.105330][T17270] ------------[ cut here ]------------ [ 1399.105349][T17270] WARNING: CPU: 0 PID: 17270 at lib/debugobjects.c:655 __debug_object_init+0x2c9/0x3c0 [ 1399.105405][T17270] Modules linked in: [ 1399.107026][T17270] CPU: 0 UID: 0 PID: 17270 Comm: bch-copygc/loop Not tainted 6.15.0-rc7-next-20250526-syzkaller #0 PREEMPT(full) [ 1399.107050][T17270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1399.107069][T17270] RIP: 0010:__debug_object_init+0x2c9/0x3c0 [ 1399.107100][T17270] Code: a1 06 cc 41 ff c7 44 89 3d 64 d6 13 15 48 c7 c1 80 9b e2 8b 48 c7 c7 e0 9b e2 8b 84 c0 48 0f 45 f9 48 89 de e8 28 e9 60 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 3a 1c 00 00 8b 05 3c 59 c6 09 3b 05 3a [ 1399.107116][T17270] RSP: 0018:ffffc9000b5b76e0 EFLAGS: 00010046 [ 1399.107137][T17270] RAX: 0000000000000050 RBX: ffffc9000b5b7b90 RCX: 933e887702fe0200 [ 1399.107151][T17270] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 1399.107164][T17270] RBP: ffff8880693e0020 R08: ffffc9000b5b7407 R09: 1ffff920016b6e80 [ 1399.107178][T17270] R10: dffffc0000000000 R11: fffff520016b6e81 R12: ffff8880269f6948 [ 1399.107191][T17270] R13: ffff88802d500118 R14: dffffc0000000000 R15: 0000000000000001 [ 1399.107204][T17270] FS: 0000000000000000(0000) GS:ffff888125c56000(0000) knlGS:0000000000000000 [ 1399.107219][T17270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1399.107232][T17270] CR2: 0000200000002024 CR3: 0000000075174000 CR4: 00000000003526f0 [ 1399.107250][T17270] DR0: 0000000000000000 DR1: 0000000037427a78 DR2: 0000000000000000 [ 1399.107262][T17270] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1399.107274][T17270] Call Trace: [ 1399.107282][T17270] [ 1399.107297][T17270] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 1399.107330][T17270] rhashtable_init_noprof+0x7c0/0xbb0 [ 1399.107360][T17270] bch2_copygc_thread+0x116/0xdc0 [ 1399.107398][T17270] ? do_raw_spin_unlock+0x122/0x240 [ 1399.107432][T17270] ? __lock_acquire+0xab9/0xd20 [ 1399.107467][T17270] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 1399.107538][T17270] ? finish_task_switch+0x266/0x950 [ 1399.107563][T17270] ? lockdep_hardirqs_on+0x9c/0x150 [ 1399.107598][T17270] ? __pfx_rhashtable_jhash2+0x10/0x10 [ 1399.107657][T17270] ? __kthread_parkme+0x7b/0x200 [ 1399.107678][T17270] ? __kthread_parkme+0x1a1/0x200 [ 1399.107700][T17270] kthread+0x711/0x8a0 [ 1399.107724][T17270] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 1399.107749][T17270] ? __pfx_kthread+0x10/0x10 [ 1399.107773][T17270] ? _raw_spin_unlock_irq+0x23/0x50 [ 1399.107793][T17270] ? lockdep_hardirqs_on+0x9c/0x150 [ 1399.107814][T17270] ? __pfx_kthread+0x10/0x10 [ 1399.107838][T17270] ret_from_fork+0x3fc/0x770 [ 1399.107867][T17270] ? __pfx_ret_from_fork+0x10/0x10 [ 1399.107898][T17270] ? __switch_to_asm+0x39/0x70 [ 1399.107918][T17270] ? __switch_to_asm+0x33/0x70 [ 1399.107936][T17270] ? __pfx_kthread+0x10/0x10 [ 1399.107960][T17270] ret_from_fork_asm+0x1a/0x30 [ 1399.107997][T17270] [ 1399.108009][T17270] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1399.108025][T17270] CPU: 0 UID: 0 PID: 17270 Comm: bch-copygc/loop Not tainted 6.15.0-rc7-next-20250526-syzkaller #0 PREEMPT(full) [ 1399.108050][T17270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1399.108063][T17270] Call Trace: [ 1399.108072][T17270] [ 1399.108081][T17270] dump_stack_lvl+0x99/0x250 [ 1399.108102][T17270] ? __asan_memcpy+0x40/0x70 [ 1399.108133][T17270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1399.108153][T17270] ? __pfx__printk+0x10/0x10 [ 1399.108193][T17270] panic+0x2db/0x790 [ 1399.108230][T17270] ? __pfx_panic+0x10/0x10 [ 1399.108259][T17270] ? show_trace_log_lvl+0x4fb/0x550 [ 1399.108304][T17270] ? ret_from_fork_asm+0x1a/0x30 [ 1399.108333][T17270] __warn+0x31b/0x4b0 [ 1399.108363][T17270] ? __debug_object_init+0x2c9/0x3c0 [ 1399.108404][T17270] ? __debug_object_init+0x2c9/0x3c0 [ 1399.108436][T17270] report_bug+0x2be/0x4f0 [ 1399.108459][T17270] ? __debug_object_init+0x2c9/0x3c0 [ 1399.108491][T17270] ? __debug_object_init+0x2c9/0x3c0 [ 1399.108522][T17270] ? __debug_object_init+0x2cb/0x3c0 [ 1399.108552][T17270] handle_bug+0x84/0x160 [ 1399.108582][T17270] exc_invalid_op+0x1a/0x50 [ 1399.108610][T17270] asm_exc_invalid_op+0x1a/0x20 [ 1399.108630][T17270] RIP: 0010:__debug_object_init+0x2c9/0x3c0 [ 1399.108661][T17270] Code: a1 06 cc 41 ff c7 44 89 3d 64 d6 13 15 48 c7 c1 80 9b e2 8b 48 c7 c7 e0 9b e2 8b 84 c0 48 0f 45 f9 48 89 de e8 28 e9 60 fc 90 <0f> 0b 90 e9 c0 fe ff ff e8 3a 1c 00 00 8b 05 3c 59 c6 09 3b 05 3a [ 1399.108680][T17270] RSP: 0018:ffffc9000b5b76e0 EFLAGS: 00010046 [ 1399.108700][T17270] RAX: 0000000000000050 RBX: ffffc9000b5b7b90 RCX: 933e887702fe0200 [ 1399.108716][T17270] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 1399.108730][T17270] RBP: ffff8880693e0020 R08: ffffc9000b5b7407 R09: 1ffff920016b6e80 [ 1399.108746][T17270] R10: dffffc0000000000 R11: fffff520016b6e81 R12: ffff8880269f6948 [ 1399.108762][T17270] R13: ffff88802d500118 R14: dffffc0000000000 R15: 0000000000000001 [ 1399.108801][T17270] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 1399.108836][T17270] rhashtable_init_noprof+0x7c0/0xbb0 [ 1399.108870][T17270] bch2_copygc_thread+0x116/0xdc0 [ 1399.108901][T17270] ? do_raw_spin_unlock+0x122/0x240 [ 1399.108935][T17270] ? __lock_acquire+0xab9/0xd20 [ 1399.108973][T17270] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 1399.109053][T17270] ? finish_task_switch+0x266/0x950 [ 1399.109081][T17270] ? lockdep_hardirqs_on+0x9c/0x150 [ 1399.109125][T17270] ? __pfx_rhashtable_jhash2+0x10/0x10 [ 1399.109198][T17270] ? __kthread_parkme+0x7b/0x200 [ 1399.109220][T17270] ? __kthread_parkme+0x1a1/0x200 [ 1399.109249][T17270] kthread+0x711/0x8a0 [ 1399.109278][T17270] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 1399.109304][T17270] ? __pfx_kthread+0x10/0x10 [ 1399.109332][T17270] ? _raw_spin_unlock_irq+0x23/0x50 [ 1399.109354][T17270] ? lockdep_hardirqs_on+0x9c/0x150 [ 1399.109383][T17270] ? __pfx_kthread+0x10/0x10 [ 1399.109411][T17270] ret_from_fork+0x3fc/0x770 [ 1399.109442][T17270] ? __pfx_ret_from_fork+0x10/0x10 [ 1399.109477][T17270] ? __switch_to_asm+0x39/0x70 [ 1399.109496][T17270] ? __switch_to_asm+0x33/0x70 [ 1399.109517][T17270] ? __pfx_kthread+0x10/0x10 [ 1399.109542][T17270] ret_from_fork_asm+0x1a/0x30 [ 1399.109582][T17270] [ 1399.110040][T17270] Kernel Offset: disabled