last executing test programs: 1m26.856586895s ago: executing program 1 (id=643): mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./config\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffff7fa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf0c, &(0x7f0000000400)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) pause() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0xa) fchdir(r6) r7 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r7, 0x2007ffb) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) fcntl$setsig(r8, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write$binfmt_misc(r9, &(0x7f0000000540)="f64b", 0x2) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2290, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x80400) 1m25.443476245s ago: executing program 1 (id=647): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket(0x28, 0x5, 0xff) setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0xb645, 0x9, 0x10, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x2, 0x1000, 0x0, 0x81, 0x7, 0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd40, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) setuid(0xee00) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x404}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m25.384077846s ago: executing program 3 (id=648): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setns(0xc9, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0xa}, 0x1, 0x0, 0x0, 0x20804}, 0x44800) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0xfffffffffffffff7) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x52, 0xd8, 0xfffc, {0x20, 0x1}, {0x49, 0x2}, @cond=[{0x1ff, 0x0, 0x9, 0x7, 0x1, 0x71}, {0x8, 0xffff, 0xffe0, 0x100, 0xfff8, 0x37fd}]}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000180)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000380)={{r6, 0x4, 0xc621, 0x6, 0x1000, 0xa, 0x7fffffffffffffff, 0x5, 0x80000001, 0x80, 0x97e2, 0x7fffffffffffffff, 0x4, 0xfffffffffffff825, 0x7}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r7, &(0x7f0000001380)="9ec176fb0658ec9304c0235c6bee3e58091b5c907a6f43bf3c4f44ffde613d2b957384cee361c0b5769455c2de010cc83713266507ef792f0c338a368380c647e6f90b3c1324600fe0b8bf53db90213b73f0be51988f2504a3ca3ae3a1087128417c2e5984a853ecd4ad38c26168bb56f317ce3c75b5fbe5e9ec484a9f79c1c93a9e79f47f7a155c47e123b324aa41766c66b4ee02e748006d90ecdf052907b993d2e6267d58291c63089cd55a", 0xad) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000001000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01", 0x53}], 0x1) ioctl$TCXONC(r4, 0x540a, 0x1) ptrace$peekuser(0x3, r3, 0x7fff) ptrace$pokeuser(0x6, r2, 0x108, 0x4) ptrace$pokeuser(0x6, r2, 0x105, 0x7) socket$vsock_stream(0x28, 0x1, 0x0) 1m24.321143784s ago: executing program 3 (id=649): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) close(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x28, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffd, 0x6b}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x4000054) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x18}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) 1m22.386107002s ago: executing program 1 (id=650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20682) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000100)={0x5, 0x1, 'client0\x00', 0xffffffff80000004, "00000000ffffffe3", "71a19060009f0000000000005c4100a0200010040400", 0x800000, 0x40}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x15, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000084000000000000000000030018150000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000000)={'b', ' *:* ', 'rw\x00'}, 0x9) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x255fdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x2, 0xb}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e1}, 0x4890) sendmsg$nl_route(r7, &(0x7f0000000480)={&(0x7f0000000440), 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$packet(0x11, 0x3, 0x300) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r11, 0x0) ppoll(&(0x7f0000000640)=[{r11, 0x4490}], 0x1, &(0x7f0000000680), 0x0, 0x0) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) 1m20.623787831s ago: executing program 3 (id=651): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01005ffc0000000000000000000000000000020000000008"], 0x0, 0x1a}, 0x28) open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r3, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000100)=r6) 1m19.310153889s ago: executing program 1 (id=652): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000002c0)={0x200, 0x3, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x21031, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000000010000089000000e024c283", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32, @ANYBLOB], 0x50) socket$l2tp(0x2, 0x2, 0x73) socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000007400)={0x2020}, 0x2020) landlock_restrict_self(0xffffffffffffffff, 0x9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) r4 = open(0x0, 0x141080, 0x0) fcntl$notify(r4, 0x402, 0x8000003b) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) 1m15.522608265s ago: executing program 3 (id=655): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl(r1, 0x542e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_virtio(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000480), 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733d76697274696f2c15bb1e500c979d3dfc44c7d5"]) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vxcan0\x00'}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x8000, 0x102) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003b00", 0x30}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}]}, 0x8) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r5, 0x2b, 0x0, 0x1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000001c0)=[0x0]}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x5}, 0x94) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(JlF', @ANYRES16=0x0, @ANYBLOB="0100fffffffffcdbdf250c0000000800060099fdffff"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000840)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x15c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x2a}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2b7d9b6f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xad1}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000084}, 0x240000d4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000000280)={{0x0, 0x6, 0xfa, 0x0, 0x8, 0x7fff, 0x2, 0xfffffff8, 0xbb5, 0x7, 0x3, 0x7, 0x7710, 0xa, 0x6}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001240)={r7, 0x6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) 1m12.395801626s ago: executing program 1 (id=657): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setns(0xc9, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0xa}, 0x1, 0x0, 0x0, 0x20804}, 0x44800) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0xfffffffffffffff7) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x52, 0xd8, 0xfffc, {0x20, 0x1}, {0x49, 0x2}, @cond=[{0x1ff, 0x0, 0x9, 0x7, 0x1, 0x71}, {0x8, 0xffff, 0xffe0, 0x100, 0xfff8, 0x37fd}]}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000180)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000380)={{r6, 0x4, 0xc621, 0x6, 0x1000, 0xa, 0x7fffffffffffffff, 0x5, 0x80000001, 0x80, 0x97e2, 0x7fffffffffffffff, 0x4, 0xfffffffffffff825, 0x7}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r7, &(0x7f0000001380)="9ec176fb0658ec9304c0235c6bee3e58091b5c907a6f43bf3c4f44ffde613d2b957384cee361c0b5769455c2de010cc83713266507ef792f0c338a368380c647e6f90b3c1324600fe0b8bf53db90213b73f0be51988f2504a3ca3ae3a1087128417c2e5984a853ecd4ad38c26168bb56f317ce3c75b5fbe5e9ec484a9f79c1c93a9e79f47f7a155c47e123b324aa41766c66b4ee02e748006d90ecdf052907b993d2e6267d58291c63089cd55a", 0xad) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000001000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01", 0x53}], 0x1) ioctl$TCXONC(r4, 0x540a, 0x1) ptrace$peekuser(0x3, r3, 0x7fff) ptrace$pokeuser(0x6, r2, 0x108, 0x4) ptrace$pokeuser(0x6, r2, 0x105, 0x7) socket$vsock_stream(0x28, 0x1, 0x0) 1m11.725913394s ago: executing program 3 (id=658): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket(0x28, 0x5, 0xff) setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0xb645, 0x9, 0x10, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x1, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x2000000003, 0x2, 0x1000, 0x0, 0x81, 0x7, 0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd40, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) setuid(0xee00) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x5c, 0x2, 0x6, 0x404, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m8.664396416s ago: executing program 3 (id=661): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40) recvmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x100, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f00000003c0), &(0x7f0000000680)=""/133, 0x85, &(0x7f0000000640)={&(0x7f0000000540)={'sha512-neon\x00'}, &(0x7f0000000580)="17e0fbfa1cd0113367a30dc17913a6baa401add72c6476e9fa079fa52bb65d180f077f7eecdccb4727dfd20578aad9f306ea71b3203a9a691bdeda9149024ca4af6da29f18ecaa1bd99639a25f914583293891bc8d4bf383942854f25d1bc952a06f575f45eaf843984940ff20d3b0987a16ff81d16e3bc94f032333aba00aaf99537847d31af9ffc897acb0ef39426e19370a8c5cc7ba157bbcf744ccf78f5ecdb254c5a3c4ab1d", 0xa8}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) r9 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000409000/0x4000)=nil) r10 = shmat(r9, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r9, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmdt(r10) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 1m8.166035362s ago: executing program 1 (id=662): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40) recvmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x100, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f00000003c0), &(0x7f0000000680)=""/133, 0x85, &(0x7f0000000640)={&(0x7f0000000540)={'sha512-neon\x00'}, &(0x7f0000000580)="17e0fbfa1cd0113367a30dc17913a6baa401add72c6476e9fa079fa52bb65d180f077f7eecdccb4727dfd20578aad9f306ea71b3203a9a691bdeda9149024ca4af6da29f18ecaa1bd99639a25f914583293891bc8d4bf383942854f25d1bc952a06f575f45eaf843984940ff20d3b0987a16ff81d16e3bc94f032333aba00aaf99537847d31af9ffc897acb0ef39426e19370a8c5cc7ba157bbcf744ccf78f5ecdb254c5a3c4ab1d", 0xa8}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, 0xffffffffffffffff, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000409000/0x4000)=nil) r9 = shmat(r8, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r8, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmdt(r9) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 52.794316567s ago: executing program 32 (id=661): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40) recvmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x100, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f00000003c0), &(0x7f0000000680)=""/133, 0x85, &(0x7f0000000640)={&(0x7f0000000540)={'sha512-neon\x00'}, &(0x7f0000000580)="17e0fbfa1cd0113367a30dc17913a6baa401add72c6476e9fa079fa52bb65d180f077f7eecdccb4727dfd20578aad9f306ea71b3203a9a691bdeda9149024ca4af6da29f18ecaa1bd99639a25f914583293891bc8d4bf383942854f25d1bc952a06f575f45eaf843984940ff20d3b0987a16ff81d16e3bc94f032333aba00aaf99537847d31af9ffc897acb0ef39426e19370a8c5cc7ba157bbcf744ccf78f5ecdb254c5a3c4ab1d", 0xa8}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) r9 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000409000/0x4000)=nil) r10 = shmat(r9, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r9, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmdt(r10) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 51.906313419s ago: executing program 33 (id=662): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40) recvmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x100, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f00000003c0), &(0x7f0000000680)=""/133, 0x85, &(0x7f0000000640)={&(0x7f0000000540)={'sha512-neon\x00'}, &(0x7f0000000580)="17e0fbfa1cd0113367a30dc17913a6baa401add72c6476e9fa079fa52bb65d180f077f7eecdccb4727dfd20578aad9f306ea71b3203a9a691bdeda9149024ca4af6da29f18ecaa1bd99639a25f914583293891bc8d4bf383942854f25d1bc952a06f575f45eaf843984940ff20d3b0987a16ff81d16e3bc94f032333aba00aaf99537847d31af9ffc897acb0ef39426e19370a8c5cc7ba157bbcf744ccf78f5ecdb254c5a3c4ab1d", 0xa8}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, 0xffffffffffffffff, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) r8 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000409000/0x4000)=nil) r9 = shmat(r8, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r8, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmdt(r9) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 17.316252107s ago: executing program 2 (id=689): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$inet(0x2, 0x1, 0x100) listen(r4, 0x7fff) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="60000000420001000000000000000000030100000f0000003f00010000112233445566778899aabb86dd2c00001c00002c00011100000101010102538758fe6cbdf0357065ae44132403b1fd606412c3258e2b670000b20004000280040003"], 0x60}}, 0x0) syz_usb_connect$uac1(0x3, 0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010102000000203512148040000102030109026800030106400b0904000000010100000a240101000a00020102f203010000010104010e8109050109ef03010500"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) socket$rds(0x15, 0x5, 0x0) mlockall(0x2) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) io_setup(0x8, &(0x7f0000000000)) syz_usb_connect$uac3(0x1, 0x108, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0x2, 0x7, 0x8, 0x50, 0x8}, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="050f050010"], 0x4, [{0x0, 0x0}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4a, &(0x7f0000000400)=@string={0x4a, 0x3, "0d81b3ca30777ae71a3fe0bb876d36a627adf5464c58d84a843d30fd7ad066842931db9f90a7f9260f6a66e7fe46ead2f34102a57b7eae6bc7d8babda4a3d761ab75a5d4b72abc04"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3401}}]}) 16.73944153s ago: executing program 0 (id=690): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) clock_gettime(0xffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) capset(&(0x7f00000009c0)={0x20071026}, &(0x7f0000000a00)={0x2, 0x40000002, 0x8, 0x8, 0x1}) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='kyber', 0x5) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') fsopen(&(0x7f0000000040)='hpfs\x00', 0x1) chdir(0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) mmap$snddsp(&(0x7f0000556000/0x2000)=nil, 0x2000, 0x1000007, 0x12, r1, 0x3000) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 15.553402712s ago: executing program 2 (id=691): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40) recvmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x100, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f00000003c0), &(0x7f0000000680)=""/133, 0x85, &(0x7f0000000640)={&(0x7f0000000540)={'sha512-neon\x00'}, &(0x7f0000000580)="17e0fbfa1cd0113367a30dc17913a6baa401add72c6476e9fa079fa52bb65d180f077f7eecdccb4727dfd20578aad9f306ea71b3203a9a691bdeda9149024ca4af6da29f18ecaa1bd99639a25f914583293891bc8d4bf383942854f25d1bc952a06f575f45eaf843984940ff20d3b0987a16ff81d16e3bc94f032333aba00aaf99537847d31af9ffc897acb0ef39426e19370a8c5cc7ba157bbcf744ccf78f5ecdb254c5a3c4ab1d", 0xa8}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, 0xffffffffffffffff, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) r9 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000409000/0x4000)=nil) r10 = shmat(r9, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r9, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmdt(r10) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 15.237628225s ago: executing program 0 (id=692): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, 0x0, &(0x7f0000000300)) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) r4 = fsopen(&(0x7f0000000040)='fuse\x00', 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x70bd27, 0x20000000, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0) 11.904520362s ago: executing program 2 (id=693): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x28a1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @local}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r2, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x400}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008045}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_delrule={0x38, 0x21, 0x1, 0x70bd2c, 0x25dfdbff, {0xa, 0x10, 0x0, 0x4, 0xff, 0x0, 0x0, 0x0, 0x10016}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xd}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040040) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1fd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) getdents64(r4, &(0x7f0000000000)=""/134, 0x86) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0xa0, &(0x7f0000002140)=ANY=[]) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x8800, 0x0) preadv(r6, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/204, 0xcc}], 0x1, 0x46f3, 0x63) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) read$FUSE(r5, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r8, r9, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000061c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) keyctl$chown(0x4, 0x0, r10, r11) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0x0, 0x0) r13 = accept4(r12, 0x0, 0x0, 0x80800) sendmmsg$alg(r13, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/63, 0x3f}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x10001) 10.693270651s ago: executing program 2 (id=694): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='e:my_eprobe raw_syscalls/sys_enter\n', 0x23) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/eprobes/my_eprobe/filter\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='common_pid == 99999', 0x13) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1\n', 0x2) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/events/timer/hrtimer_expire_entry/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='1\n', 0x2) setitimer(0x0, &(0x7f00000002c0)={{0x0, 0x1}, {0x0, 0x1}}, 0x0) getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() getpid() 10.295587237s ago: executing program 0 (id=695): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01005ffc0000000000000000000000000000020000000008"], 0x0, 0x1a}, 0x28) open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r3, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000100)=r6) 9.709708616s ago: executing program 0 (id=696): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) clock_gettime(0xffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) capset(&(0x7f00000009c0)={0x20071026}, &(0x7f0000000a00)={0x2, 0x40000002, 0x8, 0x8, 0x1}) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='kyber', 0x5) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') fsopen(&(0x7f0000000040)='hpfs\x00', 0x1) chdir(0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) mmap$snddsp(&(0x7f0000556000/0x2000)=nil, 0x2000, 0x1000007, 0x12, r1, 0x3000) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 7.852884714s ago: executing program 2 (id=697): r0 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000001340)=0x3500, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) r6 = openat$ppp(0xffffff9c, &(0x7f0000000040), 0x40a680, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4014f50b, &(0x7f0000000380)={0x0, 0x0, 0x7}) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r10, &(0x7f0000000380)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7, 0xfd}, @raw32={[0x2, 0x66704740, 0x8000000]}}, {0x2, 0xff, 0x5, 0x83, @tick=0x1, {0xfd, 0x1}, {0x3}, @note={0x81, 0x0, 0xe}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xce, 0x2}, @connect={{0xf, 0x1}, {0x6, 0xb}}}, {0x0, 0x80, 0x0, 0x0, @tick=0xf791, {0xfb, 0x9}, {0x1b, 0x4}, @ext={0x0, 0x0}}], 0x70) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r11, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r8], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r7, 0x0, 0x0, 0x4004004, &(0x7f0000000180)={0xc9, 0x4, r11, 0x1, 0x2, 0x6, @broadcast}, 0x14) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @local, 0x0, 0x0, 0x8000000, 0x0, 0x6, 0x7fc}) io_uring_enter(r0, 0x2886, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000340)=0x90000) 5.645593053s ago: executing program 0 (id=698): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000180)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$inet(0x2, 0x1, 0x100) listen(r4, 0x7fff) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="60000000420001000000000000000000030100000f0000003f00010000112233445566778899aabb86dd2c00001c00002c00011100000101010102538758fe6cbdf0357065ae44132403b1fd606412c3258e2b670000b20004000280040003"], 0x60}}, 0x0) syz_usb_connect$uac1(0x3, 0x7a, &(0x7f0000000100)=ANY=[@ANYBLOB="12010102000000203512148040000102030109026800030106400b0904000000010100000a240101000a00020102f203010000010104010e8109050109ef03010500"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) socket$rds(0x15, 0x5, 0x0) mlockall(0x2) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) io_setup(0x8, &(0x7f0000000000)) syz_usb_connect$uac3(0x1, 0x108, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0x2, 0x7, 0x8, 0x50, 0x8}, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="050f050010"], 0x4, [{0x0, 0x0}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4a, &(0x7f0000000400)=@string={0x4a, 0x3, "0d81b3ca30777ae71a3fe0bb876d36a627adf5464c58d84a843d30fd7ad066842931db9f90a7f9260f6a66e7fe46ead2f34102a57b7eae6bc7d8babda4a3d761ab75a5d4b72abc04"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3401}}]}) 1.73807719s ago: executing program 2 (id=699): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x3, 0x3a3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00', {0x1, 0x200, 0x1, 0x1}, 0x1, [0xfa, 0x21, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401], [0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4db2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc]}, 0x45c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$bt_hci(r5, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) ioctl$UI_DEV_CREATE(r0, 0x5501) 0s ago: executing program 0 (id=700): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x180) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000880)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1000700000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd673c1eeda4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d06c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235eaa92143ce4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05be23dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6f89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f00000002c0)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000d80)=[{&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000480)=""/86, 0x56}, {&(0x7f0000000540)=""/186, 0xba}, {&(0x7f0000000740)=""/229, 0xe5}, {&(0x7f0000000c80)=""/152, 0x98}, {&(0x7f0000000d40)=""/43, 0x2b}], 0x6, &(0x7f0000000dc0)=""/253, 0xfd}, 0x40012101) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@uuid_on}, {@metacopy_on}, {@workdir={'workdir', 0x3d, './file0/file0'}}]}) chdir(&(0x7f0000000280)='./file1\x00') r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r4, &(0x7f0000000600)='dir .', 0x5) write(r3, &(0x7f0000000700)="ad177fe6", 0x4) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, &(0x7f0000000140)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r5, 0xc0106441, &(0x7f00000001c0)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x20004, r7}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, 0x0) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x29) ioctl$KVM_GET_STATS_FD_vm(r10, 0xaece) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x7, 0x7fff0026}]}) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f0000000000)) kernel console output (not intermixed with test programs): ad_volume_table: the layout volume was not found [ 61.195412][ T6053] UBIFS error (pid: 6053): cannot open "ubi0:testvol", error -19 [ 61.365811][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout [ 61.430739][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 61.504369][ T5742] Bluetooth: hci3: command 0x0405 tx timeout [ 61.504417][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 61.565797][ T6049] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 61.784066][ T6058] nvme nvme0: failed to connect socket: -111 [ 62.180906][ T50] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 62.360734][ T50] usb 6-1: Using ep0 maxpacket: 16 [ 62.660970][ T50] usb 6-1: unable to get BOS descriptor or descriptor too short [ 62.660996][ T50] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 62.661020][ T50] usb 6-1: no configurations [ 62.661026][ T50] usb 6-1: can't read configurations, error -22 [ 62.750353][ T6075] tipc: Started in network mode [ 62.750377][ T6075] tipc: Node identity 523a143dbe15, cluster identity 4711 [ 62.750531][ T6075] tipc: Enabled bearer , priority 0 [ 62.760490][ T6075] syzkaller0: entered promiscuous mode [ 62.760510][ T6075] syzkaller0: entered allmulticast mode [ 62.844198][ T1129] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 62.849038][ T1129] ata1.00: configured for UDMA/100 [ 62.969604][ T6069] xt_CT: No such helper "syz1" [ 63.288018][ T6084] bond0: Error: CAN devices cannot be enslaved [ 63.374072][ T6085] batman_adv: batadv0: Adding interface: syzkaller0 [ 63.374163][ T6085] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.374222][ T6085] batman_adv: batadv0: Interface activated: syzkaller0 [ 63.420792][ T5096] Bluetooth: hci0: command 0x0c1a tx timeout [ 63.430760][ T6089] evm: overlay not supported [ 63.501999][ T5096] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.541208][ T5954] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 63.582681][ T5742] Bluetooth: hci3: command 0x0405 tx timeout [ 63.582732][ T5096] Bluetooth: hci2: command 0x0c1a tx timeout [ 63.601388][ T6073] tipc: Resetting bearer [ 63.641589][ T6073] tipc: Disabling bearer [ 63.711011][ T5954] usb 5-1: Using ep0 maxpacket: 8 [ 63.711738][ T5954] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 63.712722][ T5954] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 63.712744][ T5954] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 63.712765][ T5954] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 63.712783][ T5954] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.712815][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.941496][ T5954] usb 5-1: GET_CAPABILITIES returned 0 [ 63.941543][ T5954] usbtmc 5-1:16.0: can't read capabilities [ 64.124436][ T6080] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 64.147991][ T6084] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 64.148133][ T6084] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 64.150878][ T6080] batman_adv: batadv0: Removing interface: syzkaller0 [ 64.166005][ T5954] usb 5-1: USB disconnect, device number 2 [ 64.251642][ T6097] random: crng reseeded on system resumption [ 64.644174][ T6107] process 'syz.3.47' launched './file2' with NULL argv: empty string added [ 64.675909][ T6107] 9p: Bad value for 'wfdno' [ 64.687503][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 64.687552][ T43] audit: type=1400 audit(1789393017.824:32): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=6103 comm="syz.3.47" [ 65.353739][ T6117] ======================================================= [ 65.353739][ T6117] WARNING: The mand mount option has been deprecated and [ 65.353739][ T6117] and is ignored by this kernel. Remove the mand [ 65.353739][ T6117] option from the mount to silence this warning. [ 65.353739][ T6117] ======================================================= [ 65.385471][ T6117] netlink: 'syz.2.49': attribute type 13 has an invalid length. [ 65.385524][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'. [ 65.410538][ T6117] overlay: Bad value for 'xino' [ 65.448299][ T6117] random: crng reseeded on system resumption [ 65.513905][ T5096] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.580787][ T5096] Bluetooth: hci1: command 0x0c1a tx timeout [ 65.660919][ T5096] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.660955][ T5096] Bluetooth: hci3: command 0x0405 tx timeout [ 65.882230][ T6122] FAULT_INJECTION: forcing a failure. [ 65.882230][ T6122] name failslab, interval 1, probability 0, space 0, times 1 [ 65.882261][ T6122] CPU: 0 UID: 0 PID: 6122 Comm: syz.0.51 Not tainted syzkaller #0 PREEMPT(full) [ 65.882283][ T6122] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.882296][ T6122] Call Trace: [ 65.882303][ T6122] [ 65.882311][ T6122] dump_stack_lvl+0x100/0x190 [ 65.882343][ T6122] should_fail_ex.cold+0x5/0xa [ 65.882368][ T6122] should_failslab+0xc2/0x120 [ 65.882396][ T6122] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 65.882421][ T6122] ? __d_alloc+0x35/0xa50 [ 65.882458][ T6122] __d_alloc+0x35/0xa50 [ 65.882482][ T6122] ? __lock_acquire+0x5c0/0x1f40 [ 65.882514][ T6122] d_alloc_parallel+0x105/0x14c0 [ 65.882542][ T6122] ? lock_acquire+0x1d1/0x380 [ 65.882568][ T6122] ? lookup_slow+0x42/0x70 [ 65.882598][ T6122] ? __pfx_d_alloc_parallel+0x10/0x10 [ 65.882617][ T6122] ? __pfx___might_resched+0x10/0x10 [ 65.882643][ T6122] ? find_held_lock+0x2b/0x80 [ 65.882663][ T6122] ? __d_lookup+0x25c/0x4a0 [ 65.882685][ T6122] ? down_read+0x13b/0x4c0 [ 65.882705][ T6122] ? __pfx_down_read+0x10/0x10 [ 65.882727][ T6122] __lookup_slow+0x98/0x320 [ 65.882757][ T6122] lookup_slow+0x50/0x70 [ 65.882784][ T6122] lookup_noperm_positive_unlocked+0xd5/0x110 [ 65.882810][ T6122] debugfs_lookup+0xc7/0x150 [ 65.882837][ T6122] kvm_dev_ioctl+0xfdc/0x1b50 [ 65.882867][ T6122] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 65.882898][ T6122] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 65.882920][ T6122] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 65.882953][ T6122] __do_fast_syscall_32+0x13a/0x8b0 [ 65.882986][ T6122] do_fast_syscall_32+0x32/0x70 [ 65.883031][ T6122] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 65.883059][ T6122] RIP: 0023:0xf6feefec [ 65.883083][ T6122] Code: Unable to access opcode bytes at 0xf6feefc2. [ 65.883093][ T6122] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 65.883114][ T6122] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae01 [ 65.883128][ T6122] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 65.883140][ T6122] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 65.883152][ T6122] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 65.883164][ T6122] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.883189][ T6122] [ 65.943931][ T6122] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 66.138457][ T6125] infiniband syz1: set down [ 66.138471][ T6125] infiniband syz1: added syz_tun [ 66.148602][ T6125] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 66.148624][ T6125] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 66.148646][ T6125] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 66.166310][ T6125] RDS/IB: syz1: added [ 66.166465][ T6125] smc: adding ib device syz1 with port count 1 [ 66.166508][ T6125] smc: ib device syz1 port 1 has no pnetid [ 67.346378][ T6164] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 67.420900][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 67.477117][ T6162] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 67.477145][ T6162] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.478598][ T6162] vhci_hcd vhci_hcd.0: Device attached [ 67.486081][ T6170] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 67.491818][ T6172] vhci_hcd: connection closed [ 67.500206][ T12] vhci_hcd vhci_hcd.1: stop threads [ 67.500233][ T12] vhci_hcd vhci_hcd.1: release socket [ 67.500252][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 67.679925][ T6183] tipc: Started in network mode [ 67.679941][ T6183] tipc: Node identity , cluster identity 4711 [ 67.679954][ T6183] tipc: Failed to obtain node identity [ 67.679987][ T6183] tipc: Enabling of bearer rejected, failed to enable media [ 67.770745][ T1036] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 67.941489][ T1036] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 67.942506][ T1036] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 67.942528][ T1036] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 67.942547][ T1036] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 67.982581][ T1036] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.982598][ T1036] usb 6-1: Product: syz [ 67.982605][ T1036] usb 6-1: Manufacturer: syz [ 67.982613][ T1036] usb 6-1: SerialNumber: syz [ 68.067361][ T1036] usb 6-1: config 0 descriptor?? [ 68.069957][ T6162] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 68.228386][ T6196] xt_connbytes: Forcing CT accounting to be enabled [ 68.246845][ T6196] xt_TPROXY: Can be used only with -p tcp or -p udp [ 68.551402][ T30] libceph: connect (1)[c::]:6789 error -101 [ 68.560130][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 68.581668][ T30] libceph: connect (1)[c::]:6789 error -101 [ 68.582782][ T30] libceph: mon0 (1)[c::]:6789 connect error [ 68.584646][ T6199] ceph: No mds server is up or the cluster is laggy [ 68.882749][ T43] audit: type=1800 audit(1789393022.044:33): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.61" name="file1" dev="overlay" ino=124 res=0 errno=0 [ 68.891832][ T1036] rc_core: IR keymap rc-streamzap not found [ 68.891842][ T1036] Registered IR keymap rc-empty [ 68.893026][ T1036] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 68.893999][ T1036] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input6 [ 69.104662][ T6213] 9p: Bad value for 'rfdno' [ 69.275925][ T6213] Console: switching to colour dummy device 80x25 [ 69.521340][ T6211] zswap: compressor z not available [ 69.682036][ T9] usb 6-1: USB disconnect, device number 5 [ 69.799541][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.63'. [ 70.226596][ T6225] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 70.372611][ T6227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.65'. [ 70.404047][ T6229] input: syz0 as /devices/virtual/input/input7 [ 70.539172][ T6231] netlink: 'syz.2.66': attribute type 1 has an invalid length. [ 70.885558][ T6234] random: crng reseeded on system resumption [ 71.023664][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.023720][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.059792][ T6241] xt_HMARK: proto mask must be zero with L3 mode [ 71.522294][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 71.522400][ T6248] bridge_slave_1: left allmulticast mode [ 71.522413][ T6248] bridge_slave_1: left promiscuous mode [ 71.522534][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.524071][ T6248] bridge_slave_0: left allmulticast mode [ 71.524084][ T6248] bridge_slave_0: left promiscuous mode [ 71.524178][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.773386][ T6254] fuse: Bad value for 'user_id' [ 71.773404][ T6254] fuse: Bad value for 'user_id' [ 71.774465][ T6254] Invalid source name [ 71.774477][ T6254] UBIFS error (pid: 6254): cannot open "./file0", error -22 [ 71.854273][ T6254] XFS (nullb0): Invalid superblock magic number [ 71.985868][ T6264] tipc: Enabled bearer , priority 0 [ 72.207037][ T6268] netlink: 72 bytes leftover after parsing attributes in process `syz.2.72'. [ 74.790413][ T5954] tipc: Node number set to 3962508349 [ 74.808096][ T6263] tipc: Disabling bearer [ 74.901937][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 74.904504][ T6287] hsr_slave_0: left promiscuous mode [ 74.908759][ T6287] hsr_slave_1: left promiscuous mode [ 75.014305][ T6292] binder: 6285:6292 ioctl 8953 80000600 returned -22 [ 75.015448][ T43] audit: type=1326 audit(1789393028.174:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.1.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 75.016556][ T43] audit: type=1326 audit(1789393028.174:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.1.77" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf703efec code=0x7ffc0000 [ 75.016580][ T43] audit: type=1326 audit(1789393028.174:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.1.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 75.016599][ T43] audit: type=1326 audit(1789393028.174:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.1.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 75.016950][ T43] audit: type=1326 audit(1789393028.174:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.1.77" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf703efec code=0x7ffc0000 [ 75.016970][ T43] audit: type=1326 audit(1789393028.174:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.1.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 75.016989][ T43] audit: type=1326 audit(1789393028.174:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.1.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 75.017275][ T43] audit: type=1326 audit(1789393028.174:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.1.77" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703efec code=0x7ffc0000 [ 75.017619][ T43] audit: type=1326 audit(1789393028.174:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.1.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 75.017768][ T43] audit: type=1326 audit(1789393028.174:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.1.77" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703efec code=0x7ffc0000 [ 75.092041][ T6291] FAULT_INJECTION: forcing a failure. [ 75.092041][ T6291] name failslab, interval 1, probability 0, space 0, times 0 [ 75.092070][ T6291] CPU: 3 UID: 0 PID: 6291 Comm: syz.0.79 Not tainted syzkaller #0 PREEMPT(full) [ 75.092107][ T6291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.092118][ T6291] Call Trace: [ 75.092124][ T6291] [ 75.092131][ T6291] dump_stack_lvl+0x100/0x190 [ 75.092159][ T6291] should_fail_ex.cold+0x5/0xa [ 75.092182][ T6291] should_failslab+0xc2/0x120 [ 75.092207][ T6291] __kmalloc_cache_noprof+0x91/0x6d0 [ 75.092238][ T6291] ? syslog_print_all+0xed/0x3f0 [ 75.092268][ T6291] syslog_print_all+0xed/0x3f0 [ 75.092291][ T6291] ? futex_wait+0x11e/0x370 [ 75.092314][ T6291] ? __pfx_futex_wait+0x10/0x10 [ 75.092336][ T6291] ? __pfx_syslog_print_all+0x10/0x10 [ 75.092375][ T6291] ? bpf_lsm_capable+0x9/0x10 [ 75.092401][ T6291] ? security_capable+0x80/0x260 [ 75.092426][ T6291] do_syslog+0x350/0x6d0 [ 75.092454][ T6291] ? __pfx_do_syslog+0x10/0x10 [ 75.092498][ T6291] __ia32_sys_syslog+0x73/0xb0 [ 75.092513][ T6291] ? lockdep_hardirqs_on+0x7d/0x110 [ 75.092540][ T6291] __do_fast_syscall_32+0x13a/0x8b0 [ 75.092567][ T6291] ? lockdep_hardirqs_on+0x7d/0x110 [ 75.092595][ T6291] do_fast_syscall_32+0x32/0x70 [ 75.092640][ T6291] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 75.092663][ T6291] RIP: 0023:0xf6feefec [ 75.092682][ T6291] Code: Unable to access opcode bytes at 0xf6feefc2. [ 75.092690][ T6291] RSP: 002b:00000000f53dd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000067 [ 75.092709][ T6291] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 75.092721][ T6291] RDX: 0000000000000063 RSI: 0000000000000000 RDI: 0000000000000000 [ 75.092732][ T6291] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 75.092743][ T6291] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 75.092754][ T6291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 75.092779][ T6291] [ 75.161658][ T5954] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 75.285735][ T25] hid-generic 0005:046E:0007.0002: unknown main item tag 0x1 [ 75.299271][ T25] hid-generic 0005:046E:0007.0002: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 75.311478][ T5954] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 75.312566][ T5954] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.314038][ T5954] usb 8-1: config 0 descriptor?? [ 75.398178][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'. [ 75.575818][ T6286] batman_adv: batadv0: Adding interface: macvtap1 [ 75.575877][ T6286] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.575892][ T6286] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 75.658233][ T6286] batman_adv: batadv0: Removing interface: macvtap1 [ 75.900828][ T5096] Bluetooth: hci3: command 0x0405 tx timeout [ 75.910596][ T6308] Zero length message leads to an empty skb [ 75.915951][ T6306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.82'. [ 75.918243][ T5954] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 75.919380][ T5954] [drm:udl_init] *ERROR* Selecting channel failed [ 75.960430][ T5954] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1 [ 75.960445][ T5954] [drm] Initialized udl on minor 1 [ 75.963816][ T5954] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 75.968231][ T5954] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 75.973769][ T5954] usb 8-1: USB disconnect, device number 2 [ 76.155258][ T855] cfg80211: failed to load regulatory.db [ 76.590501][ T1168] IPVS: starting estimator thread 0... [ 76.680964][ T6323] IPVS: using max 25 ests per chain, 60000 per kthread [ 76.870973][ T6313] syz.2.83 (6313) used greatest stack depth: 16696 bytes left [ 76.979034][ T6328] tipc: Started in network mode [ 76.979082][ T6328] tipc: Node identity 3a07f9161936, cluster identity 4711 [ 76.979669][ T6328] tipc: Enabled bearer , priority 0 [ 77.776593][ T6327] tipc: Disabling bearer [ 77.783536][ T5954] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 78.000062][ T5954] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 78.001672][ T5954] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 78.001695][ T5954] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 78.001713][ T5954] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.003897][ T5954] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.003916][ T5954] usb 8-1: Product: syz [ 78.003928][ T5954] usb 8-1: Manufacturer: syz [ 78.003939][ T5954] usb 8-1: SerialNumber: syz [ 78.013103][ T5954] hub 8-1:1.0: bad descriptor, ignoring hub [ 78.013120][ T5954] hub 8-1:1.0: probe with driver hub failed with error -5 [ 78.373706][ T5954] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 78.411995][ T6349] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 78.412268][ T6349] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.412451][ T6349] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 78.414718][ T6349] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 78.568576][ T6353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.568920][ T6353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.624301][ T6355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.624501][ T6355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.835460][ T6361] tipc: Started in network mode [ 78.835484][ T6361] tipc: Node identity 9e001c073b1a, cluster identity 4711 [ 78.835724][ T6361] tipc: Enabled bearer , priority 0 [ 78.836168][ T6363] IPVS: sh: FWM 3 0x00000003 - no destination available [ 78.836766][ T6361] syzkaller0: entered promiscuous mode [ 78.836783][ T6361] syzkaller0: entered allmulticast mode [ 79.409322][ T6359] tipc: Resetting bearer [ 79.418439][ T6359] tipc: Disabling bearer [ 79.690765][ T5954] usb 8-1: USB disconnect, device number 3 [ 79.708192][ T5954] usblp0: removed [ 80.284901][ T6378] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 80.284922][ T6378] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 80.284992][ T6378] vhci_hcd vhci_hcd.0: Device attached [ 80.460963][ T5742] Bluetooth: hci3: command 0x0405 tx timeout [ 80.460994][ T5742] Bluetooth: hci2: command 0x0c1a tx timeout [ 80.461007][ T5742] Bluetooth: hci1: command 0x0c1a tx timeout [ 80.461021][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.545819][ T6381] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 80.561147][ T855] usb 40-1: SetAddress Request (2) to port 0 [ 80.561180][ T855] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 80.924304][ T6382] vhci_hcd: connection reset by peer [ 80.925788][ T13] vhci_hcd vhci_hcd.1: stop threads [ 80.925811][ T13] vhci_hcd vhci_hcd.1: release socket [ 80.926546][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 82.228358][ T6403] tipc: Enabled bearer , priority 0 [ 82.342721][ T6400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.342916][ T6400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.593564][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'. [ 82.932961][ T6415] xt_connbytes: Forcing CT accounting to be enabled [ 82.933172][ T6415] Cannot find del_set index 0 as target [ 82.970619][ T5836] libceph: connect (1)[c::]:6789 error -101 [ 82.972057][ T5836] libceph: mon0 (1)[c::]:6789 connect error [ 83.020265][ T6415] ceph: No mds server is up or the cluster is laggy [ 83.041142][ T1164] IPVS: starting estimator thread 0... [ 83.113225][ T6421] blktrace: Concurrent blktraces are not allowed on sg0 [ 83.130904][ T6420] IPVS: using max 43 ests per chain, 103200 per kthread [ 83.152255][ T6402] tipc: Disabling bearer [ 84.223516][ T6430] tipc: Enabled bearer , priority 0 [ 84.224361][ T6430] syzkaller0: entered promiscuous mode [ 84.224379][ T6430] syzkaller0: entered allmulticast mode [ 84.380327][ T6429] tipc: Resetting bearer [ 84.396934][ T6429] tipc: Disabling bearer [ 84.614597][ T6437] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.713614][ T6437] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 84.760884][ T1767] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 84.931914][ T1767] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 84.935295][ T1767] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 84.935379][ T1767] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 84.935458][ T1767] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 85.019252][ T1767] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.019299][ T1767] usb 7-1: Product: syz [ 85.019312][ T1767] usb 7-1: Manufacturer: syz [ 85.019324][ T1767] usb 7-1: SerialNumber: syz [ 85.085904][ T1767] hub 7-1:1.0: bad descriptor, ignoring hub [ 85.085928][ T1767] hub 7-1:1.0: probe with driver hub failed with error -5 [ 85.167139][ T6448] tmpfs: Unknown parameter 'nr_inodesD5' [ 85.302387][ T1767] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 85.340954][ T5742] Bluetooth: hci3: command 0x0405 tx timeout [ 85.833287][ T855] usb 40-1: device descriptor read/8, error -110 [ 85.911477][ T6454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.911833][ T6454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.814984][ T6465] openvswitch: netlink: nsh attribute has 16 unknown bytes. [ 86.836229][ T6465] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 86.849415][ T6465] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 86.849915][ T6465] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 86.850637][ T6465] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 86.856341][ T6465] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 87.024016][ T6465] pci 0000:00:01.0: Adding to iommu group 1 [ 87.066086][ T855] usb usb40-port1: attempt power cycle [ 87.106615][ T6465] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 87.106635][ T6465] pci 0000:00:01.0: vgaarb: bridge control possible [ 87.106647][ T6465] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 87.136270][ T6465] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 87.147817][ T6465] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 87.147961][ T6465] pci 0000:00:05.0: BAR 1 [mem 0xfeaf6000-0xfeaf6fff] [ 87.149469][ T6465] pci 0000:00:05.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref] [ 87.266272][ T6465] pci 0000:00:05.0: Adding to iommu group 5 [ 87.316679][ T6465] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 87.320478][ T6465] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 87.325242][ T6465] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 87.326872][ T6465] pci 0000:00:05.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 87.328660][ T6465] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f]: assigned [ 87.360258][ T6465] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 87.400876][ T6464] capability: warning: `syz.1.114' uses deprecated v2 capabilities in a way that may be insecure [ 87.449622][ T6465] [drm] Found bochs VGA, ID 0xb0c5. [ 87.449641][ T6465] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 87.523436][ T5137] usb 7-1: USB disconnect, device number 2 [ 87.534063][ T5137] usblp0: removed [ 87.618965][ T6464] 9pnet_virtio: no channels available for device syz [ 87.641876][ T855] usb usb40-port1: unable to enumerate USB device [ 87.655399][ T6465] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 87.919630][ T6465] Console: switching to colour frame buffer device 160x50 [ 87.981005][ T6465] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 88.602206][ T6474] input: syz0 as /devices/virtual/input/input9 [ 88.744304][ T6479] netlink: 'syz.3.120': attribute type 1 has an invalid length. [ 88.764655][ T6479] bond1: entered promiscuous mode [ 88.764986][ T6479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.821851][ T6474] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.822156][ T6474] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 88.822175][ T6474] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 88.825417][ T6474] bond1: (slave xfrm1): making interface the new active one [ 88.825436][ T6474] xfrm1: entered promiscuous mode [ 88.837733][ T6474] xfrm1: left promiscuous mode [ 89.058502][ T6482] blktrace: Concurrent blktraces are not allowed on sg0 [ 89.486270][ T6489] Bluetooth: MGMT ver 1.23 [ 89.519588][ T6489] gadgetfs: bound to dummy_udc driver [ 89.739823][ T6488] gadgetfs: suspended from state 2 [ 89.771037][ T30] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.818226][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.818536][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.832472][ T6495] loop9: detected capacity change from 0 to 524287998 [ 89.884094][ T6492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.887199][ T6492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.020903][ T6387] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.020944][ T6387] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.020974][ T6387] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.021004][ T6387] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.105496][ T6497] xt_connbytes: Forcing CT accounting to be enabled [ 90.105514][ T6497] xt_TPROXY: Can be used only with -p tcp or -p udp [ 90.138610][ T1767] libceph: connect (1)[c::]:6789 error -101 [ 90.138890][ T1767] libceph: mon0 (1)[c::]:6789 connect error [ 90.139807][ T1767] libceph: connect (1)[c::]:6789 error -101 [ 90.140104][ T1767] libceph: mon0 (1)[c::]:6789 connect error [ 90.189562][ T6497] ceph: No mds server is up or the cluster is laggy [ 90.449367][ T6504] IPVS: sh: FWM 3 0x00000003 - no destination available [ 90.451497][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 91.638665][ T6522] 9pnet_virtio: no channels available for device syz [ 92.948127][ T6528] netlink: 'syz.0.132': attribute type 1 has an invalid length. [ 92.948146][ T6528] netlink: 84 bytes leftover after parsing attributes in process `syz.0.132'. [ 92.948160][ T6528] netlink: 'syz.0.132': attribute type 2 has an invalid length. [ 92.948171][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.132'. [ 93.023394][ T6531] null_blk: my_zoned_dev: using native zone append [ 93.045506][ T6531] null_blk: disk my_zoned_dev created [ 93.273034][ T6546] bond0: (slave dummy0): Releasing backup interface [ 93.274475][ T6546] bridge_slave_0: left allmulticast mode [ 93.274488][ T6546] bridge_slave_0: left promiscuous mode [ 93.274584][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.276151][ T6546] bridge_slave_1: left allmulticast mode [ 93.276162][ T6546] bridge_slave_1: left promiscuous mode [ 93.277974][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.294189][ T6546] bond0: (slave bond_slave_0): Releasing backup interface [ 93.299785][ T6546] bond0: (slave bond_slave_1): Releasing backup interface [ 93.304481][ T6546] team0: Port device team_slave_0 removed [ 93.305363][ T6546] team0: Port device team_slave_1 removed [ 93.305508][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.305900][ T6546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.306316][ T6546] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 93.467194][ T6552] kernel profiling enabled (shift: 7) [ 93.671240][ T6562] team0: Mode changed to "loadbalance" [ 93.721901][ T6557] loop9: detected capacity change from 0 to 524287998 [ 94.722308][ T6552] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 94.789749][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.790026][ T6555] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.050018][ T6576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.137'. [ 95.050118][ T6576] openvswitch: netlink: Flow key attr not present in new flow. [ 95.087092][ T6555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.125909][ T6555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.621298][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.621347][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.621730][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.621864][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.030972][ T6583] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 96.266898][ T6588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.140'. [ 96.297911][ T6597] netlink: 72 bytes leftover after parsing attributes in process `syz.1.139'. [ 96.840784][ T1036] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 96.947913][ T6612] i2c i2c-1: dtv_property_process_set: SET cmd 0x20203a64 undefined [ 97.011334][ T1036] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 97.012231][ T1036] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.012245][ T1036] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.012256][ T1036] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.013933][ T1036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.013951][ T1036] usb 5-1: Product: syz [ 97.013958][ T1036] usb 5-1: Manufacturer: syz [ 97.013965][ T1036] usb 5-1: SerialNumber: syz [ 97.020968][ T1036] hub 5-1:1.0: bad descriptor, ignoring hub [ 97.020981][ T1036] hub 5-1:1.0: probe with driver hub failed with error -5 [ 97.227186][ T1036] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 97.480144][ T6613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.480510][ T6613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.601068][ T9] usb 5-1: USB disconnect, device number 4 [ 99.627714][ T9] usblp0: removed [ 99.719790][ T6625] netlink: 88 bytes leftover after parsing attributes in process `syz.2.147'. [ 99.940801][ T30] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 100.100727][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 100.101184][ T30] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 100.101982][ T30] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 100.101994][ T30] usb 6-1: config 0 has no interface number 0 [ 100.102011][ T30] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 100.102022][ T30] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 100.102033][ T30] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.102045][ T30] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 100.102064][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.103244][ T30] usb 6-1: config 0 descriptor?? [ 100.108447][ T30] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 100.408665][ T6628] blktrace: Concurrent blktraces are not allowed on sg0 [ 101.213941][ T6631] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 101.213955][ T6631] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 101.233938][ T6641] loop9: detected capacity change from 0 to 524287998 [ 101.251838][ T6631] netlink: Conntrack attr has 8 unknown bytes [ 101.251865][ T6631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.387301][ T855] usb 6-1: USB disconnect, device number 6 [ 101.390257][ T855] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 101.875985][ T6653] netlink: 'syz.3.152': attribute type 10 has an invalid length. [ 102.213762][ T6656] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 102.641747][ T6660] netlink: 16 bytes leftover after parsing attributes in process `syz.3.154'. [ 104.499363][ T6672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.499561][ T6672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.541250][ T6668] Process accounting resumed [ 105.029527][ T6684] blktrace: Concurrent blktraces are not allowed on sg0 [ 105.092370][ T6685] loop9: detected capacity change from 0 to 524287998 [ 105.512304][ T6690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.163'. [ 105.850784][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 105.969090][ T6700] netlink: 'syz.1.166': attribute type 5 has an invalid length. [ 106.141217][ T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 106.141652][ T9] usb 7-1: config 0 has no interfaces? [ 106.143422][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.143439][ T9] usb 7-1: Product: syz [ 106.143446][ T9] usb 7-1: Manufacturer: syz [ 106.143453][ T9] usb 7-1: SerialNumber: syz [ 106.144527][ T9] usb 7-1: config 0 descriptor?? [ 106.306991][ T6703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.307244][ T6703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.361975][ T6705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.362218][ T6705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.423368][ T6708] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 106.807935][ T6714] netlink: 48 bytes leftover after parsing attributes in process `syz.0.170'. [ 107.492949][ T6723] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 107.531330][ T6723] serio: Serial port ptm0 [ 107.578296][ T6725] netlink: 48 bytes leftover after parsing attributes in process `syz.3.173'. [ 107.866756][ T6727] loop9: detected capacity change from 0 to 524287998 [ 108.109900][ T6730] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 108.462843][ T6733] 9pnet_virtio: no channels available for device syz [ 108.776603][ T1036] usb 7-1: USB disconnect, device number 3 [ 109.164130][ T1036] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 109.164155][ T1036] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 109.164172][ T1036] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 109.164188][ T1036] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 109.164204][ T1036] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 109.164222][ T1036] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 109.164242][ T1036] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 109.164268][ T1036] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 109.287249][ T1036] hid-generic 0000:0000:0001.0003: hidraw1: HID v0.10 Device [syz0] on syz1 [ 109.416237][ T6752] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 109.473678][ T6753] serio: Serial port ptm0 [ 109.524181][ T6754] netlink: 48 bytes leftover after parsing attributes in process `syz.0.181'. [ 109.887961][ T6736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.888154][ T6736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.070748][ T1036] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 110.445111][ T1036] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 110.555414][ T1036] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 110.555430][ T1036] usb 7-1: Product: syz [ 110.555437][ T1036] usb 7-1: Manufacturer: syz [ 110.555445][ T1036] usb 7-1: SerialNumber: syz [ 110.557215][ T1036] usb 7-1: config 0 descriptor?? [ 110.560862][ T1036] ch341 7-1:0.0: ch341-uart converter detected [ 110.628251][ T6778] netlink: 'syz.3.185': attribute type 1 has an invalid length. [ 110.863569][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 110.865263][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 110.865810][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 110.866907][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 110.867212][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 110.870102][ T6783] 9pnet_virtio: no channels available for device syz [ 111.389301][ T1036] usb 7-1: failed to receive control message: -71 [ 111.389329][ T1036] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 111.393640][ T1036] usb 7-1: USB disconnect, device number 4 [ 111.405003][ T1036] ch341 7-1:0.0: device disconnected [ 111.928123][ T6785] overlayfs: overlapping lowerdir path [ 111.958059][ T6788] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(0) [ 111.958076][ T6788] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.958132][ T6788] vhci_hcd vhci_hcd.0: Device attached [ 112.155161][ T6791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.155527][ T6791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.190788][ T1036] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 112.484547][ T6803] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 112.583709][ T6792] vhci_hcd: connection reset by peer [ 112.586756][ T13] vhci_hcd vhci_hcd.0: stop threads [ 112.586774][ T13] vhci_hcd vhci_hcd.0: release socket [ 112.586831][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 112.637030][ T6805] netlink: 48 bytes leftover after parsing attributes in process `syz.1.191'. [ 112.961743][ T6809] netlink: 36 bytes leftover after parsing attributes in process `syz.3.193'. [ 113.003791][ T6809] openvswitch: netlink: Unknown key attributes 20 [ 113.110298][ T6807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.110509][ T6807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.157056][ T6812] serio: Serial port ptm0 [ 113.208246][ T6816] netlink: 48 bytes leftover after parsing attributes in process `syz.1.194'. [ 113.637192][ T6825] lo speed is unknown, defaulting to 1000 [ 113.637249][ T6825] lo speed is unknown, defaulting to 1000 [ 113.658083][ T6825] lo speed is unknown, defaulting to 1000 [ 113.672015][ T6825] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 113.672083][ T6825] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 113.672153][ T6825] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 113.763763][ T6825] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 114.351347][ T6825] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 114.420318][ T6825] lo speed is unknown, defaulting to 1000 [ 114.425221][ T6825] lo speed is unknown, defaulting to 1000 [ 114.427309][ T6825] lo speed is unknown, defaulting to 1000 [ 114.429672][ T6825] lo speed is unknown, defaulting to 1000 [ 115.140748][ T30] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 115.290745][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 115.294295][ T30] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 115.297727][ T30] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.297740][ T30] usb 7-1: config 0 has no interfaces? [ 115.339177][ T30] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 115.339201][ T30] usb 7-1: Product: syz [ 115.339265][ T30] usb 7-1: Manufacturer: syz [ 115.339312][ T30] usb 7-1: SerialNumber: syz [ 115.473554][ T30] usb 7-1: config 0 descriptor?? [ 115.645892][ T6849] syz_tun: entered allmulticast mode [ 115.675037][ T6847] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 115.780998][ T6847] serio: Serial port ptm0 [ 115.833108][ T6856] netlink: 48 bytes leftover after parsing attributes in process `syz.3.203'. [ 115.896041][ T6848] syz_tun: left allmulticast mode [ 116.090480][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.090801][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.670236][ T6877] ubi0: attaching mtd0 [ 116.673303][ T6877] ubi0: scanning is finished [ 116.673329][ T6877] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 117.102040][ T6877] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 117.239148][ T6895] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 117.239165][ T6895] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 117.239966][ T6895] vhci_hcd vhci_hcd.0: Device attached [ 117.340912][ T1036] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 117.754762][ T50] usb 7-1: USB disconnect, device number 5 [ 117.885226][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'. [ 117.905232][ T6897] vhci_hcd: connection closed [ 117.905447][ T5883] vhci_hcd vhci_hcd.0: stop threads [ 117.905463][ T5883] vhci_hcd vhci_hcd.0: release socket [ 117.907401][ T5883] vhci_hcd vhci_hcd.0: disconnect device [ 117.962038][ T855] e1000 0000:00:06.0 eth0: Reset adapter [ 118.441807][ T5137] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 118.761569][ T6915] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 118.814401][ T1767] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 118.909311][ T6935] gadgetfs: bound to dummy_udc driver [ 118.972038][ T855] e1000 0000:00:06.0 eth0: Reset adapter [ 118.980351][ T6939] vlan2: entered promiscuous mode [ 118.980365][ T6939] hsr0: entered promiscuous mode [ 118.980483][ T6939] vlan2: entered allmulticast mode [ 118.980491][ T6939] hsr0: entered allmulticast mode [ 118.980498][ T6939] hsr_slave_0: entered allmulticast mode [ 118.980506][ T6939] hsr_slave_1: entered allmulticast mode [ 119.162038][ T50] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 119.162269][ C3] gadgetfs: connected [ 119.162531][ T50] gadgetfs: disconnected [ 119.181172][ T855] e1000 0000:00:06.0 eth0: Reset adapter [ 119.205557][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 119.247560][ T6935] gadgetfs: suspended from state 2 [ 119.500860][ T50] usb 5-1: device not accepting address 6, error -71 [ 119.621682][ T5137] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 119.751207][ T6949] hsr_slave_0: left promiscuous mode [ 119.751717][ T6949] hsr_slave_1: left promiscuous mode [ 119.835506][ T30] usb usb38-port1: attempt power cycle [ 120.130183][ T6955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.130392][ T6955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.506932][ T30] usb usb38-port1: unable to enumerate USB device [ 121.832706][ T5137] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 128.699093][ T7012] binder: 7011:7012 unknown command 0 [ 128.699112][ T7012] binder: 7011:7012 ioctl c0306201 800001c0 returned -22 [ 129.087170][ T7031] ALSA: mixer_oss: invalid OSS volume '' [ 129.233737][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.223'. [ 129.422980][ T1036] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 129.633505][ T1036] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 129.638153][ T1036] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 129.638171][ T1036] usb 5-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 129.638180][ T1036] usb 5-1: config 0 has no interface number 0 [ 129.638194][ T1036] usb 5-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 129.638210][ T1036] usb 5-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 129.638223][ T1036] usb 5-1: config 0 interface 143 has no altsetting 0 [ 129.642376][ T1036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.642389][ T1036] usb 5-1: Product: syz [ 129.642396][ T1036] usb 5-1: Manufacturer: syz [ 129.642403][ T1036] usb 5-1: SerialNumber: syz [ 129.643550][ T1036] usb 5-1: config 0 descriptor?? [ 129.879622][ T1036] usb 5-1: USB disconnect, device number 8 [ 130.267301][ T7041] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:21 [ 130.273326][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 130.330833][ T1036] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 130.502135][ T1036] usb 5-1: Using ep0 maxpacket: 16 [ 130.504418][ T1036] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 130.517751][ T1036] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 130.517803][ T1036] usb 5-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 130.517851][ T1036] usb 5-1: config 0 has no interface number 0 [ 130.517974][ T1036] usb 5-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 130.518057][ T1036] usb 5-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 130.518109][ T1036] usb 5-1: config 0 interface 143 has no altsetting 0 [ 130.600985][ T1036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.601025][ T1036] usb 5-1: Product: syz [ 130.601034][ T1036] usb 5-1: Manufacturer: syz [ 130.601067][ T1036] usb 5-1: SerialNumber: syz [ 130.664124][ T1036] usb 5-1: config 0 descriptor?? [ 131.539927][ T7029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.544280][ T7029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.591046][ T1036] usb 5-1: USB disconnect, device number 9 [ 131.654739][ T7043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.655185][ T7043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.704051][ T7056] netlink: 'syz.2.230': attribute type 4 has an invalid length. [ 131.704071][ T7056] netlink: 17 bytes leftover after parsing attributes in process `syz.2.230'. [ 132.463444][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.463532][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.630738][ T5742] Bluetooth: hci3: command 0x0405 tx timeout [ 132.738693][ T7073] gadgetfs: bound to dummy_udc driver [ 132.970747][ T1036] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 132.970957][ C0] gadgetfs: connected [ 132.971036][ T1036] gadgetfs: disconnected [ 133.130994][ C0] gadgetfs: connected [ 133.132645][ T1036] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 133.133400][ T1036] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.160807][ T7073] gadgetfs: suspended from state 3 [ 133.163341][ T7073] gadgetfs: disconnected [ 133.165287][ T1036] usb 5-1: can't set config #1, error -71 [ 133.166079][ T1036] usb 5-1: USB disconnect, device number 10 [ 134.530131][ T7088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.245'. [ 134.539252][ T7090] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 134.577365][ T7085] smpboot: CPU 1 is now offline [ 134.578399][ T7090] serio: Serial port ptm0 [ 134.629137][ T7093] netlink: 48 bytes leftover after parsing attributes in process `syz.0.238'. [ 134.653022][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 134.747392][ T7088] Process accounting paused [ 134.801245][ T10] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 134.803620][ T10] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 134.803633][ T10] usb 8-1: Product: syz [ 134.803640][ T10] usb 8-1: Manufacturer: syz [ 134.803647][ T10] usb 8-1: SerialNumber: syz [ 134.822253][ T10] usb 8-1: config 0 descriptor?? [ 134.824454][ T10] ch341 8-1:0.0: ch341-uart converter detected [ 134.918533][ T7101] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 135.697926][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 135.702947][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 135.703203][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 135.704181][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 135.704278][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.237'. [ 135.906726][ T10] usb 8-1: failed to receive control message: -110 [ 135.906772][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 136.194049][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'. [ 136.260150][ T7123] 9pnet_virtio: no channels available for device syz [ 136.340998][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 136.490820][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 136.494217][ T10] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 136.497821][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.497874][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.503868][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.503882][ T10] usb 6-1: Product: syz [ 136.503889][ T10] usb 6-1: Manufacturer: syz [ 136.503896][ T10] usb 6-1: SerialNumber: syz [ 136.725286][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 137.087141][ T5137] usb 8-1: USB disconnect, device number 4 [ 137.087861][ T5137] ch341 8-1:0.0: device disconnected [ 137.293942][ T7122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.294139][ T7122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.442780][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.246'. [ 137.698464][ T10] usb 6-1: USB disconnect, device number 7 [ 138.642982][ T7149] i2c i2c-1: dtv_property_process_set: SET cmd 0x20203a64 undefined [ 140.290944][ T7159] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 140.424363][ T7159] serio: Serial port ptm0 [ 140.465202][ T7165] __nla_validate_parse: 1 callbacks suppressed [ 140.465223][ T7165] netlink: 48 bytes leftover after parsing attributes in process `syz.3.257'. [ 140.856545][ T7163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.877488][ T7163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.299721][ T7171] 9pnet_virtio: no channels available for device syz [ 141.544910][ T7173] jffs2: notice: (7173) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 142.936604][ T7192] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 143.000943][ T7193] serio: Serial port ptm0 [ 143.061914][ T7192] netlink: 48 bytes leftover after parsing attributes in process `syz.2.269'. [ 143.299283][ T7199] ubi0: attaching mtd0 [ 143.302012][ T7199] ubi0: scanning is finished [ 143.302051][ T7199] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 143.995705][ T7199] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 144.530157][ T7204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.530344][ T7204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.600823][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 145.516226][ T7216] tmpfs: Unknown parameter 'nr_inodesD5' [ 146.122233][ T7232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.284'. [ 146.490506][ T7235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.550839][ T7235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.611235][ T7235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.614103][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 146.614118][ T43] audit: type=1400 audit(1789393099.775:57): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=7225 comm="syz.2.276" [ 147.881469][ T7235] lo speed is unknown, defaulting to 1000 [ 147.921863][ T7244] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 148.024994][ T7244] serio: Serial port ptm0 [ 148.086270][ T7247] netlink: 48 bytes leftover after parsing attributes in process `syz.0.280'. [ 149.006917][ T7263] gadgetfs: bound to dummy_udc driver [ 149.241589][ T5137] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 149.241807][ C2] gadgetfs: connected [ 149.244195][ T5137] gadgetfs: disconnected [ 149.391091][ C2] gadgetfs: connected [ 149.391238][ T5137] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 149.391874][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.394044][ C2] gadgetfs: configuration #1 [ 149.435178][ T5137] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input12 [ 149.451078][ T7263] gadgetfs: suspended from state 3 [ 149.453866][ T7263] gadgetfs: disconnected [ 149.484849][ C2] usbtouchscreen 5-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 149.484875][ T5137] usb 5-1: USB disconnect, device number 11 [ 150.329222][ T7280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.291'. [ 150.450092][ T7284] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 150.479177][ T7278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.481621][ T7278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.505677][ T7284] serio: Serial port ptm0 [ 150.557276][ T7290] netlink: 48 bytes leftover after parsing attributes in process `syz.1.292'. [ 152.805422][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.805640][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.010250][ T7328] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 153.047237][ T7328] serio: Serial port ptm0 [ 153.049859][ T7329] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 153.098649][ T7331] netlink: 48 bytes leftover after parsing attributes in process `syz.0.304'. [ 153.583940][ T7336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.584243][ T7336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.004688][ T7345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.308'. [ 154.684834][ T7350] i2c i2c-1: dtv_property_process_set: SET cmd 0x20203a64 undefined [ 156.621711][ T7360] gadgetfs: bound to dummy_udc driver [ 156.910858][ T855] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 156.911281][ C2] gadgetfs: connected [ 156.911674][ T855] gadgetfs: disconnected [ 157.071158][ C2] gadgetfs: connected [ 157.071323][ T855] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 157.072096][ T855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.160542][ T7358] gadgetfs: suspended from state 3 [ 157.164250][ T7358] gadgetfs: disconnected [ 157.242064][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 157.518181][ T7363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.534910][ T7363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.712403][ T855] usb 5-1: can't set config #1, error -71 [ 157.720983][ T855] usb 5-1: USB disconnect, device number 12 [ 158.050236][ T7375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.055186][ T7375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.228774][ T7399] netlink: 'syz.2.323': attribute type 1 has an invalid length. [ 160.510797][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 160.640144][ T7421] serio: Serial port ptm0 [ 160.687128][ T7423] netlink: 48 bytes leftover after parsing attributes in process `syz.1.336'. [ 160.712039][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 160.741231][ T10] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 160.742487][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.749406][ T10] usb 5-1: config 0 descriptor?? [ 161.293000][ T7431] lo speed is unknown, defaulting to 1000 [ 161.313757][ T10] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 161.316283][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 161.327670][ T10] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 161.327684][ T10] [drm] Initialized udl on minor 2 [ 161.337339][ T10] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 161.337528][ T10] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 161.346280][ T10] usb 5-1: USB disconnect, device number 13 [ 161.349226][ T1036] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 161.365452][ T1036] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 161.943731][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.333'. [ 161.975582][ T7452] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 162.081405][ T7452] serio: Serial port ptm0 [ 162.136730][ T7457] netlink: 48 bytes leftover after parsing attributes in process `syz.0.335'. [ 162.329340][ T7462] serio: Serial port ptm0 [ 162.381692][ T7466] netlink: 48 bytes leftover after parsing attributes in process `syz.2.339'. [ 163.013182][ T7472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.013371][ T7472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.456130][ T7481] lo speed is unknown, defaulting to 1000 [ 163.699058][ T7486] lo speed is unknown, defaulting to 1000 [ 164.239770][ T7497] null_blk: nullb1: using native zone append [ 164.761407][ T7497] null_blk: disk nullb1 created [ 165.486763][ T7508] Process accounting resumed [ 165.540281][ T7511] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 165.572231][ T7511] serio: Serial port ptm0 [ 165.625255][ T7520] netlink: 48 bytes leftover after parsing attributes in process `syz.0.351'. [ 165.780196][ T7516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.780378][ T7516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.990078][ T7538] gadgetfs: bound to dummy_udc driver [ 167.250819][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 167.251019][ C0] gadgetfs: connected [ 167.251277][ T10] gadgetfs: disconnected [ 167.345806][ T7538] gadgetfs: suspended from state 2 [ 167.600800][ T10] usb 5-1: device not accepting address 14, error -71 [ 169.069501][ T7571] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 169.369780][ T7574] serio: Serial port ptm0 [ 169.417931][ T7571] netlink: 48 bytes leftover after parsing attributes in process `syz.1.365'. [ 170.023386][ T7586] netlink: 'syz.1.368': attribute type 1 has an invalid length. [ 170.329868][ T7583] FAULT_INJECTION: forcing a failure. [ 170.329868][ T7583] name failslab, interval 1, probability 0, space 0, times 0 [ 170.329890][ T7583] CPU: 0 UID: 0 PID: 7583 Comm: syz.3.369 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.329906][ T7583] Tainted: [L]=SOFTLOCKUP [ 170.329910][ T7583] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 170.329916][ T7583] Call Trace: [ 170.329921][ T7583] [ 170.329925][ T7583] dump_stack_lvl+0x100/0x190 [ 170.329944][ T7583] should_fail_ex.cold+0x5/0xa [ 170.329959][ T7583] should_failslab+0xc2/0x120 [ 170.329975][ T7583] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 170.329988][ T7583] ? start_dirop+0x79/0xb0 [ 170.330000][ T7583] ? alloc_inode+0x68/0x250 [ 170.330016][ T7583] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 170.330030][ T7583] alloc_inode+0x68/0x250 [ 170.330046][ T7583] new_inode+0x22/0x1c0 [ 170.330063][ T7583] debugfs_create_dir+0x9d/0x420 [ 170.330096][ T7583] kvm_dev_ioctl+0x1286/0x1b50 [ 170.330115][ T7583] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 170.330133][ T7583] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 170.330145][ T7583] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 170.330165][ T7583] __do_fast_syscall_32+0x13a/0x8b0 [ 170.330220][ T7583] do_fast_syscall_32+0x32/0x70 [ 170.330239][ T7583] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 170.330254][ T7583] RIP: 0023:0xf70cefec [ 170.330267][ T7583] Code: Unable to access opcode bytes at 0xf70cefc2. [ 170.330272][ T7583] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 170.330283][ T7583] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae01 [ 170.330289][ T7583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.330295][ T7583] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 170.330301][ T7583] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 170.330307][ T7583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 170.330321][ T7583] [ 170.330358][ T7583] debugfs: out of free dentries, can not create directory '7583-6' [ 170.415123][ T7591] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 170.457426][ T7591] rdma_rxe: rxe_newlink: failed to add syz_tun [ 170.551728][ T7597] 9pnet_virtio: no channels available for device syz [ 171.088641][ T7604] netlink: 16 bytes leftover after parsing attributes in process `syz.3.374'. [ 171.148591][ T5742] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 171.714709][ T7611] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 171.905736][ T7615] serio: Serial port ptm0 [ 171.959045][ T7614] netlink: 48 bytes leftover after parsing attributes in process `syz.0.376'. [ 172.008497][ T7617] loop7: detected capacity change from 0 to 7 [ 172.092877][ T7617] Dev loop7: unable to read RDB block 7 [ 172.092901][ T7617] loop7: unable to read partition table [ 172.092993][ T7617] loop7: partition table beyond EOD, truncated [ 172.093032][ T7617] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 174.763843][ T7655] netlink: 'syz.3.384': attribute type 11 has an invalid length. [ 174.806289][ T7655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.806974][ T7655] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.809324][ T7655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.866761][ T7655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.867739][ T7655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.870379][ T7655] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.870391][ T7655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.873179][ T7655] veth1_vlan: left promiscuous mode [ 174.873987][ T7655] veth0_vlan: left promiscuous mode [ 174.874762][ T7655] veth0_vlan: entered promiscuous mode [ 174.875846][ T7655] veth1_vlan: entered promiscuous mode [ 174.878679][ T7655] veth1_macvtap: left promiscuous mode [ 174.879225][ T7655] veth0_macvtap: left promiscuous mode [ 174.879694][ T7655] veth0_macvtap: entered promiscuous mode [ 174.880480][ T7655] veth1_macvtap: entered promiscuous mode [ 174.885756][ T7655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.886236][ T7655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.887322][ T7655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.887946][ T7655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.889902][ T7655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.890389][ T7655] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 174.894882][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.894927][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.895988][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.896028][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.998002][ T7661] netlink: 'syz.0.382': attribute type 1 has an invalid length. [ 175.014403][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.384'. [ 175.014434][ T7655] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 175.029989][ T7656] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 175.030005][ T7656] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 175.310773][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.310945][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.310976][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.312045][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.194547][ T7700] misc userio: Invalid payload size [ 177.194704][ T7700] misc userio: Invalid payload size [ 177.823056][ T7699] netlink: 20 bytes leftover after parsing attributes in process `syz.3.393'. [ 178.818497][ T5742] Bluetooth: hci3: command 0x0405 tx timeout [ 180.885064][ T7727] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 180.939339][ T7727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.984503][ T7749] syz_tun: entered allmulticast mode [ 182.476540][ T7748] syz_tun: left allmulticast mode [ 183.794120][ T7764] netlink: 'syz.3.410': attribute type 4 has an invalid length. [ 183.794139][ T7764] netlink: 17 bytes leftover after parsing attributes in process `syz.3.410'. [ 183.865034][ T7766] syzkaller0: entered promiscuous mode [ 183.865054][ T7766] syzkaller0: entered allmulticast mode [ 183.878642][ T7766] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 183.970019][ T7774] overlayfs: conflicting lowerdir path [ 184.065485][ T37] nvmet: connect request for invalid subsystem testsubsys! [ 184.069872][ T7769] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 184.131315][ T5827] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 184.290760][ T5827] usb 6-1: Using ep0 maxpacket: 8 [ 184.291270][ T5827] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 184.292060][ T5827] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 184.292072][ T5827] usb 6-1: config 0 has no interface number 0 [ 184.292089][ T5827] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 184.292100][ T5827] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 184.292112][ T5827] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 184.292124][ T5827] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 184.292149][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.329552][ T5827] usb 6-1: config 0 descriptor?? [ 184.341791][ T5827] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 184.868261][ T7789] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 184.910072][ T7789] serio: Serial port ptm0 [ 184.916680][ T5827] usb 6-1: USB disconnect, device number 9 [ 184.916743][ C0] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 184.962538][ T7795] netlink: 48 bytes leftover after parsing attributes in process `syz.3.416'. [ 185.410739][ T5137] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 185.560797][ T5137] usb 7-1: Using ep0 maxpacket: 32 [ 185.561285][ T5137] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 185.562113][ T5137] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.562125][ T5137] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.563670][ T5137] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.563682][ T5137] usb 7-1: Product: syz [ 185.563689][ T5137] usb 7-1: Manufacturer: syz [ 185.563697][ T5137] usb 7-1: SerialNumber: syz [ 185.591687][ T7802] ALSA: mixer_oss: invalid OSS volume '' [ 185.771822][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.415'. [ 186.493236][ T7793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.493759][ T7793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.900759][ T5827] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 186.914536][ T5137] usb 7-1: USB disconnect, device number 7 [ 186.970235][ T7818] netlink: 'syz.1.422': attribute type 11 has an invalid length. [ 186.982755][ T7816] kvm: pic: non byte read [ 186.983755][ T7816] kvm: pic: non byte read [ 186.985539][ T7814] fuse: Unknown parameter 'use0000000000000000000000000000000000000000' [ 186.997833][ T7816] kvm: pic: non byte read [ 187.115571][ T7818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.116371][ T7818] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.126263][ T7818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.162907][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 187.162936][ T7824] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 187.168714][ T7818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.172133][ T7818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.189276][ T7818] veth1_vlan: left promiscuous mode [ 187.194301][ T7818] veth0_vlan: left promiscuous mode [ 187.195010][ T7818] veth0_vlan: entered promiscuous mode [ 187.195878][ T7818] veth1_vlan: entered promiscuous mode [ 187.209732][ T7818] veth1_macvtap: left promiscuous mode [ 187.211194][ T7818] veth0_macvtap: left promiscuous mode [ 187.213354][ T7818] veth0_macvtap: entered promiscuous mode [ 187.213833][ T7818] veth1_macvtap: entered promiscuous mode [ 187.237950][ T7821] 9pnet_virtio: no channels available for device syz [ 187.238926][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.239015][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.243108][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.243180][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.309939][ T7822] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 187.309963][ T7822] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 187.936903][ T7829] lo speed is unknown, defaulting to 1000 [ 188.191394][ T7839] FAULT_INJECTION: forcing a failure. [ 188.191394][ T7839] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 188.191421][ T7839] CPU: 2 UID: 0 PID: 7839 Comm: syz.3.425 Tainted: G L syzkaller #0 PREEMPT(full) [ 188.191452][ T7839] Tainted: [L]=SOFTLOCKUP [ 188.191458][ T7839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 188.191468][ T7839] Call Trace: [ 188.191475][ T7839] [ 188.191482][ T7839] dump_stack_lvl+0x100/0x190 [ 188.191510][ T7839] should_fail_ex.cold+0x5/0xa [ 188.191530][ T7839] ? prepare_alloc_pages+0x16d/0x5b0 [ 188.191556][ T7839] should_fail_alloc_page+0xeb/0x140 [ 188.191581][ T7839] prepare_alloc_pages+0x1f0/0x5b0 [ 188.191610][ T7839] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 188.191634][ T7839] ? stack_trace_save+0x8e/0xc0 [ 188.191656][ T7839] ? __pfx_stack_trace_save+0x10/0x10 [ 188.191679][ T7839] ? stack_depot_save_flags+0x27/0x9f0 [ 188.191711][ T7839] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 188.191730][ T7839] ? kasan_save_track+0x14/0x30 [ 188.191751][ T7839] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 188.191779][ T7839] ? create_new_namespaces+0x48a/0xac0 [ 188.191805][ T7839] ? unshare_nsproxy_namespaces+0xf2/0x220 [ 188.191847][ T7839] ? ksys_unshare+0x4a2/0xa70 [ 188.191865][ T7839] ? __ia32_sys_unshare+0x30/0x40 [ 188.191879][ T7839] ? __do_fast_syscall_32+0x13a/0x8b0 [ 188.191904][ T7839] ? do_fast_syscall_32+0x32/0x70 [ 188.191927][ T7839] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.191968][ T7839] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 188.191996][ T7839] ? policy_nodemask+0xed/0x4f0 [ 188.192023][ T7839] alloc_pages_mpol+0x201/0x550 [ 188.192050][ T7839] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 188.192074][ T7839] ? kasan_save_track+0x14/0x30 [ 188.192095][ T7839] ? __kasan_kmalloc+0xaa/0xb0 [ 188.192117][ T7839] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 188.192148][ T7839] alloc_pages_noprof+0x1a/0x160 [ 188.192177][ T7839] timens_vdso_alloc_vvar_page+0x1d/0x70 [ 188.192205][ T7839] copy_time_ns+0x10b/0x790 [ 188.192233][ T7839] create_new_namespaces+0x48a/0xac0 [ 188.192261][ T7839] unshare_nsproxy_namespaces+0xf2/0x220 [ 188.192288][ T7839] ksys_unshare+0x4a2/0xa70 [ 188.192306][ T7839] ? __pfx_ksys_unshare+0x10/0x10 [ 188.192331][ T7839] __ia32_sys_unshare+0x30/0x40 [ 188.192348][ T7839] __do_fast_syscall_32+0x13a/0x8b0 [ 188.192379][ T7839] do_fast_syscall_32+0x32/0x70 [ 188.192404][ T7839] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 188.192426][ T7839] RIP: 0023:0xf70cefec [ 188.192452][ T7839] Code: Unable to access opcode bytes at 0xf70cefc2. [ 188.192460][ T7839] RSP: 002b:00000000f54bd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000136 [ 188.192478][ T7839] RAX: ffffffffffffffda RBX: 0000000006000080 RCX: 0000000000000000 [ 188.192491][ T7839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.192502][ T7839] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 188.192512][ T7839] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 188.192523][ T7839] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.192545][ T7839] [ 188.280680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 188.797292][ T7843] serio: Serial port ptm0 [ 188.882646][ T7848] netlink: 48 bytes leftover after parsing attributes in process `syz.0.428'. [ 189.774666][ T7858] netlink: 'syz.0.431': attribute type 1 has an invalid length. [ 189.774679][ T7858] netlink: 224 bytes leftover after parsing attributes in process `syz.0.431'. [ 189.777149][ T7858] FAULT_INJECTION: forcing a failure. [ 189.777149][ T7858] name fail_futex, interval 1, probability 0, space 0, times 1 [ 189.777170][ T7858] CPU: 0 UID: 0 PID: 7858 Comm: syz.0.431 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.777186][ T7858] Tainted: [L]=SOFTLOCKUP [ 189.777190][ T7858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 189.777196][ T7858] Call Trace: [ 189.777200][ T7858] [ 189.777205][ T7858] dump_stack_lvl+0x100/0x190 [ 189.777223][ T7858] should_fail_ex.cold+0x5/0xa [ 189.777240][ T7858] get_futex_key+0x1d0/0x14f0 [ 189.777260][ T7858] ? __pfx_get_futex_key+0x10/0x10 [ 189.777282][ T7858] futex_wait_setup+0x91/0x540 [ 189.777300][ T7858] __futex_wait+0x19f/0x300 [ 189.777314][ T7858] ? __pfx___futex_wait+0x10/0x10 [ 189.777326][ T7858] ? __pfx_try_to_wake_up+0x10/0x10 [ 189.777341][ T7858] ? futex_hash+0x311/0x400 [ 189.777358][ T7858] ? __pfx_futex_wake_mark+0x10/0x10 [ 189.777374][ T7858] ? find_held_lock+0x2b/0x80 [ 189.777387][ T7858] ? futex_wake+0x4ea/0x5e0 [ 189.777404][ T7858] futex_wait+0xe6/0x370 [ 189.777417][ T7858] ? __pfx_futex_wait+0x10/0x10 [ 189.777434][ T7858] ? do_vfs_ioctl+0x226/0x13e0 [ 189.777452][ T7858] do_futex+0x265/0x440 [ 189.777463][ T7858] ? __pfx_do_futex+0x10/0x10 [ 189.777475][ T7858] ? find_held_lock+0x2b/0x80 [ 189.777494][ T7858] ? __fget_files+0x215/0x3d0 [ 189.777509][ T7858] __ia32_sys_futex_time32+0x2f4/0x470 [ 189.777524][ T7858] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 189.777543][ T7858] __do_fast_syscall_32+0x13a/0x8b0 [ 189.777562][ T7858] ? lockdep_hardirqs_on+0x7d/0x110 [ 189.777579][ T7858] do_fast_syscall_32+0x32/0x70 [ 189.777595][ T7858] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.777609][ T7858] RIP: 0023:0xf6feefec [ 189.777622][ T7858] Code: Unable to access opcode bytes at 0xf6feefc2. [ 189.777627][ T7858] RSP: 002b:00000000f53dd5bc EFLAGS: 00000292 ORIG_RAX: 00000000000000f0 [ 189.777640][ T7858] RAX: ffffffffffffffda RBX: 00000000f73e4f88 RCX: 0000000000000080 [ 189.777647][ T7858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73e4f8c [ 189.777654][ T7858] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000 [ 189.777660][ T7858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.777666][ T7858] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.777679][ T7858] [ 189.788283][ T7858] kAFS: bad VL server IP address [ 189.830680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 189.899606][ T7862] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 189.914836][ T7863] netlink: 'syz.0.433': attribute type 11 has an invalid length. [ 189.951880][ T7862] serio: Serial port ptm0 [ 189.994123][ T7863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.995867][ T7863] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.003328][ T7863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.007945][ T7865] netlink: 48 bytes leftover after parsing attributes in process `syz.3.434'. [ 190.048826][ T7863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.049954][ T7863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.062097][ T7863] veth1_vlan: left promiscuous mode [ 190.062584][ T7863] veth0_vlan: left promiscuous mode [ 190.066241][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.433'. [ 190.066266][ T7867] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 190.070037][ T7863] veth0_vlan: entered promiscuous mode [ 190.073910][ T7863] veth1_vlan: entered promiscuous mode [ 190.083397][ T7863] veth1_macvtap: left promiscuous mode [ 190.083933][ T7863] veth0_macvtap: left promiscuous mode [ 190.087671][ T7863] veth0_macvtap: entered promiscuous mode [ 190.088131][ T7863] veth1_macvtap: entered promiscuous mode [ 190.141927][ T7863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 190.142496][ T7863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 190.144147][ T7863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 190.144662][ T7863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 190.150441][ T7863] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 190.160787][ T6389] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.160816][ T6389] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.160835][ T6389] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.160852][ T6389] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.179368][ T5827] lo speed is unknown, defaulting to 1000 [ 190.179384][ T5827] syz2: Port: 1 Link ACTIVE [ 190.187695][ T5819] syz1: Port: 1 Link ACTIVE [ 190.248054][ T7866] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 190.248071][ T7866] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 190.277111][ T7873] Set syz0 is full, maxelem 0 reached [ 190.279836][ T7872] netlink: 'syz.1.436': attribute type 1 has an invalid length. [ 190.294088][ T7872] bond1: entered promiscuous mode [ 190.294292][ T7872] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.376398][ T66] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 190.380330][ T7872] bond1: (slave bridge1): making interface the new active one [ 190.380345][ T7872] bridge1: entered promiscuous mode [ 190.383803][ T7872] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 190.760427][ T7880] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 190.760451][ T7880] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 193.645020][ T7910] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 193.691838][ T7910] serio: Serial port ptm0 [ 193.758563][ T7915] netlink: 48 bytes leftover after parsing attributes in process `syz.2.445'. [ 193.994114][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.994871][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.617882][ T7925] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 194.629183][ T7925] serio: Serial port ptm0 [ 196.453593][ T7948] mmap: syz.0.451 (7948) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 196.636562][ T7950] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 196.636579][ T7950] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 196.639984][ T7950] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 196.930678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 196.980679][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 197.000668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 197.040682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 197.060669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 197.180674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #84!!! [ 197.475104][ T7958] loop7: detected capacity change from 0 to 7 [ 198.105215][ T7958] Dev loop7: unable to read RDB block 7 [ 198.105413][ T7958] loop7: unable to read partition table [ 198.125713][ T7958] loop7: partition table beyond EOD, truncated [ 198.129311][ T7958] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 198.985786][ T7945] Process accounting paused [ 200.329090][ T7978] Console: switching to colour dummy device 80x25 [ 200.369468][ T7984] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 200.393864][ T7984] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 200.393967][ T7984] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 200.394141][ T7984] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 200.404246][ T7984] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 200.416489][ T7984] pci 0000:00:01.0: Adding to iommu group 1 [ 200.427976][ T7984] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 200.427990][ T7984] pci 0000:00:01.0: vgaarb: bridge control possible [ 200.427998][ T7984] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 200.452969][ T7984] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 200.475826][ T7984] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f] [ 200.475886][ T7984] pci 0000:00:05.0: BAR 1 [mem 0x81001000-0x81001fff] [ 200.476100][ T7984] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref] [ 200.494828][ T7984] pci 0000:00:05.0: Adding to iommu group 5 [ 200.513069][ T7984] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 200.513187][ T7984] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 200.517020][ T7984] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 200.517133][ T7984] pci 0000:00:05.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 200.517232][ T7984] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f]: assigned [ 200.518229][ T7984] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 200.540072][ T7984] [drm] Found bochs VGA, ID 0xb0c5. [ 200.540084][ T7984] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 200.551556][ T1036] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 200.647737][ T7984] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 1 [ 200.724764][ T1036] usb 8-1: Using ep0 maxpacket: 8 [ 200.737470][ T1036] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 200.748071][ T1036] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 200.748094][ T1036] usb 8-1: config 0 has no interface number 0 [ 200.748122][ T1036] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 200.748139][ T1036] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 200.748157][ T1036] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.748175][ T1036] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 200.748206][ T1036] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.791036][ T1036] usb 8-1: config 0 descriptor?? [ 200.815987][ T1036] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 200.863991][ T7977] netlink: 'syz.0.460': attribute type 10 has an invalid length. [ 200.897201][ T7984] Console: switching to colour frame buffer device 160x50 [ 200.914466][ T7977] team0 (unregistering): Port device team_slave_0 removed [ 200.930831][ T7984] bochs-drm 0000:00:01.0: [drm] fb0: bochs-drmdrmfb frame buffer device [ 200.976030][ T7984] virtio-pci 0000:00:05.0: PCI INT A: failed to register GSI [ 200.976068][ T7984] virtio-pci 0000:00:05.0: probe with driver virtio-pci failed with error -16 [ 201.203426][ T1036] usb 8-1: USB disconnect, device number 6 [ 201.203483][ C0] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 201.658080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 201.676550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 201.708376][ T7996] netlink: 'syz.2.462': attribute type 1 has an invalid length. [ 201.708396][ T7996] netlink: 224 bytes leftover after parsing attributes in process `syz.2.462'. [ 201.721482][ T7996] FAULT_INJECTION: forcing a failure. [ 201.721482][ T7996] name failslab, interval 1, probability 0, space 0, times 0 [ 201.721512][ T7996] CPU: 0 UID: 0 PID: 7996 Comm: syz.2.462 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.721536][ T7996] Tainted: [L]=SOFTLOCKUP [ 201.721543][ T7996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.721555][ T7996] Call Trace: [ 201.721563][ T7996] [ 201.721571][ T7996] dump_stack_lvl+0x100/0x190 [ 201.721654][ T7996] should_fail_ex.cold+0x5/0xa [ 201.721678][ T7996] should_failslab+0xc2/0x120 [ 201.721729][ T7996] __kmalloc_noprof+0xfc/0x840 [ 201.721752][ T7996] ? rcu_is_watching+0x13/0xc0 [ 201.721775][ T7996] ? tomoyo_realpath_from_path+0xb6/0x690 [ 201.721802][ T7996] tomoyo_realpath_from_path+0xb6/0x690 [ 201.721827][ T7996] tomoyo_path_number_perm+0x23c/0x580 [ 201.721869][ T7996] ? tomoyo_path_number_perm+0x22e/0x580 [ 201.721897][ T7996] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 201.721920][ T7996] ? futex_wait+0x11e/0x370 [ 201.721951][ T7996] ? __lock_acquire+0x5c0/0x1f40 [ 201.721988][ T7996] ? __fget_files+0x34/0x3d0 [ 201.722008][ T7996] ? find_held_lock+0x2b/0x80 [ 201.722028][ T7996] ? __fget_files+0x215/0x3d0 [ 201.722047][ T7996] ? hook_file_ioctl_common+0x140/0x440 [ 201.722076][ T7996] ? __fget_files+0x215/0x3d0 [ 201.722100][ T7996] ? __fget_files+0x21f/0x3d0 [ 201.722127][ T7996] security_file_ioctl_compat+0xd3/0x230 [ 201.722155][ T7996] __ia32_compat_sys_ioctl+0xc2/0x360 [ 201.722187][ T7996] __do_fast_syscall_32+0x13a/0x8b0 [ 201.722241][ T7996] ? lockdep_hardirqs_on+0x7d/0x110 [ 201.722270][ T7996] do_fast_syscall_32+0x32/0x70 [ 201.722298][ T7996] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.722323][ T7996] RIP: 0023:0xf6fdefec [ 201.722344][ T7996] Code: Unable to access opcode bytes at 0xf6fdefc2. [ 201.722353][ T7996] RSP: 002b:00000000f53cd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 201.722373][ T7996] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040086806 [ 201.722386][ T7996] RDX: 0000000000000021 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.722399][ T7996] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.722410][ T7996] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 201.722420][ T7996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.722452][ T7996] [ 201.722563][ T7996] ERROR: Out of memory at tomoyo_realpath_from_path. [ 201.871780][ T7996] kAFS: bad VL server IP address [ 202.409798][ T7977] team0 (unregistering): Port device team_slave_1 removed [ 203.005816][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.464'. [ 203.234781][ T8005] lo speed is unknown, defaulting to 1000 [ 203.235554][ T8007] lo speed is unknown, defaulting to 1000 [ 203.235601][ T8007] lo speed is unknown, defaulting to 1000 [ 203.259813][ T8007] lo speed is unknown, defaulting to 1000 [ 203.260244][ T8007] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 203.260263][ T8007] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 203.260292][ T8007] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 203.275735][ T8007] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 203.304080][ T1036] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 203.317474][ T8007] lo speed is unknown, defaulting to 1000 [ 203.318331][ T8007] lo speed is unknown, defaulting to 1000 [ 203.321222][ T8007] lo speed is unknown, defaulting to 1000 [ 203.321955][ T8007] lo speed is unknown, defaulting to 1000 [ 203.322734][ T8007] lo speed is unknown, defaulting to 1000 [ 203.466525][ T8018] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 203.533634][ T8021] serio: Serial port ptm0 [ 203.586490][ T8022] netlink: 48 bytes leftover after parsing attributes in process `syz.3.467'. [ 203.815582][ T8030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.469'. [ 204.080837][ T66] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 205.952326][ T8056] netlink: 'syz.1.474': attribute type 1 has an invalid length. [ 205.952340][ T8056] netlink: 224 bytes leftover after parsing attributes in process `syz.1.474'. [ 205.956833][ T8056] FAULT_INJECTION: forcing a failure. [ 205.956833][ T8056] name failslab, interval 1, probability 0, space 0, times 0 [ 205.956853][ T8056] CPU: 0 UID: 0 PID: 8056 Comm: syz.1.474 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.956868][ T8056] Tainted: [L]=SOFTLOCKUP [ 205.956872][ T8056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 205.956878][ T8056] Call Trace: [ 205.956883][ T8056] [ 205.956887][ T8056] dump_stack_lvl+0x100/0x190 [ 205.956905][ T8056] should_fail_ex.cold+0x5/0xa [ 205.956921][ T8056] should_failslab+0xc2/0x120 [ 205.956937][ T8056] __kmalloc_noprof+0xfc/0x840 [ 205.956950][ T8056] ? rcu_is_watching+0x13/0xc0 [ 205.956960][ T8056] ? tomoyo_realpath_from_path+0xb6/0x690 [ 205.956977][ T8056] tomoyo_realpath_from_path+0xb6/0x690 [ 205.956992][ T8056] tomoyo_path_number_perm+0x23c/0x580 [ 205.957007][ T8056] ? tomoyo_path_number_perm+0x22e/0x580 [ 205.957024][ T8056] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 205.957038][ T8056] ? futex_wait+0x11e/0x370 [ 205.957056][ T8056] ? __lock_acquire+0x5c0/0x1f40 [ 205.957093][ T8056] ? __fget_files+0x34/0x3d0 [ 205.957105][ T8056] ? find_held_lock+0x2b/0x80 [ 205.957116][ T8056] ? __fget_files+0x215/0x3d0 [ 205.957127][ T8056] ? hook_file_ioctl_common+0x140/0x440 [ 205.957144][ T8056] ? __fget_files+0x215/0x3d0 [ 205.957158][ T8056] ? __fget_files+0x21f/0x3d0 [ 205.957173][ T8056] security_file_ioctl_compat+0xd3/0x230 [ 205.957191][ T8056] __ia32_compat_sys_ioctl+0xc2/0x360 [ 205.957211][ T8056] __do_fast_syscall_32+0x13a/0x8b0 [ 205.957228][ T8056] ? lockdep_hardirqs_on+0x7d/0x110 [ 205.957245][ T8056] do_fast_syscall_32+0x32/0x70 [ 205.957262][ T8056] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.957275][ T8056] RIP: 0023:0xf703efec [ 205.957293][ T8056] Code: Unable to access opcode bytes at 0xf703efc2. [ 205.957299][ T8056] RSP: 002b:00000000f542d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 205.957310][ T8056] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040086806 [ 205.957319][ T8056] RDX: 0000000000000021 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.957326][ T8056] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.957333][ T8056] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 205.957339][ T8056] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.957355][ T8056] [ 205.957391][ T8056] ERROR: Out of memory at tomoyo_realpath_from_path. [ 206.015277][ T8056] kAFS: bad VL server IP address [ 206.110785][ T5819] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 206.330735][ T5819] usb 5-1: Using ep0 maxpacket: 8 [ 206.331500][ T5819] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 206.332686][ T5819] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 206.332699][ T5819] usb 5-1: config 0 has no interface number 0 [ 206.332716][ T5819] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 206.332727][ T5819] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 206.332777][ T5819] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 206.332791][ T5819] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 206.332811][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.493168][ T5819] usb 5-1: config 0 descriptor?? [ 206.562531][ T5819] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 206.994266][ T5819] usb 5-1: USB disconnect, device number 16 [ 206.994322][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 207.405319][ T8087] misc userio: Invalid payload size [ 207.405487][ T8087] misc userio: Invalid payload size [ 208.289295][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'. [ 208.292977][ T8098] 9pnet_fd: p9_fd_create_tcp (8098): problem connecting socket to 127.0.0.1 [ 208.851517][ T5819] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 209.137846][ T8109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.485'. [ 209.794541][ T8115] 9pnet_virtio: no channels available for device syz [ 210.260201][ T66] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 211.382181][ T66] Bluetooth: hci2: unexpected event for opcode 0x2041 [ 214.410038][ T8182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.500'. [ 214.502824][ T66] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 214.836637][ T8188] netlink: 'syz.2.504': attribute type 10 has an invalid length. [ 215.004858][ T8188] netlink: 20 bytes leftover after parsing attributes in process `syz.2.504'. [ 215.299715][ T8195] 9pnet_virtio: no channels available for device syz [ 215.660325][ T8200] netlink: 'syz.1.513': attribute type 10 has an invalid length. [ 215.660423][ T8200] netlink: 40 bytes leftover after parsing attributes in process `syz.1.513'. [ 215.771640][ T8202] fuse: Bad value for 'fd' [ 216.010985][ T8200] dummy0: entered promiscuous mode [ 216.083932][ T8200] bridge0: port 3(dummy0) entered blocking state [ 216.091406][ T8200] bridge0: port 3(dummy0) entered disabled state [ 216.091875][ T8200] dummy0: entered allmulticast mode [ 216.463035][ T8200] bridge0: port 3(dummy0) entered blocking state [ 216.465426][ T8200] bridge0: port 3(dummy0) entered forwarding state [ 217.489293][ T8209] netlink: 'syz.2.507': attribute type 11 has an invalid length. [ 218.099553][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.507'. [ 218.099749][ T8215] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 220.551329][ T8222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.558138][ T8222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.665835][ T8222] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.666834][ T8222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.672957][ T8222] veth1_vlan: left promiscuous mode [ 220.673476][ T8222] veth0_vlan: left promiscuous mode [ 220.674078][ T8222] veth0_vlan: entered promiscuous mode [ 220.674982][ T8222] veth1_vlan: entered promiscuous mode [ 220.677436][ T8222] veth1_macvtap: left promiscuous mode [ 220.677966][ T8222] veth0_macvtap: left promiscuous mode [ 220.679134][ T8222] veth0_macvtap: entered promiscuous mode [ 220.679627][ T8222] veth1_macvtap: entered promiscuous mode [ 220.687716][ T8222] 8021q: adding VLAN 0 to HW filter on device eth0 [ 220.719388][ T8222] 8021q: adding VLAN 0 to HW filter on device eth1 [ 220.743753][ T8222] 8021q: adding VLAN 0 to HW filter on device eth2 [ 220.748320][ T8222] 8021q: adding VLAN 0 to HW filter on device eth3 [ 220.867709][ T8209] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 222.259642][ T8245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.514'. [ 223.101543][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 223.269519][ T5812] lo speed is unknown, defaulting to 1000 [ 223.275816][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.275920][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.276219][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.276240][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.107913][ T5742] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 226.278985][ T8274] serio: Serial port ptm0 [ 226.331919][ T8276] netlink: 48 bytes leftover after parsing attributes in process `syz.3.519'. [ 227.686071][ T8285] MTRR 1 not used [ 228.373528][ T8293] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 228.375707][ T8293] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 228.377479][ T8293] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 228.380297][ T8293] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 229.201523][ T8298] jffs2: notice: (8298) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 229.333246][ T8298] warning: `syz.2.528' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 229.369887][ T8298] overlayfs: missing 'lowerdir' [ 229.450198][ T8301] netlink: 'syz.1.529': attribute type 11 has an invalid length. [ 229.524029][ T8301] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 229.819002][ T8303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.527'. [ 230.381011][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 230.381374][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 230.381504][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 230.381645][ T66] Bluetooth: hci0: command 0x0c1a tx timeout [ 230.495634][ T8298] Process accounting resumed [ 231.611193][ T5742] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 236.676890][ T8335] netlink: 216 bytes leftover after parsing attributes in process `syz.1.535'. [ 236.738131][ T8335] program syz.1.535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.262915][ T8332] cgroup: fork rejected by pids controller in /syz1 [ 237.632926][ T8370] random: crng reseeded on system resumption [ 237.717766][ T8370] vti0: entered promiscuous mode [ 237.900871][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 237.907433][ T8373] 9p: Bad value for 'wfdno' [ 242.116021][ T8386] 9pnet_virtio: no channels available for device syz [ 242.392062][ T8390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.542'. [ 243.192077][ T5742] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 244.653646][ T8400] netlink: 'syz.1.545': attribute type 10 has an invalid length. [ 244.819491][ T8400] team0 (unregistering): Port device team_slave_0 removed [ 244.946729][ T8400] team0 (unregistering): Port device team_slave_1 removed [ 245.761647][ T8415] 9pnet_virtio: no channels available for device syz [ 246.497035][ T8431] 9pnet_virtio: no channels available for device syz [ 248.337341][ T8451] 9pnet_virtio: no channels available for device syz [ 249.693793][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 249.941655][ T5137] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 250.090797][ T5137] usb 6-1: Using ep0 maxpacket: 8 [ 250.101204][ T5137] usb 6-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 250.102058][ T5137] usb 6-1: config 3 has an invalid interface number: 45 but max is 0 [ 250.102071][ T5137] usb 6-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 250.102080][ T5137] usb 6-1: config 3 has no interface number 0 [ 250.102098][ T5137] usb 6-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.102111][ T5137] usb 6-1: config 3 interface 45 has no altsetting 0 [ 250.103852][ T5137] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.103864][ T5137] usb 6-1: Product: syz [ 250.103909][ T5137] usb 6-1: Manufacturer: syz [ 250.103918][ T5137] usb 6-1: SerialNumber: syz [ 250.414784][ T5137] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 250.563268][ T5137] usb 6-1: USB disconnect, device number 10 [ 250.674457][ T7021] udevd[7021]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.810333][ T8477] overlayfs: failed to resolve './file0': -2 [ 254.536777][ T8488] 9pnet_virtio: no channels available for device syz [ 255.348334][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.348429][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.834561][ T8494] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 257.013106][ T8502] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2.1.3), cmd(8) [ 257.122344][ T8506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 259.733215][ T8517] netlink: 'syz.2.573': attribute type 2 has an invalid length. [ 259.740188][ T8517] netlink: 'syz.2.573': attribute type 2 has an invalid length. [ 259.740203][ T8517] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.573'. [ 260.375387][ T8526] IPVS: ip_vs_add_dest(): server weight less than zero [ 260.678926][ T8532] 8021q: VLANs not supported on sit0 [ 260.908629][ T8522] Process accounting paused [ 262.630794][ T8540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.671012][ T8562] netlink: 32 bytes leftover after parsing attributes in process `syz.1.583'. [ 264.897107][ T8567] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 265.148808][ T8568] configfs-gadget.g1 gadget.0: HOST MAC 56:51:21:dd:f2:f7 [ 265.148832][ T8568] configfs-gadget.g1 gadget.0: MAC ba:94:8a:10:ea:f5 [ 265.409659][ T42] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 265.554740][ T42] usb 5-1: New USB device found, idVendor=0001, idProduct=0000, bcdDevice= 7.03 [ 265.559575][ T42] usb 5-1: Dual-Role OTG device on HNP port [ 265.559790][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.559803][ T42] usb 5-1: Product: B [ 266.056493][ T42] cdc_ether 5-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 56:51:21:dd:f2:f7 [ 266.077283][ T42] cdc_acm 5-1:1.2: ttyACM0: USB ACM device [ 266.091826][ T8582] 9pnet_virtio: no channels available for device syz [ 266.308877][ T8585] 8021q: VLANs not supported on sit0 [ 267.577070][ T8604] 9pnet_virtio: no channels available for device syz [ 269.389230][ T8626] IPVS: ip_vs_add_dest(): server weight less than zero [ 270.615419][ T8640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.780350][ T8627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.785028][ T8627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.887053][ T8643] netlink: 32 bytes leftover after parsing attributes in process `syz.2.598'. [ 270.921544][ T855] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 271.074341][ T855] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 271.075597][ T855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.075622][ T855] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.075639][ T855] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 271.075736][ T855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.102485][ T855] usb 6-1: config 0 descriptor?? [ 271.333096][ T8627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.333396][ T8627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.798427][ T855] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 273.592343][ T8666] jffs2: notice: (8666) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 273.816905][ T5827] usb 6-1: USB disconnect, device number 11 [ 274.188935][ T8666] overlayfs: missing 'lowerdir' [ 277.947477][ T8695] comedi comedi3: pcmda12: I/O base address or length out of range [ 279.446587][ T8712] netlink: 32 bytes leftover after parsing attributes in process `syz.0.610'. [ 281.756725][ T8734] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 281.756740][ T8734] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 281.756746][ T8734] PKCS7: Unsupported data type 106 [ 281.769605][ T8734] dummy0: left allmulticast mode [ 281.769803][ T8734] bridge0: port 3(dummy0) entered disabled state [ 281.921520][ T8734] bridge_slave_0: left allmulticast mode [ 281.921579][ T8734] bridge_slave_0: left promiscuous mode [ 281.921742][ T8734] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.043873][ T8735] MTRR 1 not used [ 282.076683][ T8734] bridge_slave_1: left allmulticast mode [ 282.076706][ T8734] bridge_slave_1: left promiscuous mode [ 282.077024][ T8734] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.299840][ T8734] bond0: (slave bond_slave_0): Releasing backup interface [ 282.384359][ T8734] bond0: (slave bond_slave_1): Releasing backup interface [ 282.396203][ T8734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.396223][ T8734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.425365][ T8734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.425451][ T8734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.603848][ T8734] bond1: (slave bridge1): Releasing backup interface [ 282.609651][ T8734] bridge1: left promiscuous mode [ 282.722965][ T5742] Bluetooth: hci3: command 0x0405 tx timeout [ 287.251270][ T8776] 8021q: VLANs not supported on sit0 [ 289.293313][ T8802] 9pnet_virtio: no channels available for device syz [ 289.340043][ T8803] 9pnet_virtio: no channels available for device syz [ 289.417155][ T8808] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 289.433446][ T8808] serio: Serial port ptm0 [ 289.522234][ T8811] netlink: 48 bytes leftover after parsing attributes in process `syz.1.629'. [ 291.950399][ T8843] IPVS: ip_vs_add_dest(): server weight less than zero [ 292.871415][ T8827] Process accounting resumed [ 294.590522][ T8866] bridge0: entered promiscuous mode [ 294.590555][ T8866] bridge0: entered allmulticast mode [ 294.639552][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.638'. [ 294.840868][ T8867] netlink: 'syz.3.637': attribute type 2 has an invalid length. [ 294.841736][ T8867] netlink: 'syz.3.637': attribute type 2 has an invalid length. [ 294.841854][ T8867] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.637'. [ 294.900813][ T42] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 295.071877][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 295.072348][ T42] usb 7-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 295.085288][ T42] usb 7-1: config 3 has an invalid interface number: 45 but max is 0 [ 295.085303][ T42] usb 7-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 295.085312][ T42] usb 7-1: config 3 has no interface number 0 [ 295.085331][ T42] usb 7-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.085344][ T42] usb 7-1: config 3 interface 45 has no altsetting 0 [ 295.088784][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.088798][ T42] usb 7-1: Product: syz [ 295.088805][ T42] usb 7-1: Manufacturer: syz [ 295.088863][ T42] usb 7-1: SerialNumber: syz [ 295.475163][ T8885] 9pnet_virtio: no channels available for device syz [ 295.572423][ T42] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 295.919085][ T42] usb 7-1: USB disconnect, device number 8 [ 296.027972][ T8889] udevd[8889]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.251900][ T8916] 9pnet_virtio: no channels available for device syz [ 308.155258][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.654'. [ 308.176678][ T8934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.178590][ T8934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.687414][ T8944] 9pnet_virtio: no channels available for device syz [ 316.786010][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.787055][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.044370][ T8997] Process accounting paused [ 334.734081][ T5096] Bluetooth: hci3: command 0x0405 tx timeout [ 334.963137][ T66] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 335.026743][ T66] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.074650][ T66] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 335.158980][ T66] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 335.175383][ T66] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 337.340950][ T66] Bluetooth: hci4: command tx timeout [ 339.306637][ T9019] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 339.431189][ T66] Bluetooth: hci4: command tx timeout [ 339.461828][ T9019] md: could not open device unknown-block(1,0). [ 340.491234][ T5742] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.524327][ T5742] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.559487][ T5742] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.617790][ T5742] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.644918][ T5742] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.501236][ T5742] Bluetooth: hci4: command tx timeout [ 342.782704][ T5742] Bluetooth: hci5: command tx timeout [ 343.584198][ T5742] Bluetooth: hci4: command tx timeout [ 344.864881][ T5742] Bluetooth: hci5: command tx timeout [ 347.014427][ T5742] Bluetooth: hci5: command tx timeout [ 349.057468][ T5742] Bluetooth: hci5: command tx timeout [ 350.628322][ T6391] bond0 (unregistering): Released all slaves [ 350.639773][ T6391] bond1 (unregistering): Released all slaves [ 352.797753][ T9014] lo speed is unknown, defaulting to 1000 [ 352.799178][ T9014] lo speed is unknown, defaulting to 1000 [ 355.395026][ T9074] program syz.0.679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 356.606517][ T9081] netlink: 48 bytes leftover after parsing attributes in process `syz.2.680'. [ 357.362224][ T9028] lo speed is unknown, defaulting to 1000 [ 357.386615][ T9028] lo speed is unknown, defaulting to 1000 [ 358.201412][ T9089] binder: 9083:9089 ioctl c0286687 80000140 returned -22 [ 362.308360][ T9014] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.308451][ T9014] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.308612][ T9014] bridge_slave_0: entered allmulticast mode [ 362.310121][ T9014] bridge_slave_0: entered promiscuous mode [ 362.312539][ T9014] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.312617][ T9014] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.312731][ T9014] bridge_slave_1: entered allmulticast mode [ 362.334617][ T9014] bridge_slave_1: entered promiscuous mode [ 363.660109][ T9112] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 363.660151][ T9112] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 363.660169][ T9112] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 363.687239][ T9112] Process accounting resumed [ 363.721492][ T9014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.723932][ T9014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.011088][ T9117] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 364.022757][ T9117] netlink: 48 bytes leftover after parsing attributes in process `syz.2.688'. [ 364.339025][ T9014] team0: Port device team_slave_0 added [ 364.341262][ T9014] team0: Port device team_slave_1 added [ 364.682877][ T9014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.682893][ T9014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.682913][ T9014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.684445][ T9014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.684458][ T9014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.684479][ T9014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.426575][ T855] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 365.488258][ T6391] veth1_macvtap: left promiscuous mode [ 365.488386][ T6391] veth0_macvtap: left promiscuous mode [ 365.488663][ T6391] veth1_vlan: left promiscuous mode [ 365.488791][ T6391] veth0_vlan: left promiscuous mode [ 365.985324][ T9122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.987416][ T9122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.951474][ T9014] hsr_slave_0: entered promiscuous mode [ 368.952278][ T9014] hsr_slave_1: entered promiscuous mode [ 369.065485][ T9028] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.065610][ T9028] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.065707][ T9028] bridge_slave_0: entered allmulticast mode [ 369.066990][ T9028] bridge_slave_0: entered promiscuous mode [ 369.068930][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.069002][ T9028] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.069104][ T9028] bridge_slave_1: entered allmulticast mode [ 369.070697][ T9028] bridge_slave_1: entered promiscuous mode [ 369.596451][ T9028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.801832][ T9028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.534906][ T9028] team0: Port device team_slave_0 added [ 370.539119][ T9028] team0: Port device team_slave_1 added [ 370.834777][ T9028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.834793][ T9028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.834811][ T9028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.837828][ T9028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.837841][ T9028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.837858][ T9028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.195837][ T9028] hsr_slave_0: entered promiscuous mode [ 371.196709][ T9028] hsr_slave_1: entered promiscuous mode [ 371.197295][ T9028] debugfs: 'hsr0' already exists in 'hsr' [ 371.197314][ T9028] Cannot create hsr debugfs directory [ 372.200597][ T9014] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 372.240863][ T9014] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 372.411564][ T9014] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 372.857595][ T9014] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 372.858440][ T9014] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 374.142056][ T9014] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 374.143580][ T9014] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 374.987586][ T9014] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 376.442352][ T9028] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 377.676160][ T9028] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 378.394392][ T9160] 8021q: VLANs not supported on ip6_vti0 [ 378.449866][ T9028] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 379.372903][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.373102][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.405319][ T9028] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 379.406604][ T9028] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 379.423342][ T6391] IPVS: stop unused estimator thread 0... [ 380.109775][ T9028] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 381.581309][ T9028] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 381.831236][ T9028] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 382.392944][ T9185] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 382.392974][ T9185] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 382.475977][ T9176] input: syz0 as /devices/virtual/input/input19 [ 384.293965][ T9189] overlayfs: failed to resolve './file0/file0': -2 [ 384.344080][ T9014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.288441][ T9014] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.410455][ T9028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.431206][ T9028] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.486438][ T9028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 387.486463][ T9028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 387.567885][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.567968][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.570550][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.570723][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.634999][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.635094][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.636973][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.637072][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.151980][ T9014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.381145][ T5137] ------------[ cut here ]------------ [ 388.381158][ T5137] bochs-drm 0000:00:01.0: [drm] vblank wait timed out on crtc 0 [ 388.381172][ T5137] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x322/0x590, CPU#2: kworker/2:3/5137 [ 388.406449][ T5137] Modules linked in: [ 388.407972][ T5137] CPU: 2 UID: 0 PID: 5137 Comm: kworker/2:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.414167][ T5137] Tainted: [L]=SOFTLOCKUP [ 388.428779][ T5137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 388.443169][ T5137] Workqueue: events drm_fb_helper_damage_work [ 388.451218][ T5137] RIP: 0010:drm_crtc_wait_one_vblank+0x328/0x590 [ 388.454621][ T5137] Code: 48 8b 6b 50 48 85 ed 0f 84 dc 01 00 00 e8 90 74 35 fc 48 89 df e8 28 1f 92 00 48 89 c6 48 8d 3d 9e ff 7a 0b 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 52 f7 ff ff [ 388.484220][ T5137] RSP: 0000:ffffc90002dc7a40 EFLAGS: 00010293 [ 388.486840][ T5137] RAX: ffffffff8c9272a0 RBX: ffff8880243b40d0 RCX: 0000000000000000 [ 388.491596][ T5137] RDX: ffff888013d72a20 RSI: ffffffff8c9272a0 RDI: ffffffff9150ecf0 [ 388.497122][ T5137] RBP: ffff888013d72a20 R08: 0000000000000005 R09: 0000000000000000 [ 388.502619][ T5137] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888054604000 [ 388.511742][ T5137] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000036a5 [ 388.517097][ T5137] FS: 0000000000000000(0000) GS:ffff888096b60000(0000) knlGS:0000000000000000 [ 388.522496][ T5137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.525454][ T5137] CR2: 00007fbc990eb020 CR3: 0000000024e0a000 CR4: 0000000000352ef0 [ 388.530331][ T5137] Call Trace: [ 388.532155][ T5137] [ 388.533681][ T5137] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 388.537280][ T5137] ? __pfx_autoremove_wake_function+0x10/0x10 [ 388.540056][ T5137] ? lockdep_hardirqs_on+0x7d/0x110 [ 388.542469][ T5137] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 388.546566][ T5137] ? drm_vblank_get+0x14f/0x2d0 [ 388.550887][ T5137] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 388.554742][ T5137] drm_fb_helper_damage_work+0x2e2/0xab0 [ 388.558347][ T5137] ? process_one_work+0xa2c/0x1b10 [ 388.562761][ T5137] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 388.568510][ T5137] ? process_one_work+0x906/0x1b10 [ 388.583298][ T5137] ? process_one_work+0x906/0x1b10 [ 388.585673][ T5137] process_one_work+0xac7/0x1b10 [ 388.587685][ T5137] ? __pfx_process_one_work+0x10/0x10 [ 388.589897][ T5137] ? lock_acquire+0x1d1/0x380 [ 388.592231][ T5137] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 388.611598][ T5137] worker_thread+0x5ef/0xe50 [ 388.614508][ T5137] ? __pfx_worker_thread+0x10/0x10 [ 388.617164][ T5137] ? kthread+0x13a/0x450 [ 388.619100][ T5137] ? __pfx_worker_thread+0x10/0x10 [ 388.621630][ T5137] kthread+0x373/0x450 [ 388.624325][ T5137] ? __pfx_kthread+0x10/0x10 [ 388.626879][ T5137] ret_from_fork+0x730/0xd60 [ 388.637757][ T5137] ? __pfx_ret_from_fork+0x10/0x10 [ 388.641730][ T5137] ? __switch_to+0x800/0x10f0 [ 388.645262][ T5137] ? __pfx_kthread+0x10/0x10 [ 388.648798][ T5137] ret_from_fork_asm+0x1a/0x30 [ 388.652075][ T5137] [ 388.654242][ T5137] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 388.660025][ T5137] CPU: 2 UID: 0 PID: 5137 Comm: kworker/2:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.666795][ T5137] Tainted: [L]=SOFTLOCKUP [ 388.668676][ T5137] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 388.673489][ T5137] Workqueue: events drm_fb_helper_damage_work [ 388.685332][ T5137] Call Trace: [ 388.689558][ T5137] [ 388.690799][ T5137] dump_stack_lvl+0x100/0x190 [ 388.692926][ T5137] vpanic+0x553/0x970 [ 388.694633][ T5137] ? __pfx_vpanic+0x10/0x10 [ 388.699377][ T5137] panic+0xd1/0xe0 [ 388.707232][ T5137] ? __pfx_panic+0x10/0x10 [ 388.709526][ T5137] check_panic_on_warn.cold+0x19/0x34 [ 388.715820][ T5137] ? drm_crtc_wait_one_vblank+0x322/0x590 [ 388.718880][ T5137] __warn.cold+0x191/0x318 [ 388.727245][ T5137] __report_bug+0x30f/0x440 [ 388.729681][ T5137] ? drm_crtc_wait_one_vblank+0x322/0x590 [ 388.735907][ T5137] ? __pfx___report_bug+0x10/0x10 [ 388.738535][ T5137] ? lockdep_hardirqs_on+0x7d/0x110 [ 388.747785][ T5137] report_bug_entry+0xe2/0x290 [ 388.750722][ T5137] ? drm_crtc_wait_one_vblank+0x328/0x590 [ 388.755952][ T5137] handle_bug+0x1cd/0x2a0 [ 388.766195][ T5137] exc_invalid_op+0x17/0x50 [ 388.769753][ T5137] asm_exc_invalid_op+0x1a/0x20 [ 388.773063][ T5137] RIP: 0010:drm_crtc_wait_one_vblank+0x328/0x590 [ 388.776551][ T5137] Code: 48 8b 6b 50 48 85 ed 0f 84 dc 01 00 00 e8 90 74 35 fc 48 89 df e8 28 1f 92 00 48 89 c6 48 8d 3d 9e ff 7a 0b 44 89 e9 48 89 ea <67> 48 0f b9 3a 44 89 ee 4c 89 e7 41 be 92 ff ff ff e8 52 f7 ff ff [ 388.796745][ T5137] RSP: 0000:ffffc90002dc7a40 EFLAGS: 00010293 [ 388.807178][ T5137] RAX: ffffffff8c9272a0 RBX: ffff8880243b40d0 RCX: 0000000000000000 [ 388.810815][ T5137] RDX: ffff888013d72a20 RSI: ffffffff8c9272a0 RDI: ffffffff9150ecf0 [ 388.815542][ T5137] RBP: ffff888013d72a20 R08: 0000000000000005 R09: 0000000000000000 [ 388.828674][ T5137] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888054604000 [ 388.832518][ T5137] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000036a5 [ 388.838989][ T5137] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 388.846421][ T5137] ? __pfx_autoremove_wake_function+0x10/0x10 [ 388.849725][ T5137] ? lockdep_hardirqs_on+0x7d/0x110 [ 388.868203][ T5137] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 388.871200][ T5137] ? drm_vblank_get+0x14f/0x2d0 [ 388.873747][ T5137] drm_client_modeset_wait_for_vblank+0xef/0x120 [ 388.877380][ T5137] drm_fb_helper_damage_work+0x2e2/0xab0 [ 388.880596][ T5137] ? process_one_work+0xa2c/0x1b10 [ 388.883098][ T5137] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 388.896715][ T5137] ? process_one_work+0x906/0x1b10 [ 388.900202][ T5137] ? process_one_work+0x906/0x1b10 [ 388.903192][ T5137] process_one_work+0xac7/0x1b10 [ 388.905432][ T5137] ? __pfx_process_one_work+0x10/0x10 [ 388.907503][ T5137] ? lock_acquire+0x1d1/0x380 [ 388.917477][ T5137] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 388.920254][ T5137] worker_thread+0x5ef/0xe50 [ 388.922360][ T5137] ? __pfx_worker_thread+0x10/0x10 [ 388.938231][ T5137] ? kthread+0x13a/0x450 [ 388.940031][ T5137] ? __pfx_worker_thread+0x10/0x10 [ 388.942144][ T5137] kthread+0x373/0x450 [ 388.943810][ T5137] ? __pfx_kthread+0x10/0x10 [ 388.945645][ T5137] ret_from_fork+0x730/0xd60 [ 388.948395][ T5137] ? __pfx_ret_from_fork+0x10/0x10 [ 388.950973][ T5137] ? __switch_to+0x800/0x10f0 [ 388.956131][ T5137] ? __pfx_kthread+0x10/0x10 [ 388.971962][ T5137] ret_from_fork_asm+0x1a/0x30 [ 388.974647][ T5137] [ 390.405610][ T5137] Kernel Offset: disabled [ 390.408708][ T5137] Rebooting in 86400 seconds..