last executing test programs: 4m10.531549447s ago: executing program 0 (id=13): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 4m8.669411801s ago: executing program 0 (id=17): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='snd_aloop.0', 0xb) 4m8.43131191s ago: executing program 0 (id=18): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}}, 0x28}}, 0x0) 4m8.112105357s ago: executing program 0 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000300)={0x28, 0x1, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl(r2, 0x3b90, &(0x7f0000000600)="2800000000000000efbeadde0300000005") 4m6.83698929s ago: executing program 0 (id=24): creat(0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002a80)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) migrate_pages(0x0, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r4, 0x0, 0x8000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) write(r3, &(0x7f0000000180), 0x0) 4m3.590815427s ago: executing program 0 (id=27): unshare(0x2040400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) ppoll(&(0x7f0000000000)=[{r1, 0x10a}], 0x1, 0x0, 0x0, 0x0) 3m48.408838979s ago: executing program 32 (id=27): unshare(0x2040400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) ppoll(&(0x7f0000000000)=[{r1, 0x10a}], 0x1, 0x0, 0x0, 0x0) 1m30.501825361s ago: executing program 3 (id=550): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 1m29.304153902s ago: executing program 3 (id=552): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000)=0x7d8, 0x0}, 0x20) 1m27.643566386s ago: executing program 3 (id=555): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8005}, 0x0) ioctl$XFS_IOC_GETBMAPA(0xffffffffffffffff, 0xc020582c, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './mnt\x00'}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0xe4, 0x6, 0x2, {0x3, @sdr={0x38416761, 0x5a}}, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@rand_addr=0x64010102, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0xf, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000004) r2 = socket$key(0xf, 0x3, 0x2) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x198}, &(0x7f0000000100)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1m25.767398017s ago: executing program 3 (id=557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)={0x44, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x28, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x11, 0x1c, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x8000000000000000}, @generic='l']}]}, @nested={0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) 1m23.961477222s ago: executing program 3 (id=559): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x5) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000680)=0xaf00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m19.123507006s ago: executing program 3 (id=569): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8005}, 0x0) ioctl$XFS_IOC_GETBMAPA(0xffffffffffffffff, 0xc020582c, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './mnt\x00'}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0xe4, 0x6, 0x2, {0x3, @sdr={0x38416761, 0x5a}}, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@rand_addr=0x64010102, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0xf, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000004) r2 = socket$key(0xf, 0x3, 0x2) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x198}, &(0x7f0000000100)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1m4.077870957s ago: executing program 33 (id=569): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8005}, 0x0) ioctl$XFS_IOC_GETBMAPA(0xffffffffffffffff, 0xc020582c, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './mnt\x00'}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0xe4, 0x6, 0x2, {0x3, @sdr={0x38416761, 0x5a}}, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@rand_addr=0x64010102, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0xf, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4000004) r2 = socket$key(0xf, 0x3, 0x2) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x198}, &(0x7f0000000100)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 19.648769715s ago: executing program 2 (id=731): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r1, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='1\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r4, &(0x7f0000000400), 0x0) close(r4) r5 = openat(0xffffffffffffffff, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='1\n', 0x2) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='loop\n', 0x5) close(r6) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r7, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) 17.484818736s ago: executing program 6 (id=738): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 17.388354391s ago: executing program 7 (id=598): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0xa, 0x4e20, 0x2000007a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000002900000004000000840200040030"], 0x30}, 0x0) 17.239295044s ago: executing program 6 (id=740): socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 17.213501423s ago: executing program 7 (id=741): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8921, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x40003, 0xfffffffe, 0x4}) 16.184574673s ago: executing program 6 (id=743): socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x6258, &(0x7f0000004180)={0x0, 0x7, 0x80}) syz_io_uring_setup(0x3b87, &(0x7f0000000240)={0x0, 0x9b5, 0x40, 0x23, 0x2bc}, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00\x00&\x00'], 0x2c}}, 0x800) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000006c0)={0x0, 0x1, 0xac1d, 0x10000}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x200000003ff}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000240)={0x1, 0x2, 0x0, 0x9394}) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x14d4a1, 0xa2) recvmmsg(r2, &(0x7f0000007700), 0x0, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 13.541262416s ago: executing program 6 (id=745): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x53386000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) r4 = fanotify_init(0xef0, 0x2) fanotify_mark(r4, 0x105, 0x40009965, r3, 0x0) 13.509508298s ago: executing program 7 (id=746): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) r0 = io_uring_setup(0x7a4d, &(0x7f0000000040)={0x0, 0x9f13, 0x8, 0x4, 0xf2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 13.426335065s ago: executing program 2 (id=747): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000040)={0x0, 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x0) 12.87060613s ago: executing program 7 (id=749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x200) 12.235021289s ago: executing program 2 (id=751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xcd32) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 11.027702933s ago: executing program 2 (id=755): socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 10.889336442s ago: executing program 1 (id=757): socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x6258, &(0x7f0000004180)={0x0, 0x7, 0x80}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00\x00&\x00'], 0x2c}}, 0x800) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000006c0)={0x0, 0x1, 0xac1d, 0x10000}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x200000003ff}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000240)={0x1, 0x2, 0x0, 0x9394}) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x14d4a1, 0xa2) recvmmsg(r2, &(0x7f0000007700), 0x0, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 9.903979928s ago: executing program 2 (id=760): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 9.582834879s ago: executing program 1 (id=761): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) bind$inet(r0, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) 9.163303433s ago: executing program 2 (id=762): socket(0x8, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/drivers/ohci-platform/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='QEMU0001:00', 0xb) 8.088765418s ago: executing program 5 (id=764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000000000c00430002"], 0x34}}, 0x0) 7.843361253s ago: executing program 1 (id=765): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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") r1 = getpid() r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, &(0x7f00000011c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r3, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [], {0x4, 0x4}}, 0x24, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x4) write(0xffffffffffffffff, 0x0, 0x0) memfd_secret(0x80000) unlinkat(0xffffffffffffff9c, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0xe7b, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) 6.73175588s ago: executing program 4 (id=766): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0xfdef) 6.473334436s ago: executing program 1 (id=767): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x5) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000680)=0xaf00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:00.0/device\x00', 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 6.337084114s ago: executing program 5 (id=768): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$char_usb(r4, 0x0, 0x0) write$tcp_congestion(r4, 0x0, 0x0) dup2(r4, r0) openat$cgroup(r4, 0x0, 0x200002, 0x0) 6.175494909s ago: executing program 4 (id=769): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0xa, 0x4e20, 0x2000007a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3000000000000000290000000400000084020004003000030302"], 0x30}, 0x0) 5.190746272s ago: executing program 4 (id=770): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) 5.164547822s ago: executing program 5 (id=771): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000002540)=[{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000002640)="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", 0x152}, {&(0x7f0000000540)="6c6215e6bd619b8dd9c917076a21", 0xe}], 0x2, &(0x7f0000001900)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4810}], 0x1, 0x4048884) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 5.010591592s ago: executing program 6 (id=772): socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 4.887878607s ago: executing program 1 (id=773): socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x6258, &(0x7f0000004180)={0x0, 0x7, 0x80}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00\x00&\x00'], 0x2c}}, 0x800) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000006c0)={0x0, 0x1, 0xac1d, 0x10000}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x200000003ff}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000240)={0x1, 0x2, 0x0, 0x9394}) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x14d4a1, 0xa2) recvmmsg(r2, &(0x7f0000007700), 0x0, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 4.775796298s ago: executing program 4 (id=774): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x53386000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tkill(0x0, 0x2a) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) r5 = fanotify_init(0xef0, 0x2) fanotify_mark(r5, 0x105, 0x40009965, r4, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) openat$vcsu(0xffffffffffffff9c, 0x0, 0x600, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) 4.567323197s ago: executing program 7 (id=775): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 3.791335101s ago: executing program 6 (id=776): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r1, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='1\n', 0x2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='./', 0x2) close(r4) r5 = openat(0xffffffffffffffff, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='1\n', 0x2) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='loop\n', 0x5) close(r6) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r7, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) 3.73266596s ago: executing program 5 (id=777): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x2) fcntl$notify(r3, 0x402, 0x8000000e) 2.706080381s ago: executing program 4 (id=778): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', 0x0, 0x0, 0x0, &(0x7f0000000400)='\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='md0\n', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x42, 0x1ff) ftruncate(r4, 0x200000) 1.652429399s ago: executing program 5 (id=779): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/loopback\x00', 0x1ff) 1.120727782s ago: executing program 1 (id=780): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000)=0x7d8, 0x0}, 0x20) 215.313356ms ago: executing program 4 (id=781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, 0x0) timer_create(0x2, 0x0, &(0x7f00000006c0)=0x0) timer_settime(r4, 0x0, &(0x7f0000000700)={{0x0, 0x3938700}}, &(0x7f0000000740)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 293.849µs ago: executing program 7 (id=782): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0xa, 0x4e20, 0x2000007a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="3000000000000000290000000400000084020004003000030302"], 0x30}, 0x0) 0s ago: executing program 5 (id=783): fanotify_init(0x11, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x10, 0x200, &(0x7f0000000540)="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"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts. [ 71.669536][ T5594] cgroup: Unknown subsys name 'net' [ 71.786983][ T5594] cgroup: Unknown subsys name 'cpuset' [ 71.797568][ T5594] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.290367][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.742289][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.753500][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.762199][ T5628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.771015][ T5628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.772764][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.779107][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.793062][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.793679][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.801145][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 77.807961][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.818694][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.824378][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.836206][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.837684][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 77.844403][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.852116][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.858196][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.864801][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 77.873013][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.878756][ T5628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.885553][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.895457][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 77.900689][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.906247][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.914704][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.919930][ T5628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.926932][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.936636][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 77.941462][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.966485][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.022866][ T5625] Bluetooth: hci1: command tx timeout [ 80.022871][ T4923] Bluetooth: hci5: command tx timeout [ 80.023036][ T5625] Bluetooth: hci4: command tx timeout [ 80.028720][ T4923] Bluetooth: hci2: command tx timeout [ 80.034144][ T5625] Bluetooth: hci3: command tx timeout [ 80.039768][ T5611] Bluetooth: hci0: command tx timeout [ 80.335479][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.343255][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.350517][ T5608] bridge_slave_0: entered allmulticast mode [ 80.358420][ T5608] bridge_slave_0: entered promiscuous mode [ 80.386008][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.393162][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.400488][ T5610] bridge_slave_0: entered allmulticast mode [ 80.408210][ T5610] bridge_slave_0: entered promiscuous mode [ 80.435013][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.442186][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.449686][ T5608] bridge_slave_1: entered allmulticast mode [ 80.457104][ T5608] bridge_slave_1: entered promiscuous mode [ 80.464532][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.471641][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.478868][ T5609] bridge_slave_0: entered allmulticast mode [ 80.486318][ T5609] bridge_slave_0: entered promiscuous mode [ 80.501014][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.508171][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.515708][ T5610] bridge_slave_1: entered allmulticast mode [ 80.523311][ T5610] bridge_slave_1: entered promiscuous mode [ 80.557426][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.564639][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.571757][ T5609] bridge_slave_1: entered allmulticast mode [ 80.579336][ T5609] bridge_slave_1: entered promiscuous mode [ 80.695048][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.729672][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.737092][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.745181][ T5606] bridge_slave_0: entered allmulticast mode [ 80.752816][ T5606] bridge_slave_0: entered promiscuous mode [ 80.763607][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.785029][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.792137][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.799462][ T5605] bridge_slave_0: entered allmulticast mode [ 80.807451][ T5605] bridge_slave_0: entered promiscuous mode [ 80.817292][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.829036][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.841530][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.863832][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.870949][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.878651][ T5606] bridge_slave_1: entered allmulticast mode [ 80.886172][ T5606] bridge_slave_1: entered promiscuous mode [ 80.895443][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.933809][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.940985][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.948773][ T5607] bridge_slave_0: entered allmulticast mode [ 80.956908][ T5607] bridge_slave_0: entered promiscuous mode [ 80.965267][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.972856][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.981277][ T5605] bridge_slave_1: entered allmulticast mode [ 80.989574][ T5605] bridge_slave_1: entered promiscuous mode [ 81.091137][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.099475][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.107970][ T5607] bridge_slave_1: entered allmulticast mode [ 81.116123][ T5607] bridge_slave_1: entered promiscuous mode [ 81.142241][ T5608] team0: Port device team_slave_0 added [ 81.158732][ T5608] team0: Port device team_slave_1 added [ 81.167434][ T5609] team0: Port device team_slave_0 added [ 81.191997][ T5610] team0: Port device team_slave_0 added [ 81.217449][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.245292][ T5609] team0: Port device team_slave_1 added [ 81.254159][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.266934][ T5610] team0: Port device team_slave_1 added [ 81.289391][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.325435][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.349188][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.371534][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.378578][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.404578][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.455689][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.477204][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.484227][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.510526][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.522672][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.529664][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.555612][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.578927][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.586034][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.612707][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.641150][ T5605] team0: Port device team_slave_0 added [ 81.649873][ T5605] team0: Port device team_slave_1 added [ 81.668872][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.675856][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.701977][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.715130][ T5606] team0: Port device team_slave_0 added [ 81.721640][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.728646][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.754706][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.813504][ T5606] team0: Port device team_slave_1 added [ 81.828799][ T5607] team0: Port device team_slave_0 added [ 81.844495][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.851489][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.877909][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.890493][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.897707][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.923917][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.965736][ T5607] team0: Port device team_slave_1 added [ 82.008642][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.015630][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.043038][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.097964][ T5609] hsr_slave_0: entered promiscuous mode [ 82.103687][ T5611] Bluetooth: hci4: command tx timeout [ 82.103721][ T5611] Bluetooth: hci5: command tx timeout [ 82.103753][ T5611] Bluetooth: hci1: command tx timeout [ 82.103904][ T4923] Bluetooth: hci3: command tx timeout [ 82.111005][ T5609] hsr_slave_1: entered promiscuous mode [ 82.115832][ T4923] Bluetooth: hci2: command tx timeout [ 82.120326][ T5623] Bluetooth: hci0: command tx timeout [ 82.143914][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.150847][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.177038][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.217144][ T5608] hsr_slave_0: entered promiscuous mode [ 82.223822][ T5608] hsr_slave_1: entered promiscuous mode [ 82.230122][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 82.236083][ T5608] Cannot create hsr debugfs directory [ 82.272842][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.280001][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.306356][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.349299][ T5610] hsr_slave_0: entered promiscuous mode [ 82.356145][ T5610] hsr_slave_1: entered promiscuous mode [ 82.362320][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 82.368714][ T5610] Cannot create hsr debugfs directory [ 82.377361][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.384414][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.410588][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.451435][ T5605] hsr_slave_0: entered promiscuous mode [ 82.457870][ T5605] hsr_slave_1: entered promiscuous mode [ 82.464368][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 82.470101][ T5605] Cannot create hsr debugfs directory [ 82.524781][ T5606] hsr_slave_0: entered promiscuous mode [ 82.531236][ T5606] hsr_slave_1: entered promiscuous mode [ 82.537690][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 82.543538][ T5606] Cannot create hsr debugfs directory [ 82.715540][ T5607] hsr_slave_0: entered promiscuous mode [ 82.721921][ T5607] hsr_slave_1: entered promiscuous mode [ 82.728254][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 82.734189][ T5607] Cannot create hsr debugfs directory [ 83.343573][ T5609] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.356912][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.364943][ T5609] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.375520][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.383703][ T5609] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.393432][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.401229][ T5609] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.411408][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.485077][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.496752][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.505090][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.515020][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.524396][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.535150][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.543302][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.552606][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.655362][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.666095][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.674829][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.685748][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.693859][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.704523][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.726147][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.737634][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.845422][ T5605] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.856534][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.870134][ T5605] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.880343][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.894932][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.902176][ T5605] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.913675][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.921656][ T5605] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.931341][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.995836][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.030572][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.037909][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.051954][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.107378][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.114530][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.124848][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.135100][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.154504][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.165398][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.182773][ T5623] Bluetooth: hci2: command tx timeout [ 84.183118][ T5611] Bluetooth: hci3: command tx timeout [ 84.188191][ T5625] Bluetooth: hci1: command tx timeout [ 84.193548][ T4923] Bluetooth: hci0: command tx timeout [ 84.193581][ T4923] Bluetooth: hci5: command tx timeout [ 84.199088][ T5628] Bluetooth: hci4: command tx timeout [ 84.216930][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.227523][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.235540][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.246289][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.255354][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.308952][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.316091][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.332241][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.339350][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.434763][ T5607] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.444947][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.464633][ T5607] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.475567][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.495251][ T5607] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.507278][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.518932][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.538695][ T5607] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.549294][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.661382][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.716608][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.723769][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.751942][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.815066][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.822230][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.880135][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.928948][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.936222][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.022121][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.029358][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.098444][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.217101][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.256883][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.360398][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.371383][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.378552][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.428688][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.435857][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.481256][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.536752][ T527] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.543946][ T527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.629980][ T527] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.637182][ T527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.964424][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.037318][ T186] cfg80211: failed to load regulatory.db [ 86.239094][ T5610] veth0_vlan: entered promiscuous mode [ 86.266609][ T5623] Bluetooth: hci0: command tx timeout [ 86.266660][ T5626] Bluetooth: hci1: command tx timeout [ 86.272263][ T5625] Bluetooth: hci3: command tx timeout [ 86.277894][ T5611] Bluetooth: hci2: command tx timeout [ 86.277946][ T4923] Bluetooth: hci4: command tx timeout [ 86.285831][ T5628] Bluetooth: hci5: command tx timeout [ 86.350445][ T5610] veth1_vlan: entered promiscuous mode [ 86.467095][ T5609] veth0_vlan: entered promiscuous mode [ 86.520576][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.534056][ T5609] veth1_vlan: entered promiscuous mode [ 86.549497][ T5610] veth0_macvtap: entered promiscuous mode [ 86.610863][ T5610] veth1_macvtap: entered promiscuous mode [ 86.739160][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.775815][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.791063][ T5609] veth0_macvtap: entered promiscuous mode [ 86.846684][ T5609] veth1_macvtap: entered promiscuous mode [ 86.877874][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.920249][ T5608] veth0_vlan: entered promiscuous mode [ 86.978394][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.018430][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.056292][ T5608] veth1_vlan: entered promiscuous mode [ 87.094996][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.177694][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.216772][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.255216][ T1137] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.255478][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.288905][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.401251][ T5608] veth0_macvtap: entered promiscuous mode [ 87.427172][ T5608] veth1_macvtap: entered promiscuous mode [ 87.443654][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.454104][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.491945][ T5607] veth0_vlan: entered promiscuous mode [ 87.514841][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.535148][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.567879][ T5610] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.604312][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.606022][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.614031][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.629857][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.666395][ T5607] veth1_vlan: entered promiscuous mode [ 87.707383][ T5606] veth0_vlan: entered promiscuous mode [ 87.716903][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.777518][ T5605] veth0_vlan: entered promiscuous mode [ 87.807894][ T5606] veth1_vlan: entered promiscuous mode [ 87.888027][ T5605] veth1_vlan: entered promiscuous mode [ 87.922729][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.512669][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.521799][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.579666][ T5607] veth0_macvtap: entered promiscuous mode [ 88.624652][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 88.637095][ T5606] veth0_macvtap: entered promiscuous mode [ 88.676629][ T5607] veth1_macvtap: entered promiscuous mode [ 88.697519][ T5606] veth1_macvtap: entered promiscuous mode [ 88.790980][ T5605] veth0_macvtap: entered promiscuous mode [ 88.811102][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.822077][ T527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.837821][ T29] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 88.873684][ T527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.881958][ T5605] veth1_macvtap: entered promiscuous mode [ 88.896783][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 88.923555][ T29] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 88.960427][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.974533][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.028752][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.069837][ T29] usb 6-1: Product: syz [ 89.096451][ T29] usb 6-1: Manufacturer: syz [ 89.121321][ T29] usb 6-1: SerialNumber: syz [ 89.156976][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.231654][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.283017][ T527] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.373501][ T527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.381453][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.415929][ T527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.450580][ T29] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 89.544530][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.572712][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.677249][ C1] usblp0: nonzero read bulk status received: -71 [ 89.685290][ T29] usb 6-1: USB disconnect, device number 2 [ 89.693904][ T5847] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.771629][ T29] usblp0: removed [ 89.899280][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.911782][ T5847] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 89.976477][ T5847] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 90.031711][ T5847] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 90.321602][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.330039][ T74] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.342182][ T74] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.349969][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.363683][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.372659][ T5847] usb 2-1: Product: syz [ 90.377946][ T5847] usb 2-1: Manufacturer: syz [ 90.386993][ T5847] usb 2-1: SerialNumber: syz [ 90.405126][ T5847] usb 2-1: config 0 descriptor?? [ 91.109023][ T5847] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 91.171802][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.191327][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.334419][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.342915][ T1162] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.350853][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.365489][ T1162] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.459893][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.474602][ T1104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.505035][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.868888][ T5880] netlink: 52 bytes leftover after parsing attributes in process `syz.5.14'. [ 92.963501][ T1137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.990218][ T5847] usb 2-1: USB disconnect, device number 2 [ 93.053994][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.093750][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.192686][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.257834][ T527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.266235][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.304298][ T527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.316278][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.446288][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.672841][ T527] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.147805][ T5903] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 94.255373][ T74] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.921315][ T1104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.119198][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.164828][ T5911] futex_wake_op: syz.1.22 tries to shift op by 144; fix this program [ 96.711825][ T5919] netlink: 52 bytes leftover after parsing attributes in process `syz.0.24'. [ 97.713345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.584823][ T5932] input: syz0 as /devices/virtual/input/input5 [ 99.615031][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.30'. [ 99.797579][ T5743] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.185683][ T5743] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 100.686936][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.860001][ T5743] usb 3-1: Product: syz [ 100.903037][ T5751] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.974183][ T5743] usb 3-1: Manufacturer: syz [ 101.080641][ T5743] usb 3-1: SerialNumber: syz [ 101.263665][ T5751] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 101.519479][ T5751] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 101.810559][ T5751] usb 5-1: config 0 interface 0 has no altsetting 0 [ 102.075202][ T5751] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 102.283312][ T5751] usb 5-1: Product: syz [ 102.383066][ T5751] usb 5-1: Manufacturer: syz [ 102.508381][ T5751] usb 5-1: SerialNumber: syz [ 102.621705][ T36] nvmet: connect request for invalid subsystem testsubsys! [ 102.632784][ T5751] usb 5-1: config 0 descriptor?? [ 102.717973][ T5938] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 102.803118][ T5743] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 102.865912][ T5751] usb 5-1: can't set config #0, error -71 [ 102.874820][ T5743] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 102.910324][ T5751] usb 5-1: USB disconnect, device number 2 [ 102.932313][ T5743] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 103.010825][ T5743] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 103.048464][ T5628] Bluetooth: hci0: unexpected event 0x2f length: 1017 > 255 [ 103.109335][ T5743] usb 3-1: USB disconnect, device number 2 [ 103.611519][ T5959] futex_wake_op: syz.4.38 tries to shift op by 144; fix this program [ 103.662052][ T5961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.472619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 105.190968][ T5966] netlink: 52 bytes leftover after parsing attributes in process `syz.3.39'. [ 105.802960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 106.212527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 109.922681][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.44'. [ 109.933658][ T5984] netlink: 'syz.5.44': attribute type 30 has an invalid length. [ 109.972651][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.44'. [ 110.031847][ T5985] netlink: 'syz.5.44': attribute type 30 has an invalid length. [ 110.053122][ T48] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.109893][ T48] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.152053][ T5988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'. [ 110.552770][ T527] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.640763][ T5985] Zero length message leads to an empty skb [ 110.691379][ T527] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.428175][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.981895][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 112.116408][ T9] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 112.325634][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 112.465151][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 112.599341][ T9] usb 3-1: Product: syz [ 112.657338][ T9] usb 3-1: Manufacturer: syz [ 112.746664][ T9] usb 3-1: SerialNumber: syz [ 113.122496][ T9] usb 3-1: config 0 descriptor?? [ 113.375183][ T9] usb 3-1: can't set config #0, error -71 [ 113.428526][ T9] usb 3-1: USB disconnect, device number 3 [ 113.905630][ T6008] futex_wake_op: syz.5.52 tries to shift op by 144; fix this program [ 114.104851][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 114.117514][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 114.125580][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 114.133985][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 114.141833][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 115.276182][ T6036] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 116.184638][ T5625] Bluetooth: hci6: command tx timeout [ 116.216535][ T6057] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.60'. [ 116.334237][ T6059] process 'syz.1.59' launched './file0' with NULL argv: empty string added [ 116.384056][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.691911][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.000078][ T6073] futex_wake_op: syz.3.66 tries to shift op by 144; fix this program [ 117.618245][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.738699][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.315637][ T5625] Bluetooth: hci6: command tx timeout [ 119.194465][ T6098] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.572801][ T5613] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 120.163796][ T13] bridge_slave_1: left allmulticast mode [ 120.198094][ T13] bridge_slave_1: left promiscuous mode [ 120.209334][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.216273][ T6088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.261077][ T13] bridge_slave_0: left allmulticast mode [ 120.265008][ T6088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.288835][ T13] bridge_slave_0: left promiscuous mode [ 120.312763][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.345066][ T5613] usb 3-1: unable to get BOS descriptor or descriptor too short [ 120.373118][ T5613] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 120.399864][ T5613] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 120.420432][ T5613] usb 3-1: can't read configurations, error -71 [ 120.427994][ T5625] Bluetooth: hci6: command tx timeout [ 121.970806][ T6137] futex_wake_op: syz.2.80 tries to shift op by 144; fix this program [ 122.509641][ T5625] Bluetooth: hci6: command tx timeout [ 123.572839][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.81'. [ 123.583057][ T6142] mmap: syz.4.81 (6142) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 123.700072][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.785716][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.806216][ T13] bond0 (unregistering): Released all slaves [ 123.955527][ T5268] 8021q: adding VLAN 0 to HW filter on device eth1 [ 124.465377][ T6160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.272233][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.298748][ T5942] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 125.311373][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.335075][ T6010] bridge_slave_0: entered allmulticast mode [ 125.348517][ T6010] bridge_slave_0: entered promiscuous mode [ 125.439768][ T6177] futex_wake_op: syz.4.93 tries to shift op by 144; fix this program [ 125.972458][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 126.400076][ T6167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.410034][ T6167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.429244][ T5942] usb 2-1: unable to get BOS descriptor or descriptor too short [ 126.533128][ T13] hsr_slave_0: left promiscuous mode [ 126.768527][ T5942] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 126.781989][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.95'. [ 126.796081][ T5942] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 126.805499][ T5942] usb 2-1: can't read configurations, error -71 [ 126.816618][ T10] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 126.830988][ T13] hsr_slave_1: left promiscuous mode [ 126.835272][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 126.856299][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 126.856518][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.885273][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.903522][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.911406][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 126.927499][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.935859][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.942022][ T6191] syz.5.98 uses obsolete (PF_INET,SOCK_PACKET) [ 126.952431][ T10] usb 4-1: Product: syz [ 126.963073][ T10] usb 4-1: Manufacturer: syz [ 126.970137][ T13] veth1_macvtap: left promiscuous mode [ 126.977947][ T10] usb 4-1: SerialNumber: syz [ 126.980308][ T13] veth0_macvtap: left promiscuous mode [ 126.995216][ T13] veth1_vlan: left promiscuous mode [ 127.000205][ T10] usb 4-1: config 0 descriptor?? [ 127.015949][ T13] veth0_vlan: left promiscuous mode [ 127.023415][ T10] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 127.248688][ T10] usb 4-1: USB disconnect, device number 2 [ 127.467308][ T6204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.103'. [ 127.628343][ T13] team0 (unregistering): Port device team_slave_1 removed [ 127.652195][ T13] team0 (unregistering): Port device team_slave_0 removed [ 128.566930][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.584926][ T5625] Bluetooth: hci1: ISO packet for unknown connection handle 1559 [ 128.611448][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.630200][ T6010] bridge_slave_1: entered allmulticast mode [ 128.643386][ T6010] bridge_slave_1: entered promiscuous mode [ 128.961977][ T6010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.033573][ T6010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.181484][ T6010] team0: Port device team_slave_0 added [ 129.207376][ T6010] team0: Port device team_slave_1 added [ 129.392510][ T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 129.395839][ T6242] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.419341][ T6010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.439636][ T6010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.531740][ T6010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.580724][ T6010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.607946][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.631687][ T6010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.666247][ T6253] Illegal XDP return value 4294967282 on prog (id 14) dev N/A, expect packet loss! [ 129.683041][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.690923][ T6010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.839992][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 129.879949][ T9] usb 6-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 129.975983][ T9] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 130.009376][ T9] usb 6-1: can't read configurations, error -71 [ 130.765903][ T6010] hsr_slave_0: entered promiscuous mode [ 130.802219][ T6010] hsr_slave_1: entered promiscuous mode [ 130.835134][ T6010] debugfs: 'hsr0' already exists in 'hsr' [ 130.861188][ T6010] Cannot create hsr debugfs directory [ 132.113021][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.126724][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.667794][ T5268] 8021q: adding VLAN 0 to HW filter on device eth2 [ 133.630190][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.138'. [ 133.705238][ T6010] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 133.799526][ T6010] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.894287][ T6010] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 133.990413][ T6010] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 134.018145][ T6010] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 134.055199][ T6010] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 134.074653][ T6010] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 134.122963][ T6010] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 135.874526][ T6010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.930489][ T6010] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.992933][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.000137][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.080381][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.087744][ T5907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.889091][ T5268] 8021q: adding VLAN 0 to HW filter on device eth3 [ 138.046099][ T6384] loop2: detected capacity change from 0 to 7 [ 138.179621][ T6384] Dev loop2: unable to read RDB block 7 [ 138.257240][ T6384] loop2: AHDI p1 p2 p3 [ 138.313534][ T6384] loop2: partition table partially beyond EOD, truncated [ 138.348713][ T6384] loop2: p1 start 1601398130 is beyond EOD, truncated [ 138.397428][ T6384] loop2: p2 start 1702059890 is beyond EOD, truncated [ 138.649914][ T6400] overlayfs: upper fs does not support file handles, falling back to index=off. [ 138.740208][ T6010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.797033][ T6426] CIFS mount error: No usable UNC path provided in device string! [ 139.797033][ T6426] [ 139.807761][ T6426] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 140.499647][ T5268] 8021q: adding VLAN 0 to HW filter on device eth4 [ 142.930514][ T6010] veth0_vlan: entered promiscuous mode [ 145.335524][ T6010] veth1_vlan: entered promiscuous mode [ 145.637145][ T6010] veth0_macvtap: entered promiscuous mode [ 145.681543][ T6462] loop2: detected capacity change from 0 to 7 [ 145.699568][ T6010] veth1_macvtap: entered promiscuous mode [ 145.748327][ T6462] Dev loop2: unable to read RDB block 7 [ 145.805837][ T6462] loop2: AHDI p1 p2 p3 [ 145.815112][ T6010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.849673][ T6462] loop2: partition table partially beyond EOD, truncated [ 145.901059][ T6462] loop2: p1 start 1601398130 is beyond EOD, truncated [ 145.911321][ T6010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.954179][ T6462] loop2: p2 start 1702059890 is beyond EOD, truncated [ 145.983869][ T527] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.093969][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.155643][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.234230][ T527] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.206818][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.237631][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.488452][ T6141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.526304][ T6141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.180027][ T6515] tipc: Started in network mode [ 151.205971][ T6515] tipc: Node identity 1000001, cluster identity 4369 [ 151.437233][ T6515] tipc: Node number set to 16777217 [ 152.062997][ T6521] tipc: New replicast peer: 127.0.0.1 [ 152.116624][ T6521] tipc: Enabled bearer , priority 10 [ 154.852485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 155.271629][ T6539] syz.4.194 (6539) used greatest stack depth: 18088 bytes left [ 155.822642][ T30] audit: type=1804 audit(1787298981.520:2): pid=6558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.200" name="bus" dev="ramfs" ino=11964 res=1 errno=0 [ 158.731221][ T30] audit: type=1800 audit(1787298984.430:3): pid=6558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.200" name="bus" dev="ramfs" ino=11964 res=0 errno=0 [ 162.925192][ T6615] bridge1: entered promiscuous mode [ 164.682704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 166.293812][ T6648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.586017][ T5942] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 168.843930][ T5942] usb 7-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 168.888266][ T5942] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.945038][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.988913][ T5942] usb 7-1: Product: syz [ 169.010191][ T5942] usb 7-1: Manufacturer: syz [ 169.031899][ T5942] usb 7-1: SerialNumber: syz [ 169.111347][ T5942] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 169.305877][ T5942] gspca_mr97310a: reg read [21] error -71 [ 169.335573][ T5942] mr97310a 7-1:1.0: probe with driver mr97310a failed with error -71 [ 169.441183][ T5942] usb 7-1: USB disconnect, device number 2 [ 169.502716][ T5743] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 169.529673][ T6677] overlayfs: failed lookup in lower (newroot/42, name='file0', err=-40): overlapping layers [ 169.885334][ T5743] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 170.183092][ T5743] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.268261][ T5743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.289873][ T5743] usb 3-1: config 0 descriptor?? [ 170.325791][ T5743] pwc: Askey VC010 type 2 USB webcam detected. [ 170.767743][ T5743] pwc: recv_control_msg error -32 req 02 val 2b00 [ 170.805390][ T5743] pwc: recv_control_msg error -32 req 02 val 2700 [ 170.842739][ T5743] pwc: recv_control_msg error -32 req 02 val 2c00 [ 170.879245][ T5743] pwc: recv_control_msg error -32 req 04 val 1000 [ 170.915842][ T5743] pwc: recv_control_msg error -32 req 04 val 1300 [ 170.947412][ T5743] pwc: recv_control_msg error -32 req 04 val 1400 [ 170.990912][ T5743] pwc: recv_control_msg error -32 req 02 val 2000 [ 171.237156][ T5743] pwc: recv_control_msg error -32 req 04 val 1500 [ 172.382397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 172.472405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 172.652390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 172.773093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 173.724481][ T5743] pwc: recv_control_msg error -71 req 02 val 2400 [ 173.764794][ T5743] pwc: recv_control_msg error -71 req 02 val 2600 [ 173.806678][ T5743] pwc: recv_control_msg error -71 req 02 val 2900 [ 173.856350][ T5743] pwc: recv_control_msg error -71 req 02 val 2800 [ 173.890876][ T5743] pwc: recv_control_msg error -71 req 04 val 1100 [ 173.917352][ T5743] pwc: recv_control_msg error -71 req 04 val 1200 [ 174.034424][ T5743] pwc: Registered as video103. [ 174.114004][ T5743] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 174.947308][ T5743] usb 3-1: USB disconnect, device number 6 [ 175.643134][ T5751] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 175.873175][ T5751] usb 7-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 175.949713][ T5751] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.039459][ T5751] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.105148][ T5751] usb 7-1: Product: syz [ 176.132125][ T5751] usb 7-1: Manufacturer: syz [ 176.191821][ T5751] usb 7-1: SerialNumber: syz [ 176.362315][ T5751] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 176.545617][ T5751] gspca_mr97310a: reg read [21] error -71 [ 176.579927][ T5751] mr97310a 7-1:1.0: probe with driver mr97310a failed with error -71 [ 176.710371][ T5751] usb 7-1: USB disconnect, device number 3 [ 176.882495][ T5743] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 177.107067][ T5743] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 177.180225][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.560403][ T5743] dln2 5-1:1.0: USB write failed: -110 [ 177.567332][ C1] dln2 5-1:1.0: size mismatch: handle 2101 cmd 10 echo dc00 size 14 actual 8 [ 177.599652][ T5743] dln2 5-1:1.0: failed to initialize hardware [ 177.635791][ T5743] dln2 5-1:1.0: probe with driver dln2 failed with error -110 [ 178.527551][ T5743] usb 5-1: USB disconnect, device number 3 [ 179.142706][ T5942] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 180.014698][ T5942] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 180.085239][ T5942] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 180.129138][ T5942] usb 3-1: config 0 interface 0 has no altsetting 0 [ 180.159323][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.225082][ T5942] usb 3-1: config 0 descriptor?? [ 180.259480][ T6772] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 180.913225][ T10] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 181.078373][ T5942] hid (null): unknown global tag 0xd [ 181.118911][ T5942] hid (null): bogus close delimiter [ 181.130522][ T6791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.237797][ T5942] waterforce 0003:1044:7A4D.0001: unexpected long global item [ 181.247970][ T6791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.284346][ T5942] waterforce 0003:1044:7A4D.0001: hid parse failed with -22 [ 181.349211][ T5942] waterforce 0003:1044:7A4D.0001: probe with driver waterforce failed with error -22 [ 181.441251][ T5942] usb 3-1: USB disconnect, device number 7 [ 181.512457][ T5773] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 181.734948][ T5773] usb 4-1: Using ep0 maxpacket: 16 [ 181.760272][ T5773] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 181.800615][ T5773] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 181.809959][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 181.841641][ T10] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 181.861257][ T5773] usb 4-1: config 0 has no interface number 0 [ 181.891006][ T6813] 9p: Could not find request transport: fd00000000000000000004 [ 181.893230][ T5773] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 181.903233][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 181.936334][ T6817] Bluetooth: MGMT ver 1.23 [ 181.957427][ T10] usb 5-1: can't read configurations, error -71 [ 181.977682][ T5773] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 182.045799][ T5773] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.096283][ T5773] usb 4-1: Product: syz [ 182.106327][ T6817] netlink: 40 bytes leftover after parsing attributes in process `syz.6.266'. [ 182.130959][ T5773] usb 4-1: Manufacturer: syz [ 182.157857][ T5773] usb 4-1: SerialNumber: syz [ 182.209370][ T5773] usb 4-1: config 0 descriptor?? [ 182.244334][ T6798] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 182.323702][ T6798] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 182.604602][ T6798] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 182.894325][ T6798] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 183.013004][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 183.202326][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 183.260003][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 183.285803][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 183.309643][ T9] usb 2-1: config 220 has no interface number 2 [ 183.324466][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 183.363409][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 183.390221][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 183.424968][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 183.468230][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.485099][ T9] usb 2-1: Product: syz [ 183.493228][ T9] usb 2-1: Manufacturer: syz [ 183.500273][ T9] usb 2-1: SerialNumber: syz [ 183.558188][ T5773] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 183.610637][ T5773] asix 4-1:0.34: probe with driver asix failed with error -71 [ 183.666205][ T5773] usb 4-1: USB disconnect, device number 3 [ 183.782054][ T9] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 183.810777][ T9] uvcvideo 2-1:220.0: No valid video chain found. [ 183.870930][ T9] usb 2-1: selecting invalid altsetting 0 [ 183.970733][ T9] usb 2-1: selecting invalid altsetting 0 [ 184.012890][ T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 184.069473][ T9] usb 2-1: USB disconnect, device number 5 [ 184.214593][ T6851] 9pnet_fd: Insufficient options for proto=fd [ 188.177853][ T6883] 9pnet_fd: Insufficient options for proto=fd [ 189.684465][ T6900] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 191.521840][ T6933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.313'. [ 191.754887][ T6938] 9pnet_fd: Insufficient options for proto=fd [ 192.873874][ T6958] program syz.3.322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.098388][ T6962] futex_wake_op: syz.4.323 tries to shift op by 144; fix this program [ 193.554874][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.967626][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.724047][ T5773] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 194.893329][ T5773] usb 5-1: device descriptor read/64, error -71 [ 195.154882][ T5773] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 195.333675][ T5773] usb 5-1: device descriptor read/64, error -71 [ 195.546228][ T5773] usb usb5-port1: attempt power cycle [ 196.078211][ T5773] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 196.145161][ T5773] usb 5-1: device descriptor read/8, error -71 [ 196.339104][ T6999] netlink: 'syz.1.337': attribute type 2 has an invalid length. [ 196.702500][ T5773] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 196.745148][ T5773] usb 5-1: device descriptor read/8, error -71 [ 197.139674][ T5773] usb usb5-port1: unable to enumerate USB device [ 197.297293][ T7005] futex_wake_op: syz.3.338 tries to shift op by 144; fix this program [ 200.774547][ T5629] Bluetooth: hci5: command 0x0406 tx timeout [ 200.774577][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 200.780609][ T5623] Bluetooth: hci1: command 0x0406 tx timeout [ 200.786599][ T5632] Bluetooth: hci4: command 0x0406 tx timeout [ 200.786656][ T5618] Bluetooth: hci0: command 0x0406 tx timeout [ 202.094291][ T7047] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 202.963422][ T7055] 9p: Bad value for 'wfdno' [ 203.282891][ T5773] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 203.732258][ T5773] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 204.262160][ T5773] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 204.291313][ T5773] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 204.316232][ T5773] usb 6-1: config 220 has no interface number 2 [ 204.323386][ T5773] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 204.343161][ T5773] usb 6-1: config 220 interface 0 has no altsetting 0 [ 204.359173][ T5773] usb 6-1: config 220 interface 76 has no altsetting 0 [ 204.391678][ T5773] usb 6-1: config 220 interface 1 has no altsetting 0 [ 204.428290][ T5773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.459268][ T5773] usb 6-1: Product: syz [ 204.475679][ T5773] usb 6-1: Manufacturer: syz [ 204.631435][ T7086] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.747060][ T5773] usb 6-1: SerialNumber: syz [ 204.927753][ T7087] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.372'. [ 205.645129][ T5773] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 205.683993][ T5773] uvcvideo 6-1:220.0: No valid video chain found. [ 205.726526][ T5773] usb 6-1: selecting invalid altsetting 0 [ 205.791885][ T5773] usb 6-1: selecting invalid altsetting 0 [ 205.829474][ T5773] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 205.875989][ T5773] usb 6-1: USB disconnect, device number 5 [ 205.929477][ T7104] 9pnet_fd: Insufficient options for proto=fd [ 207.086039][ T6382] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:74d9b7fb-ea54-4faf-9d42-4afa661678fd. [ 207.141477][ T7102] nvme nvme0: creating 2 I/O queues. [ 207.187656][ T7102] nvme nvme0: new ctrl: "testsubsys" [ 207.340673][ T7126] loop2: detected capacity change from 0 to 7 [ 207.370450][ T7126] Dev loop2: unable to read RDB block 7 [ 207.412945][ T7126] loop2: AHDI p1 p2 p3 [ 207.450530][ T7126] loop2: partition table partially beyond EOD, truncated [ 207.514486][ T7126] loop2: p1 start 1601398130 is beyond EOD, truncated [ 207.562764][ T5773] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 207.588288][ T7126] loop2: p2 start 1702059890 is beyond EOD, truncated [ 207.742976][ T5773] usb 6-1: Using ep0 maxpacket: 16 [ 207.803204][ T5773] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 207.981416][ T5773] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.016232][ T5942] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 208.036960][ T5773] usb 6-1: Product: syz [ 208.077872][ T5773] usb 6-1: Manufacturer: syz [ 208.135494][ T5773] usb 6-1: SerialNumber: syz [ 208.260484][ T5942] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 208.353234][ T5942] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 208.405326][ T5942] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 208.490782][ T5942] usb 2-1: config 220 has no interface number 2 [ 208.518074][ T5942] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 208.563591][ T5942] usb 2-1: config 220 interface 0 has no altsetting 0 [ 208.604598][ T5942] usb 2-1: config 220 interface 76 has no altsetting 0 [ 208.614875][ T5942] usb 2-1: config 220 interface 1 has no altsetting 0 [ 208.648688][ T5773] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 208.679906][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.707736][ T5942] usb 2-1: Product: syz [ 208.721309][ T5773] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 208.735356][ T5942] usb 2-1: Manufacturer: syz [ 208.741243][ T5942] usb 2-1: SerialNumber: syz [ 208.753572][ T5773] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 208.788385][ T5773] usb 6-1: media controller created [ 208.968624][ T5773] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 209.061338][ T5942] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 209.097119][ T5942] uvcvideo 2-1:220.0: No valid video chain found. [ 209.278203][ T5773] zl10353_read_register: readreg error (reg=127, ret==-71) [ 209.285562][ T5942] usb 2-1: selecting invalid altsetting 0 [ 210.072716][ T5942] usb 2-1: selecting invalid altsetting 0 [ 210.138306][ T5942] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 210.215087][ T5942] usb 2-1: USB disconnect, device number 6 [ 210.313985][ T7162] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 210.401052][ T5773] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 210.487469][ T5773] usb 6-1: USB disconnect, device number 6 [ 210.726417][ T36] nvmet: Created nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:74d9b7fb-ea54-4faf-9d42-4afa661678fd. [ 210.804205][ T7162] nvme nvme1: creating 2 I/O queues. [ 210.880989][ T7162] nvme nvme1: new ctrl: "testsubsys" [ 211.422525][ T5613] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 212.504726][ T5613] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 212.574636][ T5613] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 212.603161][ T5613] usb 4-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 212.654680][ T5613] usb 4-1: config 220 has no interface number 2 [ 212.706950][ T5613] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 212.768978][ T5613] usb 4-1: config 220 interface 0 has no altsetting 0 [ 212.805711][ T5613] usb 4-1: config 220 interface 76 has no altsetting 0 [ 215.834357][ T5613] usb 4-1: config 220 interface 1 has no altsetting 0 [ 216.187667][ T5613] usb 4-1: string descriptor 0 read error: -71 [ 216.211907][ T5613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.263633][ T5613] usb 4-1: can't set config #220, error -71 [ 216.285798][ T5613] usb 4-1: USB disconnect, device number 4 [ 216.336458][ T7235] nvmet: adding nsid 1 to subsystem testsubsys [ 216.424944][ T7235] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 216.665208][ T74] nvmet: Created nvm controller 3 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:74d9b7fb-ea54-4faf-9d42-4afa661678fd. [ 216.726820][ T7235] nvme nvme2: creating 2 I/O queues. [ 216.770060][ T7235] nvme nvme2: new ctrl: "testsubsys" [ 220.532000][ T7279] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.440'. [ 220.792480][ T5744] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 221.127506][ T7295] trusted_key: encrypted_key: master key parameter 'truste' is invalid [ 221.128839][ T5744] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 222.170177][ T5744] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 222.178707][ T5744] usb 5-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 222.190147][ T5744] usb 5-1: config 220 has no interface number 2 [ 222.196541][ T5744] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 222.210022][ T5744] usb 5-1: config 220 interface 0 has no altsetting 0 [ 222.217198][ T5744] usb 5-1: config 220 interface 76 has no altsetting 0 [ 222.224143][ T5744] usb 5-1: config 220 interface 1 has no altsetting 0 [ 222.236370][ T5744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.244555][ T5744] usb 5-1: Product: syz [ 222.249544][ T5744] usb 5-1: Manufacturer: syz [ 222.254254][ T5744] usb 5-1: SerialNumber: syz [ 222.260538][ T7297] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 222.528606][ T5744] usb 5-1: selecting invalid altsetting 0 [ 222.559182][ T5744] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 222.583759][ T6382] nvmet: Created nvm controller 4 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:74d9b7fb-ea54-4faf-9d42-4afa661678fd. [ 222.588748][ T5744] uvcvideo 5-1:220.0: No valid video chain found. [ 222.671995][ T7297] nvme nvme3: creating 2 I/O queues. [ 222.694053][ T5744] usb 5-1: selecting invalid altsetting 0 [ 222.722267][ T5744] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 222.760492][ T7297] nvme nvme3: new ctrl: "testsubsys" [ 222.791594][ T5744] usb 5-1: USB disconnect, device number 10 [ 223.437750][ T7319] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.456'. [ 225.043134][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 225.402621][ T5744] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 225.423325][ T7342] trusted_key: encrypted_key: master key parameter 'truste' is invalid [ 225.595980][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 225.781529][ T5744] usb 3-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 225.966870][ T5744] usb 3-1: config 0 has no interfaces? [ 226.236104][ T5744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.360717][ T5744] usb 3-1: Product: syz [ 226.436456][ T5744] usb 3-1: Manufacturer: syz [ 226.474224][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 226.499757][ T5744] usb 3-1: SerialNumber: syz [ 226.552000][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 226.595972][ T5744] usb 3-1: config 0 descriptor?? [ 226.625542][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.048591][ T7353] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 227.872577][ T7363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.519892][ T1137] nvmet: Created nvm controller 5 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:74d9b7fb-ea54-4faf-9d42-4afa661678fd. [ 228.814493][ T7353] nvme nvme4: creating 2 I/O queues. [ 228.826126][ T7353] nvme nvme4: new ctrl: "testsubsys" [ 228.828958][ T5758] usb 3-1: USB disconnect, device number 8 [ 230.354116][ T9] gud 4-1:1.0: probe with driver gud failed with error -71 [ 230.476280][ T9] usb 4-1: USB disconnect, device number 5 [ 231.988338][ T7392] jffs2: notice: (7392) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 232.330727][ T7397] trusted_key: encrypted_key: master key parameter 'truste' is invalid [ 233.708307][ T7406] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 234.716785][ T5927] nvmet: Created nvm controller 6 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:74d9b7fb-ea54-4faf-9d42-4afa661678fd. [ 234.841460][ T7406] nvme nvme5: creating 2 I/O queues. [ 234.941266][ T7406] nvme nvme5: new ctrl: "testsubsys" [ 234.998594][ T7425] netlink: 20 bytes leftover after parsing attributes in process `syz.5.493'. [ 236.584898][ T5611] Bluetooth: hci6: command 0x0406 tx timeout [ 237.927364][ T7462] futex_wake_op: syz.3.507 tries to shift op by 144; fix this program [ 237.989915][ T7465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.483'. [ 237.999213][ T7465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.483'. [ 238.009900][ T7465] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 238.019023][ T7465] iwpm_hello_cb: Unable to parse nlmsg [ 239.048138][ T7470] netlink: 20 bytes leftover after parsing attributes in process `syz.6.510'. [ 243.686513][ T7510] netlink: 16 bytes leftover after parsing attributes in process `syz.6.523'. [ 243.695721][ T7510] netlink: 16 bytes leftover after parsing attributes in process `syz.6.523'. [ 243.704771][ T7510] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 243.713873][ T7510] iwpm_hello_cb: Unable to parse nlmsg [ 246.786784][ T7526] Can't find ip_set type ha [ 251.004377][ T7575] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 251.544456][ T5751] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 251.765830][ T7586] binder: 7584:7586 ioctl c0306201 0 returned -14 [ 252.365447][ T5751] usb 5-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 252.501182][ T5751] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.574866][ T5751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.632935][ T5751] usb 5-1: Product: syz [ 252.663257][ T5751] usb 5-1: Manufacturer: syz [ 252.693563][ T5751] usb 5-1: SerialNumber: syz [ 252.772322][ T5751] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 253.095562][ T5751] gspca_mr97310a: reg read [21] error -71 [ 253.636871][ T7596] bridge1: left promiscuous mode [ 253.768054][ T5751] mr97310a 5-1:1.0: probe with driver mr97310a failed with error -71 [ 253.820480][ T5751] usb 5-1: USB disconnect, device number 11 [ 256.007103][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.016768][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.138389][ T7613] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 259.527459][ T7621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 262.315423][ T7635] binder: 7634:7635 ioctl c0306201 0 returned -14 [ 265.881328][ T7660] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.970993][ T5942] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 268.884290][ T7667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.474633][ T7675] binder: 7673:7675 ioctl c0306201 0 returned -14 [ 275.953824][ T5820] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 276.166084][ T5820] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 276.204876][ T5820] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.266408][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.301995][ T5820] usb 3-1: Product: syz [ 276.544630][ T5820] usb 3-1: Manufacturer: syz [ 276.690247][ T5820] usb 3-1: SerialNumber: syz [ 276.767465][ T5820] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 277.245294][ T5820] gspca_mr97310a: reg read [21] error -71 [ 277.270838][ T5820] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -71 [ 279.005880][ T5820] usb 3-1: USB disconnect, device number 9 [ 279.679584][ T5942] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 280.755019][ T5942] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 280.776658][ T5942] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 280.795972][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.820421][ T5942] usb 7-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 280.831999][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.842302][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.857647][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.869509][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.879879][ T5942] usb 7-1: config 220 has no interface number 2 [ 280.887282][ T5942] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 280.903385][ T5942] usb 7-1: config 220 interface 0 has no altsetting 0 [ 280.912133][ T5942] usb 7-1: config 220 interface 76 has no altsetting 0 [ 280.921059][ T5942] usb 7-1: config 220 interface 1 has no altsetting 0 [ 280.930344][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.946471][ T5942] usb 7-1: Product: syz [ 280.962454][ T5942] usb 7-1: Manufacturer: syz [ 280.967081][ T5942] usb 7-1: SerialNumber: syz [ 281.987254][ T5942] usb 7-1: selecting invalid altsetting 0 [ 282.000379][ T5942] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 282.008422][ T5942] uvcvideo 7-1:220.0: No valid video chain found. [ 282.021643][ T5942] usb 7-1: selecting invalid altsetting 0 [ 282.029730][ T5942] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 282.045813][ T5942] usb 7-1: USB disconnect, device number 4 [ 282.850805][ T7771] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 282.943332][ T5625] Bluetooth: hci3: command tx timeout [ 283.678182][ T30] audit: type=1804 audit(1787299109.380:4): pid=7781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.613" name="bus" dev="ramfs" ino=16592 res=1 errno=0 [ 284.771182][ T30] audit: type=1800 audit(1787299110.470:5): pid=7781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.613" name="bus" dev="ramfs" ino=16592 res=0 errno=0 [ 284.982886][ T5625] Bluetooth: hci3: command tx timeout [ 284.987879][ T7118] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.434497][ T7118] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.435166][ T7118] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.063071][ T5625] Bluetooth: hci3: command tx timeout [ 287.203964][ T7118] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.218612][ T7830] warning: `syz.1.630' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 288.423083][ T7834] loop6: detected capacity change from 0 to 512 [ 288.513989][ T7834] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.631: iget: bad i_size value: 38620345925642 [ 288.554508][ T7834] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 288.562548][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 288.578566][ C0] EXT4-fs (loop6): initial error at time 1787299114: ext4_orphan_get:1403: inode 15 [ 288.587992][ C0] EXT4-fs (loop6): last error at time 1787299114: ext4_orphan_get:1403: inode 15 [ 288.618224][ T7834] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.631: couldn't read orphan inode 15 (err -117) [ 289.223929][ T5625] Bluetooth: hci3: command tx timeout [ 289.470133][ T7834] loop6: lost filesystem error report for type 5 error -117 [ 289.541355][ T7834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.512347][ T7118] bridge_slave_1: left allmulticast mode [ 290.557119][ T7118] bridge_slave_1: left promiscuous mode [ 290.589368][ T7118] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.647388][ T7118] bridge_slave_0: left allmulticast mode [ 290.677443][ T7118] bridge_slave_0: left promiscuous mode [ 290.700145][ T7118] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.960153][ T6010] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.591439][ T7877] jffs2: notice: (7877) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 291.952270][ T7886] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 292.079189][ T7118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.263490][ T7904] rt1719 0-0049: probe with driver rt1719 failed with error -5 [ 293.330266][ T7904] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 293.363501][ T7906] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 293.515295][ T7118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.544091][ T13] nvmet: Created nvm controller 7 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:74d9b7fb-ea54-4faf-9d42-4afa661678fd. [ 293.622100][ T7886] nvme nvme6: creating 2 I/O queues. [ 293.629627][ T7118] bond0 (unregistering): Released all slaves [ 293.698877][ T7906] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 293.715860][ T7886] nvme nvme6: new ctrl: "testsubsys" [ 293.802580][ T5268] 8021q: adding VLAN 0 to HW filter on device eth6 [ 295.146787][ T7743] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.228437][ T7743] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.361937][ T7743] bridge_slave_0: entered allmulticast mode [ 296.148920][ T7743] bridge_slave_0: entered promiscuous mode [ 296.416990][ T7743] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.475721][ T7743] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.513950][ T7743] bridge_slave_1: entered allmulticast mode [ 296.581019][ T7743] bridge_slave_1: entered promiscuous mode [ 296.611624][ T7955] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 296.868494][ T7118] hsr_slave_0: left promiscuous mode [ 296.912285][ T7118] hsr_slave_1: left promiscuous mode [ 296.947790][ T7118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.001630][ T7118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.010414][ T13] nvmet: Created nvm controller 8 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:74d9b7fb-ea54-4faf-9d42-4afa661678fd. [ 297.577622][ T7955] nvme nvme7: creating 2 I/O queues. [ 297.648555][ T7955] nvme nvme7: new ctrl: "testsubsys" [ 297.665680][ T7118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.679922][ T7118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.724979][ T7118] veth1_macvtap: left promiscuous mode [ 297.742944][ T7118] veth0_macvtap: left promiscuous mode [ 297.748642][ T7118] veth1_vlan: left promiscuous mode [ 297.762886][ T7118] veth0_vlan: left promiscuous mode [ 299.343851][ T7118] team0 (unregistering): Port device team_slave_1 removed [ 299.402979][ T7118] team0 (unregistering): Port device team_slave_0 removed [ 300.483211][ T7743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.673372][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.6.674'. [ 300.698614][ T5268] 8021q: adding VLAN 0 to HW filter on device eth5 [ 300.711396][ T8001] netlink: 12 bytes leftover after parsing attributes in process `syz.6.674'. [ 301.613890][ T7743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.849327][ T7743] team0: Port device team_slave_0 added [ 301.892981][ T7743] team0: Port device team_slave_1 added [ 302.117046][ T7743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.150521][ T7743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.231490][ T7743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.254534][ T7743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.261537][ T7743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.464269][ T7743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.821870][ T8015] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 303.167948][ T8030] loop2: detected capacity change from 0 to 7 [ 303.208450][ T8030] Dev loop2: unable to read RDB block 7 [ 303.231026][ T7743] hsr_slave_0: entered promiscuous mode [ 303.243652][ T8030] loop2: unable to read partition table [ 303.249574][ T74] nvmet: Created nvm controller 9 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:74d9b7fb-ea54-4faf-9d42-4afa661678fd. [ 303.264837][ T7743] hsr_slave_1: entered promiscuous mode [ 303.281329][ T7743] debugfs: 'hsr0' already exists in 'hsr' [ 303.287698][ T8030] loop2: partition table beyond EOD, truncated [ 303.298221][ T7743] Cannot create hsr debugfs directory [ 303.311452][ T8017] nvme nvme8: creating 2 I/O queues. [ 303.314433][ T8030] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 303.357907][ T8017] nvme nvme8: new ctrl: "testsubsys" [ 305.155076][ T5927] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.422123][ T5927] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.478866][ T5927] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.511128][ T5927] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.473511][ T7743] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 308.870652][ T7743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 308.933641][ T7743] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 309.198358][ T7743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 309.234028][ T7743] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 309.276733][ T7743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 309.305044][ T7743] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 309.354975][ T7743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 309.394806][ T8087] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 309.399348][ T5268] 8021q: adding VLAN 0 to HW filter on device eth7 [ 310.223814][ T36] nvmet: Created nvm controller 10 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:74d9b7fb-ea54-4faf-9d42-4afa661678fd. [ 310.413501][ T8087] nvme nvme9: creating 2 I/O queues. [ 310.539522][ T8087] nvme nvme9: new ctrl: "testsubsys" [ 310.560246][ T7743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.626059][ T7743] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.684110][ T7007] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.691302][ T7007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.779105][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.786290][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.424131][ T8131] loop2: detected capacity change from 0 to 7 [ 312.471970][ T8131] Dev loop2: unable to read RDB block 7 [ 312.506929][ T8131] loop2: AHDI p1 p2 p3 [ 312.533004][ T8131] loop2: partition table partially beyond EOD, truncated [ 312.608996][ T8131] loop2: p1 start 1601398130 is beyond EOD, truncated [ 312.726263][ T8131] loop2: p2 start 1702059890 is beyond EOD, truncated [ 315.958374][ T8166] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 316.430014][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.454409][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.009588][ T6890] nvmet: Created nvm controller 11 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:74d9b7fb-ea54-4faf-9d42-4afa661678fd. [ 317.025980][ T8166] nvme nvme10: creating 2 I/O queues. [ 317.041195][ T8166] nvme nvme10: new ctrl: "testsubsys" [ 318.512315][ T7743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.633576][ T5268] 8021q: adding VLAN 0 to HW filter on device eth8 [ 319.261959][ T8214] loop2: detected capacity change from 0 to 7 [ 319.300505][ T8214] Dev loop2: unable to read RDB block 7 [ 319.323869][ T8214] loop2: AHDI p1 p2 p3 [ 319.341643][ T8214] loop2: partition table partially beyond EOD, truncated [ 319.601143][ T8214] loop2: p1 start 1601398130 is beyond EOD, truncated [ 319.628322][ T8214] loop2: p2 start 1702059890 is beyond EOD, truncated [ 322.712335][ T7743] veth0_vlan: entered promiscuous mode [ 322.801878][ T7743] veth1_vlan: entered promiscuous mode [ 322.934242][ T7743] veth0_macvtap: entered promiscuous mode [ 322.967187][ T7743] veth1_macvtap: entered promiscuous mode [ 323.051350][ T7743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.102194][ T7743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.242617][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.261847][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.280912][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.323332][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.973799][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.009022][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.188014][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.218499][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.419153][ T8277] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 325.517575][ T8274] loop7: detected capacity change from 0 to 512 [ 325.636447][ T8274] EXT4-fs (loop7): 1 truncate cleaned up [ 325.665574][ T8274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.710003][ T30] audit: type=1800 audit(1787299151.410:6): pid=8274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.741" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 325.818013][ T12] nvmet: Created nvm controller 12 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:74d9b7fb-ea54-4faf-9d42-4afa661678fd. [ 327.552874][ T8277] nvme nvme11: creating 2 I/O queues. [ 327.877993][ T8277] nvme nvme11: new ctrl: "testsubsys" [ 328.379646][ T7743] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.053999][ T8303] overlayfs: missing 'workdir' [ 329.254966][ T8304] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 330.079129][ T8314] bonding: unable to delete non-existent b [ 330.460139][ T6890] IPVS: starting estimator thread 0... [ 330.653337][ T8321] IPVS: using max 24 ests per chain, 57600 per kthread [ 332.527286][ T8353] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 333.220702][ T6890] nvmet: Created nvm controller 13 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:74d9b7fb-ea54-4faf-9d42-4afa661678fd. [ 333.285443][ T8353] nvme nvme12: creating 2 I/O queues. [ 333.524129][ T8353] nvme nvme12: new ctrl: "testsubsys" [ 334.318295][ T8377] loop1: detected capacity change from 0 to 32768 [ 334.325850][ T8377] btrfs: Unknown parameter 'usebackuproot' [ 340.571247][ T8426] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 340.794282][ T8441] overlayfs: missing 'workdir' [ 340.854839][ T8443] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 341.797982][ T1162] nvmet: Created nvm controller 14 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:74d9b7fb-ea54-4faf-9d42-4afa661678fd. [ 341.863706][ T8430] nvme nvme13: creating 2 I/O queues. [ 342.056607][ T8430] blk-mq: failed to allocate request map [ 342.074913][ T8430] ------------[ cut here ]------------ [ 342.080396][ T8430] rcu_segcblist_n_cbs(&sdp->srcu_cblist) [ 342.080410][ T8430] WARNING: kernel/rcu/srcutree.c:730 at cleanup_srcu_struct+0x369/0x470, CPU#1: syz.6.776/8430 [ 342.097022][ T8430] Modules linked in: [ 342.101039][ T8430] CPU: 1 UID: 0 PID: 8430 Comm: syz.6.776 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.112057][ T8430] Tainted: [L]=SOFTLOCKUP [ 342.116824][ T8430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 342.126903][ T8430] RIP: 0010:cleanup_srcu_struct+0x369/0x470 [ 342.133155][ T8430] Code: 7c 35 00 00 74 08 4c 89 ff e8 d3 4c 8b 00 49 c7 07 00 00 00 00 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 f4 f9 64 ff cc 90 <0f> 0b 90 eb e6 90 0f 0b 90 eb e0 90 0f 0b 90 eb da 90 0f 0b 90 eb [ 342.154002][ T8430] RSP: 0018:ffffc9000e3e7560 EFLAGS: 00010202 [ 342.160070][ T8430] RAX: 1ffffd1ffff93859 RBX: 1ffffffff1ca59de RCX: b8d05adfe31aa100 [ 342.168463][ T8430] RDX: 0000000000000001 RSI: ffffffff8e4e17bf RDI: ffff888029003e80 [ 342.176713][ T8430] RBP: ffffe8ffffc9c2c8 R08: ffffe8ffffc9c367 R09: 1ffffd1ffff9386c [ 342.185846][ T8430] R10: dffffc0000000000 R11: fffff91ffff9386d R12: ffff88807aeac318 [ 342.194524][ T8430] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000607edad88200 [ 342.202530][ T8430] FS: 00007fa8e9bba6c0(0000) GS:ffff888125014000(0000) knlGS:0000000000000000 [ 342.211458][ T8430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.218337][ T8430] CR2: 000000110c3c06bc CR3: 00000000741a6000 CR4: 0000000000350ef0 [ 342.226434][ T8430] Call Trace: [ 342.229713][ T8430] [ 342.232959][ T8430] blk_mq_alloc_tag_set+0xc77/0x1000 [ 342.238267][ T8430] nvme_alloc_io_tag_set+0x36a/0x6f0 [ 342.244308][ T8430] ? __pfx_nvme_alloc_io_tag_set+0x10/0x10 [ 342.250147][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.256367][ T8430] ? __init_swait_queue_head+0xa8/0x150 [ 342.261931][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.267606][ T8430] ? nvmet_sq_init+0xd9/0x2c0 [ 342.272285][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.278318][ T8430] ? nvme_loop_init_io_queues+0x2f1/0x360 [ 342.284090][ T8430] ? __pfx_nvme_loop_init_io_queues+0x10/0x10 [ 342.290156][ T8430] ? __pfx_nvme_enable_ctrl+0x10/0x10 [ 342.295815][ T8430] ? __init_swait_queue_head+0xa8/0x150 [ 342.301364][ T8430] nvme_loop_create_io_queues+0x6b/0x350 [ 342.307055][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.312994][ T8430] nvme_loop_create_ctrl+0x557/0x8c0 [ 342.318306][ T8430] nvmf_dev_write+0x24ca/0x2d90 [ 342.323222][ T8430] ? __pfx_nvmf_dev_write+0x10/0x10 [ 342.328416][ T8430] ? __pfx___futex_wait+0x10/0x10 [ 342.333711][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.339342][ T8430] ? __pfx_futex_wake_mark+0x10/0x10 [ 342.344908][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.351225][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.357430][ T8430] ? security_file_permission+0x75/0x260 [ 342.363103][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.368727][ T8430] ? rw_verify_area+0x203/0x4c0 [ 342.373865][ T8430] ? __pfx_nvmf_dev_write+0x10/0x10 [ 342.379061][ T8430] vfs_write+0x296/0xba0 [ 342.383381][ T8430] ? __pfx_vfs_write+0x10/0x10 [ 342.388149][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.394128][ T8430] ? __fget_files+0x2a/0x420 [ 342.398721][ T8430] ? __fget_files+0x2a/0x420 [ 342.403348][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.408974][ T8430] ? __fget_files+0x3a2/0x420 [ 342.413947][ T8430] ? __fget_files+0x2a/0x420 [ 342.418572][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.424333][ T8430] ksys_write+0x150/0x270 [ 342.428675][ T8430] ? __pfx_ksys_write+0x10/0x10 [ 342.433842][ T8430] do_syscall_64+0x166/0x520 [ 342.438444][ T8430] ? trace_irq_disable+0x3b/0x140 [ 342.443502][ T8430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.450116][ T8430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.456657][ T8430] RIP: 0033:0x7fa8e8d9e0d9 [ 342.461069][ T8430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.480988][ T8430] RSP: 002b:00007fa8e9bba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 342.489420][ T8430] RAX: ffffffffffffffda RBX: 00007fa8e9026090 RCX: 00007fa8e8d9e0d9 [ 342.497660][ T8430] RDX: 000000000000001e RSI: 0000200000000800 RDI: 0000000000000005 [ 342.505657][ T8430] RBP: 00007fa8e8e35024 R08: 0000000000000000 R09: 0000000000000000 [ 342.513914][ T8430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.521879][ T8430] R13: 00007fa8e9026128 R14: 00007fa8e9026090 R15: 00007ffdcec7b8f8 [ 342.529891][ T8430] [ 342.533181][ T8430] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 342.540447][ T8430] CPU: 1 UID: 0 PID: 8430 Comm: syz.6.776 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.551198][ T8430] Tainted: [L]=SOFTLOCKUP [ 342.555513][ T8430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 342.565551][ T8430] Call Trace: [ 342.568813][ T8430] [ 342.571726][ T8430] vpanic+0x56d/0xa60 [ 342.575704][ T8430] ? __pfx__printk+0x10/0x10 [ 342.580284][ T8430] ? __pfx_vpanic+0x10/0x10 [ 342.584783][ T8430] ? is_bpf_text_address+0x292/0x2b0 [ 342.590053][ T8430] ? is_bpf_text_address+0x26/0x2b0 [ 342.595268][ T8430] panic+0xc5/0xd0 [ 342.598984][ T8430] ? __pfx_panic+0x10/0x10 [ 342.603410][ T8430] __warn+0x315/0x4c0 [ 342.607387][ T8430] ? cleanup_srcu_struct+0x369/0x470 [ 342.612669][ T8430] ? cleanup_srcu_struct+0x369/0x470 [ 342.617947][ T8430] __report_bug+0x276/0x570 [ 342.622445][ T8430] ? cleanup_srcu_struct+0x369/0x470 [ 342.627746][ T8430] ? __pfx___report_bug+0x10/0x10 [ 342.632763][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.638383][ T8430] ? __flush_work+0xb05/0xca0 [ 342.643056][ T8430] ? __flush_work+0x101/0xca0 [ 342.647731][ T8430] ? __pfx___flush_work+0x10/0x10 [ 342.652749][ T8430] ? cleanup_srcu_struct+0x369/0x470 [ 342.658043][ T8430] report_bug+0x16b/0x220 [ 342.662361][ T8430] ? cleanup_srcu_struct+0x369/0x470 [ 342.667656][ T8430] ? cleanup_srcu_struct+0x36b/0x470 [ 342.672933][ T8430] handle_bug+0x9c/0x200 [ 342.677165][ T8430] exc_invalid_op+0x1a/0x50 [ 342.681658][ T8430] asm_exc_invalid_op+0x1a/0x20 [ 342.686491][ T8430] RIP: 0010:cleanup_srcu_struct+0x369/0x470 [ 342.692381][ T8430] Code: 7c 35 00 00 74 08 4c 89 ff e8 d3 4c 8b 00 49 c7 07 00 00 00 00 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 f4 f9 64 ff cc 90 <0f> 0b 90 eb e6 90 0f 0b 90 eb e0 90 0f 0b 90 eb da 90 0f 0b 90 eb [ 342.711986][ T8430] RSP: 0018:ffffc9000e3e7560 EFLAGS: 00010202 [ 342.718040][ T8430] RAX: 1ffffd1ffff93859 RBX: 1ffffffff1ca59de RCX: b8d05adfe31aa100 [ 342.725997][ T8430] RDX: 0000000000000001 RSI: ffffffff8e4e17bf RDI: ffff888029003e80 [ 342.733951][ T8430] RBP: ffffe8ffffc9c2c8 R08: ffffe8ffffc9c367 R09: 1ffffd1ffff9386c [ 342.741905][ T8430] R10: dffffc0000000000 R11: fffff91ffff9386d R12: ffff88807aeac318 [ 342.749860][ T8430] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000607edad88200 [ 342.757862][ T8430] blk_mq_alloc_tag_set+0xc77/0x1000 [ 342.763168][ T8430] nvme_alloc_io_tag_set+0x36a/0x6f0 [ 342.768465][ T8430] ? __pfx_nvme_alloc_io_tag_set+0x10/0x10 [ 342.774272][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.779894][ T8430] ? __init_swait_queue_head+0xa8/0x150 [ 342.785431][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.791049][ T8430] ? nvmet_sq_init+0xd9/0x2c0 [ 342.795723][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.801343][ T8430] ? nvme_loop_init_io_queues+0x2f1/0x360 [ 342.807063][ T8430] ? __pfx_nvme_loop_init_io_queues+0x10/0x10 [ 342.813125][ T8430] ? __pfx_nvme_enable_ctrl+0x10/0x10 [ 342.818491][ T8430] ? __init_swait_queue_head+0xa8/0x150 [ 342.824030][ T8430] nvme_loop_create_io_queues+0x6b/0x350 [ 342.829673][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.835299][ T8430] nvme_loop_create_ctrl+0x557/0x8c0 [ 342.840588][ T8430] nvmf_dev_write+0x24ca/0x2d90 [ 342.845461][ T8430] ? __pfx_nvmf_dev_write+0x10/0x10 [ 342.850651][ T8430] ? __pfx___futex_wait+0x10/0x10 [ 342.855663][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.861290][ T8430] ? __pfx_futex_wake_mark+0x10/0x10 [ 342.866593][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.872210][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.877827][ T8430] ? security_file_permission+0x75/0x260 [ 342.883452][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.889071][ T8430] ? rw_verify_area+0x203/0x4c0 [ 342.893922][ T8430] ? __pfx_nvmf_dev_write+0x10/0x10 [ 342.899116][ T8430] vfs_write+0x296/0xba0 [ 342.903362][ T8430] ? __pfx_vfs_write+0x10/0x10 [ 342.908119][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.913740][ T8430] ? __fget_files+0x2a/0x420 [ 342.918327][ T8430] ? __fget_files+0x2a/0x420 [ 342.922908][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.928525][ T8430] ? __fget_files+0x3a2/0x420 [ 342.933193][ T8430] ? __fget_files+0x2a/0x420 [ 342.937779][ T8430] ? srso_alias_return_thunk+0x5/0xfbef5 [ 342.943401][ T8430] ksys_write+0x150/0x270 [ 342.947733][ T8430] ? __pfx_ksys_write+0x10/0x10 [ 342.952588][ T8430] do_syscall_64+0x166/0x520 [ 342.957164][ T8430] ? trace_irq_disable+0x3b/0x140 [ 342.962180][ T8430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.968238][ T8430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.974117][ T8430] RIP: 0033:0x7fa8e8d9e0d9 [ 342.978517][ T8430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.998105][ T8430] RSP: 002b:00007fa8e9bba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 343.006504][ T8430] RAX: ffffffffffffffda RBX: 00007fa8e9026090 RCX: 00007fa8e8d9e0d9 [ 343.014459][ T8430] RDX: 000000000000001e RSI: 0000200000000800 RDI: 0000000000000005 [ 343.022415][ T8430] RBP: 00007fa8e8e35024 R08: 0000000000000000 R09: 0000000000000000 [ 343.030368][ T8430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.038319][ T8430] R13: 00007fa8e9026128 R14: 00007fa8e9026090 R15: 00007ffdcec7b8f8 [ 343.046290][ T8430] [ 343.049529][ T8430] Kernel Offset: disabled [ 343.053839][ T8430] Rebooting in 86400 seconds..