last executing test programs: 8.543998688s ago: executing program 2 (id=402): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0xfb, 0x107, 0x1, 0x1, "1d00000c00", "0902935665a27c78c8d23d45f15c43cf03be7c3f9e5c1c9a108f3cfe97bdceba6eb860837cf964f1a40a0dfe429918a3c16e713966aef513ac9a2d7a804f79f99baa4e2de682cd3471308f680bba63ae00cd6eb7286d50bb0dcc5635983202a01ed1945cd59d70f9f1cea6ff6e9c1402093af700fe3871ad38f5c5f8df90974e54ec83f85730dbdcfb9c070816b79f030fe9801b492d19e69f5ad153977e9e549980b982fca4c898545f1433b1f69a09e5dfede50754ce31d40d4038caa306ee486f4f651edfff757fc3124b573a316c8183de6194ffde82251403cd85689ba3447ee3c5615f0b7f882e5e2fdf6060f84efb"}, 0x107, 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000400)=0x79) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40040e0}, 0x20004800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r6, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c001}, 0x20040000) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000700)={&(0x7f00000001c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x144, r6, 0x4, 0x70bd28, 0x800, {}, [@WGDEVICE_A_PEERS={0x130, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xf84f}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f55e4cc60af2a6151b38290ce82474b7473b5bd92ca3fd0dc43d1898ea145677"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @local}}]}, {0xdc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x804}, 0x20008000) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 7.559436264s ago: executing program 2 (id=404): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() setrlimit(0x0, &(0x7f0000000100)={0xb, 0x3}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) connect$802154_dgram(r0, &(0x7f0000000340)={0x24, @short={0x2, 0x1}}, 0x14) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x3f, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000300)=@default_ibss_ssid, 0x6, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x850) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000002"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[], 0xb8}}, 0x4000) 5.713892916s ago: executing program 0 (id=410): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x10040) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b080045f40028006900000206907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b56d3ef48d2683515ce4bbd197775dc2639859aef079e1b665eb17acf7d0c38edb752f256e5d8eef0face8791d4654ea5a9e70b548b60737ac7ac04b6db79d63a2cf2bd21baa5c56a76a10998e5933e71b2ae1e63946c6ea"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1\x00', 0x1) write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1\x00', 0x1) fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0xb}}}}}}, 0x0) 5.364245915s ago: executing program 0 (id=411): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000100)={0x4}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpgid(0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r8, r7, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 5.280249242s ago: executing program 2 (id=413): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x10040) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b080045f40028006900000206907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b56d3ef48d2683515ce4bbd197775dc2639859aef079e1b665eb17acf7d0c38edb752f256e5d8eef0face8791d4654ea5a9e70b548b60737ac7ac04b6db79d63a2cf2bd21baa5c56a76a10998e5933e71b2ae1e63946c6ea"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1\x00', 0x1) write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1\x00', 0x1) fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x64, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x14, 0x20, 0xb, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0x7}, @mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x7, 0x5, 0x2}, @timestamp={0x8, 0xa, 0xffff, 0x3}, @mptcp=@mp_fclose={0x1e, 0xc, 0x4, 0x0, 0x6}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x80, 0x101, 0x4}]}}}}}}}, 0x0) 4.689759466s ago: executing program 1 (id=415): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x10040) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b080045f40028006900000206907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b56d3ef48d2683515ce4bbd197775dc2639859aef079e1b665eb17acf7d0c38edb752f256e5d8eef0face8791d4654ea5a9e70b548b60737ac7ac04b6db79d63a2cf2bd21baa5c56a76a10998e5933e71b2ae1e63946c6ea"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1\x00', 0x1) write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1\x00', 0x1) fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x20, 0xb, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0x7}, @md5sig={0x13, 0x12, "a16dc34416fcb1917fdf02dd82bbfc0e"}, @mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x7, 0x5, 0x2}, @timestamp={0x8, 0xa, 0xffff, 0x3}, @mptcp=@mp_fclose={0x1e, 0xc, 0x4, 0x0, 0x6}]}}}}}}}, 0x0) 4.612061049s ago: executing program 2 (id=416): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000300), 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1419abeb, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x4000000, 0xfffffffe}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000003c0)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r3, 0x7c81, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x2000c851}, 0x50) sendmsg$NFT_BATCH(r2, 0x0, 0x4000040) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}], 0x10) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r6, 0x4, 0xc00) read$char_usb(r6, 0x0, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) sendfile(r7, r7, 0x0, 0x2000009) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x10) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="00000000345c02f9a372dde98842c8a284ea67347faf180e257a58e671954bb9300f5071ef11dcc9a014d033f8c8a536e543798c6b88d90ce12b9a5c61447c50395278ff21fa1007deaeac85f59f1b8eb7c60c19711ea586c181b017a8bf4c767607fb8dd1ab23aa2c2ffe38bcba", @ANYRES64=r8, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x808) 4.424119891s ago: executing program 0 (id=417): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000000)=0x4) 4.253412736s ago: executing program 3 (id=418): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x10040) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b080045f40028006900000206907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b56d3ef48d2683515ce4bbd197775dc2639859aef079e1b665eb17acf7d0c38edb752f256e5d8eef0face8791d4654ea5a9e70b548b60737ac7ac04b6db79d63a2cf2bd21baa5c56a76a10998e5933e71b2ae1e63946c6ea"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1\x00', 0x1) write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1\x00', 0x1) fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x20, 0xb, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0x7}, @md5sig={0x13, 0x12, "a16dc34416fcb1917fdf02dd82bbfc0e"}, @mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x7, 0x5, 0x2}, @timestamp={0x8, 0xa, 0xffff, 0x3}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x80, 0x101, 0x4}]}}}}}}}, 0x0) 4.013862211s ago: executing program 1 (id=419): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setuid(0xee01) r1 = socket(0x18, 0x3, 0xf9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006402000000008001340"], 0x64}}, 0x0) semget(0x0, 0x1, 0x206) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001080)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000010c0)=0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x4}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)='x', 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000440)={0x1, 0x204, 0xc684, 0x9}, 0x10) unshare(0x28040680) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2}}, 0x20) socket$rds(0x15, 0x5, 0x0) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100001f000100000000000000000001010080080001000000000015000000855eb45b5a76b1ca6e824228e67e092af800000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621da487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec"], 0x114}], 0x1}, 0x0) socket$xdp(0x2c, 0x3, 0x0) 3.954847773s ago: executing program 3 (id=420): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000000)=0x4) 3.893311997s ago: executing program 1 (id=421): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000000)=0x4) 3.354167952s ago: executing program 0 (id=422): socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f00000005c0), 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000200)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000ce0100000000d0085a168d0bf46d32345653600648d0a00120002", 0x3d, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) r6 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x10000000}) 2.619633387s ago: executing program 3 (id=423): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000100)={0x4}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpgid(0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 2.542534734s ago: executing program 1 (id=424): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x10040) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b080045f40028006900000206907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b56d3ef48d2683515ce4bbd197775dc2639859aef079e1b665eb17acf7d0c38edb752f256e5d8eef0face8791d4654ea5a9e70b548b60737ac7ac04b6db79d63a2cf2bd21baa5c56a76a10998e5933e71b2ae1e63946c6ea"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1\x00', 0x1) write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1\x00', 0x1) fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x20, 0xb, 0x0, 0x0, {[@md5sig={0x13, 0x12, "a16dc34416fcb1917fdf02dd82bbfc0e"}, @mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x7, 0x5, 0x2}, @timestamp={0x8, 0xa, 0xffff, 0x3}, @mptcp=@mp_fclose={0x1e, 0xc, 0x4, 0x0, 0x6}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x80, 0x101, 0x4}]}}}}}}}, 0x0) 2.256542201s ago: executing program 0 (id=425): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000100)={0x4}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpgid(0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r8, r7, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 2.07416183s ago: executing program 1 (id=426): gettid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8}]}, 0x6c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r5, &(0x7f0000000500)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="8c", 0xffe3}], 0x1}}], 0x1, 0x4000800) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 993.969788ms ago: executing program 3 (id=427): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x10040) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b080045f40028006900000206907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b56d3ef48d2683515ce4bbd197775dc2639859aef079e1b665eb17acf7d0c38edb752f256e5d8eef0face8791d4654ea5a9e70b548b60737ac7ac04b6db79d63a2cf2bd21baa5c56a76a10998e5933e71b2ae1e63946c6ea"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1\x00', 0x1) write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1\x00', 0x1) fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x20, 0xb, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0x7}, @md5sig={0x13, 0x12, "a16dc34416fcb1917fdf02dd82bbfc0e"}, @mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x7, 0x5, 0x2}, @timestamp={0x8, 0xa, 0xffff, 0x3}, @mptcp=@mp_fclose={0x1e, 0xc, 0x4, 0x0, 0x6}]}}}}}}}, 0x0) 922.02349ms ago: executing program 2 (id=428): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000000)=0x3f9, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x0, 0xa}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x800003, 0x3, 0x1, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff43, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x5, 0xfffffffd, 0x19, 0x7, 0xc, 0x7, 0x4, 0x1, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x400004, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2e, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x7c, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x1, 0x8, 0x3, 0x200100, 0x3, 0x0, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x8, 0x6, 0xffffffff, 0x20000004, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x3, 0x6, 0xf, 0xff, 0xf, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x9, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x5, 0x3ff, 0x2, 0x100, 0x8, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x6ba4, 0x7, 0x3565, 0x2, 0x2, 0x4, 0x8, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x9, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270fff0000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x10040) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1b080045f40028006900000206907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b56d3ef48d2683515ce4bbd197775dc2639859aef079e1b665eb17acf7d0c38edb752f256e5d8eef0face8791d4654ea5a9e70b548b60737ac7ac04b6db79d63a2cf2bd21baa5c56a76a10998e5933e71b2ae1e63946c6ea"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1\x00', 0x1) write(0xffffffffffffffff, &(0x7f0000000140)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f00000001c0)='1\x00', 0x1) fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x20, 0xb, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0x7}, @md5sig={0x13, 0x12, "a16dc34416fcb1917fdf02dd82bbfc0e"}, @mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x7, 0x5, 0x2}, @timestamp={0x8, 0xa, 0xffff, 0x3}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x80, 0x101, 0x4}]}}}}}}}, 0x0) 548.116497ms ago: executing program 3 (id=429): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setuid(0xee01) r1 = socket(0x18, 0x3, 0xf9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006402000000008001340"], 0x64}}, 0x0) semget(0x0, 0x1, 0x206) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001080)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000010c0)=0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x4}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)='x', 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000440)={0x1, 0x204, 0xc684, 0x9}, 0x10) unshare(0x28040680) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2}}, 0x20) socket$rds(0x15, 0x5, 0x0) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100001f000100000000000000000001010080080001000000000015000000855eb45b5a76b1ca6e824228e67e092af800000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621da487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec"], 0x114}], 0x1}, 0x0) socket$xdp(0x2c, 0x3, 0x0) 547.189266ms ago: executing program 2 (id=430): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='file1\x00', 0x42, 0x1ff) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='file2\x00', 0x42, 0x1ff) ftruncate(r2, 0x1000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='file3\x00', 0x42, 0x1ff) ftruncate(r3, 0x1000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/loop2\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/loop3\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r3) r7 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r7, &(0x7f0000001100)='md0\x00', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r8, 0x40480923, &(0x7f0000001300)="000000005a00000003000000000000000500000000040000040000000300000000000000") ioctl(r8, 0x40140921, &(0x7f0000001400)="0000000007000000000000000000000006000000") ioctl(r8, 0x40140921, &(0x7f0000001500)="0100000007000000010000000100000006000000") ioctl(r8, 0x40140921, &(0x7f0000001600)="0200000007000000020000000200000006000000") ioctl(r8, 0x400c0930, 0x0) ioctl(r8, 0x40140921, &(0x7f0000001700)="030000000700000003000000ffffffff02000400") 546.362209ms ago: executing program 0 (id=431): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000000)=0x4) 123.950122ms ago: executing program 1 (id=432): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x3f, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000000)=0x4) 0s ago: executing program 3 (id=433): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000080), 0x7f, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x200003}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x64, 0x4, 0x31c, 0x100000c, 0x0, 0x1b4, 0xb8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'veth0_vlan\x00', 'syzkaller1\x00'}, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@inet=@socket1={{0x24}}]}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg0\x00', 'lo\x00'}, 0x0, 0x9c, 0xfc, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x0, 0x5}}}}, {{@uncond, 0x0, 0xb0, 0xd4, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x6, 0x6, 0x4, 0x0, 0x5, 0x1]}}}]}, @common=@inet=@TCPMSS={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x378) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) pread64(r1, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) pwritev2(r1, &(0x7f0000000200)=[{0x0}, {&(0x7f00000000c0)="3a4002c716d6a76c8c4954a5376cbb6f97620bfe3824433daae61da82f787afff91cf673ef7ebed356e623497f0489", 0x2f}, {0x0}], 0x3, 0x3, 0xffff8000, 0x14) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001a00)={'pcmmio\x00', [0x2000, 0x0, 0x4, 0xfffff91b, 0x25, 0x0, 0x400, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x3, 0xfffffff7, 0x400041, 0x6, 0x5, 0x0, 0x7f, 0x3, 0x40000003, 0x200089, 0x8, 0x4, 0x20001e5b, 0x3, 0xe64, 0x3, 0x6, 0x0, 0x0, 0x201]}) kernel console output (not intermixed with test programs): dded [ 56.344505][ T5756] hsr_slave_0: entered promiscuous mode [ 56.346538][ T5756] hsr_slave_1: entered promiscuous mode [ 56.348524][ T5756] debugfs: 'hsr0' already exists in 'hsr' [ 56.350185][ T5756] Cannot create hsr debugfs directory [ 56.357729][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.360459][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.370596][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.380370][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.383283][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.393950][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.492573][ T5748] hsr_slave_0: entered promiscuous mode [ 56.495726][ T5748] hsr_slave_1: entered promiscuous mode [ 56.498169][ T5748] debugfs: 'hsr0' already exists in 'hsr' [ 56.500228][ T5748] Cannot create hsr debugfs directory [ 56.630460][ T5757] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.642776][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.668749][ T5757] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.678227][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.707885][ T5757] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.712515][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.728182][ T5757] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.736791][ T5757] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.837836][ T5747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.845120][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.852882][ T5747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.860730][ T5763] Bluetooth: hci1: command tx timeout [ 56.860948][ T64] Bluetooth: hci3: command tx timeout [ 56.862032][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.862762][ T5747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.869232][ T5763] Bluetooth: hci2: command tx timeout [ 56.869463][ T5751] Bluetooth: hci0: command tx timeout [ 56.874180][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.880901][ T5747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.886220][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.939554][ T5756] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.944129][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.951070][ T5756] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.957400][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.960859][ T5756] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.966701][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.971006][ T5756] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.976542][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.050596][ T5748] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.056793][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 57.062419][ T5748] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.066758][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.071248][ T5748] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.077726][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 57.083183][ T5748] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.089603][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.109749][ T5757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.151223][ T5757] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.177113][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.180862][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.193399][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.196517][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.218526][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.268230][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.280258][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.289944][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.293060][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.308388][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.311416][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.327752][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.346758][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.349336][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.366139][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.369505][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.387255][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.424936][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.447552][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.450061][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.463820][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.466234][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.735275][ T5757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.789371][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.793470][ T5757] veth0_vlan: entered promiscuous mode [ 57.804618][ T5757] veth1_vlan: entered promiscuous mode [ 57.818726][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.875062][ T5757] veth0_macvtap: entered promiscuous mode [ 57.892718][ T5757] veth1_macvtap: entered promiscuous mode [ 57.901161][ T5747] veth0_vlan: entered promiscuous mode [ 57.914821][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.918212][ T5756] veth0_vlan: entered promiscuous mode [ 57.926215][ T5747] veth1_vlan: entered promiscuous mode [ 57.935630][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.941359][ T5757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.956112][ T5756] veth1_vlan: entered promiscuous mode [ 57.977368][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.982971][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.993061][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.996826][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.058157][ T5747] veth0_macvtap: entered promiscuous mode [ 58.063882][ T5756] veth0_macvtap: entered promiscuous mode [ 58.078066][ T5748] veth0_vlan: entered promiscuous mode [ 58.085094][ T5747] veth1_macvtap: entered promiscuous mode [ 58.107849][ T5756] veth1_macvtap: entered promiscuous mode [ 58.124394][ T181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.125022][ T5748] veth1_vlan: entered promiscuous mode [ 58.128722][ T181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.152461][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.158491][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.164742][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.186270][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.190973][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.194654][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.204892][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.207939][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.208196][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.213117][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.237103][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.241643][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.254206][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.259834][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.269781][ T5748] veth0_macvtap: entered promiscuous mode [ 58.270254][ T5757] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.285358][ T5748] veth1_macvtap: entered promiscuous mode [ 58.286853][ T5757] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 58.296433][ T5757] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 58.310221][ T5757] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 58.327911][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.331962][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.334121][ T5757] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 58.358946][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.400528][ T181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.407571][ T181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.413807][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.428507][ T181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.432077][ T181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.437883][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.441150][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.461286][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.473767][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.479337][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 58.490890][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.497641][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.522808][ T5902] gretap1: entered promiscuous mode [ 58.605035][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.611578][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.666105][ T181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.669539][ T181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.939140][ T64] Bluetooth: hci1: command tx timeout [ 58.941272][ T64] Bluetooth: hci2: command tx timeout [ 58.944717][ T5751] Bluetooth: hci3: command tx timeout [ 58.946949][ T5763] Bluetooth: hci0: command tx timeout [ 59.083858][ T5912] process 'syz.3.4' launched '/dev/fd/11' with NULL argv: empty string added [ 59.226150][ T5919] xt_ipcomp: unknown flags 1D [ 59.843262][ T5925] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 61.020236][ T64] Bluetooth: hci2: command tx timeout [ 61.020336][ T5751] Bluetooth: hci3: command tx timeout [ 61.025326][ T5763] Bluetooth: hci0: command tx timeout [ 61.029044][ T5751] Bluetooth: hci1: command tx timeout [ 61.739066][ T5842] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 61.915244][ T5842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 61.927256][ T5842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 61.955487][ T5842] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 61.968672][ T5842] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.981313][ T5842] usb 7-1: Product: syz [ 61.988963][ T5842] usb 7-1: Manufacturer: syz [ 61.991058][ T5842] usb 7-1: SerialNumber: syz [ 61.999136][ T5986] loop0: detected capacity change from 0 to 32768 [ 62.008896][ T5986] loop1: detected capacity change from 0 to 32768 [ 62.014427][ T5986] loop2: detected capacity change from 0 to 32768 [ 62.018967][ T5986] loop3: detected capacity change from 0 to 32768 [ 62.033622][ T5842] usb 7-1: config 0 descriptor?? [ 62.124643][ T5988] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 62.129750][ T5842] hub 7-1:0.0: bad descriptor, ignoring hub [ 62.130843][ T5986] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 62.137002][ T5988] block device autoloading is deprecated and will be removed. [ 62.139113][ T5842] hub 7-1:0.0: probe with driver hub failed with error -5 [ 62.193166][ T5842] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input5 [ 62.520852][ T42] audit: type=1326 audit(1785315110.925:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 62.551505][ T42] audit: type=1326 audit(1785315110.935:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 62.551540][ T42] audit: type=1326 audit(1785315110.935:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 62.551561][ T42] audit: type=1326 audit(1785315110.935:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 62.551582][ T42] audit: type=1326 audit(1785315110.935:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 62.551602][ T42] audit: type=1326 audit(1785315110.935:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 62.551648][ T42] audit: type=1326 audit(1785315110.935:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 62.551670][ T42] audit: type=1326 audit(1785315110.935:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 62.551690][ T42] audit: type=1326 audit(1785315110.935:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 62.551711][ T42] audit: type=1326 audit(1785315110.935:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.3.10" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 62.581925][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 62.631225][ T6002] 9pnet_virtio: no channels available for device syz [ 62.722911][ T5898] IPVS: starting estimator thread 0... [ 62.809068][ T6005] IPVS: using max 22 ests per chain, 52800 per kthread [ 63.100226][ T5763] Bluetooth: hci2: command tx timeout [ 63.100311][ T64] Bluetooth: hci0: command tx timeout [ 63.102543][ T5755] Bluetooth: hci1: command tx timeout [ 63.107106][ T5751] Bluetooth: hci3: command tx timeout [ 63.514258][ T10] IPVS: starting estimator thread 0... [ 63.517677][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 63.534910][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 63.541451][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 63.548383][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13'. [ 63.614894][ T6016] IPVS: using max 27 ests per chain, 64800 per kthread [ 64.782365][ T5898] usb 7-1: USB disconnect, device number 2 [ 66.347071][ T5842] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 66.573791][ T5458] veth1_vlan: left promiscuous mode [ 66.579005][ T5842] usb 6-1: Using ep0 maxpacket: 32 [ 66.606184][ T5842] usb 6-1: unable to get BOS descriptor or descriptor too short [ 66.612159][ T5842] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 66.615618][ T5842] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 66.619375][ T5842] usb 6-1: config 14 has no interface number 0 [ 66.622066][ T5842] usb 6-1: config 14 has no interface number 1 [ 66.624618][ T5842] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 66.628920][ T5842] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 66.633539][ T5842] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 66.638523][ T5842] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 66.643640][ T5842] usb 6-1: config 14 interface 57 has no altsetting 0 [ 66.646690][ T5842] usb 6-1: config 14 interface 228 has no altsetting 0 [ 66.654516][ T5842] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 66.658525][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.662556][ T5842] usb 6-1: Product: syz [ 66.664562][ T5842] usb 6-1: Manufacturer: syz [ 66.666694][ T5842] usb 6-1: SerialNumber: syz [ 66.780282][ T6051] overlay: Unknown parameter '/' [ 66.791314][ T6051] netlink: zone id is out of range [ 66.793449][ T6051] netlink: zone id is out of range [ 66.796117][ T6051] netlink: zone id is out of range [ 66.798761][ T6051] netlink: zone id is out of range [ 66.830270][ T6051] input: syz0 as /devices/virtual/input/input6 [ 68.549424][ T6069] Bluetooth: MGMT ver 1.23 [ 68.590630][ T6069] netlink: 284 bytes leftover after parsing attributes in process `syz.3.23'. [ 68.748786][ T6077] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 69.362046][ T5842] legousbtower 6-1:14.57: interrupt endpoints not found [ 69.573650][ T6084] comedi comedi0: dt2801: I/O port conflict (0x294,2) [ 69.664785][ T5842] legousbtower 6-1:14.228: interrupt endpoints not found [ 69.777836][ T5842] usb 6-1: USB disconnect, device number 2 [ 70.607344][ T6098] netlink: 'syz.0.27': attribute type 12 has an invalid length. [ 70.610952][ T6098] netlink: 'syz.0.27': attribute type 29 has an invalid length. [ 70.614266][ T6098] netlink: 148 bytes leftover after parsing attributes in process `syz.0.27'. [ 71.022678][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.025625][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.283417][ T6113] misc userio: The device must be registered before sending interrupts [ 71.585734][ T6102] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 71.592792][ T6102] VFS: Can't find a romfs filesystem on dev nullb0. [ 71.592792][ T6102] [ 72.119158][ T6126] Cannot find add_set index 0 as target [ 72.148339][ T6124] dvmrp1: entered allmulticast mode [ 72.294726][ T5842] libceph: connect (1)[c::]:6789 error -101 [ 72.299132][ T5842] libceph: mon0 (1)[c::]:6789 connect error [ 72.561571][ T56] libceph: connect (1)[c::]:6789 error -101 [ 72.566328][ T56] libceph: mon0 (1)[c::]:6789 connect error [ 72.757176][ T6126] ceph: No mds server is up or the cluster is laggy [ 73.585051][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.37'. [ 73.989546][ T6149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.571434][ T6149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.180066][ T6149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.855551][ T6149] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.189628][ T6163] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 76.199452][ T6163] Bluetooth: MGMT ver 1.23 [ 76.230054][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.264281][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.283093][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.297522][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.260004][ T6183] ======================================================= [ 77.260004][ T6183] WARNING: The mand mount option has been deprecated and [ 77.260004][ T6183] and is ignored by this kernel. Remove the mand [ 77.260004][ T6183] option from the mount to silence this warning. [ 77.260004][ T6183] ======================================================= [ 77.604019][ T6196] tmpfs: Unknown parameter 'grpquota_block_hardlimi' [ 78.321686][ T6210] openvswitch: netlink: Duplicate key (type 6). [ 79.484432][ T6219] netlink: 'syz.0.49': attribute type 74 has an invalid length. [ 80.092280][ T6227] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 80.095213][ T6227] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 80.100550][ T6227] vhci_hcd vhci_hcd.0: Device attached [ 81.131113][ T5842] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 81.199952][ T5842] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 81.275225][ T34] cfg80211: failed to load regulatory.db [ 81.667306][ T6249] loop3: detected capacity change from 0 to 32768 [ 81.679666][ T6249] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 81.899459][ T6249] md: array md0 already has disks! [ 81.968613][ T6228] vhci_hcd: connection reset by peer [ 81.975773][ T6250] md: could not open device unknown-block(0,0). [ 81.978516][ T6250] md: error, md_import_device() returned -6 [ 81.979462][ T13] vhci_hcd vhci_hcd.0: stop threads [ 81.983770][ T6251] md: could not open device unknown-block(7,1). [ 81.986667][ T6251] md: error, md_import_device() returned -16 [ 81.990735][ T13] vhci_hcd vhci_hcd.0: release socket [ 81.993159][ T6252] md: could not open device unknown-block(7,2). [ 81.996310][ T6252] md: error, md_import_device() returned -16 [ 81.996787][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 83.961526][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.59'. [ 84.909084][ T6279] syz.1.59 (6279) used greatest stack depth: 18152 bytes left [ 86.328977][ T5842] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 86.883236][ T6310] netlink: 'syz.3.65': attribute type 2 has an invalid length. [ 86.889889][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 87.063156][ T6310] : entered promiscuous mode [ 88.699454][ T5828] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 88.731070][ T6332] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 88.807492][ T6332] netlink: 'syz.3.70': attribute type 29 has an invalid length. [ 88.810420][ T6338] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 88.813365][ T6338] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 88.821759][ T6338] vhci_hcd vhci_hcd.0: Device attached [ 88.821969][ T6332] netlink: 'syz.3.70': attribute type 1 has an invalid length. [ 88.827277][ T6332] netlink: 756 bytes leftover after parsing attributes in process `syz.3.70'. [ 88.827603][ T5751] Bluetooth: hci1: unexpected cc 0x080f length: 90 > 1 [ 88.854373][ T5828] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 88.858411][ T5828] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 88.862758][ T5828] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.875535][ T5828] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 88.879102][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 88.882301][ T5828] usb 7-1: Product: syz [ 88.883931][ T5828] usb 7-1: Manufacturer: syz [ 88.885856][ T5828] usb 7-1: SerialNumber: syz [ 88.999610][ T5898] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 89.058972][ T5898] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 89.132809][ T6339] vhci_hcd: connection reset by peer [ 89.138702][ T5828] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 89.139228][ T13] vhci_hcd vhci_hcd.0: stop threads [ 89.146365][ T13] vhci_hcd vhci_hcd.0: release socket [ 89.151239][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 89.280013][ T6344] Zero length message leads to an empty skb [ 89.338184][ T5828] usb 7-1: USB disconnect, device number 3 [ 89.354793][ T5828] usblp0: removed [ 89.389450][ T6348] random: crng reseeded on system resumption [ 90.701964][ T6362] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 90.704205][ T6362] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 90.714799][ T6362] vhci_hcd vhci_hcd.0: Device attached [ 90.829066][ T5828] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 90.990455][ T5828] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 12336, setting to 64 [ 91.001659][ T5828] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 91.004774][ T5828] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.007822][ T5828] usb 8-1: Product: syz [ 91.009453][ T5828] usb 8-1: Manufacturer: syz [ 91.011428][ T5828] usb 8-1: SerialNumber: syz [ 91.016349][ T6360] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.705091][ T5828] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 91.890704][ T5842] usb 42-1: SetAddress Request (2) to port 0 [ 91.893742][ T5842] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 91.897971][ T6362] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 92.099104][ T6363] vhci_hcd: connection reset by peer [ 92.102671][ T13] vhci_hcd vhci_hcd.2: stop threads [ 92.104671][ T13] vhci_hcd vhci_hcd.2: release socket [ 92.113999][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 92.149479][ T6384] /dev/loop0: Can't open blockdev [ 92.860543][ T5751] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 92.883205][ T5751] Bluetooth: hci1: Injecting HCI hardware error event [ 92.887167][ T5751] Bluetooth: hci1: hardware error 0x00 [ 93.504380][ T6397] netlink: 32 bytes leftover after parsing attributes in process `syz.1.81'. [ 93.680528][ T5861] usb 8-1: USB disconnect, device number 2 [ 93.689859][ T5861] usblp0: removed [ 93.747777][ T42] kauditd_printk_skb: 131 callbacks suppressed [ 93.747794][ T42] audit: type=1326 audit(1785315142.155:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.0.83" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 93.763330][ T42] audit: type=1326 audit(1785315142.175:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.0.83" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 93.808559][ T42] audit: type=1326 audit(1785315142.185:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.0.83" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 93.822803][ T42] audit: type=1326 audit(1785315142.195:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.0.83" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 93.842413][ T42] audit: type=1326 audit(1785315142.195:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.0.83" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 93.865987][ T42] audit: type=1326 audit(1785315142.195:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.0.83" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 93.896547][ T42] audit: type=1326 audit(1785315142.195:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.0.83" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 93.940677][ T42] audit: type=1326 audit(1785315142.195:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.0.83" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 93.948103][ T6409] overlayfs: missing 'lowerdir' [ 93.976112][ T42] audit: type=1326 audit(1785315142.195:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.0.83" exe="/syz-executor" sig=0 arch=40000003 syscall=247 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 94.012115][ T42] audit: type=1326 audit(1785315142.275:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.0.83" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 94.249344][ T5898] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 95.021950][ T5751] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 96.443032][ T6426] x_tables: duplicate underflow at hook 1 [ 96.847110][ T6436] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 96.857609][ T6436] ALSA: mixer_oss: invalid index 137438 [ 96.939329][ T5842] usb 42-1: device descriptor read/8, error -110 [ 97.315735][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.91'. [ 97.320454][ T6439] bridge_slave_1: left allmulticast mode [ 97.323033][ T6439] bridge_slave_1: left promiscuous mode [ 97.328665][ T6439] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.341709][ T5842] usb usb42-port1: attempt power cycle [ 97.361209][ T6439] bridge_slave_0: left allmulticast mode [ 97.363460][ T6439] bridge_slave_0: left promiscuous mode [ 97.403711][ T6439] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.582721][ T6448] efs: cannot read volume header [ 97.970215][ T6454] Invalid ELF header magic: != ELF [ 98.401992][ T5842] usb usb42-port1: unable to enumerate USB device [ 98.485718][ T6453] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 98.488515][ T6453] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 98.524380][ T6453] vhci_hcd vhci_hcd.0: Device attached [ 99.089086][ T56] usb 40-1: SetAddress Request (2) to port 0 [ 99.091885][ T56] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 100.103986][ T6459] vhci_hcd: connection reset by peer [ 100.107791][ T13] vhci_hcd vhci_hcd.1: stop threads [ 100.113888][ T13] vhci_hcd vhci_hcd.1: release socket [ 100.117933][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 100.409889][ T6477] xt_connbytes: Forcing CT accounting to be enabled [ 100.412880][ T6477] Cannot find del_set index 0 as target [ 100.444488][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 100.447439][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 100.452671][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 100.455534][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 100.493501][ T6477] ceph: No mds server is up or the cluster is laggy [ 103.626207][ T6511] comedi comedi0: dt2801: I/O port conflict (0x294,2) [ 103.731241][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.105'. [ 103.739006][ T6511] bridge_slave_1: left allmulticast mode [ 103.748920][ T6511] bridge_slave_1: left promiscuous mode [ 103.754509][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.770709][ T6511] bridge_slave_0: left allmulticast mode [ 103.772471][ T6511] bridge_slave_0: left promiscuous mode [ 103.774417][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.790940][ T6512] CIFS: VFS: UNC: missing share name [ 103.799187][ T6512] CIFS: VFS: Malformed UNC in devname [ 103.801550][ T6508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.202541][ T56] usb 40-1: device descriptor read/8, error -110 [ 104.590130][ T56] usb usb40-port1: attempt power cycle [ 105.355172][ T6513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.370749][ T56] usb usb40-port1: unable to enumerate USB device [ 105.745772][ T6548] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 105.748628][ T6548] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 105.752180][ T6548] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 105.755286][ T6548] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 106.245330][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.112'. [ 106.828453][ T42] kauditd_printk_skb: 80 callbacks suppressed [ 106.828472][ T42] audit: type=1326 audit(1785315155.235:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.1.115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 106.850271][ T42] audit: type=1326 audit(1785315155.235:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.1.115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 106.864974][ T42] audit: type=1326 audit(1785315155.245:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.1.115" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 106.880440][ T42] audit: type=1326 audit(1785315155.245:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.1.115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 106.897947][ T42] audit: type=1326 audit(1785315155.245:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.1.115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 106.918319][ T42] audit: type=1326 audit(1785315155.245:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.1.115" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 106.929190][ T42] audit: type=1326 audit(1785315155.245:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.1.115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 106.939497][ T42] audit: type=1326 audit(1785315155.245:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.1.115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 106.947894][ T42] audit: type=1326 audit(1785315155.245:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.1.115" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 106.957326][ T42] audit: type=1326 audit(1785315155.255:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6555 comm="syz.1.115" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 107.857067][ T6572] binder: 6571:6572 ioctl c00c6211 0 returned -14 [ 108.691659][ T6586] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 108.693786][ T6586] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 108.713679][ T6586] vhci_hcd vhci_hcd.0: Device attached [ 108.786583][ T6589] vlan2: entered promiscuous mode [ 108.794968][ T6589] hsr0: entered promiscuous mode [ 108.801860][ T6589] vlan2: entered allmulticast mode [ 108.808545][ T6589] hsr0: entered allmulticast mode [ 108.815246][ T6589] hsr_slave_0: entered allmulticast mode [ 108.823781][ T6589] hsr_slave_1: entered allmulticast mode [ 109.010900][ T5861] usb 38-1: SetAddress Request (2) to port 0 [ 109.014361][ T5861] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 109.075317][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 109.380341][ T6589] hsr_slave_0: left promiscuous mode [ 109.415267][ T6589] hsr_slave_1: left promiscuous mode [ 109.726751][ T6600] random: crng reseeded on system resumption [ 109.842367][ T6587] vhci_hcd: connection reset by peer [ 109.846749][ T13] vhci_hcd vhci_hcd.0: stop threads [ 109.857185][ T13] vhci_hcd vhci_hcd.0: release socket [ 109.866807][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 111.491325][ T6616] capability: warning: `syz.0.125' uses 32-bit capabilities (legacy support in use) [ 112.119064][ T5898] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 112.281057][ T5898] usb 8-1: unable to get BOS descriptor or descriptor too short [ 112.290771][ T5898] usb 8-1: not running at top speed; connect to a high speed hub [ 112.303304][ T5898] usb 8-1: config 10 has an invalid interface number: 3 but max is 0 [ 112.311519][ T5898] usb 8-1: config 10 has no interface number 0 [ 112.317711][ T5898] usb 8-1: config 10 interface 3 has no altsetting 0 [ 112.323321][ T5898] usb 8-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=14.c2 [ 112.331873][ T5898] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.338928][ T5898] usb 8-1: Product: syz [ 112.343944][ T5898] usb 8-1: Manufacturer: syz [ 112.345974][ T5898] usb 8-1: SerialNumber: syz [ 112.697707][ T6631] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 112.841808][ T5898] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 112.858406][ T5898] usb 8-1: selecting invalid altsetting 0 [ 112.864143][ T2519] pvrusb2: Invalid write control endpoint [ 112.865446][ T5898] usb 8-1: USB disconnect, device number 3 [ 112.978533][ T2519] pvrusb2: Invalid write control endpoint [ 112.988164][ T2519] pvrusb2: Invalid write control endpoint [ 112.995467][ T2519] pvrusb2: Invalid write control endpoint [ 113.008958][ T2519] pvrusb2: Invalid write control endpoint [ 113.013815][ T2519] pvrusb2: Invalid write control endpoint [ 113.018554][ T2519] pvrusb2: Invalid write control endpoint [ 113.024366][ T2519] pvrusb2: Invalid write control endpoint [ 113.037019][ T2519] pvrusb2: Invalid write control endpoint [ 113.039860][ T2519] pvrusb2: Invalid write control endpoint [ 113.042562][ T2519] pvrusb2: Invalid write control endpoint [ 113.044977][ T2519] pvrusb2: Invalid write control endpoint [ 113.047467][ T2519] pvrusb2: Invalid write control endpoint [ 113.058901][ T2519] pvrusb2: Invalid write control endpoint [ 113.061665][ T2519] pvrusb2: Invalid write control endpoint [ 113.066373][ T2519] pvrusb2: Invalid write control endpoint [ 113.071362][ T2519] pvrusb2: Invalid write control endpoint [ 113.079090][ T2519] pvrusb2: Invalid write control endpoint [ 113.084025][ T2519] pvrusb2: Invalid write control endpoint [ 113.088719][ T2519] pvrusb2: Invalid write control endpoint [ 113.093589][ T2519] pvrusb2: Invalid write control endpoint [ 113.098392][ T2519] pvrusb2: Invalid write control endpoint [ 113.101266][ T2519] pvrusb2: Invalid write control endpoint [ 113.103844][ T2519] pvrusb2: Invalid write control endpoint [ 113.106458][ T2519] pvrusb2: Invalid write control endpoint [ 113.109303][ T2519] pvrusb2: Invalid write control endpoint [ 113.111785][ T2519] pvrusb2: Invalid write control endpoint [ 113.115075][ T2519] pvrusb2: Invalid write control endpoint [ 113.117679][ T2519] pvrusb2: Invalid write control endpoint [ 113.120642][ T2519] pvrusb2: Invalid write control endpoint [ 113.123106][ T2519] pvrusb2: Invalid write control endpoint [ 113.125482][ T2519] pvrusb2: Invalid write control endpoint [ 113.128181][ T2519] pvrusb2: Invalid write control endpoint [ 113.137793][ T2519] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 113.215289][ T2519] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_a) [ 113.229759][ T2519] pvrusb2: Invalid write control endpoint [ 113.234854][ T2519] pvrusb2: Invalid write control endpoint [ 113.239600][ T2519] pvrusb2: Invalid write control endpoint [ 113.244403][ T2519] pvrusb2: Invalid write control endpoint [ 113.253392][ T2519] pvrusb2: Invalid write control endpoint [ 113.255878][ T2519] pvrusb2: Invalid write control endpoint [ 113.258222][ T2519] pvrusb2: Invalid write control endpoint [ 113.266132][ T2519] pvrusb2: Invalid write control endpoint [ 113.270865][ T2519] pvrusb2: Invalid write control endpoint [ 113.275637][ T2519] pvrusb2: Invalid write control endpoint [ 113.280281][ T2519] pvrusb2: Invalid write control endpoint [ 113.286825][ T2519] pvrusb2: Invalid write control endpoint [ 113.293962][ T2519] pvrusb2: Invalid write control endpoint [ 113.296480][ T2519] pvrusb2: Invalid write control endpoint [ 113.301294][ T2519] pvrusb2: Invalid write control endpoint [ 113.305923][ T2519] pvrusb2: Invalid write control endpoint [ 113.310617][ T2519] pvrusb2: Invalid write control endpoint [ 113.318590][ T2519] pvrusb2: Invalid write control endpoint [ 113.321183][ T2519] pvrusb2: Invalid write control endpoint [ 113.323588][ T2519] pvrusb2: Invalid write control endpoint [ 113.326004][ T2519] pvrusb2: Invalid write control endpoint [ 113.344307][ T2519] pvrusb2: Attached sub-driver cs53l32a [ 113.378495][ T2519] pvrusb2: Invalid write control endpoint [ 113.381092][ T2519] pvrusb2: Invalid write control endpoint [ 113.386640][ T2519] pvrusb2: Invalid write control endpoint [ 113.389225][ T2519] pvrusb2: Invalid write control endpoint [ 113.391560][ T2519] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 113.398496][ T2519] pvrusb2: Device being rendered inoperable [ 113.401393][ T2519] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 113.408413][ T2519] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 113.523254][ T6638] 9pnet_virtio: no channels available for device c::: [ 114.059958][ T5861] usb 38-1: device descriptor read/8, error -110 [ 114.461299][ T5861] usb usb38-port1: attempt power cycle [ 114.461796][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.130'. [ 114.467473][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 114.484600][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.488282][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.493332][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.497153][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.536432][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 115.122409][ T5861] usb usb38-port1: unable to enumerate USB device [ 115.581024][ T5751] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 115.584522][ T5755] Bluetooth: hci4: command 0x1003 tx timeout [ 116.085475][ T6663] Invalid ELF header magic: != ELF [ 116.164700][ T6663] netlink: 'syz.1.136': attribute type 25 has an invalid length. [ 116.505238][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 116.508998][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 116.949379][ T6665] ceph: No mds server is up or the cluster is laggy [ 117.513957][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'. [ 117.596583][ T6674] 8021q: adding VLAN 0 to HW filter on device eth0 [ 117.622248][ T6674] 8021q: adding VLAN 0 to HW filter on device eth1 [ 117.631603][ T6674] 8021q: adding VLAN 0 to HW filter on device eth2 [ 117.638466][ T6674] 8021q: adding VLAN 0 to HW filter on device eth3 [ 117.646784][ T6682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.652876][ T6682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.664923][ T6682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.679028][ T6682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.786199][ T6689] binder: 6688:6689 ioctl c00c6211 0 returned -14 [ 118.010609][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 118.191539][ T6697] efs: cannot read volume header [ 119.220562][ T6709] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 119.268198][ T6709] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref] [ 119.271859][ T6709] pci 0000:00:01.0: BAR 2 [mem 0xfeaf4000-0xfeaf4fff] [ 119.278187][ T6709] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 119.289856][ T6709] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 119.340865][ T6709] pci 0000:00:01.0: Adding to iommu group 1 [ 119.362479][ T6709] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 119.365361][ T6709] pci 0000:00:01.0: vgaarb: bridge control possible [ 119.367998][ T6709] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 119.382294][ T6709] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 119.398418][ T6709] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 119.410650][ T6709] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 119.432725][ T6709] [drm] Found bochs VGA, ID 0xb0c5. [ 119.434731][ T6709] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 119.484144][ T6709] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 119.572722][ T6709] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 119.900735][ T6718] Cannot find add_set index 0 as target [ 119.967705][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 119.975264][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 120.249365][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 120.253448][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 120.267140][ T6724] /dev/loop2: Can't open blockdev [ 120.683370][ T6718] ceph: No mds server is up or the cluster is laggy [ 120.780711][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 120.783780][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 121.264268][ T6731] Invalid ELF header magic: != ELF [ 121.336721][ T6731] netlink: 'syz.3.148': attribute type 25 has an invalid length. [ 123.762566][ T6783] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.767287][ T6783] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.935149][ T6785] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 123.972186][ T6786] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 123.973487][ T6785] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 123.974308][ T6786] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 123.977007][ T6785] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 123.986882][ T6785] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 123.989779][ T6785] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 124.004032][ T6785] pci 0000:00:01.0: Adding to iommu group 1 [ 124.012103][ T6785] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 124.014383][ T6785] pci 0000:00:01.0: vgaarb: bridge control possible [ 124.015793][ T6786] vhci_hcd vhci_hcd.0: Device attached [ 124.018248][ T6785] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 124.032907][ T6785] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 124.035721][ T6785] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 124.043706][ T6785] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 124.051770][ T6785] [drm] Found bochs VGA, ID 0xb0c5. [ 124.053783][ T6785] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 124.073454][ T6785] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 124.130767][ T6785] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 124.472702][ T5861] usb 38-1: SetAddress Request (6) to port 0 [ 124.501054][ T5861] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 124.697096][ T6795] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 124.754014][ T6795] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 124.757191][ T6795] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 124.758575][ T6787] vhci_hcd: connection reset by peer [ 124.760178][ T6795] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 124.764518][ T13] vhci_hcd vhci_hcd.0: stop threads [ 124.765650][ T6795] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 124.766462][ T13] vhci_hcd vhci_hcd.0: release socket [ 124.773132][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 124.780264][ T6795] pci 0000:00:01.0: Adding to iommu group 1 [ 124.788635][ T6795] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 124.791415][ T6795] pci 0000:00:01.0: vgaarb: bridge control possible [ 124.793424][ T6795] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 124.805568][ T6795] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 124.809047][ T6795] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 124.813923][ T6795] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 124.837097][ T6795] [drm] Found bochs VGA, ID 0xb0c5. [ 124.839209][ T6795] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 124.854158][ T6795] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 124.931843][ T6795] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 125.345389][ T6808] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 125.348122][ T6808] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 125.353568][ T6808] vhci_hcd vhci_hcd.0: Device attached [ 125.652568][ T56] usb 40-1: SetAddress Request (6) to port 0 [ 125.652608][ T56] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 126.343956][ T6810] vhci_hcd: connection reset by peer [ 126.346114][ T12] vhci_hcd vhci_hcd.1: stop threads [ 126.348306][ T12] vhci_hcd vhci_hcd.1: release socket [ 126.363125][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 126.457298][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 126.457311][ T42] audit: type=1326 audit(1785315174.865:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.3.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 126.465849][ T42] audit: type=1326 audit(1785315174.865:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.3.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 126.472887][ T42] audit: type=1326 audit(1785315174.865:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.3.161" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 126.479484][ T42] audit: type=1326 audit(1785315174.875:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.3.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 126.486309][ T42] audit: type=1326 audit(1785315174.875:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.3.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 126.493420][ T42] audit: type=1326 audit(1785315174.875:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.3.161" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 126.500837][ T42] audit: type=1326 audit(1785315174.875:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.3.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 126.508130][ T42] audit: type=1326 audit(1785315174.875:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.3.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 126.515444][ T42] audit: type=1326 audit(1785315174.875:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.3.161" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 126.522557][ T42] audit: type=1326 audit(1785315174.875:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.3.161" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 126.684070][ T6819] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 127.279964][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'. [ 127.387610][ T9] libceph: connect (1)[c::]:6789 error -101 [ 127.390984][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 127.659209][ T9] libceph: connect (1)[c::]:6789 error -101 [ 127.661862][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 128.190899][ T9] libceph: connect (1)[c::]:6789 error -101 [ 128.197927][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 128.200149][ T6844] ceph: No mds server is up or the cluster is laggy [ 128.551746][ T6862] overlayfs: missing 'lowerdir' [ 129.231050][ T6867] Cannot find add_set index 0 as target [ 129.262902][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 129.394587][ T6877] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 129.416457][ T6877] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 129.420590][ T6877] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 129.423215][ T6877] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 129.426107][ T6877] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 129.437055][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 129.443314][ T6877] pci 0000:00:01.0: Adding to iommu group 1 [ 129.450397][ T6877] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 129.452939][ T6877] pci 0000:00:01.0: vgaarb: bridge control possible [ 129.455132][ T6877] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 129.467002][ T6877] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 129.470429][ T6877] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 129.474453][ T6877] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 129.485873][ T6877] [drm] Found bochs VGA, ID 0xb0c5. [ 129.487719][ T6877] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 129.515706][ T6877] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 129.579765][ T5861] usb 38-1: device descriptor read/8, error -110 [ 129.591458][ T6877] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 129.709532][ T34] libceph: connect (1)[c::]:6789 error -101 [ 129.714255][ T6867] ceph: No mds server is up or the cluster is laggy [ 129.718349][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 129.837787][ T6888] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 129.856791][ T6888] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 129.860093][ T6888] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 129.863355][ T6888] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 129.867198][ T6888] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 129.890945][ T6888] pci 0000:00:01.0: Adding to iommu group 1 [ 129.902033][ T6888] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 129.904921][ T6888] pci 0000:00:01.0: vgaarb: bridge control possible [ 129.907361][ T6888] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 129.922478][ T6888] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 129.926732][ T6888] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 129.932021][ T6888] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 129.945439][ T6888] [drm] Found bochs VGA, ID 0xb0c5. [ 129.947747][ T6888] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 129.966283][ T6888] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 129.971834][ T5861] usb usb38-port1: attempt power cycle [ 130.043610][ T6888] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 130.168417][ T6900] overlayfs: failed lookup in lower (newroot/45, name='file1', err=-40): overlapping layers [ 130.268457][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 130.273872][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 130.474841][ T6911] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.532190][ T41] libceph: connect (1)[c::]:6789 error -101 [ 130.534904][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 130.540189][ T5861] usb usb38-port1: unable to enumerate USB device [ 130.660686][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 130.699479][ T56] usb 40-1: device descriptor read/8, error -110 [ 130.808924][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 130.812802][ T34] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 130.815496][ T34] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.818553][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.821995][ T34] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.825511][ T34] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.829799][ T34] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.833397][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.040735][ T41] libceph: connect (1)[c::]:6789 error -101 [ 131.043074][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 131.055215][ T34] usb 8-1: usb_control_msg returned -71 [ 131.058576][ T34] usbtmc 8-1:16.0: can't read capabilities [ 131.065330][ T6902] ceph: No mds server is up or the cluster is laggy [ 131.068223][ T34] usb 8-1: USB disconnect, device number 4 [ 131.089491][ T56] usb usb40-port1: attempt power cycle [ 131.215080][ T6915] Invalid ELF header magic: != ELF [ 131.714452][ T6920] binder: 6918:6920 ioctl c00c6211 0 returned -14 [ 131.920360][ T56] usb usb40-port1: unable to enumerate USB device [ 132.462194][ T6928] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 132.479186][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.516248][ T6928] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 132.523067][ T6928] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 132.531058][ T6928] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 132.543893][ T6928] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 132.568367][ T6928] pci 0000:00:01.0: Adding to iommu group 1 [ 132.581810][ T6928] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 132.583986][ T6928] pci 0000:00:01.0: vgaarb: bridge control possible [ 132.585980][ T6928] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 132.615064][ T6928] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 132.620441][ T6928] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 132.631519][ T6928] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 132.655164][ T6928] [drm] Found bochs VGA, ID 0xb0c5. [ 132.656869][ T6928] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 132.668455][ T6928] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 133.166449][ T6944] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 133.173459][ T6946] gretap1: entered promiscuous mode [ 133.175791][ T6946] batman_adv: batadv0: Adding interface: gretap1 [ 133.178331][ T6946] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 133.190769][ T6944] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 133.497897][ T6944] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 133.501230][ T6944] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 133.504889][ T6944] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 133.519781][ T6944] pci 0000:00:01.0: Adding to iommu group 1 [ 133.528100][ T6944] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 133.530954][ T6944] pci 0000:00:01.0: vgaarb: bridge control possible [ 133.533648][ T6944] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 133.544364][ T6944] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 133.547367][ T6944] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 133.569972][ T6946] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 133.576393][ T6944] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 133.603647][ T6944] [drm] Found bochs VGA, ID 0xb0c5. [ 133.607748][ T6944] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 133.629336][ T6944] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 133.675266][ T6944] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 134.616143][ T6964] binder: 6963:6964 ioctl 4018620d 0 returned -22 [ 134.656830][ T6964] binder: 6963:6964 ioctl c0306201 0 returned -14 [ 134.683307][ T6966] netlink: 'syz.3.189': attribute type 13 has an invalid length. [ 134.686623][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.3.189'. [ 134.735159][ T6966] random: crng reseeded on system resumption [ 134.838055][ T6955] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 136.216043][ T6993] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 136.251769][ T6993] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 136.265343][ T6993] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 136.276548][ T6993] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 136.287342][ T6993] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 136.299686][ T6993] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 12229 usecs [ 136.321388][ T6993] pci 0000:00:01.0: Adding to iommu group 1 [ 136.339428][ T6993] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 136.342686][ T6993] pci 0000:00:01.0: vgaarb: bridge control possible [ 136.345639][ T6993] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 136.375933][ T6993] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 136.382442][ T6993] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 136.388426][ T6999] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.388508][ T6993] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 136.392262][ T6999] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.406203][ T6993] [drm] Found bochs VGA, ID 0xb0c5. [ 136.408521][ T6993] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 136.425194][ T6993] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 136.487706][ T6993] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 137.680752][ T7010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.986762][ T7022] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 138.024782][ T7022] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 138.032641][ T7022] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 138.037858][ T7022] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 138.045377][ T7022] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 138.080966][ T7022] pci 0000:00:01.0: Adding to iommu group 1 [ 138.100449][ T7022] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 138.102527][ T7022] pci 0000:00:01.0: vgaarb: bridge control possible [ 138.104542][ T7022] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 138.143290][ T7022] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 138.147463][ T7022] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 138.156620][ T7022] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 138.237063][ T7022] [drm] Found bochs VGA, ID 0xb0c5. [ 138.239409][ T7022] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 138.452679][ T7022] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 138.473873][ T7023] Cannot find add_set index 0 as target [ 138.494411][ T7022] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 138.510492][ T9] libceph: connect (1)[c::]:6789 error -101 [ 138.513295][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 138.823611][ T7023] ceph: No mds server is up or the cluster is laggy [ 138.849390][ T9] libceph: connect (1)[c::]:6789 error -101 [ 139.422585][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 140.904017][ T7071] Cannot find add_set index 0 as target [ 140.913363][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 140.915526][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 141.179394][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 141.182716][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 141.311856][ T7069] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 141.563589][ T7084] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 141.692570][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 141.698587][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 141.784082][ T7071] ceph: No mds server is up or the cluster is laggy [ 144.028964][ T7113] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 144.057488][ T7113] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 144.063764][ T7113] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 144.069586][ T7113] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 144.076337][ T7113] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 144.093755][ T7113] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 17180 usecs [ 144.131761][ T7113] pci 0000:00:01.0: Adding to iommu group 1 [ 144.152300][ T7113] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 144.155382][ T7113] pci 0000:00:01.0: vgaarb: bridge control possible [ 144.158180][ T7113] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 144.190978][ T7113] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 144.200662][ T7113] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 144.211647][ T7113] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 144.250664][ T7113] [drm] Found bochs VGA, ID 0xb0c5. [ 144.256798][ T7113] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 144.323704][ T7113] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 144.488470][ T7113] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 145.369642][ T7123] Invalid ELF header magic: != ELF [ 145.598972][ T56] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 145.739845][ T7131] binder: 7130:7131 ioctl 4018620d 0 returned -22 [ 145.753505][ T7131] binder: 7130:7131 ioctl c0306201 0 returned -14 [ 145.789044][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 145.796025][ T56] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 245, changing to 7 [ 145.803985][ T56] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 241, changing to 7 [ 145.815082][ T56] usb 7-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 145.820021][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.823635][ T56] usb 7-1: Product: syz [ 145.826722][ T56] usb 7-1: Manufacturer: syz [ 145.829624][ T56] usb 7-1: SerialNumber: syz [ 146.276076][ T7147] bond1 (unregistering): Released all slaves [ 146.374604][ T56] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 146.727446][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 146.748289][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 147.029564][ T5842] libceph: connect (1)[c::]:6789 error -101 [ 147.038908][ T5842] libceph: mon0 (1)[c::]:6789 connect error [ 147.216228][ T56] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 147.220642][ T7161] overlayfs: failed lookup in lower (newroot/61, name='file1', err=-40): overlapping layers [ 147.232023][ T7158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.262833][ T7154] ceph: No mds server is up or the cluster is laggy [ 147.710658][ T56] snd-usb-us122l 7-1:1.1: usb_set_interface error [ 147.743483][ T56] snd-usb-us122l 7-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 147.864796][ T56] usb 7-1: USB disconnect, device number 4 [ 147.925865][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 147.928632][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 148.027164][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 148.030278][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 148.037729][ T5987] udevd[5987]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.323494][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 148.357251][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 148.375877][ T7181] bridge0: entered promiscuous mode [ 148.377863][ T7181] bridge0: entered allmulticast mode [ 148.429981][ T7177] ceph: No mds server is up or the cluster is laggy [ 149.143327][ T7195] bridge0: left allmulticast mode [ 149.283656][ T7195] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 149.304653][ T7195] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 149.307579][ T7195] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 149.312732][ T7195] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 149.315481][ T7195] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 149.325269][ T7195] pci 0000:00:01.0: Adding to iommu group 1 [ 149.331779][ T7195] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 149.334269][ T7195] pci 0000:00:01.0: vgaarb: bridge control possible [ 149.336763][ T7195] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 149.350351][ T7195] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 149.355684][ T7195] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 149.361392][ T7195] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 149.400040][ T7195] [drm] Found bochs VGA, ID 0xb0c5. [ 149.406906][ T7195] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 149.439344][ T7195] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 149.455239][ T7201] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 149.457298][ T7201] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 149.470388][ T7201] vhci_hcd vhci_hcd.0: Device attached [ 149.587350][ T7195] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 149.739253][ T5842] usb 44-1: SetAddress Request (2) to port 0 [ 149.758744][ T5842] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 150.015816][ T7202] vhci_hcd: connection reset by peer [ 150.019421][ T13] vhci_hcd vhci_hcd.3: stop threads [ 150.021568][ T13] vhci_hcd vhci_hcd.3: release socket [ 150.026038][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 151.086924][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 151.100334][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 151.288629][ T7230] netlink: 9 bytes leftover after parsing attributes in process `syz.2.250'. [ 151.382578][ T7218] ceph: No mds server is up or the cluster is laggy [ 151.385423][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 151.386216][ T7230] gretap0: entered promiscuous mode [ 151.387864][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 151.500915][ T7230] netlink: 5 bytes leftover after parsing attributes in process `syz.2.250'. [ 151.504029][ T7230] 0ªî{X¹¦: renamed from gretap0 [ 151.509356][ T7230] 0ªî{X¹¦: left promiscuous mode [ 151.511016][ T7230] 0ªî{X¹¦: entered allmulticast mode [ 151.514008][ T7230] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 151.624716][ T7235] x_tables: duplicate underflow at hook 1 [ 152.280420][ T7242] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 152.310082][ T7242] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 152.318574][ T7242] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 152.321477][ T7242] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 152.324429][ T7242] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 152.342909][ T7242] pci 0000:00:01.0: Adding to iommu group 1 [ 152.351369][ T7242] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 152.354186][ T7242] pci 0000:00:01.0: vgaarb: bridge control possible [ 152.356949][ T7242] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 152.379940][ T7242] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 152.396088][ T7242] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 152.411556][ T7242] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 152.421672][ T7242] [drm] Found bochs VGA, ID 0xb0c5. [ 152.423858][ T7242] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 152.436714][ T7242] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 152.504372][ T7248] netlink: 'syz.1.254': attribute type 10 has an invalid length. [ 152.577646][ T7242] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 152.579021][ T7248] team0: Port device dummy0 added [ 152.830239][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.255'. [ 152.890469][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 152.890867][ T42] audit: type=1326 audit(1785315201.295:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7255 comm="syz.3.255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 152.893872][ T7257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.919224][ T42] audit: type=1326 audit(1785315201.315:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7255 comm="syz.3.255" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76fec code=0x7ffc0000 [ 153.608088][ T7267] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 153.610712][ T7267] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 153.663228][ T7267] vhci_hcd vhci_hcd.0: Device attached [ 153.773039][ T7267] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 154.520971][ T7268] vhci_hcd: connection closed [ 154.522303][ T13] vhci_hcd vhci_hcd.3: stop threads [ 154.532358][ T13] vhci_hcd vhci_hcd.3: release socket [ 154.538060][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 154.864237][ T5842] usb 44-1: device descriptor read/8, error -110 [ 155.260067][ T5842] usb usb44-port1: attempt power cycle [ 155.600281][ T7297] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 155.653206][ T7297] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 155.660318][ T7297] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 155.663712][ T7297] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 155.669337][ T7297] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 155.696488][ T7297] pci 0000:00:01.0: Adding to iommu group 1 [ 155.707164][ T7297] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 155.710138][ T7297] pci 0000:00:01.0: vgaarb: bridge control possible [ 155.712610][ T7297] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 155.763525][ T7297] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 155.779481][ T7297] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 155.793701][ T7297] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 155.837505][ T7297] [drm] Found bochs VGA, ID 0xb0c5. [ 155.841069][ T5842] usb usb44-port1: unable to enumerate USB device [ 155.844287][ T7297] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 155.868044][ T7297] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 155.937755][ T7297] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 156.049013][ T5898] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 156.210237][ T5898] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 156.214342][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.218034][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.225168][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.229338][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.233121][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.236321][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.239724][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.243088][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.246423][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.249423][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.252454][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.255762][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.259188][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.262284][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.265921][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.269779][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.273186][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.277082][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.281260][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.284919][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.289400][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.293241][ T5898] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 156.296772][ T5898] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 156.300847][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.305921][ T5898] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 156.309803][ T5898] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 156.313248][ T5898] usb 5-1: Product: syz [ 156.315095][ T5898] usb 5-1: Manufacturer: syz [ 156.316815][ T5898] usb 5-1: SerialNumber: syz [ 156.325409][ T5898] usb 5-1: config 0 descriptor?? [ 156.337179][ T5898] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 156.472357][ T7311] bond1 (unregistering): Released all slaves [ 156.870648][ T5855] usb 5-1: USB disconnect, device number 2 [ 156.875310][ T5855] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 157.008751][ C0] sr 2:0:0:0: [sr0] tag#8 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 157.011790][ C0] sr 2:0:0:0: [sr0] tag#8 CDB: Test Unit Ready [ 157.221048][ T7301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.242172][ T7301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.383751][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.394900][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.413209][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.432948][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.950882][ T7300] Process accounting resumed [ 158.556379][ T5842] libceph: connect (1)[c::]:6789 error -99 [ 158.564175][ T5842] libceph: mon0 (1)[c::]:6789 connect error [ 158.851652][ T7338] ceph: No mds server is up or the cluster is laggy [ 158.858404][ T5842] libceph: connect (1)[c::]:6789 error -99 [ 158.861403][ T5842] libceph: mon0 (1)[c::]:6789 connect error [ 159.074350][ T7352] cgroup: subsys name conflicts with all [ 159.295788][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'. [ 160.165170][ T5842] libceph: connect (1)[c::]:6789 error -101 [ 160.185503][ T5842] libceph: mon0 (1)[c::]:6789 connect error [ 160.451096][ T5842] libceph: connect (1)[c::]:6789 error -101 [ 160.461697][ T5842] libceph: mon0 (1)[c::]:6789 connect error [ 160.473706][ T7389] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 160.500064][ T7389] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 160.504194][ T7389] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 160.513308][ T7389] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 160.525843][ T7389] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 160.538869][ T7389] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 12888 usecs [ 160.562856][ T7379] ceph: No mds server is up or the cluster is laggy [ 160.567019][ T7389] pci 0000:00:01.0: Adding to iommu group 1 [ 160.580356][ T7389] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 160.583213][ T7389] pci 0000:00:01.0: vgaarb: bridge control possible [ 160.585897][ T7389] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 160.596662][ T7389] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 160.601954][ T7389] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 160.606758][ T7389] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 160.619467][ T7389] [drm] Found bochs VGA, ID 0xb0c5. [ 160.621815][ T7389] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 160.637414][ T7389] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 160.680319][ T7389] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 160.895089][ T7400] binder: 7397:7400 ioctl c00c6211 0 returned -14 [ 161.190081][ T5751] Bluetooth: hci0: command tx timeout [ 161.608875][ T5861] libceph: connect (1)[c::]:6789 error -99 [ 161.645927][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 161.726845][ T7407] ceph: No mds server is up or the cluster is laggy [ 162.353843][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'. [ 162.688294][ T42] audit: type=1326 audit(1785315211.095:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.1.284" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 162.696227][ T42] audit: type=1326 audit(1785315211.095:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7420 comm="syz.1.284" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 162.733223][ T7426] Cannot find add_set index 0 as target [ 163.181077][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 163.183180][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 163.427549][ T7426] ceph: No mds server is up or the cluster is laggy [ 163.443568][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 163.446111][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 163.683846][ T7441] xt_CT: You must specify a L4 protocol and not use inversions on it [ 164.756791][ T7457] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 165.038448][ T7460] binder: 7459:7460 ioctl c00c6211 0 returned -14 [ 167.764664][ T7486] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 167.797170][ T7486] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 167.807516][ T7486] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 167.810334][ T7486] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 167.813261][ T7486] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 167.833230][ T7486] pci 0000:00:01.0: Adding to iommu group 1 [ 167.842306][ T7486] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 167.845156][ T7486] pci 0000:00:01.0: vgaarb: bridge control possible [ 167.847872][ T7486] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 167.863073][ T7486] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 167.866840][ T7486] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 167.871826][ T7486] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 167.884594][ T7486] [drm] Found bochs VGA, ID 0xb0c5. [ 167.886794][ T7486] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 167.908685][ T7486] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 167.980957][ T7486] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 168.306809][ T7497] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 168.309223][ T7497] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 168.316581][ T7497] vhci_hcd vhci_hcd.0: Device attached [ 168.450061][ T7497] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 168.592991][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 168.604198][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 168.610431][ T5842] usb 40-1: SetAddress Request (10) to port 0 [ 168.619586][ T5842] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 168.898069][ T7501] ceph: No mds server is up or the cluster is laggy [ 168.905975][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 168.952780][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 169.957708][ T7498] vhci_hcd: connection reset by peer [ 169.962393][ T13] vhci_hcd vhci_hcd.1: stop threads [ 169.964210][ T13] vhci_hcd vhci_hcd.1: release socket [ 169.971731][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 170.233912][ T7517] bond1 (unregistering): Released all slaves [ 170.411473][ T7525] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.738651][ T7536] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 171.762389][ T7536] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 171.765220][ T7536] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 171.767610][ T7536] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 171.772024][ T7536] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 171.779765][ T7536] pci 0000:00:01.0: Adding to iommu group 1 [ 171.785365][ T7536] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 171.787504][ T7536] pci 0000:00:01.0: vgaarb: bridge control possible [ 171.789634][ T7536] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 171.804627][ T7536] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 171.807546][ T7536] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 171.811757][ T7536] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 171.820802][ T7536] [drm] Found bochs VGA, ID 0xb0c5. [ 171.823083][ T7536] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 171.848458][ T7536] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 171.922183][ T7536] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 172.203276][ T7546] binder: BINDER_SET_CONTEXT_MGR already set [ 172.211824][ T7546] binder: 7544:7546 ioctl 4018620d 80000100 returned -16 [ 172.355770][ T7552] loop9: detected capacity change from 0 to 2640 [ 172.360772][ T7552] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.364803][ T7552] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.370606][ T7552] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.373369][ T7552] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.376205][ T7552] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.380081][ T7552] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.383281][ T7552] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.387037][ T7552] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.396253][ T7552] ldm_validate_partition_table(): Disk read failed. [ 172.399039][ T7552] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.402143][ T7552] Buffer I/O error on dev loop9, logical block 0, async page read [ 172.405657][ T7552] Dev loop9: unable to read RDB block 0 [ 172.408571][ T7552] loop9: unable to read partition table [ 172.415210][ T7552] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 172.629037][ T5898] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 172.647452][ T7553] x_tables: duplicate underflow at hook 1 [ 172.715228][ T7561] nbd: socks must be embedded in a SOCK_ITEM attr [ 172.721179][ T7561] block nbd0: shutting down sockets [ 172.721661][ T7563] netlink: 40 bytes leftover after parsing attributes in process `syz.1.321'. [ 172.809884][ T5898] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 172.819232][ T5898] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.823562][ T5898] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.828364][ T5898] usb 7-1: config 0 interface 0 has no altsetting 0 [ 172.832644][ T5898] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.836492][ T5898] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.842008][ T5898] usb 7-1: config 0 interface 0 has no altsetting 0 [ 172.845459][ T5898] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.858087][ T5898] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.863146][ T5898] usb 7-1: config 0 interface 0 has no altsetting 0 [ 172.866631][ T5898] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.870520][ T5898] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.874227][ T5898] usb 7-1: config 0 interface 0 has no altsetting 0 [ 172.877534][ T5898] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.882101][ T5898] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.886418][ T5898] usb 7-1: config 0 interface 0 has no altsetting 0 [ 172.890410][ T5898] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.894005][ T5898] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.897939][ T5898] usb 7-1: config 0 interface 0 has no altsetting 0 [ 172.902170][ T5898] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.905737][ T5898] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.911274][ T5898] usb 7-1: config 0 interface 0 has no altsetting 0 [ 172.915830][ T5898] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 172.918689][ T5898] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 172.923478][ T5898] usb 7-1: config 0 interface 0 has no altsetting 0 [ 172.927473][ T5898] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 172.931101][ T5898] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 172.934268][ T5898] usb 7-1: Product: syz [ 172.935866][ T5898] usb 7-1: Manufacturer: syz [ 172.937777][ T5898] usb 7-1: SerialNumber: syz [ 172.945169][ T5898] usb 7-1: config 0 descriptor?? [ 172.950670][ T5898] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 173.220533][ T7555] 0ªî{X¹¦: left allmulticast mode [ 173.480717][ T5825] usb 7-1: USB disconnect, device number 5 [ 173.493217][ T5825] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 173.650251][ T7555] gretap1: left promiscuous mode [ 173.658545][ T7555] bridge0: left promiscuous mode [ 173.671463][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.675287][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.682880][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.686441][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.692631][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.696150][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.701670][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.705242][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.739017][ T5842] usb 40-1: device descriptor read/8, error -110 [ 173.820702][ T7589] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.129860][ T5842] usb usb40-port1: attempt power cycle [ 174.458533][ T7554] Process accounting resumed [ 174.710654][ T5842] usb usb40-port1: unable to enumerate USB device [ 174.785799][ T7612] Invalid ELF header magic: != ELF [ 174.855639][ T7612] netlink: 'syz.2.326': attribute type 25 has an invalid length. [ 175.306020][ T42] audit: type=1326 audit(1785315223.715:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.1.330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 175.367567][ T42] audit: type=1326 audit(1785315223.725:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.1.330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 175.463456][ T42] audit: type=1326 audit(1785315223.725:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.1.330" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 175.490960][ T42] audit: type=1326 audit(1785315223.725:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.1.330" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 175.506624][ T42] audit: type=1326 audit(1785315223.725:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7622 comm="syz.1.330" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f83fec code=0x7ffc0000 [ 175.745729][ T7635] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 178.349724][ T7663] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 178.352462][ T7663] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 178.382515][ T7663] vhci_hcd vhci_hcd.0: Device attached [ 178.680216][ T5898] usb 44-1: SetAddress Request (6) to port 0 [ 178.682913][ T5898] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 178.761626][ T7671] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 178.781293][ T7671] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 178.783701][ T7671] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 178.786073][ T7671] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 178.789989][ T7671] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 178.801000][ T7671] pci 0000:00:01.0: Adding to iommu group 1 [ 178.811611][ T7671] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 178.814395][ T7671] pci 0000:00:01.0: vgaarb: bridge control possible [ 178.816614][ T7671] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 178.826284][ T7671] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 178.829726][ T7671] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 178.833849][ T7671] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 178.849988][ T7671] [drm] Found bochs VGA, ID 0xb0c5. [ 178.854843][ T7671] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 178.871456][ T7664] vhci_hcd: connection reset by peer [ 178.872698][ T7671] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 178.887636][ T12] vhci_hcd vhci_hcd.3: stop threads [ 178.895780][ T12] vhci_hcd vhci_hcd.3: release socket [ 178.900690][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 178.931856][ T7671] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 179.096674][ T7678] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 179.165620][ T7678] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 179.179665][ T7678] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 179.201079][ T7678] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 179.240481][ T7678] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 179.255599][ T7678] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 27236 usecs [ 179.293540][ T7678] pci 0000:00:01.0: Adding to iommu group 1 [ 179.324833][ T7678] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 179.327086][ T7678] pci 0000:00:01.0: vgaarb: bridge control possible [ 179.329101][ T7678] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 179.369267][ T7678] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 179.379899][ T7678] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 179.396745][ T7678] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 179.435910][ T7678] [drm] Found bochs VGA, ID 0xb0c5. [ 179.446607][ T7678] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 179.694592][ T7678] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 179.856697][ T7678] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 180.623425][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 180.624184][ T5763] Bluetooth: hci0: command 0x0406 tx timeout [ 180.983040][ T7701] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 181.035598][ T7701] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 181.038670][ T7701] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 181.042084][ T7701] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 181.044727][ T7701] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 181.056621][ T7701] pci 0000:00:01.0: Adding to iommu group 1 [ 181.062443][ T7701] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 181.064967][ T7701] pci 0000:00:01.0: vgaarb: bridge control possible [ 181.067257][ T7701] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 181.078770][ T7701] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 181.081858][ T7701] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 181.085355][ T7701] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 181.094387][ T7701] [drm] Found bochs VGA, ID 0xb0c5. [ 181.096494][ T7701] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 181.146959][ T7701] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 181.203929][ T7701] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 183.165573][ T7728] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 183.187125][ T7728] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 183.190667][ T7728] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 183.194068][ T7728] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 183.197809][ T7728] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 183.212525][ T7728] pci 0000:00:01.0: Adding to iommu group 1 [ 183.221486][ T7728] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 183.224437][ T7728] pci 0000:00:01.0: vgaarb: bridge control possible [ 183.227180][ T7728] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 183.238721][ T7728] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 183.242647][ T7728] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 183.246684][ T7728] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 183.256808][ T7728] [drm] Found bochs VGA, ID 0xb0c5. [ 183.259509][ T7728] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 183.274159][ T7728] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 183.348633][ T7728] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 183.749124][ T5898] usb 44-1: device descriptor read/8, error -110 [ 184.156085][ T5898] usb usb44-port1: attempt power cycle [ 184.770817][ T5898] usb usb44-port1: unable to enumerate USB device [ 184.872679][ T5828] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 185.039781][ T5828] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 185.044373][ T5828] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.048269][ T5828] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.052856][ T5828] usb 6-1: config 0 interface 0 has no altsetting 0 [ 185.057310][ T5828] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.061154][ T5828] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.065595][ T5828] usb 6-1: config 0 interface 0 has no altsetting 0 [ 185.069958][ T5828] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.073753][ T5828] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.078292][ T5828] usb 6-1: config 0 interface 0 has no altsetting 0 [ 185.082772][ T5828] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.086545][ T5828] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.091269][ T5828] usb 6-1: config 0 interface 0 has no altsetting 0 [ 185.096786][ T5828] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.100930][ T5828] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.105603][ T5828] usb 6-1: config 0 interface 0 has no altsetting 0 [ 185.116550][ T5828] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.120474][ T5828] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.125133][ T5828] usb 6-1: config 0 interface 0 has no altsetting 0 [ 185.130359][ T5828] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.134164][ T5828] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.138816][ T5828] usb 6-1: config 0 interface 0 has no altsetting 0 [ 185.144508][ T5828] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.148221][ T5828] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.152942][ T5828] usb 6-1: config 0 interface 0 has no altsetting 0 [ 185.160465][ T5828] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 185.164268][ T5828] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 185.167860][ T5828] usb 6-1: Product: syz [ 185.169948][ T5828] usb 6-1: Manufacturer: syz [ 185.172047][ T5828] usb 6-1: SerialNumber: syz [ 185.183766][ T5828] usb 6-1: config 0 descriptor?? [ 185.199186][ T5828] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 185.637117][ T7757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.652967][ T7757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.729634][ T24] usb 6-1: USB disconnect, device number 3 [ 185.745649][ T24] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 185.803668][ T7769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.361'. [ 185.991992][ T7757] gretap1: left promiscuous mode [ 186.039485][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.044833][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.056739][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.063526][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.518304][ T7780] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 186.546157][ T7780] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 186.550720][ T7780] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 186.555805][ T7780] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 186.559670][ T7780] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 186.627875][ T7780] pci 0000:00:01.0: Adding to iommu group 1 [ 186.628339][ T7757] Process accounting resumed [ 186.635626][ T7780] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 186.638366][ T7780] pci 0000:00:01.0: vgaarb: bridge control possible [ 186.640944][ T7780] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 186.660284][ T7780] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 186.668813][ T7780] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 186.676745][ T7780] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 186.699691][ T41] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 186.704287][ T7780] [drm] Found bochs VGA, ID 0xb0c5. [ 186.708942][ T7780] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 186.730723][ T7780] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 186.796673][ T7780] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 188.402770][ T7809] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 190.542320][ T7832] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 190.571033][ T7832] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 190.573549][ T7832] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 190.583023][ T7832] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 190.589502][ T7832] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 190.616781][ T7832] pci 0000:00:01.0: Adding to iommu group 1 [ 190.631385][ T7832] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 190.633736][ T7832] pci 0000:00:01.0: vgaarb: bridge control possible [ 190.635905][ T7832] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 190.646012][ T7832] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 190.649138][ T7832] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 190.656198][ T7832] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 190.695821][ T7832] [drm] Found bochs VGA, ID 0xb0c5. [ 190.697462][ T7832] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 190.716151][ T7832] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 190.769306][ T7832] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 192.688470][ T7860] bond1 (unregistering): Released all slaves [ 192.800119][ T7866] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 193.490761][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 193.826832][ T7874] netlink: 'syz.2.385': attribute type 10 has an invalid length. [ 193.901858][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.006288][ T7882] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 194.043207][ T7882] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 194.052287][ T7882] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 194.056021][ T7882] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 194.060341][ T7882] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 194.080554][ T7882] pci 0000:00:01.0: Adding to iommu group 1 [ 194.092235][ T7882] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 194.095766][ T7882] pci 0000:00:01.0: vgaarb: bridge control possible [ 194.098567][ T7882] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 194.113102][ T7882] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 194.116986][ T7882] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 194.124695][ T7882] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 194.137024][ T7882] [drm] Found bochs VGA, ID 0xb0c5. [ 194.140065][ T7882] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 194.200275][ T7882] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 194.261985][ T7882] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 194.345762][ T7889] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 194.402225][ T7889] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 194.416440][ T7889] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 194.430473][ T7889] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 194.455507][ T7889] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 194.474233][ T7889] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 25032 usecs [ 194.501256][ T7889] pci 0000:00:01.0: Adding to iommu group 1 [ 194.516443][ T7889] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 194.519365][ T7889] pci 0000:00:01.0: vgaarb: bridge control possible [ 194.522163][ T7889] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 194.540869][ T7889] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 194.544411][ T7889] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 194.549482][ T7889] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 194.557605][ T7889] [drm] Found bochs VGA, ID 0xb0c5. [ 194.559452][ T7889] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 194.573635][ T7889] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 194.682723][ T7889] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 197.800567][ T7935] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 198.589055][ T41] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 198.761952][ T41] usb 5-1: unable to get BOS descriptor or descriptor too short [ 198.776354][ T41] usb 5-1: config 189 has an invalid interface number: 127 but max is 0 [ 198.782902][ T41] usb 5-1: config 189 has no interface number 0 [ 198.789618][ T41] usb 5-1: config 189 interface 127 has no altsetting 0 [ 198.801418][ T41] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=61.9f [ 198.807052][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.818180][ T41] usb 5-1: Product: syz [ 198.821602][ T41] usb 5-1: Manufacturer: syz [ 198.826166][ T41] usb 5-1: SerialNumber: syz [ 199.047900][ T5842] libceph: connect (1)[c::]:6789 error -101 [ 199.050946][ T5842] libceph: mon0 (1)[c::]:6789 connect error [ 199.310058][ T5842] libceph: connect (1)[c::]:6789 error -101 [ 199.313081][ T5842] libceph: mon0 (1)[c::]:6789 connect error [ 199.431015][ T7961] ceph: No mds server is up or the cluster is laggy [ 199.858091][ T7973] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 199.886375][ T7973] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 199.889000][ T7973] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 199.893413][ T7973] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 199.896193][ T7973] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 199.904921][ T7973] pci 0000:00:01.0: Adding to iommu group 1 [ 199.910284][ T7973] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 199.912581][ T7973] pci 0000:00:01.0: vgaarb: bridge control possible [ 199.914655][ T7973] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 199.922967][ T7973] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 199.925921][ T7973] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 199.930008][ T7973] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 199.942151][ T7973] [drm] Found bochs VGA, ID 0xb0c5. [ 199.944239][ T7973] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 199.954575][ T7973] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 200.005358][ T7973] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 200.086991][ T7981] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 200.089299][ T7981] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 200.095589][ T7981] vhci_hcd vhci_hcd.0: Device attached [ 200.555277][ T7981] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 200.609256][ T5842] usb 42-1: SetAddress Request (6) to port 0 [ 200.647214][ T5842] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 200.926045][ T7982] vhci_hcd: connection reset by peer [ 200.932455][ T13] vhci_hcd vhci_hcd.2: stop threads [ 200.934467][ T13] vhci_hcd vhci_hcd.2: release socket [ 200.936293][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 201.307184][ T41] usbserial_generic 5-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 201.355837][ T41] usbserial_generic 5-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 201.373739][ T41] usbserial_generic 5-1:189.127: device has no bulk endpoints [ 201.393286][ T41] safe_serial 5-1:189.127: safe_serial converter detected [ 201.405915][ T41] safe_serial 5-1:189.127: probe with driver safe_serial failed with error -22 [ 201.434718][ T41] usb 5-1: USB disconnect, device number 3 [ 201.475286][ T8005] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 201.504319][ T8005] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 201.507066][ T8005] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 201.516718][ T8005] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 201.524078][ T8005] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 201.542156][ T8005] pci 0000:00:01.0: Adding to iommu group 1 [ 201.550152][ T8005] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 201.552901][ T8005] pci 0000:00:01.0: vgaarb: bridge control possible [ 201.555420][ T8005] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 201.564778][ T8005] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 201.568037][ T8005] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 201.572131][ T8005] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 201.580010][ T8005] [drm] Found bochs VGA, ID 0xb0c5. [ 201.582224][ T8005] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 201.590315][ T8005] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 201.639349][ T8005] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 201.998359][ T8013] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 202.036066][ T8013] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 202.048179][ T8013] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 202.053746][ T8013] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 202.059289][ T8013] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 202.087951][ T8013] pci 0000:00:01.0: Adding to iommu group 1 [ 202.097867][ T8013] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 202.100021][ T8013] pci 0000:00:01.0: vgaarb: bridge control possible [ 202.102063][ T8013] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 202.126089][ T8013] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 202.130057][ T8013] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 202.136693][ T8013] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 202.157970][ T8013] [drm] Found bochs VGA, ID 0xb0c5. [ 202.162869][ T8013] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 202.190050][ T8013] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 202.313827][ T8013] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 202.439923][ T8023] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 202.465155][ T8023] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 202.469083][ T8023] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 202.472508][ T8023] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 202.476181][ T48] wlan0: Trigger new scan to find an IBSS to join [ 202.480825][ T8023] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 202.494958][ T8023] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 13956 usecs [ 202.518750][ T8023] pci 0000:00:01.0: Adding to iommu group 1 [ 202.528191][ T8023] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 202.531101][ T8023] pci 0000:00:01.0: vgaarb: bridge control possible [ 202.533886][ T8023] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 202.556522][ T8023] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 202.559732][ T8023] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 202.563948][ T8023] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 202.572139][ T8023] [drm] Found bochs VGA, ID 0xb0c5. [ 202.573893][ T8023] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 202.586666][ T8023] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 202.635050][ T8023] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 202.778217][ T8031] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 202.798641][ T8031] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 202.802533][ T8031] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 202.806177][ T8031] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 202.809221][ T41] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 202.820776][ T8031] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 202.833570][ T8031] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 12690 usecs [ 202.861614][ T8031] pci 0000:00:01.0: Adding to iommu group 1 [ 202.870751][ T8031] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 202.873596][ T8031] pci 0000:00:01.0: vgaarb: bridge control possible [ 202.876389][ T8031] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 202.891163][ T8031] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 202.894934][ T8031] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 202.900102][ T8031] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 202.912177][ T8031] [drm] Found bochs VGA, ID 0xb0c5. [ 202.914467][ T8031] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 202.931270][ T8031] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 202.969371][ T41] usb 7-1: Using ep0 maxpacket: 32 [ 202.973790][ T41] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 202.977212][ T41] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 202.977228][ T41] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 202.977259][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 202.977272][ T41] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 202.984747][ T8031] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 202.988277][ T41] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 203.007558][ T41] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 203.010937][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.021689][ T41] usb 7-1: config 0 descriptor?? [ 203.100330][ T8043] netlink: 224 bytes leftover after parsing attributes in process `syz.1.419'. [ 203.267572][ T41] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 203.966066][ T8056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.422'. [ 204.633680][ T8066] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 204.672126][ T8066] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 204.676094][ T8066] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 204.678594][ T8066] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 204.687672][ T8066] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 204.714731][ T8066] pci 0000:00:01.0: Adding to iommu group 1 [ 204.727059][ T8066] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 204.729220][ T8066] pci 0000:00:01.0: vgaarb: bridge control possible [ 204.731264][ T8066] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 204.744369][ T8066] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 204.747518][ T8066] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 204.753191][ T8066] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 204.773222][ T8066] [drm] Found bochs VGA, ID 0xb0c5. [ 204.775043][ T8066] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 204.786937][ T8066] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 204.913007][ T8066] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 205.348861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 205.739470][ T5842] usb 42-1: device descriptor read/8, error -110 [ 206.118010][ T5897] usb 7-1: USB disconnect, device number 6 [ 206.142983][ T5897] usblp0: removed [ 206.166701][ T8078] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 206.212699][ T8078] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 206.218266][ T8078] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 206.225905][ T8078] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 206.231908][ T8078] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 206.264820][ T8078] pci 0000:00:01.0: Adding to iommu group 1 [ 206.272052][ T8078] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 206.274398][ T8078] pci 0000:00:01.0: vgaarb: bridge control possible [ 206.276457][ T8078] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 206.288310][ T8078] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 206.291223][ T8078] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 206.295080][ T8078] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 206.300990][ T5842] usb usb42-port1: attempt power cycle [ 206.317413][ T8078] [drm] Found bochs VGA, ID 0xb0c5. [ 206.319276][ T8078] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 206.337509][ T8078] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2 [ 206.403946][ T8078] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device [ 206.567688][ T8085] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 206.619107][ T8085] md: array md0 already has disks! [ 206.754906][ T8085] md: could not open device unknown-block(7,0). [ 206.757565][ T8085] md: error, md_import_device() returned -16 [ 206.760985][ T8092] md: could not open device unknown-block(7,1). [ 206.762923][ T8092] md: error, md_import_device() returned -16 [ 206.982032][ T8089] netlink: 224 bytes leftover after parsing attributes in process `syz.3.429'. [ 207.219386][ T5842] usb usb42-port1: unable to enumerate USB device [ 207.245230][ T8092] md/raid:md0: not clean -- starting background reconstruction [ 207.248583][ T8092] md/raid:md0: device loop2 operational as raid disk 2 [ 207.250987][ T8092] md/raid:md0: device loop1 operational as raid disk 1 [ 207.253639][ T8092] md/raid:md0: device loop0 operational as raid disk 0 [ 207.296658][ T8103] Cannot find add_set index 0 as target [ 207.409100][ T8092] md/raid:md0: raid level 5 active with 3 out of 3 devices, algorithm 0 [ 207.436631][ T8092] md0: detected capacity change from 0 to 4096 [ 207.469803][ T5828] [ 207.470714][ T5828] ====================================================== [ 207.472898][ T5828] WARNING: possible circular locking dependency detected [ 207.475085][ T5828] syzkaller #0 Tainted: G L [ 207.477766][ T5828] ------------------------------------------------------ [ 207.480019][ T5828] kworker/3:4/5828 is trying to acquire lock: [ 207.481933][ T5828] ffff8880293f4358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_start_sync+0x79/0xbe0 [ 207.485041][ T5828] [ 207.485041][ T5828] but task is already holding lock: [ 207.487367][ T5828] ffffc900067e7d08 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 207.491454][ T5828] [ 207.491454][ T5828] which lock already depends on the new lock. [ 207.491454][ T5828] [ 207.494418][ T5828] [ 207.494418][ T5828] the existing dependency chain (in reverse order) is: [ 207.497415][ T5828] [ 207.497415][ T5828] -> #3 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 207.500459][ T5828] lock_acquire+0x1b9/0x370 [ 207.502537][ T5828] process_one_work+0x98e/0x1940 [ 207.504499][ T5828] worker_thread+0x5ef/0xe50 [ 207.506115][ T5828] kthread+0x370/0x450 [ 207.507581][ T5828] ret_from_fork+0x72b/0xd50 [ 207.509221][ T5828] ret_from_fork_asm+0x1a/0x30 [ 207.511099][ T5828] [ 207.511099][ T5828] -> #2 ((wq_completion)md_misc){+.+.}-{0:0}: [ 207.514281][ T5828] lock_acquire+0x1b9/0x370 [ 207.516429][ T5828] touch_wq_lockdep_map+0xad/0x1c0 [ 207.518269][ T5828] __flush_workqueue+0x131/0x1200 [ 207.520075][ T5828] md_alloc+0x30/0x10a0 [ 207.521560][ T5828] md_probe+0x73/0xf0 [ 207.523084][ T5828] blk_probe_dev+0x149/0x1e0 [ 207.524787][ T5828] blk_request_module+0x16/0xc0 [ 207.526485][ T5828] blkdev_get_no_open+0x9b/0xf0 [ 207.528675][ T5828] blkdev_open+0x141/0x4f0 [ 207.530507][ T5828] do_dentry_open+0x6ab/0x14d0 [ 207.532648][ T5828] vfs_open+0x82/0x3f0 [ 207.534557][ T5828] path_openat+0x2873/0x4280 [ 207.536648][ T5828] do_file_open+0x20e/0x430 [ 207.538749][ T5828] do_sys_openat2+0x10f/0x1e0 [ 207.540883][ T5828] __ia32_compat_sys_openat+0x12d/0x210 [ 207.543362][ T5828] __do_fast_syscall_32+0xe7/0x970 [ 207.545597][ T5828] do_fast_syscall_32+0x32/0x70 [ 207.547784][ T5828] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.550488][ T5828] [ 207.550488][ T5828] -> #1 (major_names_lock){+.+.}-{4:4}: [ 207.553663][ T5828] lock_acquire+0x1b9/0x370 [ 207.555797][ T5828] __mutex_lock+0x1a4/0x1bd0 [ 207.557950][ T5828] blk_probe_dev+0x28/0x1e0 [ 207.559998][ T5828] blk_request_module+0x16/0xc0 [ 207.561929][ T5828] blkdev_get_no_open+0x9b/0xf0 [ 207.564023][ T5828] bdev_file_open_by_dev+0x70/0x210 [ 207.566201][ T5828] md_import_device+0x120/0x360 [ 207.568437][ T5828] md_add_new_disk+0xdbf/0x1820 [ 207.570676][ T5828] md_ioctl+0x2b28/0x36b0 [ 207.572729][ T5828] compat_blkdev_ioctl+0x682/0x7b0 [ 207.575099][ T5828] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 207.577406][ T5828] __do_fast_syscall_32+0xe7/0x970 [ 207.579508][ T5828] do_fast_syscall_32+0x32/0x70 [ 207.581667][ T5828] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.584523][ T5828] [ 207.584523][ T5828] -> #0 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 207.587939][ T5828] check_prev_add+0xeb/0xe60 [ 207.590065][ T5828] __lock_acquire+0x136c/0x1a40 [ 207.592276][ T5828] lock_acquire+0x1b9/0x370 [ 207.594174][ T5828] __mutex_lock+0x1a4/0x1bd0 [ 207.596155][ T5828] md_start_sync+0x79/0xbe0 [ 207.598199][ T5828] process_one_work+0xa23/0x1940 [ 207.600373][ T5828] worker_thread+0x5ef/0xe50 [ 207.602342][ T5828] kthread+0x370/0x450 [ 207.604247][ T5828] ret_from_fork+0x72b/0xd50 [ 207.606393][ T5828] ret_from_fork_asm+0x1a/0x30 [ 207.608628][ T5828] [ 207.608628][ T5828] other info that might help us debug this: [ 207.608628][ T5828] [ 207.612780][ T5828] Chain exists of: [ 207.612780][ T5828] &mddev->reconfig_mutex --> (wq_completion)md_misc --> (work_completion)(&mddev->sync_work) [ 207.612780][ T5828] [ 207.618946][ T5828] Possible unsafe locking scenario: [ 207.618946][ T5828] [ 207.619087][ T48] wlan0: Trigger new scan to find an IBSS to join [ 207.622030][ T5828] CPU0 CPU1 [ 207.622039][ T5828] ---- ---- [ 207.622044][ T5828] lock((work_completion)(&mddev->sync_work)); [ 207.622060][ T5828] lock((wq_completion)md_misc); [ 207.622073][ T5828] lock((work_completion)(&mddev->sync_work)); [ 207.638129][ T5828] lock(&mddev->reconfig_mutex); [ 207.640167][ T5828] [ 207.640167][ T5828] *** DEADLOCK *** [ 207.640167][ T5828] [ 207.643404][ T5828] 2 locks held by kworker/3:4/5828: [ 207.645572][ T5828] #0: ffff88802177c140 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 207.649899][ T5828] #1: ffffc900067e7d08 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 207.654406][ T5828] [ 207.654406][ T5828] stack backtrace: [ 207.656624][ T5828] CPU: 3 UID: 0 PID: 5828 Comm: kworker/3:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.656649][ T5828] Tainted: [L]=SOFTLOCKUP [ 207.656655][ T5828] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 207.656668][ T5828] Workqueue: md_misc md_start_sync [ 207.656697][ T5828] Call Trace: [ 207.656719][ T5828] [ 207.656728][ T5828] dump_stack_lvl+0x100/0x190 [ 207.656748][ T5828] print_circular_bug.cold+0x178/0x1c7 [ 207.656775][ T5828] check_noncircular+0x146/0x160 [ 207.656798][ T5828] ? __raw_callee_save___pv_queued_spin_unlock_slowpath+0x15/0x40 [ 207.656824][ T5828] ? mark_held_locks+0x40/0x70 [ 207.656846][ T5828] check_prev_add+0xeb/0xe60 [ 207.656867][ T5828] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 207.656895][ T5828] __lock_acquire+0x136c/0x1a40 [ 207.656921][ T5828] lock_acquire+0x1b9/0x370 [ 207.656943][ T5828] ? md_start_sync+0x79/0xbe0 [ 207.656965][ T5828] ? __pfx___might_resched+0x10/0x10 [ 207.656991][ T5828] __mutex_lock+0x1a4/0x1bd0 [ 207.657010][ T5828] ? md_start_sync+0x79/0xbe0 [ 207.657032][ T5828] ? md_start_sync+0x79/0xbe0 [ 207.657051][ T5828] ? __lock_acquire+0x49f/0x1a40 [ 207.657073][ T5828] ? irqentry_exit+0x24d/0xa00 [ 207.657091][ T5828] ? lockdep_hardirqs_on+0x78/0x100 [ 207.657109][ T5828] ? __pfx___mutex_lock+0x10/0x10 [ 207.657130][ T5828] ? md_spares_need_change+0x1dc/0x320 [ 207.657152][ T5828] ? md_start_sync+0x79/0xbe0 [ 207.657172][ T5828] md_start_sync+0x79/0xbe0 [ 207.657194][ T5828] process_one_work+0xa23/0x1940 [ 207.657221][ T5828] ? __pfx_process_one_work+0x10/0x10 [ 207.657245][ T5828] ? __pfx_md_start_sync+0x10/0x10 [ 207.657268][ T5828] worker_thread+0x5ef/0xe50 [ 207.657292][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 207.657318][ T5828] ? kthread+0x13a/0x450 [ 207.657337][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 207.657357][ T5828] kthread+0x370/0x450 [ 207.657376][ T5828] ? __pfx_kthread+0x10/0x10 [ 207.657395][ T5828] ret_from_fork+0x72b/0xd50 [ 207.657416][ T5828] ? __pfx_ret_from_fork+0x10/0x10 [ 207.657433][ T5828] ? __switch_to+0x800/0x10f0 [ 207.657465][ T5828] ? __pfx_kthread+0x10/0x10 [ 207.657484][ T5828] ret_from_fork_asm+0x1a/0x30 [ 207.657510][ T5828] [ 207.744283][ T7576] libceph: connect (1)[c::]:6789 error -101 [ 207.746897][ T7576] libceph: mon0 (1)[c::]:6789 connect error [ 207.802232][ T8108] md: resync of RAID array md0 [ 207.842850][ T8108] md: md0: resync done. [ 207.958501][ T8103] ceph: No mds server is up or the cluster is laggy [ 208.569136][ T111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50