last executing test programs: 12m12.909861537s ago: executing program 0 (id=1): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, 0x0, 0x0) write$sndseq(r4, &(0x7f00000005c0), 0x0) read$snapshot(r4, 0x0, 0xffffffbf) read$FUSE(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x3, 0x6, 0x6, @loopback, @local, 0x8, 0x7827, 0x3, 0x3}}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) r7 = openat$random(0xffffffffffffff9c, 0x0, 0x40202, 0x0) sendfile(r7, r7, 0x0, 0x4800000009) listen(r6, 0x2) 12m10.706050656s ago: executing program 0 (id=8): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000680)={0x1, 0x0, 0x203, 0xfffd, 0x1, 0x1, 0xffffbffffffffffd, 0x200, 0x8, 0x2c, 0x80000005, 0x1b9b3b171b4f5438}) 12m9.550839766s ago: executing program 0 (id=11): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) 12m7.155864021s ago: executing program 0 (id=16): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0xfffffffd, 0x0, 0x8, 0xffe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x100000, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x1, 0x0, 0x80, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200000, 0x0, 0x20000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x81, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x3ff, 0x0, 0x0, 0x9fb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x3, 0x40000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000001b80)='syzkaller\x00', 0x200000, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000100000000000000004000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008001240"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x18, 0x0, &(0x7f0000000240)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) 12m1.690196169s ago: executing program 0 (id=36): bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240)={0x27, 0x0, 0x2, 0x6, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(0xffffffffffffffff, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4000000000000000, 0x0, 0x0, 0x800, 0x200000000, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 12m0.395306733s ago: executing program 32 (id=36): bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240)={0x27, 0x0, 0x2, 0x6, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(0xffffffffffffffff, 0x40) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4000000000000000, 0x0, 0x0, 0x800, 0x200000000, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 3m10.87019909s ago: executing program 2 (id=1394): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x7, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xe, 0xf}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 3m5.236449947s ago: executing program 2 (id=1404): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 3m3.869593604s ago: executing program 2 (id=1405): socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3m2.286271965s ago: executing program 2 (id=1407): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20008014) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x884) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x20000000}}, 0x2e) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000240)={0x18, r4}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000000a}, [@call={0x85, 0x0, 0x0, 0x28}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x5, 0x5}) 2m57.883634974s ago: executing program 2 (id=1416): syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) prlimit64(r0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, &(0x7f00000003c0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 2m52.282410717s ago: executing program 2 (id=1444): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x4, 0x400}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) 2m36.227955838s ago: executing program 33 (id=1444): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0xec) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x4, 0x400}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) 14.056691983s ago: executing program 1 (id=1906): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x62}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40), 0x0, 0x48) 13.435070846s ago: executing program 3 (id=1909): socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30", 0x2}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x118}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0x10, 0xff}, 0x2005}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_io_uring_setup(0x83a, &(0x7f0000000180)={0x0, 0x800679a, 0x2, 0x5, 0x3cc}, &(0x7f0000000040), &(0x7f00000003c0)) io_uring_enter(r8, 0x3514, 0x61b6, 0x69, 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r7, 0x0, 0xc080) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) write$nci(0xffffffffffffffff, 0x0, 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 12.678651301s ago: executing program 1 (id=1911): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1000002, @empty, 0x186}, 0x1c) listen(r1, 0x1) mount$9p_tcp(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x400, &(0x7f00000004c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) close_range(r0, 0xffffffffffffffff, 0x0) 11.373398359s ago: executing program 1 (id=1915): syz_emit_ethernet(0xe, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x0, 0xee}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x400}, {}, {}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6c2b}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) write$nbd(r0, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000baffda6e4a4d83"}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0xfffffffffffffd5c}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x2) 8.370271085s ago: executing program 3 (id=1921): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x62}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40), 0x0, 0x48) 7.175713411s ago: executing program 3 (id=1923): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x40048c0}, 0x80) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.903560993s ago: executing program 1 (id=1924): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x800, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 6.11812723s ago: executing program 5 (id=1926): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x78bd26, 0x25dfdbfe, {{@in=@multicast2, @in=@rand_addr=0x64010100, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c}, {0x0, 0x4, 0x1000000, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x10}, {0x6, 0x1000000c99, 0x800, 0x2de}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x4d3, 0x33}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xff, 0x7}, {{@in6=@local, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x24008004}, 0x4c040) 6.086297353s ago: executing program 1 (id=1927): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB], 0x68}}, 0x0) syz_io_uring_setup(0x12f, &(0x7f0000000180)={0x0, 0x6c93, 0x2, 0x2, 0x312}, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xd7) 5.980945743s ago: executing program 5 (id=1928): syz_emit_ethernet(0x2e, &(0x7f0000000380)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x11, 0x0, @empty, @rand_addr, {[@generic={0x88, 0x2}]}}, {0x0, 0x4e21, 0x8}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{0x0}], 0x1}}], 0x1, 0x4000800) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/122, 0x7a, 0x2101, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r3, 0x0) 4.872874352s ago: executing program 3 (id=1930): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x141200, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000380)) 4.812427805s ago: executing program 5 (id=1931): socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$audio(0xffffff9c, &(0x7f0000000000), 0x101100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x2, 0x80805, 0x0) syz_clone3(0x0, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000600)=0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$inet6(0xa, 0x80002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 4.654705311s ago: executing program 6 (id=1933): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x62}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48) 4.588742543s ago: executing program 3 (id=1934): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001"], 0x28}}, 0x802) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.65325277s ago: executing program 6 (id=1936): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1000002, @empty, 0x186}, 0x1c) listen(r1, 0x1) mount$9p_tcp(&(0x7f0000000200), 0x0, &(0x7f0000000280), 0x400, &(0x7f00000004c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) close_range(r0, 0xffffffffffffffff, 0x0) 3.608609452s ago: executing program 1 (id=1937): syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) eventfd(0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz1\x00', {0x0, 0x7fff, 0x2, 0x2}, 0x51, [0x3ff, 0x2, 0x10000, 0x0, 0x7ca6, 0x9, 0xc2ad, 0x4, 0x9, 0x9, 0x5, 0x9, 0x8, 0x200, 0x5, 0x3, 0x8, 0x5, 0xfffffff9, 0x6, 0x3, 0xfff, 0x7f, 0x4152, 0x8b3, 0x9, 0x861, 0x7, 0x5, 0x0, 0x3c, 0x4, 0x1005, 0x4, 0x8, 0x38, 0x8, 0x8, 0xd5bb, 0x3, 0x1, 0x9de9, 0x8, 0x3, 0x3, 0x7f, 0x5, 0x8, 0x0, 0x1, 0x3ff, 0x6, 0x2e, 0x800, 0x846c, 0x3, 0x6, 0x31b, 0x8, 0xa, 0x1, 0x7, 0xffffffff, 0x3], [0x4a, 0x19a78cbf, 0xe936, 0x0, 0x200, 0x81, 0x2, 0x7d, 0x10001, 0x8, 0x3ff, 0x1, 0x7, 0x8f, 0x1, 0x5, 0x1ff, 0x200, 0x6f8, 0x7, 0xd, 0x7, 0x788, 0x6, 0x0, 0x0, 0x8, 0x3, 0x5, 0x2, 0xa, 0x7, 0x80, 0x5aa, 0xfffff000, 0x400, 0x2, 0x7, 0x6, 0x6, 0x5, 0x3, 0x88, 0x22e2, 0x502, 0xffffffff, 0x7, 0x1ff, 0x6, 0x10001, 0x9e, 0x1, 0x5, 0x101, 0xfffffffa, 0x0, 0x2, 0x2, 0x6, 0x1ff, 0x8, 0x3, 0x6], [0x2, 0x94da, 0xffffffff, 0x7, 0xc0000, 0x4, 0x4, 0xfffffffa, 0x6, 0x7, 0xea, 0x7, 0x6, 0x400, 0xfffeffff, 0xfc000000, 0x8, 0x8, 0xd1, 0x2, 0xb66, 0x3, 0x4, 0x52c, 0x4, 0x10001, 0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0xe86, 0x8, 0x100, 0x7, 0x1, 0x746a6ffd, 0x3, 0x4, 0x0, 0x1, 0x45a6c325, 0x8, 0x10000, 0x1000, 0x2, 0x5, 0x0, 0x2, 0x2, 0x1, 0x8, 0x2, 0x2, 0x81, 0x200, 0x3ff, 0xffffffcc, 0x6, 0xa000000, 0x8, 0xfff, 0x4000, 0x1], [0x8, 0x7, 0x3, 0xfffffffc, 0x8000, 0x2, 0x8, 0x1ff, 0xfffffffe, 0x10, 0x5e, 0x4, 0x8, 0x8, 0x5, 0x8, 0xfb, 0xf25, 0xd, 0x1ff, 0x2, 0x95, 0x9, 0x9, 0x1, 0xc, 0xffff6f9e, 0x4, 0xfffffff7, 0x10000, 0x7, 0x52a, 0x5, 0xc1a4, 0x4, 0x8, 0x3, 0x9, 0x5, 0xb7af, 0x3, 0x4, 0x0, 0x1ff8, 0x2, 0x7, 0x6, 0x80000000, 0x652d, 0x7, 0x7fffffff, 0xd, 0x40, 0x3ff, 0xc, 0x1ff, 0x9, 0x6, 0x0, 0x1000, 0x9, 0x2, 0x9, 0x4]}, 0x45c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 3.46667187s ago: executing program 6 (id=1938): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x800, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 3.372420355s ago: executing program 3 (id=1939): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040004) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20008014) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x884) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x20000000}}, 0x2e) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r4, 0x3b86, &(0x7f0000000240)={0x18, r6}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000000a}, [@call={0x85, 0x0, 0x0, 0x28}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x2, 0x5, 0x5}) 3.092210691s ago: executing program 6 (id=1940): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9beb01001800000000008000000000200000000002bf03"], &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, 0x0, 0xd7) 2.988851803s ago: executing program 4 (id=1941): r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) fchdir(0xffffffffffffffff) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) 1.957685183s ago: executing program 4 (id=1942): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1", 0x55}], 0x3}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) 1.695041737s ago: executing program 6 (id=1943): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0x1, 0xbde6, 0x7, 0x43e, 0x400000, 0xa, 0xfff}]}) 1.593445333s ago: executing program 5 (id=1944): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.495739032s ago: executing program 4 (id=1945): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000300000d0000"], &(0x7f0000001f00)=""/4096, 0x3e, 0x1000, 0x1}, 0x28) 1.342663511s ago: executing program 4 (id=1946): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x62}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48) 1.31873977s ago: executing program 5 (id=1947): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000100)=""/141, 0x1a, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB], 0x68}}, 0x0) syz_io_uring_setup(0x12f, &(0x7f0000000180)={0x0, 0x6c93, 0x2, 0x2, 0x312}, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xd7) 1.260322357s ago: executing program 6 (id=1948): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x0, 0x806, 0x5, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x6c) fcntl$notify(r3, 0x402, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r4, 0x6000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000012c0)={0x18}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20048000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000028c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) fsopen(&(0x7f0000000040)='ceph\x00', 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85513, &(0x7f0000000b00)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x400000, 0x0, 0x100000001, 0xfffffffffffffffe, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x1000000000000, 0x0, 0x10, 0x0, 0x0, 0x7fff, 0x80000001, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000003, 0x6, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x3, 0x800000000000000, 0x1, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x9]}) syz_emit_ethernet(0x2e, &(0x7f0000002ac0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @dev={0xac, 0x14, 0x14, 0x16}, {[@end, @ssrr={0x89, 0x3, 0xbc}]}}, {0x0, 0x0, 0x8}}}}}, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x0) rename(0x0, &(0x7f00000000c0)='./file1\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'xfrm0\x00'}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 307.086699ms ago: executing program 4 (id=1949): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x7}, 0x1c) 18.095049ms ago: executing program 5 (id=1950): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x800, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xa5) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 0s ago: executing program 4 (id=1951): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="d21e9d0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000400)={0x40, 0x15, 0x28, "6db18531e052ac0b10cf08423f29f415b6ea83f34deb31aabd35f47aac14ec29edf3118aa0d8197f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) kernel console output (not intermixed with test programs): 0x7fca22f9bf79 code=0x7ffc0000 [ 323.373258][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'. [ 323.387320][ T30] audit: type=1326 audit(1771025723.412:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca22f9bf79 code=0x7ffc0000 [ 323.530562][ T30] audit: type=1326 audit(1771025723.412:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca22f9bf79 code=0x7ffc0000 [ 323.700724][ T8255] nbd: socks must be embedded in a SOCK_ITEM attr [ 323.789394][ T30] audit: type=1326 audit(1771025723.412:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fca22f9bf79 code=0x7ffc0000 [ 324.442580][ T30] audit: type=1326 audit(1771025723.412:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca22f9bf79 code=0x7ffc0000 [ 324.612048][ T8261] binder: 8259:8261 ioctl c0306201 200000000640 returned -22 [ 324.811643][ T30] audit: type=1326 audit(1771025723.412:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8249 comm="syz.2.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca22f9bf79 code=0x7ffc0000 [ 327.399846][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 327.413046][ T6538] udevd[6538]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 327.622701][ T5877] udevd[5877]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 327.692228][ T24] usb 2-1: config index 0 descriptor too short (expected 65293, got 45) [ 327.731497][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 327.749960][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.779579][ T24] usb 2-1: Product: syz [ 327.787343][ T24] usb 2-1: Manufacturer: syz [ 327.797566][ T24] usb 2-1: SerialNumber: syz [ 328.740543][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 328.786975][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 329.039791][ T9] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 329.170238][ T8298] syzkaller0: entered promiscuous mode [ 329.176282][ T8298] syzkaller0: entered allmulticast mode [ 329.214128][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 329.230175][ T8296] binder: 8295:8296 ioctl c0306201 200000000640 returned -22 [ 329.232680][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 329.257702][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 329.260654][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.281219][ T24] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 329.302518][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 329.312481][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 329.340036][ T9] usb 5-1: Product: syz [ 329.349411][ T24] usb 2-1: USB disconnect, device number 11 [ 329.349804][ T9] usb 5-1: Manufacturer: syz [ 329.379804][ T9] usb 5-1: SerialNumber: syz [ 329.415559][ T9] usb 5-1: config 0 descriptor?? [ 329.822865][ T8304] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 329.830485][ T8304] overlayfs: failed to set xattr on upper [ 329.836531][ T8304] overlayfs: ...falling back to redirect_dir=nofollow. [ 329.844212][ T8304] overlayfs: ...falling back to index=off. [ 329.851022][ T8304] overlayfs: ...falling back to uuid=null. [ 329.857253][ T8304] overlayfs: maximum fs stacking depth exceeded [ 331.762663][ T9] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 332.110283][ T9] usb 5-1: USB disconnect, device number 10 [ 332.210791][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.608'. [ 332.476543][ T8315] nbd: socks must be embedded in a SOCK_ITEM attr [ 332.991315][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 335.643394][ T5877] udevd[5877]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 335.818935][ T8331] comedi comedi2: reset error (fatal) [ 336.244583][ T8348] binder: 8346:8348 ioctl c0306201 200000000640 returned -22 [ 336.301512][ T63] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 338.149825][ T5901] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 338.270866][ T8367] syzkaller0: entered promiscuous mode [ 338.313672][ T8367] syzkaller0: entered allmulticast mode [ 338.325198][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.354913][ T5901] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 338.365595][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 338.379810][ T5901] usb 4-1: Product: syz [ 338.384145][ T5901] usb 4-1: Manufacturer: syz [ 338.388933][ T5901] usb 4-1: SerialNumber: syz [ 338.396839][ T5901] usb 4-1: config 0 descriptor?? [ 338.444366][ T8369] tipc: Started in network mode [ 338.464009][ T8369] tipc: Node identity 521c5abc5b67, cluster identity 4711 [ 338.472520][ T5901] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 338.515306][ T8369] tipc: Enabled bearer , priority 0 [ 338.542511][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.609347][ T8366] tipc: Resetting bearer [ 338.831810][ T8366] tipc: Disabling bearer [ 339.063325][ T5901] usb 4-1: USB disconnect, device number 5 [ 341.069226][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.630'. [ 341.099612][ T8396] binder: 8394:8396 ioctl c0306201 200000000640 returned -22 [ 342.928762][ T8422] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 342.936852][ T8422] overlayfs: failed to set xattr on upper [ 342.942864][ T8422] overlayfs: ...falling back to redirect_dir=nofollow. [ 342.950785][ T8422] overlayfs: ...falling back to index=off. [ 342.956990][ T8422] overlayfs: ...falling back to uuid=null. [ 342.963584][ T8422] overlayfs: maximum fs stacking depth exceeded [ 343.820097][ T5893] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 344.841809][ T5893] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.140067][ T5893] usb 6-1: string descriptor 0 read error: -71 [ 347.163071][ T5893] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 347.197091][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 347.214281][ T5893] usb 6-1: config 0 descriptor?? [ 347.225385][ T5893] usb 6-1: can't set config #0, error -71 [ 347.240508][ T8436] tipc: Enabling of bearer rejected, failed to enable media [ 347.270048][ T5893] usb 6-1: USB disconnect, device number 6 [ 348.260506][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.642'. [ 348.265672][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.643'. [ 348.419445][ T8447] vlan2: entered allmulticast mode [ 348.440505][ T8447] bridge1: port 1(vlan2) entered blocking state [ 348.463340][ T8447] bridge1: port 1(vlan2) entered disabled state [ 348.485920][ T8447] vlan2: entered promiscuous mode [ 348.491487][ T8447] veth1: entered promiscuous mode [ 348.918704][ T1210] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 349.097401][ T1210] usb 3-1: Using ep0 maxpacket: 16 [ 349.118081][ T1210] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 349.135433][ T1210] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.145896][ T5938] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 349.169590][ T1210] usb 3-1: config 0 has no interface number 0 [ 349.197389][ T1210] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 349.222816][ T1210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.238117][ T1210] usb 3-1: Product: syz [ 349.257393][ T1210] usb 3-1: Manufacturer: syz [ 349.270482][ T1210] usb 3-1: SerialNumber: syz [ 349.289400][ T1210] usb 3-1: config 0 descriptor?? [ 349.305237][ T1210] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 349.319627][ T5938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.337627][ T1210] uvcvideo 3-1:0.105: No valid video chain found. [ 349.355429][ T5938] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 349.380907][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 349.407172][ T5938] usb 5-1: Product: syz [ 349.416946][ T5938] usb 5-1: Manufacturer: syz [ 349.432851][ T5938] usb 5-1: SerialNumber: syz [ 349.458136][ T5938] usb 5-1: config 0 descriptor?? [ 349.823836][ T5938] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 349.838817][ T10] usb 3-1: USB disconnect, device number 15 [ 349.866094][ T5938] usb 5-1: USB disconnect, device number 11 [ 349.868860][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.135097][ T8497] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 354.142259][ T8497] overlayfs: failed to set xattr on upper [ 354.148039][ T8497] overlayfs: ...falling back to redirect_dir=nofollow. [ 354.155104][ T8497] overlayfs: ...falling back to index=off. [ 354.161094][ T8497] overlayfs: ...falling back to uuid=null. [ 354.166994][ T8497] overlayfs: maximum fs stacking depth exceeded [ 355.836412][ T8507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.659'. [ 355.973376][ T8507] vlan4: entered allmulticast mode [ 356.003547][ T8507] bridge2: port 1(vlan4) entered blocking state [ 356.011012][ T8507] bridge2: port 1(vlan4) entered disabled state [ 356.065198][ T8507] vlan4: entered promiscuous mode [ 356.082172][ T8507] veth1: entered promiscuous mode [ 357.306722][ T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 357.961179][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.657'. [ 357.981676][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.009072][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 358.025349][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 358.038124][ T10] usb 4-1: Product: syz [ 358.043039][ T10] usb 4-1: Manufacturer: syz [ 358.047982][ T10] usb 4-1: SerialNumber: syz [ 358.059051][ T10] usb 4-1: config 0 descriptor?? [ 358.179617][ T10] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 358.235645][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.447120][ T5893] usb 4-1: USB disconnect, device number 6 [ 359.170031][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 359.399855][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 359.418153][ T9] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 359.429220][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.522110][ T9] usb 6-1: Product: syz [ 359.584726][ T9] usb 6-1: Manufacturer: syz [ 359.592351][ T9] usb 6-1: SerialNumber: syz [ 359.657721][ T9] usb 6-1: config 0 descriptor?? [ 359.991757][ T9] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 007 [ 360.852441][ T8546] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 360.859539][ T8546] overlayfs: failed to set xattr on upper [ 360.865390][ T8546] overlayfs: ...falling back to redirect_dir=nofollow. [ 360.872920][ T8546] overlayfs: ...falling back to index=off. [ 360.878964][ T8546] overlayfs: ...falling back to uuid=null. [ 360.884950][ T8546] overlayfs: maximum fs stacking depth exceeded [ 361.503392][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.676'. [ 362.471438][ T8534] i2c i2c-1: failure writing data [ 362.527768][ T10] usb 6-1: USB disconnect, device number 7 [ 363.873538][ T8575] syz.4.678 (8575): drop_caches: 2 [ 364.489774][ T5893] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 364.718108][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.760473][ T5893] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 364.779942][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 364.808595][ T5893] usb 2-1: Product: syz [ 364.818719][ T5893] usb 2-1: Manufacturer: syz [ 364.839058][ T5893] usb 2-1: SerialNumber: syz [ 364.879495][ T5893] usb 2-1: config 0 descriptor?? [ 366.225787][ T5893] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 366.289388][ T8596] CUSE: unknown device info "" [ 366.294419][ T8596] CUSE: unknown device info "" [ 366.300024][ T8596] CUSE: unknown device info "" [ 366.305114][ T8596] CUSE: unknown device info "" [ 366.310556][ T8596] CUSE: unknown device info "ÿ" [ 366.315561][ T8596] CUSE: unknown device info "" [ 366.320509][ T8596] CUSE: unknown device info "" [ 366.325601][ T8596] CUSE: unknown device info "ÿ" [ 366.330642][ T8596] CUSE: DEVNAME unspecified [ 366.867077][ T5893] usb 2-1: USB disconnect, device number 12 [ 366.992562][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.919184][ T8610] loop5: detected capacity change from 0 to 1024 [ 369.927096][ T8610] EXT4-fs: Ignoring removed orlov option [ 371.019833][ T5912] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 371.189830][ T5912] usb 6-1: Using ep0 maxpacket: 16 [ 371.221303][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.238550][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 371.254356][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 371.274862][ T5912] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 371.287410][ T5912] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 371.313577][ T5912] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 371.331509][ T5912] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 371.357586][ T5912] usb 6-1: Manufacturer: syz [ 371.401405][ T5912] usb 6-1: config 0 descriptor?? [ 371.913032][ T5912] rc_core: IR keymap rc-hauppauge not found [ 371.919096][ T5912] Registered IR keymap rc-empty [ 371.950632][ T5912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 371.987298][ T5912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 372.108922][ T5912] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 372.123658][ T5912] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input7 [ 372.147815][ T5912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 372.170516][ T5912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 372.190138][ T5912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 372.299258][ T8641] netlink: zone id is out of range [ 372.529017][ T8641] netlink: set zone limit has 4 unknown bytes [ 373.974237][ T5912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 374.019861][ T5912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 374.034930][ T8645] netlink: 24 bytes leftover after parsing attributes in process `syz.5.700'. [ 374.044515][ T5912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 374.076603][ T8647] loop4: detected capacity change from 0 to 1024 [ 374.104555][ T8647] EXT4-fs: Ignoring removed orlov option [ 374.117393][ T8645] netlink: 24 bytes leftover after parsing attributes in process `syz.5.700'. [ 374.149871][ T5912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 374.229865][ T5912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 374.265960][ T5912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 374.299845][ T5912] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 374.382262][ T5912] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 374.418465][ T5912] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 374.481564][ T5912] usb 6-1: USB disconnect, device number 8 [ 375.327234][ T8663] netlink: 16 bytes leftover after parsing attributes in process `syz.5.707'. [ 377.433492][ T8675] infiniband: Added to hash: ib_dev=ffff88807ead0000 (0)() ndev=ffff88807b50c000 (17)(wlan1) [ 377.444230][ T8675] siw: device registration error -23 [ 377.449629][ T8675] infiniband: Removed from hash: ib_dev=ffff88807ead0000 (0)() ndev=ffff88807b50c000 (17)(wlan1) [ 378.665884][ T8679] wlan1 speed is unknown, defaulting to 1000 [ 378.747581][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.754087][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.033256][ T8686] loop1: detected capacity change from 0 to 1024 [ 379.103485][ T8686] EXT4-fs: Ignoring removed orlov option [ 379.187333][ T8686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.214597][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 379.214617][ T30] audit: type=1800 audit(1771025779.722:57): pid=8682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.712" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 379.246517][ T8682] Trying to write to read-only block-device loop1 [ 379.294486][ T8686] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 379.335411][ T8691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.714'. [ 379.345515][ T8691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.714'. [ 379.621931][ T5831] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.637755][ T8699] netlink: 'syz.4.719': attribute type 1 has an invalid length. [ 379.645941][ T8699] netlink: 224 bytes leftover after parsing attributes in process `syz.4.719'. [ 379.800126][ T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 381.619865][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 381.627252][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.640143][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.660703][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.670341][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.679006][ T10] usb 6-1: Product: syz [ 381.683814][ T10] usb 6-1: Manufacturer: syz [ 381.688445][ T10] usb 6-1: SerialNumber: syz [ 381.904840][ T10] usb 6-1: 0:2 : does not exist [ 382.012984][ T10] usb 6-1: USB disconnect, device number 9 [ 382.179017][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.099544][ T8738] netlink: 24 bytes leftover after parsing attributes in process `syz.4.728'. [ 384.794881][ T8738] netlink: 24 bytes leftover after parsing attributes in process `syz.4.728'. [ 384.813343][ T8739] wlan1 speed is unknown, defaulting to 1000 [ 387.866357][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.736'. [ 387.882583][ T8761] netlink: 'syz.5.736': attribute type 7 has an invalid length. [ 387.893612][ T8761] netlink: 'syz.5.736': attribute type 8 has an invalid length. [ 387.903013][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.736'. [ 387.922834][ T8761] bond0: entered promiscuous mode [ 387.928496][ T8761] bond_slave_0: entered promiscuous mode [ 387.935136][ T8761] bond_slave_1: entered promiscuous mode [ 387.962508][ T8761] bond0: left promiscuous mode [ 387.980691][ T8761] bond_slave_0: left promiscuous mode [ 388.009053][ T8761] bond_slave_1: left promiscuous mode [ 388.354300][ T8769] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 388.361847][ T8769] overlayfs: failed to set xattr on upper [ 388.367890][ T8769] overlayfs: ...falling back to redirect_dir=nofollow. [ 388.374957][ T8769] overlayfs: ...falling back to index=off. [ 388.380949][ T8769] overlayfs: ...falling back to uuid=null. [ 388.386920][ T8769] overlayfs: maximum fs stacking depth exceeded [ 391.652887][ T10] wlan1 speed is unknown, defaulting to 1000 [ 391.668679][ T10] óyz2: Port: 1 Link DOWN [ 392.244442][ T8794] wlan1 speed is unknown, defaulting to 1000 [ 392.999092][ T8801] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.360086][ T8808] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 395.443289][ T8808] block device autoloading is deprecated and will be removed. [ 399.043951][ T30] audit: type=1326 audit(1771025799.552:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8846 comm="syz.2.760" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca22f9bf79 code=0x0 [ 400.591480][ T8867] netlink: 68 bytes leftover after parsing attributes in process `syz.3.766'. [ 401.185006][ T8854] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.192502][ T8854] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.557116][ T8854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.790688][ T8854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.467517][ T8864] wlan1 speed is unknown, defaulting to 1000 [ 404.514151][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.523890][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.579826][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.589026][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.215345][ T8927] tipc: Started in network mode [ 407.223420][ T8927] tipc: Node identity 962d497254d7, cluster identity 4711 [ 407.237425][ T8927] tipc: Enabled bearer , priority 0 [ 407.278627][ T8927] tipc: Resetting bearer [ 407.443148][ T8926] tipc: Disabling bearer [ 407.499999][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 407.690347][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 407.716608][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.826406][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.839513][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 407.851701][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.860433][ T9] usb 5-1: Product: syz [ 407.864685][ T9] usb 5-1: Manufacturer: syz [ 407.870021][ T9] usb 5-1: SerialNumber: syz [ 408.101550][ T8944] netlink: 68 bytes leftover after parsing attributes in process `syz.2.786'. [ 408.255596][ T9] usb 5-1: 0:2 : does not exist [ 409.341411][ T9] usb 5-1: USB disconnect, device number 12 [ 409.897404][ T8960] wlan1 speed is unknown, defaulting to 1000 [ 410.408561][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.793'. [ 410.479879][ T8958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.793'. [ 410.596383][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.650442][ T8958] team0: entered promiscuous mode [ 410.669222][ T8958] team_slave_0: entered promiscuous mode [ 410.686071][ T8958] team_slave_1: entered promiscuous mode [ 410.711981][ T8958] debugfs: 'hsr1' already exists in 'hsr' [ 410.869800][ T8958] Cannot create hsr debugfs directory [ 411.164626][ T8958] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 414.298416][ T9000] netlink: 68 bytes leftover after parsing attributes in process `syz.4.803'. [ 419.804156][ T9042] netlink: 68 bytes leftover after parsing attributes in process `syz.3.814'. [ 420.789785][ T9055] netlink: 68 bytes leftover after parsing attributes in process `syz.4.819'. [ 424.237587][ T5825] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 424.237784][ T5825] Bluetooth: hci3: Malformed LE Event: 0x02 [ 424.966131][ T9089] netlink: 68 bytes leftover after parsing attributes in process `syz.5.830'. [ 425.081241][ T5912] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 425.412386][ T5912] usb 2-1: config 0 has an invalid interface number: 15 but max is 0 [ 425.470717][ T5912] usb 2-1: config 0 has no interface number 0 [ 425.562458][ T9098] tipc: Started in network mode [ 425.568883][ T5912] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=47.a2 [ 425.603427][ T9098] tipc: Node identity 069950355a04, cluster identity 4711 [ 425.618077][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.626538][ T9098] tipc: Enabled bearer , priority 0 [ 426.070223][ T5912] usb 2-1: Product: syz [ 426.080440][ T9096] syzkaller0: entered promiscuous mode [ 426.110273][ T5912] usb 2-1: Manufacturer: syz [ 426.115048][ T5912] usb 2-1: SerialNumber: syz [ 426.116850][ T9096] syzkaller0: entered allmulticast mode [ 426.283913][ T5912] usb 2-1: config 0 descriptor?? [ 426.374391][ T5912] usb 2-1: disable ehci-hcd to run US-144 [ 426.430086][ T9094] tipc: Resetting bearer [ 426.615667][ T9094] tipc: Disabling bearer [ 427.072843][ T1210] tipc: Node number set to 1553813557 [ 427.607428][ T24] usb 2-1: USB disconnect, device number 13 [ 432.240752][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.849'. [ 432.941992][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 433.360440][ T24] usb 2-1: config 0 has an invalid interface number: 15 but max is 0 [ 433.368846][ T24] usb 2-1: config 0 has no interface number 0 [ 433.425655][ T24] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=47.a2 [ 433.455126][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.474083][ T24] usb 2-1: Product: syz [ 433.501959][ T24] usb 2-1: Manufacturer: syz [ 433.516536][ T24] usb 2-1: SerialNumber: syz [ 433.560830][ T24] usb 2-1: config 0 descriptor?? [ 433.657845][ T24] usb 2-1: disable ehci-hcd to run US-144 [ 434.572178][ T9170] loop4: detected capacity change from 0 to 1024 [ 434.598914][ T9170] EXT4-fs: Ignoring removed orlov option [ 435.741044][ T5951] usb 2-1: USB disconnect, device number 14 [ 436.840223][ T9200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.864'. [ 437.450802][ T9209] usb usb8: usbfs: process 9209 (syz.4.858) did not claim interface 0 before use [ 440.410916][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.059344][ T9241] loop2: detected capacity change from 0 to 1024 [ 441.129750][ T5951] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 441.228115][ T9241] EXT4-fs: Ignoring removed orlov option [ 441.332039][ T5951] usb 2-1: config 0 has an invalid interface number: 15 but max is 0 [ 441.357527][ T5951] usb 2-1: config 0 has no interface number 0 [ 441.375245][ T5951] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=47.a2 [ 441.451551][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.483008][ T5951] usb 2-1: Product: syz [ 441.489538][ T5951] usb 2-1: Manufacturer: syz [ 441.530226][ T5951] usb 2-1: SerialNumber: syz [ 441.548330][ T5951] usb 2-1: config 0 descriptor?? [ 441.651768][ T5951] usb 2-1: disable ehci-hcd to run US-144 [ 443.062255][ T9250] syz.5.875 (9250): drop_caches: 2 [ 443.991696][ T10] usb 2-1: USB disconnect, device number 15 [ 444.810342][ T9264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.876'. [ 444.999683][ T9267] netlink: 76 bytes leftover after parsing attributes in process `syz.3.879'. [ 447.516917][ T9289] loop5: detected capacity change from 0 to 1024 [ 447.547054][ T9289] EXT4-fs: Ignoring removed orlov option [ 448.789451][ T9296] syz.5.888 (9296): drop_caches: 2 [ 449.597814][ T9303] infiniband: Added to hash: ib_dev=ffff88805591c000 (0)() ndev=ffff88803636a000 (33)(lo) [ 449.609255][ T9303] lo speed is unknown, defaulting to 1000 [ 449.616999][ T9303] lo speed is unknown, defaulting to 1000 [ 449.633261][ T9303] lo speed is unknown, defaulting to 1000 [ 449.727546][ T9303] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 449.875897][ T9304] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 449.980196][ T9303] lo speed is unknown, defaulting to 1000 [ 449.993406][ T9303] lo speed is unknown, defaulting to 1000 [ 450.016386][ T9303] lo speed is unknown, defaulting to 1000 [ 450.036933][ T9303] lo speed is unknown, defaulting to 1000 [ 450.057989][ T9303] lo speed is unknown, defaulting to 1000 [ 450.353478][ T9311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.893'. [ 452.675305][ T9327] loop2: detected capacity change from 0 to 1024 [ 452.760602][ T9327] EXT4-fs: Ignoring removed orlov option [ 455.573758][ T9353] syz.4.902 (9353): drop_caches: 2 [ 459.169246][ T9382] loop1: detected capacity change from 0 to 1024 [ 459.208710][ T9382] EXT4-fs: Ignoring removed orlov option [ 459.790393][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 459.979829][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 460.015677][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 460.026763][ T9] usb 2-1: config 6 interface 0 altsetting 4 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 460.059764][ T9] usb 2-1: config 6 interface 0 has no altsetting 0 [ 460.120180][ T9] usb 2-1: string descriptor 0 read error: -22 [ 460.127558][ T9] usb 2-1: New USB device found, idVendor=05ef, idProduct=8884, bcdDevice= 0.03 [ 460.159751][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.499059][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.913'. [ 460.523814][ T24] usb 2-1: USB disconnect, device number 16 [ 460.540410][ T9394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.913'. [ 460.608580][ T9394] team0: entered promiscuous mode [ 460.630664][ T9394] team_slave_0: entered promiscuous mode [ 460.856053][ T9394] team_slave_1: entered promiscuous mode [ 460.884407][ T9394] bond0: entered promiscuous mode [ 460.909360][ T9394] bond_slave_0: entered promiscuous mode [ 460.934339][ T9394] bond_slave_1: entered promiscuous mode [ 460.944188][ T9394] debugfs: 'hsr1' already exists in 'hsr' [ 460.952773][ T9394] Cannot create hsr debugfs directory [ 460.961068][ T9394] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 461.063514][ T9400] netlink: 68 bytes leftover after parsing attributes in process `syz.4.914'. [ 461.230550][ T9402] syzkaller0: entered promiscuous mode [ 461.236085][ T9402] syzkaller0: entered allmulticast mode [ 464.015193][ T9439] loop4: detected capacity change from 0 to 1024 [ 464.023522][ T9439] EXT4-fs: Ignoring removed orlov option [ 464.198580][ T9443] netlink: 32 bytes leftover after parsing attributes in process `syz.4.926'. [ 464.306501][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.927'. [ 464.325324][ T9445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.927'. [ 464.641543][ T9450] netlink: 68 bytes leftover after parsing attributes in process `syz.4.929'. [ 465.518283][ T9460] syzkaller0: entered promiscuous mode [ 465.528728][ T9460] syzkaller0: entered allmulticast mode [ 468.053812][ T9483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.939'. [ 468.088325][ T9483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.939'. [ 469.351870][ T9505] netlink: 68 bytes leftover after parsing attributes in process `syz.3.940'. [ 471.156212][ T9532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 471.182460][ T9532] loop3: detected capacity change from 0 to 128 [ 471.694767][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.953'. [ 471.733810][ T9538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.953'. [ 472.442739][ T9551] gfs2: not a GFS2 filesystem [ 474.906120][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'. [ 474.921327][ T9567] loop1: detected capacity change from 0 to 128 [ 475.071125][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 475.253005][ T10] usb 4-1: config index 0 descriptor too short (expected 65293, got 45) [ 475.281365][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 475.309733][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.327991][ T10] usb 4-1: Product: syz [ 475.339985][ T10] usb 4-1: Manufacturer: syz [ 475.347968][ T10] usb 4-1: SerialNumber: syz [ 475.589866][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 475.653281][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 475.670439][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 475.694956][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 478.270704][ T5951] usb 4-1: USB disconnect, device number 7 [ 478.436649][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 478.454670][ T9608] loop3: detected capacity change from 0 to 128 [ 479.590173][ T9620] syzkaller0: entered promiscuous mode [ 479.619239][ T9620] syzkaller0: entered allmulticast mode [ 479.653107][ T9620] tipc: Enabled bearer , priority 0 [ 479.673902][ T9618] tipc: Resetting bearer [ 479.696920][ T9618] tipc: Disabling bearer [ 479.825426][ T9629] netlink: 68 bytes leftover after parsing attributes in process `syz.3.980'. [ 481.776381][ T9647] loop2: detected capacity change from 0 to 512 [ 481.801192][ T9646] loop2: detected capacity change from 0 to 16 [ 481.808643][ T9646] erofs: Unknown parameter '' [ 482.009748][ T5912] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 482.463769][ T5912] usb 6-1: config index 0 descriptor too short (expected 65293, got 45) [ 482.482489][ T5912] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 483.135035][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.986'. [ 483.156786][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.259788][ T5912] usb 6-1: Product: syz [ 483.266342][ T9659] loop3: detected capacity change from 0 to 128 [ 483.272695][ T5912] usb 6-1: Manufacturer: syz [ 483.283296][ T5912] usb 6-1: SerialNumber: syz [ 483.525711][ T5912] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 483.574555][ T5912] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 483.624053][ T5912] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 483.675776][ T5912] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 484.425810][ T9669] syzkaller0: entered promiscuous mode [ 484.448191][ T9669] syzkaller0: entered allmulticast mode [ 484.475361][ T9669] tipc: Started in network mode [ 484.480576][ T9669] tipc: Node identity 560cd06b30cd, cluster identity 4711 [ 484.492633][ T9669] tipc: Enabled bearer , priority 0 [ 484.506652][ T9671] netlink: 68 bytes leftover after parsing attributes in process `syz.3.991'. [ 484.517513][ T9668] tipc: Resetting bearer [ 484.540498][ T9668] tipc: Disabling bearer [ 484.572485][ T1210] usb 6-1: USB disconnect, device number 10 [ 485.916874][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 485.951159][ T9704] loop3: detected capacity change from 0 to 128 [ 486.491339][ T9710] loop5: detected capacity change from 0 to 512 [ 486.507763][ T9710] loop5: detected capacity change from 0 to 16 [ 486.515201][ T9710] erofs: Unknown parameter '' [ 486.788839][ T9716] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1005'. [ 486.859875][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 487.057209][ T24] usb 3-1: config index 0 descriptor too short (expected 65293, got 45) [ 487.102931][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 487.129733][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.137774][ T24] usb 3-1: Product: syz [ 487.169736][ T24] usb 3-1: Manufacturer: syz [ 487.174561][ T24] usb 3-1: SerialNumber: syz [ 487.436565][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 487.469887][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 487.500277][ T24] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 487.584719][ T24] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 489.231517][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1019'. [ 489.282295][ T9767] loop5: detected capacity change from 0 to 128 [ 490.459346][ T9784] netlink: 'syz.3.1025': attribute type 1 has an invalid length. [ 490.489691][ T9784] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1025'. [ 490.507825][ T5951] usb 3-1: USB disconnect, device number 16 [ 491.140516][ T9798] loop4: detected capacity change from 0 to 512 [ 491.156947][ T9798] loop4: detected capacity change from 0 to 16 [ 491.164161][ T9798] erofs: Unknown parameter '' [ 493.149821][ T9812] 9pnet_fd: p9_fd_create_tcp (9812): problem connecting socket to 127.0.0.1 [ 493.994841][ T9822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'. [ 494.005090][ T9822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1035'. [ 494.024057][ T9822] team0: entered promiscuous mode [ 494.029413][ T9822] team_slave_0: entered promiscuous mode [ 494.037570][ T9822] team_slave_1: entered promiscuous mode [ 494.050534][ T9822] debugfs: 'hsr1' already exists in 'hsr' [ 494.056568][ T9822] Cannot create hsr debugfs directory [ 494.062979][ T9822] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 494.073416][ T9822] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 494.092298][ T9822] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 494.176518][ T9825] tipc: Enabled bearer , priority 0 [ 494.184699][ T9825] syzkaller0: entered promiscuous mode [ 494.194304][ T9825] syzkaller0: entered allmulticast mode [ 494.207976][ T9825] tipc: Resetting bearer [ 494.262841][ T9824] tipc: Resetting bearer [ 494.354146][ T9824] tipc: Disabling bearer [ 495.235569][ T9841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1039'. [ 495.753809][ T5970] udevd[5970]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 495.771611][ T5877] udevd[5877]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 497.295989][ T9852] loop3: detected capacity change from 0 to 512 [ 497.346178][ T9852] loop3: detected capacity change from 0 to 16 [ 497.356480][ T9852] erofs: Unknown parameter '' [ 499.334190][ T9856] wlan1 speed is unknown, defaulting to 1000 [ 499.352525][ T9856] lo speed is unknown, defaulting to 1000 [ 500.338933][ T5825] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 500.339110][ T5825] Bluetooth: hci3: Malformed LE Event: 0x02 [ 500.589972][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 500.806579][ T9] usb 2-1: config 0 has an invalid interface number: 15 but max is 0 [ 500.908136][ T9] usb 2-1: config 0 has no interface number 0 [ 500.942781][ T9] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=47.a2 [ 500.978407][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.999229][ T9] usb 2-1: Product: syz [ 501.015580][ T9] usb 2-1: Manufacturer: syz [ 501.030870][ T9] usb 2-1: SerialNumber: syz [ 501.041042][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'. [ 501.054142][ T9872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1050'. [ 501.055138][ T9] usb 2-1: config 0 descriptor?? [ 501.103446][ T9] usb 2-1: disable ehci-hcd to run US-144 [ 501.577736][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.625915][ T9875] syzkaller0: entered promiscuous mode [ 501.935371][ T9875] syzkaller0: entered allmulticast mode [ 503.206835][ T797] usb 2-1: USB disconnect, device number 17 [ 503.274421][ T9894] loop2: detected capacity change from 0 to 512 [ 503.290107][ T9894] loop2: detected capacity change from 0 to 16 [ 503.297342][ T9894] erofs: Unknown parameter '' [ 503.570019][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 504.149759][ T10] usb 4-1: config index 0 descriptor too short (expected 65293, got 45) [ 504.167997][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 504.177460][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.186920][ T10] usb 4-1: Product: syz [ 504.191315][ T10] usb 4-1: Manufacturer: syz [ 504.195954][ T10] usb 4-1: SerialNumber: syz [ 504.701447][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 504.896699][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 504.950411][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 504.975959][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 505.001208][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 505.037046][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 507.343756][ T5912] usb 4-1: USB disconnect, device number 8 [ 507.532301][ T9931] tipc: Enabled bearer , priority 0 [ 507.611356][ T9932] syzkaller0: entered promiscuous mode [ 507.637285][ T9932] syzkaller0: entered allmulticast mode [ 507.727801][ T9934] tipc: Resetting bearer [ 507.762398][ T9930] tipc: Resetting bearer [ 507.832935][ T9930] tipc: Disabling bearer [ 509.091549][ T9946] loop3: detected capacity change from 0 to 512 [ 509.108754][ T9946] loop3: detected capacity change from 0 to 16 [ 509.116067][ T9946] erofs: Unknown parameter '' [ 510.094818][ T9954] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1063'. [ 511.758544][ T9957] loop5: detected capacity change from 0 to 1024 [ 511.788063][ T9957] EXT4-fs: Ignoring removed orlov option [ 515.254128][ T9987] syzkaller0: entered promiscuous mode [ 515.269868][ T9987] syzkaller0: entered allmulticast mode [ 515.724237][ T9996] loop1: detected capacity change from 0 to 512 [ 516.273697][T10001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1086'. [ 516.339494][T10001] loop4: detected capacity change from 0 to 1024 [ 516.356996][T10001] EXT4-fs: Ignoring removed orlov option [ 516.564904][T10004] 9pnet_fd: p9_fd_create_tcp (10004): problem connecting socket to 127.0.0.1 [ 520.453497][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1098'. [ 520.533214][T10041] loop1: detected capacity change from 0 to 1024 [ 520.550490][T10041] EXT4-fs: Ignoring removed orlov option [ 520.618879][T10043] syzkaller0: entered promiscuous mode [ 520.626315][T10043] syzkaller0: entered allmulticast mode [ 520.772168][ T1210] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 520.957829][ T1210] usb 4-1: config index 0 descriptor too short (expected 65293, got 45) [ 521.007328][ T1210] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 521.040544][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.052229][ T1210] usb 4-1: Product: syz [ 521.056500][ T1210] usb 4-1: Manufacturer: syz [ 521.061364][ T1210] usb 4-1: SerialNumber: syz [ 521.115179][T10047] tipc: Enabled bearer , priority 0 [ 521.149085][T10047] syzkaller0: entered promiscuous mode [ 521.201711][T10047] syzkaller0: entered allmulticast mode [ 521.257477][T10047] tipc: Resetting bearer [ 521.418771][T10046] tipc: Resetting bearer [ 521.466959][T10046] tipc: Disabling bearer [ 521.477749][ T1210] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 521.490526][ T1210] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 521.502701][ T1210] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 521.516521][ T1210] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 521.527370][ T1210] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 521.538068][ T1210] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 523.352012][T10069] loop1: detected capacity change from 0 to 1024 [ 523.359409][T10069] EXT4-fs: Ignoring removed orlov option [ 523.686998][T10074] loop2: detected capacity change from 0 to 512 [ 523.735553][T10076] syzkaller0: entered promiscuous mode [ 523.752766][T10076] syzkaller0: entered allmulticast mode [ 523.929901][ T5938] usb 4-1: USB disconnect, device number 9 [ 524.192105][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'. [ 524.222157][T10082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1113'. [ 527.004705][T10100] 9pnet_fd: p9_fd_create_tcp (10100): problem connecting socket to 127.0.0.1 [ 528.335554][ T5825] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 528.924379][T10117] netlink: zone id is out of range [ 528.951454][T10117] netlink: set zone limit has 4 unknown bytes [ 530.107024][T10132] loop5: detected capacity change from 0 to 1024 [ 530.124837][T10132] EXT4-fs: Ignoring removed orlov option [ 532.809799][ T5825] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 533.472466][T10158] netlink: zone id is out of range [ 533.513487][T10158] netlink: set zone limit has 4 unknown bytes [ 534.793357][T10173] md: could not open device unknown-block(0,0). [ 534.851333][T10173] md: error, md_import_device() returned -6 [ 534.956382][T10179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1144'. [ 535.862750][T10179] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1144'. [ 537.001146][T10190] fuse: Bad value for 'group_id' [ 537.046790][T10190] fuse: Bad value for 'group_id' [ 539.824373][T10227] loop3: detected capacity change from 0 to 512 [ 539.874707][T10227] loop3: detected capacity change from 0 to 16 [ 539.889982][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 539.901385][T10227] erofs: Unknown parameter '' [ 540.089711][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 540.098051][ T10] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 540.116571][ T10] usb 2-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 540.141520][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 540.166501][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.246826][T10260] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 542.676281][ T10] usb 2-1: USB disconnect, device number 18 [ 547.954452][T10316] syz.4.1189 (10316): drop_caches: 2 [ 548.823107][T10326] wlan1 speed is unknown, defaulting to 1000 [ 548.842748][T10326] lo speed is unknown, defaulting to 1000 [ 551.386453][T10346] loop4: detected capacity change from 0 to 7 [ 551.397578][T10346] Buffer I/O error on dev loop4, logical block 0, async page read [ 551.406749][T10346] Buffer I/O error on dev loop4, logical block 0, async page read [ 551.415660][T10346] Buffer I/O error on dev loop4, logical block 0, async page read [ 551.423930][T10346] Buffer I/O error on dev loop4, logical block 0, async page read [ 551.432373][T10346] Buffer I/O error on dev loop4, logical block 0, async page read [ 551.440810][T10346] Buffer I/O error on dev loop4, logical block 0, async page read [ 551.448945][T10346] Buffer I/O error on dev loop4, logical block 0, async page read [ 551.457082][T10346] ldm_validate_partition_table(): Disk read failed. [ 551.463951][T10346] Buffer I/O error on dev loop4, logical block 0, async page read [ 551.472009][T10346] Buffer I/O error on dev loop4, logical block 0, async page read [ 551.509760][T10346] Buffer I/O error on dev loop4, logical block 0, async page read [ 551.518973][T10346] Dev loop4: unable to read RDB block 0 [ 551.525050][T10346] loop4: unable to read partition table [ 551.532172][T10346] loop4: partition table beyond EOD, truncated [ 551.538804][T10346] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾SêjºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 552.419503][ T5825] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 553.687604][T10366] syz.1.1201 (10366): drop_caches: 2 [ 556.988096][T10389] loop4: detected capacity change from 0 to 7 [ 556.998937][T10389] buffer_io_error: 14 callbacks suppressed [ 556.998976][T10389] Buffer I/O error on dev loop4, logical block 0, async page read [ 557.013005][T10389] Buffer I/O error on dev loop4, logical block 0, async page read [ 557.021080][T10389] Buffer I/O error on dev loop4, logical block 0, async page read [ 557.029170][T10389] Buffer I/O error on dev loop4, logical block 0, async page read [ 557.037431][T10389] Buffer I/O error on dev loop4, logical block 0, async page read [ 557.045659][T10389] Buffer I/O error on dev loop4, logical block 0, async page read [ 557.053751][T10389] Buffer I/O error on dev loop4, logical block 0, async page read [ 557.061926][T10389] ldm_validate_partition_table(): Disk read failed. [ 557.068951][T10389] Buffer I/O error on dev loop4, logical block 0, async page read [ 557.077665][T10389] Buffer I/O error on dev loop4, logical block 0, async page read [ 557.114901][T10389] Buffer I/O error on dev loop4, logical block 0, async page read [ 557.123023][T10389] Dev loop4: unable to read RDB block 0 [ 557.128931][T10389] loop4: unable to read partition table [ 557.135930][T10389] loop4: partition table beyond EOD, truncated [ 557.142348][T10389] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾SêjºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 558.417061][ T5825] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 559.383510][T10409] syz.3.1212 (10409): drop_caches: 2 [ 561.559846][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 561.739746][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 561.802025][ T10] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 561.814338][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.886107][T10432] loop4: detected capacity change from 0 to 7 [ 561.896493][T10432] ldm_validate_partition_table(): Disk read failed. [ 561.903706][T10432] Dev loop4: unable to read RDB block 0 [ 561.909676][T10432] loop4: unable to read partition table [ 561.916526][T10432] loop4: partition table beyond EOD, truncated [ 561.923121][T10432] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾SêjºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 562.382097][ T10] usb 6-1: Product: syz [ 562.386499][ T10] usb 6-1: Manufacturer: syz [ 562.394261][ T10] usb 6-1: SerialNumber: syz [ 562.406959][ T10] usb 6-1: config 0 descriptor?? [ 562.417109][ T5877] buffer_io_error: 28 callbacks suppressed [ 562.417123][ T5877] Buffer I/O error on dev loop4, logical block 0, async page read [ 562.465133][ T5877] Buffer I/O error on dev loop4, logical block 0, async page read [ 562.585683][ T5877] Buffer I/O error on dev loop4, logical block 0, async page read [ 562.626145][ T5877] Buffer I/O error on dev loop4, logical block 0, async page read [ 562.733760][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1219'. [ 562.743334][T10434] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1219'. [ 562.841611][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 562.853845][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 562.868581][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 562.880263][ T10] usb 6-1: media controller created [ 562.911733][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 563.020880][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.100620][ T5877] Buffer I/O error on dev loop4, logical block 0, async page read [ 563.109413][ T5877] Buffer I/O error on dev loop4, logical block 0, async page read [ 563.141363][ T5877] Buffer I/O error on dev loop4, logical block 0, async page read [ 563.154397][ T5877] Buffer I/O error on dev loop4, logical block 0, async page read [ 563.243726][ T5877] Buffer I/O error on dev loop4, logical block 0, async page read [ 563.272895][ T5877] Buffer I/O error on dev loop4, logical block 0, async page read [ 563.443796][ T5825] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 563.482005][T10428] dtv5100: rlen = 51 is too big! [ 563.482005][T10428] [ 563.499828][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 563.514831][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 563.544092][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 563.570099][ T10] usb 6-1: USB disconnect, device number 11 [ 563.677205][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 563.869536][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1225'. [ 563.965623][T10453] nbd: socks must be embedded in a SOCK_ITEM attr [ 563.995949][ T5970] block nbd64: NBD_DISCONNECT [ 564.265826][ T5877] udevd[5877]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 564.611682][T10467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1229'. [ 564.637511][ T5825] Bluetooth: hci4: unknown advertising packet type: 0x75 [ 564.637565][ T5825] Bluetooth: hci4: Malformed LE Event: 0x02 [ 564.990005][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 564.996982][T10472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1231'. [ 565.082361][T10472] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1231'. [ 565.621863][ T24] usb 6-1: config 0 has an invalid interface number: 15 but max is 0 [ 565.681047][ T24] usb 6-1: config 0 has no interface number 0 [ 565.715384][ T24] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=47.a2 [ 565.765534][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.786524][ T24] usb 6-1: Product: syz [ 565.799768][ T24] usb 6-1: Manufacturer: syz [ 565.806808][ T24] usb 6-1: SerialNumber: syz [ 565.809161][T10478] tipc: Enabled bearer , priority 0 [ 565.837921][T10478] syzkaller0: entered promiscuous mode [ 565.844188][T10478] syzkaller0: entered allmulticast mode [ 565.845958][ T24] usb 6-1: config 0 descriptor?? [ 565.874286][ T24] usb 6-1: disable ehci-hcd to run US-144 [ 565.886703][T10478] tipc: Resetting bearer [ 565.903224][T10476] tipc: Resetting bearer [ 565.925927][T10476] tipc: Disabling bearer [ 566.069749][ T10] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 566.547757][ T5825] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 566.873429][T10488] syz.3.1236 (10488): drop_caches: 2 [ 567.254940][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.272458][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 567.281813][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 567.732851][ T10] usb 2-1: Product: syz [ 567.737128][ T10] usb 2-1: Manufacturer: syz [ 567.824281][ T1210] usb 6-1: USB disconnect, device number 12 [ 567.834063][ T10] usb 2-1: SerialNumber: syz [ 567.914317][ T10] usb 2-1: config 0 descriptor?? [ 567.933215][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1240'. [ 568.053516][ T10] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 568.280983][T10498] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 568.542192][ T5912] usb 2-1: USB disconnect, device number 19 [ 568.712714][T10503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1242'. [ 568.775176][T10503] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1242'. [ 568.791641][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 569.147244][T10507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1243'. [ 571.606458][T10527] syz.4.1249 (10527): drop_caches: 2 [ 572.908393][T10536] 9pnet_fd: p9_fd_create_tcp (10536): problem connecting socket to 127.0.0.1 [ 574.410026][T10551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1255'. [ 574.439886][ T5912] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 574.608294][T10551] tipc: Enabled bearer , priority 10 [ 574.677101][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.698010][ T5912] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 574.719674][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 574.744046][ T5912] usb 4-1: Product: syz [ 574.753072][ T5912] usb 4-1: Manufacturer: syz [ 574.768683][ T5912] usb 4-1: SerialNumber: syz [ 574.792818][ T5912] usb 4-1: config 0 descriptor?? [ 575.495935][ T5912] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 575.546189][ T5912] usb 4-1: USB disconnect, device number 10 [ 575.612917][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.769770][ T9] tipc: Node number set to 159079100 [ 576.789737][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 576.978363][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 577.002738][ T9] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 577.032773][ T9] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 577.065224][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 577.093761][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.124629][ T9] usb 5-1: Product: syz [ 577.139718][ T9] usb 5-1: Manufacturer: syz [ 577.144350][ T9] usb 5-1: SerialNumber: syz [ 577.489896][ T30] audit: type=1326 audit(1771025977.962:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.5.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9bd9bf79 code=0x7ffc0000 [ 577.514509][ T9] usblp0: Disabling reads from problematic bidirectional printer [ 577.579525][ T30] audit: type=1326 audit(1771025977.962:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.5.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9bd9bf79 code=0x7ffc0000 [ 577.690807][ T30] audit: type=1326 audit(1771025977.962:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.5.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fda9bd9bf79 code=0x7ffc0000 [ 577.768188][ T30] audit: type=1326 audit(1771025977.962:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.5.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9bd9bf79 code=0x7ffc0000 [ 577.891976][ T9] usblp 5-1:4.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 578.350685][ T9] usb 5-1: USB disconnect, device number 13 [ 578.639804][T10585] md: could not open device unknown-block(0,0). [ 578.646353][T10585] md: error, md_import_device() returned -6 [ 578.666637][ T30] audit: type=1326 audit(1771025977.962:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.5.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9bd9bf79 code=0x7ffc0000 [ 578.722848][ T9] usblp0: removed [ 578.749919][ T30] audit: type=1326 audit(1771025977.962:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.5.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fda9bd9bf79 code=0x7ffc0000 [ 578.951563][ T30] audit: type=1326 audit(1771025977.962:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.5.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9bd9bf79 code=0x7ffc0000 [ 579.073060][ T30] audit: type=1326 audit(1771025977.962:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.5.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9bd9bf79 code=0x7ffc0000 [ 579.142623][ T30] audit: type=1326 audit(1771025977.982:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.5.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fda9bd9bf79 code=0x7ffc0000 [ 579.197409][ T30] audit: type=1326 audit(1771025977.982:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.5.1262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda9bd9bf79 code=0x7ffc0000 [ 580.349704][ T9] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 580.543375][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.572867][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 580.587607][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 580.613021][ T9] usb 4-1: Product: syz [ 580.623572][ T9] usb 4-1: Manufacturer: syz [ 580.633543][ T9] usb 4-1: SerialNumber: syz [ 580.655807][ T9] usb 4-1: config 0 descriptor?? [ 580.800896][ T9] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 580.885475][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.075652][ T797] usb 4-1: USB disconnect, device number 11 [ 581.460821][T10617] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1273'. [ 581.519172][T10617] tipc: Enabled bearer , priority 10 [ 581.740026][ T797] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 582.149527][ T797] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 582.313018][ T797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.396733][T10620] md: could not open device unknown-block(0,0). [ 582.403356][T10620] md: error, md_import_device() returned -6 [ 582.451644][ T797] usb 3-1: config 0 descriptor?? [ 582.492734][ T797] cp210x 3-1:0.0: cp210x converter detected [ 583.205935][ T797] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 583.226138][ T797] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 583.260061][ T797] usb 3-1: cp210x converter now attached to ttyUSB0 [ 583.281610][ T797] usb 3-1: USB disconnect, device number 17 [ 583.294958][ T797] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 583.312928][ T797] cp210x 3-1:0.0: device disconnected [ 583.622525][T10639] syz.4.1280 (10639): drop_caches: 2 [ 585.109679][ T797] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 585.218773][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 585.290838][ T797] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.320700][ T797] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 585.335698][ T797] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 585.357511][T10660] loop2: detected capacity change from 0 to 128 [ 585.366940][ T797] usb 6-1: Product: syz [ 585.379168][ T797] usb 6-1: Manufacturer: syz [ 585.388401][ T797] usb 6-1: SerialNumber: syz [ 585.403580][ T797] usb 6-1: config 0 descriptor?? [ 585.598302][ T797] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 585.797072][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.820218][ T797] usb 6-1: USB disconnect, device number 13 [ 586.195091][T10666] wlan1 speed is unknown, defaulting to 1000 [ 586.203641][T10666] lo speed is unknown, defaulting to 1000 [ 586.347844][T10674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1289'. [ 586.412785][T10674] tipc: Enabling of bearer rejected, already enabled [ 588.356594][T10690] netlink: 'syz.2.1293': attribute type 1 has an invalid length. [ 588.364836][T10690] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1293'. [ 591.341497][T10720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1302'. [ 591.420317][T10720] tipc: Enabled bearer , priority 10 [ 591.483813][T10725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1303'. [ 591.516785][T10725] loop5: detected capacity change from 0 to 128 [ 591.716626][T10727] fuse: Unknown parameter 'group_i00000000000000000000' [ 592.539743][ T5912] tipc: Node number set to 3271182706 [ 592.554713][T10732] netlink: 'syz.1.1306': attribute type 1 has an invalid length. [ 592.575142][T10732] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1306'. [ 592.840468][T10734] : entered promiscuous mode [ 595.051645][T10745] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 595.586706][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1313'. [ 595.643217][T10756] fuse: Unknown parameter 'group_i00000000000000000000' [ 595.771290][T10761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1314'. [ 595.820372][T10763] netlink: 'syz.3.1317': attribute type 1 has an invalid length. [ 595.842269][T10763] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1317'. [ 595.914949][T10761] tipc: Enabling of bearer rejected, already enabled [ 598.049833][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1321'. [ 598.239084][T10783] loop1: detected capacity change from 0 to 128 [ 599.234567][ T5825] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 599.649873][T10800] fuse: Unknown parameter 'group_id00000000000000000000' [ 600.588234][T10804] netlink: 'syz.3.1328': attribute type 1 has an invalid length. [ 600.606610][T10804] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1328'. [ 601.004211][T10814] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1330'. [ 601.192825][ T5825] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 601.215817][T10814] tipc: Enabling of bearer rejected, already enabled [ 601.625291][T10827] overlayfs: failed to resolve './file0': -2 [ 602.128052][T10837] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1335'. [ 602.168963][T10836] tipc: Enabled bearer , priority 0 [ 602.188303][T10836] syzkaller0: entered promiscuous mode [ 602.199795][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 602.215705][T10836] syzkaller0: entered allmulticast mode [ 602.284449][T10836] tipc: Resetting bearer [ 602.303053][T10835] tipc: Resetting bearer [ 602.348800][T10835] tipc: Disabling bearer [ 602.375635][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 602.383838][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.395700][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.409113][ T10] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 602.454561][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.484472][ T10] usb 2-1: config 0 descriptor?? [ 602.508869][T10841] fuse: Unknown parameter 'group_id00000000000000000000' [ 602.951081][ T10] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 602.975425][ T10] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 603.134235][ T10] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 603.573497][ T10] ft260 0003:0403:6030.0002: failed to retrieve system status [ 603.776203][ T10] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -32 [ 603.820603][ T10] usb 2-1: USB disconnect, device number 20 [ 604.124033][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1342'. [ 604.201412][T10853] loop3: detected capacity change from 0 to 128 [ 607.127829][T10866] overlayfs: failed to resolve './file1': -2 [ 607.761155][T10870] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1346'. [ 607.809016][T10870] tipc: Enabled bearer , priority 10 [ 608.044341][ T5912] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 608.219922][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 608.239316][ T5912] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 608.278201][ T5912] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 608.301287][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 608.325655][ T5912] usb 2-1: Product: syz [ 608.337542][ T5912] usb 2-1: Manufacturer: syz [ 608.462602][ T5912] usb 2-1: SerialNumber: syz [ 608.481749][ T5912] usb 2-1: config 0 descriptor?? [ 608.497307][T10874] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 608.521719][ T5912] hub 2-1:0.0: bad descriptor, ignoring hub [ 608.551633][ T5912] hub 2-1:0.0: probe with driver hub failed with error -5 [ 608.930240][ T5912] tipc: Node number set to 1723977835 [ 611.390357][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 611.880768][ T10] usb 5-1: config index 0 descriptor too short (expected 65293, got 45) [ 611.902031][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 611.913591][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.928536][ T10] usb 5-1: Product: syz [ 611.934051][ T10] usb 5-1: Manufacturer: syz [ 611.939851][ T10] usb 5-1: SerialNumber: syz [ 612.101698][ T9] usb 2-1: USB disconnect, device number 21 [ 612.367554][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 612.389672][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 612.736840][T10910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1355'. [ 613.021086][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 613.056240][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 613.079217][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 613.550665][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'. [ 613.630142][T10919] loop1: detected capacity change from 0 to 128 [ 613.951550][T10925] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 614.136285][T10923] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1359'. [ 614.776304][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 614.816043][ T10] usb 5-1: USB disconnect, device number 14 [ 615.332232][T10939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1361'. [ 615.391799][T10939] tipc: Enabled bearer , priority 10 [ 616.819715][ T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 616.983134][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 617.006854][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 617.039920][ T9] usb 6-1: config 4 interface 0 has no altsetting 0 [ 617.061469][ T9] usb 6-1: string descriptor 0 read error: -22 [ 617.069801][ T9] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 617.108181][ T9] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 617.196156][ T9] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 617.273122][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 617.301761][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 617.336544][ T9] usb 6-1: media controller created [ 617.873171][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 618.587038][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 618.790822][ T5951] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 619.412631][ T5951] usb 5-1: config index 0 descriptor too short (expected 65293, got 45) [ 619.425197][ T5951] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 619.435086][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.443640][ T5951] usb 5-1: Product: syz [ 619.448056][ T5951] usb 5-1: Manufacturer: syz [ 620.230754][ T5951] usb 5-1: SerialNumber: syz [ 620.942241][ T9] usb 6-1: USB disconnect, device number 14 [ 621.738213][ T5951] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 621.773536][ T5951] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 621.797540][ T5951] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 621.835683][ T5951] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 622.064290][T10979] fuse: Bad value for 'fd' [ 622.384793][T10975] tipc: Enabled bearer , priority 0 [ 622.436230][ T5951] usb 5-1: USB disconnect, device number 15 [ 622.577564][T10980] syzkaller0: entered promiscuous mode [ 622.613757][T10980] syzkaller0: entered allmulticast mode [ 622.636993][T10989] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1376'. [ 623.414132][T10975] tipc: Resetting bearer [ 623.657146][T10989] tipc: Enabling of bearer rejected, already enabled [ 623.828848][T10972] tipc: Resetting bearer [ 624.468991][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.020240][T11008] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1380'. [ 625.047742][T10972] tipc: Disabling bearer [ 627.055437][T11018] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1383'. [ 627.489744][ T5912] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 627.679894][ T5912] usb 4-1: config index 0 descriptor too short (expected 65293, got 45) [ 627.836323][ T5912] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 628.346581][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.385633][ T5912] usb 4-1: Product: syz [ 628.399712][ T5912] usb 4-1: Manufacturer: syz [ 628.404364][ T5912] usb 4-1: SerialNumber: syz [ 628.646584][T11040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1388'. [ 628.889019][T11049] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1389'. [ 628.948863][T11049] tipc: Enabling of bearer rejected, already enabled [ 629.035631][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1387'. [ 629.466970][T11050] nbd: socks must be embedded in a SOCK_ITEM attr [ 629.563754][ T6538] block nbd64: NBD_DISCONNECT [ 630.137486][ T5912] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 631.113496][ T5912] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 631.366395][ T5912] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 631.393272][ T5912] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 631.431738][ T5912] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 631.848466][ T5912] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 631.949876][ T5912] usb 4-1: USB disconnect, device number 12 [ 633.344536][T11079] 9pnet_fd: p9_fd_create_tcp (11079): problem connecting socket to 127.0.0.1 [ 637.459715][ T5938] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 637.814389][ T5938] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 637.840995][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.913201][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.963721][ T5938] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 638.019795][ T5938] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 638.040000][ T5951] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 638.060567][ T5938] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.101710][ T5938] usb 4-1: config 0 descriptor?? [ 638.121082][T11105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1403'. [ 638.249172][T11105] tipc: Enabling of bearer rejected, already enabled [ 638.292660][ T5951] usb 5-1: config index 0 descriptor too short (expected 65293, got 45) [ 638.413548][ T5951] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 638.468185][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.497836][ T5951] usb 5-1: Product: syz [ 638.512681][ T5951] usb 5-1: Manufacturer: syz [ 638.537829][ T5951] usb 5-1: SerialNumber: syz [ 638.688282][ T5938] wacom 0003:056A:0331.0003: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 638.903676][ T5912] usb 4-1: USB disconnect, device number 13 [ 639.085270][T11108] fido_id[11108]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 639.155608][ T5951] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 639.271195][ T5951] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 640.034593][ T5951] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 640.248751][ T5951] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 640.821756][ T5951] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 641.035167][ T5951] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 641.132014][ T5951] usb 5-1: USB disconnect, device number 16 [ 641.334476][T11129] 9pnet_fd: p9_fd_create_tcp (11129): problem connecting socket to 127.0.0.1 [ 643.265081][T11141] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1408'. [ 644.799829][ T5951] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 644.970395][ T5951] usb 4-1: Using ep0 maxpacket: 32 [ 644.987515][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.021103][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.058942][ T5951] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 645.090591][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.122586][ T5951] usb 4-1: config 0 descriptor?? [ 645.893020][ T5951] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 645.951123][ T5951] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 646.051222][ T5951] ft260 0003:0403:6030.0004: failed to retrieve chip version [ 646.066038][ T5951] ft260 0003:0403:6030.0004: probe with driver ft260 failed with error -71 [ 646.099230][ T5951] usb 4-1: USB disconnect, device number 14 [ 646.654338][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 646.681347][T11178] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1422'. [ 646.761389][T11178] tipc: Enabling of bearer rejected, already enabled [ 646.843558][ T10] usb 5-1: config index 0 descriptor too short (expected 65293, got 45) [ 646.877293][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 646.911279][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.936609][ T10] usb 5-1: Product: syz [ 646.957697][ T10] usb 5-1: Manufacturer: syz [ 646.975601][ T10] usb 5-1: SerialNumber: syz [ 647.429850][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 647.474341][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 647.655522][T11182] netlink: 'syz.3.1424': attribute type 12 has an invalid length. [ 647.663606][T11182] netlink: 'syz.3.1424': attribute type 29 has an invalid length. [ 647.673981][T11182] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1424'. [ 647.782891][T11182] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1424'. [ 648.134167][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 648.163370][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 648.184959][ T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 648.208946][ T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 648.237351][ T10] usb 5-1: USB disconnect, device number 17 [ 649.038535][T11204] evm: overlay not supported [ 649.257636][T11208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1431'. [ 649.871284][T11215] fuse: Bad value for 'group_id' [ 649.889766][T11215] fuse: Bad value for 'group_id' [ 649.901018][T11214] fuse: Bad value for 'fd' [ 650.239513][T11221] wlan1 speed is unknown, defaulting to 1000 [ 650.246982][T11221] lo speed is unknown, defaulting to 1000 [ 651.421466][ T5938] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 651.644941][T11260] wlan1 speed is unknown, defaulting to 1000 [ 651.653819][T11260] lo speed is unknown, defaulting to 1000 [ 651.744847][ T5938] usb 2-1: Using ep0 maxpacket: 16 [ 651.824151][ T5938] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 651.859012][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.889705][ T5938] usb 2-1: Product: syz [ 651.916170][ T5938] usb 2-1: Manufacturer: syz [ 651.929745][ T5938] usb 2-1: SerialNumber: syz [ 651.994777][ T5938] usb 2-1: config 0 descriptor?? [ 652.027746][T11264] loop3: detected capacity change from 0 to 1024 [ 652.051053][T11264] EXT4-fs: Ignoring removed orlov option [ 652.442793][ T5938] dvb_usb_dtv5100 2-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 652.606909][ T5938] usb 2-1: USB disconnect, device number 22 [ 652.917373][T11269] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1451'. [ 654.694990][T11280] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 656.010950][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.058548][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.419738][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 656.605206][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 656.632079][ T10] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 656.652980][ T10] usb 4-1: config 0 has no interface number 0 [ 656.668089][ T10] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 656.715643][ T10] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 656.746870][ T10] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 656.789911][ T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 656.799458][ T10] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 656.839611][ T10] usb 4-1: Product: syz [ 656.843838][ T10] usb 4-1: SerialNumber: syz [ 656.892697][ T10] usb 4-1: config 0 descriptor?? [ 656.899373][T11297] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 656.926336][ T10] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 656.955855][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input11 [ 657.170768][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 657.179800][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 657.187128][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 657.194308][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 657.201470][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 657.208680][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 657.216067][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 657.223857][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 657.231049][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 657.238986][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 657.246689][ T10] usb 4-1: USB disconnect, device number 15 [ 657.250698][T11310] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1463'. [ 657.252743][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 657.427076][ T10] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 663.005034][T11342] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1474'. [ 664.284329][T11353] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 664.866695][T11362] loop1: detected capacity change from 0 to 1024 [ 664.874006][T11362] EXT4-fs: Ignoring removed orlov option [ 666.962811][T11377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1485'. [ 667.029817][ T5912] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 667.157097][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 667.170359][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 667.178576][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 667.186987][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 667.195104][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 667.202320][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 667.216782][ T5912] usb 2-1: unable to get BOS descriptor or descriptor too short [ 667.236047][ T5912] usb 2-1: config 4 interface 0 has no altsetting 0 [ 667.252233][ T5912] usb 2-1: string descriptor 0 read error: -22 [ 667.268963][ T5912] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 667.289663][ T5912] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 667.317481][ T5912] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 667.553883][ T5912] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 668.290029][ T5912] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 668.319707][ T5912] usb 2-1: media controller created [ 668.364379][T11378] wlan1 speed is unknown, defaulting to 1000 [ 668.377326][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 668.401812][T11378] lo speed is unknown, defaulting to 1000 [ 668.456227][ T5912] zl10353_read_register: readreg error (reg=127, ret==0) [ 668.595999][ T5912] usb 2-1: USB disconnect, device number 23 [ 668.689893][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 668.887235][ T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 668.905957][ T10] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 668.926631][ T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 668.939656][ T10] usb 4-1: config 220 has no interface number 2 [ 668.946121][ T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 668.966520][ T10] usb 4-1: config 220 interface 0 has no altsetting 0 [ 668.973626][ T10] usb 4-1: config 220 interface 76 has no altsetting 0 [ 668.980803][ T10] usb 4-1: config 220 interface 1 has no altsetting 0 [ 668.991809][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 669.004437][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.016304][ T10] usb 4-1: Product: syz [ 669.020956][ T10] usb 4-1: Manufacturer: syz [ 669.026092][ T10] usb 4-1: SerialNumber: syz [ 669.253629][ T5838] Bluetooth: hci5: command tx timeout [ 669.293243][ T10] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 669.342799][ T10] uvcvideo 4-1:220.0: No valid video chain found. [ 669.368662][ T10] usb 4-1: selecting invalid altsetting 0 [ 669.423675][T11378] chnl_net:caif_netlink_parms(): no params data found [ 669.441085][ T10] usb 4-1: selecting invalid altsetting 0 [ 669.457209][ T10] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 669.511420][ T10] usb 4-1: USB disconnect, device number 16 [ 669.824679][T11378] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.841148][T11378] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.862538][T11378] bridge_slave_0: entered allmulticast mode [ 669.897602][T11378] bridge_slave_0: entered promiscuous mode [ 669.909282][T11378] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.917407][T11378] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.925343][T11378] bridge_slave_1: entered allmulticast mode [ 669.934409][T11378] bridge_slave_1: entered promiscuous mode [ 670.081210][T11378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.135116][T11378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.427192][T11378] team0: Port device team_slave_0 added [ 670.552229][T11378] team0: Port device team_slave_1 added [ 670.715773][T11378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.736790][T11378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.783800][T11378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.835547][T11378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.862375][T11378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.916945][T11378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.330130][ T5825] Bluetooth: hci5: command tx timeout [ 671.717787][T11378] hsr_slave_0: entered promiscuous mode [ 671.729817][ T5825] Bluetooth: hci6: command 0x1003 tx timeout [ 671.737369][ T5838] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 671.769234][T11378] hsr_slave_1: entered promiscuous mode [ 671.787846][T11378] debugfs: 'hsr0' already exists in 'hsr' [ 671.802017][T11378] Cannot create hsr debugfs directory [ 672.295410][T11445] loop3: detected capacity change from 0 to 1024 [ 672.313120][T11445] EXT4-fs: Ignoring removed orlov option [ 673.412261][ T5838] Bluetooth: hci5: command tx timeout [ 674.707914][ T5838] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 675.088495][T11378] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 675.149339][T11378] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 675.204109][T11378] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 675.245727][T11378] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 675.490811][ T5838] Bluetooth: hci5: command tx timeout [ 675.623235][T11378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.974436][T11378] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.236243][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.243466][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.363283][T11518] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.370585][T11518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.977926][T11539] loop4: detected capacity change from 0 to 1024 [ 676.998674][T11539] EXT4-fs: Ignoring removed orlov option [ 677.071349][T11378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.580089][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 677.744086][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 677.781790][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.804591][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.838112][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 677.879910][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 677.898722][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.942777][ T10] usb 5-1: config 0 descriptor?? [ 677.944141][ T5838] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 678.254187][T11378] veth0_vlan: entered promiscuous mode [ 678.362620][T11378] veth1_vlan: entered promiscuous mode [ 678.422525][ T10] wacom 0003:056A:0331.0005: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.4-1/input0 [ 678.526013][T11378] veth0_macvtap: entered promiscuous mode [ 678.577673][T11378] veth1_macvtap: entered promiscuous mode [ 678.584299][T11574] loop3: detected capacity change from 0 to 1024 [ 678.597741][ T24] usb 5-1: USB disconnect, device number 18 [ 678.611943][T11574] EXT4-fs: Ignoring removed orlov option [ 678.631415][ T5951] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 678.692642][T11378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.748520][T11378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.805510][T11518] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.815312][ T5951] usb 2-1: Using ep0 maxpacket: 16 [ 678.862588][ T1017] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.873208][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.892150][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.902524][ T1017] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.902667][ T1017] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.940523][ T5951] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 678.954625][ T5951] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 678.966188][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.984653][ T5951] usb 2-1: config 0 descriptor?? [ 679.095270][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.108005][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.218885][T11518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.236358][T11518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.903534][ T5951] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 679.956700][ T5951] microsoft 0003:045E:07DA.0006: unsupported Resolution Multiplier 0 [ 679.995516][ T5951] microsoft 0003:045E:07DA.0006: implement() called with n (56) > 32! (kworker/1:7) [ 680.101601][ T5951] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 680.143444][ T5951] microsoft 0003:045E:07DA.0006: no inputs found [ 680.151940][ T5951] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 680.183007][ T5951] usb 2-1: USB disconnect, device number 24 [ 680.701976][T11588] fido_id[11588]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 681.449748][ T5912] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 681.626365][ T5912] usb 7-1: Using ep0 maxpacket: 32 [ 681.667466][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.713459][ T5912] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.790620][T11615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1538'. [ 681.800398][T11615] openvswitch: netlink: Flow actions attr not present in new flow. [ 682.478727][ T5912] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 682.602132][ T5912] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.654661][ T5912] usb 7-1: config 0 descriptor?? [ 683.437044][ T5912] usbhid 7-1:0.0: can't add hid device: -71 [ 683.454815][ T5912] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 683.621927][ T5912] usb 7-1: USB disconnect, device number 2 [ 684.504313][T11635] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1543'. [ 684.709951][T11640] fuse: Unknown parameter 'grou00000000000000000000' [ 685.889374][T11655] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1550'. [ 685.896985][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.048098][T11655] tipc: Enabling of bearer rejected, already enabled [ 688.260560][T11674] fuse: Bad value for 'fd' [ 688.407227][T11676] uprobe: syz.5.1557:11676 failed to unregister, leaking uprobe [ 688.414994][T11680] fuse: Unknown parameter 'grou00000000000000000000' [ 688.615606][T11682] loop1: detected capacity change from 0 to 1024 [ 688.653799][T11682] EXT4-fs: Ignoring removed orlov option [ 689.699118][T11709] fuse: Bad value for 'fd' [ 689.924849][T11713] fuse: Unknown parameter 'grou00000000000000000000' [ 690.052973][T11717] loop6: detected capacity change from 0 to 1024 [ 690.060616][T11719] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1572'. [ 690.074110][T11717] EXT4-fs: Ignoring removed orlov option [ 690.144620][T11719] tipc: Enabling of bearer rejected, already enabled [ 690.237519][T11717] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.318126][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 690.318138][ T30] audit: type=1800 audit(1771026090.822:75): pid=11717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1573" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 690.470008][T11378] Trying to write to read-only block-device loop6 [ 690.480762][T11378] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.499674][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 690.660285][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 690.674727][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.692729][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.711585][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 690.749703][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.806672][ T10] usb 5-1: config 0 descriptor?? [ 692.060014][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 692.066244][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 692.138428][ T10] usb 5-1: USB disconnect, device number 19 [ 694.630776][T11763] loop4: detected capacity change from 0 to 1024 [ 694.670717][T11763] EXT4-fs: Ignoring removed orlov option [ 695.892342][T11795] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1596'. [ 695.981197][T11795] tipc: Enabling of bearer rejected, already enabled [ 697.786240][T11815] loop1: detected capacity change from 0 to 1024 [ 698.107794][T11815] EXT4-fs: Ignoring removed orlov option [ 698.159976][ T5951] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 698.324494][ T5951] usb 5-1: Using ep0 maxpacket: 16 [ 698.354277][ T5951] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 698.391867][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 86, changing to 10 [ 698.443476][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 57707, setting to 1024 [ 699.023733][ T5951] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 699.076323][ T5951] usb 5-1: New USB device strings: Mfr=140, Product=215, SerialNumber=3 [ 699.118954][ T5951] usb 5-1: Product: syz [ 699.139054][ T5951] usb 5-1: Manufacturer: syz [ 699.158644][ T5951] usb 5-1: SerialNumber: syz [ 699.264270][ T5951] usb 5-1: config 0 descriptor?? [ 699.328616][ T5951] pegasus_notetaker 5-1:0.0: packet size is too small (0) [ 699.366753][ T5951] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 699.923225][T11412] usb 5-1: USB disconnect, device number 20 [ 702.100381][T11865] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1621'. [ 702.158903][T11865] tipc: Enabling of bearer rejected, already enabled [ 702.509716][ T5951] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 702.704252][ T5951] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 702.714853][T11872] fuse: Unknown parameter 'group_i00000000000000000000' [ 702.733811][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.776990][ T5951] usb 5-1: config 0 descriptor?? [ 702.806921][ T5951] cp210x 5-1:0.0: cp210x converter detected [ 703.217676][ T5951] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 703.377078][ T5951] usb 5-1: cp210x converter now attached to ttyUSB0 [ 703.635466][ T5951] usb 5-1: USB disconnect, device number 21 [ 703.752383][ T5951] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 703.812398][ T5951] cp210x 5-1:0.0: device disconnected [ 704.588001][ T5838] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 704.774572][T11888] loop1: detected capacity change from 0 to 1024 [ 704.840060][T11888] EXT4-fs: Ignoring removed orlov option [ 705.647277][T11900] fuse: Unknown parameter 'group_id00000000000000000000' [ 705.895562][T11907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1636'. [ 706.517141][T11907] tipc: Enabling of bearer rejected, already enabled [ 707.100898][ T5912] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 707.272970][ T5912] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 707.342922][ T5912] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 707.416052][ T5912] usb 4-1: config 220 has no interface number 2 [ 707.464894][ T5912] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 707.549641][ T5912] usb 4-1: config 220 interface 0 has no altsetting 0 [ 708.004331][ T5912] usb 4-1: config 220 interface 76 has no altsetting 0 [ 708.040349][ T5912] usb 4-1: config 220 interface 1 has no altsetting 0 [ 708.081636][ T5912] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 708.109616][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.153117][ T5912] usb 4-1: Product: syz [ 708.157439][ T5912] usb 4-1: Manufacturer: syz [ 708.219642][ T5912] usb 4-1: SerialNumber: syz [ 709.701948][T11936] loop6: detected capacity change from 0 to 1024 [ 709.767250][T11936] EXT4-fs: Ignoring removed orlov option [ 709.907598][T11944] fuse: Unknown parameter 'group_id00000000000000000000' [ 709.995247][ T5912] usb 4-1: selecting invalid altsetting 0 [ 710.036034][ T5912] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 710.179834][ T5912] uvcvideo 4-1:220.0: No valid video chain found. [ 710.243429][ T5912] usb 4-1: selecting invalid altsetting 0 [ 710.331888][ T5912] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 710.528606][ T5912] usb 4-1: USB disconnect, device number 17 [ 711.190290][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1657'. [ 711.470161][T11965] tipc: Enabling of bearer rejected, already enabled [ 711.649698][ T5825] Bluetooth: hci5: command 0x0405 tx timeout [ 711.720738][T11976] loop3: detected capacity change from 0 to 1024 [ 711.781611][T11976] EXT4-fs: Ignoring removed orlov option [ 712.018509][ T5938] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 712.561213][ T5938] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 712.596083][ T5938] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 712.759749][ T5938] usb 7-1: config 220 has no interface number 2 [ 712.849368][ T5938] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 712.909903][ T5938] usb 7-1: config 220 interface 0 has no altsetting 0 [ 713.088270][ T5938] usb 7-1: config 220 interface 76 has no altsetting 0 [ 713.163059][ T5938] usb 7-1: config 220 interface 1 has no altsetting 0 [ 713.662746][ T5938] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 713.699683][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.093070][ T5938] usb 7-1: Product: syz [ 715.097278][ T5938] usb 7-1: Manufacturer: syz [ 715.413734][ T5938] usb 7-1: SerialNumber: syz [ 715.632702][ T5938] usb 7-1: can't set config #220, error -71 [ 715.729281][ T5938] usb 7-1: USB disconnect, device number 3 [ 715.889275][T12007] jffs2: Unknown parameter '@@' [ 716.064487][T12009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1670'. [ 716.395955][T12009] nbd: socks must be embedded in a SOCK_ITEM attr [ 720.072253][T12050] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1682'. [ 720.265376][T12050] tipc: Started in network mode [ 720.272435][T12050] tipc: Node identity ac1414aa, cluster identity 4711 [ 720.362457][T12050] tipc: Enabled bearer , priority 10 [ 720.392247][T12056] loop3: detected capacity change from 0 to 1024 [ 720.444732][T12056] EXT4-fs: Ignoring removed orlov option [ 721.499860][ T5893] tipc: Node number set to 2886997162 [ 723.122568][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1687'. [ 725.031316][T12076] nbd: socks must be embedded in a SOCK_ITEM attr [ 726.570696][ T5877] udevd[5877]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 727.408429][T12103] loop1: detected capacity change from 0 to 1024 [ 727.456105][T12103] EXT4-fs: Ignoring removed orlov option [ 729.310380][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 729.604471][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 731.574634][ T10] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.913947][ T10] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.976872][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 732.040995][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.159776][ T10] usb 2-1: can't set config #128, error -71 [ 733.075051][ T10] usb 2-1: USB disconnect, device number 25 [ 733.178826][T12138] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1708'. [ 733.285838][T12138] tipc: Enabling of bearer rejected, already enabled [ 733.354708][T12151] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1712'. [ 733.392215][T12148] loop3: detected capacity change from 0 to 1024 [ 733.426950][T12148] EXT4-fs: Ignoring removed orlov option [ 738.010329][ T5893] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 738.201416][T12187] ref_ctr_offset mismatch. inode: 0x861 offset: 0x7 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x2 [ 738.256277][T12189] loop1: detected capacity change from 0 to 1024 [ 738.272010][ T5893] usb 4-1: Using ep0 maxpacket: 16 [ 738.276098][T12189] EXT4-fs: Ignoring removed orlov option [ 738.333671][ T5893] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.387606][ T5893] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.409681][ T5893] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 738.426142][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.875332][ T5893] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 739.729485][ T5893] usb 4-1: USB disconnect, device number 18 [ 742.968495][T12227] loop1: detected capacity change from 0 to 1024 [ 742.995037][T12227] EXT4-fs: Ignoring removed orlov option [ 743.733916][T12241] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1740'. [ 744.180814][T12241] tipc: Enabling of bearer rejected, already enabled [ 745.574780][T11412] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 746.262838][T11412] usb 4-1: Using ep0 maxpacket: 16 [ 746.330513][T11412] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.368564][T11412] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.404260][T11412] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 746.440148][T11412] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.936722][T11412] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 747.147463][T11412] usb 4-1: USB disconnect, device number 19 [ 747.345873][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.960803][T12313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1760'. [ 751.192405][T12313] tipc: Enabling of bearer rejected, already enabled [ 752.173496][T12320] loop6: detected capacity change from 0 to 1024 [ 752.190305][T12320] EXT4-fs: Ignoring removed orlov option [ 752.511585][ T5825] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 752.740000][ T5893] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 752.939886][ T5893] usb 7-1: Using ep0 maxpacket: 16 [ 752.960797][ T5893] usb 7-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.986571][ T5893] usb 7-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.006772][ T5893] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 753.026381][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.154531][T12337] process 'syz.4.1769' launched './file0' with NULL argv: empty string added [ 755.431553][ T5893] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 756.445168][ T5893] usb 7-1: USB disconnect, device number 4 [ 757.386787][T12354] loop1: detected capacity change from 0 to 1024 [ 757.577336][T12354] EXT4-fs: Ignoring removed orlov option [ 759.445638][T12384] fuse: Bad value for 'fd' [ 759.700988][T11509] bridge_slave_1: left allmulticast mode [ 759.718214][T12392] loop6: detected capacity change from 0 to 1024 [ 759.725483][T11509] bridge_slave_1: left promiscuous mode [ 759.745465][T11509] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.754533][T12392] EXT4-fs: Ignoring removed orlov option [ 759.835195][T11509] bridge_slave_0: left allmulticast mode [ 759.841173][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 759.875151][T11509] bridge_slave_0: left promiscuous mode [ 759.886889][T11509] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.935863][T11509] vlan4: left promiscuous mode [ 759.948930][T11509] veth1: left promiscuous mode [ 759.956736][T11509] bridge2: port 1(vlan4) entered disabled state [ 760.051386][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 760.069212][ T10] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.120877][ T10] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.168806][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 760.205681][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.423018][T11509] bond1 (unregistering): (slave bridge1): Releasing active interface [ 760.666268][T11509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.707962][ T10] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 760.802405][T11509] bond_slave_0: left promiscuous mode [ 760.961146][T11509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.779909][ T10] usb 4-1: USB disconnect, device number 20 [ 761.820942][T11509] bond_slave_1: left promiscuous mode [ 761.836879][T11509] bond0 (unregistering): Released all slaves [ 761.957449][T11509] bond1 (unregistering): Released all slaves [ 762.575814][T12422] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1797'. [ 762.585837][T12422] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1797'. [ 762.686257][T12424] fuse: Bad value for 'fd' [ 762.961783][T11509] tipc: Disabling bearer [ 762.979955][T11509] tipc: Left network mode [ 764.928519][ T5825] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 765.291849][T11509] team0: left promiscuous mode [ 765.339633][T11509] team_slave_0: left promiscuous mode [ 765.345492][T11509] team_slave_1: left promiscuous mode [ 765.397027][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1809'. [ 765.411481][T12473] IPv6: Can't replace route, no match found [ 765.966743][T12480] fuse: Bad value for 'fd' [ 766.070051][T11509] hsr_slave_0: left promiscuous mode [ 766.091447][T11509] hsr_slave_1: left promiscuous mode [ 766.105912][T11509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 766.145023][T11509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.990359][T11509] team0 (unregistering): Port device team_slave_1 removed [ 771.047464][T11509] team0 (unregistering): Port device team_slave_0 removed [ 771.747250][T12527] fuse: Bad value for 'fd' [ 772.130473][ T5893] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 772.405679][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 772.447449][ T5893] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.475392][ T30] audit: type=1326 audit(1771026172.982:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.6.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e6f9bf79 code=0x7ffc0000 [ 772.493090][ T5893] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.581201][ T5893] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 772.581361][ T30] audit: type=1326 audit(1771026173.002:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.6.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e6f9bf79 code=0x7ffc0000 [ 772.642587][ T30] audit: type=1326 audit(1771026173.022:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.6.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f94e6f9bf79 code=0x7ffc0000 [ 772.689743][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.713899][ T30] audit: type=1326 audit(1771026173.032:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.6.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e6f9bf79 code=0x7ffc0000 [ 773.326970][ T30] audit: type=1326 audit(1771026173.032:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.6.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e6f9bf79 code=0x7ffc0000 [ 773.484341][ T30] audit: type=1326 audit(1771026173.052:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.6.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e6f9bf79 code=0x7ffc0000 [ 773.508913][ T30] audit: type=1326 audit(1771026173.052:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.6.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f94e6f9bf79 code=0x7ffc0000 [ 775.210256][ T30] audit: type=1326 audit(1771026173.052:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12534 comm="syz.6.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f94e6f9bf79 code=0x7ffc0000 [ 775.395825][ T5893] usbhid 2-1:128.0: can't add hid device: -71 [ 775.402569][ T5893] usbhid 2-1:128.0: probe with driver usbhid failed with error -71 [ 775.413169][ T5893] usb 2-1: USB disconnect, device number 26 [ 775.457389][T11509] IPVS: stop unused estimator thread 0... [ 775.623661][T12565] fuse: Bad value for 'fd' [ 775.910149][ T5825] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 779.350898][ T5825] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 781.294838][T12619] fuse: Invalid rootmode [ 784.819737][T12645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 785.049817][ T5938] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 785.229676][ T5938] usb 7-1: Using ep0 maxpacket: 8 [ 785.271132][ T5938] usb 7-1: unable to get BOS descriptor or descriptor too short [ 785.291619][ T5938] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 785.353430][ T5938] usb 7-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 785.527947][ T5938] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 785.619553][ T5938] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 785.676848][ T5938] usb 7-1: Manufacturer: syz [ 785.689707][ T5938] usb 7-1: SerialNumber: syz [ 786.036065][ T5938] usb 7-1: USB disconnect, device number 5 [ 789.539667][ T797] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 789.896958][ T797] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 789.938244][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.973833][ T797] usb 2-1: config 0 descriptor?? [ 791.624650][ T797] cp210x 2-1:0.0: cp210x converter detected [ 791.781649][T12714] 9pnet_fd: p9_fd_create_tcp (12714): problem connecting socket to 127.0.0.1 [ 792.110690][ T797] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 792.278011][ T797] usb 2-1: cp210x converter now attached to ttyUSB0 [ 793.297118][ T5938] usb 2-1: USB disconnect, device number 27 [ 793.525904][ T5938] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 794.530884][ T5938] cp210x 2-1:0.0: device disconnected [ 795.747434][T12760] fuse: Bad value for 'fd' [ 801.555705][T12813] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 801.576632][T12813] kvm: requested 112304 ns i8254 timer period limited to 200000 ns [ 803.959256][T12841] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1900'. [ 804.500684][ T30] audit: type=1326 audit(1771026204.452:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12836 comm="syz.6.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e6f9bf79 code=0x7ffc0000 [ 804.589626][ T30] audit: type=1326 audit(1771026204.452:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12836 comm="syz.6.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e6f9bf79 code=0x7ffc0000 [ 804.682861][ T30] audit: type=1326 audit(1771026204.452:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12836 comm="syz.6.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f94e6f9bf79 code=0x7ffc0000 [ 804.718783][ T30] audit: type=1326 audit(1771026204.452:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12836 comm="syz.6.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e6f9bf79 code=0x7ffc0000 [ 804.762574][ T30] audit: type=1326 audit(1771026204.462:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12836 comm="syz.6.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e6f9bf79 code=0x7ffc0000 [ 804.997319][ T30] audit: type=1326 audit(1771026204.462:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12836 comm="syz.6.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94e6f9bf79 code=0x7ffc0000 [ 805.092389][ T30] audit: type=1326 audit(1771026204.462:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12836 comm="syz.6.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e6f9bf79 code=0x7ffc0000 [ 805.759610][ T30] audit: type=1326 audit(1771026204.462:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12836 comm="syz.6.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e6f9bf79 code=0x7ffc0000 [ 805.929567][ T30] audit: type=1326 audit(1771026204.462:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12836 comm="syz.6.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f94e6f9bf79 code=0x7ffc0000 [ 806.153756][ T30] audit: type=1326 audit(1771026205.112:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12836 comm="syz.6.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94e6f9bf79 code=0x7ffc0000 [ 808.946944][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.608804][ T5912] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 814.790349][ T5912] usb 5-1: Using ep0 maxpacket: 16 [ 815.800126][ T5912] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 815.825594][ T5912] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 815.871802][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.913383][ T5912] usb 5-1: Product: syz [ 815.938214][ T5912] usb 5-1: Manufacturer: syz [ 815.948337][ T5912] usb 5-1: SerialNumber: syz [ 815.970817][ T5912] usb 5-1: config 0 descriptor?? [ 816.139599][ T5912] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 816.341717][ T5912] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 816.372294][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.415902][ T5912] usb 4-1: config 0 descriptor?? [ 816.443500][ T5912] cp210x 4-1:0.0: cp210x converter detected [ 816.640738][T12973] overlayfs: failed to resolve './file1/file0': -2 [ 816.871213][ T5912] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 816.931496][ T5912] usb 4-1: cp210x converter now attached to ttyUSB0 [ 817.107721][ T1210] usb 4-1: USB disconnect, device number 21 [ 817.142676][ T1210] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 817.199374][ T1210] cp210x 4-1:0.0: device disconnected [ 818.192264][ T5951] usb 5-1: USB disconnect, device number 22 [ 819.708865][T13032] overlayfs: failed to resolve './file1/file0': -2 [ 820.075185][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1937'. [ 823.084768][T13040] ------------[ cut here ]------------ [ 823.090884][T13040] !rwb [ 823.090897][T13040] WARNING: block/blk-wbt.c:784 at wbt_init_enable_default+0x148/0x1a0, CPU#1: syz.1.1937/13040 [ 823.104577][T13040] Modules linked in: [ 823.108735][T13040] CPU: 1 UID: 0 PID: 13040 Comm: syz.1.1937 Tainted: G L syzkaller #0 PREEMPT(full) [ 823.119980][T13040] Tainted: [L]=SOFTLOCKUP [ 823.124500][T13040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 823.134826][T13040] RIP: 0010:wbt_init_enable_default+0x148/0x1a0 [ 823.141449][T13040] Code: 41 5c 41 5d 41 5e 41 5f 5d e9 64 47 0f 07 e8 8f 90 25 fd eb 18 e8 88 90 25 fd eb 0d e8 81 90 25 fd 4c 89 ff e8 69 a1 83 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 823.161533][T13040] RSP: 0000:ffffc9000c9bee08 EFLAGS: 00010292 [ 823.167615][T13040] RAX: fb138d9b21d77300 RBX: 1ffff1100f971604 RCX: 0000000000000046 [ 823.175932][T13040] RDX: 0000000000000006 RSI: ffffffff8def38f2 RDI: ffffffff8c27ab00 [ 823.184195][T13040] RBP: dffffc0000000000 R08: ffffffff901195b7 R09: 1ffffffff20232b6 [ 823.192359][T13040] R10: dffffc0000000000 R11: fffffbfff20232b7 R12: ffff88807cb8b020 [ 823.200619][T13040] R13: 0000000000000000 R14: ffff888029093000 R15: ffff88807cb8b000 [ 823.209269][T13040] FS: 00007f7659dd56c0(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 823.218503][T13040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 823.225329][T13040] CR2: 00005555650969e8 CR3: 000000005a4de000 CR4: 00000000003526f0 [ 823.233367][T13040] Call Trace: [ 823.236737][T13040] [ 823.239743][T13040] blk_register_queue+0x36a/0x3f0 [ 823.244798][T13040] __add_disk+0x677/0xd50 [ 823.249404][T13040] ? down_read+0x272/0x2e0 [ 823.254045][T13040] add_disk_fwnode+0xfb/0x480 [ 823.258916][T13040] nbd_dev_add+0x72c/0xb50 [ 823.263502][T13040] ? __pfx_nbd_dev_add+0x10/0x10 [ 823.268792][T13040] ? bpf_lsm_capable+0x9/0x20 [ 823.273566][T13040] ? security_capable+0x7e/0x2c0 [ 823.278599][T13040] ? radix_tree_lookup+0x25c/0x290 [ 823.283893][T13040] nbd_genl_connect+0x962/0x1cf0 [ 823.288882][T13040] ? __pfx_nbd_genl_connect+0x10/0x10 [ 823.294457][T13040] ? rcu_is_watching+0x15/0xb0 [ 823.299283][T13040] ? trace_kmalloc+0x2a/0x110 [ 823.304253][T13040] ? __nla_parse+0x40/0x60 [ 823.309147][T13040] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 823.315649][T13040] genl_family_rcv_msg_doit+0x22a/0x330 [ 823.321461][T13040] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 823.327647][T13040] genl_rcv_msg+0x61c/0x7a0 [ 823.332749][T13040] ? __pfx_genl_rcv_msg+0x10/0x10 [ 823.338332][T13040] ? __pfx_nbd_genl_connect+0x10/0x10 [ 823.343907][T13040] ? __lock_acquire+0x6b5/0x2cf0 [ 823.348853][T13040] netlink_rcv_skb+0x232/0x4b0 [ 823.353647][T13040] ? __pfx_genl_rcv_msg+0x10/0x10 [ 823.358849][T13040] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 823.364395][T13040] ? down_read+0x272/0x2e0 [ 823.368839][T13040] ? genl_rcv+0xd/0x40 [ 823.372940][T13040] genl_rcv+0x28/0x40 [ 823.377028][T13040] netlink_unicast+0x80f/0x9b0 [ 823.381854][T13040] ? __pfx_netlink_unicast+0x10/0x10 [ 823.387236][T13040] ? netlink_sendmsg+0x650/0xb40 [ 823.392332][T13040] ? skb_put+0x11b/0x210 [ 823.396597][T13040] netlink_sendmsg+0x813/0xb40 [ 823.401454][T13040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.406751][T13040] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 823.413874][T13040] ? kfree+0x1c1/0x630 [ 823.417964][T13040] ? tomoyo_path_number_perm+0x501/0x630 [ 823.424032][T13040] ? security_file_ioctl+0xc3/0x2a0 [ 823.429237][T13040] ? __se_sys_ioctl+0x47/0x170 [ 823.434228][T13040] ? do_syscall_64+0x14d/0xf80 [ 823.439031][T13040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.444452][T13040] sock_sendmsg_nosec+0x18f/0x1d0 [ 823.449612][T13040] ____sys_sendmsg+0x589/0x8c0 [ 823.454572][T13040] ? __pfx_____sys_sendmsg+0x10/0x10 [ 823.460045][T13040] ? import_iovec+0x73/0xa0 [ 823.464735][T13040] ___sys_sendmsg+0x2a5/0x360 [ 823.469421][T13040] ? __pfx____sys_sendmsg+0x10/0x10 [ 823.474674][T13040] ? tomoyo_path_number_perm+0x219/0x630 [ 823.480578][T13040] ? __fget_files+0x2a/0x420 [ 823.485283][T13040] ? __fget_files+0x3a0/0x420 [ 823.490043][T13040] __x64_sys_sendmsg+0x1bd/0x2a0 [ 823.495025][T13040] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 823.500664][T13040] ? rcu_is_watching+0x15/0xb0 [ 823.505468][T13040] ? __pfx_kcov_ioctl+0x10/0x10 [ 823.510981][T13040] do_syscall_64+0x14d/0xf80 [ 823.515664][T13040] ? trace_irq_disable+0x3b/0x150 [ 823.521044][T13040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.527576][T13040] ? clear_bhb_loop+0x40/0x90 [ 823.532518][T13040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.538514][T13040] RIP: 0033:0x7f765bb9bf79 [ 823.543020][T13040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.563106][T13040] RSP: 002b:00007f7659dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.571706][T13040] RAX: ffffffffffffffda RBX: 00007f765be16090 RCX: 00007f765bb9bf79 [ 823.579860][T13040] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000006 [ 823.587934][T13040] RBP: 00007f765bc327e0 R08: 0000000000000000 R09: 0000000000000000 [ 823.596083][T13040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.604401][T13040] R13: 00007f765be16128 R14: 00007f765be16090 R15: 00007fff53230cb8 [ 823.612453][T13040] [ 823.615804][T13040] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 823.623264][T13040] CPU: 1 UID: 0 PID: 13040 Comm: syz.1.1937 Tainted: G L syzkaller #0 PREEMPT(full) [ 823.634196][T13040] Tainted: [L]=SOFTLOCKUP [ 823.638513][T13040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 823.648646][T13040] Call Trace: [ 823.651929][T13040] [ 823.655070][T13040] vpanic+0x56c/0xa60 [ 823.659146][T13040] ? __pfx__printk+0x10/0x10 [ 823.663729][T13040] ? __pfx_vpanic+0x10/0x10 [ 823.668258][T13040] ? is_bpf_text_address+0x292/0x2b0 [ 823.673659][T13040] ? is_bpf_text_address+0x26/0x2b0 [ 823.679046][T13040] panic+0xc5/0xd0 [ 823.682779][T13040] ? __pfx_panic+0x10/0x10 [ 823.687205][T13040] __warn+0x315/0x4f0 [ 823.691273][T13040] ? wbt_init_enable_default+0x148/0x1a0 [ 823.696906][T13040] ? wbt_init_enable_default+0x148/0x1a0 [ 823.702534][T13040] __report_bug+0x29a/0x540 [ 823.707046][T13040] ? nbd_dev_add+0x72c/0xb50 [ 823.711898][T13040] ? nbd_genl_connect+0x962/0x1cf0 [ 823.717128][T13040] ? genl_family_rcv_msg_doit+0x22a/0x330 [ 823.722955][T13040] ? wbt_init_enable_default+0x148/0x1a0 [ 823.728714][T13040] ? __pfx___report_bug+0x10/0x10 [ 823.733768][T13040] ? wbt_init_enable_default+0x148/0x1a0 [ 823.739670][T13040] report_bug+0x16a/0x220 [ 823.744011][T13040] ? wbt_init_enable_default+0x148/0x1a0 [ 823.749642][T13040] ? wbt_init_enable_default+0x14a/0x1a0 [ 823.755275][T13040] handle_bug+0x98/0x200 [ 823.759522][T13040] exc_invalid_op+0x1a/0x50 [ 823.764119][T13040] asm_exc_invalid_op+0x1a/0x20 [ 823.768969][T13040] RIP: 0010:wbt_init_enable_default+0x148/0x1a0 [ 823.775307][T13040] Code: 41 5c 41 5d 41 5e 41 5f 5d e9 64 47 0f 07 e8 8f 90 25 fd eb 18 e8 88 90 25 fd eb 0d e8 81 90 25 fd 4c 89 ff e8 69 a1 83 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 823.795547][T13040] RSP: 0000:ffffc9000c9bee08 EFLAGS: 00010292 [ 823.801640][T13040] RAX: fb138d9b21d77300 RBX: 1ffff1100f971604 RCX: 0000000000000046 [ 823.809617][T13040] RDX: 0000000000000006 RSI: ffffffff8def38f2 RDI: ffffffff8c27ab00 [ 823.817605][T13040] RBP: dffffc0000000000 R08: ffffffff901195b7 R09: 1ffffffff20232b6 [ 823.825775][T13040] R10: dffffc0000000000 R11: fffffbfff20232b7 R12: ffff88807cb8b020 [ 823.833939][T13040] R13: 0000000000000000 R14: ffff888029093000 R15: ffff88807cb8b000 [ 823.842102][T13040] ? wbt_init_enable_default+0x147/0x1a0 [ 823.847913][T13040] blk_register_queue+0x36a/0x3f0 [ 823.852937][T13040] __add_disk+0x677/0xd50 [ 823.857915][T13040] ? down_read+0x272/0x2e0 [ 823.862600][T13040] add_disk_fwnode+0xfb/0x480 [ 823.867298][T13040] nbd_dev_add+0x72c/0xb50 [ 823.871736][T13040] ? __pfx_nbd_dev_add+0x10/0x10 [ 823.876808][T13040] ? bpf_lsm_capable+0x9/0x20 [ 823.881490][T13040] ? security_capable+0x7e/0x2c0 [ 823.886457][T13040] ? radix_tree_lookup+0x25c/0x290 [ 823.892438][T13040] nbd_genl_connect+0x962/0x1cf0 [ 823.897481][T13040] ? __pfx_nbd_genl_connect+0x10/0x10 [ 823.902853][T13040] ? rcu_is_watching+0x15/0xb0 [ 823.907612][T13040] ? trace_kmalloc+0x2a/0x110 [ 823.912298][T13040] ? __nla_parse+0x40/0x60 [ 823.916713][T13040] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 823.923037][T13040] genl_family_rcv_msg_doit+0x22a/0x330 [ 823.928584][T13040] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 823.934740][T13040] genl_rcv_msg+0x61c/0x7a0 [ 823.939268][T13040] ? __pfx_genl_rcv_msg+0x10/0x10 [ 823.944287][T13040] ? __pfx_nbd_genl_connect+0x10/0x10 [ 823.949746][T13040] ? __lock_acquire+0x6b5/0x2cf0 [ 823.954858][T13040] netlink_rcv_skb+0x232/0x4b0 [ 823.959655][T13040] ? __pfx_genl_rcv_msg+0x10/0x10 [ 823.964766][T13040] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 823.970098][T13040] ? down_read+0x272/0x2e0 [ 823.974612][T13040] ? genl_rcv+0xd/0x40 [ 823.978781][T13040] genl_rcv+0x28/0x40 [ 823.982768][T13040] netlink_unicast+0x80f/0x9b0 [ 823.987720][T13040] ? __pfx_netlink_unicast+0x10/0x10 [ 823.993175][T13040] ? netlink_sendmsg+0x650/0xb40 [ 823.998293][T13040] ? skb_put+0x11b/0x210 [ 824.002581][T13040] netlink_sendmsg+0x813/0xb40 [ 824.007367][T13040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 824.012840][T13040] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 824.019255][T13040] ? kfree+0x1c1/0x630 [ 824.023417][T13040] ? tomoyo_path_number_perm+0x501/0x630 [ 824.029064][T13040] ? security_file_ioctl+0xc3/0x2a0 [ 824.034274][T13040] ? __se_sys_ioctl+0x47/0x170 [ 824.039037][T13040] ? do_syscall_64+0x14d/0xf80 [ 824.043816][T13040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 824.049136][T13040] sock_sendmsg_nosec+0x18f/0x1d0 [ 824.054247][T13040] ____sys_sendmsg+0x589/0x8c0 [ 824.059010][T13040] ? __pfx_____sys_sendmsg+0x10/0x10 [ 824.064308][T13040] ? import_iovec+0x73/0xa0 [ 824.068806][T13040] ___sys_sendmsg+0x2a5/0x360 [ 824.073482][T13040] ? __pfx____sys_sendmsg+0x10/0x10 [ 824.078679][T13040] ? tomoyo_path_number_perm+0x219/0x630 [ 824.084489][T13040] ? __fget_files+0x2a/0x420 [ 824.089075][T13040] ? __fget_files+0x3a0/0x420 [ 824.093758][T13040] __x64_sys_sendmsg+0x1bd/0x2a0 [ 824.098697][T13040] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 824.104151][T13040] ? rcu_is_watching+0x15/0xb0 [ 824.109011][T13040] ? __pfx_kcov_ioctl+0x10/0x10 [ 824.113862][T13040] do_syscall_64+0x14d/0xf80 [ 824.118560][T13040] ? trace_irq_disable+0x3b/0x150 [ 824.123668][T13040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.129732][T13040] ? clear_bhb_loop+0x40/0x90 [ 824.134432][T13040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.140321][T13040] RIP: 0033:0x7f765bb9bf79 [ 824.144728][T13040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.164411][T13040] RSP: 002b:00007f7659dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 824.172823][T13040] RAX: ffffffffffffffda RBX: 00007f765be16090 RCX: 00007f765bb9bf79 [ 824.180966][T13040] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000006 [ 824.188951][T13040] RBP: 00007f765bc327e0 R08: 0000000000000000 R09: 0000000000000000 [ 824.197009][T13040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.205060][T13040] R13: 00007f765be16128 R14: 00007f765be16090 R15: 00007fff53230cb8 [ 824.213091][T13040] [ 824.216317][T13040] Kernel Offset: disabled [ 824.220660][T13040] Rebooting in 86400 seconds..