last executing test programs: 14m21.364833758s ago: executing program 1 (id=126): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x80008100, 0x0, 0xff28, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r1, &(0x7f0000000740)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000500)=[@timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x3) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x40001, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40603d10, &(0x7f0000000140)={0x1, 0x9}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 14m19.463204862s ago: executing program 1 (id=119): openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x100008b}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000580)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x141102) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000002980)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x8040480) connect(r3, &(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0, 0x31}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x64, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x6}}}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000800)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 14m16.723341861s ago: executing program 1 (id=122): sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000240)={0x68, 0x0, 0x30, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000002000000a00300000500000010"], 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000100)={r1, 0x0, 0x0}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000ffe000/0x1000)=nil) sched_setattr(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80200, 0x0) poll(&(0x7f0000000180)=[{r2, 0xc100}], 0x1, 0xc) socket(0x10, 0x3, 0x0) capset(&(0x7f0000000740)={0x19980330}, &(0x7f0000000780)={0x1000, 0x10ffff, 0xffffeffd, 0x0, 0x0, 0x5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000880)={0x1, &(0x7f00000008c0)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x8042, 0x0) write$P9_RRENAME(r3, &(0x7f00000002c0)={0x7, 0x15, 0x1}, 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='fd\x00') statx(r5, 0x0, 0x1000, 0x10, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x5) 14m14.634016723s ago: executing program 1 (id=128): openat(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x40, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000340)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x4, &(0x7f00000005c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000740), 0x8, 0x10, &(0x7f0000000780), 0x10}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000007c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000001800)=0x40) write$UHID_INPUT(r0, 0x0, 0x0) getsockname(r4, &(0x7f0000002880)=@caif=@util, 0x0) syz_mount_image$erofs(&(0x7f0000002900), &(0x7f0000002940)='./file0\x00', 0x18000c6, &(0x7f0000002980)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f00000029c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, &(0x7f0000002d40), 0x10000, &(0x7f0000002d80)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) utimensat(0xffffffffffffff9c, &(0x7f0000007080)='./file0\x00', &(0x7f00000070c0)={{}, {0x0, 0x3fffffff}}, 0x100) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x84, &(0x7f0000000100)=ANY=[@ANYBLOB=',noextend,fscontext']) 14m11.552857466s ago: executing program 1 (id=135): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000006c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x80008100, 0x0, 0xff28, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r2, &(0x7f0000000740)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000500)=[@timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x3) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x40001, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40603d10, &(0x7f0000000140)={0x1, 0x9}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 14m9.560183669s ago: executing program 1 (id=137): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x14, 0x2}}}}, 0xf) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$mtd(&(0x7f0000000080), 0x81, 0x2a000) readv(r0, &(0x7f0000001980)=[{0x0}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x24008840}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x30}, 0x1, 0x900}, 0x0) 13m53.448883887s ago: executing program 32 (id=137): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x14, 0x2}}}}, 0xf) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$mtd(&(0x7f0000000080), 0x81, 0x2a000) readv(r0, &(0x7f0000001980)=[{0x0}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x24008840}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x30}, 0x1, 0x900}, 0x0) 10.343980756s ago: executing program 0 (id=1673): socket$nl_netfilter(0x10, 0x3, 0xc) openat$random(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = io_uring_setup(0x2e71, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000004c0)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000f00)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000f80)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r3, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80000) timerfd_create(0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4000, 0x0, 0x20, 0x3) 8.593916044s ago: executing program 3 (id=1677): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) statfs(0x0, &(0x7f00000000c0)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r3}, 0x50) close(r3) r4 = epoll_create1(0x0) poll(0x0, 0x0, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)) shutdown(r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x2000200b}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 8.318266042s ago: executing program 4 (id=1678): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000300)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000480)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000005c0), 0x2200, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000340), 0x24100, 0x0) mkdir(&(0x7f0000000140)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x10) setxattr$trusted_overlay_origin(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x8, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0\x00') close(r0) 8.280928716s ago: executing program 2 (id=1679): syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x16840) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002fc0)=@newtfilter={0x8a8, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x878, 0x2, [@TCA_CGROUP_EMATCHES={0x2c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x8}, {0xc22, 0x7, 0xfffff800, 0xfffffff3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf001}}]}, @TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x10000000, 0xfffffffa, 0x9, 0x0, {0x6, 0x1, 0x9, 0x3, 0x4, 0x676}, {0x9, 0x1, 0xfffd, 0xc9, 0x3, 0x456}, 0x1, 0x503, 0xe}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x1d4, 0x3, 0x401, 0x7, 0x5, 0x3, 0x0, 0x80, 0xd9, 0x0, 0x81, 0x5, 0x2, 0x2, 0x3, 0x401, 0x3, 0x3, 0x4, 0x1, 0x10000, 0x8, 0x400, 0x1, 0x2, 0xff, 0x2, 0xb22, 0x3, 0x2, 0x7fff, 0x7, 0x6, 0xfffffffd, 0x22, 0x1c8b, 0x4, 0x10001, 0x4, 0x8, 0x80000001, 0x6, 0x4, 0x3, 0x7, 0xf92, 0x17, 0xa0f7, 0x225, 0x8, 0x6, 0x2, 0x10001, 0x6, 0xe1c3, 0x4d, 0x3, 0x6, 0x398, 0x0, 0xc1a, 0x4, 0x8, 0x101, 0x8, 0xfffffff8, 0x634, 0xb, 0x5, 0x6, 0xffffffc4, 0x5, 0x0, 0x2, 0x5, 0x1, 0x4, 0x5, 0x4eb6, 0x400, 0x8000, 0x3, 0x7, 0xf76, 0x3, 0xf20, 0x80000001, 0x73, 0x4, 0x2, 0x9, 0x8, 0x1, 0xa, 0x4d989b25, 0x5, 0x0, 0x3, 0x4, 0x1, 0x8, 0x1, 0x6, 0x6, 0xffff0001, 0x100, 0x1, 0xd0ef, 0x2, 0xc9, 0x7, 0x7, 0xffffffff, 0x4, 0x5, 0x6, 0x5, 0x44c1, 0xffffff01, 0xffffffff, 0xffff, 0x3ff, 0x8, 0x3, 0xb, 0x6, 0x1, 0xffffffff, 0x7fff, 0x4, 0x2, 0x7, 0x1e4, 0x9, 0x5, 0x2, 0x5, 0x5, 0x2, 0x4, 0x2, 0x8, 0x0, 0x8, 0x200, 0x5, 0x8, 0x7, 0x9, 0x7, 0x7, 0x4, 0x0, 0x6, 0x160d, 0x4, 0xfffffff9, 0xc, 0x5, 0x5, 0xff, 0xdc, 0x2, 0x9, 0x1ff, 0xa, 0x3, 0x437, 0x2, 0xfffffffb, 0xfa7, 0x9, 0x3, 0x80000001, 0x200, 0x10000, 0xea49, 0x8, 0xff, 0x5, 0xff, 0x3, 0x8, 0x81, 0x7, 0x1, 0x1, 0x1, 0x3, 0x7, 0xfc4, 0x0, 0x4, 0x9, 0x8, 0x2, 0x9, 0xd, 0x10, 0x3ff, 0x7, 0x5, 0x4, 0xe136, 0x48d, 0x6, 0x10, 0x0, 0x6, 0x3, 0x2, 0xdc, 0xfe, 0x3, 0x6, 0x1, 0x7, 0x1, 0x5, 0x0, 0x9, 0x8, 0x9, 0x4, 0x8, 0x7, 0x1, 0xfff, 0x146e, 0x400, 0x0, 0xa, 0x3, 0x83e1, 0x1b, 0x888, 0x7, 0x288, 0x7ff, 0x6, 0x5, 0x10, 0x4, 0x80000001, 0x7, 0x4, 0x20, 0x6eb, 0x0, 0xfffffff8, 0x4, 0x1, 0x5, 0x1, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0x7fffffff, 0x1, 0x9, 0x0, 0xfffffc4c, 0x1, 0x200, 0x7, 0x200, 0x7a5, 0x4, 0x1, 0x3, 0xfffffffc, 0x3, 0xab, 0x8142, 0x2, 0x0, 0x1000, 0x8, 0x40, 0x74e, 0x3623, 0x8, 0x86, 0x5, 0x5, 0x8001, 0x5045c494, 0x5, 0x8, 0x326a, 0x1, 0x0, 0x9, 0x1, 0x617e57a8, 0x7fffffff, 0x1000, 0x9e, 0xd5, 0x7, 0x56fc, 0xd, 0xfffffcfb, 0x3, 0x9, 0x7, 0xffff, 0x5, 0x80000000, 0x9, 0x4, 0x9, 0x2c72, 0x8, 0x5, 0x3, 0xa5, 0xa, 0x0, 0x9, 0x80000000, 0xfc, 0x0, 0x79255d0e, 0x8, 0xfffffff7, 0x6963, 0x0, 0x1, 0x5, 0x400, 0x0, 0x8, 0xf, 0x7fff, 0xfffffffd, 0x1, 0xffffffff, 0x7, 0x0, 0xa, 0xef8f, 0x0, 0x5, 0x0, 0x9, 0x2, 0x10000000, 0x0, 0x80000001, 0x0, 0xffffffff, 0x83, 0x4, 0x8, 0x2, 0x0, 0xff, 0xc3e, 0x7, 0xccb, 0xfffffff8, 0xfffffff9, 0xab, 0x10000, 0x0, 0x3, 0x752a5eb9, 0x1, 0x7, 0xedf4, 0x2b3, 0x1, 0x6, 0x6, 0x100, 0x8, 0x5, 0x6, 0x6, 0x7, 0x3, 0xfffffff7, 0x1, 0x7, 0xff, 0x48, 0x2e8, 0x3, 0x10, 0x7e69c17e, 0x9, 0x7648, 0x1000, 0x8, 0xf1, 0x3, 0xd7, 0x6, 0x3, 0x7, 0x9, 0x7f, 0x5, 0x200, 0x0, 0x9, 0x7, 0x5e, 0x4, 0x2, 0x7, 0x7, 0x7ff, 0x9a, 0x345f, 0xe, 0x7fffffff, 0x6, 0x7fffffff, 0xfffffffb, 0x9, 0x4, 0x8, 0x9, 0x3, 0xfffffff7, 0x3, 0x7, 0x1, 0xf7a5, 0x0, 0x1, 0x9, 0x400, 0x81, 0x8, 0x7, 0x7ff, 0x5, 0x7f, 0x1, 0xfffffffe, 0xffffffff, 0x6, 0xff, 0x10001, 0x7, 0x1, 0x7, 0x6, 0xde3, 0xfffffffa, 0x200, 0x8, 0x8, 0xfffffff8, 0x9, 0x0, 0x0, 0x9, 0x6, 0xc, 0x6, 0x0, 0xffffffff, 0x5, 0x8667, 0x80, 0x0, 0x6, 0x9, 0x2, 0x4, 0x5, 0x6ae3, 0x1, 0x1, 0x7, 0x3, 0x1, 0x9, 0x5, 0x0, 0xfffffffa, 0x81, 0x3, 0x6, 0x8, 0x10000, 0x7, 0x7, 0x8001, 0x1, 0x2, 0x6, 0x2, 0x226c0000, 0x5f7e, 0xffffffff, 0x5, 0x0, 0xff, 0xad9, 0x4d3ae222, 0xfffffffe, 0x5, 0x9, 0x0, 0x9, 0x2]}]}]}}]}, 0x8a8}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240"], 0xcd0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b00", 0x34}], 0x1}, 0x40085) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="300000000000000029000000040000008402300400000000040200030401", @ANYRES8], 0x30}, 0x40) syz_emit_ethernet(0xfed7, 0x0, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r4, 0x80044dfb, &(0x7f0000000040)) write$proc_mixer(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \'Line\' 0'], 0x2a) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f0000000200)='m', 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)) r7 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r7, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r7, 0x4144, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40084146, &(0x7f0000000140)=0xfff) close(r3) 8.278439646s ago: executing program 0 (id=1687): socket$nl_netfilter(0x10, 0x3, 0xc) openat$random(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = io_uring_setup(0x2e71, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000004c0)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000f00)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000f80)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r3, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80000) timerfd_create(0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4000, 0x0, 0x20, 0x3) 7.279130848s ago: executing program 4 (id=1680): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) statfs(0x0, &(0x7f00000000c0)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r3}, 0x50) close(r3) r4 = epoll_create1(0x0) poll(&(0x7f0000000a80)=[{r4, 0x251}], 0x1, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)) shutdown(r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 7.191744057s ago: executing program 2 (id=1681): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000fe00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000128a3ecbd57074766a2210306c4733d3c73f854acded69b5102c3a822e6a1b779f", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bfa200000000000007020000f8ffffffbfa3000000000000185a0000030000000000000000000000b704000001000000850000000d0000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffd4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x2c, 0x9, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100030010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000680)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000cc0)={0x3e8, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x52, 0x3, "27efa290a70d4d75a60e4fb600daed68b059b6d977799fe3dbc97830ad52cd1e4cf99677c8af195b8d5e599e0f0683432bd55608d3f81984deb20faf7182d8a4895a35cdfcd5f5b5eb435e0541e9"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_ID={0xec, 0x3, "4dc4eeb09103a20c209dda7b317b41b8776cb7ea8b5b248a0bfed14a6b97eb175aacb50f7a7b5c8db9a821e9c6752e39033d8819e73dc3d2f920491ce16c9b9037b6d81bb6fa9f7cf554b6ff13c61bf4b7f259d14ed98ae7706ef9d4f93af51e766b76a5c66bf483858fe99cf51bfcbc856e63fee7b081568d2f514e8f75b7e3eb3a5e4590dd337d7f6e141d6a3906655343a858e5d9c01d3dc96c3a643e619511feefa153542e2d91927a6e9228fc725e9129b7514b181a2858b0ebdd8a24a2428c7e7865bc6782f60f4c955ea2399b8e801878572fd3eb4bb067a5d4b966cff3aa684b80c1c9db"}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd3}]}, @TIPC_NLA_NODE={0x25c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0x85, 0x3, "a65cca147c2743732da5e00f490692ae928fa02231b2921fac5b0198f39adaa04c4a2556a76d037a6b731fb49e56157beda761336a0f5b3c9c37742d33ee9c1e9720ff475caaca461292c9ef352dac983955d2fc2e9a1839c79dd63c0dee49aebc6c5e25df6352ac922a33cce9934d9e317aadba176c2a78461a5711c653b06caa"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0xb9, 0x3, "bf9389c6dffaa6d5460e26d6628787ed8434d7720868ad8454b453c8d19848c366c6283b80030c29fc314ccf6f8e28a66d72c44ac490916452356d51ea8ec0043ffcbaf6963b3081b4ad67c7bd871a53de6631aa7d6a65e0041e13d5b0618bba12fe6aeeb188004bd6a477f65a97fdd87d4c53017b2ea42b7ee6b09a2f86fa46c5bbdfedc4937ce823d9e426d9833bee03b070e7c34203e636459d9e7b0a189e7985b4d39955be00b2e85c25066fcd96eb03f408ae"}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "a844499f6e1f3d68da5e8899dd0985bd7fcc0af2f3dc8a26490bc6e93d51b15b59710f6a4fc9d267636dafd0728614418a2a63f2be8b112b03509b89d83a1a0996d92f48edf54db12a727dd44b30214233a98aa1805af5d3d749b7ec9a53bd6fcb1074eb9d4400e369739845810b02087ab77328efd0b33bcf4ad0ba0d03e999fc282668a01f0d559f133cc13eb71f54b94a810588b358574855efda408738f1929c148fed4cf7ea0f5c8d1ad662ddc29c30e62e879008b455320f8d413465f6566b20fa923fc3022d13015974668c26a8b0a9c6c006b9ead20a3e304af56b287be1b9a86d"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) mkdirat(0xffffffffffffff9c, 0x0, 0x187) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0x58, &(0x7f0000000b40)}, 0x10) clock_gettime(0x600, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='./sec\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x4840) openat(0xffffffffffffff9c, &(0x7f0000000c80)='./sec/tomoyo/query\x00', 0x2, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) 6.960035651s ago: executing program 0 (id=1682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x6) syz_open_dev$loop(0x0, 0x4, 0x901) timer_create(0x5, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, 0x0) setns(0xc9, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f0000003900), 0x0, 0x102, 0x0) unshare(0x20000600) r5 = userfaultfd(0x80001) setrlimit(0x2, &(0x7f00000000c0)={0xe, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280c02, 0x48) signalfd4(r6, &(0x7f0000000100)={[0xc35]}, 0x8, 0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) epoll_create(0x8) unshare(0x20000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x6, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x80005, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x10000e, 0x40, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x193, 0xffff, 0x12f, 0x2ea9c1f6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x100, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x5, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x3, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0xfffffffe, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0xfffffffe, 0xcc52, 0xc, 0xfff, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3ff, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0xd2, 0x2, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x0, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0xc5a, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x400007f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x7, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.959762291s ago: executing program 3 (id=1683): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000002c0)={0x42, 0xfffffffc, 0x1}, 0x10) bind$tipc(r3, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1, 0x4}}, 0x10) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x30, 0x5f, 0x2e, 0x0, 0x2e, 0x61, 0x1e]}}, &(0x7f00000004c0)=""/4096, 0x21, 0x1000, 0x1}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000014c0)=0x2) request_key(&(0x7f0000001500)='asymmetric\x00', &(0x7f0000001540)={'syz', 0x1}, &(0x7f0000001580)='q\xa9', 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYRESHEX=r4, @ANYRES64=0x0], 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x4, &(0x7f0000001640)) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000001680)={'bond_slave_0\x00', @random="013301300108"}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000016c0)={0x2, {0x2, 0x4f00, 0x100, 0x100, 0x1, 0x4000}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x10, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 4.472155954s ago: executing program 4 (id=1684): syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x2b8, &(0x7f0000000d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000800)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000840)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000880)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000900)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000980), 0x651, 0x0) recvmmsg(r1, &(0x7f00000009c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x6) add_key(&(0x7f0000000a40)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000a80), &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000bc0)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = fsopen(&(0x7f0000000c00)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xa) fchdir(r4) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000c40)=[0xee00]) socket$nl_route(0x10, 0x3, 0x0) setregid(r5, r5) setresuid(0x0, 0x0, 0x0) stat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000040), 0x410, &(0x7f0000001040)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@default_permissions}, {@default_permissions}], [{@dont_measure}, {@pcr={'pcr', 0x3d, 0x3f}}, {@seclabel}, {@smackfsroot={'smackfsroot', 0x3d, ')\xb3\\#c\\-^}'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fowner_eq}, {@euid_gt={'euid>', r6}}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./bus\x00', 0x1) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000d00), 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000d40)='cgroup.controllers\x00', 0x275a, 0x0) 4.386332483s ago: executing program 2 (id=1685): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000200)=0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x8800, &(0x7f00000002c0), 0xff, 0x523, &(0x7f0000000d00)="$eJzs3c9vI1cdAPCvvXHi/OgmLT0AgnZpCwtarZN426jqAcoRoUqIHkHaBscbRbHjKHZKE3JIz1yRqMSJHvkDOPfEgRsXBDcu5YDEjwjUIHEwmvEk62TtTbRJ7DT+fKTRvHkz6+/3OZn31s+xXwAj605E7EfEeES8FxGzWX0u2+LtZBvLavcqhwd7lVy02+/+M5ee/+xgrxJd/yYxnT1mMSJ++HHET3JPxm3u7K4v12rVrex4vlXfnG/u7N5fqy+vVlerG+Xy0uLSwpsP3ihfWltfro9npa9++of9b/0sSWsmq+lux2XqNL1wHCeRPJvfv4pgQ3Ara8/4sBPhmeQj4oWIeCW9/2fjVowNOyUA4Iq127PRnu0+BgBuunw6B5bLl7K5gJnI50ulzhzeizGVrzWarXuPGtsbK525srko5B+t1aoL2VzhXBRyyfFiWn58XD51/CAino+IX0xMpselSqO2Msz/+ADACJs+Nf7/Z6Iz/gMAN1xx2AkAAAPXZ/zfH3QeAMDgeP0PAKPH+A8Ao6eYfofD5LDTAAAGyOt/ABg9xn8AGCk/eOedZGsfZt9/vfL+zvZ64/37K9Xmeqm+XSlVGlubpdVGYzX9zp76WY9XazQ2F1+P7Q/mvr3ZbM03d3Yf1hvbG62H6fd6P6wW0qt8sgAAhun5lz/5cy4Zkd+aTLfoWsuhMNTMgKuWH3YCwNDc6lMGbj6rfcHousBrfNMDcEP0WKL3hGL0+IBQu91uX11KwBW7+yXz/zCquub//RUwjBhz/jC6zP/D6Gq3c+dd8z/OeyEAcL2Z4wf6vP//Qrb/TfbmwI9XTl/x0VVmBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfb0fq/pWwt8JnI50uliOciYi4KuUdrtepCRNyOiD9NFCaS48V0IcAhJw4AXED+b7ls/a+7s6/NnDj10vRxcTwifvqrd3/5wXKrtfXHiPHcvyaO6lsfZfXlwWcPAJztaJxO94uP6z872KscbYPM5+/fjYhiJ/7hwXgcHscfi7F0X4xCREz9O5cdd+S65i4uYv/DiPhir/bnYiadA+msfHo6fhL7uYHGz5+In0/PdfbJc/GFS8gFRs0nSf/zdq/7Lx930n3v+7+Y9lAXl/V/yUNVDtM+8HH8o/7vVp/+7855Y7z+u+91SpNPnvsw4stjEUexD7v6n6P4uT7xX+sdbvZ0xV++8tIr/XJr/zribvSO3x1rvlXfnG/u7N5fqy+vVlerG+Xy0uLSwpsP3ijPp3PU8/1Hg3+8de92v3NJ+6f6xC+e0f6v94140sf/e+9HX3tK/G++2it+Pl58SvxkTPzGOeMvT/222O9cEn+lT/vP+vnfO2f8T/+6+8Sy4QDA8DR3dteXa7Xq1tMKtw8jzrrmc1mI8138++zJuhY5j3Qh+SlcgzR6Fr7TVTMdVxhrvM/N+PNXO7+mExHdv9jt9jPF6tdjXMasG3AdHN/0EfHfYScDAAAAAAAAAAAAAAD0NIhPRw27jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANxc/w8AAP//A3nLcQ==") prlimit64(0x0, 0xe, &(0x7f0000001240)={0x7, 0x100}, 0x0) r0 = getpid() r1 = fspick(0xffffffffffffffff, &(0x7f0000001280)='./bus\x00', 0x0) fsmount(r1, 0x0, 0x19) sched_setscheduler(r0, 0x1, &(0x7f00000012c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000001300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001380)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001400), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001440), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001480)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000014c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./debug\x00', &(0x7f0000001540)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) readv(r4, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/50, 0x32}], 0x1) rt_sigprocmask(0x2, &(0x7f0000001640)={[0x9]}, 0x0, 0x8) gettid() timer_create(0x2, &(0x7f0000001680)={0x0, 0x0, 0x4, @thr={&(0x7f00000016c0)="b2f66298a18b28acb1792e50b05421995c65f7f4816a661ef45ce8012a935d10520eeca9cf0fae1c6a8188a5cd6e6a2cb54be4fd2f4d1d2b64846d0dc033fc07046984e2dd9440788586f251076728dab6284d3f5023c54e6dcb5ad84125a77faf0176cfadf034c8fa4873230b3686699403959eb8595bd27545bac63a2b9773056b354e5ba6071c6d91346b08541f67722b68a26984a9702894afb98f0bccb0344729626eec1213e4163128ebebdb6233760b7b3a9f6e6a0de98497aee9aad5aebb266e4db27f0e7863e3fce2", &(0x7f00000017c0)="5c7a91412fed25dfccb62301213dcd804800eeefd6af77413268f2cfd9b42137f4448aa1afe51708b8a92eac9f921c3f5925a3f6a5fd6e3d6226f2062f61e33af198fc3fd20a3ccb600bcf2c91e50b6bb088e3"}}, &(0x7f0000001840)) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000001880)=0xfd8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2200008, &(0x7f0000000080), 0x3, 0x5ad, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000c40)='A\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000c80)='A/B\x00', 0x42, 0x1b6) unlinkat(0xffffffffffffff9c, &(0x7f0000000cc0)='A/B\x00', 0x0) 4.236158008s ago: executing program 3 (id=1686): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0xb96e0453b2f36300) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e21000000090000000000"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(r2, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) recvfrom$inet6(r2, &(0x7f0000000080)=""/240, 0xfffffffffffffcea, 0x10020, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x3a}, @call={0x85, 0x0, 0x0, 0x3f}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) write(r1, &(0x7f0000000240)='1\x00', 0x1) r5 = syz_open_procfs(0x0, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/140, 0x8c}], 0x100000000000002a) syz_open_dev$sg(&(0x7f0000000200), 0x5, 0x10b081) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x8946, &(0x7f0000000100)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0x20, &(0x7f0000000c40)={&(0x7f0000000b80), 0x0, 0x0, &(0x7f0000000bc0)=""/105, 0x69}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0x24, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x7, 0x0, 0xa, 0x1, 0x2, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x3, 0x2, 0x4, 0x7, 0x7457bcf106940912, 0x4}, @call={0x85, 0x0, 0x0, 0xa8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x3}, @alu={0x7, 0x1, 0xa, 0xa, 0xb, 0xfffffffffffffffc, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000800)='GPL\x00', 0x4, 0x4d, &(0x7f0000000840)=""/77, 0x1e00, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, r8, r4, 0x5, 0x0, &(0x7f0000000cc0)=[{0x3, 0x3, 0xf, 0x1}, {0x4, 0x4}, {0x1, 0x1, 0xa, 0x1}, {0x1, 0x3, 0xa}, {0x4, 0x1, 0x5, 0x7}], 0x10, 0xe6b}, 0x94) write(r7, &(0x7f00000002c0)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/my_zoned_dev\x00', 0x2, 0x110) read(r9, &(0x7f0000000400), 0x200) 4.21302776s ago: executing program 0 (id=1688): socket$nl_netfilter(0x10, 0x3, 0xc) openat$random(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = io_uring_setup(0x2e71, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000004c0)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000f00)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000f80)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r3, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80000) timerfd_create(0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4000, 0x0, 0x20, 0x3) 3.23697174s ago: executing program 4 (id=1689): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000300)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000480)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000005c0), 0x2200, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x0) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat$snapshot(0xffffff9c, &(0x7f0000000340), 0x24100, 0x0) mkdir(&(0x7f0000000140)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x10) setxattr$trusted_overlay_origin(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x8, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0\x00') close(r0) 3.229371711s ago: executing program 2 (id=1690): socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001400010301000000000000002c0000d4fc2dda1c7b"], 0x24}}, 0x20000840) 3.187752355s ago: executing program 3 (id=1691): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) statfs(0x0, &(0x7f00000000c0)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r3}, 0x50) close(r3) r4 = epoll_create1(0x0) poll(0x0, 0x0, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)) shutdown(r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x2000200b}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 3.14078982s ago: executing program 0 (id=1692): socket$nl_netfilter(0x10, 0x3, 0xc) openat$random(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = io_uring_setup(0x2e71, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000004c0)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000f00)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000f80)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r3, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x80000) timerfd_create(0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4000, 0x0, 0x20, 0x3) 2.335373442s ago: executing program 2 (id=1693): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) statfs(0x0, &(0x7f00000000c0)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r3}, 0x50) close(r3) r4 = epoll_create1(0x0) poll(&(0x7f0000000a80), 0x0, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)) shutdown(r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x2000200b}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 2.080467068s ago: executing program 4 (id=1694): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) statfs(0x0, &(0x7f00000000c0)=""/216) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r3}, 0x50) close(r3) r4 = epoll_create1(0x0) poll(&(0x7f0000000a80)=[{r4, 0x251}], 0x1, 0xdb3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)) shutdown(r5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x2000200b}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 2.077763398s ago: executing program 3 (id=1695): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000600)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_setup(0x524, &(0x7f0000000840)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000780)={0x0, 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = syz_open_procfs(0x0, &(0x7f00000007c0)='net\x00') getdents(r5, &(0x7f00000008c0)=""/188, 0xbc) r6 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000a00)='asymmetric\x00', 0x0, &(0x7f0000000a40)="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", 0x413, r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x28) r8 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0xd, 0x1ff, 0x4, 0x7ffffffe, 0x40, r8, 0x7, '\x00', 0x0, r7, 0x5, 0x3}, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r9 = fanotify_init(0x67, 0x800) ppoll(&(0x7f0000000fc0)=[{r9, 0x500a}, {r4, 0x212}], 0x2, 0x0, 0x0, 0x0) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r10, &(0x7f0000001000)=[{{&(0x7f0000001080)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001140)="815d", 0x2}], 0x1}}, {{&(0x7f0000001180)=@nl=@kern={0x10, 0x0, 0x0, 0x10000}, 0x80, &(0x7f0000001200)=[{&(0x7f0000001240)="1f", 0x1}], 0x1, &(0x7f0000001280)=ANY=[], 0x10}}], 0x2, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.117287956s ago: executing program 2 (id=1696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x6) syz_open_dev$loop(0x0, 0x4, 0x901) timer_create(0x5, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, 0x0) setns(0xc9, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r4, &(0x7f0000003900), 0x0, 0x102, 0x0) unshare(0x20000600) r5 = userfaultfd(0x80001) setrlimit(0x2, &(0x7f00000000c0)={0xe, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x280c02, 0x48) signalfd4(r6, &(0x7f0000000100)={[0xc35]}, 0x8, 0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)) epoll_create(0x8) unshare(0x20000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x3, 0xc95a, 0xfffffff3, 0x9, 0x6, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x80005, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x10000e, 0x40, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x193, 0xffff, 0x12f, 0x2ea9c1f6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x100, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x6, 0x5, 0x6, 0x4, 0xfb, 0x1, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x5, 0x8000, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x8, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x3, 0xb, 0x4, 0x5, 0x1005, 0xfffffffe, 0x1f0, 0xfffffffd, 0xfffffffe, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0xfffffffe, 0xcc52, 0xc, 0xfff, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3ff, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0x8, 0x5, 0x1, 0x6, 0x5, 0x0, 0xd2, 0x2, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x0, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0xc5a, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x400007f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x7, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 86.34192ms ago: executing program 4 (id=1697): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040), 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0), 0x6, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r3, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$uac2(r6, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r9, 0x4004ae86, &(0x7f00000000c0)=0x8a) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x888e, r4, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, 0x0, 0x0) 27.646127ms ago: executing program 3 (id=1698): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1c, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r5, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5, 0x0, r6}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1}) close(r5) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c40)={0x18, r1}) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000c80)={0x48, 0x9, 0x0, 0x0, 0x10}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1}) close(r0) 0s ago: executing program 0 (id=1699): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x30, 0x0, &(0x7f0000001000), 0x40, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000600)='a', 0x1, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000240)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): comm syz.4.407: invalid indirect mapped block 2683928664 (level 1) [ 379.193095][ T8213] EXT4-fs (loop4): 1 truncate cleaned up [ 379.201949][ T8213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.219004][ T8226] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.407: Invalid block bitmap block 3 in block_group 0 [ 380.679016][ T8226] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.407: Invalid block bitmap block 3 in block_group 0 [ 380.770326][ T8226] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:478: comm syz.4.407: Invalid block bitmap block 3 in block_group 0 [ 381.159305][ T6770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.885819][ T8245] loop0: detected capacity change from 0 to 128 [ 383.057959][ T8245] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 383.072435][ T8245] hpfs: filesystem error: improperly stopped [ 383.080009][ T8245] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 383.088553][ T8245] hpfs: You really don't want any checks? You are crazy... [ 383.098149][ T8245] hpfs: Code page index out of array [ 383.106571][ T8245] hpfs: code page support is disabled [ 383.117503][ T8245] hpfs: hpfs_map_4sectors(): unaligned read [ 383.124996][ T8245] hpfs: hpfs_map_4sectors(): unaligned read [ 383.132230][ T8245] hpfs: filesystem error: unable to find root dir [ 384.676511][ T790] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 384.715151][ T8269] loop2: detected capacity change from 0 to 16 [ 384.742335][ T8269] erofs: (device loop2): mounted with root inode @ nid 36. [ 385.044071][ T790] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 385.289692][ T790] usb 1-1: New USB device found, idVendor=05bc, idProduct=0259, bcdDevice= 0.00 [ 385.475826][ T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.495959][ T790] usb 1-1: config 0 descriptor?? [ 386.642453][ C0] hrtimer: interrupt took 55229 ns [ 387.613580][ T5794] Bluetooth: hci3: adv larger than maximum supported [ 387.613686][ T5794] Bluetooth: hci3: Malformed LE Event: 0x0d [ 388.589767][ T790] usbhid 1-1:0.0: can't add hid device: -71 [ 388.596449][ T790] usbhid: probe of 1-1:0.0 failed with error -71 [ 388.609880][ T790] usb 1-1: USB disconnect, device number 9 [ 389.059652][ T8296] loop2: detected capacity change from 0 to 128 [ 389.329910][ T8296] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 389.343534][ T8296] hpfs: filesystem error: improperly stopped [ 389.350307][ T8296] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 389.363608][ T8296] hpfs: You really don't want any checks? You are crazy... [ 389.372467][ T8296] hpfs: Code page index out of array [ 389.380469][ T8296] hpfs: code page support is disabled [ 389.388002][ T8296] hpfs: hpfs_map_4sectors(): unaligned read [ 389.397268][ T8296] hpfs: hpfs_map_4sectors(): unaligned read [ 389.405836][ T8296] hpfs: filesystem error: unable to find root dir [ 391.050573][ T8318] loop0: detected capacity change from 0 to 16 [ 391.072924][ T8318] erofs: (device loop0): mounted with root inode @ nid 36. [ 395.095088][ T8334] rxe_eth0 speed is unknown, defaulting to 1000 [ 398.012389][ T5879] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 398.305597][ T5879] usb 5-1: unable to get BOS descriptor or descriptor too short [ 398.725838][ T5879] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 398.735611][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.826969][ T5879] usb 5-1: Product: syz [ 398.831712][ T5879] usb 5-1: Manufacturer: syz [ 398.846292][ T5879] usb 5-1: SerialNumber: syz [ 399.848642][ T8366] jffs2: notice: (8366) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 399.892227][ T5879] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 399.900339][ T5879] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 399.954286][ T5879] usb 5-1: unit 2 not found! [ 401.350400][ T5879] usb 5-1: USB disconnect, device number 6 [ 401.410236][ T8211] udevd[8211]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 403.810650][ T8405] CIFS: Attempting to mount //127.0.0.1/share [ 404.666616][ T8405] CIFS: VFS: Could not allocate shash TFM 'cmac(aes)' [ 404.847216][ T8405] CIFS: VFS: cifs_mount failed w/return code = -112 [ 407.806457][ T42] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 408.009463][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 408.040525][ T42] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 408.076376][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.096264][ T42] usb 3-1: Product: syz [ 408.100645][ T42] usb 3-1: Manufacturer: syz [ 408.110800][ T42] usb 3-1: SerialNumber: syz [ 408.295976][ T1211] IPVS: starting estimator thread 0... [ 408.347297][ T42] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 408.378359][ T42] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 408.394563][ T42] usb 3-1: unit 2 not found! [ 408.396508][ T8439] IPVS: using max 24 ests per chain, 57600 per kthread [ 408.421291][ T42] usb 3-1: USB disconnect, device number 5 [ 408.473922][ T8423] udevd[8423]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.659196][ T8457] loop4: detected capacity change from 0 to 1024 [ 411.134262][ T8461] netlink: 'syz.3.472': attribute type 12 has an invalid length. [ 411.147850][ T8463] loop0: detected capacity change from 0 to 512 [ 411.217569][ T8463] ext4: Bad value for 'data' [ 413.749119][ T8480] loop0: detected capacity change from 0 to 1024 [ 413.804699][ T8480] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 414.003648][ T8484] loop4: detected capacity change from 0 to 512 [ 414.069528][ T8484] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 414.109657][ T8484] EXT4-fs (loop4): 1 truncate cleaned up [ 414.124496][ T8484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.256348][ T42] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 414.647707][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 414.666377][ T27] audit: type=1800 audit(1794337943.213:161): pid=8489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.470" name="file3" dev="loop4" ino=16 res=0 errno=0 [ 415.027329][ T42] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 415.046281][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.054418][ T42] usb 3-1: Product: syz [ 415.058735][ T42] usb 3-1: Manufacturer: syz [ 415.061204][ T6770] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.063424][ T42] usb 3-1: SerialNumber: syz [ 415.476670][ T42] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 415.499124][ T42] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 415.513958][ T42] usb 3-1: unit 2 not found! [ 415.856668][ T790] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 416.194801][ T42] usb 3-1: USB disconnect, device number 6 [ 416.278758][ T790] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.304076][ T8423] udevd[8423]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.305923][ T790] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 416.404656][ T790] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 416.432737][ T790] usb 5-1: Product: syz [ 416.441003][ T790] usb 5-1: Manufacturer: syz [ 416.531880][ T790] hub 5-1:4.0: bad descriptor, ignoring hub [ 416.548519][ T790] hub: probe of 5-1:4.0 failed with error -5 [ 417.596002][ T790] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 418.366566][ T5869] usb 5-1: USB disconnect, device number 7 [ 420.524800][ T8523] loop2: detected capacity change from 0 to 256 [ 420.613023][ T8530] loop4: detected capacity change from 0 to 512 [ 420.683750][ T8523] FAT-fs (loop2): Directory bread(block 64) failed [ 420.707709][ T8530] ext4: Bad value for 'data' [ 420.736346][ T8523] FAT-fs (loop2): Directory bread(block 65) failed [ 420.747571][ T8523] FAT-fs (loop2): Directory bread(block 66) failed [ 420.766144][ T8523] FAT-fs (loop2): Directory bread(block 67) failed [ 420.779933][ T8440] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 420.801275][ T8523] FAT-fs (loop2): Directory bread(block 68) failed [ 420.937605][ T8523] FAT-fs (loop2): Directory bread(block 69) failed [ 420.945585][ T8523] FAT-fs (loop2): Directory bread(block 70) failed [ 420.963602][ T8523] FAT-fs (loop2): Directory bread(block 71) failed [ 420.992197][ T8523] FAT-fs (loop2): Directory bread(block 72) failed [ 421.018860][ T8523] FAT-fs (loop2): Directory bread(block 73) failed [ 421.285651][ T8534] loop4: detected capacity change from 0 to 1024 [ 421.530247][ T8534] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 422.010443][ T8537] loop0: detected capacity change from 0 to 512 [ 422.075752][ T8537] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 422.089770][ T8537] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.484: invalid indirect mapped block 256 (level 1) [ 422.123787][ T8541] Cannot find add_set index 0 as target [ 422.165746][ T8537] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.484: invalid indirect mapped block 2683928664 (level 1) [ 422.197324][ T8537] EXT4-fs (loop0): 1 truncate cleaned up [ 422.205441][ T8537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.356556][ T790] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 422.586061][ T8548] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.484: Invalid block bitmap block 3 in block_group 0 [ 422.886500][ T790] usb 5-1: unable to get BOS descriptor or descriptor too short [ 423.166946][ T8548] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.484: Invalid block bitmap block 3 in block_group 0 [ 423.181994][ T8548] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.484: Invalid block bitmap block 3 in block_group 0 [ 423.254784][ T790] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 423.268029][ T790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.289139][ T790] usb 5-1: Product: syz [ 423.305035][ T790] usb 5-1: Manufacturer: syz [ 423.325325][ T790] usb 5-1: SerialNumber: syz [ 423.901133][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.200779][ T790] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 424.212073][ T790] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 424.265004][ T790] usb 5-1: unit 2 not found! [ 424.324960][ T790] usb 5-1: USB disconnect, device number 8 [ 427.666462][ T8570] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 427.678005][ T8570] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 427.693299][ T8570] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 427.714850][ T8570] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 427.731576][ T8570] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 427.755075][ T8570] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 427.952266][ T8579] loop2: detected capacity change from 0 to 512 [ 427.987063][ T8579] ext4: Bad value for 'data' [ 430.189586][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 430.276471][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 430.284647][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 430.291355][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 432.317197][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 434.448314][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 434.880496][ T8613] mmap: syz.0.503 (8613) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 435.791962][ T8629] ±ÿ)”ëfl: entered allmulticast mode [ 435.799148][ T8629] ±ÿ)”ëfl: left allmulticast mode [ 437.346466][ T8644] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 437.354572][ T8644] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 437.376409][ T8644] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 437.410675][ T8644] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 439.613491][ T8669] can0: slcan on ttyS3. [ 439.647995][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 439.654254][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 439.660649][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 439.666865][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 439.718011][ T8670] xt_l2tp: invalid flags combination: 8 [ 440.227625][ T8669] can0 (unregistered): slcan off ttyS3. [ 440.569466][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.957812][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.111442][ T8695] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 442.124679][ T8695] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 442.134368][ T8695] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 443.041916][ T8695] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 443.201803][ T8703] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 443.218405][ T8703] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 443.237567][ T8703] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 443.246503][ T8703] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 444.461830][ T8728] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 444.473015][ T8728] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 445.276364][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 445.285303][ T5794] Bluetooth: hci3: command 0x0405 tx timeout [ 445.292248][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 445.388599][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 446.807555][ T5872] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 447.047294][ T5872] usb 5-1: unable to get BOS descriptor or descriptor too short [ 447.236931][ T5872] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 447.400395][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.591132][ T5872] usb 5-1: Product: syz [ 447.664596][ T5872] usb 5-1: Manufacturer: syz [ 447.745852][ T5872] usb 5-1: SerialNumber: syz [ 448.017267][ T5872] usb 5-1: can't set config #1, error -71 [ 448.066154][ T5872] usb 5-1: USB disconnect, device number 9 [ 451.526380][ T5168] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 452.392509][ T8811] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 452.402533][ T8811] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 452.412565][ T8811] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 452.428520][ T8811] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 453.253493][ T8823] rxe_eth0 speed is unknown, defaulting to 1000 [ 454.137383][ T5796] Bluetooth: hci0: command 0x0c1a tx timeout [ 454.168505][ T5168] usb 1-1: unable to get BOS descriptor or descriptor too short [ 454.997539][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 455.004280][ T5796] Bluetooth: hci3: command 0x0405 tx timeout [ 455.010778][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 456.027833][ T5168] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 456.050873][ T5168] usb 1-1: can't read configurations, error -71 [ 458.677113][ T3509] rpcbind: server 127.0.0.1 not responding, timed out [ 458.690357][ T8838] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 458.708368][ T8838] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 458.809129][ T8838] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 458.815826][ T8838] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 459.189057][ T8843] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 459.195273][ T8843] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 459.269041][ T8843] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 459.275275][ T8843] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 459.798394][ T8859] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 459.823947][ T8859] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 459.883732][ T8859] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 459.897124][ T8867] loop2: detected capacity change from 0 to 1024 [ 459.913649][ T8859] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 459.979042][ T8869] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 459.989392][ T8869] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 461.773433][ T5796] Bluetooth: hci0: command 0x0c1a tx timeout [ 461.836479][ T5796] Bluetooth: hci1: command 0x0c1a tx timeout [ 461.946511][ T5796] Bluetooth: hci2: command 0x0406 tx timeout [ 461.952703][ T5796] Bluetooth: hci3: command 0x0405 tx timeout [ 462.051676][ T8883] xfrm0: entered allmulticast mode [ 462.079388][ T8883] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 462.212187][ T8883] netlink: 596 bytes leftover after parsing attributes in process `syz.4.552'. [ 462.278290][ T8883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.552'. [ 462.348567][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.552'. [ 462.397661][ T8883] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.407263][ T8883] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.416152][ T8883] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.425132][ T8883] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.468218][ T1211] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 462.688635][ T1211] usb 1-1: unable to get BOS descriptor or descriptor too short [ 462.702265][ T1211] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 462.717433][ T1211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.750858][ T1211] usb 1-1: Product: syz [ 462.755197][ T1211] usb 1-1: Manufacturer: syz [ 462.786557][ T1211] usb 1-1: SerialNumber: syz [ 464.874148][ T1211] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 464.966589][ T1211] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 465.018794][ T1211] usb 1-1: unit 2 not found! [ 465.095573][ T1211] usb 1-1: USB disconnect, device number 12 [ 468.076367][ T8925] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 468.076430][ T5796] Bluetooth: hci0: command 0x0c1a tx timeout [ 468.527399][ T8925] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 468.639137][ T8925] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 468.689016][ T8925] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 469.238819][ T8940] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 469.250854][ T8940] syz.4.562: attempt to access beyond end of device [ 469.250854][ T8940] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 469.264628][ T8940] exFAT-fs (nbd4): unable to read boot sector [ 469.270900][ T8940] exFAT-fs (nbd4): failed to read boot sector [ 469.277084][ T8940] exFAT-fs (nbd4): failed to recognize exfat type [ 470.156265][ T5796] Bluetooth: hci1: command 0x0c1a tx timeout [ 471.266983][ T5796] Bluetooth: hci2: command 0x0406 tx timeout [ 471.273624][ T5796] Bluetooth: hci3: command 0x0405 tx timeout [ 476.311313][ T8969] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 476.506516][ T8969] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 476.513924][ T8969] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 476.536493][ T8969] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 476.923108][ T8982] loop4: detected capacity change from 0 to 256 [ 476.933763][ T8982] exfat: Unknown parameter '' [ 477.586448][ T8966] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 477.706421][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 478.562618][ T5796] Bluetooth: hci3: command 0x0405 tx timeout [ 478.569329][ T5796] Bluetooth: hci1: command 0x0c1a tx timeout [ 478.575498][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 480.604210][ T9016] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 480.687514][ T9018] 9pnet_fd: Insufficient options for proto=fd [ 483.806806][ T9024] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 483.823745][ T9024] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 483.836719][ T9024] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 483.850406][ T9024] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 483.916907][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 484.190635][ T9038] warning: `syz.4.582' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 484.212694][ T9038] netlink: 'syz.4.582': attribute type 7 has an invalid length. [ 485.837488][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 485.916790][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 485.916804][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 487.254323][ T27] audit: type=1326 audit(1794338020.995:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.3.588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 487.280920][ T27] audit: type=1326 audit(1794338021.035:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.3.588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 487.314257][ T9069] bond_slave_0: entered promiscuous mode [ 487.320715][ T9069] bond_slave_1: entered promiscuous mode [ 487.336475][ T27] audit: type=1326 audit(1794338021.035:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.3.588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 487.366483][ T52] Bluetooth: hci3: unexpected event for opcode 0x204e [ 487.398316][ T27] audit: type=1326 audit(1794338021.035:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.3.588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 487.433387][ T27] audit: type=1326 audit(1794338021.035:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.3.588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 487.459035][ T27] audit: type=1326 audit(1794338021.035:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.3.588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 487.490152][ T9069] vlan2: entered promiscuous mode [ 487.516413][ T9069] bond0: entered promiscuous mode [ 487.832298][ T27] audit: type=1326 audit(1794338021.035:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.3.588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 487.930033][ T27] audit: type=1326 audit(1794338021.035:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.3.588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 487.955108][ T27] audit: type=1326 audit(1794338021.035:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.3.588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 488.041559][ T27] audit: type=1326 audit(1794338021.055:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9064 comm="syz.3.588" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 488.478374][ T9065] ceph: No mds server is up or the cluster is laggy [ 488.840257][ T9085] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 488.887410][ T9085] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 488.934750][ T9085] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 488.995394][ T9085] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 490.796583][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 491.116396][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 491.116419][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 491.122492][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 491.722335][ T9101] syz.4.596 uses obsolete (PF_INET,SOCK_PACKET) [ 494.109785][ T9115] loop4: detected capacity change from 0 to 1024 [ 494.331862][ T9119] loop0: detected capacity change from 0 to 1024 [ 496.412030][ T9115] hfsplus: request for non-existent node 33554434 in B*Tree [ 496.476302][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 496.506501][ T9120] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 496.568581][ T9115] hfsplus: request for non-existent node 33554434 in B*Tree [ 496.708800][ T9115] hfsplus: request for non-existent node 33554434 in B*Tree [ 496.717657][ T9115] hfsplus: request for non-existent node 33554434 in B*Tree [ 496.745511][ T9120] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 496.755870][ T9115] hfsplus: request for non-existent node 33554434 in B*Tree [ 496.883061][ T9126] hfsplus: unknown catalog record type 0 [ 496.889872][ T9126] hfsplus: unknown catalog record type 0 [ 497.369800][ T9120] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 497.375916][ T9120] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 497.383432][ T9115] hfsplus: request for non-existent node 33554434 in B*Tree [ 497.485990][ T1049] hfsplus: b-tree write err: -5, ino 3 [ 497.643557][ T9128] loop0: detected capacity change from 0 to 512 [ 497.713610][ T9128] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 497.992033][ T9128] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.603: invalid indirect mapped block 256 (level 1) [ 498.057588][ T9128] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.603: invalid indirect mapped block 2683928664 (level 1) [ 498.119127][ T9139] loop2: detected capacity change from 0 to 128 [ 498.128250][ T9128] EXT4-fs (loop0): 1 truncate cleaned up [ 498.139966][ T9128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.192201][ T9139] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 498.298469][ T9139] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 498.556391][ T5796] Bluetooth: hci1: command 0x0c1a tx timeout [ 499.143269][ T5789] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 499.229809][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.436586][ T5796] Bluetooth: hci2: command 0x0406 tx timeout [ 499.442705][ T5796] Bluetooth: hci3: command 0x0405 tx timeout [ 500.685454][ T9159] Invalid ELF header magic: != ELF [ 500.713234][ T9159] overlayfs: failed to clone lowerpath [ 501.426907][ T9164] CIFS: Attempting to mount //127.0.0.1/share [ 502.084058][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.092433][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.313578][ T9164] CIFS: VFS: Error connecting to socket. Aborting operation. [ 502.333859][ T9164] CIFS: VFS: cifs_mount failed w/return code = -4 [ 502.899745][ T9178] xfrm0: entered allmulticast mode [ 502.932320][ T9178] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 503.092085][ T9178] netlink: 596 bytes leftover after parsing attributes in process `syz.0.615'. [ 503.106637][ T1211] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 503.228290][ T9184] rxe_eth0 speed is unknown, defaulting to 1000 [ 503.638570][ T1211] usb 3-1: unable to get BOS descriptor or descriptor too short [ 505.145697][ T1211] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 505.157408][ T9178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.615'. [ 505.166252][ T1211] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.174464][ T1211] usb 3-1: Product: syz [ 505.179984][ T1211] usb 3-1: Manufacturer: syz [ 505.184651][ T1211] usb 3-1: SerialNumber: syz [ 505.233797][ T9178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'. [ 505.251033][ T9178] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.260048][ T9178] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.269010][ T9178] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.277934][ T9178] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.565869][ T1211] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 505.596745][ T1211] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 505.604351][ T1211] usb 3-1: unit 2 not found! [ 505.670263][ T1211] usb 3-1: USB disconnect, device number 7 [ 505.849515][ T9136] udevd[9136]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.598894][ T9201] hub 5-0:1.0: USB hub found [ 506.605762][ T9201] hub 5-0:1.0: 1 port detected [ 507.288385][ T8] IPVS: starting estimator thread 0... [ 507.516322][ T9203] IPVS: using max 27 ests per chain, 64800 per kthread [ 508.506748][ T9215] Invalid ELF header magic: != ELF [ 509.006001][ T9213] overlayfs: overlapping lowerdir path [ 510.950764][ T9216] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 510.996491][ T9216] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 511.006557][ T9216] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 511.013229][ T9216] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 511.082735][ T9221] loop0: detected capacity change from 0 to 2048 [ 513.258393][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 513.264521][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 513.266822][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 513.271667][ T5796] Bluetooth: hci0: command 0x0c1a tx timeout [ 514.276470][ T9221] EXT4-fs: error -4 creating inode table initialization thread [ 514.786901][ T9221] EXT4-fs (loop0): mount failed [ 520.326413][ T1211] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 520.516999][ T1211] usb 1-1: device descriptor read/64, error -71 [ 520.908797][ T1211] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 521.272336][ T1211] usb 1-1: device descriptor read/64, error -71 [ 521.429486][ T1211] usb usb1-port1: attempt power cycle [ 524.336866][ T9320] clocksource: Switched to clocksource acpi_pm [ 526.860632][ T9327] CIFS: Attempting to mount //127.0.0.1/share [ 528.290901][ T9327] CIFS: VFS: Error connecting to socket. Aborting operation. [ 528.299083][ T9327] CIFS: VFS: cifs_mount failed w/return code = -4 [ 528.702368][ T9340] virtio-fs: tag not found [ 530.992911][ T9358] loop2: detected capacity change from 0 to 2048 [ 531.049746][ T9358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.028594][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.964696][ T9420] loop2: detected capacity change from 0 to 512 [ 541.603924][ T9420] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 541.656064][ T9420] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.662: invalid indirect mapped block 256 (level 1) [ 541.749121][ T9420] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.662: invalid indirect mapped block 2683928664 (level 1) [ 541.803615][ T9420] EXT4-fs (loop2): 1 truncate cleaned up [ 541.816859][ T9420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.491974][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.965478][ T9442] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 546.460780][ T9442] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 546.468450][ T9442] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 546.487006][ T9442] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 546.715441][ T9448] loop0: detected capacity change from 0 to 1024 [ 547.825112][ T9453] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 547.855724][ T9453] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 547.875178][ T9453] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 547.881768][ T9453] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 550.394620][ T9237] Bluetooth: hci0: command 0x0c1a tx timeout [ 550.400903][ T5788] Bluetooth: hci3: command 0x0405 tx timeout [ 550.407186][ T5796] Bluetooth: hci1: command 0x0c1a tx timeout [ 550.407227][ T5796] Bluetooth: hci2: command 0x0406 tx timeout [ 550.535229][ T9470] loop2: detected capacity change from 0 to 1024 [ 551.474530][ T9470] hfsplus: request for non-existent node 33554434 in B*Tree [ 551.483036][ T9470] hfsplus: request for non-existent node 33554434 in B*Tree [ 551.499417][ T9470] hfsplus: request for non-existent node 33554434 in B*Tree [ 551.511077][ T9470] hfsplus: request for non-existent node 33554434 in B*Tree [ 551.549467][ T9470] hfsplus: request for non-existent node 33554434 in B*Tree [ 551.593568][ T9470] hfsplus: request for non-existent node 33554434 in B*Tree [ 551.984552][ T9486] loop0: detected capacity change from 0 to 128 [ 552.464964][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 552.465002][ T27] audit: type=1326 audit(1794338086.094:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.0.683" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdd2182ac9 code=0x7ffc0000 [ 552.890597][ T27] audit: type=1326 audit(1794338086.094:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.0.683" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494f1a8f19 code=0x7ffc0000 [ 552.916273][ T27] audit: type=1326 audit(1794338086.104:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.0.683" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494f1a8f19 code=0x7ffc0000 [ 552.949687][ T27] audit: type=1326 audit(1794338086.104:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.0.683" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdd2182ac9 code=0x7ffc0000 [ 552.987990][ T27] audit: type=1326 audit(1794338086.104:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.0.683" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494f1a8f19 code=0x7ffc0000 [ 553.017547][ T27] audit: type=1326 audit(1794338086.104:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.0.683" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdd2182ac9 code=0x7ffc0000 [ 553.044599][ T27] audit: type=1326 audit(1794338086.104:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.0.683" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f494f1a8f19 code=0x7ffc0000 [ 553.071800][ T27] audit: type=1326 audit(1794338086.114:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.0.683" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdd2182ac9 code=0x7ffc0000 [ 554.208761][ T27] audit: type=1326 audit(1794338086.124:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.0.683" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494f1a8f19 code=0x7ffc0000 [ 554.254333][ T27] audit: type=1326 audit(1794338086.124:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.0.683" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494f1a8f19 code=0x7ffc0000 [ 557.458963][ T9523] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9523] [ 562.371830][ T9584] loop0: detected capacity change from 0 to 128 [ 562.430820][ T9584] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 563.812340][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.824058][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.926789][ T41] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 566.064146][ T9598] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 567.547764][ T9616] fuse: Bad value for 'fd' [ 568.316909][ T1087] rpcbind: server 127.0.0.1 not responding, timed out [ 570.556057][ T5869] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 570.592526][ T41] rpcbind: server 127.0.0.1 not responding, timed out [ 570.839978][ T5869] usb 1-1: unable to get BOS descriptor or descriptor too short [ 571.019702][ T5869] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 571.029775][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.038725][ T5869] usb 1-1: Product: syz [ 571.044442][ T5869] usb 1-1: Manufacturer: syz [ 571.049708][ T5869] usb 1-1: SerialNumber: syz [ 571.732755][ T9663] overlayfs: missing 'workdir' [ 571.741058][ T9663] overlayfs: failed to clone upperpath [ 572.059201][ T9665] fuse: Bad value for 'fd' [ 572.201238][ T5869] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 572.234263][ T5869] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 572.255452][ T5869] usb 1-1: unit 2 not found! [ 572.329455][ T5869] usb 1-1: USB disconnect, device number 16 [ 573.484651][ T9670] udevd[9670]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 575.703339][ T1211] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 576.145593][ T1211] usb 1-1: unable to get BOS descriptor or descriptor too short [ 576.199074][ T1211] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 576.209315][ T1211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.221845][ T1211] usb 1-1: Product: syz [ 576.228373][ T1211] usb 1-1: Manufacturer: syz [ 576.237617][ T1211] usb 1-1: SerialNumber: syz [ 576.630732][ T1211] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 576.641717][ T1211] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 576.649318][ T1211] usb 1-1: unit 2 not found! [ 576.674263][ T1211] usb 1-1: USB disconnect, device number 17 [ 576.758591][ T9682] udevd[9682]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 579.928564][ T9737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.745'. [ 579.956242][ T9737] netlink: 'syz.0.745': attribute type 16 has an invalid length. [ 579.979086][ T9737] netlink: 'syz.0.745': attribute type 17 has an invalid length. [ 579.998689][ T9737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.025446][ T9737] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 583.942777][ T9754] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 583.949717][ T9754] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 583.956572][ T9754] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 583.963916][ T9754] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 585.636807][ T5788] Bluetooth: hci0: command 0x0c1a tx timeout [ 586.493010][ T3509] rpcbind: server 127.0.0.1 not responding, timed out [ 586.511978][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 586.519474][ T5788] Bluetooth: hci3: command 0x0405 tx timeout [ 586.525975][ T5788] Bluetooth: hci1: command 0x0c1a tx timeout [ 588.845973][ T9802] netlink: 40 bytes leftover after parsing attributes in process `syz.2.760'. [ 590.769664][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'. [ 591.028857][ T27] kauditd_printk_skb: 205 callbacks suppressed [ 591.028871][ T27] audit: type=1326 audit(1794338124.783:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.2.766" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdc8192ac9 code=0x7ffc0000 [ 591.116936][ T5168] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 591.126879][ T27] audit: type=1326 audit(1794338124.783:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.2.766" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 591.152916][ T27] audit: type=1326 audit(1794338124.783:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.2.766" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 591.177574][ T27] audit: type=1326 audit(1794338124.783:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.2.766" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 591.369530][ T27] audit: type=1326 audit(1794338124.783:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.2.766" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 591.906608][ T5168] usb 1-1: unable to get BOS descriptor or descriptor too short [ 591.929585][ T5168] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 591.965378][ T5168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.991515][ T5168] usb 1-1: Product: syz [ 591.995818][ T5168] usb 1-1: Manufacturer: syz [ 592.005887][ T5168] usb 1-1: SerialNumber: syz [ 592.315562][ T5168] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 592.333584][ T5168] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 592.342641][ T5168] usb 1-1: unit 2 not found! [ 592.746938][ T5168] usb 1-1: USB disconnect, device number 18 [ 593.039583][ T9837] udevd[9837]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 593.691526][ T27] audit: type=1326 audit(1794338127.443:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.4.772" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x0 [ 596.101817][ T27] audit: type=1326 audit(1794338129.473:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.4.776" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 596.315144][ T27] audit: type=1326 audit(1794338129.473:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.4.776" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 596.440337][ T27] audit: type=1326 audit(1794338129.473:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.4.776" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 596.535155][ T27] audit: type=1326 audit(1794338129.473:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.4.776" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 596.819607][ T3509] rpcbind: server 127.0.0.1 not responding, timed out [ 596.877620][ T27] audit: type=1326 audit(1794338129.473:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.4.776" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 597.451430][ T27] audit: type=1326 audit(1794338129.483:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.4.776" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 597.511396][ T27] audit: type=1326 audit(1794338129.483:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.4.776" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 597.591591][ T27] audit: type=1326 audit(1794338129.493:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.4.776" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 597.645636][ T27] audit: type=1326 audit(1794338129.493:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.4.776" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 597.696100][ T27] audit: type=1326 audit(1794338129.493:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9862 comm="syz.4.776" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 600.665501][ T9237] Bluetooth: hci2: unexpected cc 0x204b length: 34 > 3 [ 600.685926][ T9237] Bluetooth: hci2: unexpected event for opcode 0x204b [ 603.867264][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 603.867301][ T27] audit: type=1326 audit(1794338137.563:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.3.790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd6f7a7ac9 code=0x7ffc0000 [ 603.976667][ T9929] loop0: detected capacity change from 0 to 1024 [ 604.327479][ T27] audit: type=1326 audit(1794338137.563:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.3.790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 604.364853][ T27] audit: type=1326 audit(1794338137.563:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.3.790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 604.539633][ T27] audit: type=1326 audit(1794338137.563:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.3.790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd6f7a7ac9 code=0x7ffc0000 [ 604.653137][ T27] audit: type=1326 audit(1794338137.563:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.3.790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 604.778342][ T9237] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 604.788905][ T9237] Bluetooth: hci2: Injecting HCI hardware error event [ 604.814549][ T5788] Bluetooth: hci2: hardware error 0x00 [ 605.100259][ T27] audit: type=1326 audit(1794338137.563:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.3.790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd6f7a7ac9 code=0x7ffc0000 [ 605.173510][ T27] audit: type=1326 audit(1794338137.573:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.3.790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 605.230670][ T27] audit: type=1326 audit(1794338137.583:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.3.790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd6f7a7ac9 code=0x7ffc0000 [ 605.320875][ T27] audit: type=1326 audit(1794338137.583:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.3.790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 605.372410][ T27] audit: type=1326 audit(1794338137.583:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9925 comm="syz.3.790" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 606.128645][ T9944] loop0: detected capacity change from 0 to 2048 [ 606.186739][ T9944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.059370][ T5788] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 607.649982][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.704487][ T9972] netlink: 'syz.2.801': attribute type 18 has an invalid length. [ 608.712634][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.801'. [ 608.729226][ T9972] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.738246][ T9972] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.747241][ T9972] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.756327][ T9972] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.768045][ T9972] netlink: 'syz.2.801': attribute type 18 has an invalid length. [ 609.019317][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.801'. [ 610.380968][ T27] kauditd_printk_skb: 203 callbacks suppressed [ 610.381009][ T27] audit: type=1326 audit(1794338143.803:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9980 comm="syz.2.804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdc8192ac9 code=0x7ffc0000 [ 610.969083][ T27] audit: type=1326 audit(1794338143.803:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9980 comm="syz.2.804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 611.035677][ T27] audit: type=1326 audit(1794338143.803:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9980 comm="syz.2.804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 611.072248][ T27] audit: type=1326 audit(1794338143.803:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9980 comm="syz.2.804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdc8192ac9 code=0x7ffc0000 [ 611.101350][ T27] audit: type=1326 audit(1794338143.803:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9980 comm="syz.2.804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 611.135358][ T27] audit: type=1326 audit(1794338143.803:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9980 comm="syz.2.804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdc8192ac9 code=0x7ffc0000 [ 611.260400][ T27] audit: type=1326 audit(1794338143.803:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9980 comm="syz.2.804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 611.290251][ T27] audit: type=1326 audit(1794338143.813:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9980 comm="syz.2.804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdc8192ac9 code=0x7ffc0000 [ 611.315490][ T27] audit: type=1326 audit(1794338143.823:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9980 comm="syz.2.804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 611.342329][ T27] audit: type=1326 audit(1794338143.823:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9980 comm="syz.2.804" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 611.702159][ T9996] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5797] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[9996] [ 615.037556][T10023] netlink: 40 bytes leftover after parsing attributes in process `syz.3.812'. [ 615.460340][T10024] ip_tables: iptables: counters copy to user failed while replacing table [ 616.503141][T10011] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 616.509414][T10011] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 616.515914][ T9237] Bluetooth: hci0: command 0x0c1a tx timeout [ 616.571119][T10011] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 618.135724][T10037] netlink: 64 bytes leftover after parsing attributes in process `syz.0.814'. [ 618.300052][T10039] ip_tables: iptables: counters copy to user failed while replacing table [ 618.337611][T10037] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 618.353073][T10037] ip6gretap1: entered allmulticast mode [ 618.378335][T10037] batman_adv: batadv0: Adding interface: ip6gretap1 [ 618.385607][T10037] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.412117][T10037] batman_adv: batadv0: Interface activated: ip6gretap1 [ 618.420133][T10037] batadv0: mtu less than device minimum [ 618.428626][T10037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.441319][T10037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.453989][T10037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.466860][T10037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.479674][T10037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.492346][T10037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.505109][T10037] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 618.749534][ T9237] Bluetooth: hci1: command 0x0c1a tx timeout [ 618.755711][ T9237] Bluetooth: hci3: command 0x0405 tx timeout [ 619.523686][T10050] loop0: detected capacity change from 0 to 2048 [ 619.546864][T10050] UDF-fs: bad mount option "fscontext=root" or missing value [ 619.960286][ T27] kauditd_printk_skb: 197 callbacks suppressed [ 619.960302][ T27] audit: type=1326 audit(1794338153.113:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10040 comm="syz.3.819" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffd6f7a7ac9 code=0x0 [ 620.077952][T10048] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5786] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10048] [ 620.945462][T10056] loop0: detected capacity change from 0 to 4096 [ 620.997229][T10056] ntfs3: loop0: ino=3, mi_enum_attr [ 623.351904][T10055] ntfs3: loop0: ino=9, attr_set_size [ 625.353202][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.359739][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.281442][T10066] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 627.173485][T10089] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5789] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10089] [ 627.179398][ T27] audit: type=1326 audit(1794338160.693:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10084 comm="syz.4.830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 627.214593][T10066] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 627.225725][T10066] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 627.233056][ T27] audit: type=1326 audit(1794338160.693:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10084 comm="syz.4.830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 627.267285][ T27] audit: type=1326 audit(1794338160.693:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10084 comm="syz.4.830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 627.311061][ T27] audit: type=1326 audit(1794338160.693:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10084 comm="syz.4.830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 627.398402][ T27] audit: type=1326 audit(1794338160.693:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10084 comm="syz.4.830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 627.432758][ T27] audit: type=1326 audit(1794338160.693:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10084 comm="syz.4.830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 627.463821][ T27] audit: type=1326 audit(1794338160.693:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10084 comm="syz.4.830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 627.537144][ T27] audit: type=1326 audit(1794338160.713:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10084 comm="syz.4.830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 627.569485][ T27] audit: type=1326 audit(1794338160.713:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10084 comm="syz.4.830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 627.598400][ T27] audit: type=1326 audit(1794338160.713:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10084 comm="syz.4.830" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 628.356540][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 629.331216][ T5794] Bluetooth: hci3: command 0x0405 tx timeout [ 629.337392][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 631.415486][T10140] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5789] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10140] [ 637.205294][T10193] netlink: 40 bytes leftover after parsing attributes in process `syz.0.851'. [ 640.270593][ T27] kauditd_printk_skb: 141 callbacks suppressed [ 640.270612][ T27] audit: type=1326 audit(1794338173.242:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10198 comm="syz.2.855" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffdc8192ac9 code=0x0 [ 640.804763][ T5794] Bluetooth: hci3: unexpected event 0x01 length: 16 > 1 [ 642.318595][T10230] netlink: 32 bytes leftover after parsing attributes in process `syz.4.861'. [ 642.887655][T10245] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5786] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[10245] [ 643.727523][T10259] netlink: 'syz.0.865': attribute type 18 has an invalid length. [ 643.735550][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 643.747062][T10259] netlink: 'syz.0.865': attribute type 18 has an invalid length. [ 643.755042][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 644.504562][ T27] audit: type=1326 audit(1794338177.582:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.2.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdc8192ac9 code=0x7ffc0000 [ 644.628954][ T27] audit: type=1326 audit(1794338177.582:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.2.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 644.993781][ T27] audit: type=1326 audit(1794338177.582:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.2.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdc8192ac9 code=0x7ffc0000 [ 645.025090][ T27] audit: type=1326 audit(1794338177.582:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.2.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 645.075665][ T27] audit: type=1326 audit(1794338177.582:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.2.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdc8192ac9 code=0x7ffc0000 [ 645.108965][ T27] audit: type=1326 audit(1794338177.592:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.2.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 645.133437][ T27] audit: type=1326 audit(1794338177.592:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.2.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdc8192ac9 code=0x7ffc0000 [ 645.192107][ T27] audit: type=1326 audit(1794338177.592:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.2.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdc8192ac9 code=0x7ffc0000 [ 645.257711][ T27] audit: type=1326 audit(1794338177.592:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.2.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 647.123851][ T27] audit: type=1326 audit(1794338177.592:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.2.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdc8192ac9 code=0x7ffc0000 [ 647.148921][ T27] audit: type=1326 audit(1794338177.592:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.2.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 647.176354][ T27] audit: type=1326 audit(1794338177.592:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.2.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdc8192ac9 code=0x7ffc0000 [ 647.220233][ T27] audit: type=1326 audit(1794338177.592:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.2.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 647.521648][ T27] audit: type=1326 audit(1794338177.602:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.2.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdc8192ac9 code=0x7ffc0000 [ 647.975101][T10286] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 648.118992][T10287] netlink: 64 bytes leftover after parsing attributes in process `syz.4.870'. [ 648.182121][T10287] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 648.192592][T10287] ip6gretap1: entered allmulticast mode [ 648.200214][T10287] batman_adv: batadv0: Adding interface: ip6gretap1 [ 648.206922][T10287] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.233081][T10287] batman_adv: batadv0: Interface activated: ip6gretap1 [ 648.737518][ T27] audit: type=1326 audit(1794338177.602:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.2.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 648.804064][ T27] audit: type=1326 audit(1794338177.602:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.2.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdc8192ac9 code=0x7ffc0000 [ 648.841685][ T27] audit: type=1326 audit(1794338177.602:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.2.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 649.013373][ T27] audit: type=1326 audit(1794338177.602:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.2.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdc8192ac9 code=0x7ffc0000 [ 649.080671][ T27] audit: type=1326 audit(1794338177.602:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10250 comm="syz.2.864" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9b25aa787 code=0x7ffc0000 [ 649.796649][T10307] netlink: 40 bytes leftover after parsing attributes in process `syz.4.872'. [ 650.486009][T10310] overlayfs: failed to clone upperpath [ 650.759272][T10318] netlink: 'syz.3.877': attribute type 18 has an invalid length. [ 650.767269][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.877'. [ 650.802138][T10318] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.811690][T10318] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.820626][T10318] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.829541][T10318] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 650.845577][T10318] netlink: 'syz.3.877': attribute type 18 has an invalid length. [ 650.876136][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.877'. [ 653.544277][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 653.544295][ T27] audit: type=1326 audit(1794338187.152:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10321 comm="syz.4.879" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x0 [ 653.973875][T10334] overlayfs: missing 'lowerdir' [ 657.218677][T10361] netlink: 40 bytes leftover after parsing attributes in process `syz.4.886'. [ 669.853006][ T27] audit: type=1326 audit(1794338203.072:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.3.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd6f7a7ac9 code=0x7ffc0000 [ 670.213239][ T27] audit: type=1326 audit(1794338203.072:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.3.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 670.241287][ T27] audit: type=1326 audit(1794338203.072:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.3.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd6f7a7ac9 code=0x7ffc0000 [ 670.304423][ T27] audit: type=1326 audit(1794338203.072:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.3.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 670.329803][ T27] audit: type=1326 audit(1794338203.072:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.3.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd6f7a7ac9 code=0x7ffc0000 [ 670.409821][T10455] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 670.412477][ T27] audit: type=1326 audit(1794338203.072:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.3.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 670.443302][T10455] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 670.460580][ T27] audit: type=1326 audit(1794338203.082:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.3.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd6f7a7ac9 code=0x7ffc0000 [ 670.468295][T10455] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 670.485664][ T27] audit: type=1326 audit(1794338203.082:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.3.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd6f7a7ac9 code=0x7ffc0000 [ 670.517401][ T27] audit: type=1326 audit(1794338203.082:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.3.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 670.542302][ T27] audit: type=1326 audit(1794338203.082:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.3.912" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd6f7a7ac9 code=0x7ffc0000 [ 670.594785][T10465] autofs4:pid:10465:autofs_fill_super: called with bogus options [ 671.873476][T10482] netlink: 40 bytes leftover after parsing attributes in process `syz.4.920'. [ 671.966096][ T790] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 672.912065][T10488] netlink: 20 bytes leftover after parsing attributes in process `syz.3.922'. [ 672.975944][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 672.982123][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 672.988651][ T9237] Bluetooth: hci3: command 0x0405 tx timeout [ 673.047489][ T790] usb 1-1: unable to get BOS descriptor or descriptor too short [ 673.069655][ T790] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 673.086961][ T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.105447][ T790] usb 1-1: Product: syz [ 673.109811][ T790] usb 1-1: Manufacturer: syz [ 673.114470][ T790] usb 1-1: SerialNumber: syz [ 673.515894][ T790] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 673.542462][ T790] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 673.579180][ T790] usb 1-1: unit 2 not found! [ 673.988453][ T790] usb 1-1: USB disconnect, device number 19 [ 674.327092][T10471] udevd[10471]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 676.968764][T10514] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 676.989746][T10514] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 677.100793][T10514] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 677.141179][T10526] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.930'. [ 678.166825][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 679.085332][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 679.105321][ T5794] Bluetooth: hci3: command 0x0405 tx timeout [ 679.465700][T10548] netlink: 'syz.2.935': attribute type 2 has an invalid length. [ 682.063702][T10569] net_ratelimit: 12 callbacks suppressed [ 682.063774][T10569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 684.060009][ T27] kauditd_printk_skb: 40 callbacks suppressed [ 684.060045][ T27] audit: type=1326 audit(1794338217.742:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10589 comm="syz.4.946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 684.307275][ T27] audit: type=1326 audit(1794338217.742:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10589 comm="syz.4.946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 684.487674][ T27] audit: type=1326 audit(1794338217.752:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10589 comm="syz.4.946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 684.802646][ T27] audit: type=1326 audit(1794338217.752:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10589 comm="syz.4.946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 685.596614][ T27] audit: type=1326 audit(1794338217.752:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10589 comm="syz.4.946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 685.621885][ T27] audit: type=1326 audit(1794338217.752:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10589 comm="syz.4.946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 685.823164][ T27] audit: type=1326 audit(1794338217.752:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10589 comm="syz.4.946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 686.045309][ T27] audit: type=1326 audit(1794338217.752:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10589 comm="syz.4.946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 686.070162][ T27] audit: type=1326 audit(1794338217.752:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10589 comm="syz.4.946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 686.094833][ T27] audit: type=1326 audit(1794338217.752:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10589 comm="syz.4.946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 686.315954][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.323023][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.823645][T10642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 691.079577][T10656] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 691.945115][T10665] vivid-000: disconnect [ 691.970385][T10665] vivid-000: reconnect [ 693.040853][T10677] bridge0: port 3(syz_tun) entered blocking state [ 693.048419][T10677] bridge0: port 3(syz_tun) entered disabled state [ 693.060394][T10677] syz_tun: entered allmulticast mode [ 693.078561][T10677] syz_tun: entered promiscuous mode [ 693.098445][T10677] bridge0: port 3(syz_tun) entered blocking state [ 693.106938][T10677] bridge0: port 3(syz_tun) entered forwarding state [ 693.117220][T10678] bridge0: port 4(ip6gretap0) entered blocking state [ 693.124355][T10678] bridge0: port 4(ip6gretap0) entered disabled state [ 693.131340][T10678] ip6gretap0: entered allmulticast mode [ 693.139440][T10678] ip6gretap0: entered promiscuous mode [ 693.146000][T10678] bridge0: port 4(ip6gretap0) entered blocking state [ 693.152854][T10678] bridge0: port 4(ip6gretap0) entered forwarding state [ 697.154295][T10714] tmpfs: Bad value for 'mpol' [ 698.033921][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.977'. [ 698.363273][T10726] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.980'. [ 701.341823][T10747] Process accounting resumed [ 704.699390][T10772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.993'. [ 706.569833][T10788] trusted_key: encrypted_key: insufficient parameters specified [ 707.213689][T10797] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 708.553243][T10807] tipc: Started in network mode [ 708.558161][T10807] tipc: Node identity 0010000000000000002, cluster identity 1 [ 708.833267][T10807] Invalid ELF header magic: != ELF [ 709.284182][T10807] overlayfs: failed to clone lowerpath [ 709.974763][T10810] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 709.995605][T10810] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 710.001847][T10810] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 711.836722][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 712.068236][ T5794] Bluetooth: hci3: command 0x0405 tx timeout [ 712.068254][ T5788] Bluetooth: hci1: command 0x0c1a tx timeout [ 714.540371][T10867] netlink: 'syz.0.1014': attribute type 2 has an invalid length. [ 714.929939][ T5794] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 714.955304][T10877] netlink: 'syz.0.1018': attribute type 2 has an invalid length. [ 715.797218][T10888] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 715.797218][T10888] [ 715.811422][T10888] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 715.824420][T10888] CIFS: Attempting to mount //127.0.0.1/share [ 716.627487][T10888] CIFS: VFS: cifs_mount failed w/return code = -112 [ 718.073584][T10917] netlink: 'syz.2.1028': attribute type 2 has an invalid length. [ 722.294435][T10948] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 723.286710][T10958] tipc: Started in network mode [ 723.291709][T10958] tipc: Node identity 7f000001, cluster identity 4711 [ 723.298979][T10958] tipc: New replicast peer: 127.0.0.1 [ 723.305440][T10958] tipc: Enabled bearer , priority 10 [ 724.362297][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 724.376918][T10952] bridge_slave_1: left allmulticast mode [ 724.387636][T10952] bridge_slave_1: left promiscuous mode [ 724.404212][T10952] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.432709][T10952] bridge_slave_0: left allmulticast mode [ 724.458626][T10952] bridge_slave_0: left promiscuous mode [ 724.470496][T10952] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.632077][ T42] tipc: Node number set to 2130706433 [ 728.581834][ T5794] Bluetooth: hci0: unexpected event for opcode 0x2040 [ 735.012962][ T5794] Bluetooth: hci1: unexpected event for opcode 0x2040 [ 735.132219][ T5794] Bluetooth: hci3: unexpected event for opcode 0x2040 [ 736.182769][T11083] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1072'. [ 736.369350][T11085] zram0: detected capacity change from 0 to 8 [ 738.585579][T11107] netlink: 'syz.2.1079': attribute type 3 has an invalid length. [ 739.349025][T11106] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 739.656795][T11106] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 740.129175][T11106] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 740.510967][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 741.236688][T11125] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 742.582735][ T5788] Bluetooth: hci3: command 0x0405 tx timeout [ 742.588874][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 742.725346][T11134] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 742.772201][T11134] i2c-slave-eeprom: probe of 0-1022 failed with error -95 [ 742.806038][T11134] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 744.419586][T11143] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 744.425723][T11143] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 744.432049][T11143] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 745.039155][T11165] xt_l2tp: invalid flags combination: 8 [ 745.177529][ T5794] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 745.430458][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 746.520569][ T5788] Bluetooth: hci3: command 0x0405 tx timeout [ 747.423833][ T27] kauditd_printk_skb: 40 callbacks suppressed [ 747.423850][ T27] audit: type=1800 audit(1794338281.191:1190): pid=11191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1093" name="no_out_endpoint" dev="configfs" ino=21682 res=0 errno=0 [ 748.173719][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.181566][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.413617][T11202] tipc: Started in network mode [ 748.550402][ T5788] Bluetooth: hci3: command 0x0405 tx timeout [ 748.581000][T11202] tipc: Node identity 7f000001, cluster identity 4711 [ 748.596607][T11202] tipc: Enabling of bearer rejected, failed to enable media [ 749.122518][T11202] tipc: Enabling of bearer rejected, failed to enable media [ 749.403527][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1102'. [ 764.363194][T11352] xt_policy: output policy not valid in PREROUTING and INPUT [ 764.378644][T11352] netlink: 'syz.4.1138': attribute type 4 has an invalid length. [ 767.686784][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1139'. [ 768.825790][T11365] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 768.850735][T11365] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 768.862560][T11365] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 770.318417][T11409] overlayfs: failed to clone upperpath [ 770.909249][ T5788] Bluetooth: hci1: command 0x0c1a tx timeout [ 771.080044][ T5788] Bluetooth: hci3: command 0x0405 tx timeout [ 772.138952][T11398] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 772.385830][T11398] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 772.392131][T11398] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 772.948745][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 774.258549][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 774.458567][ T5794] Bluetooth: hci3: command 0x0405 tx timeout [ 775.136860][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1160'. [ 775.312132][T11444] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 775.357700][T11444] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 775.369354][T11444] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 776.823758][T11475] netlink: 'syz.4.1162': attribute type 4 has an invalid length. [ 776.831763][T11475] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1162'. [ 777.248261][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 777.429967][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 777.436665][ T5788] Bluetooth: hci3: command 0x0405 tx timeout [ 779.073692][T11490] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 779.088974][T11490] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 779.097145][T11490] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 780.858104][ T5788] Bluetooth: hci0: command 0x0c1a tx timeout [ 781.097981][ T5788] Bluetooth: hci3: command 0x0405 tx timeout [ 781.104328][ T5788] Bluetooth: hci1: command 0x0c1a tx timeout [ 781.944219][T11533] SET target dimension over the limit! [ 786.888972][T11572] ptrace attach of ""[11573] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[11572] [ 788.108635][T11581] tipc: New replicast peer: 127.0.0.1 [ 788.118648][T11581] tipc: Enabled bearer , priority 10 [ 788.148657][T11585] futex_wake_op: syz.4.1191 tries to shift op by 144; fix this program [ 788.874764][T11585] rxe_eth0 speed is unknown, defaulting to 1000 [ 789.236537][ T5879] tipc: Node number set to 2130706433 [ 790.110573][ T5872] logitech-hidpp-device 0005:046D:B012.0001: item fetching failed at offset 3/4 [ 790.121248][ T5872] logitech-hidpp-device 0005:046D:B012.0001: hidpp_probe:parse failed [ 790.130281][ T5872] logitech-hidpp-device: probe of 0005:046D:B012.0001 failed with error -22 [ 792.896375][T11629] netlink: 'syz.3.1204': attribute type 2 has an invalid length. [ 794.414610][T11623] netlink: 'syz.4.1201': attribute type 9 has an invalid length. [ 795.719488][T11648] SET target dimension over the limit! [ 797.490847][ T27] audit: type=1326 audit(1794338331.260:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.0.1215" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdd2182ac9 code=0x7ffc0000 [ 797.648204][ T27] audit: type=1326 audit(1794338331.260:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.0.1215" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494f1a8f19 code=0x7ffc0000 [ 797.761727][T11678] netlink: 'syz.3.1213': attribute type 4 has an invalid length. [ 797.769766][T11678] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1213'. [ 798.265893][ T27] audit: type=1326 audit(1794338331.290:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.0.1215" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494f1a8f19 code=0x7ffc0000 [ 798.325943][ T27] audit: type=1326 audit(1794338331.290:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.0.1215" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdd2182ac9 code=0x7ffc0000 [ 798.352366][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1216'. [ 798.355421][ T27] audit: type=1326 audit(1794338331.290:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.0.1215" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494f1a8f19 code=0x7ffc0000 [ 798.389804][ T27] audit: type=1326 audit(1794338331.290:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.0.1215" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdd2182ac9 code=0x7ffc0000 [ 798.400243][T11681] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 798.414873][ T27] audit: type=1326 audit(1794338331.290:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.0.1215" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f494f1a8f19 code=0x7ffc0000 [ 798.457367][ T27] audit: type=1326 audit(1794338331.290:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.0.1215" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdd2182ac9 code=0x7ffc0000 [ 798.491310][ T27] audit: type=1326 audit(1794338331.290:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.0.1215" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494f1a8f19 code=0x7ffc0000 [ 798.530332][ T27] audit: type=1326 audit(1794338331.290:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.0.1215" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f494f1a8f19 code=0x7ffc0000 [ 799.394019][T11687] ucma_write: process 1139 (syz.0.1218) changed security contexts after opening file descriptor, this is not allowed. [ 801.690203][T11705] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 801.828590][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1224'. [ 801.963432][T11712] rxe_eth0 speed is unknown, defaulting to 1000 [ 802.185417][T11713] rxe_eth0 speed is unknown, defaulting to 1000 [ 802.673133][T11717] Cannot find add_set index 0 as target [ 802.860953][T11723] TCP: TCP_TX_DELAY enabled [ 803.776374][ T5794] Bluetooth: hci3: command 0x0405 tx timeout [ 806.152657][T11743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1228'. [ 806.163919][T11743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1228'. [ 806.991073][T11755] netlink: 'syz.2.1232': attribute type 2 has an invalid length. [ 807.493773][T11760] ip_tables: iptables: counters copy to user failed while replacing table [ 808.155152][T11767] netlink: 'syz.4.1243': attribute type 2 has an invalid length. [ 809.182523][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.237411][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.257772][ T27] kauditd_printk_skb: 141 callbacks suppressed [ 809.257791][ T27] audit: type=1326 audit(1794338342.800:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11771 comm="syz.3.1235" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd6f7a7ac9 code=0x7ffc0000 [ 809.339260][ T27] audit: type=1326 audit(1794338342.800:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11771 comm="syz.3.1235" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 809.364826][ T27] audit: type=1326 audit(1794338342.800:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11771 comm="syz.3.1235" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 809.547947][ T27] audit: type=1326 audit(1794338342.800:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11771 comm="syz.3.1235" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd6f7a7ac9 code=0x7ffc0000 [ 809.607184][ T27] audit: type=1326 audit(1794338342.800:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11771 comm="syz.3.1235" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 809.633186][ T27] audit: type=1326 audit(1794338342.800:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11771 comm="syz.3.1235" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd6f7a7ac9 code=0x7ffc0000 [ 809.662183][ T27] audit: type=1326 audit(1794338342.800:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11771 comm="syz.3.1235" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 809.702597][ T27] audit: type=1326 audit(1794338342.800:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11771 comm="syz.3.1235" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac693a8f19 code=0x7ffc0000 [ 811.598880][ T27] audit: type=1326 audit(1794338342.800:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11771 comm="syz.3.1235" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd6f7a7ac9 code=0x7ffc0000 [ 811.675061][ T27] audit: type=1326 audit(1794338342.800:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11771 comm="syz.3.1235" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd6f7a7ac9 code=0x7ffc0000 [ 815.797631][T11813] FAULT_INJECTION: forcing a failure. [ 815.797631][T11813] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 815.811059][T11813] CPU: 0 PID: 11813 Comm: syz.0.1252 Not tainted syzkaller #0 [ 815.818549][T11813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 815.828617][T11813] Call Trace: [ 815.831985][T11813] [ 815.834984][T11813] dump_stack_lvl+0x18c/0x250 [ 815.839815][T11813] ? show_regs_print_info+0x20/0x20 [ 815.845089][T11813] ? load_image+0x420/0x420 [ 815.849635][T11813] ? __might_fault+0xaa/0x120 [ 815.854370][T11813] ? __lock_acquire+0x7eb0/0x7eb0 [ 815.859441][T11813] should_fail_ex+0x394/0x4c0 [ 815.864172][T11813] _copy_to_user+0x2f/0xa0 [ 815.868632][T11813] put_timespec64+0xc9/0x130 [ 815.873260][T11813] ? get_timespec64+0x1b0/0x1b0 [ 815.878142][T11813] __x64_sys_clock_gettime+0x21e/0x280 [ 815.883616][T11813] ? lock_chain_count+0x20/0x20 [ 815.888484][T11813] ? __ia32_sys_clock_settime+0x2a0/0x2a0 [ 815.894227][T11813] ? lockdep_hardirqs_on+0x98/0x150 [ 815.899537][T11813] do_syscall_64+0x55/0xb0 [ 815.903980][T11813] ? clear_bhb_loop+0x40/0x90 [ 815.908776][T11813] ? clear_bhb_loop+0x40/0x90 [ 815.913480][T11813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 815.919410][T11813] RIP: 0033:0x7ffdd2182ac9 [ 815.923913][T11813] Code: 48 8b 41 08 48 89 46 08 44 8b 05 d2 b5 ff ff 31 c0 41 39 f8 74 a3 eb c6 31 d2 e9 5d ff ff ff a8 10 75 09 b8 e4 00 00 00 0f 05 8d 4c 8d 35 9e b6 ff ff e9 a2 fe ff ff 48 8d 05 a2 e5 ff ff 48 [ 815.943598][T11813] RSP: 002b:00007f4950105ff0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e4 [ 815.952061][T11813] RAX: ffffffffffffffda RBX: 00007ffdd217e0b0 RCX: 00007ffdd2182ac9 [ 815.960067][T11813] RDX: 00007f494f2bf400 RSI: 00007f4950106080 RDI: 0000000000000001 [ 815.968064][T11813] RBP: 00007f4950106030 R08: 0000000000000000 R09: 0000000000000000 [ 815.976062][T11813] R10: 0000000000000001 R11: 0000000000000293 R12: 0000000000000010 [ 815.984060][T11813] R13: 00007f494f426218 R14: 00007ffdd217e080 R15: 00000000000275f6 [ 815.992076][T11813] [ 816.299789][T11822] netlink: 'syz.4.1249': attribute type 2 has an invalid length. [ 816.795650][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1248'. [ 823.161875][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 823.175440][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 823.187018][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 823.196507][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 823.204435][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 823.217637][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 823.370219][T11875] rxe_eth0 speed is unknown, defaulting to 1000 [ 823.918412][T11875] chnl_net:caif_netlink_parms(): no params data found [ 824.947895][T11875] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.996209][T11891] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 825.005746][T11891] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 825.015632][T11891] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 825.034996][T11891] syz.2.1263 (11891) used greatest stack depth: 16664 bytes left [ 825.055641][ T27] kauditd_printk_skb: 53 callbacks suppressed [ 825.055658][ T27] audit: type=1800 audit(1794338358.760:1405): pid=11891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1263" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 825.083117][T11875] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.137522][T11875] bridge_slave_0: entered allmulticast mode [ 825.176970][T11875] bridge_slave_0: entered promiscuous mode [ 825.204226][T11875] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.222805][ T5794] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 825.241841][T11875] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.274717][ T5794] Bluetooth: hci0: command tx timeout [ 825.287059][T11875] bridge_slave_1: entered allmulticast mode [ 825.295030][T11875] bridge_slave_1: entered promiscuous mode [ 825.374551][T11875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.409487][T11875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.557215][T11875] team0: Port device team_slave_0 added [ 825.594506][T11875] team0: Port device team_slave_1 added [ 825.740860][T11875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.966827][T11875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 825.999040][T11875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.454123][T11875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.608827][T11875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 826.694308][T11875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.341529][ T5794] Bluetooth: hci0: command tx timeout [ 827.652936][T11875] hsr_slave_0: entered promiscuous mode [ 828.464609][ T5794] Bluetooth: hci1: unexpected cc 0x204b length: 34 > 3 [ 828.474611][ T5794] Bluetooth: hci1: unexpected event for opcode 0x204b [ 828.482220][T11875] hsr_slave_1: entered promiscuous mode [ 828.496261][T11875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 828.504600][T11875] Cannot create hsr debugfs directory [ 829.503021][ T5794] Bluetooth: hci0: command tx timeout [ 830.737832][T11943] sctp: failed to load transform for md5: -2 [ 830.929482][T11961] futex_wake_op: syz.3.1279 tries to shift op by 144; fix this program [ 831.814217][ T5794] Bluetooth: hci0: command tx timeout [ 831.829312][T11875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.864459][T11875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.929504][T11961] rxe_eth0 speed is unknown, defaulting to 1000 [ 832.205676][ T5794] Bluetooth: hci1: unexpected event 0x04 length: 12 > 10 [ 832.205800][ T5794] Bluetooth: unknown link type 255 [ 832.246884][ T5794] Bluetooth: hci1: connection err: -111 [ 832.537726][ T5794] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 832.550962][ T5794] Bluetooth: hci1: Injecting HCI hardware error event [ 832.569819][ T5794] Bluetooth: hci1: hardware error 0x00 [ 832.610026][T11875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 832.713975][T11875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.943997][T11875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 832.963689][T11875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.101909][T11875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.122660][T11875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.349782][T11875] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 833.376804][T11875] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 833.469449][T11984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1284'. [ 833.481451][T11984] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1284'. [ 833.493754][T11984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1284'. [ 833.710659][T11875] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 833.918057][T11875] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 835.274622][ T5794] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 835.319366][T11875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.384690][T11875] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.407463][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.414913][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.581344][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.588695][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.867544][T11875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 837.147164][T12010] xt_SECMARK: invalid mode: 2 [ 837.666122][T11875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.887384][T11875] veth0_vlan: entered promiscuous mode [ 837.921978][T11875] veth1_vlan: entered promiscuous mode [ 838.130893][T11875] veth0_macvtap: entered promiscuous mode [ 838.159897][T11875] veth1_macvtap: entered promiscuous mode [ 838.231012][T11875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.258340][T11875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.271124][T11875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.287134][T11875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.300593][T11875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.394333][T11875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.410781][T11875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.421863][T11875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.413459][T11875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.490690][T11875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.509711][T11875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.525430][T11875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.540178][T11875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.577674][T11875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.591015][T11875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.601023][T11875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.611737][T11875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.623665][T11875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 839.635197][T11875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.644110][T11875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.652911][T11875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.672315][T11875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.866199][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.890916][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.980399][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.026597][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.751846][T12043] netlink: 'syz.0.1256': attribute type 2 has an invalid length. [ 842.374064][T12056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1300'. [ 846.152695][T12096] tc_dump_action: action bad kind [ 846.174874][T12094] rnbd_client L602: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0) [ 846.297510][T12104] netlink: 'syz.2.1311': attribute type 2 has an invalid length. [ 846.346222][ T41] rtrs_client L1788: : Resolving route failed, err: -19 [ 846.512902][T12094] rtrs_client L2626: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 849.392333][T12132] block device autoloading is deprecated and will be removed. [ 850.107898][T12143] rxe_eth0 speed is unknown, defaulting to 1000 [ 850.399063][T12142] rxe_eth0 speed is unknown, defaulting to 1000 [ 856.863639][ T5869] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 857.252549][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 857.275336][ T5869] usb 1-1: config 1 has an invalid descriptor of length 216, skipping remainder of the config [ 857.630488][T12207] xt_SECMARK: invalid mode: 2 [ 858.200181][ T5869] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 858.477288][ T5869] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 858.495925][ T5869] usb 1-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40 [ 858.505593][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.514346][ T5869] usb 1-1: Product: syz [ 858.518635][ T5869] usb 1-1: Manufacturer: syz [ 858.524408][ T5869] usb 1-1: SerialNumber: syz [ 859.560760][T12219] xt_SECMARK: invalid mode: 2 [ 860.001065][ T5869] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 860.154051][ T5869] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 860.430819][ T5869] usb 1-1: USB disconnect, device number 20 [ 863.072185][T12250] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 863.078326][T12250] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 863.084931][T12250] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 863.120111][T12250] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 864.362154][ T5794] Bluetooth: hci3: command 0x0405 tx timeout [ 865.095081][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 866.381333][T12292] xt_SECMARK: invalid mode: 2 [ 866.816901][T12295] netlink: 'syz.0.1353': attribute type 2 has an invalid length. [ 867.172097][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 870.066712][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 870.618552][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.632899][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.131581][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 872.585692][T12353] netlink: 'syz.3.1370': attribute type 2 has an invalid length. [ 876.863979][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1373'. [ 877.137645][T12377] null_blk: disk nullb1 created [ 877.915420][T12399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1376'. [ 882.363785][T12438] Malformed UNC in devname [ 882.363785][T12438] [ 882.370956][T12438] CIFS: VFS: Malformed UNC in devname [ 884.611288][T12466] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1394'. [ 884.651501][T12466] eql: entered promiscuous mode [ 885.055249][T12473] Bluetooth: MGMT ver 1.22 [ 885.982117][T12489] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1399'. [ 887.096082][T12499] futex_wake_op: syz.2.1400 tries to shift op by 144; fix this program [ 887.276152][T12499] rxe_eth0 speed is unknown, defaulting to 1000 [ 887.905119][ T5794] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 887.915172][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 888.162650][T12497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1402'. [ 889.144178][T12509] block device autoloading is deprecated and will be removed. [ 889.257386][T12509] md: invalid raid superblock magic on ram4 [ 889.290545][T12509] md: ram4 does not have a valid v0.0 superblock, not importing! [ 889.317843][T12509] md: md_import_device returned -22 [ 889.344062][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1402'. [ 890.593456][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ca84400: rx timeout, send abort [ 891.610407][T12536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1409'. [ 891.622415][T12536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1409'. [ 891.631781][T12536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1409'. [ 892.496654][T12539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1411'. [ 893.431727][T12551] ip_tables: iptables: counters copy to user failed while replacing table [ 902.285754][T12615] ip_tables: iptables: counters copy to user failed while replacing table [ 903.432769][T12629] md: could not open device unknown-block(1,0). [ 903.445567][T12629] md: error, md_import_device() returned -16 [ 905.618153][T12659] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 907.007119][T12657] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 907.015189][T12657] overlayfs: failed to set xattr on upper [ 907.023353][T12657] overlayfs: ...falling back to redirect_dir=nofollow. [ 908.272371][T12657] overlayfs: ...falling back to index=off. [ 908.301266][T12657] overlayfs: ...falling back to uuid=null. [ 910.404036][T12708] overlayfs: missing 'lowerdir' [ 910.773878][ T27] audit: type=1326 audit(1794338450.529:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12707 comm="syz.4.1453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 910.850133][ T27] audit: type=1326 audit(1794338450.579:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12707 comm="syz.4.1453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 911.578814][ T27] audit: type=1326 audit(1794338450.799:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12707 comm="syz.4.1453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 911.638862][ T27] audit: type=1326 audit(1794338450.799:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12707 comm="syz.4.1453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 911.666084][ T27] audit: type=1326 audit(1794338450.799:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12707 comm="syz.4.1453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 911.690541][ T27] audit: type=1326 audit(1794338450.799:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12707 comm="syz.4.1453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 911.732900][ T27] audit: type=1326 audit(1794338450.799:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12707 comm="syz.4.1453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 911.826614][ T27] audit: type=1326 audit(1794338450.799:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12707 comm="syz.4.1453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 911.851640][ T27] audit: type=1326 audit(1794338451.389:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12707 comm="syz.4.1453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 911.943446][ T27] audit: type=1326 audit(1794338451.389:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12707 comm="syz.4.1453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 912.001241][T12710] 8021q: adding VLAN 0 to HW filter on device bond1 [ 912.029185][T12712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1453'. [ 912.039365][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1453'. [ 912.149176][T12712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.168144][T12712] bond1: (slave bond0): making interface the new active one [ 912.184939][T12712] bond1: (slave bond0): Enslaving as an active interface with an up link [ 912.350056][T12736] rxe_eth0 speed is unknown, defaulting to 1000 [ 915.521061][T12760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1465'. [ 916.994671][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1465'. [ 917.443065][T12779] overlayfs: missing 'workdir' [ 918.202818][T12789] netlink: 'syz.2.1474': attribute type 2 has an invalid length. [ 920.930109][T12825] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6770] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[12825] [ 922.253737][T12842] xt_l2tp: invalid flags combination: 8 [ 922.262502][ T5788] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 923.385579][T12852] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1487'. [ 924.049591][T12854] ±ÿ)”ëfl: entered allmulticast mode [ 924.915119][T12853] ±ÿ)”ëfl: left allmulticast mode [ 928.806294][T12884] eql: remember to turn off Van-Jacobson compression on your slave devices [ 928.815488][T12884] eql: left promiscuous mode [ 928.824426][T12884] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 929.952813][T12903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1490'. [ 930.257702][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1490'. [ 932.052922][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.060173][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.392872][T12935] netlink: 'syz.3.1507': attribute type 16 has an invalid length. [ 933.401592][T12935] netlink: 'syz.3.1507': attribute type 17 has an invalid length. [ 938.311783][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1516'. [ 938.413550][T12984] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003 [ 938.421980][T12984] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1519'. [ 939.514717][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1516'. [ 942.482512][T13024] fuse: Bad value for 'fd' [ 944.031133][ T5879] IPVS: starting estimator thread 0... [ 944.147236][T13038] IPVS: using max 13 ests per chain, 31200 per kthread [ 944.387154][T13045] x_tables: duplicate underflow at hook 1 [ 945.323238][T13055] overlayfs: failed to resolve './file0/file1': -2 [ 946.087970][T13057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1534'. [ 951.394195][T13106] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1542'. [ 951.670141][T13108] overlayfs: failed to resolve './file0/file1': -2 [ 956.666667][T13154] overlayfs: failed to resolve './file0/file1': -2 [ 959.691018][T13179] trusted_key: encrypted_key: insufficient parameters specified [ 959.963276][T13182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1562'. [ 960.376952][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1557'. [ 962.632402][T13207] sctp: failed to load transform for md5: -2 [ 963.449506][T13215] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1568'. [ 963.529930][ T27] kauditd_printk_skb: 52 callbacks suppressed [ 963.529941][ T27] audit: type=1326 audit(1794338504.305:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13214 comm="syz.2.1568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdc8192ac9 code=0x7ffc0000 [ 963.692577][ T27] audit: type=1326 audit(1794338504.305:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13214 comm="syz.2.1568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 963.745848][ T27] audit: type=1326 audit(1794338504.305:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13214 comm="syz.2.1568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdc8192ac9 code=0x7ffc0000 [ 963.801784][ T27] audit: type=1326 audit(1794338504.305:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13214 comm="syz.2.1568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 963.825982][T13225] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 963.867697][ T27] audit: type=1326 audit(1794338504.305:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13214 comm="syz.2.1568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdc8192ac9 code=0x7ffc0000 [ 963.953006][ T27] audit: type=1326 audit(1794338504.305:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13214 comm="syz.2.1568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 964.027200][ T27] audit: type=1326 audit(1794338504.305:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13214 comm="syz.2.1568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 964.056813][ T27] audit: type=1326 audit(1794338504.305:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13214 comm="syz.2.1568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdc8192ac9 code=0x7ffc0000 [ 964.093000][ T27] audit: type=1326 audit(1794338504.305:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13214 comm="syz.2.1568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff9b25a8f19 code=0x7ffc0000 [ 964.118600][ T27] audit: type=1326 audit(1794338504.305:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13214 comm="syz.2.1568" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffdc8192ac9 code=0x7ffc0000 [ 966.582663][T13246] netlink: 'syz.0.1576': attribute type 2 has an invalid length. [ 969.576826][T13277] ±ÿ)”ëfl: entered allmulticast mode [ 969.622733][T13273] ±ÿ)”ëfl: left allmulticast mode [ 970.623704][T13286] x_tables: duplicate underflow at hook 1 [ 971.052752][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 971.052767][ T27] audit: type=1326 audit(1794338511.825:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.4.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 971.114314][ T27] audit: type=1326 audit(1794338511.855:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.4.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 971.166858][ T27] audit: type=1326 audit(1794338511.855:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.4.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 971.222000][ T27] audit: type=1326 audit(1794338511.865:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.4.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 971.275948][ T27] audit: type=1326 audit(1794338511.865:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.4.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 971.321157][ T27] audit: type=1326 audit(1794338511.865:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.4.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 971.571827][ T27] audit: type=1326 audit(1794338511.865:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.4.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 972.036631][ T27] audit: type=1326 audit(1794338511.865:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.4.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 972.143619][ T27] audit: type=1326 audit(1794338511.865:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.4.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4a3b9a8f19 code=0x7ffc0000 [ 972.252751][ T27] audit: type=1326 audit(1794338511.865:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.4.1587" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffd58509ac9 code=0x7ffc0000 [ 979.619499][T13364] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1604'. [ 981.646113][T13382] batman_adv: batadv0: Adding interface: veth0 [ 981.711838][T13382] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.740080][T13382] batman_adv: batadv0: Interface activated: veth0 [ 981.767754][T13387] batman_adv: batadv0: Interface deactivated: veth0 [ 981.775170][T13387] batman_adv: batadv0: Removing interface: veth0 [ 981.782713][T13387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.791017][T13387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.834829][T13387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.855141][T13387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 983.767452][T13408] netlink: 'syz.0.1613': attribute type 2 has an invalid length. [ 987.673745][T12525] IPVS: starting estimator thread 0... [ 987.773371][T13450] IPVS: using max 15 ests per chain, 36000 per kthread [ 988.669769][T13467] netlink: 'syz.3.1627': attribute type 2 has an invalid length. [ 988.802229][T13474] xt_hashlimit: max too large, truncated to 1048576 [ 991.185768][T13492] netlink: 'syz.2.1632': attribute type 2 has an invalid length. [ 991.225545][T13494] C: renamed from team_slave_0 (while UP) [ 991.239099][T13494] netlink: 'syz.0.1631': attribute type 2 has an invalid length. [ 991.258600][T13494] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1631'. [ 991.283242][T13494] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 991.358297][T13501] fuse: Bad value for 'fd' [ 991.394893][T13501] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1634'. [ 991.635134][T13506] mmap: syz.3.1635 (13506): VmData 49479680 exceed data ulimit 14. Update limits or use boot option ignore_rlimit_data. [ 992.455866][T13512] netlink: 'syz.2.1638': attribute type 2 has an invalid length. [ 992.534497][T13509] md/raid:md4: device ram9 operational as raid disk 1 [ 992.549741][T13509] md/raid:md4: device ram8 operational as raid disk 0 [ 992.673403][T13509] md/raid:md4: raid level 5 active with 2 out of 3 devices, algorithm 2 [ 992.698196][T13509] md4: detected capacity change from 0 to 8192 [ 993.584952][T13525] sctp: failed to load transform for md5: -2 [ 993.835327][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.841828][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.149282][T13508] md4: detected capacity change from 8192 to 0 [ 994.159575][T13508] md: md4 stopped. [ 994.818626][T13550] netlink: 'syz.4.1646': attribute type 2 has an invalid length. [ 995.359555][T13555] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1645'. [ 997.875826][T13573] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1651'. [ 997.920621][T13577] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 997.930256][T13577] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 1001.948819][T13605] netlink: 'syz.3.1659': attribute type 2 has an invalid length. [ 1002.407588][T13610] md: array md0 already initialised! [ 1002.417517][T13610] md: could not open device unknown-block(1,0). [ 1002.730871][T13610] md: error, md_import_device() returned -16 [ 1002.737827][T13606] md: could not open device unknown-block(1,1). [ 1002.744818][T13606] md: error, md_import_device() returned -16 [ 1002.753104][T13614] md: md0 stopped. [ 1008.551974][T13673] netlink: 'syz.0.1673': attribute type 2 has an invalid length. [ 1008.585073][T13675] netlink: 'syz.2.1674': attribute type 2 has an invalid length. [ 1008.797521][T13684] syz.4.1675(13684): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1008.894319][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1672'. [ 1010.494546][T13696] netlink: 'syz.0.1687': attribute type 2 has an invalid length. [ 1010.599989][T13699] C: renamed from team_slave_0 (while UP) [ 1010.757425][T13699] netlink: 'syz.2.1679': attribute type 2 has an invalid length. [ 1010.781502][T13699] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1679'. [ 1010.807162][T13699] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1012.040442][T13724] : renamed from bond_slave_0 (while UP) [ 1012.670500][T13725] overlayfs: failed to clone lowerpath [ 1014.694435][T13737] netlink: 'syz.0.1688': attribute type 2 has an invalid length. [ 1014.904891][T13738] fuse: Bad value for 'group_id' [ 1016.428064][T13752] netlink: 'syz.0.1692': attribute type 2 has an invalid length. [ 1018.701863][T12618] rpcbind: server 127.0.0.1 not responding, timed out [ 1018.771786][T12618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.993171][T12618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.147644][ T7896] ------------[ cut here ]------------ [ 1019.154370][ T7896] WARNING: CPU: 1 PID: 7896 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 1019.166282][ T7896] Modules linked in: [ 1019.170256][ T7896] CPU: 1 PID: 7896 Comm: kworker/u4:14 Not tainted syzkaller #0 [ 1019.178661][ T7896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1019.189458][ T7896] Workqueue: phy13 ieee80211_csa_finalize_work [ 1019.196446][ T7896] RIP: 0010:ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 1019.204520][ T7896] Code: 48 89 df e8 61 02 c7 f7 e9 e7 fc ff ff e8 c7 f9 6d f7 eb 24 e8 c0 f9 6d f7 c7 04 24 f4 ff ff ff e9 d9 f5 ff ff e8 af f9 6d f7 <0f> 0b 0f 0b e9 c4 f5 ff ff e8 a1 f9 6d f7 48 8b 7c 24 08 4c 8b 74 [ 1019.225242][ T7896] RSP: 0018:ffffc900034779b8 EFLAGS: 00010293 [ 1019.231478][ T7896] RAX: ffffffff8a19e0f5 RBX: 0000000000000001 RCX: ffff888025b41e00 [ 1019.239541][ T7896] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1019.243829][ C0] ------------[ cut here ]------------ [ 1019.247719][ T7896] RBP: dffffc0000000000 R08: ffff88806289560f R09: 1ffff1100c512ac1 [ 1019.253152][ C0] WARNING: CPU: 0 PID: 13783 at net/mac80211/tx.c:5135 __ieee80211_beacon_get+0x1141/0x1520 [ 1019.253189][ C0] Modules linked in: [ 1019.253204][ C0] CPU: 0 PID: 13783 Comm: syz.2.1696 Not tainted syzkaller #0 [ 1019.253225][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1019.253239][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 1019.253261][ C0] Code: f7 4c 89 ef e8 90 08 b1 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 5b aa 72 f7 0f 0b e9 61 f8 ff ff e8 4f aa 72 f7 <0f> 0b e9 85 fb ff ff e8 43 aa 72 f7 48 c7 c7 a0 f3 66 8f 4c 89 e6 [ 1019.253280][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 1019.253300][ C0] RAX: ffffffff8a153451 RBX: dffffc0000000000 RCX: ffff88802e0dda00 [ 1019.253317][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1019.253331][ C0] RBP: 0000000000000000 R08: ffff88802e0dda00 R09: 0000000000000003 [ 1019.253345][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888062896420 [ 1019.253360][ C0] R13: ffff888031901c24 R14: ffff888062896910 R15: ffff888031901c00 [ 1019.253377][ C0] FS: 00007ff9b349e6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 1019.253395][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1019.253411][ C0] CR2: 0000200000334030 CR3: 000000002ffa2000 CR4: 00000000003506f0 [ 1019.253429][ C0] DR0: 0000000000010000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1019.253443][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1019.253457][ C0] Call Trace: [ 1019.253466][ C0] [ 1019.253478][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 1019.253514][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 1019.253540][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1019.253573][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 1019.262208][ T7896] R10: dffffc0000000000 R11: ffffed100c512ac2 R12: 0000000000000001 [ 1019.272001][ C0] __iterate_interfaces+0x225/0x4c0 [ 1019.272037][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1019.272065][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1019.272094][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1019.272120][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1019.272152][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1019.272175][ C0] ? hw_scan_work+0xf10/0xf10 [ 1019.272198][ C0] __hrtimer_run_queues+0x525/0xc10 [ 1019.272248][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1019.272271][ C0] ? acpi_pm_read+0x9/0x20 [ 1019.272440][ C0] hrtimer_run_softirq+0x177/0x290 [ 1019.272464][ C0] handle_softirqs+0x27d/0x820 [ 1019.272497][ C0] ? acpi_pm_read+0x9/0x20 [ 1019.272519][ C0] ? ktime_get+0x24b/0x280 [ 1019.272545][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1019.272567][ C0] ? do_softirq+0x1a0/0x1a0 [ 1019.272640][ C0] __irq_exit_rcu+0xd3/0x190 [ 1019.272661][ C0] ? irq_exit_rcu+0x20/0x20 [ 1019.272687][ C0] irq_exit_rcu+0x9/0x20 [ 1019.272707][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1019.276682][ T7896] R13: ffff888020332cd0 R14: ffff888020332d48 R15: ffff88805395b330 [ 1019.284264][ C0] [ 1019.284274][ C0] [ 1019.284284][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1019.284318][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 1019.284368][ C0] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 0c fe 05 0e 48 89 de 5b e9 23 37 58 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 50 d9 7b 7e 65 8b 15 51 d9 7b 7e 81 e2 00 01 ff 00 74 [ 1019.284385][ C0] RSP: 0018:ffffc9000b68fa18 EFLAGS: 00000246 [ 1019.284406][ C0] RAX: ffffffff81cc9ca2 RBX: 0000000000000038 RCX: 0000000000080000 [ 1019.284422][ C0] RDX: ffffc9000e46f000 RSI: 000000000000000e RDI: ffffffff8b3bfac0 [ 1019.284437][ C0] RBP: 000000000000000e R08: ffffc9000b68fb17 R09: 0000000000000000 [ 1019.284452][ C0] R10: ffffc9000b68fae0 R11: fffff520016d1f63 R12: dffffc0000000000 [ 1019.284468][ C0] R13: ffffc9000b68fae0 R14: ffffffff8b3bfac0 R15: 00002000003348c0 [ 1019.284493][ C0] ? __might_fault+0x22/0x120 [ 1019.284526][ C0] __might_fault+0x22/0x120 [ 1019.284554][ C0] _copy_from_user+0x2a/0xe0 [ 1019.284578][ C0] ___sys_recvmsg+0x174/0x590 [ 1019.284713][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 1019.284754][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 1019.295371][ T7896] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 1019.301530][ C0] ? __might_fault+0xc6/0x120 [ 1019.301559][ C0] ? __might_fault+0xaa/0x120 [ 1019.301622][ C0] do_recvmmsg+0x377/0x810 [ 1019.301658][ C0] ? __sys_recvmmsg+0x290/0x290 [ 1019.301683][ C0] ? ns_to_timespec64+0xb0/0xb0 [ 1019.301722][ C0] ? _copy_to_user+0x85/0xa0 [ 1019.301751][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1019.301781][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 1019.301808][ C0] ? do_recvmmsg+0x810/0x810 [ 1019.301836][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1019.301861][ C0] do_syscall_64+0x55/0xb0 [ 1019.301894][ C0] ? clear_bhb_loop+0x40/0x90 [ 1019.301922][ C0] ? clear_bhb_loop+0x40/0x90 [ 1019.301953][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1019.301982][ C0] RIP: 0033:0x7ff9b25a8f19 [ 1019.302001][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.302018][ C0] RSP: 002b:00007ff9b349e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1019.322473][ T7896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1019.328122][ C0] RAX: ffffffffffffffda RBX: 00007ff9b2826090 RCX: 00007ff9b25a8f19 [ 1019.336712][ T7896] CR2: 00002000000a0000 CR3: 000000002ffa2000 CR4: 00000000003506e0 [ 1019.344303][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1019.344322][ C0] RBP: 00007ff9b2637f6d R08: 0000000000000000 R09: 0000000000000000 [ 1019.344336][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1019.344349][ C0] R13: 00007ff9b2826128 R14: 00007ff9b2826090 R15: 00007ffdc808bc98 [ 1019.344385][ C0] [ 1019.344396][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1019.344407][ C0] CPU: 0 PID: 13783 Comm: syz.2.1696 Not tainted syzkaller #0 [ 1019.344426][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1019.344437][ C0] Call Trace: [ 1019.344446][ C0] [ 1019.344454][ C0] dump_stack_lvl+0x18c/0x250 [ 1019.344489][ C0] ? show_regs_print_info+0x20/0x20 [ 1019.344516][ C0] ? load_image+0x420/0x420 [ 1019.344553][ C0] panic+0x2ca/0x720 [ 1019.344578][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1019.344616][ C0] __warn+0x2e0/0x470 [ 1019.344635][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1019.344658][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1019.344678][ C0] report_bug+0x2be/0x4f0 [ 1019.344787][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1019.344805][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1019.344823][ C0] ? __ieee80211_beacon_get+0x1143/0x1520 [ 1019.344841][ C0] handle_bug+0xcf/0x120 [ 1019.344867][ C0] exc_invalid_op+0x1a/0x50 [ 1019.344898][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1019.344923][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 1019.344944][ C0] Code: f7 4c 89 ef e8 90 08 b1 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 5b aa 72 f7 0f 0b e9 61 f8 ff ff e8 4f aa 72 f7 <0f> 0b e9 85 fb ff ff e8 43 aa 72 f7 48 c7 c7 a0 f3 66 8f 4c 89 e6 [ 1019.344960][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 1019.344977][ C0] RAX: ffffffff8a153451 RBX: dffffc0000000000 RCX: ffff88802e0dda00 [ 1019.344991][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1019.345002][ C0] RBP: 0000000000000000 R08: ffff88802e0dda00 R09: 0000000000000003 [ 1019.345013][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888062896420 [ 1019.345025][ C0] R13: ffff888031901c24 R14: ffff888062896910 R15: ffff888031901c00 [ 1019.345047][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1019.345072][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 1019.345090][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 1019.345119][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 1019.345141][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1019.345171][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 1019.345202][ C0] __iterate_interfaces+0x225/0x4c0 [ 1019.345225][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1019.345248][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1019.345274][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1019.345295][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1019.345323][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1019.345343][ C0] ? hw_scan_work+0xf10/0xf10 [ 1019.345363][ C0] __hrtimer_run_queues+0x525/0xc10 [ 1019.345403][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1019.345422][ C0] ? acpi_pm_read+0x9/0x20 [ 1019.345459][ C0] hrtimer_run_softirq+0x177/0x290 [ 1019.345486][ C0] handle_softirqs+0x27d/0x820 [ 1019.345505][ C0] ? acpi_pm_read+0x9/0x20 [ 1019.345530][ C0] ? ktime_get+0x24b/0x280 [ 1019.345555][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1019.345579][ C0] ? do_softirq+0x1a0/0x1a0 [ 1019.345607][ C0] __irq_exit_rcu+0xd3/0x190 [ 1019.345626][ C0] ? irq_exit_rcu+0x20/0x20 [ 1019.345654][ C0] irq_exit_rcu+0x9/0x20 [ 1019.345672][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1019.345700][ C0] [ 1019.345707][ C0] [ 1019.345714][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1019.345740][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 1019.345764][ C0] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 0c fe 05 0e 48 89 de 5b e9 23 37 58 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 50 d9 7b 7e 65 8b 15 51 d9 7b 7e 81 e2 00 01 ff 00 74 [ 1019.345779][ C0] RSP: 0018:ffffc9000b68fa18 EFLAGS: 00000246 [ 1019.345794][ C0] RAX: ffffffff81cc9ca2 RBX: 0000000000000038 RCX: 0000000000080000 [ 1019.345805][ C0] RDX: ffffc9000e46f000 RSI: 000000000000000e RDI: ffffffff8b3bfac0 [ 1019.345818][ C0] RBP: 000000000000000e R08: ffffc9000b68fb17 R09: 0000000000000000 [ 1019.345830][ C0] R10: ffffc9000b68fae0 R11: fffff520016d1f63 R12: dffffc0000000000 [ 1019.345843][ C0] R13: ffffc9000b68fae0 R14: ffffffff8b3bfac0 R15: 00002000003348c0 [ 1019.345864][ C0] ? __might_fault+0x22/0x120 [ 1019.345897][ C0] __might_fault+0x22/0x120 [ 1019.345920][ C0] _copy_from_user+0x2a/0xe0 [ 1019.345940][ C0] ___sys_recvmsg+0x174/0x590 [ 1019.345968][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 1019.346009][ C0] ? __lock_acquire+0x7eb0/0x7eb0 [ 1019.346039][ C0] ? __might_fault+0xc6/0x120 [ 1019.346057][ C0] ? __might_fault+0xaa/0x120 [ 1019.346081][ C0] do_recvmmsg+0x377/0x810 [ 1019.346109][ C0] ? __sys_recvmmsg+0x290/0x290 [ 1019.346130][ C0] ? ns_to_timespec64+0xb0/0xb0 [ 1019.346165][ C0] ? _copy_to_user+0x85/0xa0 [ 1019.346189][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1019.346212][ C0] __x64_sys_recvmmsg+0x199/0x250 [ 1019.346237][ C0] ? do_recvmmsg+0x810/0x810 [ 1019.346261][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1019.346283][ C0] do_syscall_64+0x55/0xb0 [ 1019.346304][ C0] ? clear_bhb_loop+0x40/0x90 [ 1019.346328][ C0] ? clear_bhb_loop+0x40/0x90 [ 1019.346356][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1019.346380][ C0] RIP: 0033:0x7ff9b25a8f19 [ 1019.346395][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.346410][ C0] RSP: 002b:00007ff9b349e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1019.346428][ C0] RAX: ffffffffffffffda RBX: 00007ff9b2826090 RCX: 00007ff9b25a8f19 [ 1019.346442][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1019.346454][ C0] RBP: 00007ff9b2637f6d R08: 0000000000000000 R09: 0000000000000000 [ 1019.346466][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1019.346476][ C0] R13: 00007ff9b2826128 R14: 00007ff9b2826090 R15: 00007ffdc808bc98 [ 1019.346504][ C0] [ 1019.352845][ C0] Kernel Offset: disabled