last executing test programs: 11m47.866112482s ago: executing program 1 (id=39): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x80007ff, 0xf86, 0x3}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x3, 0x14, 0x7f, 0x7fff7ffc}]}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$eJzs3MtvVFUYAPDvTh+8aUVEQdAqGomPlhZUFi7UaOJCExNd4LK2BZGBGloTIY0WY3BpSNwblyb+Be7cGHVhTNxq4tKQEG1MKK5q7gum02mZlpYpnd8vmc45c1/nu+eemXPv6b0BtK2+9E8SsT0ifo+Injw7f4a+/G12Zmrk+szUSBJzc2/9nWTzXZuZGilnLZfbVmQOVSIqnyXxYrJwuxPnL5werlbHzhX5gckzHwxMnL/wzKkzwyfHTo6dHTp27OiRweefG3p2VeJM47q27+Px/Xtfe+fyGyPHL7/707dpsfYcyKfXxnFL1xsE1EBfutf+mcvUT3t8GWW/G+yoSSedLSwIy9IREWl1dWXtvyc64mbl9cSrn7a0cMCaSn+bNi0+eXoO2MCSaHUJgNYof+jT89/ydYe6HuvC1Zciuov07MzUyOyN+DujUnzetYbb74uI49P/fZW+YrnXIQAAViDr2zzdqP9XiT3Zez7WsbMYQ+mNiHsiYldE3BsRuyPivohs3vujOx7IF57raXL7fXX5hf2fypWGZV4laf/vhZq+32xN/MVbb0eR25HF35WcOFUdO1zsk0PRtSnNDy6xje9f+e2LxabV9v/SV7r9si9YFOBKZ90FutHhyeHV2glXL0bs62wUf3JjJCA9AvZGxL7lrXpnmTj15Df7F5vp1vEvYRXGmea+jngir//pqIu/lCw9PjmwOapjhwfKo2Khn3+99GaR7K6fdlvxr4K0/rfOP/6LKReL955/k3y8tiuq1bFzE8vfxqU/Pl/0nGalx3938nY2Zv3Le/lnHw1PTp4bjOhOXs/y5Y7OPh+6uWyZL+dP4z90sHH731Usk8b/YESkB/GBiHgoIh4uyv5IRDwaEQeXiP/Hlx97f4n4k0iipfU/2vD7L4nYnCV6k9rx+hUkOk7/8N1iI+bN1f/RmM6+a3PZ998tNFvA29+DAAAAsP5VImJ7JJX+PN23PSqV/v78f/h3x9ZKdXxi8qkT4x+eHc3vEeiNrkp5paun5nroYDJdrDHPDxXXisvpR4rrxl92bMny/SPj1dEWxw7tbtv89h9l+0/91dHq0gFrzv1a0L7q23+lReUA7rxmfv+dC8DG1KD9b2lFOYA7z/k/tK9G7f+Turz+P2xMC9v/nw0eWQdsRPr/0L60f2hf2j+0pWbv4i+fp7DihwDMS5Q3C6x8PZubvsN//SX61mTNZQ2tZeG3xM1PorJqa55eB5WyzhNpi1nJ4rGz+WdhzE80eFgNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXej/AAAA//+q8eIl") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6, 0x100000000, 0x6, 0x2d1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x4a) 11m32.793605078s ago: executing program 32 (id=39): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x80007ff, 0xf86, 0x3}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x3, 0x14, 0x7f, 0x7fff7ffc}]}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$eJzs3MtvVFUYAPDvTh+8aUVEQdAqGomPlhZUFi7UaOJCExNd4LK2BZGBGloTIY0WY3BpSNwblyb+Be7cGHVhTNxq4tKQEG1MKK5q7gum02mZlpYpnd8vmc45c1/nu+eemXPv6b0BtK2+9E8SsT0ifo+Injw7f4a+/G12Zmrk+szUSBJzc2/9nWTzXZuZGilnLZfbVmQOVSIqnyXxYrJwuxPnL5werlbHzhX5gckzHwxMnL/wzKkzwyfHTo6dHTp27OiRweefG3p2VeJM47q27+Px/Xtfe+fyGyPHL7/707dpsfYcyKfXxnFL1xsE1EBfutf+mcvUT3t8GWW/G+yoSSedLSwIy9IREWl1dWXtvyc64mbl9cSrn7a0cMCaSn+bNi0+eXoO2MCSaHUJgNYof+jT89/ydYe6HuvC1Zciuov07MzUyOyN+DujUnzetYbb74uI49P/fZW+YrnXIQAAViDr2zzdqP9XiT3Zez7WsbMYQ+mNiHsiYldE3BsRuyPivohs3vujOx7IF57raXL7fXX5hf2fypWGZV4laf/vhZq+32xN/MVbb0eR25HF35WcOFUdO1zsk0PRtSnNDy6xje9f+e2LxabV9v/SV7r9si9YFOBKZ90FutHhyeHV2glXL0bs62wUf3JjJCA9AvZGxL7lrXpnmTj15Df7F5vp1vEvYRXGmea+jngir//pqIu/lCw9PjmwOapjhwfKo2Khn3+99GaR7K6fdlvxr4K0/rfOP/6LKReL955/k3y8tiuq1bFzE8vfxqU/Pl/0nGalx3938nY2Zv3Le/lnHw1PTp4bjOhOXs/y5Y7OPh+6uWyZL+dP4z90sHH731Usk8b/YESkB/GBiHgoIh4uyv5IRDwaEQeXiP/Hlx97f4n4k0iipfU/2vD7L4nYnCV6k9rx+hUkOk7/8N1iI+bN1f/RmM6+a3PZ998tNFvA29+DAAAAsP5VImJ7JJX+PN23PSqV/v78f/h3x9ZKdXxi8qkT4x+eHc3vEeiNrkp5paun5nroYDJdrDHPDxXXisvpR4rrxl92bMny/SPj1dEWxw7tbtv89h9l+0/91dHq0gFrzv1a0L7q23+lReUA7rxmfv+dC8DG1KD9b2lFOYA7z/k/tK9G7f+Turz+P2xMC9v/nw0eWQdsRPr/0L60f2hf2j+0pWbv4i+fp7DihwDMS5Q3C6x8PZubvsN//SX61mTNZQ2tZeG3xM1PorJqa55eB5WyzhNpi1nJ4rGz+WdhzE80eFgNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXej/AAAA//+q8eIl") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x6, 0x100000000, 0x6, 0x2d1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x4a) 5m1.804743016s ago: executing program 33 (id=702): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = fanotify_init(0x202, 0x1000) fanotify_mark(r3, 0x1, 0x48000013, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) 3m59.722100392s ago: executing program 6 (id=868): mkdirat(0xffffffffffffff9c, 0xffffffffffffffff, 0x1b2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x28, 0xa, 0x4000000) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x1d1800, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xfffffffffffffffd, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @multicast}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000015}, 0x4008000) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000140)='ubifs\x00', 0x8800, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="fb", 0x1}], 0x1) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="e8a1ed56ef3fc76d4b64028b7b12c04a045a76d85192a7d81e25a53efd1e91cd6a29ca80b0a2f2161ae57274ae38f3ebd1819649328540b94c165274c77f", 0x3e) sendmsg$nl_route(r1, 0x0, 0x240048c0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r7, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="0000e9ff", @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf250900000005000500030000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000890) 3m57.295327079s ago: executing program 6 (id=873): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000000)=0x40000009, 0x4) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1562, &(0x7f0000000380)={0x0, 0x36d, 0xc000, 0x10, 0xb1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r3, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24080001) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(&(0x7f0000000d80)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x40090) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000400)={0x2, 0x0, [{}, {0xa21, 0x0, 0xfff}]}) 3m55.439535001s ago: executing program 6 (id=876): syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010700ec13b2106d04d308280b0102030109022900010000000009046900000e01ff"], 0x0) syz_io_uring_setup(0x1298, &(0x7f0000000080)={0x0, 0xe144, 0x100, 0x2, 0x2e2}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$ax25(0x3, 0x5, 0xca) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x200100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3m53.115819154s ago: executing program 34 (id=880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(r2, 0xf, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20094) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES16=r3], 0xbc}, 0x1, 0x0, 0x0, 0x24000851}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r1, @ANYRES16=r4, @ANYRES16=r2, @ANYRES16=r1, @ANYRESDEC=r0, @ANYBLOB="5d8157af3bf376dac7bd1626e6f37e42f6925f85f9c39547d334357d60f16772df25306df7a2b547ce2a2537de9ac571fb23ff80f7174b9a014a00a05a0fdc38e86427f36e7093239671896d55a48db6a85de98bf02264e23c712ad5e0eec006f66de9221a54956daf2e57cf4db3a817d542493fd9babf5deb25be6a63b0c1e1a858383aefe0a8c9bf74e022bb2201bda46bcd87f9655c4381ca18885c6f2aaf724296cdb087d9d3ca8c87314e70963607b531c06faff13cd7be4049451b264cfcfa708d40be03", @ANYRESHEX=r4, @ANYRES64=r5, @ANYRES8=r4], 0x48) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0xe, "dce4f0020100000000001b347d5c00010200"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 3m50.269938456s ago: executing program 6 (id=888): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x500, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x502) (async) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f00000020c0)=0xfffffffa) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x4008084, &(0x7f0000000100)={[{@fat=@tz_utc}, {@dots}, {@nodots}, {@fat=@check_strict}, {@fat=@sys_immutable}, {@nodots}, {@fat=@dos1xfloppy}, {@fat=@showexec}, {@dots}]}, 0x1, 0x27e, &(0x7f0000000300)="$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") 3m47.175962972s ago: executing program 6 (id=894): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = fanotify_init(0xf00, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x2, 0x1, 0x5}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) 3m45.491319801s ago: executing program 6 (id=898): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) close_range(r2, 0xffffffffffffffff, 0x10000000000000) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x10000) 3m29.52934752s ago: executing program 35 (id=898): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7e) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) close_range(r2, 0xffffffffffffffff, 0x10000000000000) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000040)=0x10000) 3m19.848400306s ago: executing program 5 (id=950): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x2, 0x862b01) mount(0x0, 0x0, 0x0, 0x10, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3m18.15469843s ago: executing program 5 (id=953): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x3, 0xa, 0x8, 0x5, "000064640000001503fe00", "defda28a", '\x00', 't0\x00', ['\x00', "f548000000004000000900", "00000600", "000081909d8f00"]}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000480)={0x7, 0xc, 0x7, 0x0, 0x3, 0x202, "3bf9575d0000000010344a00", 0x2, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x2004, 0xfffffffffffffd3b) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'pcmmio\x00', [0xb013, 0x7, 0x0, 0xdd5, 0x88d7, 0x8f, 0x6, 0x8012, 0x1006, 0xffffffff, 0x203, 0x7, 0x10000009, 0x3, 0x5, 0x1, 0x8, 0x6, 0x9, 0x8e, 0x4, 0x1, 0x4, 0xa, 0x4, 0x1, 0xb0c4, 0xc, 0x4, 0x400002, 0x22]}) ioctl$TIOCCBRK(r3, 0x5428) connect$inet(r2, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f0000019500)) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='jfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 3m15.330592342s ago: executing program 5 (id=959): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="0000000000000000000000000400", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept(r1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs$namespace(0x0, &(0x7f0000003380)='ns/cgroup\x00') socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x10, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 3m13.971320611s ago: executing program 5 (id=962): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zlib'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000006, 0x8010, r1, 0x8a952000) ftruncate(r2, 0xc17a) write$bt_hci(0xffffffffffffffff, 0x0, 0x8) ftruncate(r2, 0x84) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x18, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x41, 0x7}, 0x1}}, 0x10) close(r0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(r4, 0xe, &(0x7f0000000100)={0x10000, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r4, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r7 = openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, 0x0) syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) 3m9.887215036s ago: executing program 5 (id=975): fsopen(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f00000068c0)=ANY=[@ANYBLOB='uni_xlate=1,iocharset=cp949,shortname=winnt,codepage=864,nonumtail=0,iocharset=cp85xlate=0,nonumtail=0,shortname=lower,uni_xlate=1,shortname=win95,shortname=win95,iocharset=iso8859-14,\x00\x00\x00\x00\x00\x00\x00'], 0x81, 0x29b, &(0x7f0000000580)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffffffff, 0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffffc}]}]}, 0x34}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file0\x00', 0x80006, 0xffffffffffffffff, 0x0, 0x0, 0x0) 3m5.479867266s ago: executing program 5 (id=986): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2080803, &(0x7f00000012c0), 0xfe, 0x258, &(0x7f0000000800)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) fallocate(r0, 0x10, 0x3, 0x7ffd) 3m4.863614828s ago: executing program 36 (id=986): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4451, &(0x7f0000008900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2080803, &(0x7f00000012c0), 0xfe, 0x258, &(0x7f0000000800)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) fallocate(r0, 0x10, 0x3, 0x7ffd) 2m54.08372s ago: executing program 7 (id=1005): socket$pppoe(0x18, 0x1, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x26, 0x336, &(0x7f00000001c0)="$eJzs3T1sW9UXAPDjviROI/VvD3+pgsmwIaGqCWKAKVFVpIoMUGTxtWDRlI/YVIqFpTDE9QJiBLEgwcTWAcbOiAEhNgZWioQKiIVulVrxkP1e7OeP0BThlI/fb4iOzj3H976Xq/glSm5eWo/tC4tx8caN67G8XIqF9TPrcbMU1TgWSWQuBwDwb3IzTePXNHPn6vdX9qOlOa8LAJifwfv/KydGifK9XA0AcBQO+f3/UzOzl+a2LABgjqbe/x8cG574Mf/C8HcCAIB/rmeef+HJjc2I87XackTrnU69U4/HR+MbF+O1aMZWnI5K3I7IHhSyp4X+xyfObZ49Xev7sRr1fkenHtHqdurZk8JGMugvx2pUopr3p8P+pN+/OuivRcTl7mD+aJU69cVYyef/biW2Yi0q8f+p/ohzm2fXavkL1Fv7/d2IXizvX0R//aeiEt+8HJeiGRei3zta/95qrXYm3Rzr71wpD+oAAAAAAAAAAAAAAAAAAAAAAGAeTtWGqsPzb9JWt/P2+cmC6tj5OPVsOD8fqJedD5SW90/neTeZPB9o/HyeTn0hjt3TKwcAAAAAAAAAAAAAAAAAAIC/j/buUjSaza2d9u5b28WgW8i88dWnXxyPyZrXk1EmFrKXG6vJc1HoSmLYng7b02SsJg+SiFHxlavDFRdrysOrmGrvB+WpoVK+pkazeeKBHz6a1fXbKJPE1G0ZD0r5/IWh1v+y1B90HRys3aHmWpqmB7XvfTjdFaWIhalP3F8RfHn91fseaZ98dJD5PD/04aGHK89e++CTn7cbzchvTbO5tNO+nf7puZLC/inl97k0YyfMDnqjTG+nvdtIvv3lufvf+3qiOJm9f9Ji5s2D5/psMrOUBf1lHuZKF2ds/tnBi7eGu/fub+bJj9cbV/e+/+mwXYUvEg7qAAAAAAAAAAAAAAAAAACAI1H4W/G78NjT81sRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABy90f//LwS9qcxhglvdmB4qb+20D5z8+JFeKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2G/BwAA//9pxHjs") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x800804, &(0x7f0000000140), 0x1, 0x50ed, &(0x7f000000a2c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x28020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x44) sendfile(r5, r5, 0x0, 0x800000009) connect$nfc_llcp(r0, &(0x7f0000000100)={0x27, r2, 0xffffffffffffffff, 0x4, 0x53, 0x7, "07cbdd3199047dc26d311f0f244b25ba35ea8f61cd07e107dab26da8d164f15b35c0b7669366c634dd2326e7f6dccdec8306910919e39811abd472ad0eab81", 0xd}, 0x60) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x9, &(0x7f0000000000)) close(0x4) 2m52.725529914s ago: executing program 7 (id=1007): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) truncate(&(0x7f0000000000)='./file1\x00', 0x2) 2m52.572691951s ago: executing program 7 (id=1008): r0 = msgget$private(0x0, 0x193) msgsnd(r0, &(0x7f0000000040)={0x1}, 0x8, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x1800) 2m52.456033111s ago: executing program 7 (id=1009): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c1) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2101015, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100419, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./cgroup\x00', 0x0, 0x2001015, 0x0) mount$9p_unix(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x80010, 0x0) mount(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000200)='devtmpfs\x00', 0x8, 0x0) 2m52.446647491s ago: executing program 7 (id=1010): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) r1 = socket$inet(0x2, 0x1, 0x0) listen(r0, 0xfffffffe) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) 2m51.982731025s ago: executing program 7 (id=1013): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x138, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in=@private=0xa010100, 0x0, 0xecdf, 0x0, 0x0, 0x0, 0x20}, {@in6=@private0, 0x0, 0x32}, @in6=@private1, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x400800}, {0x1000}, 0x0, 0x0, 0xa, 0x3, 0x0, 0x19}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x4050) 2m50.982446286s ago: executing program 37 (id=1013): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x138, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in=@private=0xa010100, 0x0, 0xecdf, 0x0, 0x0, 0x0, 0x20}, {@in6=@private0, 0x0, 0x32}, @in6=@private1, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x400800}, {0x1000}, 0x0, 0x0, 0xa, 0x3, 0x0, 0x19}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x4050) 2m29.852618342s ago: executing program 1 (id=1015): sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) 2m28.943988066s ago: executing program 1 (id=1061): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102", @ANYRES32], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mq_open(&(0x7f0000000200)='\xf2\x9a\xa8G@V\xa5\xea\xc2\xce\fl*h6#L\xc4v\xb0\xd9\x1e^c\xe5\xe4(>bxN\x9a\x9c\x80\xca\x1fE\x18v\x1c9\xc8\xcb7l\xb4\x87\ay\xc4\x8d\x1eSh\x85e@[\xbf\xb3]\x05\xd2Vz;\x7f\xd27\x18\xb7\x81\xe8\xf0H\x89_\xd8z\x05\xab\x81\xdc\xdb\xde\xf7^\x8d\xc4X\x01\xeaG\xe5\xc9\x8e\xc2\xc3\xf9\xa9a\x97[r\x0e\xf4\xb15\x9d\xe9C\"\x9e\xbfG9\xfc\x04\x03\xd6\xcf\xac\a\xab3\xb9\x9awE\xe0Gf\x84\xc8\xfa\xf1\x8d\xc1', 0x40, 0x46, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000280)="fe", 0x1}], 0x1, 0x1, 0x0, 0x0) 2m26.55598403s ago: executing program 1 (id=1070): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYRES32], 0x54}}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x19, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e23, 0x80, @empty, 0x1}, 0x1c) io_submit(r5, 0x4, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f0000000100)="21812a818bb99326cf9aa78dfc4f0ac4f5dc12092e7faa139e2597dba850b86ad2211de9fb71c95a1a2af2f99d02ec6f0187233f2bad639e36338893", 0xb7f40, 0x3000000000000000}]) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) dup3(r4, r2, 0x0) 2m24.442952414s ago: executing program 1 (id=1072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000006"], 0x28}}, 0x8000) 2m23.688535355s ago: executing program 1 (id=1075): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x4f27, 0x5, 0x6, 0x4, 0x4, 0xfffffbfd, 0x12, 0x4, 0xd, 0x6, 0x2, 0x1, 0x4, 0x0, 0x2, 0x101, 0x4, 0x81, 0xffffffff, 0x352f, 0x99, 0xcaa7, 0x2, 0x5, 0x7, 0x100, 0x7a, 0x8, 0xfffffffe, 0x0, 0x3862]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) read(r2, &(0x7f0000000900)=""/198, 0xc6) socket(0x40000000015, 0x5, 0x0) r3 = fsopen(0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r4, 0x4b46, &(0x7f0000000000)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0xb) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='port', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4010) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r7}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f00000008c0), 0x4, r7, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) 2m8.38100836s ago: executing program 38 (id=1075): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x4f27, 0x5, 0x6, 0x4, 0x4, 0xfffffbfd, 0x12, 0x4, 0xd, 0x6, 0x2, 0x1, 0x4, 0x0, 0x2, 0x101, 0x4, 0x81, 0xffffffff, 0x352f, 0x99, 0xcaa7, 0x2, 0x5, 0x7, 0x100, 0x7a, 0x8, 0xfffffffe, 0x0, 0x3862]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) read(r2, &(0x7f0000000900)=""/198, 0xc6) socket(0x40000000015, 0x5, 0x0) r3 = fsopen(0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r4, 0x4b46, &(0x7f0000000000)) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0xb) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='port', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4010) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r7}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {&(0x7f00000008c0), 0x4, r7, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) 1m50.125469959s ago: executing program 8 (id=1150): write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d", 0x13) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x1200, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1m49.719435232s ago: executing program 8 (id=1152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r4, &(0x7f0000000240), 0x0, 0x8004881, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r4, &(0x7f0000000080)='@', 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) io_setup(0x5, &(0x7f0000000180)=0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000001c0)={0x6, "42cbf017c075dd2a90e900000000000000000100", 0xffffffffffffffff}) io_submit(r5, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002807235ab62080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1m46.750306148s ago: executing program 8 (id=1162): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000300)={0x7}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) cachestat(r0, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) 1m46.356971082s ago: executing program 8 (id=1165): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x0, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0x2020) 1m46.140944156s ago: executing program 8 (id=1167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000400)={0x9, {{0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x88) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0), 0x400) fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000600), 0x8808, &(0x7f0000000840)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r7, &(0x7f00000004c0)=[{}], 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000240)) 1m45.081875637s ago: executing program 8 (id=1171): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) dup(0xffffffffffffffff) write(r4, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close_range(r2, 0xffffffffffffffff, 0x400000000000000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53c"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0x8ec0}], 0x1}, 0x12) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000008400000000000000"], 0x18}, 0x41) close(r8) 1m29.584145231s ago: executing program 39 (id=1171): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_open_procfs(0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) dup(0xffffffffffffffff) write(r4, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close_range(r2, 0xffffffffffffffff, 0x400000000000000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53c"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0x8ec0}], 0x1}, 0x12) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000008400000000000000"], 0x18}, 0x41) close(r8) 12.114631868s ago: executing program 0 (id=1536): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7a}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) 11.212835411s ago: executing program 0 (id=1537): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 10.984175503s ago: executing program 0 (id=1540): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120000"], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000000c0), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 9.829146812s ago: executing program 0 (id=1542): symlink(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000300)={{@hyper, 0x5}, 0x1, 0x1, 0x5}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) 8.617070384s ago: executing program 4 (id=1546): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xb, 0x73}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 8.61509942s ago: executing program 9 (id=1547): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x10, 0x4}, 0x20) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x80a200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x37, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x3, 0x4, 0x2}, 0x1, r4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0xd5}}]}, 0x90}}, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x2400c080) sendmsg$nl_route(r5, 0x0, 0x4000000) 7.195306131s ago: executing program 4 (id=1549): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x80000000101008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xfecc) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) 6.390037091s ago: executing program 3 (id=1550): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200048c0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f00008d4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020) 6.295777809s ago: executing program 4 (id=1551): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 5.685549589s ago: executing program 4 (id=1553): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 5.663080149s ago: executing program 2 (id=1554): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.439538623s ago: executing program 4 (id=1555): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x0, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x2, 0x2, 0x0, 0x4, 0x1, 0x5, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x4, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x3, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0xeeee0000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xc3, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0xfb, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x1, 0xf, 0x5, 0xfc, 0x3, 0xa, 0x1, 0x54, 0x1, 0xff, 0x5}, {0xeeef0000, 0x5}, {0x0, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x5, 0x2100, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x9, 0x4, 0xd7, 0x0, 0x9, 0x4, 0x4, 0x6, 0xe8, 0x69, 0x5, 0x8, 0x0, 0x856c, 0x2, 0xd4, 0x4, 0x9, 0x0, '\x00', 0x9, 0xffffffffffff8001}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) 4.392062209s ago: executing program 4 (id=1556): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000000380)=[{0x1, 0xc401, 0x4f, &(0x7f0000000780)="2fa4aaca555c80e980979899f7a2e96c76e007198cf35a3e86a08a361ab693d4b578c5ca80b3dcebae4a9ec3d2084a95f036c2dab0a8e13b7f4757b2a22bf27639286b466ddcf6b2cae2a5a1d1fe21"}], 0x1}) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000640)={0x20, 0xe, 0x2f, "7fe5de335ba65e10212144b14e94a75300589ca81697c37924393e8574cbc3c3297b5983e14a9482171f22b6c20ab6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0x7f}, 0x0, 0x0}) mount(0x0, 0x0, 0x0, 0x1000, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.168671436s ago: executing program 2 (id=1557): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x643c, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.973418502s ago: executing program 3 (id=1558): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 3.880243849s ago: executing program 2 (id=1559): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = syz_open_dev$vim2m(0x0, 0xffffffffffffff7b, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000040)={0xb000, 0x3c000}) 3.871828445s ago: executing program 9 (id=1560): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xb, 0x73}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.76144162s ago: executing program 3 (id=1561): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x80000000101008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xfecc) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c9b41, 0x8) unlink(&(0x7f0000001640)='./file0\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000540)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, r5) socket$inet6_tcp(0xa, 0x1, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/card0/oss_mixer\x00', 0x10000, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000}}) 2.788120904s ago: executing program 9 (id=1562): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x80000000101008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0xfecc) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) 2.568377839s ago: executing program 2 (id=1563): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 1.651265002s ago: executing program 3 (id=1564): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7a}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) 1.574551407s ago: executing program 9 (id=1565): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 1.497149519s ago: executing program 3 (id=1566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x0, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x2, 0x2, 0x0, 0x4, 0x1, 0x5, 0x0, 0xc4, 0x5}, {0x8000000, 0x2000, 0x4, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x3, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0xeeee0000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xc3, 0x4, 0x90, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0xff, 0x3, 0xfb, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x1, 0xf, 0x5, 0xfc, 0x3, 0xa, 0x1, 0x54, 0x1, 0xff, 0x5}, {0xeeef0000, 0x5}, {0x0, 0x9}, 0x40010000, 0x0, 0xffff1000, 0x300, 0x5, 0x2100, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x9, 0x4, 0xd7, 0x0, 0x9, 0x4, 0x4, 0x6, 0xe8, 0x69, 0x5, 0x8, 0x0, 0x856c, 0x2, 0xd4, 0x4, 0x9, 0x0, '\x00', 0x9, 0xffffffffffff8001}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) 1.45204121s ago: executing program 2 (id=1576): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7a}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r2, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) 1.373215252s ago: executing program 9 (id=1567): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r4, 0x0, 0xd, 0xfffffffffffffffe) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 1.283851768s ago: executing program 2 (id=1568): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.233614535s ago: executing program 0 (id=1569): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x643c, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.003095217s ago: executing program 3 (id=1570): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000400)={0x9, {{0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x88) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0), 0x400) fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000600), 0x8808, &(0x7f0000000840)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r7, &(0x7f00000004c0)=[{}], 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000240)) 322.021844ms ago: executing program 9 (id=1571): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000008500feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 0s ago: executing program 0 (id=1572): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xb, 0x73}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): state [ 596.428828][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.436061][ T6124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.682275][T11302] loop5: detected capacity change from 0 to 32768 [ 596.706739][T11302] jfs: Unknown parameter '' [ 597.024088][T11300] loop0: detected capacity change from 0 to 32768 [ 597.133976][T11302] loop5: detected capacity change from 0 to 256 [ 597.151057][T11110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.203222][T11302] vfat: Unknown parameter '01777777777777777777777' [ 597.222698][T11300] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 597.289109][T11300] XFS (loop0): Ending clean mount [ 597.633846][T11341] pim6reg: entered allmulticast mode [ 597.665198][T11341] loop5: detected capacity change from 0 to 256 [ 597.699601][T11110] veth0_vlan: entered promiscuous mode [ 597.857289][T11110] veth1_vlan: entered promiscuous mode [ 598.401045][T11344] pim6reg: left allmulticast mode [ 598.641699][T11110] veth0_macvtap: entered promiscuous mode [ 598.655186][T11110] veth1_macvtap: entered promiscuous mode [ 598.736094][T11110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.771863][T11110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 598.831096][ T6083] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.861884][ T6083] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.898339][ T9501] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 598.898371][ T6083] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.995550][ T5925] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 599.008294][ T6083] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.176184][ T6083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.184038][ T6083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.185572][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 599.225020][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7 [ 599.250396][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 599.369126][ T5925] usb 3-1: language id specifier not provided by device, defaulting to English [ 599.395137][ T5925] usb 3-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e [ 599.425585][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.744418][T11354] loop5: detected capacity change from 0 to 65536 [ 599.752924][ T5925] usb 3-1: Manufacturer: ‰ [ 599.761543][ T5925] usb 3-1: SerialNumber: syz [ 599.793152][ T5925] usb 3-1: config 0 descriptor?? [ 599.803710][ T6314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.813054][T11354] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 599.822290][T11354] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 599.842256][ T5925] em28xx 3-1:0.0: New device ‰ @ 480 Mbps (2013:0251, interface 0, class 0) [ 599.851707][T11354] XFS (loop5): Ending clean mount [ 599.860446][T11354] XFS (loop5): User initiated shutdown received. [ 599.867198][T11354] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:472). Shutting down filesystem. [ 599.880866][T11354] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 599.914599][ T6314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.931150][ T5925] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 600.217024][ T5925] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 600.236738][ T9395] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 600.255846][ T5925] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 600.274948][ T5925] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 600.287399][ T5925] em28xx 3-1:0.0: No AC97 audio processor [ 600.303107][ T5925] usb 3-1: USB disconnect, device number 15 [ 600.318083][ T5925] em28xx 3-1:0.0: Disconnecting em28xx [ 600.380909][ T5925] em28xx 3-1:0.0: Freeing device [ 600.382167][T11365] No buffer was provided with the request [ 600.436583][T11365] loop7: detected capacity change from 0 to 128 [ 600.443668][T11365] vfat: Unknown parameter 'nonu‡tail' [ 600.870178][T11371] loop7: detected capacity change from 0 to 512 [ 600.896511][T11371] EXT4-fs: Ignoring removed i_version option [ 600.944817][T11371] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 600.978305][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'. [ 601.117607][T11371] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 601.133199][T11371] System zones: 1-12 [ 601.143085][T11371] EXT4-fs (loop7): orphan cleanup on readonly fs [ 601.161933][T11371] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.928: invalid indirect mapped block 12 (level 1) [ 601.211757][T11371] EXT4-fs (loop7): Remounting filesystem read-only [ 601.221526][T11371] EXT4-fs (loop7): 1 truncate cleaned up [ 601.232608][T11371] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 601.263436][T11371] infiniband: Added to hash: ib_dev=ffff888076dc8000 (0)() ndev=ffff88804f626000 (14)(virt_wifi0) [ 601.278153][T11371] virt_wifi0 speed is unknown, defaulting to 1000 [ 601.289385][T11371] virt_wifi0 speed is unknown, defaulting to 1000 [ 601.312177][T11371] virt_wifi0 speed is unknown, defaulting to 1000 [ 601.318855][ T5894] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 601.341242][T11371] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 601.362004][T11371] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 601.470174][T11371] virt_wifi0 speed is unknown, defaulting to 1000 [ 601.477160][ T5894] usb 6-1: Using ep0 maxpacket: 8 [ 601.484405][ T5894] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 601.499520][T11371] virt_wifi0 speed is unknown, defaulting to 1000 [ 601.514649][ T5894] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 601.535348][T11371] virt_wifi0 speed is unknown, defaulting to 1000 [ 601.543191][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.555280][T11371] virt_wifi0 speed is unknown, defaulting to 1000 [ 601.562204][ T5894] usb 6-1: Product: syz [ 601.570387][T11371] virt_wifi0 speed is unknown, defaulting to 1000 [ 601.577028][ T5894] usb 6-1: Manufacturer: syz [ 601.582132][ T5894] usb 6-1: SerialNumber: syz [ 601.609524][ T5894] usb 6-1: config 0 descriptor?? [ 601.652546][ T5894] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 601.829559][T11369] loop0: detected capacity change from 0 to 40427 [ 601.837310][T11369] F2FS-fs (loop0): build fault injection rate: 174 [ 601.843825][T11369] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 601.851580][T11369] F2FS-fs (loop0): invalid crc value [ 601.878708][T11378] loop5: detected capacity change from 0 to 64 [ 601.921400][T11378] hfs: Unknown parameter '' [ 601.977010][T11369] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 602.005651][T11369] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 602.009453][T11110] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 602.542750][ T5894] gspca_zc3xx: reg_w_i err -110 [ 603.235616][ T5894] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 603.242010][ T5894] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 604.016201][T11378] pim6reg: entered allmulticast mode [ 604.151317][ T5893] usb 6-1: USB disconnect, device number 13 [ 604.301412][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 604.316751][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 604.325940][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 604.338697][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 604.346655][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 604.501633][T11404] virt_wifi0 speed is unknown, defaulting to 1000 [ 605.866465][T11416] netlink: 'syz.2.938': attribute type 10 has an invalid length. [ 605.998902][T11416] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 606.028752][T11400] loop7: detected capacity change from 0 to 32768 [ 606.125714][T11400] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 606.204961][T11400] XFS (loop7): Ending clean mount [ 606.375773][ T5144] Bluetooth: hci5: command tx timeout [ 606.548376][T11110] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 606.570279][ T3503] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.845147][T11404] chnl_net:caif_netlink_parms(): no params data found [ 607.167226][ T3503] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.465592][ T5144] Bluetooth: hci5: command tx timeout [ 608.677411][ T3503] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.170172][ T3503] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.306080][T11431] loop7: detected capacity change from 0 to 32768 [ 609.679697][T11404] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.706055][T11404] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.728600][T11404] bridge_slave_0: entered allmulticast mode [ 609.840602][T11404] bridge_slave_0: entered promiscuous mode [ 610.325906][T11478] loop0: detected capacity change from 0 to 1024 [ 610.468620][T11404] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.592142][ T5144] Bluetooth: hci5: command tx timeout [ 610.640157][T11404] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.776439][T11404] bridge_slave_1: entered allmulticast mode [ 610.931498][T11404] bridge_slave_1: entered promiscuous mode [ 612.146672][T11482] loop7: detected capacity change from 0 to 4096 [ 612.370888][T11484] No buffer was provided with the request [ 612.443096][T11484] loop2: detected capacity change from 0 to 128 [ 612.488581][T11484] vfat: Unknown parameter 'nonu‡tail' [ 612.565177][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.932'. [ 612.589955][T11404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.618312][ T5144] Bluetooth: hci5: command tx timeout [ 612.644629][T11478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.932'. [ 612.692947][T11478] netlink: 40 bytes leftover after parsing attributes in process `syz.0.932'. [ 612.714126][T11473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.932'. [ 612.743217][T11404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.864206][ T1331] ntfs3(loop7): ino=5, mi_enum_attr [ 614.706191][ T1319] hfsplus: b-tree write err: -5, ino 4 [ 614.865569][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 615.045285][ T3503] bridge_slave_1: left allmulticast mode [ 615.051231][ T3503] bridge_slave_1: left promiscuous mode [ 615.071580][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.083011][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 615.145422][ T24] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 615.306900][ T24] usb 8-1: config 0 has no interface number 0 [ 615.379608][ T24] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 615.536131][ T24] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 615.537864][ T3503] bridge_slave_0: left allmulticast mode [ 615.561824][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.565499][ T3503] bridge_slave_0: left promiscuous mode [ 615.576425][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.584503][ T24] usb 8-1: Product: syz [ 615.598348][ T24] usb 8-1: Manufacturer: syz [ 615.616899][ T24] usb 8-1: SerialNumber: syz [ 615.641381][ T24] usb 8-1: config 0 descriptor?? [ 615.671762][ T24] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 615.705506][ T24] em28xx 8-1:0.132: Video interface 132 found: [ 615.969580][T11518] loop0: detected capacity change from 0 to 1024 [ 616.283952][ T24] em28xx 8-1:0.132: chip ID is em2874 [ 617.193960][T11524] Mount JFS Failure: -22 [ 617.198540][T11524] jfs_mount failed w/return code = -22 [ 617.380443][ T24] em28xx 8-1:0.132: failed to read eeprom (err=-110) [ 617.399277][ T24] em28xx 8-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 617.645639][ T24] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 617.653509][ T24] em28xx 8-1:0.132: analog set to bulk mode. [ 617.675617][ T5893] em28xx 8-1:0.132: Registering V4L2 extension [ 617.697055][ T24] usb 8-1: USB disconnect, device number 2 [ 617.704330][ T24] em28xx 8-1:0.132: Disconnecting em28xx [ 617.844458][T11531] loop2: detected capacity change from 0 to 32768 [ 617.884906][T11531] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.958 (11531) [ 617.950942][ T5893] usb 8-1: Decoder not found [ 617.951810][T11531] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 617.965564][ T5893] em28xx 8-1:0.132: failed to create media graph [ 617.967965][T11531] BTRFS info (device loop2): using blake2b checksum algorithm [ 617.973676][ T5893] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 618.029734][ T5893] em28xx 8-1:0.132: Remote control support is not available for this card. [ 618.073013][ T24] em28xx 8-1:0.132: Closing input extension [ 618.103314][T11531] BTRFS info (device loop2): enabling ssd optimizations [ 618.127130][T11531] BTRFS info (device loop2): turning on async discard [ 618.142217][T11531] BTRFS info (device loop2): enabling free space tree [ 618.155008][T11531] BTRFS info (device loop2): use zstd compression, level 3 [ 618.170866][ T24] em28xx 8-1:0.132: Freeing device [ 618.304322][T11556] loop7: detected capacity change from 0 to 64 [ 618.400417][T11531] BTRFS error (device loop2): unable to set label with more than 255 bytes [ 618.660734][ T9333] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 618.986764][ T3503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.027941][ T3503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.072518][ T3503] bond0 (unregistering): Released all slaves [ 619.117875][T11404] team0: Port device team_slave_0 added [ 619.144313][T11404] team0: Port device team_slave_1 added [ 619.236901][ T3503] tipc: Disabling bearer [ 619.244308][ T3503] tipc: Left network mode [ 619.251265][ T12] hfsplus: b-tree write err: -5, ino 4 [ 619.410823][ T844] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 619.678658][ T844] usb 3-1: device descriptor read/64, error -71 [ 619.928971][T11404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.955728][T11581] loop0: detected capacity change from 0 to 1024 [ 619.961947][T11404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.005549][T11581] hfsplus: Unknown parameter 'nl80211' [ 620.011357][ T844] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 620.052035][T11404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.082097][T11566] loop5: detected capacity change from 0 to 32768 [ 620.122691][T11566] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.962 (11566) [ 620.141026][T11404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.150557][T11404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.176479][ T844] usb 3-1: device descriptor read/64, error -71 [ 620.191547][T11566] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 620.237205][T11566] BTRFS info (device loop5): using blake2b checksum algorithm [ 620.249675][T11404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.288451][ T844] usb usb3-port1: attempt power cycle [ 620.320388][T11586] netlink: 52 bytes leftover after parsing attributes in process `syz.7.967'. [ 620.562714][T11566] BTRFS info (device loop5): enabling ssd optimizations [ 620.616652][T11566] BTRFS info (device loop5): turning on async discard [ 620.623536][T11566] BTRFS info (device loop5): enabling free space tree [ 620.637354][T11566] BTRFS info (device loop5): use zlib compression, level 3 [ 620.805511][ T844] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 620.826115][ T844] usb 3-1: device descriptor read/8, error -71 [ 621.069764][ T844] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 621.131745][ T844] usb 3-1: device descriptor read/8, error -71 [ 621.255949][ T844] usb usb3-port1: unable to enumerate USB device [ 621.283567][ T3503] hsr_slave_0: left promiscuous mode [ 621.327611][ T3503] hsr_slave_1: left promiscuous mode [ 621.333833][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.357231][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.389313][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.416214][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.547159][ T3503] veth1_macvtap: left promiscuous mode [ 621.745534][T11634] loop7: detected capacity change from 0 to 40427 [ 621.765828][ T3503] veth0_macvtap: left promiscuous mode [ 621.771846][ T3503] veth1_vlan: left promiscuous mode [ 621.776191][T11635] No buffer was provided with the request [ 621.789954][ T3503] veth0_vlan: left promiscuous mode [ 621.796874][T11634] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 621.804607][T11634] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 621.815084][T11634] F2FS-fs (loop7): invalid crc value [ 621.819958][T11635] loop0: detected capacity change from 0 to 128 [ 621.898629][T11634] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 621.909963][T11635] vfat: Unknown parameter 'nonu‡tail' [ 621.931847][T11634] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 621.939100][T11634] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 623.216702][T11647] loop2: detected capacity change from 0 to 32768 [ 623.376733][T11647] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 623.472083][T11647] XFS (loop2): Ending clean mount [ 623.698677][ T3503] team0 (unregistering): Port device team_slave_1 removed [ 623.706274][ T30] audit: type=1800 audit(623.673:10): pid=11647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.974" name="file2" dev="loop2" ino=4423 res=0 errno=0 [ 623.801212][ T9333] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 623.831630][ T3503] team0 (unregistering): Port device team_slave_0 removed [ 623.955289][T11653] loop7: detected capacity change from 0 to 32768 [ 624.011013][T11653] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.973 (11653) [ 624.055969][T11653] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 624.082519][T11653] BTRFS info (device loop7): using sha256 checksum algorithm [ 624.220598][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.227956][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.318111][T11653] BTRFS info (device loop7): rebuilding free space tree [ 624.352233][T11653] BTRFS info (device loop7): disabling free space tree [ 624.365874][T11653] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 624.385779][T11653] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 624.421304][T11653] BTRFS info (device loop7): enabling ssd optimizations [ 624.435730][T11653] BTRFS info (device loop7): turning on async discard [ 624.442542][T11653] BTRFS info (device loop7): force clearing of disk cache [ 624.465595][T11653] BTRFS info (device loop7): enabling auto defrag [ 624.472055][T11653] BTRFS info (device loop7): max_inline set to 4096 [ 624.675029][T11663] loop2: detected capacity change from 0 to 40427 [ 624.682655][T11663] F2FS-fs: heap/no_heap options were deprecated [ 625.190445][T11663] F2FS-fs (loop2): build fault injection rate: 23 [ 625.217041][T11663] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 625.226741][T11663] F2FS-fs (loop2): invalid crc value [ 625.326480][T11663] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 625.342170][T11110] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 625.520073][T11663] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 625.568876][T11663] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 625.595128][T11663] F2FS-fs (loop2): inject dquot initialize in f2fs_dquot_initialize of f2fs_mkdir+0x159/0x5e0 [ 625.840344][T11404] hsr_slave_0: entered promiscuous mode [ 625.857229][T11404] hsr_slave_1: entered promiscuous mode [ 626.425524][ T5957] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 626.590931][ T3503] IPVS: stop unused estimator thread 0... [ 626.605508][ T5957] usb 8-1: Using ep0 maxpacket: 8 [ 626.620491][ T5957] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 626.642080][ T5957] usb 8-1: config 0 has no interface number 0 [ 626.667336][ T5957] usb 8-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 626.685733][ T5957] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 626.696842][T11702] pim6reg: entered allmulticast mode [ 626.706072][ T5957] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 626.716317][ T5957] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 626.725371][ T5957] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.757185][ T9333] F2FS-fs (loop2): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab4/0x1cf0 [ 626.821983][ T9333] F2FS-fs (loop2): inconsistent node block, node_type:3, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0] [ 626.835147][ T5957] usb 8-1: config 0 descriptor?? [ 626.865726][ T5957] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 626.888153][T11404] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 626.932228][T11628] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 627.079191][T11696] iowarrior 8-1:0.1: Error -90 while submitting URB [ 627.155722][T11404] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 627.201370][T11404] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 627.298144][T11404] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 627.542761][ T3503] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.610634][ T5828] usb 8-1: USB disconnect, device number 3 [ 628.129957][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 628.142286][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 628.152015][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 628.160571][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 628.178179][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 628.351834][T11708] loop0: detected capacity change from 0 to 32768 [ 628.493518][T11708] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 628.697630][T11708] XFS (loop0): Ending clean mount [ 628.711407][ T3503] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.912137][ T3503] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.048823][ T3503] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.115665][ T30] audit: type=1800 audit(629.083:11): pid=11750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.985" name="file2" dev="loop0" ino=4423 res=0 errno=0 [ 629.205196][T11738] virt_wifi0 speed is unknown, defaulting to 1000 [ 629.324335][T11753] netlink: 8 bytes leftover after parsing attributes in process `syz.7.989'. [ 629.596400][T11404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.697926][ T9501] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 629.769749][T11404] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.810113][ T3503] bridge_slave_1: left allmulticast mode [ 629.822678][ T3503] bridge_slave_1: left promiscuous mode [ 629.857935][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.919956][ T3503] bridge_slave_0: left allmulticast mode [ 629.938671][ T3503] bridge_slave_0: left promiscuous mode [ 629.945113][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.228354][ T5837] Bluetooth: hci1: command tx timeout [ 630.952162][T11779] No buffer was provided with the request [ 630.976840][T11779] loop0: detected capacity change from 0 to 128 [ 631.042469][T11779] vfat: Unknown parameter 'nonu‡tail' [ 632.107349][T11785] loop7: detected capacity change from 0 to 4096 [ 632.327019][ T5837] Bluetooth: hci1: command tx timeout [ 632.339051][T11785] ntfs3(loop7): ino=0, ni_load_mi_ex [ 632.344476][T11785] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 632.357258][T11785] ntfs3(loop7): volume is dirty and "force" flag is not set! [ 632.465064][ T3503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.588136][ T3503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.620446][ T3503] bond0 (unregistering): Released all slaves [ 632.672420][T11787] batadv0: entered promiscuous mode [ 632.689745][T11787] vlan2: entered promiscuous mode [ 632.992227][ T6253] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.999477][ T6253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.705087][T11795] loop0: detected capacity change from 0 to 128 [ 633.721491][T11795] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 633.790462][T11795] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 634.341187][ T6253] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.348385][ T6253] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.358374][ T6253] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 634.455873][ T5837] Bluetooth: hci1: command tx timeout [ 634.919212][T11738] chnl_net:caif_netlink_parms(): no params data found [ 634.997874][T11811] capability: warning: `syz.0.998' uses deprecated v2 capabilities in a way that may be insecure [ 635.355970][ T5938] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 635.411215][ T3503] hsr_slave_0: left promiscuous mode [ 635.436312][ T3503] hsr_slave_1: left promiscuous mode [ 635.443427][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.472471][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.483690][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.502799][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.510641][ T5938] usb 1-1: Using ep0 maxpacket: 16 [ 635.530208][ T5938] usb 1-1: config 1 has an invalid interface number: 209 but max is 0 [ 635.548534][ T5938] usb 1-1: config 1 has no interface number 0 [ 635.554667][ T5938] usb 1-1: config 1 interface 209 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 635.585553][ T5894] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 635.598649][ T3503] veth1_macvtap: left promiscuous mode [ 635.604215][ T3503] veth0_macvtap: left promiscuous mode [ 635.613351][ T5938] usb 1-1: config 1 interface 209 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 635.644042][ T3503] veth1_vlan: left promiscuous mode [ 635.649552][ T5938] usb 1-1: config 1 interface 209 has no altsetting 0 [ 635.664243][ T3503] veth0_vlan: left promiscuous mode [ 635.671984][ T5938] usb 1-1: New USB device found, idVendor=8086, idProduct=07d3, bcdDevice=7e.e9 [ 635.698842][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.725729][ T5938] usb 1-1: Product: syz [ 635.729930][ T5938] usb 1-1: Manufacturer: syz [ 635.734526][ T5938] usb 1-1: SerialNumber: syz [ 635.761532][ T5894] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 635.773054][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.795500][T11811] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 635.809229][ T5894] usb 8-1: config 0 descriptor?? [ 635.825930][T11811] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 635.837412][ T5894] cp210x 8-1:0.0: cp210x converter detected [ 636.044055][ T3503] pim6reg (unregistering): left allmulticast mode [ 636.059827][T11811] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 636.096246][T11811] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 636.319782][T11811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.357329][T11811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.535526][ T5837] Bluetooth: hci1: command tx timeout [ 636.632367][T11815] loop7: detected capacity change from 0 to 32768 [ 636.652162][T11721] Set syz1 is full, maxelem 65536 reached [ 636.659400][T11815] btrfs: Deprecated parameter 'usebackuproot' [ 636.716523][T11815] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 636.756410][T11815] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.999 (11815) [ 636.879726][T11815] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 636.990717][T11815] BTRFS info (device loop7): using sha256 checksum algorithm [ 637.051822][T11832] loop2: detected capacity change from 0 to 128 [ 637.068465][T11832] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 637.142809][T11832] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 637.867587][ T6122] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 637.897316][T11841] loop0: detected capacity change from 0 to 1024 [ 637.934673][T11841] EXT4-fs (loop0): filesystem is read-only [ 638.005668][T11841] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 638.025846][T11841] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 638.089313][T11841] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 638.105642][T11841] EXT4-fs error (device loop0): ext4_get_journal_inode:5849: comm syz.0.1001: inode #1: comm syz.0.1001: iget: illegal inode # [ 638.146599][T11841] EXT4-fs (loop0): no journal found [ 638.151838][T11841] EXT4-fs (loop0): can't get journal size [ 638.166166][T11841] EXT4-fs error (device loop0): __ext4_fill_super:5553: inode #2: comm syz.0.1001: iget: bad extra_isize 65535 (inode size 1024) [ 638.183177][T11815] BTRFS info (device loop7): rebuilding free space tree [ 638.196569][T11841] EXT4-fs (loop0): get root inode failed [ 638.221572][T11841] EXT4-fs (loop0): mount failed [ 638.263958][T11815] BTRFS info (device loop7): checking UUID tree [ 638.295485][T11815] BTRFS info (device loop7): enabling ssd optimizations [ 638.296689][T11841] fuseblk: block size(16384) > page size(4096) not supported by filesystem [ 638.302488][T11815] BTRFS info (device loop7): turning on async discard [ 638.302509][T11815] BTRFS info (device loop7): enabling free space tree [ 638.302522][T11815] BTRFS info (device loop7): force clearing of disk cache [ 638.375569][T11815] BTRFS info (device loop7): trying to use backup root at mount time [ 638.398214][T11862] No buffer was provided with the request [ 638.407868][T11862] loop2: detected capacity change from 0 to 128 [ 638.428885][T11862] vfat: Unknown parameter 'nonu‡tail' [ 638.509564][ T5894] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 638.542729][ T3503] team0 (unregistering): Port device team_slave_1 removed [ 638.550567][ T5894] cp210x 8-1:0.0: querying part number failed [ 638.566475][T11110] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 638.591878][ T5894] usb 8-1: cp210x converter now attached to ttyUSB0 [ 638.636788][ T5894] usb 8-1: USB disconnect, device number 4 [ 638.696807][ T5894] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 638.743417][ T5894] cp210x 8-1:0.0: device disconnected [ 638.805353][ T3503] team0 (unregistering): Port device team_slave_0 removed [ 638.849920][T11872] loop7: detected capacity change from 0 to 256 [ 638.944986][T11872] FAT-fs (loop7): Directory bread(block 64) failed [ 638.957125][T11872] FAT-fs (loop7): Directory bread(block 65) failed [ 638.967717][T11872] FAT-fs (loop7): Directory bread(block 66) failed [ 638.974451][T11872] FAT-fs (loop7): Directory bread(block 67) failed [ 638.986538][T11872] FAT-fs (loop7): Directory bread(block 68) failed [ 638.993739][T11872] FAT-fs (loop7): Directory bread(block 69) failed [ 639.000914][T11872] FAT-fs (loop7): Directory bread(block 70) failed [ 639.007883][T11872] FAT-fs (loop7): Directory bread(block 71) failed [ 639.014620][T11872] FAT-fs (loop7): Directory bread(block 72) failed [ 639.037416][T11872] FAT-fs (loop7): Directory bread(block 73) failed [ 639.045074][T11874] loop0: detected capacity change from 0 to 4096 [ 639.617339][T11876] loop0: detected capacity change from 0 to 32768 [ 639.652915][T11876] [ 639.652915][T11876] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 639.652915][T11876] [ 639.710039][T11874] ialloc: diAlloc returned -5! [ 639.722672][T11868] syz.7.1005: attempt to access beyond end of device [ 639.722672][T11868] loop7: rw=8912896, sector=1192, nr_sectors = 4 limit=256 [ 639.744877][T11876] 9p: Bad value for 'rfdno' [ 639.748102][T11868] syz.7.1005: attempt to access beyond end of device [ 639.748102][T11868] loop7: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 639.771732][T11872] syz.7.1005: attempt to access beyond end of device [ 639.771732][T11872] loop7: rw=8388608, sector=1192, nr_sectors = 4 limit=256 [ 639.773290][ T30] audit: type=1800 audit(639.743:12): pid=11868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1005" name="file1" dev="loop7" ino=1048742 res=0 errno=0 [ 639.805880][ T30] audit: type=1800 audit(639.743:13): pid=11872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1005" name="file1" dev="loop7" ino=1048742 res=0 errno=0 [ 640.243647][ T5938] cdc_subset 1-1:1.209 usb0: register 'cdc_subset' at usb-dummy_hcd.0-1, Boot Loader OBject, be:0e:c0:2c:66:c6 [ 640.274920][ T5938] usb 1-1: USB disconnect, device number 12 [ 640.303508][ T5938] cdc_subset 1-1:1.209 usb0: unregister 'cdc_subset' usb-dummy_hcd.0-1, Boot Loader OBject [ 640.369759][T11738] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.386345][T11738] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.397422][T11738] bridge_slave_0: entered allmulticast mode [ 640.406001][T11738] bridge_slave_0: entered promiscuous mode [ 640.465262][T11738] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.476623][T11738] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.483991][T11738] bridge_slave_1: entered allmulticast mode [ 640.501060][T11738] bridge_slave_1: entered promiscuous mode [ 640.593471][T11738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.669254][T11738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.692136][ T9501] [ 640.692136][ T9501] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 640.692136][ T9501] [ 640.812007][ T9501] [ 640.812007][ T9501] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 640.812007][ T9501] [ 641.413384][ T3503] IPVS: stop unused estimator thread 0... [ 641.459811][T11738] team0: Port device team_slave_0 added [ 641.510711][T11738] team0: Port device team_slave_1 added [ 641.611659][T11738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.657280][T11738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.730823][T11738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.783008][T11738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.820575][T11738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.875524][T11738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.938798][ T5144] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 641.957570][ T5144] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 641.966092][ T5144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 641.974032][ T5144] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 641.981863][ T5144] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 642.015678][ T5938] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 642.193439][ T3503] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.205208][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 642.213889][ T5938] usb 1-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 642.229630][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.261968][ T5938] usb 1-1: config 0 descriptor?? [ 642.344702][T11738] hsr_slave_0: entered promiscuous mode [ 642.368396][T11738] hsr_slave_1: entered promiscuous mode [ 642.384635][T11738] debugfs: 'hsr0' already exists in 'hsr' [ 642.392712][T11738] Cannot create hsr debugfs directory [ 642.502681][ T3503] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.614169][T11908] virt_wifi0 speed is unknown, defaulting to 1000 [ 642.632810][T11404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.706465][ T5938] a4tech 0003:09DA:001A.0006: hidraw0: USB HID v0.05 Device [HID 09da:001a] on usb-dummy_hcd.0-1/input0 [ 642.862788][ T3503] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.908634][ T844] usb 1-1: USB disconnect, device number 13 [ 643.043054][ T3503] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.435839][ T5938] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 643.615590][ T5938] usb 3-1: Using ep0 maxpacket: 32 [ 643.627132][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.629490][T11908] chnl_net:caif_netlink_parms(): no params data found [ 643.643836][ T5938] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 643.657715][ T5938] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a57, bcdDevice= 0.00 [ 643.668358][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.682039][ T5938] usb 3-1: config 0 descriptor?? [ 643.705829][T11933] tipc: Started in network mode [ 643.710724][T11933] tipc: Node identity fae669b9dafe, cluster identity 4711 [ 643.718318][T11933] tipc: Enabled bearer , priority 0 [ 643.736477][T11932] tipc: Resetting bearer [ 644.061508][ T5144] Bluetooth: hci0: command tx timeout [ 644.122319][ T5938] hid-corsair-void 0003:1B1C:0A57.0007: unknown main item tag 0x0 [ 644.130530][ T5938] hid-corsair-void 0003:1B1C:0A57.0007: unknown main item tag 0x0 [ 644.150405][ T5938] hid-corsair-void 0003:1B1C:0A57.0007: unknown main item tag 0x0 [ 644.182533][ T5938] hid-corsair-void 0003:1B1C:0A57.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:0a57] on usb-dummy_hcd.2-1/input0 [ 644.322655][ T6123] usb 3-1: USB disconnect, device number 20 [ 644.323991][ T5938] hid-corsair-void 0003:1B1C:0A57.0007: failed to request battery (reason: -71) [ 644.354777][ T5894] hid-corsair-void 0003:1B1C:0A57.0007: failed to request firmware (reason: -19) [ 645.945594][T11932] tipc: Disabling bearer [ 645.974679][ T3503] bridge_slave_1: left allmulticast mode [ 645.987080][ T3503] bridge_slave_1: left promiscuous mode [ 645.992880][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.020092][ T3503] bridge_slave_0: left allmulticast mode [ 646.033296][ T3503] bridge_slave_0: left promiscuous mode [ 646.040336][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.075883][T11948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1025'. [ 646.135520][ T5144] Bluetooth: hci0: command tx timeout [ 646.769457][ T3503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 646.788824][ T3503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 646.800323][ T3503] bond0 (unregistering): Released all slaves [ 646.833166][ T844] tipc: Node number set to 538470841 [ 646.912079][T11948] team_slave_0: entered promiscuous mode [ 646.918019][T11948] team_slave_1: entered promiscuous mode [ 646.970828][T11948] macsec1: entered allmulticast mode [ 646.985521][T11948] team0: entered allmulticast mode [ 646.990681][T11948] team_slave_0: entered allmulticast mode [ 647.065542][T11948] team_slave_1: entered allmulticast mode [ 647.077731][T11948] team0: Device macsec1 is already an upper device of the team interface [ 647.133213][T11948] team0: left allmulticast mode [ 647.141208][T11948] team_slave_0: left allmulticast mode [ 647.148581][T11948] team_slave_1: left allmulticast mode [ 647.154271][T11948] team_slave_0: left promiscuous mode [ 647.159753][T11948] team_slave_1: left promiscuous mode [ 647.234530][T11738] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 647.312559][T11738] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 647.356306][T11738] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 647.381470][T11738] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 648.026654][T11404] veth0_vlan: entered promiscuous mode [ 648.040610][T11404] veth1_vlan: entered promiscuous mode [ 648.212713][T11908] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.220774][ T5144] Bluetooth: hci0: command tx timeout [ 648.230319][T11908] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.246289][T11908] bridge_slave_0: entered allmulticast mode [ 648.254904][T11908] bridge_slave_0: entered promiscuous mode [ 648.301343][T11404] veth0_macvtap: entered promiscuous mode [ 648.700259][ T3503] hsr_slave_0: left promiscuous mode [ 648.711166][ T3503] hsr_slave_1: left promiscuous mode [ 648.718796][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.729300][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.751832][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.759736][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.797177][ T3503] veth1_macvtap: left promiscuous mode [ 648.808750][ T3503] veth0_macvtap: left promiscuous mode [ 648.814716][ T3503] veth1_vlan: left promiscuous mode [ 648.821376][ T3503] veth0_vlan: left promiscuous mode [ 649.216485][ T67] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888076dc8000 (7)(syz0) start [ 649.332143][ T67] infiniband: Removed from hash: ib_dev=ffff888076dc8000 (0)(syz0) ndev=ffff88804f626000 (4)(virt_wifi0) [ 649.369884][ T67] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888076dc8000 (0)(syz0) end [ 650.237417][ T3503] team0 (unregistering): Port device team_slave_1 removed [ 650.293531][ T3503] team0 (unregistering): Port device team_slave_0 removed [ 650.302958][ T5144] Bluetooth: hci0: command tx timeout [ 650.939319][T11908] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.946647][T11908] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.953857][T11908] bridge_slave_1: entered allmulticast mode [ 650.961213][T11908] bridge_slave_1: entered promiscuous mode [ 651.113572][T11404] veth1_macvtap: entered promiscuous mode [ 651.244142][T11404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.468350][T11908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.537121][T11404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.560246][T11908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 652.613749][T11908] team0: Port device team_slave_0 added [ 652.632165][ T6083] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.650483][T11908] team0: Port device team_slave_1 added [ 652.677567][ T6083] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.686859][ T6083] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.703519][T11908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.712176][T11908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.742564][T11908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.757028][ T6083] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.810597][T11908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.817741][T11908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.843954][T11908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.039315][T11908] hsr_slave_0: entered promiscuous mode [ 653.047128][T11908] hsr_slave_1: entered promiscuous mode [ 653.053789][T11908] debugfs: 'hsr0' already exists in 'hsr' [ 653.060048][T11908] Cannot create hsr debugfs directory [ 653.072640][T11738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.108565][ T9216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.129420][ T9216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.136656][T11738] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.225668][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.232914][ T6124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.304683][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.311940][ T6124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.347097][T12038] block nbd0: shutting down sockets [ 653.398174][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.445526][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.641687][T12060] netlink: 'syz.2.1039': attribute type 1 has an invalid length. [ 653.728671][T12060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1039'. [ 654.682020][T11738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 654.691240][T12070] loop8: detected capacity change from 0 to 2048 [ 654.754702][T12070] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 654.784377][T12070] NILFS (loop8): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments) [ 656.602542][T11738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.738151][ T5828] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 656.865975][T10258] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 656.869883][T11908] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 656.903816][T11908] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 656.916612][ T5828] usb 3-1: Using ep0 maxpacket: 32 [ 656.973393][ T5828] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 656.987512][T11908] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 657.002988][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.010173][T11908] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 657.029657][ T5828] usb 3-1: Product: syz [ 657.046716][ T5828] usb 3-1: Manufacturer: syz [ 657.051342][ T5828] usb 3-1: SerialNumber: syz [ 657.065545][T10258] usb 9-1: Using ep0 maxpacket: 32 [ 657.073201][T10258] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.088087][ T5828] usb 3-1: config 0 descriptor?? [ 657.103508][T10258] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.122076][T10258] usb 9-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 657.144231][T10258] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.167461][T10258] usb 9-1: config 0 descriptor?? [ 657.728431][ T5828] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 021 [ 657.756342][T10258] ft260 0003:0403:6030.0008: unknown main item tag 0x7 [ 657.810482][T11738] veth0_vlan: entered promiscuous mode [ 657.857885][T10258] ft260 0003:0403:6030.0008: chip code: 6424 8183 [ 657.877403][T11738] veth1_vlan: entered promiscuous mode [ 658.000600][T11908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.047345][T11738] veth0_macvtap: entered promiscuous mode [ 658.057283][T10258] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0 [ 658.059717][T11908] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.092747][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.099952][ T5979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.110406][T11738] veth1_macvtap: entered promiscuous mode [ 658.134279][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.141523][ T5979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.185007][T12088] i2c i2c-1: failure sending STOP [ 658.201830][T12130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1050'. [ 658.212917][T12130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1050'. [ 658.225994][ T5925] usb 3-1: USB disconnect, device number 21 [ 658.259816][T10258] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup [ 658.350113][T11738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.402186][T11738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.454542][ T9828] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.470474][ T9828] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.493358][T12092] ft260 0003:0403:6030.0008: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 658.585424][ T9828] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.618109][ T9828] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.771653][ T3944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.914565][T12092] ft260 0003:0403:6030.0008: failed to reset I2C controller: -108 [ 658.946668][ T3944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.022345][ T5979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.034748][ T5979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.432428][T11908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.520111][T12151] loop9: detected capacity change from 0 to 4096 [ 659.713168][T11908] veth0_vlan: entered promiscuous mode [ 659.856222][ T29] usb 9-1: USB disconnect, device number 2 [ 659.861396][T11908] veth1_vlan: entered promiscuous mode [ 660.205167][T11908] veth0_macvtap: entered promiscuous mode [ 660.358759][T11908] veth1_macvtap: entered promiscuous mode [ 660.425287][T11908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.440699][ T67] ntfs3(loop9): ino=5, mi_enum_attr [ 660.448548][ T67] ntfs3(loop9): ino=5, mi_enum_attr [ 660.489603][T11908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.489699][ T67] ntfs3(loop9): ino=5, mi_enum_attr [ 660.664031][T12165] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1054'. [ 660.810623][ T9216] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.838285][ T9216] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.891750][ T9216] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.180571][ T9216] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.308990][ T3944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.365545][ T3944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.448125][ T6314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.469262][ T6314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.884237][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1058'. [ 664.405691][ T5828] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 664.840990][ T5828] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 65535, setting to 1024 [ 664.852807][ T5828] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 664.862839][ T5828] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 664.880339][ T5828] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 664.890550][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 664.901201][ T5828] usb 2-1: Product: syz [ 665.428792][ T5828] usb 2-1: Manufacturer: syz [ 665.433516][ T5828] usb 2-1: SerialNumber: syz [ 665.490516][T12192] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 665.750201][ T5828] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 665.995186][ C1] usblp0: nonzero write bulk status received: -71 [ 666.013943][ T5893] usb 2-1: USB disconnect, device number 2 [ 666.058174][ T5893] usblp0: removed [ 666.138004][ T29] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 666.658446][ T29] usb 10-1: Using ep0 maxpacket: 16 [ 667.702141][ T29] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.712786][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 667.724350][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 667.734211][ T29] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 667.746710][ T29] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 667.766710][ T29] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 667.781709][ T29] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 667.795012][ T29] usb 10-1: Manufacturer: syz [ 667.825088][T12246] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size. [ 667.875295][ T29] usb 10-1: config 0 descriptor?? [ 668.785639][ T29] rc_core: IR keymap rc-hauppauge not found [ 668.792874][ T29] Registered IR keymap rc-empty [ 668.823037][ T29] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 668.830138][T12254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1072'. [ 668.887018][ T29] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 668.924340][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 668.983005][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input9 [ 669.038446][ T29] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 669.075858][ T29] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 669.103251][T12261] infiniband: Added to hash: ib_dev=ffff888056984000 (0)() ndev=ffff888030d98000 (22)(syz_tun) [ 669.109286][ T29] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 669.197014][ T29] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 669.266759][ T29] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 669.311679][T12268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1076'. [ 669.336598][ T29] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 669.377860][ T29] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 669.457663][ T29] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 669.515545][ T29] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 669.618284][ T29] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 669.790423][ T29] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 669.816357][ T29] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 669.848652][ T29] usb 10-1: USB disconnect, device number 2 [ 669.937765][T12268] team1: entered promiscuous mode [ 669.951612][T12268] team1: entered allmulticast mode [ 670.102196][T12279] kvm: Disabled LAPIC found during irq injection [ 673.514864][T12261] infiniband syz1: set active [ 673.561152][T12261] infiniband syz1: added syz_tun [ 673.679602][T12261] RDS/IB: syz1: added [ 673.684559][T12261] smc: adding ib device syz1 with port count 1 [ 673.751495][T12261] smc: ib device syz1 port 1 has no pnetid [ 674.362135][T12330] [U]  [ 674.365258][T12330] [U] K{‘ [ 674.369237][T12330] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 674.380393][T12330] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 674.397552][T12330] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 674.414534][T12330] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 674.460995][T12330] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 674.487403][T12330] [U] ܾ˜4B`Ë—HÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 674.501441][T12330] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 674.516927][T12330] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`Ʀ\ [ 674.622791][T12330] [U] M¢XÎÂ"Ä{;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 674.634235][T12330] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 674.648075][T12330] [U] 22½“Æ©ÐÛ©X?0;3U± [ 674.652960][T12330] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 674.679785][T12330] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 674.689477][T12330] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 674.698337][T12330] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 674.704882][T12330] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 674.717313][T12330] [U] ¹ EC [ 674.720781][T12330] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 674.852614][T12322] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 677.998907][T12366] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 678.637406][T12376] futex_wake_op: syz.8.1097 tries to shift op by -1; fix this program [ 679.991752][T12382] team_slave_0: entered promiscuous mode [ 679.997806][T12382] team_slave_1: entered promiscuous mode [ 682.744786][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1100'. [ 685.186242][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 685.229345][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 685.238326][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 685.257272][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 685.264904][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 685.586890][ T5893] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 685.676229][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.682658][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.765750][ T5893] usb 3-1: Using ep0 maxpacket: 32 [ 685.772922][ T5893] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 685.791402][ T5893] usb 3-1: config 0 has no interface number 0 [ 685.810215][ T5893] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 685.831166][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.860744][ T5893] usb 3-1: Product: syz [ 685.893599][ T5893] usb 3-1: Manufacturer: syz [ 685.918781][ T5893] usb 3-1: SerialNumber: syz [ 685.940231][ T5893] usb 3-1: config 0 descriptor?? [ 685.964307][ T5893] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 686.156109][ T5893] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 686.214391][ T5893] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 686.357493][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 100 [ 686.507869][T12437] ntfs3(nullb0): Primary boot signature is not NTFS. [ 686.515005][T12437] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 686.572366][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 686.584859][ T5893] usb 3-1: USB disconnect, device number 22 [ 686.950541][ T5893] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 687.095317][ T5893] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 687.125778][ T5893] quatech2 3-1:0.51: device disconnected [ 687.246560][ T844] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 687.337498][ T5144] Bluetooth: hci4: command tx timeout [ 687.431516][ T844] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.524253][ T844] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 687.569500][ T844] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 687.601136][ T844] usb 10-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 687.650713][ T844] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 687.675378][ T844] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.782164][ T844] usb 10-1: Product: syz [ 687.799603][ T844] usb 10-1: Manufacturer: syz [ 687.817411][ T844] usb 10-1: SerialNumber: syz [ 687.864644][T12440] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 687.932703][ T844] cdc_mbim 10-1:1.0: skipping garbage [ 688.213058][T12459] delete_channel: no stack [ 688.962194][ T844] cdc_mbim 10-1:1.0: bind() failure [ 689.006361][ T844] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 689.025682][ T844] cdc_ncm 10-1:1.1: bind() failure [ 689.084062][ T844] usb 10-1: USB disconnect, device number 3 [ 689.416413][ T5144] Bluetooth: hci4: command tx timeout [ 689.872479][ T67] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056984000 (13)(syz1) rdma_ndev=ffff888030d98000 (21)(syz_tun) cookie=ffff888030d98000 (21)(syz_tun) start [ 689.892691][ T3944] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056984000 (13)(syz1) start [ 689.963747][T12480] netlink: 'syz.8.1115': attribute type 1 has an invalid length. [ 689.971684][T12480] netlink: 1828 bytes leftover after parsing attributes in process `syz.8.1115'. [ 689.995567][ T67] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056984000 (13)(syz1) rdma_ndev=ffff888030d98000 (13)(syz_tun) cookie=ffff888030d98000 (13)(syz_tun) end [ 690.033048][ T6123] syz1: Port: 1 Link DOWN [ 690.058432][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1117'. [ 690.069680][T12419] chnl_net:caif_netlink_parms(): no params data found [ 690.077223][ T3944] smc: removing ib device syz1 [ 690.470831][T12495] netlink: 'syz.8.1120': attribute type 21 has an invalid length. [ 690.479291][T12495] IPv6: NLM_F_CREATE should be specified when creating new route [ 690.488857][T12495] netlink: 'syz.8.1120': attribute type 1 has an invalid length. [ 691.496023][ T5144] Bluetooth: hci4: command tx timeout [ 693.575549][ T5144] Bluetooth: hci4: command tx timeout [ 695.036751][T12555] input: syz1 as /devices/virtual/input/input12 [ 696.283550][T12419] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.331689][T12419] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.387541][T12419] bridge_slave_0: entered allmulticast mode [ 696.473866][T12419] bridge_slave_0: entered promiscuous mode [ 696.507481][T12419] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.529083][T12419] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.561339][T12419] bridge_slave_1: entered allmulticast mode [ 696.635559][ T7382] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 696.694957][T12419] bridge_slave_1: entered promiscuous mode [ 696.895506][ T7382] usb 9-1: Using ep0 maxpacket: 8 [ 696.938373][T12419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.986301][T12419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.142786][ T7382] usb 9-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 697.192746][T12419] team0: Port device team_slave_0 added [ 697.213996][T12419] team0: Port device team_slave_1 added [ 697.238165][ T7382] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.315539][ T7382] usb 9-1: Product: syz [ 697.325796][ T7382] usb 9-1: Manufacturer: syz [ 697.392303][ T3944] infiniband: Removed from hash: ib_dev=ffff888056984000 (0)(syz1) ndev=ffff888030d98000 (2)(syz_tun) [ 697.420507][ T7382] usb 9-1: SerialNumber: syz [ 697.499161][T12568] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 697.546287][ T7382] usb 9-1: config 0 descriptor?? [ 697.762386][T12576] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1136'. [ 697.789746][ T7382] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 697.889045][T12419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.897505][T12419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.924495][T12419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.008270][ T3944] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056984000 (0)(syz1) end [ 698.025646][ T844] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 698.162491][ T6956] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.187653][ T844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 698.215642][ T844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 8 [ 698.238275][ T844] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 698.258315][ T844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.300798][ T844] usb 1-1: config 0 descriptor?? [ 698.319080][T12578] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 698.362694][T12419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.379199][T12419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 698.465560][T12419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.587132][ T844] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 698.614199][ T6956] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.753863][ T844] usb 1-1: USB disconnect, device number 14 [ 698.857357][ T6956] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.952275][T12419] hsr_slave_0: entered promiscuous mode [ 698.961253][T12419] hsr_slave_1: entered promiscuous mode [ 698.975761][T12419] debugfs: 'hsr0' already exists in 'hsr' [ 698.989309][T12419] Cannot create hsr debugfs directory [ 698.997802][T12607] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 699.184771][ T6956] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.259899][ T7382] gspca_sunplus: reg_r err -71 [ 699.264785][ T7382] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 699.293661][ T7382] usb 9-1: USB disconnect, device number 3 [ 702.594391][T12648] loop2: detected capacity change from 0 to 7 [ 702.611918][T12648] Dev loop2: unable to read RDB block 7 [ 702.634587][T12648] loop2: AHDI p2 p3 [ 702.654843][T12648] loop2: partition table partially beyond EOD, truncated [ 702.667931][T12648] loop2: p3 start 335544320 is beyond EOD, truncated [ 702.804911][ T6956] bridge_slave_1: left allmulticast mode [ 702.852481][ T6956] bridge_slave_1: left promiscuous mode [ 702.878925][ T6956] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.594341][ T6956] bridge_slave_0: left allmulticast mode [ 703.604304][ T6956] bridge_slave_0: left promiscuous mode [ 703.620516][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.650903][ T30] audit: type=1804 audit(705.623:14): pid=12690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1160" name="/newroot/161/file0" dev="tmpfs" ino=905 res=1 errno=0 [ 705.689008][ T6956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.709395][ T6956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.722226][ T6956] bond0 (unregistering): Released all slaves [ 705.776440][T12655] : entered promiscuous mode [ 706.352043][T12704] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 707.933609][ T30] audit: type=1800 audit(707.823:15): pid=12730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1168" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 708.155289][ T6956] hsr_slave_0: left promiscuous mode [ 708.199569][ T6956] hsr_slave_1: left promiscuous mode [ 708.219237][ T6956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.245703][ T6956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.319301][ T6956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 708.333174][ T6956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.413809][ T6956] veth1_macvtap: left promiscuous mode [ 708.445689][ T6956] veth0_macvtap: left promiscuous mode [ 708.461731][ T6956] veth1_vlan: left promiscuous mode [ 708.475821][ T6956] veth0_vlan: left promiscuous mode [ 710.177583][ T6956] team0 (unregistering): Port device team_slave_1 removed [ 710.296238][ T6956] team0 (unregistering): Port device team_slave_0 removed [ 711.287377][T12741] netlink: 830 bytes leftover after parsing attributes in process `syz.9.1173'. [ 711.693689][T12789] infiniband: Added to hash: ib_dev=ffff88807ba28000 (0)() ndev=ffff888068428000 (22)(syz_tun) [ 712.296173][T12789] infiniband syz2: set active [ 712.300942][T12789] infiniband syz2: added syz_tun [ 712.310329][T12789] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 712.313156][T12789] infiniband syz2: Couldn't open port 1 [ 712.353717][T12789] RDS/IB: syz2: added [ 712.359096][T12789] smc: adding ib device syz2 with port count 1 [ 712.365335][T12789] smc: ib device syz2 port 1 has no pnetid [ 712.680429][T12419] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 712.877203][T12419] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 713.026175][T12419] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 713.649239][T12419] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 713.759767][ T1319] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (25)(syz_tun) cookie=ffff888078768000 (5)(syzkaller1) start [ 713.888784][ T1319] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (25)(syz_tun) cookie=ffff888078768000 (3)(syzkaller1) end [ 714.172522][T12419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.194112][T12419] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.842124][ T9828] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.849325][ T9828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.901160][ T9828] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.908435][ T9828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.918393][T12419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.080321][T12419] veth0_vlan: entered promiscuous mode [ 716.120928][T12419] veth1_vlan: entered promiscuous mode [ 716.198310][T12419] veth0_macvtap: entered promiscuous mode [ 716.228412][T12419] veth1_macvtap: entered promiscuous mode [ 716.264023][T12419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.307280][T12419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.357500][ T6124] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.416990][ T6124] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.487639][ T6124] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.686638][ T6124] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.340363][ T6124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.362870][ T6124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.876101][ T6122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.884012][ T6122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.935512][T12876] random: crng reseeded on system resumption [ 724.564878][ T6124] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888030e90000 (21)(syz_tun) start [ 726.208067][T12958] netlink: 'syz.0.1209': attribute type 9 has an invalid length. [ 726.960838][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 726.970860][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 726.978855][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 726.986560][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 726.993991][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 727.041599][ T6124] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888030e90000 (4)(syz_tun) end [ 727.315836][ T6083] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (28)(syz_tun) cookie=ffff88807a548000 (13)(netdevsim3) start [ 727.473090][ T3503] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.493459][ T6083] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (28)(syz_tun) cookie=ffff88807a548000 (7)(netdevsim3) end [ 729.098629][ T5837] Bluetooth: hci0: command tx timeout [ 729.124338][ T5979] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888068c24000 (14)(netdevsim2) start [ 729.142813][ T3503] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.191986][ T5979] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888068c24000 (5)(netdevsim2) end [ 731.004784][ T6083] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88802ed08000 (16)(netdevsim1) start [ 731.027649][ T6083] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88802ed08000 (11)(netdevsim1) end [ 731.031407][ T3503] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.175692][ T5837] Bluetooth: hci0: command tx timeout [ 731.462270][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880687ac000 (13)(netdevsim0) start [ 731.480365][ T3503] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.548791][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880687ac000 (8)(netdevsim0) end [ 731.968006][T13024] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 732.642474][T12961] chnl_net:caif_netlink_parms(): no params data found [ 732.702110][ T3503] bridge_slave_1: left allmulticast mode [ 732.728476][ T3503] bridge_slave_1: left promiscuous mode [ 732.769572][ T3503] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.257486][ T5837] Bluetooth: hci0: command tx timeout [ 733.515917][ T3503] bridge_slave_0: left allmulticast mode [ 733.521598][ T3503] bridge_slave_0: left promiscuous mode [ 733.583419][ T3503] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.355790][ T5837] Bluetooth: hci0: command tx timeout [ 735.617568][ T9828] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888076af4000 (13)(ip6gretap0) start [ 735.667510][ T9828] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888076af4000 (5)(ip6gretap0) end [ 735.944700][ T9828] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807a2a8000 (7)(erspan0) start [ 736.023093][ T9828] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807a2a8000 (5)(erspan0) end [ 736.086746][ T9828] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888077316000 (5)(gretap0) start [ 736.245569][ T9828] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888077316000 (5)(gretap0) end [ 736.325651][ T9828] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880631da000 (7)(geneve1) start [ 736.368311][ T9828] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880631da000 (5)(geneve1) end [ 736.387746][ T9828] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888032272000 (7)(geneve0) start [ 736.409794][ T9828] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888032272000 (5)(geneve0) end [ 736.427095][ T9828] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888068e60000 (8)(bridge0) start [ 736.444836][ T9828] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888068e60000 (8)(bridge0) end [ 737.189827][ T5979] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880535d0000 (45)(bond0) start [ 737.212718][ T3503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.213161][ T5979] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880535d0000 (41)(bond0) end [ 737.241398][ T3503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.251402][ T3503] bond0 (unregistering): Released all slaves [ 737.325269][T13085] xt_hashlimit: size too large, truncated to 1048576 [ 738.035171][ T3503] : left promiscuous mode [ 738.270179][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88804d428000 (11)() start [ 738.337592][T13096] 9p: Bad value for 'wfdno' [ 738.345832][T13096] ieee802154 phy0 wpan0: encryption failed: -22 [ 738.703939][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88804d428000 (4)() end [ 739.016663][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888056110000 (7)(wlan1) start [ 739.046993][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888056110000 (5)(wlan1) end [ 739.051276][ T30] audit: type=1804 audit(739.023:16): pid=13113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1244" name="/newroot/190/file0" dev="tmpfs" ino=1066 res=1 errno=0 [ 739.086626][T13113] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 739.114813][T13113] ref_ctr increment failed for inode: 0x42a offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888027c22580 [ 739.141333][T12961] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.149258][T12961] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.161078][T12961] bridge_slave_0: entered allmulticast mode [ 739.171508][T13117] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 739.173337][T12961] bridge_slave_0: entered promiscuous mode [ 739.187431][T13117] ref_ctr decrement failed for inode: 0x42a offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888027c22580 [ 739.216583][T12961] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.233772][T12961] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.250334][T13117] uprobe: syz.2.1244:13117 failed to unregister, leaking uprobe [ 739.260197][T12961] bridge_slave_1: entered allmulticast mode [ 739.268570][T12961] bridge_slave_1: entered promiscuous mode [ 739.328325][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88805d58c000 (17)(wlan0) start [ 739.356134][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88805d58c000 (11)(wlan0) end [ 739.855024][T12961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.909965][T12961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.044913][ T5837] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 740.277385][T12961] team0: Port device team_slave_0 added [ 740.298835][T12961] team0: Port device team_slave_1 added [ 740.535547][ T6110] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 740.557078][ T3503] hsr_slave_0: left promiscuous mode [ 740.568313][T13137] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 740.601848][ T3503] hsr_slave_1: left promiscuous mode [ 740.656343][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.663761][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.702887][ T3503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.729674][ T3503] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.288018][ T3503] veth1_macvtap: left promiscuous mode [ 741.293950][ T3503] veth0_macvtap: left promiscuous mode [ 741.300577][ T6110] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 741.320490][ T3503] veth1_vlan: left promiscuous mode [ 741.336237][ T6110] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 741.353031][ T3503] veth0_vlan: left promiscuous mode [ 741.372430][ T6110] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 741.528598][ T6110] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 741.542308][ T6110] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.605651][ T6110] usb 10-1: Product: syz [ 741.609943][ T6110] usb 10-1: Manufacturer: syz [ 741.614632][ T6110] usb 10-1: SerialNumber: syz [ 741.781732][ T6110] usb 10-1: config 0 descriptor?? [ 741.806886][T13134] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 741.814141][T13134] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 741.964977][ T6110] usb 10-1: ucan: probing device on interface #0 [ 742.776825][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880633da000 (13)(macsec0) start [ 742.829605][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880633da000 (6)(macsec0) end [ 742.890043][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888077e24000 (9)(macvtap0) start [ 742.964205][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888077e24000 (5)(macvtap0) end [ 742.987272][ T6110] ucan 10-1:0.0: probe with driver ucan failed with error -71 [ 743.007427][ T6110] usb 10-1: USB disconnect, device number 4 [ 743.065550][ T36] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880310be000 (9)(veth0_macvtap) start [ 743.125224][ T36] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880310be000 (9)(veth0_macvtap) end [ 743.387034][ T67] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88801ffd0000 (14)(veth1_macvtap) start [ 743.421947][ T67] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88801ffd0000 (9)(veth1_macvtap) end [ 743.451432][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807492a000 (9)(ipvlan1) start [ 743.478797][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807492a000 (9)(ipvlan1) end [ 743.518305][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807aee2000 (10)(ipvlan0) start [ 743.575793][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807aee2000 (6)(ipvlan0) end [ 743.642529][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880772ca000 (5)(macvlan1) start [ 743.700824][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880772ca000 (5)(macvlan1) end [ 743.753031][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888075f48000 (5)(macvlan0) start [ 743.794436][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888075f48000 (5)(macvlan0) end [ 743.811728][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88804f24c000 (6)(vlan1) start [ 743.856194][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88804f24c000 (6)(vlan1) end [ 743.876207][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888076f4c000 (6)(vlan0) start [ 743.935596][ T867] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 743.959748][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888076f4c000 (6)(vlan0) end [ 744.229219][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88805671e000 (8)(veth0_vlan) start [ 744.246332][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88805671e000 (8)(veth0_vlan) end [ 744.273459][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807b844000 (8)(veth1_vlan) start [ 744.596393][ T867] usb 10-1: Using ep0 maxpacket: 32 [ 745.241942][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807b844000 (8)(veth1_vlan) end [ 745.270127][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888076cc4000 (6)(virt_wifi0) start [ 745.270258][ T867] usb 10-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 745.386292][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888076cc4000 (6)(virt_wifi0) end [ 745.414003][ T6083] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88804fb9e000 (6)(veth0_virt_wifi) start [ 745.422065][T13188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1269'. [ 745.439583][ T867] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.452880][ T6083] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88804fb9e000 (6)(veth0_virt_wifi) end [ 745.498817][ T867] usb 10-1: Product: syz [ 745.503212][ T867] usb 10-1: Manufacturer: syz [ 745.509291][ T867] usb 10-1: SerialNumber: syz [ 745.524434][ T6083] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880316c6000 (6)(veth1_virt_wifi) start [ 745.544972][ T867] usb 10-1: config 0 descriptor?? [ 745.565596][ T6083] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880316c6000 (6)(veth1_virt_wifi) end [ 745.640481][ T6083] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807a05c000 (5)(hsr0) start [ 745.660409][ T6083] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807a05c000 (5)(hsr0) end [ 745.697570][T13193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1273'. [ 745.711891][ T6083] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880302de000 (5)(hsr_slave_1) start [ 745.730673][ T6083] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880302de000 (5)(hsr_slave_1) end [ 745.748751][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807aae2000 (6)(veth1_to_hsr) start [ 745.768507][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807aae2000 (6)(veth1_to_hsr) end [ 745.786414][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888060f9c000 (5)(hsr_slave_0) start [ 745.809533][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888060f9c000 (5)(hsr_slave_0) end [ 745.845505][ T867] RobotFuzz Open Source InterFace, OSIF 10-1:0.0: version d4.15 found at bus 010 address 005 [ 745.863948][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888060f9e000 (6)(veth0_to_hsr) start [ 745.937170][ T3503] team0 (unregistering): Port device team_slave_1 removed [ 745.943145][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888060f9e000 (6)(veth0_to_hsr) end [ 745.966897][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88804d118000 (6)(batadv_slave_1) start [ 746.004830][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88804d118000 (6)(batadv_slave_1) end [ 746.051441][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88804d338000 (6)(veth1_to_batadv) start [ 746.073414][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88804d338000 (6)(veth1_to_batadv) end [ 746.084137][T13199] random: crng reseeded on system resumption [ 746.095089][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888059a0a000 (6)(batadv_slave_0) start [ 746.097579][ T3503] team0 (unregistering): Port device team_slave_0 removed [ 746.114841][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888059a0a000 (6)(batadv_slave_0) end [ 746.148474][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888059a0c000 (6)(veth0_to_batadv) start [ 746.177477][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888059a0c000 (6)(veth0_to_batadv) end [ 746.242208][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888074da0000 (10)(team_slave_1) start [ 746.264848][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888074da0000 (10)(team_slave_1) end [ 746.293290][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888031db2000 (6)(veth1_to_team) start [ 746.339691][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888031db2000 (6)(veth1_to_team) end [ 746.347117][ T6110] usb 10-1: USB disconnect, device number 5 [ 746.357998][T13171] i2c i2c-1: failure sending STOP [ 746.377534][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888068af2000 (10)(team_slave_0) start [ 746.429951][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888068af2000 (10)(team_slave_0) end [ 746.458838][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888068af4000 (6)(veth0_to_team) start [ 746.523735][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888068af4000 (6)(veth0_to_team) end [ 746.568923][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888079526000 (4)(bond_slave_1) start [ 746.598748][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888079526000 (4)(bond_slave_1) end [ 746.629936][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888031054000 (5)(veth1_to_bond) start [ 746.677725][T13207] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 746.685783][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888031054000 (5)(veth1_to_bond) end [ 746.714597][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807c06e000 (4)(bond_slave_0) start [ 746.734110][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807c06e000 (4)(bond_slave_0) end [ 746.759296][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888068778000 (5)(veth0_to_bond) start [ 746.890612][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888068778000 (5)(veth0_to_bond) end [ 746.907982][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807af9e000 (5)(bridge_slave_1) start [ 747.115945][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.155203][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.421828][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807af9e000 (5)(bridge_slave_1) end [ 747.440570][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888028518000 (6)(veth1_to_bridge) start [ 747.458082][ T6314] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888028518000 (6)(veth1_to_bridge) end [ 747.477580][ T1319] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807ecd4000 (5)(bridge_slave_0) start [ 747.613796][ T1319] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807ecd4000 (5)(bridge_slave_0) end [ 747.631510][ T1319] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88804f47c000 (6)(veth0_to_bridge) start [ 747.660153][T13217] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1282'. [ 747.665522][ T1319] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88804f47c000 (6)(veth0_to_bridge) end [ 747.725859][ T1319] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888055120000 (8)(veth1) start [ 747.787293][ T1319] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888055120000 (6)(veth1) end [ 747.841284][ T1319] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807b624000 (6)(veth0) start [ 747.894785][ T1319] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807b624000 (6)(veth0) end [ 747.955409][ T1319] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888054168000 (5)(batadv0) start [ 748.079441][ T1319] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888054168000 (5)(batadv0) end [ 748.121177][ T1319] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88823bf16000 (10)(dummy0) start [ 748.212234][ T1319] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88823bf16000 (5)(dummy0) end [ 748.467294][ T1319] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807b630000 (43)(team0) start [ 748.527791][ T1319] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807b630000 (6)(team0) end [ 748.603933][T12961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.632230][T12961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.707340][T12961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.828054][T12961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.835662][T12961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 749.364324][T13244] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1294'. [ 749.382255][T12961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.562548][T13247] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 749.571283][T10258] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 749.787048][T10258] usb 3-1: Using ep0 maxpacket: 32 [ 749.801645][T10258] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 749.816224][T10258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.834515][T10258] usb 3-1: Product: syz [ 749.839563][T10258] usb 3-1: Manufacturer: syz [ 749.844168][T10258] usb 3-1: SerialNumber: syz [ 749.848748][T12961] hsr_slave_0: entered promiscuous mode [ 749.852860][T12961] hsr_slave_1: entered promiscuous mode [ 749.861317][T10258] usb 3-1: config 0 descriptor?? [ 750.158219][T10258] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 023 [ 751.011574][T10258] usb 3-1: USB disconnect, device number 23 [ 751.024020][T13240] i2c i2c-1: failure sending STOP [ 751.189564][ T6083] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880748ac000 (16)(eth12) start [ 751.225579][ T6083] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880748ac000 (10)(eth12) end [ 751.271206][T13271] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1304'. [ 751.988025][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807c968000 (16)(eth11) start [ 752.042893][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807c968000 (6)(eth11) end [ 752.226164][T13282] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 752.234526][ T6124] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880556a0000 (8)(eth10) start [ 752.295084][ T6124] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880556a0000 (4)(eth10) end [ 752.603234][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888068e64000 (21)(eth9) start [ 752.622216][ T176] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff888068e64000 (17)(eth9) end [ 753.691295][T13298] sctp: [Deprecated]: syz.0.1312 (pid 13298) Use of struct sctp_assoc_value in delayed_ack socket option. [ 753.691295][T13298] Use struct sctp_sack_info instead [ 754.304307][ T5144] Bluetooth: hci1: command 0x0406 tx timeout [ 754.412097][T12961] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 754.442738][T12961] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 754.895702][ T6110] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 755.204835][T12961] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 755.218049][T13313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1317'. [ 755.257882][T12961] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 755.416259][ T6110] usb 3-1: Using ep0 maxpacket: 32 [ 755.436959][ T6110] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 755.466143][ T6110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.474296][ T6110] usb 3-1: Product: syz [ 755.484007][ T6110] usb 3-1: Manufacturer: syz [ 755.498294][ T6110] usb 3-1: SerialNumber: syz [ 755.533396][ T6110] usb 3-1: config 0 descriptor?? [ 755.750824][T12961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.761421][ T6110] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 024 [ 755.780454][T13330] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 755.817305][T12961] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.060426][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.067660][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.093297][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.100522][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.242321][ T5957] usb 3-1: USB disconnect, device number 24 [ 756.248650][T13309] i2c i2c-1: failure sending STOP [ 757.098285][T13357] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1327'. [ 757.704340][T12961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.013717][T13394] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 759.652048][T13411] kvm: Disabled LAPIC found during irq injection [ 759.845639][ T6059] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 759.878155][T13421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1345'. [ 759.922628][T12961] veth0_vlan: entered promiscuous mode [ 759.967867][T12961] veth1_vlan: entered promiscuous mode [ 760.109995][ T6059] usb 1-1: Using ep0 maxpacket: 32 [ 760.129383][ T6059] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 760.147635][ T6059] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.165660][ T6059] usb 1-1: Product: syz [ 760.169862][ T6059] usb 1-1: Manufacturer: syz [ 760.714830][ T6059] usb 1-1: SerialNumber: syz [ 760.735414][T12961] veth0_macvtap: entered promiscuous mode [ 760.750310][ T6059] usb 1-1: config 0 descriptor?? [ 760.795369][T12961] veth1_macvtap: entered promiscuous mode [ 760.883391][T12961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.970361][T12961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.984943][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.002271][ T6059] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 015 [ 761.056471][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.110531][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.127731][T13442] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 761.153849][ T6314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.516331][T13413] i2c i2c-1: failure sending STOP [ 761.524161][T10258] usb 1-1: USB disconnect, device number 15 [ 761.594466][ T6314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.707544][ T6314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.792959][ T6124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.808025][ T6124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.120878][T13473] kvm: Disabled LAPIC found during irq injection [ 763.168488][T13478] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1356'. [ 763.795327][T13494] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1359'. [ 764.281179][T13505] netlink: 'syz.2.1362': attribute type 21 has an invalid length. [ 764.305871][T10258] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 764.415906][ T1319] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.563541][T13504] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 764.583201][ T1319] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.750028][ T1319] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.785159][ T1319] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.793975][T10258] usb 4-1: Using ep0 maxpacket: 32 [ 764.813649][T10258] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 764.843933][T10258] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.864153][T10258] usb 4-1: Product: syz [ 764.873704][T10258] usb 4-1: Manufacturer: syz [ 764.887515][T10258] usb 4-1: SerialNumber: syz [ 764.907767][T10258] usb 4-1: config 0 descriptor?? [ 765.301058][T10258] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 010 [ 765.927396][T13520] netlink: 'syz.2.1367': attribute type 2 has an invalid length. [ 766.059225][T13521] kvm: Disabled LAPIC found during irq injection [ 766.142540][T13500] i2c i2c-1: failure sending STOP [ 766.153751][ T844] usb 4-1: USB disconnect, device number 10 [ 766.200055][T13529] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1369'. [ 767.379465][T13560] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 769.109922][T13583] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1383'. [ 769.613374][T13586] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 769.635557][ T5894] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 769.660397][T13586] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 769.714601][T13586] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 769.732773][T13586] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 769.786413][T13586] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 769.854384][T13586] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 769.865603][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 769.902621][T13586] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 769.908666][ T5894] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 769.928836][T13586] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 769.935969][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.964925][ T5894] usb 1-1: Product: syz [ 769.982244][ T5894] usb 1-1: Manufacturer: syz [ 769.990831][T13586] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 770.002055][ T5894] usb 1-1: SerialNumber: syz [ 770.022850][T13586] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 770.035717][T13586] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 770.046509][ T5894] usb 1-1: config 0 descriptor?? [ 770.108493][T13586] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 770.357013][ T5894] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 016 [ 771.205365][ T844] usb 1-1: USB disconnect, device number 16 [ 771.225594][T13593] i2c i2c-1: failure sending STOP [ 771.525832][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 771.735906][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 771.825510][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 771.976165][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 772.012600][T13637] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1394'. [ 772.056043][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 772.228934][T13644] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 772.723967][T13660] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 774.025561][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 774.025696][ T5144] Bluetooth: hci2: command 0x0406 tx timeout [ 774.031954][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 774.055496][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 774.135534][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 774.468698][ T844] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 774.645529][ T844] usb 5-1: Using ep0 maxpacket: 32 [ 774.680047][ T844] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 774.727857][ T844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.752008][ T844] usb 5-1: Product: syz [ 774.768867][ T844] usb 5-1: Manufacturer: syz [ 774.785144][ T844] usb 5-1: SerialNumber: syz [ 774.816648][ T844] usb 5-1: config 0 descriptor?? [ 775.068295][ T844] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 014 [ 776.016155][T13717] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 776.141732][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 776.215985][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 776.816041][T13731] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1409'. [ 777.336265][T13678] i2c i2c-1: failure sending STOP [ 777.421745][ T6110] usb 5-1: USB disconnect, device number 14 [ 777.770973][T13742] Cannot find add_set index 0 as target [ 778.759938][T13762] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 779.435570][T13775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1429'. [ 779.705574][ T5894] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 779.731134][T13783] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 780.595576][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 780.616868][ T5894] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 780.626245][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.634247][ T5894] usb 1-1: Product: syz [ 780.639128][ T5894] usb 1-1: Manufacturer: syz [ 780.643736][ T5894] usb 1-1: SerialNumber: syz [ 780.706492][ T5894] usb 1-1: config 0 descriptor?? [ 780.930960][ T5894] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 017 [ 781.403645][T13816] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1442'. [ 782.309553][T13833] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 783.275803][T13774] i2c i2c-1: failure sending STOP [ 783.371548][T13847] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1451'. [ 783.386372][ T844] usb 1-1: USB disconnect, device number 17 [ 784.178422][T13863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1456'. [ 784.374969][T13873] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 784.621560][T13877] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1461'. [ 785.025543][ T844] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 785.315827][ T844] usb 4-1: Using ep0 maxpacket: 32 [ 785.339603][ T844] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 785.361064][ T844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.378215][ T844] usb 4-1: Product: syz [ 785.385801][ T844] usb 4-1: Manufacturer: syz [ 785.395797][ T844] usb 4-1: SerialNumber: syz [ 785.412687][ T844] usb 4-1: config 0 descriptor?? [ 785.634609][ T844] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 011 [ 786.679735][T13916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1470'. [ 786.814403][T13919] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 787.357537][ T867] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 787.528513][ T867] usb 3-1: config 5 has an invalid interface number: 18 but max is 0 [ 787.544090][ T867] usb 3-1: config 5 has no interface number 0 [ 787.557723][ T867] usb 3-1: config 5 interface 18 has no altsetting 0 [ 787.580582][ T867] usb 3-1: New USB device found, idVendor=0489, idProduct=3313, bcdDevice=51.20 [ 787.605962][ T867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.631951][ T867] usb 3-1: Product: syz [ 787.647406][ T867] usb 3-1: Manufacturer: syz [ 787.656251][ T867] usb 3-1: SerialNumber: syz [ 788.145654][T13879] i2c i2c-1: failure sending STOP [ 788.276005][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1483'. [ 788.304316][ T867] usb 3-1: USB disconnect, device number 25 [ 788.360639][ T29] usb 4-1: USB disconnect, device number 11 [ 789.744177][T13996] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 789.902199][T14004] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1494'. [ 790.359810][ T6861] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 790.525521][ T6861] usb 1-1: Using ep0 maxpacket: 32 [ 790.586087][ T6861] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 790.617772][ T6861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.779395][ T6861] usb 1-1: Product: syz [ 790.816986][ T6861] usb 1-1: Manufacturer: syz [ 790.830050][ T6861] usb 1-1: SerialNumber: syz [ 790.969337][ T6861] usb 1-1: config 0 descriptor?? [ 791.848924][ T6861] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 018 [ 792.357996][T14060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1508'. [ 795.595905][T14011] i2c i2c-1: failure sending STOP [ 795.644568][T10258] usb 1-1: USB disconnect, device number 18 [ 797.684615][T14121] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 797.912547][T14127] kvm: Disabled LAPIC found during irq injection [ 799.035778][T14145] netlink: 'syz.0.1530': attribute type 1 has an invalid length. [ 799.097415][ T5957] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 799.121391][T14145] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1530'. [ 799.835528][ T5957] usb 5-1: Using ep0 maxpacket: 32 [ 799.849738][ T5957] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 799.858860][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.878290][ T5957] usb 5-1: Product: syz [ 799.898589][ T5957] usb 5-1: Manufacturer: syz [ 800.131926][ T5957] usb 5-1: SerialNumber: syz [ 800.138514][ T5957] usb 5-1: config 0 descriptor?? [ 800.363091][ T5957] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 015 [ 802.918155][T14185] kvm: Disabled LAPIC found during irq injection [ 803.875380][T14137] i2c i2c-1: failure sending STOP [ 803.980667][ T7382] usb 5-1: USB disconnect, device number 15 [ 806.634314][T14229] netlink: 'syz.4.1551': attribute type 1 has an invalid length. [ 807.344492][T14244] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcmmio) [ 808.018806][ T9828] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880675e0000 (11)(erspan0) start [ 808.065310][ T9828] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff8880675e0000 (4)(erspan0) end [ 808.112436][ T9828] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807400e000 (3)(gretap0) start [ 808.142817][ T9828] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba28000 (11)(syz2) rdma_ndev=ffff888068428000 (26)(syz_tun) cookie=ffff88807400e000 (3)(gretap0) end [ 808.540920][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.551150][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.696359][ T6861] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 808.895776][ T6861] usb 5-1: Using ep0 maxpacket: 32 [ 808.914873][ T6861] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 809.123800][ T6861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.281037][ T6861] usb 5-1: Product: syz [ 809.727424][ T6861] usb 5-1: Manufacturer: syz [ 809.835484][ T6861] usb 5-1: SerialNumber: syz [ 809.856732][ T6861] usb 5-1: config 0 descriptor?? [ 810.624621][T14285] netlink: 'syz.2.1563': attribute type 1 has an invalid length. [ 810.655282][ T6861] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 016 [ 811.278481][T14295] kvm: Disabled LAPIC found during irq injection [ 811.648045][T14305] infiniband: Added to hash: ib_dev=ffff8880312cc000 (0)() ndev=ffff88807e9a8000 (21)(syz_tun) [ 811.658861][T14305] infiniband: Removed from hash: ib_dev=ffff8880312cc000 (0)() ndev=ffff88807e9a8000 (21)(syz_tun) [ 811.671244][T14305] rdma_rxe: rxe_newlink: failed to add syz_tun [ 813.017480][T14256] i2c i2c-1: failure sending STOP [ 917.795469][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 917.802475][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14314/1:b..l [ 917.811263][ C0] rcu: (detected by 0, t=10502 jiffies, g=93325, q=262 ncpus=2) [ 917.818994][ C0] task:dhcpcd-run-hook state:R running task stack:26728 pid:14314 tgid:14314 ppid:14306 task_flags:0x400040 flags:0x00080000 [ 917.834162][ C0] Call Trace: [ 917.837458][ C0] [ 917.840398][ C0] __schedule+0x14db/0x5030 [ 917.844929][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 917.849887][ C0] ? __pfx___schedule+0x10/0x10 [ 917.854744][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 917.859702][ C0] preempt_schedule_irq+0x4d/0xa0 [ 917.864745][ C0] irqentry_exit+0x5e3/0x670 [ 917.869351][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 917.875337][ C0] RIP: 0010:memset_orig+0x72/0xb0 [ 917.880370][ C0] Code: 47 28 48 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 <48> 89 07 48 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d 7f 01 [ 917.899979][ C0] RSP: 0018:ffffc9001221f090 EFLAGS: 00000246 [ 917.906063][ C0] RAX: 0000000000000000 RBX: ffffc9001221f1a0 RCX: 0000000000000000 [ 917.914044][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc9001221f1c0 [ 917.922024][ C0] RBP: dffffc0000000000 R08: ffffc9001221f1c7 R09: 0000000000000000 [ 917.930009][ C0] R10: ffffc9001221f1b8 R11: fffff52002443e39 R12: ffffc9001221f1b8 [ 917.937997][ C0] R13: 1ffff92002443e2f R14: ffffc9001221f168 R15: ffffc9001221f1b0 [ 917.945998][ C0] unwind_next_frame+0xeae/0x23d0 [ 917.951062][ C0] ? unwind_next_frame+0xa5/0x23d0 [ 917.956183][ C0] ? do_syscall_64+0xec/0xf80 [ 917.960869][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 917.967042][ C0] arch_stack_walk+0x11c/0x150 [ 917.971823][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.977917][ C0] stack_trace_save+0x9c/0xe0 [ 917.982600][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 917.987977][ C0] ? stack_trace_save+0x9c/0xe0 [ 917.992833][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 917.998210][ C0] kasan_save_track+0x3e/0x80 [ 918.002896][ C0] ? kasan_save_track+0x3e/0x80 [ 918.007752][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 918.012523][ C0] ? __kmalloc_noprof+0x41d/0x800 [ 918.017557][ C0] ? tomoyo_encode+0x28b/0x550 [ 918.022333][ C0] ? tomoyo_realpath_from_path+0x58d/0x5d0 [ 918.028152][ C0] ? tomoyo_check_open_permission+0x1c1/0x3b0 [ 918.034224][ C0] ? security_file_open+0xb1/0x270 [ 918.039342][ C0] ? do_dentry_open+0x384/0x14e0 [ 918.044288][ C0] ? vfs_open+0x3b/0x340 [ 918.048532][ C0] ? path_openat+0x2de0/0x3840 [ 918.053305][ C0] ? do_file_open+0x203/0x440 [ 918.057992][ C0] ? do_sys_openat2+0x105/0x1e0 [ 918.062850][ C0] ? __x64_sys_openat+0x138/0x170 [ 918.067878][ C0] ? do_syscall_64+0xec/0xf80 [ 918.072602][ C0] __kasan_kmalloc+0x93/0xb0 [ 918.077208][ C0] __kmalloc_noprof+0x41d/0x800 [ 918.082066][ C0] ? tomoyo_encode+0x28b/0x550 [ 918.086846][ C0] tomoyo_encode+0x28b/0x550 [ 918.091449][ C0] tomoyo_realpath_from_path+0x58d/0x5d0 [ 918.097105][ C0] tomoyo_check_open_permission+0x1c1/0x3b0 [ 918.103002][ C0] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 918.109078][ C0] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 918.115508][ C0] ? __follow_mount_rcu+0x4a1/0x560 [ 918.120776][ C0] security_file_open+0xb1/0x270 [ 918.125751][ C0] do_dentry_open+0x384/0x14e0 [ 918.130529][ C0] ? vfs_open+0x31/0x340 [ 918.134784][ C0] vfs_open+0x3b/0x340 [ 918.138862][ C0] ? path_openat+0x2dc8/0x3840 [ 918.143638][ C0] path_openat+0x2de0/0x3840 [ 918.148248][ C0] ? stack_trace_save+0x9c/0xe0 [ 918.153116][ C0] ? __x64_sys_newfstatat+0xa1/0x190 [ 918.158414][ C0] ? kasan_save_track+0x3e/0x80 [ 918.163280][ C0] ? __pfx_path_openat+0x10/0x10 [ 918.168227][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 918.173196][ C0] do_file_open+0x203/0x440 [ 918.177717][ C0] ? __pfx_do_file_open+0x10/0x10 [ 918.182827][ C0] ? _raw_spin_unlock+0x28/0x50 [ 918.187692][ C0] ? alloc_fd+0x64c/0x6c0 [ 918.192039][ C0] do_sys_openat2+0x105/0x1e0 [ 918.196740][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 918.201959][ C0] __x64_sys_openat+0x138/0x170 [ 918.206823][ C0] do_syscall_64+0xec/0xf80 [ 918.211331][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.217400][ C0] ? clear_bhb_loop+0x40/0x90 [ 918.222084][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.227984][ C0] RIP: 0033:0x7ff01b4c6c3a [ 918.232409][ C0] RSP: 002b:00007ffcbb392fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 918.240833][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff01b4c6c3a [ 918.248809][ C0] RDX: 0000000000090800 RSI: 000055b30cac80a0 RDI: 00000000ffffff9c [ 918.256781][ C0] RBP: 000055b30cac547f R08: 00007ff01b5a2ac0 R09: 0000000000000000 [ 918.264763][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffcbb393148 [ 918.272736][ C0] R13: 000055b30cac5478 R14: 0000000000000001 R15: 000055b30cac80c7 [ 918.280738][ C0] [ 918.283759][ C0] rcu: rcu_preempt kthread starved for 10493 jiffies! g93325 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 918.294955][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 918.304920][ C0] rcu: RCU grace-period kthread stack dump: [ 918.310808][ C0] task:rcu_preempt state:R running task stack:27680 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 918.324309][ C0] Call Trace: [ 918.327591][ C0] [ 918.330529][ C0] __schedule+0x14db/0x5030 [ 918.335048][ C0] ? irqentry_exit+0x5e8/0x670 [ 918.339832][ C0] ? __pfx___schedule+0x10/0x10 [ 918.344697][ C0] ? schedule+0x91/0x360 [ 918.348946][ C0] schedule+0x165/0x360 [ 918.353114][ C0] schedule_timeout+0x12b/0x270 [ 918.357975][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 918.363368][ C0] ? __pfx_process_timeout+0x10/0x10 [ 918.368669][ C0] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 918.374485][ C0] ? prepare_to_swait_event+0x341/0x380 [ 918.380063][ C0] rcu_gp_fqs_loop+0x301/0x11b0 [ 918.384923][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 918.390123][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 918.395936][ C0] ? rcu_gp_init+0x144f/0x1700 [ 918.400717][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 918.406890][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 918.412192][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 918.418020][ C0] rcu_gp_kthread+0x9b/0x2d0 [ 918.422623][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 918.427829][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 918.433649][ C0] ? __kthread_parkme+0x7b/0x200 [ 918.438599][ C0] ? __kthread_parkme+0x1a1/0x200 [ 918.443646][ C0] kthread+0x389/0x480 [ 918.447735][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 918.452938][ C0] ? __pfx_kthread+0x10/0x10 [ 918.457544][ C0] ret_from_fork+0x510/0xa50 [ 918.462150][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 918.467275][ C0] ? __switch_to+0xc9e/0x1480 [ 918.471963][ C0] ? __pfx_kthread+0x10/0x10 [ 918.476580][ C0] ret_from_fork_asm+0x1a/0x30 [ 918.481465][ C0] [ 918.484483][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 918.490814][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 918.501319][ C0] Tainted: [L]=SOFTLOCKUP [ 918.505660][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 918.515715][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 918.521443][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 3f 29 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 918.541057][ C0] RSP: 0018:ffffffff8de07dc0 EFLAGS: 000002c2 [ 918.547136][ C0] RAX: 00000000015e0027 RBX: ffffffff81977eae RCX: 0000000080000001 [ 918.555113][ C0] RDX: 0000000000000001 RSI: ffffffff8d9a99b4 RDI: ffffffff8be09d60 [ 918.563090][ C0] RBP: ffffffff8de07eb0 R08: ffff8880b863375b R09: 1ffff110170c66eb [ 918.571063][ C0] R10: dffffc0000000000 R11: ffffed10170c66ec R12: ffffffff8fa2d8f0 [ 918.579035][ C0] R13: 1ffffffff1bd29d0 R14: 0000000000000000 R15: 0000000000000000 [ 918.587008][ C0] FS: 0000000000000000(0000) GS:ffff888125bf7000(0000) knlGS:0000000000000000 [ 918.595940][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 918.602527][ C0] CR2: 0000001b33d20ff8 CR3: 0000000026e86000 CR4: 00000000003526f0 [ 918.610502][ C0] Call Trace: [ 918.613780][ C0] [ 918.616708][ C0] default_idle+0x13/0x20 [ 918.621052][ C0] default_idle_call+0x73/0xb0 [ 918.625823][ C0] do_idle+0x1be/0x4d0 [ 918.629903][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 918.635546][ C0] ? __pfx_do_idle+0x10/0x10 [ 918.640153][ C0] cpu_startup_entry+0x44/0x60 [ 918.644930][ C0] rest_init+0x2de/0x300 [ 918.649189][ C0] start_kernel+0x38b/0x3e0 [ 918.653712][ C0] x86_64_start_reservations+0x24/0x30 [ 918.659177][ C0] x86_64_start_kernel+0x143/0x1c0 [ 918.664297][ C0] common_startup_64+0x13e/0x147 [ 918.669270][ C0]