last executing test programs: 15m23.60540458s ago: executing program 1 (id=4966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r4 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, 0xee00, 0x0) 15m22.603328864s ago: executing program 1 (id=4968): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff000000001f1200000000000007010000f8ffff"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0xa}, 0x94) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x7427, 0x0, 0x0, 0x20, 0x6, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x400000000, 0x8, 0x0, 0x6, 0x5, 0x8001], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) unlink(0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000003c0)=0xd, r5, 0x0, 0x0, 0x1}}, 0x20) io_setup(0x9, &(0x7f0000000040)=0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x20441, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000140)={0x80000002, "4000fd8b00b1400000000067cf0000009800", 0xffffffffffffffff}) io_submit(r6, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaab0180c2000000080045000028006600000006907864010101ac1414aa0000", @ANYRES32=0x41424344, @ANYBLOB="5c94000090780000"], 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) recvmmsg(r0, &(0x7f0000000680), 0x0, 0x21, &(0x7f00000006c0)={0x77359400}) shutdown(r0, 0x1) 15m18.989165613s ago: executing program 0 (id=4978): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x2002) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sync_file_range(r3, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) eventfd(0x80200003) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000001214010027bd7000fddbdf250a00010002000000080015000000000008004f000000000008004b00130000000800030001000008"], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x48, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x2}) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r6, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r6, &(0x7f0000000000)='2\x00', 0x2) write$cgroup_devices(r1, &(0x7f0000000180)={'c', ' *:* ', 'r\x00'}, 0x8) 15m16.124405158s ago: executing program 0 (id=4983): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000002c00), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000480)={0x27, 0x3, 0x2}, 0x6) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), &(0x7f0000000800), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0x2, 0x40000000000002c3}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r7, r6], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000440)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x1, 0x9, 0x5, 0x2}) r10 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000140)={0x0, 0xffd5, r11, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000780)={&(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, r7, r9, 0x0], 0x8, 0x0, r12, 0x3, 0x4, 0x9, 0x0, {0x1, 0x3, 0xf, 0x9, 0x6, 0xf, 0xa2fc, 0x0, 0xb8, 0x6, 0x1ff, 0x10, 0x35e9, 0x2, "2036b09c5b7a60b2a5101179a68b6bf17f6feac8074c05fec8a1926d36c37a3b"}}) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './cgroup.cpu/cgroup.procs\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x0) 15m15.413312592s ago: executing program 0 (id=4985): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x24, r5, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 15m12.553852117s ago: executing program 0 (id=4989): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socket(0x6, 0x80002, 0xfffffffe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100003b00015300"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000580)=ANY=[@ANYBLOB]) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f00000002c0), 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000280)={0x24}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r5, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast1}], 0x40) sendto$inet(r1, 0x0, 0x0, 0x44054, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) 15m11.069607414s ago: executing program 1 (id=4993): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15m8.591408815s ago: executing program 0 (id=4995): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000002c00), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, &(0x7f0000000480)={0x27, 0x3, 0x2}, 0x6) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000380)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), &(0x7f0000000800), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0x2, 0x40000000000002c3}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r7, r6], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000540)={&(0x7f0000000440)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x1, 0x9, 0x5, 0x2}) r10 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000140)={0x0, 0xffd5, r11, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000780)={&(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, r7, r9, 0x0], 0x8, 0x0, r12, 0x3, 0x4, 0x9, 0x0, {0x1, 0x3, 0xf, 0x9, 0x6, 0xf, 0xa2fc, 0x0, 0xb8, 0x6, 0x1ff, 0x10, 0x35e9, 0x2, "2036b09c5b7a60b2a5101179a68b6bf17f6feac8074c05fec8a1926d36c37a3b"}}) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './cgroup.cpu/cgroup.procs\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x0) 15m6.908063608s ago: executing program 1 (id=4998): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB], 0x48) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x7465, 0x0, 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x3, 0xc, 0x2, 0x0, @multicast}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m6.641452871s ago: executing program 1 (id=4999): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$alg(0x26, 0x5, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x4840, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0xff3f, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) r1 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xce3d, 0x400, 0x1, 0x2}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r2, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 15m5.083447818s ago: executing program 0 (id=5001): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_to_batadv\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vxcan0\x00', 0x0}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004340)=[{{&(0x7f0000000540)=@can={0x1d, r0}, 0x80, &(0x7f0000000700)=[{&(0x7f00000006c0)="b35faeb48f9281", 0x7}], 0x1, &(0x7f00000007c0)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x18}}, {{&(0x7f0000000880)=@can={0x1d, r1}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}}, {{&(0x7f0000001280)=@phonet={0x23, 0x10, 0x6, 0x2}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001300)="3801c7055bc004e54776290ebd37be2f2121f4d587369d4e31e3348c4b42bc45c95aa8ad9f5817874dd3f5aa2f7799ad5cc6fe82a49c5de87f37837f59f3a06b6bc880", 0x43}, {&(0x7f0000001380)="39872f10a2509fa452cdecc681e060e165cbdc5e24", 0x15}, {&(0x7f00000013c0)="023f29f33a159921a0d7c7f518a2bb138b424b0e12bf00e839c7e6e1435bfa993efe2f63d2a53e428cea85898ccd85d21d67aaa8ad161a719891ff1ad7e95b589cd3fc7c34d615093011d6d1ca070441d49c1a39e83d0c1369dff96135f882544194068d5a97265ff9a5a6d857570038416a36a9e2767305f363d41f87a7f18a281e7cb72b231cd66d18db78b525d5a71afaa68c1637fe18a0a85865078ac313976f4c03a09d8679cc1332d9a891236977a9", 0xb2}, {&(0x7f0000001480)="2c5c17a19480e6ceedb52dc7ae31bf69ef51c575d2598e08c61513acdd0f760cefcd7b46ec24797420d861101675fd1e62a18dcb575f184f010da5f8eff01bbd8085ec607099811f796e4a2067b5bd4d992c74f5dd490c39913d4da7b3f9ea000a2b54dc1723c862abac44c420be39507f95433c167e7af2aabd50a65e06d0452ed67bb9f3a98a3adc04f34b9299088a80fd0e27d3bb12c3fe1d1653247b5284e2834bd9576cf39281b3741ea75047983af27073cc482ae9780bc5b72c35dbc67c4be3840bb0f9ffa6146e32476cd631a7022d7cd3a802d216d9cde101", 0xdd}], 0x4}}, {{&(0x7f0000001640)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x3, 0xe, 0x9, "335d9fe48f6347e961aa133b50a0042b4939cd3d6fa2b06c5f18c6cdc92f72797cffc323878cb47db5bf1be8fa207da40736384f815b8802d4ab54b0f40004", 0x24}, 0x80, &(0x7f0000001800)=[{&(0x7f00000016c0)="a79e520b7e7c6000411f055203ec", 0xe}, {0x0}, {&(0x7f0000003840)="02c3bc85809949b73a0fe1e0a4c500acec3b759c215d1b98437a047645666e6211516708425d44f23359cf28cc681698c30abd18003fc9240c228503dd4f2082c03c66db7dc35e827022ae5920f3036b2d43e533c0dd619fe965dab875c671c3ed8969c19801dbd3fe0ed3658b79c4a80f3a315f9b17fa5f733697d2ba5bead1167d650b90ddc4b0d0d4cf024fe2d25d68fceb4409f084c3291299d25b82c50e0db2e47f03edb06767e9aa6e907b4106d145b0ba5938eb13a068f985fc422180d26fc51f6f92132ec0175d3fe016bd83c50f39f836e027346dbffb4b87b29513a1b4c2c0da421c841ab07ff8", 0xec}, {&(0x7f0000003940)="51097f00d468a39ca66b983deff0d24d0f05fd376c56dd1ce54343ec6e384e731cc42431a13c3c0272abc3adcf8094d64359a9075fb004907937280a68be2ec819754da1080c6da67dbf71c972d938c72e5e90d4ed8a7abbc9e730a911b75a05e09ea936865822cb94babfa40ae223c8aebfdd38e638b68b5bbd91bd8bf91029926b8bdc75401561db151e132668775fbff01b4ca3ad7938f96b02f30e912d06b13bd3", 0xa3}], 0x4}}], 0x4, 0x4000) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000ec2800000034000000040000000000000014000000000000002900000034000000fdffffff00000000d0000000000000002900000004000000041600000000000007100000000102099f000800000000000000fe53f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b005008d3894180b6aa7527a0730000000010a7a018005000000000000000400000000000000060000000000000004000000000000000b0000000000000005020a7e05020bf4c910fc0200000000000000000000000000009300000000140000000000000029000000340000000000000000000000f80000000000000029000000360000005e1b000000000000ff2350d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b00010000010001000738000000030c00ff0f020000000000000066090000000000000700000000000000f7ffffffffffffff010000000000000001000000000000000854c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab071800000003040307000000000000000000008000000000000001000000000000000020000000000000002900000037000000730000000000000000010000000000001400000000000000290000000b0000000000000200000000380000000000000029000000390000003a04027000000000ff010000000000000000000000000001ff020000000000000000000000000001"], 0x280}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 15m2.556879827s ago: executing program 1 (id=5004): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x40}}, 0x2) 14m48.939426823s ago: executing program 32 (id=5001): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'veth1_to_batadv\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'vxcan0\x00', 0x0}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004340)=[{{&(0x7f0000000540)=@can={0x1d, r0}, 0x80, &(0x7f0000000700)=[{&(0x7f00000006c0)="b35faeb48f9281", 0x7}], 0x1, &(0x7f00000007c0)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x18}}, {{&(0x7f0000000880)=@can={0x1d, r1}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}}, {{&(0x7f0000001280)=@phonet={0x23, 0x10, 0x6, 0x2}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001300)="3801c7055bc004e54776290ebd37be2f2121f4d587369d4e31e3348c4b42bc45c95aa8ad9f5817874dd3f5aa2f7799ad5cc6fe82a49c5de87f37837f59f3a06b6bc880", 0x43}, {&(0x7f0000001380)="39872f10a2509fa452cdecc681e060e165cbdc5e24", 0x15}, {&(0x7f00000013c0)="023f29f33a159921a0d7c7f518a2bb138b424b0e12bf00e839c7e6e1435bfa993efe2f63d2a53e428cea85898ccd85d21d67aaa8ad161a719891ff1ad7e95b589cd3fc7c34d615093011d6d1ca070441d49c1a39e83d0c1369dff96135f882544194068d5a97265ff9a5a6d857570038416a36a9e2767305f363d41f87a7f18a281e7cb72b231cd66d18db78b525d5a71afaa68c1637fe18a0a85865078ac313976f4c03a09d8679cc1332d9a891236977a9", 0xb2}, {&(0x7f0000001480)="2c5c17a19480e6ceedb52dc7ae31bf69ef51c575d2598e08c61513acdd0f760cefcd7b46ec24797420d861101675fd1e62a18dcb575f184f010da5f8eff01bbd8085ec607099811f796e4a2067b5bd4d992c74f5dd490c39913d4da7b3f9ea000a2b54dc1723c862abac44c420be39507f95433c167e7af2aabd50a65e06d0452ed67bb9f3a98a3adc04f34b9299088a80fd0e27d3bb12c3fe1d1653247b5284e2834bd9576cf39281b3741ea75047983af27073cc482ae9780bc5b72c35dbc67c4be3840bb0f9ffa6146e32476cd631a7022d7cd3a802d216d9cde101", 0xdd}], 0x4}}, {{&(0x7f0000001640)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x3, 0xe, 0x9, "335d9fe48f6347e961aa133b50a0042b4939cd3d6fa2b06c5f18c6cdc92f72797cffc323878cb47db5bf1be8fa207da40736384f815b8802d4ab54b0f40004", 0x24}, 0x80, &(0x7f0000001800)=[{&(0x7f00000016c0)="a79e520b7e7c6000411f055203ec", 0xe}, {0x0}, {&(0x7f0000003840)="02c3bc85809949b73a0fe1e0a4c500acec3b759c215d1b98437a047645666e6211516708425d44f23359cf28cc681698c30abd18003fc9240c228503dd4f2082c03c66db7dc35e827022ae5920f3036b2d43e533c0dd619fe965dab875c671c3ed8969c19801dbd3fe0ed3658b79c4a80f3a315f9b17fa5f733697d2ba5bead1167d650b90ddc4b0d0d4cf024fe2d25d68fceb4409f084c3291299d25b82c50e0db2e47f03edb06767e9aa6e907b4106d145b0ba5938eb13a068f985fc422180d26fc51f6f92132ec0175d3fe016bd83c50f39f836e027346dbffb4b87b29513a1b4c2c0da421c841ab07ff8", 0xec}, {&(0x7f0000003940)="51097f00d468a39ca66b983deff0d24d0f05fd376c56dd1ce54343ec6e384e731cc42431a13c3c0272abc3adcf8094d64359a9075fb004907937280a68be2ec819754da1080c6da67dbf71c972d938c72e5e90d4ed8a7abbc9e730a911b75a05e09ea936865822cb94babfa40ae223c8aebfdd38e638b68b5bbd91bd8bf91029926b8bdc75401561db151e132668775fbff01b4ca3ad7938f96b02f30e912d06b13bd3", 0xa3}], 0x4}}], 0x4, 0x4000) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000ec2800000034000000040000000000000014000000000000002900000034000000fdffffff00000000d0000000000000002900000004000000041600000000000007100000000102099f000800000000000000fe53f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b005008d3894180b6aa7527a0730000000010a7a018005000000000000000400000000000000060000000000000004000000000000000b0000000000000005020a7e05020bf4c910fc0200000000000000000000000000009300000000140000000000000029000000340000000000000000000000f80000000000000029000000360000005e1b000000000000ff2350d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b00010000010001000738000000030c00ff0f020000000000000066090000000000000700000000000000f7ffffffffffffff010000000000000001000000000000000854c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab071800000003040307000000000000000000008000000000000001000000000000000020000000000000002900000037000000730000000000000000010000000000001400000000000000290000000b0000000000000200000000380000000000000029000000390000003a04027000000000ff010000000000000000000000000001ff020000000000000000000000000001"], 0x280}}], 0x1, 0x810) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 14m46.949825031s ago: executing program 33 (id=5004): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x40}}, 0x2) 11.513944625s ago: executing program 4 (id=7289): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x3, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) setitimer(0x2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r3, r3, 0x0) 10.933857888s ago: executing program 3 (id=7290): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0xc) close(r3) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000200)='befs\x00', 0x0) inotify_init() bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = fsopen(&(0x7f0000000140)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000240)='#\x00', &(0x7f00000002c0)="09002c429a91a7e02dd614249835300841eb56f62b62e565b0ebf99796b773d2b9611775a4a35a9adb9093563cd30a933d16f42c0c6fd5f2494d2fd4597a60b91da2dc9b87c6559cdd194dcc56775eb76583cc278cbc958b791e76672d76eb386776e65d188189d19badab568571f7", 0x6f) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r5 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x60b, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3f, 0x30, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x4, 0x606f, 0x0, 0xe7, {[@generic={0x8, 0x7, "3f0b9afb1d"}]}}}}}}}, 0x0) 10.003343979s ago: executing program 2 (id=7293): sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4000080, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c000240"], 0xdc}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x100, @local}, @echo_reply={0xe0}}}}}, 0x0) 8.866411162s ago: executing program 2 (id=7294): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x1410, 0x10100, 0x400003, 0x1, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x54, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) futex_waitv(&(0x7f00000001c0)=[{0x6, &(0x7f0000000180)=0x6, 0x2}], 0x1, 0x0, 0x0, 0x1) 8.409051245s ago: executing program 4 (id=7296): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x17, &(0x7f0000000080)={@broadcast, @local, @void, {@llc={0x8864, {@snap={0xab, 0xaa, "8000", "fd27a7", 0xf8}}}}}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x3, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r3, r3, 0x0) 7.221142935s ago: executing program 2 (id=7297): gettid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendfile(r1, r0, 0x0, 0x578410ed) 6.958129962s ago: executing program 2 (id=7299): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000c0098000aac0f0004ac0f00", @ANYRESHEX, @ANYBLOB, @ANYBLOB="702f1388ea51d126bed2aede0727f1d9b6f90eda923ca69e335de52fe0720c55586e034c2eff28604a1d97f901b65b373b2aa25300b27b361546d1a64ed3fe59a39615c14a312c314ad0ac965c5d1e0fb9baa677b320c176c7e7f07d974ba744d687b01d1f45a0821152302a5e77a10f6da73586ad416066926480a6dfbef9ad5e10ea05909d1a6aac333b50effd677b21ba5e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 6.745603786s ago: executing program 3 (id=7300): io_setup(0x8, &(0x7f0000000540)) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.419378427s ago: executing program 5 (id=7301): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x55a, &(0x7f0000000c80)="$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") unshare(0x2a020400) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) syz_io_uring_setup(0x328, &(0x7f00000003c0)={0x0, 0x2319, 0x10000, 0x4, 0x2}, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f0000000740)=[{r0, 0x104}], 0x1, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000480), 0x1, 0x2) socket(0x2, 0x80805, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x5}, 0x0, 0x0) 6.141616701s ago: executing program 4 (id=7302): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6.042892425s ago: executing program 5 (id=7303): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 5.963430569s ago: executing program 6 (id=7304): sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4000080, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c000240"], 0xdc}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x100, @local}, @echo_reply={0xe0}}}}}, 0x0) 5.951264542s ago: executing program 2 (id=7305): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) r2 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f00000003c0), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) io_uring_enter(r2, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) 5.162671822s ago: executing program 4 (id=7306): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0xc) close(r3) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000200)='befs\x00', 0x0) inotify_init() bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = fsopen(&(0x7f0000000140)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000240)='#\x00', &(0x7f00000002c0)="09002c429a91a7e02dd614249835300841eb56f62b62e565b0ebf99796b773d2b9611775a4a35a9adb9093563cd30a933d16f42c0c6fd5f2494d2fd4597a60b91da2dc9b87c6559cdd194dcc56775eb76583cc278cbc958b791e76672d76eb386776e65d188189d19badab568571f7", 0x6f) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r5 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x60b, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000d80)={0x44, &(0x7f00000008c0)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3f, 0x30, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x4, 0x606f, 0x0, 0xe7, {[@generic={0x8, 0x7, "3f0b9afb1d"}]}}}}}}}, 0x0) 4.979599845s ago: executing program 6 (id=7307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}, @TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x50}}, 0x0) 4.704225723s ago: executing program 3 (id=7308): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x200600, 0x0) syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x8000) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r3, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x34) dup3(r1, r4, 0x6700000000000000) syz_fuse_handle_req(r1, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0xa921, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 4.495590792s ago: executing program 6 (id=7309): gettid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r2, 0x0, 0x0, 0x720, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x578410ed) 4.441262062s ago: executing program 6 (id=7310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0x2, 0xffffffff}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fanotify_init(0x200, 0x0) writev(r4, &(0x7f00000005c0)=[{0x0}, {0x0}], 0x2) r5 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x2982, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f00000000c0)='/sys/fs/smackfs/access\x00', 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@nested={0x4, 0x5}]}, 0x18}}, 0x0) recvfrom$inet(r6, &(0x7f0000000000)=""/17, 0x11, 0x2000, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x8, 0x80, @SEQ_CONTROLLER=0xfe, 0x1, 0xec, 0x80}) read(r5, &(0x7f00000011c0)=""/221, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r8, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r9, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410}}) 4.328626623s ago: executing program 5 (id=7311): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) unshare(0x2a020480) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvmsg(r1, 0x0, 0x2002) 3.97589424s ago: executing program 3 (id=7312): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="98000000100001002abd", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c00168058000180"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) 3.817395381s ago: executing program 5 (id=7313): socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x17, &(0x7f0000000080)={@broadcast, @local, @void, {@llc={0x8864, {@snap={0xab, 0xaa, "8000", "fd27a7", 0xf8}}}}}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x3, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r3, r3, 0x0) 3.72671425s ago: executing program 3 (id=7314): io_setup(0x8, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.71170285s ago: executing program 2 (id=7315): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x17, &(0x7f0000000080)={@broadcast, @local, @void, {@llc={0x8864, {@snap={0xab, 0xaa, "8000", "fd27a7", 0xf8}}}}}, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0x3, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) setitimer(0x2, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r4, r4, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x401}}, 0x2, 0x9}, &(0x7f0000000980)=0x90) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x40045b17, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580), 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x7fffffff, 0x30}, 0xc) 2.445910503s ago: executing program 3 (id=7316): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r5 = syz_io_uring_setup(0x110, 0x0, &(0x7f0000000040), 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) sendmsg$NFNL_MSG_ACCT_DEL(r2, 0x0, 0x4040004) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) close(r7) io_uring_enter(r5, 0x1f85, 0x40110a, 0x4d, 0x0, 0xa6) recvmmsg$unix(r3, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000240)=@hci, 0x80, &(0x7f0000000100)}, 0x11f81) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000500)={0xa, @sliced={0x0, [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x3]}}) 2.351436993s ago: executing program 6 (id=7317): sendto$inet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4000080, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c000240"], 0xdc}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x100, @local}, @echo_reply={0xe0}}}}}, 0x0) 1.262587901s ago: executing program 6 (id=7318): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) socket(0x15, 0x800, 0x0) 882.25355ms ago: executing program 4 (id=7319): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}, @TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x93}, {0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}}]}]}]}}]}, 0x60}}, 0x0) 203.288841ms ago: executing program 5 (id=7320): gettid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) recvfrom$inet(r2, 0x0, 0x0, 0x720, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x578410ed) 201.589177ms ago: executing program 4 (id=7321): r0 = socket$kcm(0x23, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/234, 0xea}, {0x0}], 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 0s ago: executing program 5 (id=7322): io_setup(0x8, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): otacheck: Done. [ 2029.309300][T24438] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 2031.928075][T29831] netlink: 'syz.6.6479': attribute type 4 has an invalid length. [ 2032.237496][T29835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6481'. [ 2034.559985][T29860] netlink: 'syz.6.6487': attribute type 1 has an invalid length. [ 2034.660144][T29860] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2034.802353][T29860] veth5: entered promiscuous mode [ 2034.815342][T25186] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 2034.819255][T29860] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 2034.986150][T25186] usb 6-1: config 0 has an invalid interface number: 96 but max is 0 [ 2035.003464][T25186] usb 6-1: config 0 has no interface number 0 [ 2035.014023][T25186] usb 6-1: config 0 interface 96 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2035.067455][T25186] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10ad, bcdDevice=b7.e9 [ 2035.086254][T25186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2035.103494][T25186] usb 6-1: Product: syz [ 2035.107764][T25186] usb 6-1: Manufacturer: syz [ 2035.112373][T25186] usb 6-1: SerialNumber: syz [ 2035.144445][T25186] usb 6-1: config 0 descriptor?? [ 2035.150276][T29862] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2035.162153][T25186] em28xx 6-1:0.96: New device syz syz @ 12 Mbps (0ccd:10ad, interface 96, class 96) [ 2035.193439][T25186] em28xx 6-1:0.96: Device initialization failed. [ 2035.201035][T29844] loop2: detected capacity change from 0 to 65536 [ 2035.208071][T25186] em28xx 6-1:0.96: Device must be connected to a high-speed USB 2.0 port. [ 2035.433285][ T5932] IPVS: starting estimator thread 0... [ 2035.465860][T29844] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 2035.523756][T29877] IPVS: using max 29 ests per chain, 69600 per kthread [ 2035.530942][T29844] XFS (loop2): AIL initialisation failed: error -12 [ 2035.594545][T29844] XFS (loop2): log mount failed [ 2036.261269][ T5932] usb 6-1: USB disconnect, device number 7 [ 2037.373321][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.384533][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.109006][T29915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6493'. [ 2038.207614][T29917] netlink: 'syz.2.6499': attribute type 1 has an invalid length. [ 2038.418932][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 2038.418977][ T29] audit: type=1326 audit(1768357981.243:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29920 comm="syz.6.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2038.501582][ T29] audit: type=1326 audit(1768357981.243:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29920 comm="syz.6.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2038.504600][T29917] veth9: entered promiscuous mode [ 2038.540531][ T29] audit: type=1326 audit(1768357981.253:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29920 comm="syz.6.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2038.582456][ T29] audit: type=1326 audit(1768357981.253:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29920 comm="syz.6.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2038.731907][T29917] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 2038.809463][ T29] audit: type=1326 audit(1768357981.253:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29920 comm="syz.6.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2038.884403][ T29] audit: type=1326 audit(1768357981.293:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29920 comm="syz.6.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2038.925430][ T29] audit: type=1326 audit(1768357981.333:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29920 comm="syz.6.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2038.961936][T29932] netlink: 'syz.4.6503': attribute type 1 has an invalid length. [ 2039.125496][T29932] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2039.659618][ T29] audit: type=1326 audit(1768357981.333:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29920 comm="syz.6.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2039.683103][ T29] audit: type=1326 audit(1768357981.333:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29920 comm="syz.6.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2039.790943][T29939] veth9: entered promiscuous mode [ 2039.950952][T29939] bond3: (slave veth9): Enslaving as a backup interface with a down link [ 2040.008109][ T29] audit: type=1326 audit(1768357981.333:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29920 comm="syz.6.6501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2041.754970][T29973] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6512'. [ 2044.183708][T30003] netlink: 35 bytes leftover after parsing attributes in process `syz.3.6517'. [ 2046.195967][T30030] netlink: 'syz.6.6528': attribute type 4 has an invalid length. [ 2047.518112][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2047.530473][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2047.573007][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2047.582295][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2047.590501][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2047.635333][T24026] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2047.673832][T24026] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2047.691698][T24026] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2047.699765][T24026] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2047.717041][T24026] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2049.695365][T30048] chnl_net:caif_netlink_parms(): no params data found [ 2049.813621][T24026] Bluetooth: hci1: command tx timeout [ 2049.948620][T30048] bridge0: port 1(bridge_slave_0) entered blocking state [ 2049.955870][T30048] bridge0: port 1(bridge_slave_0) entered disabled state [ 2049.963086][T30048] bridge_slave_0: entered allmulticast mode [ 2049.992139][T30048] bridge_slave_0: entered promiscuous mode [ 2050.008211][T30048] bridge0: port 2(bridge_slave_1) entered blocking state [ 2050.015551][T30048] bridge0: port 2(bridge_slave_1) entered disabled state [ 2050.022819][T30048] bridge_slave_1: entered allmulticast mode [ 2050.084266][T30048] bridge_slave_1: entered promiscuous mode [ 2050.235100][T30091] netlink: 35 bytes leftover after parsing attributes in process `syz.5.6539'. [ 2050.400277][T30048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2050.494252][T30048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2050.659673][T30048] team0: Port device team_slave_0 added [ 2050.919133][T30048] team0: Port device team_slave_1 added [ 2050.926469][T25186] libceph: connect (1)[c::]:6789 error -101 [ 2050.932579][T25186] libceph: mon0 (1)[c::]:6789 connect error [ 2051.692205][T17094] libceph: connect (1)[c::]:6789 error -101 [ 2051.698987][T17094] libceph: mon0 (1)[c::]:6789 connect error [ 2051.763994][T30048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2051.772288][T30048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2051.805101][T30048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2051.821895][T30048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2051.829211][T30048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2051.863996][T30048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2051.922786][T24026] Bluetooth: hci1: command tx timeout [ 2052.199419][T30048] hsr_slave_0: entered promiscuous mode [ 2052.206557][T30048] hsr_slave_1: entered promiscuous mode [ 2052.218485][T17094] libceph: connect (1)[c::]:6789 error -101 [ 2052.225601][T17094] libceph: mon0 (1)[c::]:6789 connect error [ 2052.232374][T30048] debugfs: 'hsr0' already exists in 'hsr' [ 2052.300387][T30048] Cannot create hsr debugfs directory [ 2052.697886][T30098] ceph: No mds server is up or the cluster is laggy [ 2053.850475][T30048] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.935668][T30048] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2053.974163][T24026] Bluetooth: hci1: command tx timeout [ 2054.226702][T30048] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2054.338133][T30048] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.767435][T30048] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2055.815023][T25186] libceph: connect (1)[c::]:6789 error -101 [ 2055.821065][T25186] libceph: mon0 (1)[c::]:6789 connect error [ 2055.863496][ T5932] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2055.874295][T30048] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2055.938473][T30048] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2055.998390][T30048] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2056.044410][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 2056.067290][T24026] Bluetooth: hci1: command tx timeout [ 2056.077107][ T5932] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2056.087048][ T5932] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 2056.097760][ T5932] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2056.110972][ T5932] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2056.130671][T25186] libceph: connect (1)[c::]:6789 error -101 [ 2056.141264][T25186] libceph: mon0 (1)[c::]:6789 connect error [ 2056.153971][ T5932] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2056.163047][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2056.171098][ T5932] usb 4-1: Product: syz [ 2056.175382][ T5932] usb 4-1: Manufacturer: syz [ 2056.179989][ T5932] usb 4-1: SerialNumber: syz [ 2056.312081][T30165] netlink: 35 bytes leftover after parsing attributes in process `syz.5.6554'. [ 2056.426068][ T5932] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 2056.614085][T30048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2057.203734][T25186] libceph: connect (1)[c::]:6789 error -101 [ 2057.209833][T25186] libceph: mon0 (1)[c::]:6789 connect error [ 2057.652087][T30048] 8021q: adding VLAN 0 to HW filter on device team0 [ 2057.692428][T16107] bridge0: port 1(bridge_slave_0) entered blocking state [ 2057.699617][T16107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2057.761356][T16107] bridge0: port 2(bridge_slave_1) entered blocking state [ 2057.768557][T16107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2058.374340][T30149] ceph: No mds server is up or the cluster is laggy [ 2058.576472][T24756] usb 4-1: USB disconnect, device number 62 [ 2058.597010][T24756] usblp0: removed [ 2058.617447][T30048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2058.768204][T30048] veth0_vlan: entered promiscuous mode [ 2058.809943][T30048] veth1_vlan: entered promiscuous mode [ 2058.925827][T30048] veth0_macvtap: entered promiscuous mode [ 2058.942019][T30048] veth1_macvtap: entered promiscuous mode [ 2058.947575][T30190] netlink: 'syz.6.6564': attribute type 1 has an invalid length. [ 2059.023977][T30048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2059.283848][T30048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2059.303137][T30200] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2059.692913][T30201] veth7: entered promiscuous mode [ 2059.705508][T30201] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 2059.840127][T15204] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2059.861443][T15204] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2060.194513][T15204] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2060.304471][T15204] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2060.622855][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2060.753644][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2060.862076][T19579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2060.871140][T19579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2062.113939][T30233] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6571'. [ 2062.174046][T30233] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6571'. [ 2063.193432][T30245] netlink: 35 bytes leftover after parsing attributes in process `syz.5.6573'. [ 2064.347144][T30256] netlink: 'syz.5.6577': attribute type 1 has an invalid length. [ 2064.479703][T24756] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2064.633998][T24756] usb 3-1: device descriptor read/64, error -71 [ 2064.672377][T17094] libceph: connect (1)[c::]:6789 error -101 [ 2064.679061][T30256] veth3: entered promiscuous mode [ 2064.688827][T17094] libceph: mon0 (1)[c::]:6789 connect error [ 2064.706760][T30256] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 2064.914156][T30266] netlink: 'syz.6.6578': attribute type 1 has an invalid length. [ 2064.934224][T24756] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2065.023649][T30266] veth9: entered promiscuous mode [ 2065.023860][T17094] libceph: connect (1)[c::]:6789 error -101 [ 2065.044498][T17094] libceph: mon0 (1)[c::]:6789 connect error [ 2065.262001][T24756] usb 3-1: device descriptor read/64, error -71 [ 2065.380298][T24756] usb usb3-port1: attempt power cycle [ 2065.563962][T17094] libceph: connect (1)[c::]:6789 error -101 [ 2065.570038][T17094] libceph: mon0 (1)[c::]:6789 connect error [ 2065.763645][T24756] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 2065.785103][T30261] ceph: No mds server is up or the cluster is laggy [ 2065.795226][T24756] usb 3-1: device descriptor read/8, error -71 [ 2066.043464][T24756] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2066.064378][T24756] usb 3-1: device descriptor read/8, error -71 [ 2066.184006][T24756] usb usb3-port1: unable to enumerate USB device [ 2066.720967][T30299] netlink: 35 bytes leftover after parsing attributes in process `syz.3.6587'. [ 2068.104733][T25186] IPVS: starting estimator thread 0... [ 2068.431539][T30318] IPVS: using max 34 ests per chain, 81600 per kthread [ 2068.678585][T24756] IPVS: starting estimator thread 0... [ 2068.873520][T30322] IPVS: using max 33 ests per chain, 79200 per kthread [ 2070.103490][ T5964] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 2070.331763][T30349] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6599'. [ 2070.396476][T30349] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6599'. [ 2070.414323][ T5964] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 2070.426418][ T5964] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2070.443543][ T5964] usb 3-1: config 0 has no interfaces? [ 2070.463790][ T5964] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2070.505913][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2070.553604][ T5964] usb 3-1: config 0 descriptor?? [ 2070.781346][T25071] usb 3-1: USB disconnect, device number 83 [ 2071.928646][T30369] netlink: 'syz.2.6603': attribute type 4 has an invalid length. [ 2074.273840][T25071] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2074.423807][T30392] syzkaller1: entered promiscuous mode [ 2074.512549][T30392] syzkaller1: entered allmulticast mode [ 2074.531697][T25071] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 2074.711798][T25071] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2074.726506][T25071] usb 5-1: config 0 has no interfaces? [ 2074.732597][T25071] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2074.757895][T25071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2074.767854][T25071] usb 5-1: config 0 descriptor?? [ 2075.942600][T30412] netlink: 'syz.2.6613': attribute type 4 has an invalid length. [ 2076.126800][T25071] IPVS: starting estimator thread 0... [ 2076.133781][ T5964] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2076.233491][T30414] IPVS: using max 33 ests per chain, 79200 per kthread [ 2076.520538][ T5964] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 2076.542464][ T5964] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2076.598653][ T5964] usb 6-1: config 0 has no interfaces? [ 2076.636088][ T5964] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2076.667968][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2076.712712][ T5964] usb 6-1: config 0 descriptor?? [ 2077.986224][T25071] usb 5-1: USB disconnect, device number 63 [ 2080.004377][T30447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6622'. [ 2080.028014][T25071] usb 6-1: USB disconnect, device number 8 [ 2080.263066][T30433] loop3: detected capacity change from 0 to 32768 [ 2080.277901][T30433] btrfs: Deprecated parameter 'usebackuproot' [ 2080.288884][T30433] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 2080.360034][T30455] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6624'. [ 2080.520102][T30433] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6619 (30433) [ 2080.834999][T30433] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2080.855158][T30433] BTRFS info (device loop3): using crc32c checksum algorithm [ 2080.883316][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 2080.892974][ T29] audit: type=1326 audit(1768358023.713:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30450 comm="syz.4.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2080.918304][ T29] audit: type=1326 audit(1768358023.713:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30450 comm="syz.4.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2080.973486][ T29] audit: type=1326 audit(1768358023.713:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30450 comm="syz.4.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2080.996103][ T29] audit: type=1326 audit(1768358023.713:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30450 comm="syz.4.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2081.039555][ T29] audit: type=1326 audit(1768358023.863:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30461 comm="syz.4.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f25a67c2005 code=0x7ffc0000 [ 2081.123425][ T29] audit: type=1326 audit(1768358023.863:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30450 comm="syz.4.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2081.214154][T25071] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 2081.321680][ T29] audit: type=1326 audit(1768358023.863:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30450 comm="syz.4.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2081.360004][T19698] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 2081.378934][ T29] audit: type=1326 audit(1768358023.913:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30450 comm="syz.4.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2081.393575][T30433] BTRFS error (device loop3): failed to load root extent [ 2081.403224][T25071] usb 3-1: config 0 has an invalid interface number: 96 but max is 0 [ 2081.417363][T25071] usb 3-1: config 0 has no interface number 0 [ 2081.423942][T25071] usb 3-1: config 0 interface 96 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2081.439445][T30433] BTRFS warning (device loop3): try to load backup roots slot 1 [ 2081.439719][ T29] audit: type=1326 audit(1768358023.993:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30450 comm="syz.4.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2081.488600][T25071] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10ad, bcdDevice=b7.e9 [ 2081.502490][T19698] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 2081.516789][T25071] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2081.542017][T30433] BTRFS warning (device loop3): couldn't read tree root [ 2081.549948][T30433] BTRFS warning (device loop3): try to load backup roots slot 2 [ 2081.552117][T25071] usb 3-1: Product: syz [ 2081.573507][ T29] audit: type=1326 audit(1768358023.993:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30450 comm="syz.4.6625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2081.601441][T25071] usb 3-1: Manufacturer: syz [ 2081.609374][T25071] usb 3-1: SerialNumber: syz [ 2081.635144][T25071] usb 3-1: config 0 descriptor?? [ 2081.644555][T19579] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 2081.718605][T30433] BTRFS warning (device loop3): couldn't read tree root [ 2081.744831][T30433] BTRFS warning (device loop3): try to load backup roots slot 3 [ 2081.802625][T30458] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2081.827590][T25071] em28xx 3-1:0.96: New device syz syz @ 12 Mbps (0ccd:10ad, interface 96, class 96) [ 2081.856160][T25071] em28xx 3-1:0.96: Device initialization failed. [ 2081.872111][T30433] BTRFS info (device loop3): rebuilding free space tree [ 2081.883736][T25071] em28xx 3-1:0.96: Device must be connected to a high-speed USB 2.0 port. [ 2082.177484][T30433] BTRFS info (device loop3): checking UUID tree [ 2082.193701][T30433] BTRFS warning (device loop3): failed to start uuid_rescan task [ 2082.202609][T30433] BTRFS warning (device loop3): failed to check the UUID tree: -4 [ 2082.395321][T30433] BTRFS error (device loop3): open_ctree failed: -4 [ 2083.077889][T17094] usb 3-1: USB disconnect, device number 84 [ 2083.485151][T30490] netlink: 'syz.4.6628': attribute type 4 has an invalid length. [ 2084.109565][T30511] netlink: 'syz.5.6633': attribute type 4 has an invalid length. [ 2084.161573][T30512] : renamed from bridge_slave_0 (while UP) [ 2085.411221][T30522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6636'. [ 2086.004311][T30539] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6639'. [ 2086.036632][T30539] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6639'. [ 2086.232878][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 2086.232899][ T29] audit: type=1326 audit(1768358029.053:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30527 comm="syz.3.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e4b8f749 code=0x7ffc0000 [ 2086.261644][ T29] audit: type=1326 audit(1768358029.053:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30527 comm="syz.3.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e4b8f749 code=0x7ffc0000 [ 2086.284324][ T29] audit: type=1326 audit(1768358029.063:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30536 comm="syz.3.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76e4bc2005 code=0x7ffc0000 [ 2086.574354][ T29] audit: type=1326 audit(1768358029.373:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30536 comm="syz.3.6638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f76e4b8f749 code=0x7ffc0000 [ 2087.023511][ T5964] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 2087.305088][ T5964] usb 3-1: config 0 has an invalid interface number: 96 but max is 0 [ 2087.323592][ T5964] usb 3-1: config 0 has no interface number 0 [ 2087.329770][ T5964] usb 3-1: config 0 interface 96 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2087.492915][ T5964] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10ad, bcdDevice=b7.e9 [ 2087.514480][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2087.543106][ T5964] usb 3-1: Product: syz [ 2087.555002][ T5964] usb 3-1: Manufacturer: syz [ 2087.559629][ T5964] usb 3-1: SerialNumber: syz [ 2087.584695][ T5964] usb 3-1: config 0 descriptor?? [ 2087.595800][T30549] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2087.765819][ T5964] em28xx 3-1:0.96: New device syz syz @ 12 Mbps (0ccd:10ad, interface 96, class 96) [ 2087.798485][ T5964] em28xx 3-1:0.96: Device initialization failed. [ 2087.813696][ T5964] em28xx 3-1:0.96: Device must be connected to a high-speed USB 2.0 port. [ 2088.670161][T25071] usb 3-1: USB disconnect, device number 85 [ 2089.596644][T30580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6649'. [ 2090.063283][T30567] loop5: detected capacity change from 0 to 32768 [ 2090.119509][T30588] netlink: 35 bytes leftover after parsing attributes in process `syz.6.6652'. [ 2090.139955][T30567] btrfs: Deprecated parameter 'usebackuproot' [ 2090.159294][T30567] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 2090.191282][T30567] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6646 (30567) [ 2090.298578][T30567] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2090.308953][T30567] BTRFS info (device loop5): using crc32c checksum algorithm [ 2090.369184][T19744] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 2090.401483][T30567] BTRFS error (device loop5): failed to load root extent [ 2090.473617][ T5964] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 2090.483310][T30567] BTRFS warning (device loop5): try to load backup roots slot 1 [ 2090.491670][T17207] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 2090.525475][T30567] BTRFS warning (device loop5): couldn't read tree root [ 2090.565664][T30567] BTRFS warning (device loop5): try to load backup roots slot 2 [ 2090.586522][T24764] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 2090.599916][T30567] BTRFS warning (device loop5): couldn't read tree root [ 2090.614177][T30567] BTRFS warning (device loop5): try to load backup roots slot 3 [ 2090.675175][ T5964] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2090.709068][ T5964] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 2090.724479][ T5964] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2090.744484][ T5964] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2090.776236][T30567] BTRFS info (device loop5): rebuilding free space tree [ 2090.876337][ T5964] usb 3-1: config 64 interface 0 has no altsetting 0 [ 2090.896674][ T5964] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 2090.906697][ T5964] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2090.931537][T30567] BTRFS info (device loop5): checking UUID tree [ 2090.950119][T30567] BTRFS info (device loop5): enabling ssd optimizations [ 2090.959365][T30567] BTRFS info (device loop5): turning off barriers [ 2090.962268][ T5964] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2090.965974][T30567] BTRFS info (device loop5): turning on sync discard [ 2090.965999][T30567] BTRFS info (device loop5): enabling free space tree [ 2090.966017][T30567] BTRFS info (device loop5): force clearing of disk cache [ 2090.966035][T30567] BTRFS info (device loop5): enabling auto defrag [ 2090.966056][T30567] BTRFS info (device loop5): trying to use backup root at mount time [ 2090.966079][T30567] BTRFS info (device loop5): use lzo compression, level 1 [ 2091.023946][ T5964] usb 3-1: config 64 interface 0 has no altsetting 0 [ 2091.042562][ T5964] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 2091.052090][ T5964] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2091.119338][ T5964] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2091.133430][ T5964] usb 3-1: config 64 interface 0 has no altsetting 0 [ 2091.152310][ T5964] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 2091.162000][ T5964] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2091.174977][ T5964] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2091.187912][ T5964] usb 3-1: config 64 interface 0 has no altsetting 0 [ 2091.196225][ T5964] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 2091.205540][ T5964] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2091.223550][ T5964] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2091.284643][ T5964] usb 3-1: config 64 interface 0 has no altsetting 0 [ 2091.381928][ T5964] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 2091.394286][ T5964] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2091.405607][ T5964] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2091.417717][ T5964] usb 3-1: config 64 interface 0 has no altsetting 0 [ 2091.430474][T24438] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2091.431450][ T5964] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 2091.926458][ T5964] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2091.956822][ T5964] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2092.043691][ T5964] usb 3-1: config 64 interface 0 has no altsetting 0 [ 2092.110074][ T5964] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 2092.141234][ T5964] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2092.226540][ T5964] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2092.244373][ T5964] usb 3-1: config 64 interface 0 has no altsetting 0 [ 2092.253959][ T5964] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2092.263117][ T5964] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2092.274716][ T5964] usb 3-1: Product: syz [ 2092.279018][ T5964] usb 3-1: Manufacturer: syz [ 2092.318318][ T5964] usb 3-1: SerialNumber: syz [ 2092.357959][ T5964] yurex 3-1:64.0: Could not submitting URB [ 2092.383692][ T5964] yurex 3-1:64.0: probe with driver yurex failed with error -5 [ 2092.505024][T30622] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6657'. [ 2092.710032][T30629] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6659'. [ 2092.863747][T30639] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2092.890619][T30637] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6659'. [ 2092.921840][ T5964] usb 3-1: USB disconnect, device number 86 [ 2094.494406][T30664] netlink: 35 bytes leftover after parsing attributes in process `syz.3.6668'. [ 2095.684077][T30674] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6670'. [ 2095.745023][T30673] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6670'. [ 2096.081279][T30676] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6671'. [ 2096.220880][T30679] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 2096.228786][T30679] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 2096.593619][T17094] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 2097.335478][T17094] usb 6-1: config 0 has an invalid interface number: 96 but max is 0 [ 2097.343650][T17094] usb 6-1: config 0 has no interface number 0 [ 2097.351851][T17094] usb 6-1: config 0 interface 96 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 2097.370113][T17094] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10ad, bcdDevice=b7.e9 [ 2097.379342][T17094] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2097.387425][T17094] usb 6-1: Product: syz [ 2097.393447][T17094] usb 6-1: Manufacturer: syz [ 2097.399789][T30691] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6674'. [ 2097.408950][T17094] usb 6-1: SerialNumber: syz [ 2097.419677][T17094] usb 6-1: config 0 descriptor?? [ 2097.426461][T30681] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2097.437623][T17094] em28xx 6-1:0.96: New device syz syz @ 12 Mbps (0ccd:10ad, interface 96, class 96) [ 2097.447428][T17094] em28xx 6-1:0.96: Device initialization failed. [ 2097.520707][T17094] em28xx 6-1:0.96: Device must be connected to a high-speed USB 2.0 port. [ 2097.628541][T30691] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6674'. [ 2097.794796][T17094] usb 6-1: USB disconnect, device number 9 [ 2097.885450][T30699] QAT: failed to copy from user. [ 2098.799743][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.806337][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.383617][T30718] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2099.902671][T30728] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6684'. [ 2099.963180][T30729] netlink: 35 bytes leftover after parsing attributes in process `syz.4.6683'. [ 2100.433065][T30731] veth11: entered promiscuous mode [ 2100.623506][ T5964] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2100.825160][ T5964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2100.836345][ T5964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2100.846232][ T5964] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2100.944338][ T5964] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2100.963416][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.976388][ T5964] usb 4-1: config 0 descriptor?? [ 2101.376155][T17094] libceph: connect (1)[c::]:6789 error -101 [ 2101.382265][T17094] libceph: mon0 (1)[c::]:6789 connect error [ 2101.429677][ T5964] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 2101.733763][T17094] libceph: connect (1)[c::]:6789 error -101 [ 2101.739930][T17094] libceph: mon0 (1)[c::]:6789 connect error [ 2101.891930][T30755] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6690'. [ 2101.960132][T30755] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6690'. [ 2102.007967][ T5964] usb 4-1: USB disconnect, device number 63 [ 2102.255109][T17094] libceph: connect (1)[c::]:6789 error -101 [ 2102.268713][T17094] libceph: mon0 (1)[c::]:6789 connect error [ 2102.408201][T30760] veth1_to_bond: entered allmulticast mode [ 2102.952496][T30768] QAT: failed to copy from user. [ 2103.733950][T17094] libceph: connect (1)[c::]:6789 error -101 [ 2103.740090][T17094] libceph: mon0 (1)[c::]:6789 connect error [ 2103.805706][T30757] veth1_to_bond: left allmulticast mode [ 2103.963922][T30746] ceph: No mds server is up or the cluster is laggy [ 2104.235582][T30770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6694'. [ 2104.451150][T30775] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6696'. [ 2106.263539][T17094] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2106.512268][T17094] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 2106.520858][T17094] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2106.581205][T17094] usb 3-1: config 0 has no interfaces? [ 2106.587033][T17094] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2106.599879][T17094] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2106.609810][T17094] usb 3-1: config 0 descriptor?? [ 2107.617404][T30810] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6704'. [ 2108.357534][T30803] loop3: detected capacity change from 0 to 32768 [ 2108.375705][T30803] btrfs: Deprecated parameter 'usebackuproot' [ 2108.387080][T30803] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 2108.425232][T30803] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6702 (30803) [ 2108.478196][T30803] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2108.503483][T30803] BTRFS info (device loop3): using crc32c checksum algorithm [ 2108.795386][T15204] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 2108.810987][T30803] BTRFS error (device loop3): failed to load root extent [ 2108.822674][T30803] BTRFS warning (device loop3): try to load backup roots slot 1 [ 2108.935181][T19579] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 2108.967557][T30803] BTRFS warning (device loop3): couldn't read tree root [ 2108.976450][T30803] BTRFS warning (device loop3): try to load backup roots slot 2 [ 2108.986874][ T1100] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 2109.003085][T30803] BTRFS warning (device loop3): couldn't read tree root [ 2109.035287][T30803] BTRFS warning (device loop3): try to load backup roots slot 3 [ 2109.064980][T30803] BTRFS info (device loop3): rebuilding free space tree [ 2109.094921][ T5964] usb 3-1: USB disconnect, device number 87 [ 2109.242888][ T29] audit: type=1326 audit(1768358052.013:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30819 comm="syz.4.6709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2109.284560][T30829] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2109.305703][T30829] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2109.312988][T30803] BTRFS info (device loop3): checking UUID tree [ 2109.322362][T30803] BTRFS info (device loop3): enabling ssd optimizations [ 2109.373766][T30803] BTRFS info (device loop3): turning off barriers [ 2109.380210][T30803] BTRFS info (device loop3): turning on sync discard [ 2109.403425][ T29] audit: type=1326 audit(1768358052.023:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30819 comm="syz.4.6709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2109.443404][ T29] audit: type=1326 audit(1768358052.023:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30819 comm="syz.4.6709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2109.504049][T30803] BTRFS info (device loop3): enabling free space tree [ 2109.582041][ T29] audit: type=1326 audit(1768358052.023:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30819 comm="syz.4.6709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2109.593543][T30803] BTRFS info (device loop3): force clearing of disk cache [ 2109.645854][T30829] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2109.723576][ T29] audit: type=1326 audit(1768358052.023:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30819 comm="syz.4.6709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2109.747945][ T29] audit: type=1326 audit(1768358052.023:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30819 comm="syz.4.6709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2109.783500][ T29] audit: type=1326 audit(1768358052.033:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30819 comm="syz.4.6709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2109.785067][T30803] BTRFS info (device loop3): enabling auto defrag [ 2109.806190][ T29] audit: type=1326 audit(1768358052.033:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30819 comm="syz.4.6709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2109.866663][ T29] audit: type=1326 audit(1768358052.033:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30847 comm="syz.4.6709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f25a67c2005 code=0x7ffc0000 [ 2109.903164][T30803] BTRFS info (device loop3): trying to use backup root at mount time [ 2110.244084][T30803] BTRFS info (device loop3): use lzo compression, level 1 [ 2110.354083][ T29] audit: type=1326 audit(1768358052.073:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30819 comm="syz.4.6709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2110.380407][T25998] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2110.773425][T24026] Bluetooth: hci1: command 0x0c1a tx timeout [ 2111.983954][T30876] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6714'. [ 2111.996433][T30876] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6714'. [ 2112.259284][T30885] fuse: Bad value for 'group_id' [ 2112.265238][T30885] fuse: Bad value for 'group_id' [ 2112.900208][T24026] Bluetooth: hci1: command 0x0c1a tx timeout [ 2114.890777][T30911] QAT: failed to copy from user. [ 2115.000136][T30906] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2115.456501][T30930] fuse: Bad value for 'group_id' [ 2115.473574][T30930] fuse: Bad value for 'group_id' [ 2115.682592][T25071] libceph: connect (1)[c::]:6789 error -101 [ 2115.688806][T25071] libceph: mon0 (1)[c::]:6789 connect error [ 2115.956481][T17094] libceph: connect (1)[c::]:6789 error -101 [ 2115.964106][T17094] libceph: mon0 (1)[c::]:6789 connect error [ 2116.546790][T17094] libceph: connect (1)[c::]:6789 error -101 [ 2116.552822][T17094] libceph: mon0 (1)[c::]:6789 connect error [ 2116.592844][T30949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6735'. [ 2116.694248][T30951] QAT: failed to copy from user. [ 2116.946868][T24026] Bluetooth: hci1: command 0x0c1a tx timeout [ 2117.038737][T30953] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 2117.058134][T30953] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 2117.093691][T30953] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2117.979531][T17094] libceph: connect (1)[c::]:6789 error -101 [ 2117.985688][T17094] libceph: mon0 (1)[c::]:6789 connect error [ 2118.663742][T30934] ceph: No mds server is up or the cluster is laggy [ 2118.694582][T25071] libceph: connect (1)[c::]:6789 error -101 [ 2118.700699][T25071] libceph: mon0 (1)[c::]:6789 connect error [ 2119.228730][T30977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6743'. [ 2119.538476][T30981] veth3: entered promiscuous mode [ 2119.978490][T30995] QAT: failed to copy from user. [ 2121.133455][T24756] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2121.334657][T24756] usb 6-1: Using ep0 maxpacket: 16 [ 2121.344455][T24756] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2121.372013][T24756] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2121.391687][T24756] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2121.422979][T24756] usb 6-1: config 0 descriptor?? [ 2121.808209][T31010] loop4: detected capacity change from 0 to 32768 [ 2121.829123][T31010] btrfs: Deprecated parameter 'usebackuproot' [ 2121.839401][T31010] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 2121.860703][T31010] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6753 (31010) [ 2121.903382][T31010] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2121.904884][T24756] mcp2221 0003:04D8:00DD.0025: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 2121.931587][T31010] BTRFS info (device loop4): using crc32c checksum algorithm [ 2122.010144][ T4564] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 2122.027739][T31010] BTRFS error (device loop4): failed to load root extent [ 2122.035800][T31010] BTRFS warning (device loop4): try to load backup roots slot 1 [ 2122.048590][T24764] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 2122.064644][T31010] BTRFS warning (device loop4): couldn't read tree root [ 2122.072258][T31010] BTRFS warning (device loop4): try to load backup roots slot 2 [ 2122.082211][T15204] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 2122.096674][T31010] BTRFS warning (device loop4): couldn't read tree root [ 2122.201655][T31010] BTRFS warning (device loop4): try to load backup roots slot 3 [ 2122.334754][T31010] BTRFS info (device loop4): rebuilding free space tree [ 2122.365296][ T5932] usb 6-1: USB disconnect, device number 10 [ 2122.434832][T31010] BTRFS info (device loop4): checking UUID tree [ 2122.491235][T31010] BTRFS info (device loop4): enabling ssd optimizations [ 2122.538369][T31010] BTRFS info (device loop4): turning off barriers [ 2122.585893][T31044] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6758'. [ 2122.641308][T31044] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6758'. [ 2122.692030][T31010] BTRFS info (device loop4): turning on sync discard [ 2122.699306][T31010] BTRFS info (device loop4): enabling free space tree [ 2122.709044][T31010] BTRFS info (device loop4): force clearing of disk cache [ 2122.716402][T31010] BTRFS info (device loop4): enabling auto defrag [ 2122.723049][T31010] BTRFS info (device loop4): trying to use backup root at mount time [ 2122.908870][T31010] BTRFS info (device loop4): use lzo compression, level 1 [ 2123.227639][T25300] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2123.771892][T31060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6763'. [ 2124.556714][T31073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6760'. [ 2127.717108][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 2127.717125][ T29] audit: type=1326 audit(1768358070.553:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31122 comm="syz.5.6777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b89b8f749 code=0x7ffc0000 [ 2127.797063][T31130] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6778'. [ 2128.262503][ T29] audit: type=1326 audit(1768358070.553:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31122 comm="syz.5.6777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f0b89b8f749 code=0x7ffc0000 [ 2128.354058][ T29] audit: type=1326 audit(1768358071.133:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31122 comm="syz.5.6777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b89b8f749 code=0x7ffc0000 [ 2128.597590][ T29] audit: type=1326 audit(1768358071.133:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31122 comm="syz.5.6777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b89b8f749 code=0x7ffc0000 [ 2128.776764][ T29] audit: type=1326 audit(1768358071.613:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31133 comm="syz.6.6780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2128.872504][ T29] audit: type=1326 audit(1768358071.633:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31133 comm="syz.6.6780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2128.904306][ T29] audit: type=1326 audit(1768358071.633:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31133 comm="syz.6.6780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2128.937360][T31140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6781'. [ 2128.965605][ T29] audit: type=1326 audit(1768358071.633:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31133 comm="syz.6.6780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2128.988649][ T29] audit: type=1326 audit(1768358071.643:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31137 comm="syz.6.6780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f11049c2005 code=0x7ffc0000 [ 2129.011684][ T29] audit: type=1326 audit(1768358071.643:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31133 comm="syz.6.6780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2129.506005][T31147] QAT: failed to copy from user. [ 2131.564748][T31165] QAT: failed to copy from user. [ 2134.284768][T31197] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6796'. [ 2134.299515][T31197] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6796'. [ 2135.005460][T31205] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2136.860506][T24026] Bluetooth: hci1: command 0x0c1a tx timeout [ 2137.858884][T31223] loop3: detected capacity change from 0 to 32768 [ 2137.894571][T31223] btrfs: Deprecated parameter 'usebackuproot' [ 2138.337504][T31223] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 2138.414216][T31223] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6805 (31223) [ 2138.487398][T31223] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2138.517144][T31223] BTRFS info (device loop3): using crc32c checksum algorithm [ 2138.620598][ T4564] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 2138.649825][T31223] BTRFS error (device loop3): failed to load root extent [ 2138.713942][T31223] BTRFS warning (device loop3): try to load backup roots slot 1 [ 2138.738557][T19166] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 2138.772745][T31223] BTRFS warning (device loop3): couldn't read tree root [ 2138.817877][T31223] BTRFS warning (device loop3): try to load backup roots slot 2 [ 2138.852798][T19166] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 2138.888993][T31223] BTRFS warning (device loop3): couldn't read tree root [ 2138.919490][T31223] BTRFS warning (device loop3): try to load backup roots slot 3 [ 2139.019060][T31223] BTRFS error (device loop3): open_ctree failed: -4 [ 2139.966824][T31285] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6817'. [ 2142.627596][T31318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6823'. [ 2144.358643][T31333] loop3: detected capacity change from 0 to 32768 [ 2144.370986][T31333] btrfs: Deprecated parameter 'usebackuproot' [ 2144.377779][T31333] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 2144.388384][T31333] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6826 (31333) [ 2144.413892][T31333] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2144.448102][T31333] BTRFS info (device loop3): using crc32c checksum algorithm [ 2144.657527][T31354] veth1_to_bond: entered allmulticast mode [ 2144.720206][T15204] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 2144.763937][T31333] BTRFS error (device loop3): failed to load root extent [ 2144.777011][T31333] BTRFS warning (device loop3): try to load backup roots slot 1 [ 2144.795091][ T1100] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 2144.819695][T31333] BTRFS warning (device loop3): couldn't read tree root [ 2144.837179][T31333] BTRFS warning (device loop3): try to load backup roots slot 2 [ 2144.953822][T20939] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 2144.982189][T31333] BTRFS warning (device loop3): couldn't read tree root [ 2144.992864][T31333] BTRFS warning (device loop3): try to load backup roots slot 3 [ 2145.033659][T31333] BTRFS info (device loop3): rebuilding free space tree [ 2145.076647][T31333] BTRFS info (device loop3): checking UUID tree [ 2145.090028][T31333] BTRFS info (device loop3): enabling ssd optimizations [ 2145.129023][T31333] BTRFS info (device loop3): turning off barriers [ 2145.154659][T31333] BTRFS info (device loop3): turning on sync discard [ 2145.534769][T31368] netlink: 'syz.2.6831': attribute type 4 has an invalid length. [ 2145.571358][T31333] BTRFS info (device loop3): enabling free space tree [ 2145.607081][T31333] BTRFS info (device loop3): force clearing of disk cache [ 2145.618632][T31333] BTRFS info (device loop3): enabling auto defrag [ 2145.642450][T31333] BTRFS info (device loop3): trying to use backup root at mount time [ 2145.718144][T31339] veth1_to_bond: left allmulticast mode [ 2145.745649][T31333] BTRFS info (device loop3): use lzo compression, level 1 [ 2145.899241][T25998] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2147.231472][T31396] fuse: Unknown parameter 'grou00000000000000000000' [ 2149.965574][T31431] netlink: 'syz.5.6846': attribute type 4 has an invalid length. [ 2150.298141][T31440] fuse: Unknown parameter 'grou00000000000000000000' [ 2150.421953][T31442] QAT: failed to copy from user. [ 2152.243701][T24756] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2152.406890][T24756] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2152.464875][T24756] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 2152.486392][T24756] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2152.594646][T24756] usb 3-1: config 64 interface 0 has no altsetting 0 [ 2152.602784][T24756] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 2152.613011][T24756] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2152.635136][T24756] usb 3-1: config 64 interface 0 has no altsetting 0 [ 2152.644774][T24756] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 2152.654588][T24756] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2152.673432][T24756] usb 3-1: config 64 interface 0 has no altsetting 0 [ 2152.692118][T24756] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 2152.711669][T24756] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2152.743432][T24756] usb 3-1: config 64 interface 0 has no altsetting 0 [ 2152.763002][T24756] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 2152.784545][T24756] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2152.836199][T24756] usb 3-1: config 64 interface 0 has no altsetting 0 [ 2152.869964][T24756] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 2152.893461][T24756] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2153.033514][T24756] usb 3-1: config 64 interface 0 has no altsetting 0 [ 2153.048986][T24756] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 2153.069901][T24756] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2153.171224][T24756] usb 3-1: config 64 interface 0 has no altsetting 0 [ 2153.468007][T24756] usb 3-1: config 64 has 1 interface, different from the descriptor's value: 9 [ 2153.497971][T24756] usb 3-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2153.517039][T24756] usb 3-1: config 64 interface 0 has no altsetting 0 [ 2153.835897][T24756] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2153.854425][T24756] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2153.874565][T24756] usb 3-1: Product: syz [ 2153.878771][T24756] usb 3-1: Manufacturer: syz [ 2153.905198][T24756] usb 3-1: SerialNumber: syz [ 2153.923970][T24756] yurex 3-1:64.0: USB YUREX device now attached to Yurex #0 [ 2154.416899][T24756] usb 3-1: USB disconnect, device number 88 [ 2154.439492][T24756] yurex 3-1:64.0: USB YUREX #0 now disconnected [ 2155.129346][T31481] fuse: Unknown parameter 'grou00000000000000000000' [ 2155.628560][T31492] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6864'. [ 2158.816949][T31525] tipc: Enabling of bearer rejected, failed to enable media [ 2158.830416][T31525] syzkaller0: entered promiscuous mode [ 2158.850477][T31525] syzkaller0: entered allmulticast mode [ 2159.373084][T31532] fuse: Unknown parameter 'group_i00000000000000000000' [ 2159.569378][T17094] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2159.639944][T31540] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6876'. [ 2159.973628][T17094] usb 5-1: Using ep0 maxpacket: 16 [ 2160.002045][T17094] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2160.023286][T17094] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 2160.045696][T17094] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2160.216783][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.225068][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.827758][T17094] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2160.930041][T17094] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2160.939234][T17094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2160.947518][T17094] usb 5-1: Product: syz [ 2160.951785][T17094] usb 5-1: Manufacturer: syz [ 2160.967011][T17094] usb 5-1: SerialNumber: syz [ 2161.808001][T17094] usb 5-1: can't set config #1, error -71 [ 2161.823241][T17094] usb 5-1: USB disconnect, device number 64 [ 2162.752097][T31570] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6883'. [ 2164.011812][T31583] fuse: Unknown parameter 'group_i00000000000000000000' [ 2167.063650][T31620] QAT: failed to copy from user. [ 2168.979687][T31640] fuse: Bad value for 'fd' [ 2170.693666][T31637] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 2170.699921][T24026] Bluetooth: hci1: command 0x0c1a tx timeout [ 2171.093411][T24756] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 2171.190365][T31666] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6904'. [ 2171.254864][T31666] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6904'. [ 2171.295427][T24756] usb 5-1: Using ep0 maxpacket: 8 [ 2171.320593][T24756] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2171.346960][T24756] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2171.393548][T24756] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2171.444344][T24756] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2171.539476][T24756] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2171.623663][T24756] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2171.632876][T24756] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2172.000029][T24756] usb 5-1: GET_CAPABILITIES returned 0 [ 2172.026607][T24756] usbtmc 5-1:16.0: can't read capabilities [ 2172.441429][T31682] QAT: failed to copy from user. [ 2173.422242][T17094] usb 5-1: USB disconnect, device number 65 [ 2174.157260][T31707] random: crng reseeded on system resumption [ 2174.416543][T31717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6917'. [ 2177.413808][T31725] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 2177.493666][T24026] Bluetooth: hci1: command 0x0c1a tx timeout [ 2177.604141][T31757] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6926'. [ 2177.651555][T31757] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6926'. [ 2177.682321][T31758] QAT: failed to copy from user. [ 2177.691445][T31762] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6928'. [ 2178.169377][T31762] veth11: entered promiscuous mode [ 2178.349486][T31768] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6929'. [ 2179.537124][T31785] random: crng reseeded on system resumption [ 2180.876180][T31804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6940'. [ 2182.772952][T31820] QAT: failed to copy from user. [ 2184.297610][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 2184.297627][ T29] audit: type=1326 audit(1768358127.123:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31835 comm="syz.4.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2184.334123][ T29] audit: type=1326 audit(1768358127.123:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31835 comm="syz.4.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2184.361055][ T29] audit: type=1326 audit(1768358127.133:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31835 comm="syz.4.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2184.403433][ T29] audit: type=1326 audit(1768358127.233:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31843 comm="syz.4.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f25a67c2005 code=0x7ffc0000 [ 2184.470696][ T29] audit: type=1326 audit(1768358127.233:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31835 comm="syz.4.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2184.513449][ T5932] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2184.626716][ T29] audit: type=1326 audit(1768358127.273:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31835 comm="syz.4.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2184.673464][ T5932] usb 6-1: Using ep0 maxpacket: 16 [ 2184.718235][ T5932] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2184.741926][ T5932] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 2184.780043][ T5932] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2184.803773][T31849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6951'. [ 2185.113544][ T29] audit: type=1326 audit(1768358127.273:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31835 comm="syz.4.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2185.160618][ T5932] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2185.275272][T31855] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6952'. [ 2185.313148][T31855] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6952'. [ 2185.389198][ T5932] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2185.423422][ T29] audit: type=1326 audit(1768358127.303:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31835 comm="syz.4.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2185.463551][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2185.471634][ T5932] usb 6-1: Product: syz [ 2185.476156][ T5932] usb 6-1: Manufacturer: syz [ 2185.480740][ T5932] usb 6-1: SerialNumber: syz [ 2185.634268][ T29] audit: type=1326 audit(1768358127.303:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31835 comm="syz.4.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2185.715817][ T29] audit: type=1326 audit(1768358127.383:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31843 comm="syz.4.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2185.836786][T31859] netlink: 'syz.6.6953': attribute type 4 has an invalid length. [ 2186.483458][ T5932] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 2189.496325][T25186] usb 6-1: USB disconnect, device number 11 [ 2189.507268][T25186] usblp0: removed [ 2189.808597][T31896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6962'. [ 2190.330575][T31905] netlink: 120 bytes leftover after parsing attributes in process `syz.6.6964'. [ 2191.224859][T31923] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2192.670399][T31938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6973'. [ 2193.868838][T31954] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 2197.280799][T31986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6985'. [ 2197.421422][T31989] syzkaller0: entered promiscuous mode [ 2197.443673][T31989] syzkaller0: entered allmulticast mode [ 2198.629621][T32007] netlink: 'syz.5.6990': attribute type 1 has an invalid length. [ 2198.790717][T32011] fuse: Bad value for 'group_id' [ 2198.825124][T32007] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2198.836487][T32011] fuse: Bad value for 'group_id' [ 2198.949919][T32007] veth5: entered promiscuous mode [ 2198.976006][T32007] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 2199.326839][T32021] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6995'. [ 2200.080300][T32029] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6994'. [ 2200.424545][T32039] random: crng reseeded on system resumption [ 2200.538100][T32029] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6994'. [ 2200.743588][T24756] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2201.013650][T24756] usb 6-1: Using ep0 maxpacket: 8 [ 2201.171977][T32045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6998'. [ 2201.314614][T24756] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2201.344871][T24756] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2201.388364][T24756] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2201.459294][T24756] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2201.527729][T24756] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2201.616586][T24756] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2201.676610][T24756] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2201.868034][T32054] random: crng reseeded on system resumption [ 2201.964290][T24756] usb 6-1: GET_CAPABILITIES returned 0 [ 2201.969841][T24756] usbtmc 6-1:16.0: can't read capabilities [ 2202.483434][ T5932] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2202.565279][T32065] fuse: Bad value for 'group_id' [ 2202.693549][T32065] fuse: Bad value for 'group_id' [ 2202.723422][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 2202.737621][ T5932] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2202.761906][ T5932] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2202.830250][ T5932] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2202.892785][ T5932] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2202.909887][ T5932] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2202.963410][ T5932] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2202.985370][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2203.259580][ T5932] usb 4-1: GET_CAPABILITIES returned 0 [ 2203.278020][ T5932] usbtmc 4-1:16.0: can't read capabilities [ 2203.899471][ T5932] usb 6-1: USB disconnect, device number 12 [ 2204.244953][T32080] random: crng reseeded on system resumption [ 2204.853370][ T5932] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2205.046539][ T5932] usb 6-1: Using ep0 maxpacket: 8 [ 2205.075186][ T5932] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 2205.103500][ T5932] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2205.143396][ T5932] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2205.193420][ T5932] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2205.284323][ T5932] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2205.354063][ T5932] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2205.383562][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2205.425499][T24756] usb 4-1: USB disconnect, device number 64 [ 2205.459650][T32085] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7009'. [ 2205.660919][ T5932] usb 6-1: GET_CAPABILITIES returned 0 [ 2205.677051][ T5932] usbtmc 6-1:16.0: can't read capabilities [ 2206.285789][T32087] loop3: detected capacity change from 0 to 32768 [ 2206.335661][T32087] btrfs: Deprecated parameter 'usebackuproot' [ 2206.351346][T32087] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 2206.381186][T32087] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7010 (32087) [ 2206.424590][T32087] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2206.452512][T32087] BTRFS info (device loop3): using crc32c checksum algorithm [ 2206.547518][ T4564] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 2206.654510][T32087] BTRFS error (device loop3): failed to load root extent [ 2206.662097][T32087] BTRFS warning (device loop3): try to load backup roots slot 1 [ 2206.671174][ T4564] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 2206.740516][T32087] BTRFS warning (device loop3): couldn't read tree root [ 2206.755527][T32087] BTRFS warning (device loop3): try to load backup roots slot 2 [ 2206.764831][T32117] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2206.794864][ T35] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 2206.813407][T32087] BTRFS warning (device loop3): couldn't read tree root [ 2206.820647][T32087] BTRFS warning (device loop3): try to load backup roots slot 3 [ 2206.861191][T32087] BTRFS info (device loop3): rebuilding free space tree [ 2206.896871][T32087] BTRFS info (device loop3): checking UUID tree [ 2206.912757][T32087] BTRFS info (device loop3): enabling ssd optimizations [ 2206.922693][T32087] BTRFS info (device loop3): turning off barriers [ 2206.932589][T32087] BTRFS info (device loop3): turning on sync discard [ 2206.944087][T32087] BTRFS info (device loop3): enabling free space tree [ 2206.950905][T32087] BTRFS info (device loop3): force clearing of disk cache [ 2206.959160][T32087] BTRFS info (device loop3): enabling auto defrag [ 2206.966034][T32087] BTRFS info (device loop3): trying to use backup root at mount time [ 2206.975064][T32087] BTRFS info (device loop3): use lzo compression, level 1 [ 2207.053546][T32124] QAT: failed to copy from user. [ 2207.243507][T25998] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2207.364224][T32129] QAT: failed to copy from user. [ 2207.977580][T24756] usb 6-1: USB disconnect, device number 13 [ 2208.759604][T32135] loop3: detected capacity change from 0 to 32768 [ 2208.767159][T32135] btrfs: Deprecated parameter 'usebackuproot' [ 2208.773260][T32135] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 2208.795690][T32135] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7019 (32135) [ 2208.876281][T32159] random: crng reseeded on system resumption [ 2208.922361][T32135] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2208.932717][T32135] BTRFS info (device loop3): using crc32c checksum algorithm [ 2209.223413][T25186] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2209.269932][ T35] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 2209.360690][T32135] BTRFS error (device loop3): failed to load root extent [ 2209.513484][T25186] usb 5-1: Using ep0 maxpacket: 8 [ 2209.565309][T25186] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2209.574377][T25186] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2209.590807][T25186] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2209.725821][T32135] BTRFS warning (device loop3): try to load backup roots slot 1 [ 2209.734409][ T35] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 2209.809381][T32135] BTRFS warning (device loop3): couldn't read tree root [ 2209.823911][T32135] BTRFS warning (device loop3): try to load backup roots slot 2 [ 2209.842539][ T4482] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 2209.855676][T25186] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2209.855685][T32135] BTRFS warning (device loop3): couldn't read tree root [ 2209.855708][T32135] BTRFS warning (device loop3): try to load backup roots slot 3 [ 2209.934948][T25186] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2209.941879][T32135] BTRFS info (device loop3): rebuilding free space tree [ 2210.005426][T25186] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2210.036789][T25186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2210.077156][T32135] BTRFS info (device loop3): checking UUID tree [ 2210.114141][T32135] BTRFS info (device loop3): enabling ssd optimizations [ 2210.135838][T32135] BTRFS info (device loop3): turning off barriers [ 2210.156304][T32135] BTRFS info (device loop3): turning on sync discard [ 2210.176550][T32135] BTRFS info (device loop3): enabling free space tree [ 2210.203437][T32135] BTRFS info (device loop3): force clearing of disk cache [ 2210.220809][T32135] BTRFS info (device loop3): enabling auto defrag [ 2210.245325][T32135] BTRFS info (device loop3): trying to use backup root at mount time [ 2210.276216][T32135] BTRFS info (device loop3): use lzo compression, level 1 [ 2210.314486][T25186] usb 5-1: GET_CAPABILITIES returned 0 [ 2210.345039][T25186] usbtmc 5-1:16.0: can't read capabilities [ 2210.410780][T25998] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2211.958186][T25186] usb 5-1: USB disconnect, device number 66 [ 2212.379309][T32215] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7044'. [ 2212.524352][T32217] QAT: failed to copy from user. [ 2215.253698][T32236] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 2215.259818][T24026] Bluetooth: hci1: command 0x0c1a tx timeout [ 2215.925025][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 2215.925043][ T29] audit: type=1326 audit(1768358158.743:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32261 comm="syz.3.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e4b8f749 code=0x7ffc0000 [ 2215.994563][ T29] audit: type=1326 audit(1768358158.743:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32261 comm="syz.3.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f76e4b8f749 code=0x7ffc0000 [ 2216.056813][ T29] audit: type=1326 audit(1768358158.743:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32261 comm="syz.3.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e4b8f749 code=0x7ffc0000 [ 2216.197234][ T29] audit: type=1326 audit(1768358158.743:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32261 comm="syz.3.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f76e4b8f749 code=0x7ffc0000 [ 2216.241992][ T29] audit: type=1326 audit(1768358158.883:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32261 comm="syz.3.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e4b8f749 code=0x7ffc0000 [ 2216.363208][ T29] audit: type=1326 audit(1768358158.883:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32267 comm="syz.3.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76e4bc2005 code=0x7ffc0000 [ 2216.408976][ T29] audit: type=1326 audit(1768358158.883:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32261 comm="syz.3.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e4b8f749 code=0x7ffc0000 [ 2216.491007][ T29] audit: type=1326 audit(1768358158.933:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32261 comm="syz.3.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f76e4b8f749 code=0x7ffc0000 [ 2216.695354][ T29] audit: type=1326 audit(1768358158.933:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32261 comm="syz.3.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e4b8f749 code=0x7ffc0000 [ 2216.777370][ T29] audit: type=1326 audit(1768358158.943:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32261 comm="syz.3.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e4b8f749 code=0x7ffc0000 [ 2217.828669][T24756] libceph: connect (1)[c::]:6789 error -101 [ 2217.835028][T24756] libceph: mon0 (1)[c::]:6789 connect error [ 2218.113753][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 2218.123826][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 2218.143459][T24756] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2218.658734][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 2218.672185][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 2218.823559][T24756] usb 3-1: Using ep0 maxpacket: 16 [ 2219.030960][T24756] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2219.050309][T24756] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 2219.073423][T24756] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2219.113353][T24756] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2219.148648][T24756] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2219.163391][T24756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2219.179959][T24756] usb 3-1: Product: syz [ 2219.188245][T24756] usb 3-1: Manufacturer: syz [ 2219.208451][T24756] usb 3-1: SerialNumber: syz [ 2219.371021][T32314] netlink: 92 bytes leftover after parsing attributes in process `syz.5.7068'. [ 2219.447855][T24756] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 89 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 2220.203251][T24756] libceph: connect (1)[c::]:6789 error -101 [ 2220.210699][T24756] libceph: mon0 (1)[c::]:6789 connect error [ 2220.991565][T24756] libceph: connect (1)[c::]:6789 error -101 [ 2220.997692][T24756] libceph: mon0 (1)[c::]:6789 connect error [ 2221.288716][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 2221.288734][ T29] audit: type=1326 audit(1768358164.093:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32334 comm="syz.6.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2221.327859][T24756] libceph: connect (1)[c::]:6789 error -101 [ 2221.346016][T24756] libceph: mon0 (1)[c::]:6789 connect error [ 2221.404439][ T29] audit: type=1326 audit(1768358164.093:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32334 comm="syz.6.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2221.428454][ T29] audit: type=1326 audit(1768358164.093:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32334 comm="syz.6.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2221.583900][ T29] audit: type=1326 audit(1768358164.093:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32334 comm="syz.6.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2221.627650][ T29] audit: type=1326 audit(1768358164.103:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32334 comm="syz.6.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2221.671321][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.678739][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.774054][ T29] audit: type=1326 audit(1768358164.173:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32334 comm="syz.6.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2221.838455][ T29] audit: type=1326 audit(1768358164.173:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32334 comm="syz.6.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2221.873510][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 2221.880135][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 2222.004653][ T29] audit: type=1326 audit(1768358164.183:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32342 comm="syz.6.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f11049c2005 code=0x7ffc0000 [ 2222.028361][T32294] ceph: No mds server is up or the cluster is laggy [ 2222.088016][ T29] audit: type=1326 audit(1768358164.173:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32334 comm="syz.6.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2222.137227][ T29] audit: type=1326 audit(1768358164.333:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32342 comm="syz.6.7073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f110498f749 code=0x7ffc0000 [ 2222.587496][T32326] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2223.013801][T24026] Bluetooth: hci1: command 0x0c1a tx timeout [ 2223.166018][ T5932] usb 3-1: USB disconnect, device number 89 [ 2223.181742][ T5932] usblp0: removed [ 2223.259157][T32354] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7076'. [ 2226.315165][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 2226.315184][ T29] audit: type=1326 audit(1768358169.153:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32399 comm="syz.2.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f956a5c2005 code=0x7ffc0000 [ 2226.474218][T32408] veth1_to_bond: entered allmulticast mode [ 2226.645486][T32411] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7091'. [ 2226.725388][ T29] audit: type=1326 audit(1768358169.343:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32399 comm="syz.2.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f956a58f749 code=0x7ffc0000 [ 2226.777773][ T29] audit: type=1326 audit(1768358169.593:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32392 comm="syz.2.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f956a52b829 code=0x7ffc0000 [ 2226.867737][ T29] audit: type=1326 audit(1768358169.593:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32392 comm="syz.2.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956a58f749 code=0x7ffc0000 [ 2226.981118][T32417] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 2227.001980][ T29] audit: type=1326 audit(1768358169.593:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32392 comm="syz.2.7086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956a58f749 code=0x7ffc0000 [ 2227.030347][T32417] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 2227.993761][T32404] veth1_to_bond: left allmulticast mode [ 2228.306044][T32432] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7094'. [ 2229.155936][T32441] netlink: 'syz.6.7097': attribute type 4 has an invalid length. [ 2229.497192][T32447] netlink: 'syz.3.7099': attribute type 4 has an invalid length. [ 2229.815526][T32415] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 2229.858674][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 2229.883667][T32431] random: crng reseeded on system resumption [ 2231.117802][T32462] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7103'. [ 2232.337485][ T29] audit: type=1326 audit(1768358175.173:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32468 comm="syz.2.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956a58f749 code=0x7ffc0000 [ 2232.421912][T32481] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7108'. [ 2232.556210][ T29] audit: type=1326 audit(1768358175.173:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32468 comm="syz.2.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f956a58f749 code=0x7ffc0000 [ 2232.623801][ T29] audit: type=1326 audit(1768358175.173:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32468 comm="syz.2.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956a58f749 code=0x7ffc0000 [ 2232.893422][ T29] audit: type=1326 audit(1768358175.173:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32468 comm="syz.2.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f956a58f749 code=0x7ffc0000 [ 2232.967686][ T29] audit: type=1326 audit(1768358175.363:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32480 comm="syz.2.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f956a5c2005 code=0x7ffc0000 [ 2233.030662][ T29] audit: type=1326 audit(1768358175.363:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32468 comm="syz.2.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956a58f749 code=0x7ffc0000 [ 2233.178150][ T29] audit: type=1326 audit(1768358175.373:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32468 comm="syz.2.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f956a58f749 code=0x7ffc0000 [ 2233.373368][ T29] audit: type=1326 audit(1768358175.533:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32480 comm="syz.2.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f956a58f749 code=0x7ffc0000 [ 2233.473846][ T29] audit: type=1326 audit(1768358175.613:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32468 comm="syz.2.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f956a52b829 code=0x7ffc0000 [ 2233.676231][ T29] audit: type=1326 audit(1768358175.623:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32468 comm="syz.2.7107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f956a58f749 code=0x7ffc0000 [ 2234.834112][T32503] fuse: Bad value for 'fd' [ 2236.693878][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 2236.703113][T32499] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 2236.925893][T32526] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7117'. [ 2237.796755][T32537] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7119'. [ 2238.490727][T32548] random: crng reseeded on system resumption [ 2238.833479][T24756] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2239.513079][T24756] usb 3-1: Using ep0 maxpacket: 8 [ 2239.587535][T24756] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2239.628601][T24756] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2239.732605][T24756] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2239.806374][T24756] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2239.847824][T24756] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2239.901724][T24756] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2239.984275][T24756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2240.414391][T32572] fuse: Unknown parameter 'grou00000000000000000000' [ 2240.498087][T24756] usb 3-1: GET_CAPABILITIES returned 0 [ 2240.511083][T24756] usbtmc 3-1:16.0: can't read capabilities [ 2240.664156][T32578] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7129'. [ 2241.883391][ T5932] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2242.153387][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 2242.161619][ T5932] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 2242.170699][ T5932] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2242.182940][ T5932] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2242.239317][ T5932] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2242.525278][ T5932] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2242.621402][T17094] usb 3-1: USB disconnect, device number 90 [ 2242.651717][ T5932] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2242.704886][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2242.939054][T32607] QAT: failed to copy from user. [ 2243.024686][ T5932] usb 4-1: GET_CAPABILITIES returned 0 [ 2243.024736][ T5932] usbtmc 4-1:16.0: can't read capabilities [ 2244.322518][T32626] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7140'. [ 2244.918557][T17094] usb 4-1: USB disconnect, device number 65 [ 2245.259724][T32645] QAT: failed to copy from user. [ 2245.450519][T32643] trusted_key: encrypted_key: keylen parameter is missing [ 2245.662540][T32654] random: crng reseeded on system resumption [ 2247.395427][T32664] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7151'. [ 2247.679902][T32679] random: crng reseeded on system resumption [ 2247.958364][T32681] fuse: Unknown parameter 'group_i00000000000000000000' [ 2247.994851][T25186] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2248.193360][T25186] usb 5-1: Using ep0 maxpacket: 8 [ 2248.655269][T25186] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2248.655325][T25186] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2248.655378][T25186] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2248.655429][T25186] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2248.655479][T25186] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2248.655577][T25186] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2248.655601][T25186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2248.950057][T25186] usb 5-1: GET_CAPABILITIES returned 0 [ 2248.965909][T25186] usbtmc 5-1:16.0: can't read capabilities [ 2249.879543][T32699] netlink: 35 bytes leftover after parsing attributes in process `syz.5.7159'. [ 2249.957061][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 2249.957080][ T29] audit: type=1326 audit(1768358192.783:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32695 comm="syz.3.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e4b8f749 code=0x7ffc0000 [ 2250.072142][ T29] audit: type=1326 audit(1768358192.793:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32695 comm="syz.3.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f76e4b8f749 code=0x7ffc0000 [ 2250.324883][ T29] audit: type=1326 audit(1768358193.023:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32695 comm="syz.3.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e4b8f749 code=0x7ffc0000 [ 2250.543620][ T29] audit: type=1326 audit(1768358193.023:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32695 comm="syz.3.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e4b8f749 code=0x7ffc0000 [ 2250.702821][ T29] audit: type=1326 audit(1768358193.023:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32701 comm="syz.3.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f76e4bc2005 code=0x7ffc0000 [ 2250.772253][ T29] audit: type=1326 audit(1768358193.053:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32695 comm="syz.3.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f76e4b8f749 code=0x7ffc0000 [ 2250.874902][ T5932] usb 5-1: USB disconnect, device number 67 [ 2250.949744][ T29] audit: type=1326 audit(1768358193.223:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32701 comm="syz.3.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f76e4b8f749 code=0x7ffc0000 [ 2251.263721][ T29] audit: type=1326 audit(1768358193.303:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32695 comm="syz.3.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f76e4b2b829 code=0x7ffc0000 [ 2251.407263][ T29] audit: type=1326 audit(1768358193.303:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32695 comm="syz.3.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e4b8f749 code=0x7ffc0000 [ 2251.436310][ T29] audit: type=1326 audit(1768358193.303:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32695 comm="syz.3.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76e4b8f749 code=0x7ffc0000 [ 2253.709825][T32744] netlink: 'syz.3.7172': attribute type 1 has an invalid length. [ 2253.997287][T32746] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7172'. [ 2254.162616][T32744] veth7: entered promiscuous mode [ 2254.171797][T32744] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 2254.993155][T32757] netlink: 35 bytes leftover after parsing attributes in process `syz.6.7174'. [ 2258.046600][ T29] audit: type=1326 audit(1768358200.873:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=323 comm="syz.5.7185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b89b8f749 code=0x7ffc0000 [ 2258.119274][ T29] audit: type=1326 audit(1768358200.873:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=323 comm="syz.5.7185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f0b89b8f749 code=0x7ffc0000 [ 2258.353524][ T29] audit: type=1326 audit(1768358200.883:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=323 comm="syz.5.7185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b89b8f749 code=0x7ffc0000 [ 2258.510755][ T29] audit: type=1326 audit(1768358200.883:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=323 comm="syz.5.7185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0b89b8f749 code=0x7ffc0000 [ 2258.602069][ T29] audit: type=1326 audit(1768358200.943:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=329 comm="syz.5.7185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b89bc2005 code=0x7ffc0000 [ 2258.653626][ T29] audit: type=1326 audit(1768358200.943:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=323 comm="syz.5.7185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b89b8f749 code=0x7ffc0000 [ 2258.710173][ T337] netlink: 'syz.2.7187': attribute type 1 has an invalid length. [ 2258.753434][ T29] audit: type=1326 audit(1768358200.943:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=323 comm="syz.5.7185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b89b8f749 code=0x7ffc0000 [ 2258.786141][ T29] audit: type=1326 audit(1768358200.993:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=323 comm="syz.5.7185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f0b89b8f749 code=0x7ffc0000 [ 2258.787761][ T338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7187'. [ 2259.091889][ T29] audit: type=1326 audit(1768358201.113:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=329 comm="syz.5.7185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0b89b8f749 code=0x7ffc0000 [ 2259.233447][ T29] audit: type=1326 audit(1768358201.183:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=323 comm="syz.5.7185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b89b2b829 code=0x7ffc0000 [ 2259.489538][ T337] veth3: entered promiscuous mode [ 2259.497182][ T337] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 2260.208427][T25186] libceph: connect (1)[c::]:6789 error -101 [ 2260.217101][T25186] libceph: mon0 (1)[c::]:6789 connect error [ 2260.483664][T23112] libceph: connect (1)[c::]:6789 error -101 [ 2260.492329][T23112] libceph: mon0 (1)[c::]:6789 connect error [ 2260.635980][T25186] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2260.878034][ T374] netlink: 35 bytes leftover after parsing attributes in process `syz.3.7195'. [ 2260.889081][T25186] usb 6-1: Using ep0 maxpacket: 16 [ 2261.016488][T25186] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2261.049754][T25186] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 2261.087201][T25186] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2261.101129][T23112] libceph: connect (1)[c::]:6789 error -101 [ 2261.144458][T23112] libceph: mon0 (1)[c::]:6789 connect error [ 2261.219364][T25186] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2261.266312][T25186] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2261.283748][T25186] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.315732][T25186] usb 6-1: Product: syz [ 2261.320074][T25186] usb 6-1: Manufacturer: syz [ 2261.328329][T25186] usb 6-1: SerialNumber: syz [ 2261.644461][T25186] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 2262.693817][T25186] libceph: connect (1)[c::]:6789 error -101 [ 2262.704704][T25186] libceph: mon0 (1)[c::]:6789 connect error [ 2262.973503][ T384] netlink: 120 bytes leftover after parsing attributes in process `syz.6.7198'. [ 2263.420996][ T398] QAT: failed to copy from user. [ 2263.635898][ T361] ceph: No mds server is up or the cluster is laggy [ 2263.888021][T23112] usb 6-1: USB disconnect, device number 14 [ 2263.896704][T23112] usblp0: removed [ 2264.120978][ T412] netlink: 'syz.4.7204': attribute type 1 has an invalid length. [ 2264.175905][ T412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7204'. [ 2264.213569][ T412] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7204'. [ 2264.281703][ T417] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2264.357807][ T412] veth11: entered promiscuous mode [ 2264.390900][ T412] bond4: (slave veth11): Enslaving as a backup interface with a down link [ 2265.008790][ T422] veth9: entered promiscuous mode [ 2265.255975][ T426] bridge1: entered promiscuous mode [ 2265.261948][ T426] bridge1: entered allmulticast mode [ 2265.276838][ T428] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7209'. [ 2265.288153][ T426] team0: Port device bridge1 added [ 2265.622029][ T438] fuse: Bad value for 'fd' [ 2265.643782][ T437] netlink: 35 bytes leftover after parsing attributes in process `syz.3.7210'. [ 2266.293918][ T408] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 2266.343546][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 2267.313460][ T5964] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2267.437106][ T461] netlink: 120 bytes leftover after parsing attributes in process `syz.2.7220'. [ 2267.473373][ T5964] usb 6-1: Using ep0 maxpacket: 16 [ 2267.485550][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2267.497884][ T463] bridge1: entered promiscuous mode [ 2267.503119][ T463] bridge1: entered allmulticast mode [ 2267.522565][ T5964] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2267.542617][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2267.561639][ T463] team0: Port device bridge1 added [ 2267.567576][ T5964] usb 6-1: config 0 descriptor?? [ 2267.605517][ T467] bridge0: port 3(team0) entered blocking state [ 2267.616181][ T467] bridge0: port 3(team0) entered disabled state [ 2267.627883][ T467] team0: entered allmulticast mode [ 2267.648466][ T467] team_slave_0: entered allmulticast mode [ 2267.660974][ T467] team_slave_1: entered allmulticast mode [ 2267.707383][ T467] team0: left allmulticast mode [ 2267.725391][ T467] team_slave_0: left allmulticast mode [ 2267.743082][ T467] team_slave_1: left allmulticast mode [ 2267.907567][ T473] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7223'. [ 2267.958999][ T476] fuse: Unknown parameter 'user_i00000000000000000000' [ 2268.141064][ T5964] mcp2221 0003:04D8:00DD.0026: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 2269.853101][ T502] random: crng reseeded on system resumption [ 2270.244542][ T5964] usb 6-1: USB disconnect, device number 15 [ 2270.585278][ T5932] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2270.786856][T25186] libceph: connect (1)[c::]:6789 error -101 [ 2270.853626][T25186] libceph: mon0 (1)[c::]:6789 connect error [ 2270.910385][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 2271.007311][ T5932] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2271.027712][ T5932] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2271.080668][ T5932] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2271.104502][ T5964] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2271.123698][T25186] libceph: connect (1)[c::]:6789 error -101 [ 2271.131247][T25186] libceph: mon0 (1)[c::]:6789 connect error [ 2271.152171][ T5932] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2271.178863][ T5932] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2271.329460][ T5932] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2271.373387][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2271.423345][ T5964] usb 3-1: Using ep0 maxpacket: 16 [ 2271.651566][ T5964] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2271.723354][ T5964] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 2271.758723][ T5964] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2271.782514][T25186] libceph: connect (1)[c::]:6789 error -101 [ 2271.788823][T25186] libceph: mon0 (1)[c::]:6789 connect error [ 2271.802301][ T5964] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2271.832646][ T5932] usb 5-1: GET_CAPABILITIES returned 0 [ 2271.841099][ T5932] usbtmc 5-1:16.0: can't read capabilities [ 2272.052440][ T5964] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2272.173931][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2272.252810][ T5964] usb 3-1: Product: syz [ 2272.291147][ T5964] usb 3-1: Manufacturer: syz [ 2272.324949][ T5964] usb 3-1: SerialNumber: syz [ 2272.694260][T25186] libceph: connect (1)[c::]:6789 error -101 [ 2272.708708][T25186] libceph: mon0 (1)[c::]:6789 connect error [ 2272.829566][ T5964] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 91 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 2273.053928][ T537] fuse: Unknown parameter 'user_i00000000000000000000' [ 2273.535274][ T5932] usb 5-1: USB disconnect, device number 68 [ 2273.692799][ T550] QAT: failed to copy from user. [ 2273.745264][T23112] libceph: connect (1)[c::]:6789 error -101 [ 2273.745436][T23112] libceph: mon0 (1)[c::]:6789 connect error [ 2274.054580][ T520] ceph: No mds server is up or the cluster is laggy [ 2274.092404][T25186] libceph: connect (1)[c::]:6789 error -101 [ 2274.133814][T25186] libceph: mon0 (1)[c::]:6789 connect error [ 2274.250048][ T5964] usb 3-1: USB disconnect, device number 91 [ 2274.257674][ T5964] usblp1: removed [ 2274.568467][ T559] veth5: entered promiscuous mode [ 2274.994445][ T564] random: crng reseeded on system resumption [ 2275.344524][ T5964] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 2275.503432][ T5964] usb 3-1: Using ep0 maxpacket: 8 [ 2275.511886][ T5964] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2275.533712][ T5964] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2275.565750][ T5964] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2275.606779][ T5964] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2275.634066][ T5964] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2275.736184][ T5964] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2275.897993][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2276.840496][ T581] fuse: Unknown parameter 'user_i00000000000000000000' [ 2277.830848][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 2277.830868][ T29] audit: type=1326 audit(1768358220.573:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=588 comm="syz.4.7251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2278.181486][ T29] audit: type=1326 audit(1768358220.573:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=588 comm="syz.4.7251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2278.250387][ T29] audit: type=1326 audit(1768358220.603:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=588 comm="syz.4.7251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2278.350822][T23112] libceph: connect (1)[c::]:6789 error -101 [ 2278.364738][T23112] libceph: mon0 (1)[c::]:6789 connect error [ 2278.459119][ T29] audit: type=1326 audit(1768358220.613:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=588 comm="syz.4.7251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2278.532388][T25186] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2278.592459][ T5964] usb 3-1: usb_control_msg returned -71 [ 2278.609035][ T29] audit: type=1326 audit(1768358220.633:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=588 comm="syz.4.7251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2278.609066][ T5964] usbtmc 3-1:16.0: can't read capabilities [ 2278.692838][T23112] libceph: connect (1)[c::]:6789 error -101 [ 2278.704088][ T607] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7253'. [ 2278.713422][T25186] usb 4-1: Using ep0 maxpacket: 16 [ 2278.720364][T23112] libceph: mon0 (1)[c::]:6789 connect error [ 2278.728985][T25186] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2278.750161][ T607] netlink: 'syz.6.7253': attribute type 4 has an invalid length. [ 2278.764702][T25186] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 2278.786134][T25186] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2278.805829][ T29] audit: type=1326 audit(1768358220.643:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=597 comm="syz.4.7251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f25a67c2005 code=0x7ffc0000 [ 2278.858795][T25186] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2278.893643][T25186] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2278.905170][T25186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2278.918133][T25186] usb 4-1: Product: syz [ 2278.924956][ T29] audit: type=1326 audit(1768358220.643:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=588 comm="syz.4.7251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2278.951439][ T609] loop2: detected capacity change from 0 to 512 [ 2278.961297][T25186] usb 4-1: Manufacturer: syz [ 2278.972690][T25186] usb 4-1: SerialNumber: syz [ 2279.005919][ T5964] usb 3-1: USB disconnect, device number 92 [ 2279.019895][ T609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2279.176250][ T609] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2279.215420][T25186] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 2279.231177][ T29] audit: type=1326 audit(1768358220.643:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=588 comm="syz.4.7251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2279.344195][T25186] libceph: connect (1)[c::]:6789 error -101 [ 2279.357775][T25186] libceph: mon0 (1)[c::]:6789 connect error [ 2279.513415][ T29] audit: type=1326 audit(1768358220.833:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=597 comm="syz.4.7251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f25a678f749 code=0x7ffc0000 [ 2279.631314][ T29] audit: type=1326 audit(1768358220.873:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=588 comm="syz.4.7251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f25a672b829 code=0x7ffc0000 [ 2279.982806][T30048] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2280.643700][ T600] ceph: No mds server is up or the cluster is laggy [ 2281.218497][T23112] usb 4-1: USB disconnect, device number 66 [ 2281.263950][T23112] usblp0: removed [ 2281.288810][ T626] QAT: failed to copy from user. [ 2281.438838][ T628] bridge1: entered promiscuous mode [ 2281.444696][ T628] bridge1: entered allmulticast mode [ 2281.465941][ T628] team0: Port device bridge1 added [ 2281.521212][ T628] bridge0: port 3(team0) entered blocking state [ 2281.545207][ T628] bridge0: port 3(team0) entered disabled state [ 2281.570353][ T628] team0: entered allmulticast mode [ 2281.580453][ T628] team_slave_0: entered allmulticast mode [ 2281.590998][ T628] team_slave_1: entered allmulticast mode [ 2281.629458][ T628] team0: entered promiscuous mode [ 2281.636180][ T628] team_slave_0: entered promiscuous mode [ 2281.643090][ T628] team_slave_1: entered promiscuous mode [ 2281.707208][ T628] bridge0: port 3(team0) entered blocking state [ 2281.713678][ T628] bridge0: port 3(team0) entered forwarding state [ 2283.104263][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.111053][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.178369][T25186] libceph: connect (1)[c::]:6789 error -101 [ 2283.195074][T25186] libceph: mon0 (1)[c::]:6789 connect error [ 2283.453770][T25186] libceph: connect (1)[c::]:6789 error -101 [ 2283.476375][T25186] libceph: mon0 (1)[c::]:6789 connect error [ 2283.493479][ T5964] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 2283.900096][ T5964] usb 3-1: Using ep0 maxpacket: 16 [ 2284.191022][T25186] libceph: connect (1)[c::]:6789 error -101 [ 2284.200903][T25186] libceph: mon0 (1)[c::]:6789 connect error [ 2284.234993][ T5964] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2284.251266][ T5964] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 2284.284992][ T5964] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2284.415867][ T672] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7270'. [ 2284.485173][ T5964] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2284.511538][ T5964] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2284.533491][ T5964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2284.601865][ T676] random: crng reseeded on system resumption [ 2284.663325][ T5964] usb 3-1: Product: syz [ 2284.675419][ T5964] usb 3-1: Manufacturer: syz [ 2284.784665][ T5964] usb 3-1: SerialNumber: syz [ 2285.038173][ T5964] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 93 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 2285.390030][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 2285.396400][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 2285.498922][T25186] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2285.704617][T25186] usb 4-1: Using ep0 maxpacket: 16 [ 2285.718938][T25186] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2285.730170][T25186] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 2285.740497][T23112] libceph: connect (1)[c::]:6789 error -101 [ 2285.747952][T23112] libceph: mon0 (1)[c::]:6789 connect error [ 2285.766001][T25186] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2285.783652][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 2285.789851][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 2285.790108][T25186] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2285.872581][T25186] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2285.882399][T25186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2285.892573][T25186] usb 4-1: Product: syz [ 2285.902781][T25186] usb 4-1: Manufacturer: syz [ 2285.913488][T25186] usb 4-1: SerialNumber: syz [ 2285.987818][ T696] random: crng reseeded on system resumption [ 2286.284605][T25186] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 67 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 2286.324869][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 2286.345507][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 2286.709372][T25186] libceph: connect (1)[c::]:6789 error -101 [ 2286.743472][T25186] libceph: mon0 (1)[c::]:6789 connect error [ 2286.865598][ T660] ceph: No mds server is up or the cluster is laggy [ 2287.075664][T25186] libceph: connect (1)[c::]:6789 error -101 [ 2287.081823][T25186] libceph: mon0 (1)[c::]:6789 connect error [ 2287.567799][ T681] ceph: No mds server is up or the cluster is laggy [ 2287.697090][ T5964] usb 3-1: USB disconnect, device number 93 [ 2287.792991][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 2287.805124][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 2287.815719][ T5964] usblp0: removed [ 2287.983793][T25186] usb 4-1: USB disconnect, device number 67 [ 2287.999229][T25186] usblp1: removed [ 2288.017667][ T713] QAT: failed to copy from user. [ 2288.161178][ T712] loop4: detected capacity change from 0 to 4096 [ 2288.249994][ T720] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2289.102754][ T729] veth1_to_bond: entered allmulticast mode [ 2289.522425][ T734] syzkaller0: entered promiscuous mode [ 2289.658348][ T734] syzkaller0: entered allmulticast mode [ 2289.682020][ T724] veth1_to_bond: left allmulticast mode [ 2290.469049][ T753] random: crng reseeded on system resumption [ 2290.971170][ T757] loop2: detected capacity change from 0 to 512 [ 2291.386136][ T757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2291.415128][ T757] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2291.586840][T25186] libceph: connect (1)[c::]:6789 error -101 [ 2291.597976][T25186] libceph: mon0 (1)[c::]:6789 connect error [ 2291.736423][T23112] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2291.754549][T30048] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2291.971030][T25186] libceph: connect (1)[c::]:6789 error -101 [ 2291.977852][T25186] libceph: mon0 (1)[c::]:6789 connect error [ 2291.993438][T23112] usb 4-1: Using ep0 maxpacket: 16 [ 2292.007030][T23112] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2292.017113][T23112] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 2292.027011][T23112] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2292.040113][T23112] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2292.540006][T25186] libceph: connect (1)[c::]:6789 error -101 [ 2292.558958][T25186] libceph: mon0 (1)[c::]:6789 connect error [ 2292.595759][T23112] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2292.606561][T23112] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2292.638405][T23112] usb 4-1: Product: syz [ 2292.646844][T23112] usb 4-1: Manufacturer: syz [ 2292.665176][T23112] usb 4-1: SerialNumber: syz [ 2292.975182][T23112] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 68 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 2293.199994][ T786] QAT: failed to copy from user. [ 2293.791941][ T794] random: crng reseeded on system resumption [ 2293.798526][T23112] libceph: connect (1)[c::]:6789 error -101 [ 2293.826472][T23112] libceph: mon0 (1)[c::]:6789 connect error [ 2294.183744][ T766] ceph: No mds server is up or the cluster is laggy [ 2294.812083][ T800] netlink: 156 bytes leftover after parsing attributes in process `syz.6.7298'. [ 2294.856016][ T800] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7298'. [ 2294.918813][ T5964] usb 4-1: USB disconnect, device number 68 [ 2294.931452][ T5964] usblp0: removed [ 2295.380209][ T809] loop5: detected capacity change from 0 to 512 [ 2295.433248][ T809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2295.483075][ T809] ext4 filesystem being mounted at /414/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2295.584609][ T814] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7302'. [ 2295.658099][T24438] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2295.698096][ T814] veth13: entered promiscuous mode [ 2297.004036][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 2297.010281][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 2297.027288][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 2297.042893][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 2297.313856][ T5964] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2297.394289][ T848] veth1_to_bond: entered allmulticast mode [ 2297.450096][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 2297.472936][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 2297.532911][ T5964] usb 5-1: Using ep0 maxpacket: 16 [ 2297.549747][ T5964] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2297.559802][ T5964] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 2297.665177][ T5964] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2297.695470][ T5964] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2297.739783][ T5964] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2297.748948][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2297.773446][ T5964] usb 5-1: Product: syz [ 2297.782143][ T5964] usb 5-1: Manufacturer: syz [ 2297.794560][ T5964] usb 5-1: SerialNumber: syz [ 2297.802916][ T854] netlink: 120 bytes leftover after parsing attributes in process `syz.3.7312'. [ 2298.019843][ T5964] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 69 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 2298.135131][ T861] random: crng reseeded on system resumption [ 2298.166422][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 2298.200220][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 2298.460479][ T844] veth1_to_bond: left allmulticast mode [ 2299.355813][ T870] random: crng reseeded on system resumption [ 2299.653482][ T5964] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2299.684603][ T832] ceph: No mds server is up or the cluster is laggy [ 2300.245195][ T5932] libceph: connect (1)[c::]:6789 error -101 [ 2300.251964][ T5932] libceph: mon0 (1)[c::]:6789 connect error [ 2300.343709][ T5964] usb 3-1: Using ep0 maxpacket: 8 [ 2300.490182][ T5964] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 2300.613337][ T5964] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2300.623103][ T5964] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2300.703568][ T5964] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2300.794911][T23112] usb 5-1: USB disconnect, device number 69 [ 2300.810768][T23112] usblp0: removed [ 2300.863370][ T5964] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2300.934097][ T5964] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2300.962973][ T5964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2301.365647][ T5964] usb 3-1: GET_CAPABILITIES returned 0 [ 2301.371269][ T5964] usbtmc 3-1:16.0: can't read capabilities [ 2301.924406][ T896] ------------[ cut here ]------------ [ 2301.931432][ T896] WARNING: mm/memcontrol-v1.c:642 at memcg1_swapout+0x6c2/0x8d0, CPU#1: syz.6.7318/896 [ 2301.941125][ T896] Modules linked in: [ 2301.946507][ T896] CPU: 1 UID: 0 PID: 896 Comm: syz.6.7318 Tainted: G L syzkaller #0 PREEMPT(full) [ 2301.957299][ T896] Tainted: [L]=SOFTLOCKUP [ 2301.961607][ T896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2301.971645][ T896] RIP: 0010:memcg1_swapout+0x6c2/0x8d0 [ 2301.977104][ T896] Code: 6d 5d 0d 00 0f 85 01 fa ff ff 48 89 df 48 c7 c6 a0 c3 98 8b e8 bf 8c f8 fe c6 05 77 6d 5d 0d 01 90 0f 0b 90 e9 e2 f9 ff ff 90 <0f> 0b 90 e9 eb fb ff ff 90 0f 0b 90 41 80 3c 2e 00 0f 85 d5 fe ff [ 2301.996712][ T896] RSP: 0018:ffffc9000bec6718 EFLAGS: 00010006 [ 2302.002765][ T896] RAX: 000000000000000c RBX: ffffea0001cf2180 RCX: ffff88805270c150 [ 2302.010719][ T896] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc9000b04c104 [ 2302.018672][ T896] RBP: dffffc0000000000 R08: ffffc9000b04c107 R09: 1ffff92001609820 [ 2302.026638][ T896] R10: dffffc0000000000 R11: fffff52001609821 R12: ffffea0001cf2188 [ 2302.034598][ T896] R13: 1ffffd400039e430 R14: 1ffffd400039e431 R15: ffff888054deada8 [ 2302.042552][ T896] FS: 00007f11058176c0(0000) GS:ffff888125cf7000(0000) knlGS:0000000000000000 [ 2302.051466][ T896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2302.058033][ T896] CR2: 0000000000000000 CR3: 000000005f170000 CR4: 00000000003526f0 [ 2302.065988][ T896] Call Trace: [ 2302.069251][ T896] [ 2302.072167][ T896] __remove_mapping+0xac5/0xe30 [ 2302.077013][ T896] shrink_folio_list+0x28d8/0x5320 [ 2302.082132][ T896] ? __pfx_shrink_folio_list+0x10/0x10 [ 2302.087575][ T896] ? kvm_sched_clock_read+0x11/0x20 [ 2302.092755][ T896] ? sched_clock+0x3f/0x60 [ 2302.097153][ T896] ? finish_task_switch+0x162/0x950 [ 2302.102334][ T896] ? lock_acquire+0x107/0x340 [ 2302.107019][ T896] ? css_rstat_updated+0x239/0x520 [ 2302.112119][ T896] ? __pfx_css_rstat_updated+0x10/0x10 [ 2302.117561][ T896] reclaim_folio_list+0xeb/0x4e0 [ 2302.122485][ T896] ? __lock_acquire+0x6b6/0x2cf0 [ 2302.127413][ T896] ? __pfx_reclaim_folio_list+0x10/0x10 [ 2302.132944][ T896] ? lru_gen_update_size+0x818/0xd20 [ 2302.138218][ T896] ? __mod_zone_page_state+0xd7/0x140 [ 2302.143581][ T896] ? lru_gen_del_folio+0x359/0x540 [ 2302.148678][ T896] reclaim_pages+0x454/0x520 [ 2302.153265][ T896] ? __pfx_reclaim_pages+0x10/0x10 [ 2302.158385][ T896] ? madvise_cold_or_pageout_pte_range+0x1977/0x1ce0 [ 2302.165050][ T896] madvise_cold_or_pageout_pte_range+0x19a0/0x1ce0 [ 2302.171547][ T896] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 2302.178386][ T896] ? do_raw_spin_lock+0x121/0x290 [ 2302.183406][ T896] walk_pgd_range+0x1037/0x1d30 [ 2302.188240][ T896] ? free_unref_folios+0x10e9/0x13e0 [ 2302.193510][ T896] ? lock_acquire+0x107/0x340 [ 2302.198193][ T896] ? __pfx_walk_pgd_range+0x10/0x10 [ 2302.203369][ T896] ? folios_put_refs+0x584/0x670 [ 2302.208291][ T896] ? css_rstat_updated+0x239/0x520 [ 2302.213399][ T896] ? __pfx_css_rstat_updated+0x10/0x10 [ 2302.218860][ T896] __walk_page_range+0x14c/0x710 [ 2302.223783][ T896] ? lru_gen_add_folio+0x3f7/0xaf0 [ 2302.228876][ T896] ? folio_evictable+0x1c/0x250 [ 2302.233718][ T896] walk_page_range_vma_unsafe+0x34c/0x400 [ 2302.239426][ T896] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 2302.245649][ T896] ? mlock_drain_local+0x79/0x480 [ 2302.250664][ T896] ? walk_page_range_vma+0x6b/0x90 [ 2302.255761][ T896] madvise_vma_behavior+0x30c7/0x4420 [ 2302.261128][ T896] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 2302.266834][ T896] ? __lock_acquire+0x6b6/0x2cf0 [ 2302.271763][ T896] ? rcu_is_watching+0x15/0xb0 [ 2302.276517][ T896] ? finish_task_switch+0x162/0x950 [ 2302.281705][ T896] ? lock_acquire+0x107/0x340 [ 2302.286373][ T896] ? finish_task_switch+0x241/0x950 [ 2302.291555][ T896] ? lockdep_hardirqs_on+0x7b/0x110 [ 2302.296735][ T896] ? finish_task_switch+0x241/0x950 [ 2302.301918][ T896] ? rcu_is_watching+0x15/0xb0 [ 2302.306675][ T896] ? trace_sched_exit_tp+0x36/0xf0 [ 2302.311772][ T896] ? __lock_acquire+0x6b6/0x2cf0 [ 2302.316703][ T896] ? mas_prev_slot+0xb31/0xbb0 [ 2302.321455][ T896] ? find_vma_prev+0xe3/0x150 [ 2302.326115][ T896] ? __pfx_find_vma_prev+0x10/0x10 [ 2302.331207][ T896] ? futex_unqueue+0x22/0x240 [ 2302.335874][ T896] ? __futex_wait+0x34a/0x3d0 [ 2302.340539][ T896] ? rcu_is_watching+0x15/0xb0 [ 2302.345291][ T896] madvise_walk_vmas+0x575/0xaf0 [ 2302.350215][ T896] ? __lock_acquire+0x6b6/0x2cf0 [ 2302.355144][ T896] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 2302.360598][ T896] ? blk_start_plug+0x6f/0x1b0 [ 2302.365435][ T896] madvise_do_behavior+0x38e/0x550 [ 2302.370540][ T896] ? __pfx_madvise_do_behavior+0x10/0x10 [ 2302.376173][ T896] ? down_read+0x274/0x2e0 [ 2302.380577][ T896] ? madvise_lock+0x146/0x2f0 [ 2302.385241][ T896] do_madvise+0x1bc/0x270 [ 2302.389561][ T896] ? __pfx_do_madvise+0x10/0x10 [ 2302.394403][ T896] ? __se_sys_futex+0x36f/0x400 [ 2302.399243][ T896] ? rcu_is_watching+0x15/0xb0 [ 2302.403996][ T896] __x64_sys_madvise+0xa7/0xc0 [ 2302.408748][ T896] do_syscall_64+0xec/0xf80 [ 2302.413256][ T896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2302.419318][ T896] ? trace_irq_disable+0x37/0x100 [ 2302.424322][ T896] ? clear_bhb_loop+0x40/0x90 [ 2302.428981][ T896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2302.434853][ T896] RIP: 0033:0x7f110498f749 [ 2302.439253][ T896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2302.458841][ T896] RSP: 002b:00007f1105817038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 2302.467242][ T896] RAX: ffffffffffffffda RBX: 00007f1104be6270 RCX: 00007f110498f749 [ 2302.475197][ T896] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000200000000000 [ 2302.483155][ T896] RBP: 00007f1104a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2302.491109][ T896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2302.499153][ T896] R13: 00007f1104be6308 R14: 00007f1104be6270 R15: 00007ffd8fa07f18 [ 2302.507118][ T896] [ 2302.510138][ T896] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2302.517408][ T896] CPU: 1 UID: 0 PID: 896 Comm: syz.6.7318 Tainted: G L syzkaller #0 PREEMPT(full) [ 2302.528154][ T896] Tainted: [L]=SOFTLOCKUP [ 2302.532457][ T896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2302.542494][ T896] Call Trace: [ 2302.545759][ T896] [ 2302.548672][ T896] vpanic+0x1e0/0x670 [ 2302.552638][ T896] panic+0xb9/0xc0 [ 2302.556342][ T896] ? __pfx_panic+0x10/0x10 [ 2302.560751][ T896] __warn+0x317/0x4b0 [ 2302.564713][ T896] ? memcg1_swapout+0x6c2/0x8d0 [ 2302.569546][ T896] ? memcg1_swapout+0x6c2/0x8d0 [ 2302.574379][ T896] __report_bug+0x288/0x500 [ 2302.578865][ T896] ? memcg1_swapout+0x6c2/0x8d0 [ 2302.583698][ T896] ? __pfx___report_bug+0x10/0x10 [ 2302.588704][ T896] ? __pfx_css_rstat_updated+0x10/0x10 [ 2302.594150][ T896] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 2302.599502][ T896] ? memcg1_swapout+0x6c2/0x8d0 [ 2302.604336][ T896] report_bug+0x16a/0x220 [ 2302.608648][ T896] ? memcg1_swapout+0x6c2/0x8d0 [ 2302.613482][ T896] ? memcg1_swapout+0x6c4/0x8d0 [ 2302.618334][ T896] handle_bug+0x98/0x200 [ 2302.622560][ T896] exc_invalid_op+0x1a/0x50 [ 2302.627047][ T896] asm_exc_invalid_op+0x1a/0x20 [ 2302.631880][ T896] RIP: 0010:memcg1_swapout+0x6c2/0x8d0 [ 2302.637342][ T896] Code: 6d 5d 0d 00 0f 85 01 fa ff ff 48 89 df 48 c7 c6 a0 c3 98 8b e8 bf 8c f8 fe c6 05 77 6d 5d 0d 01 90 0f 0b 90 e9 e2 f9 ff ff 90 <0f> 0b 90 e9 eb fb ff ff 90 0f 0b 90 41 80 3c 2e 00 0f 85 d5 fe ff [ 2302.656936][ T896] RSP: 0018:ffffc9000bec6718 EFLAGS: 00010006 [ 2302.662986][ T896] RAX: 000000000000000c RBX: ffffea0001cf2180 RCX: ffff88805270c150 [ 2302.670953][ T896] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc9000b04c104 [ 2302.678918][ T896] RBP: dffffc0000000000 R08: ffffc9000b04c107 R09: 1ffff92001609820 [ 2302.686883][ T896] R10: dffffc0000000000 R11: fffff52001609821 R12: ffffea0001cf2188 [ 2302.694842][ T896] R13: 1ffffd400039e430 R14: 1ffffd400039e431 R15: ffff888054deada8 [ 2302.702811][ T896] ? memcg1_swapout+0x22d/0x8d0 [ 2302.707656][ T896] __remove_mapping+0xac5/0xe30 [ 2302.712502][ T896] shrink_folio_list+0x28d8/0x5320 [ 2302.717621][ T896] ? __pfx_shrink_folio_list+0x10/0x10 [ 2302.723068][ T896] ? kvm_sched_clock_read+0x11/0x20 [ 2302.728244][ T896] ? sched_clock+0x3f/0x60 [ 2302.732649][ T896] ? finish_task_switch+0x162/0x950 [ 2302.737828][ T896] ? lock_acquire+0x107/0x340 [ 2302.742516][ T896] ? css_rstat_updated+0x239/0x520 [ 2302.747613][ T896] ? __pfx_css_rstat_updated+0x10/0x10 [ 2302.753063][ T896] reclaim_folio_list+0xeb/0x4e0 [ 2302.757988][ T896] ? __lock_acquire+0x6b6/0x2cf0 [ 2302.762942][ T896] ? __pfx_reclaim_folio_list+0x10/0x10 [ 2302.768472][ T896] ? lru_gen_update_size+0x818/0xd20 [ 2302.773742][ T896] ? __mod_zone_page_state+0xd7/0x140 [ 2302.779108][ T896] ? lru_gen_del_folio+0x359/0x540 [ 2302.784202][ T896] reclaim_pages+0x454/0x520 [ 2302.788784][ T896] ? __pfx_reclaim_pages+0x10/0x10 [ 2302.793889][ T896] ? madvise_cold_or_pageout_pte_range+0x1977/0x1ce0 [ 2302.800551][ T896] madvise_cold_or_pageout_pte_range+0x19a0/0x1ce0 [ 2302.807047][ T896] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 2302.813894][ T896] ? do_raw_spin_lock+0x121/0x290 [ 2302.818907][ T896] walk_pgd_range+0x1037/0x1d30 [ 2302.823736][ T896] ? free_unref_folios+0x10e9/0x13e0 [ 2302.829002][ T896] ? lock_acquire+0x107/0x340 [ 2302.833680][ T896] ? __pfx_walk_pgd_range+0x10/0x10 [ 2302.838860][ T896] ? folios_put_refs+0x584/0x670 [ 2302.843787][ T896] ? css_rstat_updated+0x239/0x520 [ 2302.848881][ T896] ? __pfx_css_rstat_updated+0x10/0x10 [ 2302.854326][ T896] __walk_page_range+0x14c/0x710 [ 2302.859248][ T896] ? lru_gen_add_folio+0x3f7/0xaf0 [ 2302.864346][ T896] ? folio_evictable+0x1c/0x250 [ 2302.869191][ T896] walk_page_range_vma_unsafe+0x34c/0x400 [ 2302.875010][ T896] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 2302.881233][ T896] ? mlock_drain_local+0x79/0x480 [ 2302.886246][ T896] ? walk_page_range_vma+0x6b/0x90 [ 2302.891339][ T896] madvise_vma_behavior+0x30c7/0x4420 [ 2302.896710][ T896] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 2302.902413][ T896] ? __lock_acquire+0x6b6/0x2cf0 [ 2302.907338][ T896] ? rcu_is_watching+0x15/0xb0 [ 2302.912097][ T896] ? finish_task_switch+0x162/0x950 [ 2302.917273][ T896] ? lock_acquire+0x107/0x340 [ 2302.921940][ T896] ? finish_task_switch+0x241/0x950 [ 2302.927117][ T896] ? lockdep_hardirqs_on+0x7b/0x110 [ 2302.932302][ T896] ? finish_task_switch+0x241/0x950 [ 2302.937489][ T896] ? rcu_is_watching+0x15/0xb0 [ 2302.942241][ T896] ? trace_sched_exit_tp+0x36/0xf0 [ 2302.947337][ T896] ? __lock_acquire+0x6b6/0x2cf0 [ 2302.952269][ T896] ? mas_prev_slot+0xb31/0xbb0 [ 2302.957030][ T896] ? find_vma_prev+0xe3/0x150 [ 2302.961694][ T896] ? __pfx_find_vma_prev+0x10/0x10 [ 2302.966785][ T896] ? futex_unqueue+0x22/0x240 [ 2302.971449][ T896] ? __futex_wait+0x34a/0x3d0 [ 2302.976110][ T896] ? rcu_is_watching+0x15/0xb0 [ 2302.980864][ T896] madvise_walk_vmas+0x575/0xaf0 [ 2302.985790][ T896] ? __lock_acquire+0x6b6/0x2cf0 [ 2302.990720][ T896] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 2302.996169][ T896] ? blk_start_plug+0x6f/0x1b0 [ 2303.000927][ T896] madvise_do_behavior+0x38e/0x550 [ 2303.006029][ T896] ? __pfx_madvise_do_behavior+0x10/0x10 [ 2303.011654][ T896] ? down_read+0x274/0x2e0 [ 2303.016053][ T896] ? madvise_lock+0x146/0x2f0 [ 2303.020718][ T896] do_madvise+0x1bc/0x270 [ 2303.025044][ T896] ? __pfx_do_madvise+0x10/0x10 [ 2303.029885][ T896] ? __se_sys_futex+0x36f/0x400 [ 2303.034722][ T896] ? rcu_is_watching+0x15/0xb0 [ 2303.039476][ T896] __x64_sys_madvise+0xa7/0xc0 [ 2303.044226][ T896] do_syscall_64+0xec/0xf80 [ 2303.048715][ T896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2303.054768][ T896] ? trace_irq_disable+0x37/0x100 [ 2303.059773][ T896] ? clear_bhb_loop+0x40/0x90 [ 2303.064433][ T896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2303.070397][ T896] RIP: 0033:0x7f110498f749 [ 2303.074796][ T896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2303.094474][ T896] RSP: 002b:00007f1105817038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 2303.102870][ T896] RAX: ffffffffffffffda RBX: 00007f1104be6270 RCX: 00007f110498f749 [ 2303.110827][ T896] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000200000000000 [ 2303.118784][ T896] RBP: 00007f1104a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 2303.126738][ T896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2303.134690][ T896] R13: 00007f1104be6308 R14: 00007f1104be6270 R15: 00007ffd8fa07f18 [ 2303.142658][ T896] [ 2303.146111][ T896] Kernel Offset: disabled [ 2303.150429][ T896] Rebooting in 86400 seconds..