last executing test programs: 5m17.281716848s ago: executing program 2 (id=260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r3, 0x0, 0xa0028000}, 0x38) 5m16.073016047s ago: executing program 2 (id=265): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x1) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x203, 0xfff9, 0xffffffffffffffff, 0x20000000000000c, 0xe, 0x200, 0xc, 0x2c, 0x80000009, 0x2}) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x2000) 5m14.883462624s ago: executing program 2 (id=271): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {}, 0xff}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 5m13.831673708s ago: executing program 2 (id=277): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f0000000d00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRESHEX, @ANYBLOB="b5aeb8ee41283894d3a92a5f2e938d001e75134a6c84b5af394f7acfd82e32c798c8b845b9669f24699212cd02e80152f05442f604af4273f7da7d6056123abc53d651b4bca585c211a7", @ANYRESDEC], 0x0, 0x2ba, &(0x7f0000000e00)="$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") setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 5m13.320737428s ago: executing program 2 (id=283): r0 = open(0x0, 0x66842, 0x90) pwritev2(r0, 0x0, 0x0, 0x7800, 0x0, 0x3) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xdca) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 5m11.673109771s ago: executing program 2 (id=288): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2101, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x18, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5m11.561379972s ago: executing program 32 (id=288): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2101, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x18, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m13.717425837s ago: executing program 3 (id=1015): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x2000, 0xfffffffc, r2, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f0000000080)='./file0/file0\x00', 0x109140, 0x1) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) r3 = creat(&(0x7f00000001c0)='./file0/file0\x00', 0x1) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) preadv(r3, 0x0, 0x0, 0x4, 0x9) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r4}, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 2m13.632936735s ago: executing program 3 (id=1016): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x80, 0x1, 0x389d, 0x0, {{0x5, 0x4, 0x1, 0x15, 0x14, 0x68, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010102}}}}) socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 2m13.57827927s ago: executing program 3 (id=1018): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x800) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020076657468305f6d616376746170000000240003802000038010000180080001003f000000040003"], 0x50}}, 0x0) 2m12.201266666s ago: executing program 3 (id=1021): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x2, 0x10}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x1}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2m12.06096025s ago: executing program 3 (id=1024): r0 = socket(0x10, 0x3, 0x0) recvfrom$l2tp6(r0, &(0x7f00000002c0)=""/142, 0x8e, 0x2040, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x20) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = socket(0x840000000002, 0x3, 0x100) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYRES32=0xee00], 0x90, 0x8c1}}], 0x1, 0x110) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x40649fb491}, @TCA_CAKE_RAW={0x8}]}}]}, 0x48}}, 0x0) 2m11.724684243s ago: executing program 3 (id=1029): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x2) 1m55.847918158s ago: executing program 33 (id=1029): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x2) 13.671494802s ago: executing program 6 (id=1464): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003", @ANYBLOB="e5fda988"], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f000513c", 0xc, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 11.540821672s ago: executing program 6 (id=1467): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003e80)=[{}], 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}, &(0x7f0000000240)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x4, 0x9, 0x80, 0x2, 0x5, 0x4}}}, 0x0) shutdown(r1, 0x1) 9.13069722s ago: executing program 5 (id=1473): ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x5000408) r0 = dup(0xffffffffffffffff) r1 = userfaultfd(0x80001) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r3 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r5, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESHEX=r6, @ANYRESHEX=r4, @ANYBLOB="1e1456b97f43020078423fad8569494e28e58bd88d6b502cfe943956d9f8efde4f8659ce67cc37b7e1d988638175e2db1b654dccc1a203850b09873b0184822257d4c12aaf0b5efe2105301b585b58256d90fffa59ece5882178fb533b8ed99c4c2c6d1ba6d7f5dac0cad0eaeee76479fb488f67037b1b2a880c53fe952d632ba034c8d2758f1bd92565024144b0862cb3639c534e323806be01dd7a6252a5999b81aa1f34d13acf872bbbfc5bb3bd8b2cfe4db9838e94", @ANYRESOCT=r6], 0x81, 0x14f5, &(0x7f0000001580)="$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") getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 7.735136498s ago: executing program 5 (id=1479): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x4c084, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @loopback, 0xc5f}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 6.228235836s ago: executing program 6 (id=1484): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x181000) fcntl$setlease(r0, 0x400, 0xf2d35e7ce30696e1) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001b0007000200060001c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d000106b062e585e4a85dc9b1335d1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendfile(r1, r2, 0x0, 0x8000002b) 5.621011786s ago: executing program 5 (id=1485): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000600)="b90f04000044e8b8b89914f00800e9fdd6a0463e", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.569578861s ago: executing program 1 (id=1486): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x2002) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@user_xattr}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setitimer(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) fallocate(r1, 0x8, 0x4000, 0x4000) 5.268931391s ago: executing program 0 (id=1491): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_io_uring_setup(0x94f, &(0x7f00000016c0), &(0x7f0000000080)=0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x7, 0x464f, 0x1, 0x0, 0x0) io_uring_enter(r2, 0x1815, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x231a, 0x0, 0x0, 0x0, 0x0) 4.644875592s ago: executing program 0 (id=1492): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x2000000}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.114180465s ago: executing program 1 (id=1493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x35, &(0x7f00000000c0)=0xfffffff7, 0x4) 4.075340738s ago: executing program 5 (id=1495): r0 = socket(0x10, 0x803, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000100)="e610d126ea49451055fc6b7fc4e7a48d36b4a6ed0be79ab2a27bb6945e635733d03a14824fc30f32faa8d213d3f9484ef32a49872b0915c6193d0acc124763c2226a6e2be014701029d8a27b1ce8907d1548d87f41589a7ae5131dc28586b582429cb9845b36973ce14c4f49720493effb585afd006f39db5248cb56551c3a1117081f30cc7fb0f558466751b1d375533ba7e95d6042815ae69c4c28f5744d035092bb51700a02f74578f8faaff7495dcd048bbe856b332b") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000002060108000000000000000000000000050005000a0000c4050001000700000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c0007801800018014000240fe"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x8000, 0x20, 0xfffffeff, 0xf510, {{0x5, 0x4, 0x3, 0x2, 0x14, 0x64, 0x0, 0x2f, 0x4, 0x0, @loopback, @multicast2}}}}) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000040601020000000200000000000000000500010007"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x6c, 0x10, 0x503, 0x1, 0x700, {0x0, 0x0, 0x0, 0x0, 0x2201}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast2}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x3}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x3ff}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0xc8b0) 4.009212385s ago: executing program 6 (id=1496): socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x80004}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r5], 0x50}}, 0x2) 3.848955711s ago: executing program 4 (id=1498): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x3af4701e) sendfile(r4, r2, 0x0, 0x10000a007) 2.94177557s ago: executing program 1 (id=1499): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x7ff, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x33822}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x480c1}, 0x240600d0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000200), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@alu={0x4, 0x1, 0x9}]}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 2.822659982s ago: executing program 0 (id=1500): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r1, &(0x7f0000000080)={0x11, 0x4, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17) mknod(0x0, 0x8001420, 0x0) r4 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.769735637s ago: executing program 4 (id=1501): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket(0xa, 0x3, 0x87) sendto(r3, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x1b) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r4, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000580)="55bbeefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd230aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57712a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b065896289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f389abdb6943940ad3a772bf4639838127bd4775b1", 0x92}, {&(0x7f00000001c0)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000280)="b732b06fd220a6dc6eed5ff60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef7971962733ea71dd2bceb1cd2fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784f53df2d7e9f7bf3d47fa6440da1de8ac26628a8e1da8150f1a1d8f56351c6c37d7ad2279ad7d1043400e2281c863c243979070cd1920b5bee99a922f970a6212dd6668cca002710d04c926de6e706ce3f", 0x9f}, {&(0x7f0000001940)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d58667b82a58ec030a57d199f14b172133", 0xd2}, {&(0x7f0000002300)="0b41dae71fdbfbd927fcefd552617a67c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853bf08b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680ae667158a9d831c6acd5854e2420a16ea245a7c26de40c041919f0de146884889aedac056c285012b270a78448caab41053c2017d15dafa284871f716173b8047f8b1ffdc5a8a", 0xcd}], 0x7}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000940)="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", 0x11a}, {&(0x7f0000002480)="9467776b9ec22f06151761843173440c3e9448d40384f222fec952053bd200bbc7ccef8e7c88fb0ae01fa531ad6deb000578a6c82661d5bf15bffe28cf236057bacc915533a7a58c9253414b4eea351e504828a7279ced0949ed778c25ae266f71689f85decb0b7cd62083d9dc4ff648d4fdd2e18f", 0x75}], 0x2}}], 0x3, 0x2000c044) sendto$inet(r4, &(0x7f00000004c0)="0003", 0x2, 0x16000000, 0x0, 0x0) 2.768712887s ago: executing program 5 (id=1502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r5, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.53295327s ago: executing program 4 (id=1503): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20014015}, 0x41800) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) capset(0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6b, 0x400], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.470743187s ago: executing program 4 (id=1504): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, r1, 0x0) mkdirat(r1, &(0x7f0000002040)='./file0\x00', 0x20) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x1, @empty, 0x8000a}, 0x1c, 0x0}}], 0x1, 0x200880c0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4000, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 2.220691781s ago: executing program 6 (id=1505): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x60, 0x0, 0x0) 1.597852723s ago: executing program 0 (id=1506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x95}, 0x800) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000030701"], 0x28}, 0x1, 0x0, 0x0, 0xcb5d58d386348ea6}, 0x80810) 1.496905643s ago: executing program 1 (id=1507): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) io_setup(0x1, 0x0) setresgid(0xee00, 0xee01, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ptrace(0x10, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) 1.442317508s ago: executing program 5 (id=1508): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000100)={0x40, 0xe, 0x5, {0x5, 0xc, "cf4022"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @string={0x0, 0x3, "064b765bc5404c731a96cbd8e0ae7ef1716fb019a8243f97526290b788e24695b4b343e7526ac555a1694789a0dcff10bdce1c07375fcd903b0c9efea3ff90339007bdceaa0277470c5c677b089f901a67b0ddf347cd1fdd902243f4ef3bea42e031000000000000"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_control_io$uac1(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000600)={0x0, 0x3, 0xc, @string={0xc, 0x3, "0343e04208c6bee58ecc"}}}, 0x0) 1.369239075s ago: executing program 4 (id=1509): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x90, 0x0, 0x0, {0x2000003, 0x3, 0x6, 0x0, 0x1ff, 0x3, {0x6, 0x4, 0x7, 0x1, 0x100000001, 0x6, 0x2, 0x0, 0x101, 0xa000, 0x1, 0x0, 0x0, 0x801, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f00000001c0), &(0x7f0000000340)=@udp6=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f0000000040)="ec", &(0x7f00000001c0)=@udp=r0}, 0x20) syz_emit_ethernet(0x37, &(0x7f00000007c0)=ANY=[], 0x0) 622.887129ms ago: executing program 4 (id=1510): socket(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xffffffff}, 0x8) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x28, 0x12, 0xdbf44c00c5896d57, 0x10, 0x0, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}]}, 0x28}}, 0x0) 622.063639ms ago: executing program 1 (id=1520): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='.\x00', 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB="ae9043979191048239ea3a2ab5d2268ab0079c2c1778098c1a2be54127977cebfd0f53df19758ac5778888fe3e745a", @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x37c, &(0x7f0000001680)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 564.599945ms ago: executing program 0 (id=1511): socket$kcm(0x2c, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'dummy0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}}, 0x4004000) 542.382417ms ago: executing program 1 (id=1512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002102, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 481.005402ms ago: executing program 6 (id=1513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000005000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) 0s ago: executing program 0 (id=1514): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$IPVS_CMD_DEL_SERVICE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): 0x84 has invalid wMaxPacketSize 0 [ 93.642946][ T1107] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 93.719393][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.886479][ T1107] usb 5-1: Product: syz [ 93.891172][ T1107] usb 5-1: Manufacturer: syz [ 93.896487][ T1107] usb 5-1: SerialNumber: syz [ 93.903880][ T1107] usb 5-1: config 0 descriptor?? [ 93.945672][ T1107] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 93.962483][ T1107] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 93.971730][ T4629] netlink: 24 bytes leftover after parsing attributes in process `syz.3.107'. [ 94.043154][ T1348] gspca_sonixj: reg_w1 err -71 [ 94.112387][ T1348] sonixj: probe of 3-1:0.0 failed with error -71 [ 94.161851][ T1348] usb 3-1: USB disconnect, device number 2 [ 94.493142][ T4227] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.614640][ T1107] em28xx 5-1:0.0: chip ID is em2765 [ 94.638204][ T4648] loop2: detected capacity change from 0 to 1024 [ 94.750218][ T4648] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,dax=inode,nolazytime,abort,dax=inode,lazytime,noload,bsddf,noauto_da_alloc,,errors=continue. Quota mode: none. [ 94.872530][ T4227] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.052890][ T4227] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.062298][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 95.070332][ T4227] usb 4-1: Product: syz [ 95.075255][ T4294] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 95.082890][ T4227] usb 4-1: SerialNumber: syz [ 95.322439][ T1107] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 95.331027][ T1107] em28xx 5-1:0.0: board has no eeprom [ 95.342237][ T1348] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.488765][ T4651] udc-core: couldn't find an available UDC or it's busy [ 95.500995][ T4651] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 95.582374][ T4294] usb 2-1: unable to get BOS descriptor or descriptor too short [ 95.593358][ T1348] usb 3-1: Using ep0 maxpacket: 32 [ 95.692224][ T1107] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 95.700130][ T1107] em28xx 5-1:0.0: dvb set to bulk mode. [ 95.712361][ T1348] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 95.722661][ T4294] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 95.730301][ T4294] usb 2-1: can't read configurations, error -71 [ 95.731258][ T1348] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 95.742625][ T1107] usb 5-1: USB disconnect, device number 2 [ 95.751932][ T1107] em28xx 5-1:0.0: Disconnecting em28xx [ 95.776084][ T1348] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 95.784971][ T4255] em28xx 5-1:0.0: Binding DVB extension [ 95.818368][ T1348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 95.843712][ T4255] em28xx 5-1:0.0: Registering input extension [ 95.850743][ T1107] em28xx 5-1:0.0: Closing input extension [ 95.853184][ T1348] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 95.882194][ T1348] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 95.912144][ T1348] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 95.930641][ T1107] em28xx 5-1:0.0: Freeing device [ 95.932031][ T1348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.987332][ T1348] usb 3-1: config 0 descriptor?? [ 96.101167][ T4667] loop0: detected capacity change from 0 to 4096 [ 96.112386][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 96.152507][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #01!!! [ 96.161592][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 96.170926][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 96.214722][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 96.224821][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 96.237550][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 96.262734][ T4227] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 96.275684][ T4227] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 96.317119][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 96.340073][ T4667] NILFS (loop0): unrecognized mount option "p±'L7žS#L7Öaºöršaºñ.åï Ëmv™nbMíÖ—?Ö6®S»a˜­þ¯³k†ÙÙ•ÿäK>ÛS;vuá¥kª(°å>=™wñI’´éàòmðõè˜z°"7\çfܳ°9­¥÷Vþƒçç‡-°ÓŸåWùïÞ²ÆaëìÖOSiWùÌÃñ8Âx˜¯ßïY^<Ñ챞ݎ# Ëñ…nõÛázlT·úÇÏÅnõ¥œ—×áDˆ·â{:" [ 96.419879][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 96.482434][ T4227] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 96.549316][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 96.820975][ T4227] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 97.126542][ T1348] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 97.132349][ T4227] usb 4-1: USB disconnect, device number 3 [ 97.140879][ T1348] usb 3-1: USB disconnect, device number 3 [ 97.164702][ T1348] usblp0: removed [ 98.606530][ T4227] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 98.635371][ T4667] overlayfs: failed to get inode (-116) [ 98.641775][ T4667] overlayfs: failed to get inode (-116) [ 98.864710][ T4683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.933979][ T4693] loop0: detected capacity change from 0 to 16 [ 98.976901][ T4687] bond1: (slave ip6gretap1): making interface the new active one [ 99.024969][ T4687] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 99.047561][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 99.105183][ T4697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.131'. [ 99.237493][ T4702] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 99.299699][ T4702] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 99.315930][ T4704] netlink: 'syz.3.130': attribute type 4 has an invalid length. [ 100.184396][ T4739] netlink: 60 bytes leftover after parsing attributes in process `syz.3.145'. [ 101.460433][ T4751] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.569757][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.609408][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.630761][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.670914][ T4755] device bridge_slave_0 left promiscuous mode [ 101.703671][ T4755] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.813445][ T4755] device bridge_slave_1 left promiscuous mode [ 101.820350][ T4755] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.911126][ T4755] bond0: (slave bond_slave_0): Releasing backup interface [ 102.000942][ T4755] bond0: (slave bond_slave_1): Releasing backup interface [ 102.084579][ T4755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.152915][ T4755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.174841][ T4755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.192837][ T4755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.230515][ T4757] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.238315][ T4757] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.288749][ T4764] device bridge_slave_1 left promiscuous mode [ 102.323027][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.374816][ T4764] device bridge_slave_0 left promiscuous mode [ 102.392362][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.579488][ T4768] netlink: 'syz.3.148': attribute type 10 has an invalid length. [ 102.776573][ T4781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.152'. [ 102.844336][ T4790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 102.900910][ T4790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 102.987166][ T4790] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.996307][ T4790] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.005670][ T4790] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.014712][ T4790] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.096676][ T4795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'. [ 103.141139][ T4790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 103.150609][ T4790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.154'. [ 103.167453][ T4799] device bond1 entered promiscuous mode [ 103.201860][ T4795] device macvlan2 entered promiscuous mode [ 103.224605][ T4797] loop0: detected capacity change from 0 to 4096 [ 103.235468][ T4795] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 103.296271][ T4797] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 103.335488][ T4794] device bond1 left promiscuous mode [ 103.434775][ T4802] overlayfs: failed to resolve './bus': -2 [ 103.448085][ T9] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 103.478184][ T4184] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 103.492008][ T4184] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 103.541832][ T4184] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 103.564447][ T4333] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 103.572593][ T4184] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 103.910409][ T26] audit: type=1326 audit(1760072000.511:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x7ffc0000 [ 104.000210][ T26] audit: type=1326 audit(1760072000.561:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee3fd15ec9 code=0x7ffc0000 [ 104.071242][ T26] audit: type=1326 audit(1760072000.561:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x7ffc0000 [ 104.111949][ T4816] loop2: detected capacity change from 0 to 2048 [ 104.157174][ T26] audit: type=1326 audit(1760072000.561:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x7ffc0000 [ 104.262699][ T26] audit: type=1326 audit(1760072000.561:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fee3fd15ec9 code=0x7ffc0000 [ 104.332129][ T26] audit: type=1326 audit(1760072000.561:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x7ffc0000 [ 104.416345][ T26] audit: type=1326 audit(1760072000.571:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fee3fd15ec9 code=0x7ffc0000 [ 104.513315][ T4227] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.523729][ T4816] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.552442][ T26] audit: type=1326 audit(1760072000.571:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x7ffc0000 [ 104.655534][ T26] audit: type=1326 audit(1760072000.571:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fee3fd15ec9 code=0x7ffc0000 [ 104.682184][ T4852] process 'syz.1.174' launched './file0' with NULL argv: empty string added [ 104.700996][ T26] audit: type=1326 audit(1760072000.571:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.1.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x7ffc0000 [ 104.903237][ T4227] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.937878][ T4227] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 104.957693][ T4227] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 104.974630][ T4857] netlink: 'syz.0.175': attribute type 9 has an invalid length. [ 104.982561][ T4857] netlink: 'syz.0.175': attribute type 7 has an invalid length. [ 104.990320][ T4857] netlink: 'syz.0.175': attribute type 8 has an invalid length. [ 105.120226][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.535640][ T4227] usb 5-1: config 0 descriptor?? [ 107.359323][ T1110] usb 5-1: USB disconnect, device number 3 [ 107.434596][ T4880] vcan0: tx drop: invalid da for name 0x0000000200000004 [ 107.680624][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060b12c00: rx timeout, send abort [ 108.192522][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801f1da400: rx timeout, send abort [ 108.200778][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060b12c00: abort rx timeout. Force session deactivation [ 108.387568][ T4886] netlink: 24 bytes leftover after parsing attributes in process `syz.0.182'. [ 108.431577][ T4889] loop1: detected capacity change from 0 to 1024 [ 108.454345][ T4887] loop4: detected capacity change from 0 to 1024 [ 108.643426][ T4887] hfsplus: invalid btree flag [ 108.648841][ T4887] hfsplus: failed to load extents file [ 108.691425][ T4889] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 108.702468][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801f1da400: abort rx timeout. Force session deactivation [ 110.538089][ T4911] bridge0: port 1(gretap0) entered blocking state [ 110.546744][ T4914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 110.571469][ T4913] loop4: detected capacity change from 0 to 1024 [ 110.590733][ T4911] bridge0: port 1(gretap0) entered disabled state [ 110.664276][ T4911] device gretap0 entered promiscuous mode [ 110.721202][ T4911] bridge0: port 1(gretap0) entered blocking state [ 110.727931][ T4911] bridge0: port 1(gretap0) entered forwarding state [ 110.817709][ T4913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.190'. [ 110.853787][ T4915] device gretap0 left promiscuous mode [ 110.861297][ T4915] bridge0: port 1(gretap0) entered disabled state [ 110.974893][ T4920] device vlan2 entered promiscuous mode [ 111.240765][ T4925] loop1: detected capacity change from 0 to 4096 [ 112.412313][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 112.412331][ T26] audit: type=1326 audit(1760072009.001:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4940 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7fc00000 [ 112.541612][ T26] audit: type=1326 audit(1760072009.081:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4940 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffbbe308ec9 code=0x7fc00000 [ 112.674789][ T26] audit: type=1326 audit(1760072009.081:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4940 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7fc00000 [ 114.588910][ T4956] loop3: detected capacity change from 0 to 8192 [ 114.700281][ T4970] loop1: detected capacity change from 0 to 512 [ 114.827042][ T4956] netlink: 104 bytes leftover after parsing attributes in process `syz.3.203'. [ 114.860753][ T4970] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.208: casefold flag without casefold feature [ 114.908741][ T4970] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.208: couldn't read orphan inode 15 (err -117) [ 115.125474][ T4970] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 115.710019][ T4978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'. [ 115.923962][ T4982] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.092272][ T1107] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 116.118862][ T4985] overlayfs: filesystem on './file0' not supported as upperdir [ 116.265499][ T4991] netlink: 'syz.0.215': attribute type 1 has an invalid length. [ 116.346644][ T1107] usb 3-1: Using ep0 maxpacket: 16 [ 116.380580][ T4991] device bond2 entered promiscuous mode [ 116.429979][ T4991] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.439161][ T4990] loop3: detected capacity change from 0 to 4096 [ 116.522590][ T1107] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 116.541156][ T1107] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.553133][ T1107] usb 3-1: config 0 has no interface number 0 [ 116.559286][ T1107] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 116.569087][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.579394][ T1107] usb 3-1: config 0 descriptor?? [ 116.624497][ T1107] usb 3-1: Found UVC 0.00 device (0bd3:0555) [ 116.628749][ T4990] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 116.631877][ T1107] usb 3-1: No valid video chain found. [ 116.654317][ T4995] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.662829][ T4995] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 116.682251][ T4990] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 116.740233][ T4995] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 116.778873][ T4995] bond2: (slave wireguard0): making interface the new active one [ 116.793417][ T4990] ntfs: volume version 3.1. [ 116.805526][ T4995] device wireguard0 entered promiscuous mode [ 116.902115][ T5005] loop4: detected capacity change from 0 to 512 [ 116.968848][ T4990] ntfs: (device loop3): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 117.055986][ T4995] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 117.315745][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 117.342251][ T4990] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 117.403276][ T4997] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.411059][ T4997] IPv6: NLM_F_CREATE should be set when creating new route [ 117.418478][ T4997] IPv6: NLM_F_CREATE should be set when creating new route [ 117.553138][ T4990] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 117.825648][ T4997] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.080107][ T5005] EXT4-fs (loop4): orphan cleanup on readonly fs [ 118.116864][ T5005] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.218: bg 0: block 248: padding at end of block bitmap is not set [ 118.159547][ T5005] Quota error (device loop4): write_blk: dquota write failed [ 118.167814][ T5005] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 118.178003][ T5005] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.218: Failed to acquire dquot type 1 [ 118.226612][ T5005] EXT4-fs (loop4): 1 truncate cleaned up [ 118.239791][ T5005] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 118.854492][ T4997] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 118.999218][ T4292] usb 3-1: USB disconnect, device number 5 [ 120.047253][ T4997] bond2: (slave wireguard1): Enslaving as a backup interface with an up link [ 121.531337][ T5026] syz.0.224[5026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.531454][ T5026] syz.0.224[5026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.637028][ T5026] netlink: 40 bytes leftover after parsing attributes in process `syz.0.224'. [ 121.933496][ T5060] loop3: detected capacity change from 0 to 256 [ 121.951434][ T5062] netlink: 24 bytes leftover after parsing attributes in process `syz.2.236'. [ 122.104859][ T5060] FAT-fs (loop3): Directory bread(block 64) failed [ 122.150079][ T5060] FAT-fs (loop3): Directory bread(block 65) failed [ 122.187827][ T5060] FAT-fs (loop3): Directory bread(block 66) failed [ 122.231746][ T5060] FAT-fs (loop3): Directory bread(block 67) failed [ 122.252215][ T5060] FAT-fs (loop3): Directory bread(block 68) failed [ 122.292949][ T5060] FAT-fs (loop3): Directory bread(block 69) failed [ 122.341414][ T5060] FAT-fs (loop3): Directory bread(block 70) failed [ 122.367393][ T5060] FAT-fs (loop3): Directory bread(block 71) failed [ 122.393926][ T5060] FAT-fs (loop3): Directory bread(block 72) failed [ 122.416871][ T5060] FAT-fs (loop3): Directory bread(block 73) failed [ 124.250774][ T5088] team0: Device gtp0 is of different type [ 124.315301][ T5086] syz.0.245 uses obsolete (PF_INET,SOCK_PACKET) [ 124.500107][ T5098] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 124.500107][ T5098] The task syz.1.247 (5098) triggered the difference, watch for misbehavior. [ 124.833677][ T5103] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.984319][ T5103] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.050647][ T5097] "syz.2.248" (5097) uses obsolete ecb(arc4) skcipher [ 125.125269][ T5103] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.313802][ T5103] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.351606][ T5114] device netdevsim0 entered promiscuous mode [ 125.377422][ T5116] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 125.559856][ T5103] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.579875][ T5103] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.596591][ T5103] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.619950][ T5103] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.321721][ T5162] overlayfs: failed to resolve './file1/file0': -2 [ 128.514758][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.271'. [ 128.528961][ T5172] loop0: detected capacity change from 0 to 512 [ 128.570987][ T5174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.273'. [ 128.652155][ T5172] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 128.778881][ T5172] EXT4-fs (loop0): failed to open journal device unknown-block(4,3) -6 [ 129.090769][ T5183] loop1: detected capacity change from 0 to 1024 [ 129.172436][ T5183] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 129.299754][ T5188] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 129.301406][ T5183] EXT4-fs warning (device loop1): empty_inline_dir:1852: bad inline directory (dir #12) - no `..' [ 129.480933][ T5172] syz.0.272 (5172) used greatest stack depth: 18592 bytes left [ 129.490541][ T5191] loop2: detected capacity change from 0 to 128 [ 129.543525][ T5191] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.565984][ T5191] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 129.706538][ T4191] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 129.736861][ T4191] FAT-fs (loop2): Filesystem has been set read-only [ 129.755719][ T4191] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 131.581780][ T1253] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.716915][ T1253] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.782413][ T5216] tipc: Failed to remove unknown binding: 66,1,1/0:674604310/674604312 [ 131.796301][ T5220] loop4: detected capacity change from 0 to 512 [ 131.807972][ T1253] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.849182][ T5221] tipc: Failed to remove unknown binding: 66,1,1/0:674604310/674604312 [ 131.874778][ T1253] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.931210][ T5220] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 131.984671][ T5221] tipc: Failed to remove unknown binding: 66,1,1/0:674604310/674604312 [ 132.333709][ T5220] EXT4-fs (loop4): failed to open journal device unknown-block(4,3) -6 [ 132.709725][ T5233] binder: 5232:5233 ioctl c0306201 200000000080 returned -14 [ 132.772681][ T5233] binder_alloc: 5232: pid 5232 spamming oneway? 2 buffers allocated for a total size of 5248 [ 132.877106][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.883860][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.929952][ T5235] device syzkaller0 entered promiscuous mode [ 134.302154][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 134.329346][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 134.343206][ T5258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.594520][ T4227] Bluetooth: hci4: command 0x041b tx timeout [ 136.915389][ T5272] loop0: detected capacity change from 0 to 512 [ 137.852778][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.886242][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.923216][ T5223] device bridge_slave_0 entered promiscuous mode [ 137.964100][ T5281] loop1: detected capacity change from 0 to 128 [ 137.988344][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.013232][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.048395][ T5223] device bridge_slave_1 entered promiscuous mode [ 138.229536][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.260774][ T5272] EXT4-fs (loop0): Test dummy encryption mode enabled [ 138.301632][ T5272] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 138.338545][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.364443][ T5272] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 138.390544][ T5272] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,delalloc,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000fffffffc,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 138.450673][ T1253] device hsr_slave_0 left promiscuous mode [ 138.465248][ T1253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.473576][ T1253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.482740][ T1253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.490460][ T1253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.565461][ T1253] device veth1_macvtap left promiscuous mode [ 138.582991][ T1253] device veth0_macvtap left promiscuous mode [ 138.607295][ T1253] device veth1_vlan left promiscuous mode [ 138.617243][ T1253] device veth0_vlan left promiscuous mode [ 138.626253][ T4227] Bluetooth: hci4: command 0x040f tx timeout [ 138.858157][ T5306] loop3: detected capacity change from 0 to 1024 [ 138.890509][ T5272] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 138.931018][ T5306] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 138.966014][ T5300] fscrypt (loop0): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 139.002537][ T5306] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 139.052944][ T5306] EXT4-fs error (device loop3): ext4_get_journal_inode:5160: comm syz.3.302: inode #1: comm syz.3.302: iget: illegal inode # [ 139.117156][ T5306] EXT4-fs (loop3): no journal found [ 139.175333][ T5306] EXT4-fs (loop3): can't get journal size [ 139.203023][ T5306] EXT4-fs (loop3): failed to initialize system zone (-22) [ 140.106592][ T5306] EXT4-fs (loop3): mount failed [ 140.155573][ T1253] bond1 (unregistering): Released all slaves [ 140.430568][ T5338] loop0: detected capacity change from 0 to 128 [ 140.523722][ T1253] team0 (unregistering): Port device team_slave_1 removed [ 140.570493][ T5338] Trying to write to read-only block-device loop0 [ 140.570545][ T1253] team0 (unregistering): Port device team_slave_0 removed [ 140.586273][ T5338] attempt to access beyond end of device [ 140.586273][ T5338] loop0: rw=34817, want=134, limit=128 [ 140.598389][ T1253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.621266][ T1253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.694206][ T4184] Trying to write to read-only block-device loop0 [ 140.702290][ T4255] Bluetooth: hci4: command 0x0419 tx timeout [ 140.720062][ T4184] Trying to write to read-only block-device loop0 [ 140.737814][ T4184] Trying to write to read-only block-device loop0 [ 140.748970][ T4184] Trying to write to read-only block-device loop0 [ 140.757935][ T4184] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000) [ 140.758032][ T1253] bond0 (unregistering): Released all slaves [ 140.781904][ T4184] FAT-fs (loop0): Filesystem has been set read-only [ 140.825130][ T4184] Trying to write to read-only block-device loop0 [ 140.841575][ T4184] Trying to write to read-only block-device loop0 [ 140.853988][ T5223] team0: Port device team_slave_0 added [ 140.873144][ T5223] team0: Port device team_slave_1 added [ 141.880724][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.924382][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.027560][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.087888][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.125223][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.238025][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.451187][ T5223] device hsr_slave_0 entered promiscuous mode [ 142.493524][ T5223] device hsr_slave_1 entered promiscuous mode [ 142.528680][ T5223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.567549][ T5223] Cannot create hsr debugfs directory [ 143.031526][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 143.116870][ T13] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 144.575193][ T5223] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 144.659492][ T5223] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 144.699940][ T5223] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 144.747513][ T5223] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 144.770355][ T5360] loop1: detected capacity change from 0 to 40427 [ 144.928589][ T5360] F2FS-fs (loop1): invalid crc value [ 144.975677][ T5360] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-4) [ 145.258853][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.360339][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.402941][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.456086][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.548041][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.567227][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.608193][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.615455][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.709470][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.752997][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.798493][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.805828][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.864268][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.936110][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.950398][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.989076][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.052151][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.104621][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.149161][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.184456][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.238031][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.283292][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.629076][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.186984][ T5442] bridge0: port 3(gretap0) entered blocking state [ 147.211113][ T5442] bridge0: port 3(gretap0) entered disabled state [ 147.224858][ T5442] device gretap0 entered promiscuous mode [ 147.252856][ T5442] bridge0: port 3(gretap0) entered blocking state [ 147.259519][ T5442] bridge0: port 3(gretap0) entered forwarding state [ 147.273646][ T5223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.290858][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.320573][ T5445] device gretap0 left promiscuous mode [ 147.336455][ T5445] bridge0: port 3(gretap0) entered disabled state [ 148.178923][ T5473] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.190901][ T5473] blk_update_request: I/O error, dev loop4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.202138][ T5473] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 148.213119][ T5473] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.224578][ T5473] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 148.234298][ T5473] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 148.242089][ T5473] UDF-fs: Scanning with blocksize 512 failed [ 148.248799][ T5473] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.260148][ T5473] blk_update_request: I/O error, dev loop4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.271294][ T5473] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 148.281101][ T5473] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.292406][ T5473] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 148.301991][ T5473] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 148.309706][ T5473] UDF-fs: Scanning with blocksize 1024 failed [ 148.316349][ T5473] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.327569][ T5473] blk_update_request: I/O error, dev loop4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.338786][ T5473] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 148.349093][ T5473] blk_update_request: I/O error, dev loop4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.360325][ T5473] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 148.369937][ T5473] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 148.377624][ T5473] UDF-fs: Scanning with blocksize 2048 failed [ 148.384147][ T5473] blk_update_request: I/O error, dev loop4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 148.395348][ T5473] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 148.405124][ T5473] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 148.414980][ T5473] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 148.422672][ T5473] UDF-fs: Scanning with blocksize 4096 failed [ 148.428761][ T5473] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 148.678871][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.722460][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.739481][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.876045][ T5487] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 150.323097][ T5503] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 150.577271][ T5517] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 151.068922][ T5534] loop3: detected capacity change from 0 to 128 [ 151.200743][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 151.331423][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 151.717505][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.148351][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.170142][ T5223] device veth0_vlan entered promiscuous mode [ 152.182120][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.242932][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.288465][ T5223] device veth1_vlan entered promiscuous mode [ 152.304320][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 152.358058][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 152.423390][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 152.463524][ T5223] device veth0_macvtap entered promiscuous mode [ 152.513514][ T5223] device veth1_macvtap entered promiscuous mode [ 152.596282][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.648388][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.699393][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.740083][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.780895][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.827903][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.870672][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.900484][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 152.926427][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 152.945765][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 152.987627][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.032731][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.086144][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.118171][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.169703][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.208559][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.219443][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.231033][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.337768][ T5534] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 153.352724][ T5534] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.390683][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.406280][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.453444][ T5223] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.482994][ T5223] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.510652][ T5223] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.536583][ T5223] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.768248][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.818114][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.882952][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.921419][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.972556][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.991525][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.364355][ T5580] netlink: 12 bytes leftover after parsing attributes in process `syz.5.289'. [ 156.896367][ T5606] infiniband syz!: set active [ 156.901517][ T5606] infiniband syz!: added team_slave_0 [ 157.241104][ T5606] infiniband syz!: Couldn't open port 1 [ 157.298052][ T5606] RDS/IB: syz!: added [ 157.302792][ T5606] smc: adding ib device syz! with port count 1 [ 157.309282][ T5606] smc: ib device syz! port 1 has pnetid [ 158.756930][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 159.377482][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 159.808089][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 159.892233][ T4241] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 160.395069][ T13] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 160.844207][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.852451][ T13] usb 2-1: Product: syz [ 160.856646][ T13] usb 2-1: Manufacturer: syz [ 160.862269][ T13] usb 2-1: SerialNumber: syz [ 160.890626][ T13] usb 2-1: config 0 descriptor?? [ 160.934599][ T13] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 160.943965][ T4241] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.981271][ T4241] usb 1-1: config 0 has no interfaces? [ 160.992298][ T13] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 161.003949][ T4241] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 161.062327][ T4241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.106719][ T4241] usb 1-1: config 0 descriptor?? [ 161.593239][ T5634] udc-core: couldn't find an available UDC or it's busy [ 161.643126][ T13] em28xx 2-1:0.0: chip ID is em2765 [ 162.008951][ T5634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 162.132257][ T4241] usb 1-1: string descriptor 0 read error: -71 [ 162.153280][ T4241] usb 1-1: USB disconnect, device number 2 [ 162.342285][ T13] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 162.382333][ T13] em28xx 2-1:0.0: board has no eeprom [ 162.762262][ T13] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 162.782322][ T13] em28xx 2-1:0.0: dvb set to bulk mode. [ 162.822592][ T4241] em28xx 2-1:0.0: Binding DVB extension [ 162.862648][ T13] usb 2-1: USB disconnect, device number 4 [ 162.911250][ T13] em28xx 2-1:0.0: Disconnecting em28xx [ 162.987485][ T4241] em28xx 2-1:0.0: Registering input extension [ 163.005672][ T13] em28xx 2-1:0.0: Closing input extension [ 163.063213][ T13] em28xx 2-1:0.0: Freeing device [ 163.127681][ T5667] loop5: detected capacity change from 0 to 32768 [ 163.309754][ T5687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.383'. [ 163.388454][ T5667] XFS (loop5): Mounting V5 Filesystem [ 163.731678][ T5702] netlink: 'syz.1.385': attribute type 13 has an invalid length. [ 163.734084][ T5667] XFS (loop5): Ending clean mount [ 163.804046][ T5667] XFS (loop5): Quotacheck needed: Please wait. [ 163.898677][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.022248][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.022664][ T5667] XFS (loop5): Quotacheck: Done. [ 164.090594][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.620826][ T5223] XFS (loop5): Unmounting Filesystem [ 165.051446][ T5725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'. [ 166.107344][ T5728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 166.578209][ T5748] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 166.629752][ T5743] loop1: detected capacity change from 0 to 8192 [ 166.667926][ T5743] FAT-fs (loop1): bogus number of directory entries (9) [ 166.676028][ T5743] FAT-fs (loop1): Can't find a valid FAT filesystem [ 167.285648][ T5753] loop4: detected capacity change from 0 to 512 [ 170.146630][ T5753] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001004,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 170.242254][ T5753] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.185786][ T5787] binder: BINDER_SET_CONTEXT_MGR already set [ 171.223116][ T5787] binder: 5782:5787 ioctl 4018620d 200000000040 returned -16 [ 171.543515][ T5805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.408'. [ 172.385437][ T5810] netlink: 'syz.3.413': attribute type 1 has an invalid length. [ 172.561106][ T5814] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 172.741518][ T5810] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 172.973752][ T5810] bond1 (unregistering): Released all slaves [ 173.780735][ T5835] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 173.821666][ T5835] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 173.861424][ T5832] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 173.910380][ T5835] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 174.008834][ T5835] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 174.111410][ T5835] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 174.561950][ T5835] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 174.973849][ T5835] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 175.006595][ T5844] netlink: 20 bytes leftover after parsing attributes in process `syz.5.420'. [ 175.522247][ T5868] loop5: detected capacity change from 0 to 8192 [ 175.587414][ T4175] loop5: p1 < > p3 p4 < > [ 175.613124][ T5885] loop1: detected capacity change from 0 to 2048 [ 175.625221][ T4175] loop5: p3 start 986112 is beyond EOD, truncated [ 175.706974][ T5868] loop5: p1 < > p3 p4 < > [ 175.740119][ T5885] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.783226][ T5868] loop5: p3 start 986112 is beyond EOD, truncated [ 175.899422][ T5897] EXT4-fs (loop1): shut down requested (0) [ 178.173887][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 178.187122][ T4432] udevd[4432]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 178.350370][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 178.364717][ T4489] udevd[4489]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 178.404605][ T5936] loop5: detected capacity change from 0 to 128 [ 178.477784][ T5936] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.632252][ T5936] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 178.898165][ T5936] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 179.232425][ T5956] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 179.756451][ T5936] fscrypt: loop5: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 181.063419][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.071166][ T5998] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.339062][ T6041] hugetlbfs: syz.4.467 (6041): Using mlock ulimits for SHM_HUGETLB is deprecated [ 183.631978][ T5998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.665391][ T5998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.154800][ T5998] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.163910][ T5998] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.173117][ T5998] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.182743][ T5998] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.384206][ T6038] bridge0: port 3(netdevsim0) entered blocking state [ 184.403939][ T6038] bridge0: port 3(netdevsim0) entered disabled state [ 184.908464][ T6086] netlink: 'syz.0.478': attribute type 21 has an invalid length. [ 184.930012][ T6086] netlink: 132 bytes leftover after parsing attributes in process `syz.0.478'. [ 184.947121][ T6086] netlink: 'syz.0.478': attribute type 1 has an invalid length. [ 184.964287][ T6086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.478'. [ 184.999462][ T6089] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.008373][ T6089] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.017194][ T6089] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.025967][ T6089] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.046684][ T6089] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.055957][ T6089] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.065125][ T6089] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.074156][ T6089] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.204283][ T6090] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 185.419440][ T6101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.482'. [ 187.169526][ T6145] netlink: 40 bytes leftover after parsing attributes in process `syz.0.498'. [ 187.184169][ T6145] netlink: 40 bytes leftover after parsing attributes in process `syz.0.498'. [ 187.197563][ T6145] netlink: 40 bytes leftover after parsing attributes in process `syz.0.498'. [ 187.212618][ T6145] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 187.340115][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.501'. [ 189.014925][ T6195] 9pnet: p9_fd_create_unix (6195): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 189.148020][ T6180] team0: Port device ip6gretap2 added [ 189.926479][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.933931][ T6213] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.071637][ T6215] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.202479][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.525'. [ 191.369495][ T6252] overlayfs: failed to clone upperpath [ 191.511457][ T6257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.832353][ T4227] Bluetooth: hci3: command 0x0406 tx timeout [ 191.851801][ T4227] Bluetooth: hci1: command 0x0406 tx timeout [ 191.994945][ T4227] Bluetooth: hci2: command 0x0406 tx timeout [ 193.723617][ T4292] libceph: connect (1)[c::]:6789 error -101 [ 193.920020][ T4292] libceph: mon0 (1)[c::]:6789 connect error [ 194.309736][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.316744][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.376804][ T4292] libceph: connect (1)[c::]:6789 error -101 [ 194.831211][ T4292] libceph: mon0 (1)[c::]:6789 connect error [ 194.852655][ T6277] ceph: No mds server is up or the cluster is laggy [ 194.981786][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 195.004180][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 195.028386][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 195.088978][ T6306] device bridge_slave_0 left promiscuous mode [ 195.105544][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.139822][ T6306] device bridge_slave_1 left promiscuous mode [ 195.150715][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.187585][ T6306] bond0: (slave bond_slave_0): Releasing backup interface [ 195.203484][ T6317] capability: warning: `syz.3.544' uses deprecated v2 capabilities in a way that may be insecure [ 195.255893][ T6306] bond0: (slave bond_slave_1): Releasing backup interface [ 195.487348][ T6306] team0: Port device team_slave_0 removed [ 195.550108][ T6306] team0: Port device team_slave_1 removed [ 195.586103][ T6306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.642429][ T6306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.655882][ T6306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.672279][ T6306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.104920][ T6306] bond1: (slave ip6gretap1): Releasing active interface [ 196.378388][ T6306] bond2: (slave wireguard0): Releasing backup interface [ 196.400354][ T6306] device wireguard0 left promiscuous mode [ 196.438822][ T6306] bond2: (slave wireguard1): making interface the new active one [ 196.469544][ T6306] device wireguard1 entered promiscuous mode [ 196.512982][ T6306] bond2: (slave wireguard1): Releasing backup interface [ 196.542273][ T6306] device wireguard1 left promiscuous mode [ 196.587727][ T6306] team0: Port device ip6gretap2 removed [ 196.667255][ T6313] team0: Mode changed to "loadbalance" [ 196.704578][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.541'. [ 197.608812][ T6345] overlayfs: failed to clone upperpath [ 197.710291][ T6349] loop5: detected capacity change from 0 to 2048 [ 197.789415][ T6349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.394172][ T6349] UDF-fs: warning (device loop5): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 131072 lbcount: 135168 extent 129+134144 [ 208.846030][ T6475] netlink: 'syz.0.582': attribute type 3 has an invalid length. [ 208.887325][ T6475] netlink: 'syz.0.582': attribute type 3 has an invalid length. [ 208.965821][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.584'. [ 209.026693][ T6480] tipc: Started in network mode [ 209.076924][ T6480] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 209.099415][ T6480] tipc: Enabled bearer , priority 10 [ 209.321730][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.590'. [ 210.579160][ T21] tipc: Node number set to 1 [ 210.821760][ T6541] device bond_slave_0 entered promiscuous mode [ 210.828587][ T6541] device bond_slave_1 entered promiscuous mode [ 210.874747][ T6541] device vlan2 entered promiscuous mode [ 210.892548][ T6541] device bond0 entered promiscuous mode [ 210.949024][ T6540] device geneve2 entered promiscuous mode [ 212.246557][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 212.270936][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.413389][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.473915][ T6567] device bridge_slave_0 left promiscuous mode [ 213.666949][ T6571] loop5: detected capacity change from 0 to 4096 [ 213.676150][ T6567] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.747348][ T6567] device bridge_slave_1 left promiscuous mode [ 213.790616][ T6567] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.821599][ T6571] NILFS (loop5): invalid segment: Checksum error in segment payload [ 213.869112][ T6571] NILFS (loop5): trying rollback from an earlier position [ 213.902696][ T6567] bond0: (slave bond_slave_0): Releasing backup interface [ 213.981664][ T6571] NILFS (loop5): recovery complete [ 214.055966][ T6603] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.073476][ T6567] team0: Port device team_slave_0 removed [ 214.145736][ T6567] team0: Port device team_slave_1 removed [ 214.194008][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.221803][ T6567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.248537][ T6567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.265891][ T6567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.303614][ T6567] bridge0: port 3(netdevsim0) entered disabled state [ 214.455339][ T6575] team0: Mode changed to "loadbalance" [ 214.701671][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'. [ 215.309677][ T6589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.614'. [ 217.043772][ T26] audit: type=1326 audit(1760072113.651:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6602 comm="syz.0.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220db5ec9 code=0x7fc00000 [ 217.282995][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.4.625'. [ 217.394447][ T6634] lo: Caught tx_queue_len zero misconfig [ 218.551759][ T6658] loop1: detected capacity change from 0 to 128 [ 218.697496][ T6658] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 218.722422][ T6658] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.074957][ T6731] netlink: 40 bytes leftover after parsing attributes in process `syz.3.655'. [ 227.164997][ T6771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.172494][ T6771] IPv6: NLM_F_CREATE should be set when creating new route [ 227.929789][ T6771] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.938513][ T6771] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.953464][ T6771] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.967959][ T6771] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.000107][ T6771] device bond2 left promiscuous mode [ 229.312929][ T6823] netlink: 'syz.4.684': attribute type 4 has an invalid length. [ 231.547190][ T6849] netlink: 'syz.5.691': attribute type 1 has an invalid length. [ 231.557510][ T6850] overlayfs: failed to clone upperpath [ 231.619604][ T6849] bond1: (slave gretap1): making interface the new active one [ 231.628682][ T6849] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 231.656569][ T6849] netlink: 28 bytes leftover after parsing attributes in process `syz.5.691'. [ 231.676928][ T6857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.697048][ T6849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.682629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 232.900834][ T6869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.908189][ T6869] IPv6: NLM_F_CREATE should be set when creating new route [ 235.316656][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.106584][ T6869] rdma_rxe: ignoring netdev event = 10 for team_slave_0 [ 237.261070][ T6869] rdma_rxe: ignoring netdev event = 27 for team_slave_0 [ 237.273642][ T6869] infiniband syz!: set down [ 237.539387][ T6869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.495999][ T6869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.158646][ T6869] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.168319][ T6869] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.177715][ T6869] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.186774][ T6869] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.285483][ T6869] device vlan2 left promiscuous mode [ 239.290840][ T6869] device bond0 left promiscuous mode [ 239.302838][ T6869] device bond_slave_0 left promiscuous mode [ 239.309028][ T6869] device bond_slave_1 left promiscuous mode [ 239.315876][ T6873] netlink: 20 bytes leftover after parsing attributes in process `syz.0.695'. [ 242.299962][ T6941] Set syz1 is full, maxelem 65536 reached [ 242.418127][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 242.446033][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 242.510866][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 244.081437][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 244.183445][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 244.216279][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 244.252949][ T6964] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 244.882124][ T6969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.724'. [ 245.027946][ T6984] netlink: 'syz.4.728': attribute type 1 has an invalid length. [ 245.416285][ T6986] bond2: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 245.486996][ T6988] bond2 (unregistering): (slave ip6gretap2): Releasing backup interface [ 245.514511][ T7006] ax25_connect(): syz.5.732 uses autobind, please contact jreuter@yaina.de [ 246.144984][ T6988] bond2 (unregistering): Released all slaves [ 246.197406][ T7010] netlink: 'syz.5.735': attribute type 1 has an invalid length. [ 246.859930][ T7026] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.315738][ T26] audit: type=1326 audit(1760072145.921:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x50000 [ 249.404082][ T26] audit: type=1326 audit(1760072145.921:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x50000 [ 249.521883][ T26] audit: type=1326 audit(1760072145.921:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x50000 [ 249.618010][ T26] audit: type=1326 audit(1760072145.921:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x50000 [ 249.730310][ T26] audit: type=1326 audit(1760072145.921:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x50000 [ 249.835893][ T26] audit: type=1326 audit(1760072145.921:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x50000 [ 249.937630][ T26] audit: type=1326 audit(1760072145.921:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x50000 [ 250.056033][ T26] audit: type=1326 audit(1760072145.921:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x50000 [ 250.122162][ T26] audit: type=1326 audit(1760072145.921:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x50000 [ 250.215276][ T26] audit: type=1326 audit(1760072145.921:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7044 comm="syz.1.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x50000 [ 250.337615][ T7003] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.367965][ T7003] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.402149][ T7003] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.411242][ T7003] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.742220][ T7053] netlink: 'syz.1.751': attribute type 4 has an invalid length. [ 250.750063][ T7053] netlink: 'syz.1.751': attribute type 3 has an invalid length. [ 250.769008][ T7053] netlink: 132 bytes leftover after parsing attributes in process `syz.1.751'. [ 250.839186][ T7003] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.848325][ T7003] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.857305][ T7003] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.866300][ T7003] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.081645][ T7062] overlayfs: failed to clone upperpath [ 251.437692][ T7083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 252.686988][ T7099] loop5: detected capacity change from 0 to 2048 [ 252.823401][ T7099] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 252.900498][ T7113] EXT4-fs (loop5): shut down requested (0) [ 253.284292][ T7120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.773'. [ 253.326525][ T7120] netlink: 116 bytes leftover after parsing attributes in process `syz.4.773'. [ 254.246329][ T7141] netlink: set zone limit has 8 unknown bytes [ 255.745390][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.751785][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.298827][ T7176] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.308021][ T7176] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.316835][ T7176] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.325612][ T7176] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.344779][ T7176] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.353975][ T7176] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.362933][ T7176] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.372185][ T7176] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.398302][ T7178] overlayfs: failed to clone upperpath [ 257.933897][ T4256] Bluetooth: hci4: command 0x0406 tx timeout [ 261.052573][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'. [ 261.104138][ T7231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.147705][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 261.342465][ T7244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.350049][ T7244] IPv6: NLM_F_CREATE should be set when creating new route [ 264.876687][ T7244] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.886923][ T7244] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.899615][ T7244] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.910929][ T7244] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.931399][ T7244] device netdevsim0 left promiscuous mode [ 265.222196][ T7263] netlink: 47 bytes leftover after parsing attributes in process `syz.4.825'. [ 268.587513][ T7308] netlink: 'syz.5.837': attribute type 17 has an invalid length. [ 268.716103][ T7308] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 268.752461][ T7316] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 268.815723][ T7308] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 268.867117][ T7308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.764408][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 270.043665][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.845'. [ 273.274570][ T7359] 8021q: adding VLAN 0 to HW filter on device bond2 [ 273.294172][ T7359] bond0: (slave bond2): Enslaving as an active interface with an up link [ 273.310020][ T7362] netlink: 14 bytes leftover after parsing attributes in process `syz.1.855'. [ 274.027934][ T7362] bond0 (unregistering): (slave bond2): Releasing backup interface [ 274.157825][ T7362] bond0 (unregistering): Released all slaves [ 275.341889][ T7385] netlink: set zone limit has 8 unknown bytes [ 278.424882][ T7407] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 278.434036][ T7407] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 278.443184][ T7407] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 278.467915][ T7413] sock: sock_set_timeout: `syz.3.872' (pid 7413) tries to set negative timeout [ 281.745731][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'. [ 281.987610][ T7427] netlink: set zone limit has 8 unknown bytes [ 282.311732][ T7454] loop5: detected capacity change from 0 to 8192 [ 282.398607][ T7454] FAT-fs (loop5): Unrecognized mount option "flush [ 282.398607][ T7454] appraise_type=imasig" or missing value [ 283.382557][ T7484] netlink: 'syz.0.895': attribute type 16 has an invalid length. [ 283.432241][ T7484] netlink: 'syz.0.895': attribute type 17 has an invalid length. [ 283.723012][ T7490] vxcan1 speed is unknown, defaulting to 1000 [ 283.740131][ T7490] vxcan1 speed is unknown, defaulting to 1000 [ 283.748963][ T7490] vxcan1 speed is unknown, defaulting to 1000 [ 284.329490][ T7490] infiniband syz2: set down [ 284.334138][ T7490] infiniband syz2: added vxcan1 [ 284.342501][ T7490] infiniband syz2: Couldn't open port 1 [ 284.361337][ T7490] RDS/IB: syz2: added [ 284.365854][ T7490] smc: adding ib device syz2 with port count 1 [ 284.372308][ T7490] smc: ib device syz2 port 1 has pnetid [ 284.378973][ T7490] vxcan1 speed is unknown, defaulting to 1000 [ 284.430161][ T6922] vxcan1 speed is unknown, defaulting to 1000 [ 284.556819][ T7490] vxcan1 speed is unknown, defaulting to 1000 [ 284.656098][ T7490] vxcan1 speed is unknown, defaulting to 1000 [ 284.754868][ T4241] vxcan1 speed is unknown, defaulting to 1000 [ 284.776683][ T7490] vxcan1 speed is unknown, defaulting to 1000 [ 284.901663][ T7490] vxcan1 speed is unknown, defaulting to 1000 [ 290.318621][ T7596] loop5: detected capacity change from 0 to 128 [ 290.384034][ T7598] rdma_rxe: rxe_register_device failed with error -23 [ 290.393275][ T7598] rdma_rxe: failed to add vxcan1 [ 291.042987][ T7596] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 291.456642][ T7605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.931'. [ 291.772348][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.945'. [ 291.791255][ T7648] tipc: Started in network mode [ 291.797794][ T7648] tipc: Node identity 7, cluster identity 4711 [ 291.811525][ T7648] tipc: Node number set to 7 [ 292.457718][ T7636] vxcan1 speed is unknown, defaulting to 1000 [ 292.875674][ T7650] rdma_rxe: rxe_register_device failed with error -23 [ 292.883215][ T7650] rdma_rxe: failed to add vxcan1 [ 293.627792][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'. [ 293.708897][ T7669] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.750307][ T7673] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 293.832369][ T1173] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 293.854270][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 293.897100][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 294.238306][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.951'. [ 294.414440][ T1173] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 297.667581][ T7721] overlayfs: failed to clone upperpath [ 297.682469][ T26] kauditd_printk_skb: 86 callbacks suppressed [ 297.682485][ T26] audit: type=1326 audit(1760072194.291:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7722 comm="syz.5.964" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4615786ec9 code=0x0 [ 300.815080][ T7770] netlink: 'syz.5.977': attribute type 1 has an invalid length. [ 300.961861][ T7770] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.986095][ T26] audit: type=1326 audit(1760072197.591:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 301.095180][ T26] audit: type=1326 audit(1760072197.621:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 301.133987][ T7784] xt_bpf: check failed: parse error [ 301.140829][ T7777] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 301.198805][ T26] audit: type=1326 audit(1760072197.621:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffbbe308f03 code=0x7ffc0000 [ 301.317759][ T26] audit: type=1326 audit(1760072197.621:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffbbe30797f code=0x7ffc0000 [ 301.401337][ T26] audit: type=1326 audit(1760072197.661:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ffbbe308f57 code=0x7ffc0000 [ 301.668700][ T26] audit: type=1326 audit(1760072197.661:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbbe307710 code=0x7ffc0000 [ 302.184165][ T26] audit: type=1326 audit(1760072197.661:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffbbe307b2a code=0x7ffc0000 [ 302.665623][ T26] audit: type=1326 audit(1760072197.661:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 302.861007][ T26] audit: type=1326 audit(1760072197.711:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 303.582752][ T26] audit: type=1326 audit(1760072197.711:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 303.684171][ T26] audit: type=1326 audit(1760072197.711:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 303.710211][ T26] audit: type=1326 audit(1760072197.721:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 303.733435][ T26] audit: type=1326 audit(1760072197.721:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 303.756338][ T7831] netlink: 'syz.4.992': attribute type 16 has an invalid length. [ 303.772015][ T7831] netlink: 'syz.4.992': attribute type 17 has an invalid length. [ 303.780301][ T26] audit: type=1326 audit(1760072197.721:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 305.707963][ T26] audit: type=1326 audit(1760072197.721:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 305.925518][ T26] audit: type=1326 audit(1760072197.721:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 306.016126][ T26] audit: type=1326 audit(1760072197.721:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 306.113134][ T7870] overlayfs: failed to clone lowerpath [ 306.131378][ T26] audit: type=1326 audit(1760072197.731:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.4.980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 307.565327][ T7893] netlink: 'syz.3.1006': attribute type 16 has an invalid length. [ 307.613016][ T7893] netlink: 'syz.3.1006': attribute type 17 has an invalid length. [ 309.607586][ T7922] device macsec0 entered promiscuous mode [ 311.228371][ T7940] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 312.753071][ T7977] tipc: Started in network mode [ 312.758311][ T7977] tipc: Node identity 2a4129356276, cluster identity 4711 [ 312.792195][ T7977] tipc: Enabled bearer , priority 0 [ 312.854060][ T7977] device syzkaller0 entered promiscuous mode [ 312.864474][ T7958] vxcan1 speed is unknown, defaulting to 1000 [ 312.886991][ T7974] tipc: Resetting bearer [ 313.125419][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 313.125437][ T26] audit: type=1326 audit(1760072209.731:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 313.163582][ T26] audit: type=1326 audit(1760072209.761:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 313.197946][ T26] audit: type=1326 audit(1760072209.761:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 313.275076][ T7974] tipc: Disabling bearer [ 313.292125][ T26] audit: type=1326 audit(1760072209.761:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 313.401012][ T26] audit: type=1326 audit(1760072209.761:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 313.526815][ T26] audit: type=1326 audit(1760072209.771:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 313.613584][ T26] audit: type=1326 audit(1760072209.771:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 313.670620][ T26] audit: type=1326 audit(1760072209.771:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 313.693757][ T26] audit: type=1326 audit(1760072209.771:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 313.717256][ T26] audit: type=1326 audit(1760072209.771:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.1037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 316.010508][ T8019] overlayfs: failed to clone upperpath [ 316.033710][ T8021] device bridge_slave_1 left promiscuous mode [ 316.039997][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.050334][ T8021] device bridge_slave_0 left promiscuous mode [ 316.058267][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.101099][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1049'. [ 317.212770][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.219460][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.088660][ T8068] ptrace attach of "./syz-executor exec"[4183] was attempted by "./syz-executor exec"[8068] [ 318.789919][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 318.789937][ T26] audit: type=1400 audit(1760072215.391:161): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=8072 comm="syz.5.1062" [ 318.913090][ T26] audit: type=1326 audit(1760072215.421:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.5.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4615786ec9 code=0x7ffc0000 [ 319.113888][ T8082] binder: BINDER_SET_CONTEXT_MGR already set [ 319.120031][ T8082] binder: 8080:8082 ioctl 4018620d 200000004a80 returned -16 [ 319.172388][ T26] audit: type=1326 audit(1760072215.431:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.5.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4615786ec9 code=0x7ffc0000 [ 320.002495][ T26] audit: type=1326 audit(1760072215.431:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.5.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4615786ec9 code=0x7ffc0000 [ 320.137008][ T26] audit: type=1326 audit(1760072215.431:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.5.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f4615786ec9 code=0x7ffc0000 [ 320.211347][ T26] audit: type=1326 audit(1760072215.431:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.5.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4615786ec9 code=0x7ffc0000 [ 320.305149][ T26] audit: type=1326 audit(1760072215.431:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.5.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f4615786ec9 code=0x7ffc0000 [ 320.388798][ T26] audit: type=1326 audit(1760072215.431:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.5.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4615786ec9 code=0x7ffc0000 [ 320.515810][ T26] audit: type=1326 audit(1760072215.431:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.5.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f4615786ec9 code=0x7ffc0000 [ 320.554737][ T8074] netlink: 'syz.1.1063': attribute type 12 has an invalid length. [ 320.627603][ T26] audit: type=1326 audit(1760072215.431:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8072 comm="syz.5.1062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4615786ec9 code=0x7ffc0000 [ 321.348458][ T8108] device sit0 entered promiscuous mode [ 323.743723][ T8132] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 323.877616][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 323.877632][ T26] audit: type=1326 audit(1760072220.481:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220db5ec9 code=0x7ffc0000 [ 323.940535][ T26] audit: type=1326 audit(1760072220.541:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220db5ec9 code=0x7ffc0000 [ 323.980707][ T26] audit: type=1326 audit(1760072220.571:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff220db5ec9 code=0x7ffc0000 [ 324.003694][ T26] audit: type=1326 audit(1760072220.571:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220db5ec9 code=0x7ffc0000 [ 324.384132][ T26] audit: type=1326 audit(1760072220.571:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220db5ec9 code=0x7ffc0000 [ 324.803392][ T26] audit: type=1326 audit(1760072220.571:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff220db5ec9 code=0x7ffc0000 [ 324.845996][ T26] audit: type=1326 audit(1760072220.571:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220db5ec9 code=0x7ffc0000 [ 324.909492][ T26] audit: type=1326 audit(1760072220.571:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220db5ec9 code=0x7ffc0000 [ 324.943573][ T26] audit: type=1326 audit(1760072220.571:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff220db5ec9 code=0x7ffc0000 [ 324.972082][ T26] audit: type=1326 audit(1760072220.571:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8138 comm="syz.0.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220db5ec9 code=0x7ffc0000 [ 328.436453][ T8190] netlink: 'syz.5.1103': attribute type 1 has an invalid length. [ 328.471340][ T8190] 8021q: adding VLAN 0 to HW filter on device bond3 [ 328.506005][ T8190] bond3: (slave vlan2): Opening slave failed [ 328.589270][ T8195] tipc: Enabling of bearer rejected, failed to enable media [ 329.232937][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1107'. [ 330.141603][ T8217] loop5: detected capacity change from 0 to 16 [ 330.496343][ T8217] erofs: Unknown parameter '000000000000000000000177777777777777777777701777777777777777777777' [ 330.712887][ T4227] Bluetooth: hci1: command 0x0409 tx timeout [ 330.746747][ T8196] vxcan1 speed is unknown, defaulting to 1000 [ 332.424815][ T8196] chnl_net:caif_netlink_parms(): no params data found [ 333.131266][ T4256] Bluetooth: hci1: command 0x041b tx timeout [ 333.396078][ T8235] loop5: detected capacity change from 0 to 32768 [ 333.414965][ T8267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 333.490251][ T8235] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1116 (8235) [ 333.927864][ T8196] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.970129][ T8196] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.978827][ T8196] device bridge_slave_0 entered promiscuous mode [ 333.987671][ T8196] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.008149][ T8196] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.038467][ T8196] device bridge_slave_1 entered promiscuous mode [ 334.205115][ T8235] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 334.232174][ T8235] BTRFS info (device loop5): using free space tree [ 334.257524][ T8235] BTRFS info (device loop5): has skinny extents [ 335.206875][ T8196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.262127][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 335.389011][ T8315] mmap: syz.0.1131 (8315) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 335.497369][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 335.507491][ T8235] BTRFS error (device loop5): open_ctree failed: -12 [ 335.560246][ T8309] bridge: RTM_NEWNEIGH with invalid ether address [ 335.618802][ T8196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.049587][ T8196] team0: Port device team_slave_0 added [ 336.076167][ T8196] team0: Port device team_slave_1 added [ 336.747845][ T8196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.778125][ T8196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.861117][ T8196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.890137][ T154] device hsr_slave_0 left promiscuous mode [ 336.943352][ T154] device hsr_slave_1 left promiscuous mode [ 337.582314][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 338.072802][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 338.072819][ T26] audit: type=1326 audit(1760072234.681:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4615786ec9 code=0x7ffc0000 [ 338.166824][ T26] audit: type=1326 audit(1760072234.721:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4615786ec9 code=0x7ffc0000 [ 338.229814][ T26] audit: type=1326 audit(1760072234.721:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4615786ec9 code=0x7ffc0000 [ 338.282060][ T26] audit: type=1326 audit(1760072234.721:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4615786ec9 code=0x7ffc0000 [ 338.330968][ T26] audit: type=1326 audit(1760072234.721:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4615786ec9 code=0x7ffc0000 [ 338.384552][ T154] bond0 (unregistering): Released all slaves [ 338.389082][ T26] audit: type=1326 audit(1760072234.731:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4615786ec9 code=0x7ffc0000 [ 338.423873][ T26] audit: type=1326 audit(1760072234.731:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4615786ec9 code=0x7ffc0000 [ 338.485560][ T26] audit: type=1326 audit(1760072234.731:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4615786ec9 code=0x7ffc0000 [ 338.515147][ T26] audit: type=1326 audit(1760072234.741:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4615786ec9 code=0x7ffc0000 [ 338.543223][ T8196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.549567][ T26] audit: type=1326 audit(1760072234.741:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8348 comm="syz.5.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4615786ec9 code=0x7ffc0000 [ 338.552869][ T8196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.650710][ T8196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.901735][ T8196] device hsr_slave_0 entered promiscuous mode [ 339.164458][ T8196] device hsr_slave_1 entered promiscuous mode [ 339.330517][ T8196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.557377][ T8196] Cannot create hsr debugfs directory [ 339.693813][ T8365] xt_CT: You must specify a L4 protocol and not use inversions on it [ 340.107919][ T8196] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 340.129066][ T8196] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 340.303730][ T8196] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 340.658849][ T8196] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 341.339791][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'. [ 341.749810][ T8196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.865231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 341.884030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 341.947059][ T8196] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.020357][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 342.088858][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.129454][ T1265] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.136629][ T1265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.222707][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 342.269703][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.345215][ T1265] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.352458][ T1265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.369854][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 342.497523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 342.569593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 342.599905][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 342.638835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 342.663522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 342.684038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 342.732504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 342.750628][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 342.769377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 342.793377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 342.812534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 342.857299][ T8196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 343.500467][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1155'. [ 344.325899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.334096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.369005][ T8196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.879847][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 345.899368][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 345.966328][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 345.989539][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 346.018089][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 346.055493][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 346.091171][ T8196] device veth0_vlan entered promiscuous mode [ 346.120749][ T8196] device veth1_vlan entered promiscuous mode [ 346.245483][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 346.266603][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 346.290013][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 346.327740][ T6300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 346.357697][ T8196] device veth0_macvtap entered promiscuous mode [ 346.379750][ T8196] device veth1_macvtap entered promiscuous mode [ 346.447869][ T8196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.482402][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 346.500552][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 346.532472][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 346.543097][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 346.577580][ T8196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.608524][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 346.637090][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 346.666022][ T8196] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.698707][ T8196] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.737925][ T8196] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.760825][ T8196] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.006672][ T6303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.023285][ T8486] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 347.070805][ T6303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.165794][ T6300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.174531][ T4256] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 347.193105][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 347.207718][ T6300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.227188][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 348.492244][ T4256] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 348.511115][ T4256] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 348.534144][ T4256] usb 6-1: config 220 has no interface number 2 [ 348.554751][ T4256] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 348.597589][ T4256] usb 6-1: config 220 interface 0 has no altsetting 0 [ 348.608416][ T4256] usb 6-1: config 220 interface 76 has no altsetting 0 [ 348.618229][ T4256] usb 6-1: config 220 interface 1 has no altsetting 0 [ 349.602255][ T4256] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 349.611359][ T4256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.699592][ T4256] usb 6-1: Product: syz [ 349.739365][ T4256] usb 6-1: Manufacturer: syz [ 349.747667][ T4256] usb 6-1: SerialNumber: syz [ 349.787905][ T8518] Set syz0 is full, maxelem 0 reached [ 349.788395][ T8520] loop6: detected capacity change from 0 to 128 [ 349.811450][ T4256] usb 6-1: can't set config #220, error -71 [ 349.823628][ T4256] usb 6-1: USB disconnect, device number 2 [ 350.522684][ T4256] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 352.282504][ T4256] usb 6-1: unable to get BOS descriptor or descriptor too short [ 352.342366][ T8550] syz.4.1186 sent an empty control message without MSG_MORE. [ 352.372439][ T4256] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 352.385418][ T4256] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 352.416254][ T4256] usb 6-1: config 63 has no interface number 0 [ 352.444344][ T4256] usb 6-1: config 63 interface 66 has no altsetting 0 [ 352.633084][ T4256] usb 6-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 352.653476][ T4256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.723038][ T4256] usb 6-1: Product: syz [ 352.756292][ T4256] usb 6-1: Manufacturer: syz [ 352.793135][ T4256] usb 6-1: SerialNumber: syz [ 353.387525][ T4256] usb 6-1: can't set config #63, error -71 [ 353.406721][ T4256] usb 6-1: USB disconnect, device number 3 [ 353.520402][ T8568] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 355.130913][ T8611] loop5: detected capacity change from 0 to 16 [ 356.267752][ T8619] overlayfs: failed to clone upperpath [ 356.367859][ T8611] erofs: (device loop5): mounted with root inode @ nid 36. [ 357.473703][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1215'. [ 357.627134][ T8656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1215'. [ 357.691564][ T8661] lo speed is unknown, defaulting to 1000 [ 357.697819][ T8661] lo speed is unknown, defaulting to 1000 [ 357.709732][ T8661] lo speed is unknown, defaulting to 1000 [ 357.734310][ T8661] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 357.776875][ T8661] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 358.066315][ T8661] lo speed is unknown, defaulting to 1000 [ 358.079817][ T8661] lo speed is unknown, defaulting to 1000 [ 358.091204][ T8661] lo speed is unknown, defaulting to 1000 [ 358.105381][ T8661] lo speed is unknown, defaulting to 1000 [ 358.116709][ T8661] lo speed is unknown, defaulting to 1000 [ 358.585536][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1217'. [ 358.702823][ T8673] dns_resolver: Unsupported server list version (255) [ 359.434496][ T8672] netlink: 'syz.5.1217': attribute type 10 has an invalid length. [ 359.477970][ T8672] team0: Port device dummy0 added [ 359.620562][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1213'. [ 360.399964][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1222'. [ 360.730931][ T8702] tipc: Failed to remove unknown binding: 66,3,3/0:348386235/348386236 [ 360.732759][ T8695] overlayfs: failed to clone upperpath [ 362.032133][ T8727] ptrace attach of "./syz-executor exec"[4184] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ  "[8727] [ 362.734816][ T8731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1232'. [ 364.512409][ T4256] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 366.487069][ T4256] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 366.513434][ T4256] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.521525][ T4256] usb 7-1: Product: syz [ 366.532006][ T4256] usb 7-1: Manufacturer: syz [ 366.536780][ T4256] usb 7-1: SerialNumber: syz [ 367.432234][ T4256] usb 7-1: can't set config #1, error -71 [ 367.442188][ T4256] usb 7-1: USB disconnect, device number 2 [ 368.759366][ T8825] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1254'. [ 368.771871][ T8826] loop5: detected capacity change from 0 to 1024 [ 371.833178][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1262'. [ 371.863492][ T8860] xt_l2tp: missing protocol rule (udp|l2tpip) [ 372.092741][ T8862] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.100436][ T8862] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.115930][ T8878] rdma_op ffff888024dd61f0 conn xmit_rdma 0000000000000000 [ 373.346802][ T8888] netlink: 'syz.0.1268': attribute type 4 has an invalid length. [ 374.939472][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1280'. [ 376.089686][ T8937] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2 [ 376.112110][ T8937] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0/file1 [ 376.398920][ T8949] loop6: detected capacity change from 0 to 128 [ 378.867073][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.899045][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.320174][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1300'. [ 386.453867][ T9059] netlink: 'syz.0.1311': attribute type 1 has an invalid length. [ 386.583333][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1310'. [ 386.607225][ T9061] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 386.709034][ T154] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 386.730148][ T9059] 8021q: adding VLAN 0 to HW filter on device bond3 [ 386.781122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 386.896250][ T9070] loop6: detected capacity change from 0 to 2048 [ 386.934528][ T6303] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 386.992530][ T9070] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 387.087161][ T9070] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 387.160003][ T9077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1314'. [ 389.411166][ T9099] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 389.449843][ T9099] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0/file1 [ 389.590390][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 389.590407][ T26] audit: type=1326 audit(1760072286.191:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x7ffc0000 [ 389.690977][ T26] audit: type=1326 audit(1760072286.261:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee3fd15ec9 code=0x7ffc0000 [ 389.719146][ T26] audit: type=1326 audit(1760072286.261:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x7ffc0000 [ 389.792363][ T26] audit: type=1326 audit(1760072286.261:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee3fd15ec9 code=0x7ffc0000 [ 390.453018][ T26] audit: type=1326 audit(1760072286.261:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x7ffc0000 [ 390.562202][ T26] audit: type=1326 audit(1760072286.281:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee3fd15ec9 code=0x7ffc0000 [ 390.658104][ T26] audit: type=1326 audit(1760072286.361:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x7ffc0000 [ 390.735029][ T9127] fuse: Bad value for 'fd' [ 390.756664][ T26] audit: type=1326 audit(1760072286.361:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x7ffc0000 [ 390.780426][ T26] audit: type=1326 audit(1760072286.381:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fee3fd15ec9 code=0x7ffc0000 [ 390.842228][ T26] audit: type=1326 audit(1760072286.381:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.1.1324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3fd15ec9 code=0x7ffc0000 [ 391.693349][ T9136] loop6: detected capacity change from 0 to 1024 [ 393.692484][ T9136] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 393.785053][ T9136] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 393.813284][ T9136] JBD2: no valid journal superblock found [ 393.823246][ T9136] EXT4-fs (loop6): error loading journal [ 395.174472][ T9178] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 395.312298][ T9178] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0/file1 [ 395.397961][ T9182] tipc: Enabled bearer , priority 0 [ 395.477757][ T9189] syz.6.1343[9189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.477853][ T9189] syz.6.1343[9189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.567687][ T9185] capability: warning: `syz.0.1342' uses 32-bit capabilities (legacy support in use) [ 396.010467][ T9205] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1346'. [ 397.763389][ T9210] MPTCP: kernel_bind error, err=-99 [ 404.282060][ T9304] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1368'. [ 404.345460][ T9306] device syzkaller1 entered promiscuous mode [ 404.374813][ T9306] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 407.456706][ T9336] tipc: Enabling of bearer rejected, failed to enable media [ 407.676672][ T9342] 8021q: VLANs not supported on vcan0 [ 409.037041][ T9342] netlink: 788 bytes leftover after parsing attributes in process `syz.6.1379'. [ 410.984746][ T9382] device sit0 left promiscuous mode [ 414.662477][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1407'. [ 416.064701][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 416.064717][ T26] audit: type=1326 audit(1760072312.671:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 416.183151][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1414'. [ 416.202059][ T26] audit: type=1326 audit(1760072312.701:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffbbe2ffd67 code=0x7ffc0000 [ 416.275847][ T26] audit: type=1326 audit(1760072312.701:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffbbe2a4f79 code=0x7ffc0000 [ 416.372392][ T26] audit: type=1326 audit(1760072312.701:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 417.324482][ T26] audit: type=1326 audit(1760072312.711:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffbbe2ffd67 code=0x7ffc0000 [ 417.366198][ T26] audit: type=1326 audit(1760072312.711:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffbbe2a4f79 code=0x7ffc0000 [ 417.441270][ T26] audit: type=1326 audit(1760072312.711:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 417.769922][ T26] audit: type=1326 audit(1760072312.711:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 417.793005][ T26] audit: type=1326 audit(1760072312.731:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffbbe2ffd67 code=0x7ffc0000 [ 418.052425][ T26] audit: type=1326 audit(1760072312.731:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9455 comm="syz.4.1411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffbbe2a4f79 code=0x7ffc0000 [ 418.278846][ T9480] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1416'. [ 418.549385][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1420'. [ 420.545988][ T9494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.597912][ T9494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.003816][ T9494] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.022068][ T9494] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.031454][ T9494] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.047458][ T9494] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.619007][ T9550] vxcan1 speed is unknown, defaulting to 1000 [ 423.789270][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 423.789286][ T26] audit: type=1326 audit(1760072320.391:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.4.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 423.869415][ T26] audit: type=1326 audit(1760072320.421:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.4.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 424.063313][ T26] audit: type=1326 audit(1760072320.441:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.4.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 424.085899][ T26] audit: type=1326 audit(1760072320.441:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.4.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 424.124438][ T26] audit: type=1326 audit(1760072320.441:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.4.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 424.417519][ T26] audit: type=1326 audit(1760072320.471:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.4.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 424.941117][ T26] audit: type=1326 audit(1760072320.471:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.4.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 425.029578][ T26] audit: type=1326 audit(1760072320.471:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.4.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 425.041265][ T9550] lo speed is unknown, defaulting to 1000 [ 425.059636][ T26] audit: type=1326 audit(1760072320.501:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.4.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 425.104389][ T26] audit: type=1326 audit(1760072320.501:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.4.1438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbe308ec9 code=0x7ffc0000 [ 425.303514][ T9600] loop6: detected capacity change from 0 to 2048 [ 425.381138][ T9600] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 426.050959][ T9622] netlink: zone id is out of range [ 426.058802][ T9622] netlink: zone id is out of range [ 426.064365][ T9622] netlink: zone id is out of range [ 426.069707][ T9622] netlink: zone id is out of range [ 426.076062][ T9622] netlink: zone id is out of range [ 426.081653][ T9622] netlink: zone id is out of range [ 426.089493][ T9622] netlink: zone id is out of range [ 426.100189][ T9622] netlink: zone id is out of range [ 426.108637][ T9622] netlink: zone id is out of range [ 426.114435][ T9622] netlink: zone id is out of range [ 426.431236][ T9628] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1455'. [ 433.292036][ T21] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 433.462249][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 433.462316][ T26] audit: type=1326 audit(1760072330.021:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220db5ec9 code=0x7ffc0000 [ 433.612083][ T21] usb 7-1: Using ep0 maxpacket: 32 [ 433.732891][ T21] usb 7-1: config 0 has no interfaces? [ 433.738690][ T21] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 433.972225][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.002898][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1471'. [ 434.022046][ T26] audit: type=1326 audit(1760072330.041:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220db5ec9 code=0x7ffc0000 [ 434.081863][ T26] audit: type=1326 audit(1760072330.141:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff220db5ec9 code=0x7ffc0000 [ 434.083586][ T21] usb 7-1: config 0 descriptor?? [ 434.123146][ T26] audit: type=1326 audit(1760072330.151:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220db5ec9 code=0x7ffc0000 [ 434.204658][ T9696] loop5: detected capacity change from 0 to 256 [ 434.217851][ T26] audit: type=1326 audit(1760072330.161:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220db5ec9 code=0x7ffc0000 [ 434.264018][ T9699] bridge0: port 1(vlan3) entered blocking state [ 434.274910][ T26] audit: type=1326 audit(1760072330.171:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff220db5ec9 code=0x7ffc0000 [ 434.298320][ T9699] bridge0: port 1(vlan3) entered disabled state [ 434.317459][ T9699] net_ratelimit: 23 callbacks suppressed [ 434.317478][ T9699] bridge0: mtu less than device minimum [ 434.329368][ T26] audit: type=1326 audit(1760072330.201:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220db5ec9 code=0x7ffc0000 [ 434.359427][ T26] audit: type=1326 audit(1760072330.231:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220db5ec9 code=0x7ffc0000 [ 434.400743][ T26] audit: type=1326 audit(1760072330.261:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff220db5ec9 code=0x7ffc0000 [ 434.442506][ T26] audit: type=1326 audit(1760072330.281:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9686 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff220db5ec9 code=0x7ffc0000 [ 434.588519][ T9703] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1474'. [ 434.636668][ T9696] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 436.932322][ T6788] usb 7-1: USB disconnect, device number 3 [ 437.725576][ T9744] netlink: 'syz.6.1484': attribute type 27 has an invalid length. [ 437.765113][ T9744] netlink: 'syz.6.1484': attribute type 1 has an invalid length. [ 437.804342][ T9743] syz.1.1486 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 440.103597][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.112201][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.353487][ T9779] device vlan2 entered promiscuous mode [ 440.539626][ T9789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1500'. [ 440.617363][ T9789] device hsr_slave_0 left promiscuous mode [ 441.730794][ T9803] loop6: detected capacity change from 0 to 1024 [ 441.930724][ T9803] EXT4-fs (loop6): Ignoring removed oldalloc option [ 441.965030][ T9803] EXT4-fs (loop6): Ignoring removed bh option [ 442.018554][ T9816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1506'. [ 442.049609][ T9803] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 442.132339][ T6922] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 442.465018][ T9803] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 442.592299][ T9803] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 442.722102][ T6922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.734171][ T6922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.750462][ T6922] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 442.768490][ T6922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.783480][ T6922] usb 6-1: config 0 descriptor?? [ 548.211911][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 548.218979][ C0] rcu: 1-...!: (1 GPs behind) idle=5e1/1/0x4000000000000000 softirq=25452/25453 fqs=7 [ 548.230664][ C0] (detected by 0, t=10506 jiffies, g=35209, q=390) [ 548.237387][ C0] Sending NMI from CPU 0 to CPUs 1: [ 548.242627][ C1] NMI backtrace for cpu 1 [ 548.242638][ C1] CPU: 1 PID: 9832 Comm: syz.1.1512 Not tainted syzkaller #0 [ 548.242656][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 548.242697][ C1] RIP: 0010:enqueue_hrtimer+0xdb/0x370 [ 548.242727][ C1] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 25 00 00 74 08 4c 89 f7 e8 18 4c 54 00 4d 8b 3e 49 83 c7 4c 4c 89 f8 48 c1 e8 03 42 0f b6 04 20 <84> c0 0f 85 ea 00 00 00 41 0f b6 2f 89 ee 83 e6 10 31 ff e8 3d e6 [ 548.242742][ C1] RSP: 0018:ffffc90000dd0ce8 EFLAGS: 00000803 [ 548.242757][ C1] RAX: 0000000000000000 RBX: ffff88805a822340 RCX: ffff88801ff50000 [ 548.242770][ C1] RDX: 0000000000010000 RSI: ffffffff8a59a4a0 RDI: ffffffff8a59a460 [ 548.242784][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: fffffbfff1ad32b6 [ 548.242796][ C1] R10: fffffbfff1ad32b6 R11: 1ffffffff1ad32b5 R12: dffffc0000000000 [ 548.242810][ C1] R13: 1ffff11017225468 R14: ffff8880b912a340 R15: ffff8880b912a28c [ 548.242824][ C1] FS: 00007fee3df5c6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 548.242841][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 548.242854][ C1] CR2: 000000110c38411e CR3: 00000000653c2000 CR4: 00000000003506e0 [ 548.242869][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 548.242880][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 548.242891][ C1] Call Trace: [ 548.242898][ C1] [ 548.242907][ C1] __hrtimer_run_queues+0x65a/0xc40 [ 548.242932][ C1] ? taprio_free_sched_cb+0x190/0x190 [ 548.242957][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 548.242977][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 548.242998][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 548.243029][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 548.243048][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 548.243069][ C1] [ 548.243073][ C1] [ 548.243079][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 548.243098][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 548.243116][ C1] Code: 74 05 e8 ae 4b cb f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 36 d5 9e f7 65 8b 05 17 d3 4f 76 85 c0 74 3c 48 c7 04 24 0e 36 [ 548.243129][ C1] RSP: 0018:ffffc900030af5c0 EFLAGS: 00000206 [ 548.243143][ C1] RAX: afcc25a155041c00 RBX: 0000000000000a06 RCX: afcc25a155041c00 [ 548.243156][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b1820 RDI: 0000000000000001 [ 548.243168][ C1] RBP: ffffc900030af650 R08: dffffc0000000000 R09: fffffbfff1ff7a2f [ 548.243210][ C1] R10: fffffbfff1ff7a2f R11: 1ffffffff1ff7a2e R12: dffffc0000000000 [ 548.243223][ C1] R13: 0000000000000000 R14: ffff88801f790ec0 R15: 1ffff92000615eb8 [ 548.243244][ C1] ? _raw_spin_unlock+0x40/0x40 [ 548.243259][ C1] ? __wake_up_common+0x2a4/0x4e0 [ 548.243282][ C1] __wake_up_sync_key+0x11b/0x180 [ 548.243302][ C1] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 548.243323][ C1] ? sock_load_diag_module+0x130/0x130 [ 548.243346][ C1] __unix_dgram_recvmsg+0x497/0xd50 [ 548.243370][ C1] ? unix_unhash+0x10/0x10 [ 548.243387][ C1] ? aa_af_perm+0x2b0/0x2b0 [ 548.243407][ C1] ? mark_lock+0x94/0x320 [ 548.243428][ C1] ? unix_dgram_recvmsg+0xb2/0xd0 [ 548.243445][ C1] ? unix_dgram_sendmsg+0x1890/0x1890 [ 548.243463][ C1] ____sys_recvmsg+0x291/0x580 [ 548.243489][ C1] ? __sys_recvmsg_sock+0x40/0x40 [ 548.243515][ C1] ? import_iovec+0x6f/0xa0 [ 548.243535][ C1] ___sys_recvmsg+0x1af/0x4f0 [ 548.243556][ C1] ? __sys_recvmsg+0x250/0x250 [ 548.243585][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 548.243606][ C1] ? __might_fault+0xb3/0x110 [ 548.243624][ C1] do_recvmmsg+0x344/0x7a0 [ 548.243646][ C1] ? __sys_recvmmsg+0x280/0x280 [ 548.243671][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 548.243695][ C1] __x64_sys_recvmmsg+0x18d/0x240 [ 548.243715][ C1] ? do_recvmmsg+0x7a0/0x7a0 [ 548.243735][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 548.243753][ C1] do_syscall_64+0x4c/0xa0 [ 548.243768][ C1] ? clear_bhb_loop+0x30/0x80 [ 548.243783][ C1] ? clear_bhb_loop+0x30/0x80 [ 548.243799][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 548.243816][ C1] RIP: 0033:0x7fee3fd15ec9 [ 548.243835][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.243849][ C1] RSP: 002b:00007fee3df5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 548.243865][ C1] RAX: ffffffffffffffda RBX: 00007fee3ff6d090 RCX: 00007fee3fd15ec9 [ 548.243877][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 548.243887][ C1] RBP: 00007fee3fd98f91 R08: 0000000000000000 R09: 0000000000000000 [ 548.243898][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 548.243907][ C1] R13: 00007fee3ff6d128 R14: 00007fee3ff6d090 R15: 00007ffdc648be98 [ 548.243927][ C1] [ 548.244620][ C0] rcu: rcu_preempt kthread starved for 10470 jiffies! g35209 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 548.730249][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 548.740232][ C0] rcu: RCU grace-period kthread stack dump: [ 548.746133][ C0] task:rcu_preempt state:R running task stack:27848 pid: 15 ppid: 2 flags:0x00004000 [ 548.757029][ C0] Call Trace: [ 548.760319][ C0] [ 548.763273][ C0] __schedule+0x11bb/0x4390 [ 548.767800][ C0] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 548.773191][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 548.779109][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 548.785019][ C0] ? _raw_spin_unlock+0x40/0x40 [ 548.789886][ C0] ? rcu_is_watching+0x11/0xa0 [ 548.794675][ C0] ? release_firmware_map_entry+0x190/0x190 [ 548.800598][ C0] schedule+0x11b/0x1e0 [ 548.804790][ C0] schedule_timeout+0x15c/0x280 [ 548.809835][ C0] ? console_conditional_schedule+0x40/0x40 [ 548.815749][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 548.821746][ C0] ? update_process_times+0x200/0x200 [ 548.827148][ C0] ? prepare_to_swait_event+0x331/0x350 [ 548.832738][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 548.837802][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 548.843204][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 548.849375][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 548.854175][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 548.859392][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 548.864696][ C0] rcu_gp_kthread+0x98/0x350 [ 548.869310][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 548.874497][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 548.880457][ C0] ? __kthread_parkme+0x157/0x1b0 [ 548.885505][ C0] kthread+0x436/0x520 [ 548.889586][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 548.894709][ C0] ? kthread_blkcg+0xd0/0xd0 [ 548.899319][ C0] ret_from_fork+0x1f/0x30 [ 548.903769][ C0] [ 548.906802][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 548.913130][ C0] NMI backtrace for cpu 0 [ 548.917459][ C0] CPU: 0 PID: 9842 Comm: syz.0.1516 Not tainted syzkaller #0 [ 548.924841][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 548.934902][ C0] Call Trace: [ 548.938192][ C0] [ 548.941044][ C0] dump_stack_lvl+0x168/0x230 [ 548.945739][ C0] ? show_regs_print_info+0x20/0x20 [ 548.950955][ C0] ? load_image+0x3b0/0x3b0 [ 548.955493][ C0] ? irq_work_queue+0xbf/0x140 [ 548.960279][ C0] nmi_cpu_backtrace+0x397/0x3d0 [ 548.965239][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 548.971405][ C0] ? _printk+0xcc/0x110 [ 548.975585][ C0] ? cpu_online+0x1d/0x30 [ 548.980038][ C0] ? load_image+0x3b0/0x3b0 [ 548.984578][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 548.990674][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 548.996800][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 549.003168][ C0] print_other_cpu_stall+0x10c8/0x1220 [ 549.008659][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 549.013615][ C0] ? timekeeping_advance+0x7f6/0xac0 [ 549.018920][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 549.023978][ C0] rcu_sched_clock_irq+0x831/0x1110 [ 549.029208][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 549.034078][ C0] ? account_process_tick+0x227/0x3a0 [ 549.039472][ C0] update_process_times+0x193/0x200 [ 549.044689][ C0] tick_sched_timer+0x37d/0x560 [ 549.049560][ C0] __hrtimer_run_queues+0x4fe/0xc40 [ 549.054792][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 549.060367][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 549.065499][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 549.071590][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 549.076565][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 549.082566][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 549.088217][ C0] [ 549.091159][ C0] [ 549.094113][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 549.100112][ C0] RIP: 0010:smp_call_function_many_cond+0xb88/0xd70 [ 549.106717][ C0] Code: b6 44 05 00 84 c0 0f 85 9d 00 00 00 41 8b 1c 24 89 de 83 e6 01 31 ff e8 66 49 0b 00 83 e3 01 75 07 e8 fc 45 0b 00 eb 43 f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 44 05 00 84 c0 75 11 41 f7 [ 549.126600][ C0] RSP: 0018:ffffc900040bfaa0 EFLAGS: 00000246 [ 549.132682][ C0] RAX: ffffffff816c847b RBX: 0000000000000001 RCX: 0000000000080000 [ 549.140671][ C0] RDX: ffffc90005c41000 RSI: 000000000007ffff RDI: 0000000000080000 [ 549.148652][ C0] RBP: ffffc900040bfbe0 R08: dffffc0000000000 R09: fffffbfff1ff7a19 [ 549.156640][ C0] R10: fffffbfff1ff7a19 R11: 1ffffffff1ff7a18 R12: ffff8880b91405c8 [ 549.164626][ C0] R13: 1ffff110172280b9 R14: ffff8880b903b3c0 R15: 0000000000000001 [ 549.172619][ C0] ? smp_call_function_many_cond+0xbab/0xd70 [ 549.178630][ C0] ? text_poke_sync+0x20/0x20 [ 549.183333][ C0] ? smp_call_function_many+0x30/0x30 [ 549.188726][ C0] ? kcm_parse_func_strparser+0x55/0x160 [ 549.194379][ C0] ? text_poke+0x90/0x90 [ 549.198637][ C0] ? arch_jump_label_transform_apply+0xe/0x20 [ 549.204724][ C0] ? arch_jump_label_transform_apply+0xe/0x20 [ 549.210811][ C0] ? text_poke_sync+0x20/0x20 [ 549.215510][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 549.220639][ C0] ? kcm_parse_func_strparser+0x55/0x160 [ 549.226384][ C0] text_poke_bp_batch+0x2a9/0x7c0 [ 549.231430][ C0] ? mutex_lock_io_nested+0x60/0x60 [ 549.236644][ C0] ? text_poke_loc_init+0x570/0x570 [ 549.241873][ C0] text_poke_finish+0x16/0x30 [ 549.246568][ C0] arch_jump_label_transform_apply+0x13/0x20 [ 549.252575][ C0] static_key_slow_inc_cpuslocked+0x121/0x210 [ 549.258671][ C0] static_key_slow_inc+0x16/0x20 [ 549.263620][ C0] bpf_enable_stats+0x101/0x140 [ 549.268492][ C0] __sys_bpf+0x571/0x670 [ 549.272756][ C0] ? bpf_link_show_fdinfo+0x340/0x340 [ 549.278155][ C0] ? vtime_user_exit+0x2dc/0x400 [ 549.283112][ C0] __x64_sys_bpf+0x78/0x90 [ 549.287547][ C0] do_syscall_64+0x4c/0xa0 [ 549.291979][ C0] ? clear_bhb_loop+0x30/0x80 [ 549.296758][ C0] ? clear_bhb_loop+0x30/0x80 [ 549.301450][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 549.307368][ C0] RIP: 0033:0x7ff220db5ec9 [ 549.311799][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.331473][ C0] RSP: 002b:00007ff21f01d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 549.339916][ C0] RAX: ffffffffffffffda RBX: 00007ff22100cfa0 RCX: 00007ff220db5ec9 [ 549.347909][ C0] RDX: 0000000000000004 RSI: 0000200000000200 RDI: 0000000000000020 [ 549.356012][ C0] RBP: 00007ff220e38f91 R08: 0000000000000000 R09: 0000000000000000 [ 549.364172][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.372154][ C0] R13: 00007ff22100d038 R14: 00007ff22100cfa0 R15: 00007fff93f78da8 [ 549.380152][ C0]