last executing test programs: 12.362351357s ago: executing program 0 (id=2625): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004240)={0x28, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x10, 0x142, 0x0, 0x1, [@nested={0xc, 0xa, 0x0, 0x1, [@typed={0x8, 0x8d, 0x0, 0x0, @pid}]}]}, @nested={0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 11.982545393s ago: executing program 0 (id=2628): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) 11.864330167s ago: executing program 0 (id=2629): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 9.534990626s ago: executing program 0 (id=2635): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a}}, 0x20}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 9.375161246s ago: executing program 3 (id=2637): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) epoll_pwait2(r1, &(0x7f0000000380)=[{}], 0x1, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x7e, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) write(r2, 0x0, 0x0) openat$autofs(0xffffff9c, 0x0, 0x9cb96f98f6ad2e4e, 0x0) 8.907714268s ago: executing program 0 (id=2639): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002c00010026bd70f7fbdbdf250400002804001d00"], 0x18}, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r6, r7}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)={'sha1-generic\x00'}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x600, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 8.640220504s ago: executing program 1 (id=2641): mkdir(&(0x7f0000002740)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f00000001c0)=ANY=[]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000380), 0x1, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000000)=0x2) r4 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf2545000e4fc79f4fd1223a7464657673696d0000000f0086cdbe637464787673697e30000008008e00000000008dcecca569923668267784aa490161582c4fba000eeae9e69dd3d6cdc53695538f34aefb58233dd43f43351732b22c1ff14573f4d894993a9846daa71547a279a05217b4138772748004e0bce540f380c510cdc91fddfe9d387ac1ff0c57c70bca33d084fe7126527dae74103c1aea4ec17fc19a94e4f267b19ae0d74d72ded4b38e39d91441a1caaf401a99326b66c4fe9336d28d7aea5c6d032b39896c5e182296d3"], 0x3c}, 0x1, 0x0, 0x0, 0x820}, 0x20004004) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x404a000}, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value}) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000480)="a64547f02d24ef452b126e6b4ee0848331", 0x11, 0xffffffffffffffff) r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r8, r9, r8}, &(0x7f00000000c0)=""/80, 0x50, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x104) 8.295395309s ago: executing program 5 (id=2642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8000000}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 8.2945095s ago: executing program 3 (id=2643): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x1000000, 0x0, 0x0, 0x0, 0xfffff9, 0x800005c0], 0x0, 0x0, &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0x4, @mcast2}, {0xa, 0x4e22, 0x3, @empty, 0x9}, 0x0, {[0x9, 0xfffffffc, 0x38000002, 0xb, 0x6, 0x10, 0x7, 0x7]}}, 0x5c) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_FORWARD(r7, 0xc0844123, &(0x7f0000000080)=0x5) 6.849252347s ago: executing program 3 (id=2645): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket(0x11, 0x800000003, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x9000, @loopback}], 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rseq(0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x73, &(0x7f00000000c0)=""/47, &(0x7f0000000040)=0x2f) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r7, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) sendfile(r8, r8, 0x0, 0x7ffff000) setsockopt$packet_int(r7, 0x107, 0xb, &(0x7f00000000c0)=0x6, 0x4) write$dsp(r7, &(0x7f0000000000)="7bc627e7015a1552ca8fe640ebd21bf30667348f44c067b51d724a31c3f0fba06f002e7feffacecc1c86969fd7cef7d056ace17458a479e6c980de1753323a866f6f3261b4266f86b9102100c034d435abc9170d9ef2a56c10b785ad70d9aaf06af22f644b53bec0da75b7d1", 0x6c) 6.542657268s ago: executing program 5 (id=2646): prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x4000)=nil) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) timer_create(0x7, 0x0, &(0x7f0000000340)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x3a) 6.354785004s ago: executing program 1 (id=2647): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 6.349730101s ago: executing program 4 (id=2648): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b2, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_emit_ethernet(0xbb, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r5) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000180)='/!-(\x00\xa1\xad\x83e`\xa7\xc42\xdd\x9c~\xa9\x8eR_\xc8\x00\x00\x04\x00\x00\x00\x00\x03\xb3\x138\xc3\xbf\xf0\x89\xec<\x80\xe2Bj.u\x9f\x1ct<\x0f\xccn\xefP\xc0\xaab\xb8_\r\x9c\x80\xa9\xad\xd4EV\xa4\xfct\xbd\x96\xdf\r5\x9a', 0x1) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000050013"], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=ANY=[@ANYBLOB="8001000010000100000000080c000000fc01000000000000000000000000000100000000000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a00010600000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048000100736d332d636500"/308], 0x180}}, 0x20000000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f00"/55, @ANYRES64=r5, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r7, @ANYRESHEX=r4], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000740)={0x3}) io_uring_register$IORING_REGISTER_MEM_REGION(r9, 0x22, &(0x7f0000000340)={&(0x7f0000000300)={&(0x7f0000000280)="477feee9188f51872d30322d6b66f1c65aad293e225cd564d1b7cf75f07ddf311ef87dc3b5de48471f7d54634dada84dcaf5531d1e88fc9b55e3", 0x3a, 0x9d89d66e6e819765, 0x80000000, 0xb292}}, 0x1) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 5.368239496s ago: executing program 1 (id=2650): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x21e5, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) futex(&(0x7f0000000080)=0x1, 0xd, 0x1, 0x0, 0x0, 0x1) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000540)={0x1f, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x104) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff2000078040e000000208000a400000000205000300020000000900020073797a310000e7000507000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_clone(0x2d398200, 0x0, 0xfffffffffffffefa, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 5.241642478s ago: executing program 2 (id=2651): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a}}, 0x20}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 5.135276666s ago: executing program 3 (id=2652): creat(&(0x7f00000002c0)='./file0\x00', 0x10c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r3, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, r2, &(0x7f0000000180)='\x00', 0x1001}]) dup3(r0, r2, 0x6700000000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 5.062805234s ago: executing program 4 (id=2653): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ptrace(0x10, r5) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r6, 0x5411, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), 0xffffffffffffffff) waitid(0x0, r5, 0x0, 0x8, 0x0) waitid(0x1, r5, 0x0, 0x4, 0x0) 4.888515578s ago: executing program 5 (id=2654): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) 4.869775805s ago: executing program 2 (id=2655): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) epoll_pwait2(r1, &(0x7f0000000380)=[{}], 0x1, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x7e, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000004c0)={0x1f, 0xffff, 0x3}, 0x6) write(r2, 0x0, 0x0) openat$autofs(0xffffff9c, 0x0, 0x9cb96f98f6ad2e4e, 0x0) 4.462383026s ago: executing program 3 (id=2656): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, 0x0, &(0x7f0000000000)) 4.363850001s ago: executing program 5 (id=2657): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) sendfile(r4, r4, 0x0, 0x9) 4.062430021s ago: executing program 1 (id=2658): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x8000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 4.061198632s ago: executing program 4 (id=2659): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x803341) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000000040), &(0x7f000009de80), 0x0) 3.823672076s ago: executing program 3 (id=2660): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000480)=ANY=[@ANYRES32], 0xff, 0x59ed, &(0x7f0000008940)="$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") 3.698752392s ago: executing program 2 (id=2661): syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c0000440000000000069078ac1414bbac1414aa441c0a010000000000000000ac14140000000000ac1414000000000000034e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc200009078000024f3578a846ecb2aa504a42e8d8416c67048c12c696ed2776d5783abfb8393"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0xc05c5340, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, 0x0, 0x2}, 0x18) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008c14}, 0x40) close(r2) 3.625686909s ago: executing program 1 (id=2662): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)={0x1c, 0x3e, 0x107, 0xfffffffc, 0x25dfdbfe, {0x1, 0x7c}, [@nested={0x5, 0x4, 0x0, 0x1, [@generic='6']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000040)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 3.228406232s ago: executing program 4 (id=2663): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)={0x0, 0x7f, 0x3}) 3.106466268s ago: executing program 5 (id=2664): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) socket$kcm(0xa, 0x2, 0x3a) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpgrp(0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7", 0x17}, {&(0x7f0000000900)}], 0x2}, 0x0) 2.757832468s ago: executing program 0 (id=2665): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x37b2, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_emit_ethernet(0xbb, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r5) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000180)='/!-(\x00\xa1\xad\x83e`\xa7\xc42\xdd\x9c~\xa9\x8eR_\xc8\x00\x00\x04\x00\x00\x00\x00\x03\xb3\x138\xc3\xbf\xf0\x89\xec<\x80\xe2Bj.u\x9f\x1ct<\x0f\xccn\xefP\xc0\xaab\xb8_\r\x9c\x80\xa9\xad\xd4EV\xa4\xfct\xbd\x96\xdf\r5\x9a', 0x1) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800010600000000000000001c140000fe00000100000000050013"], 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=ANY=[@ANYBLOB="8001000010000100000000080c000000fc01000000000000000000000000000100000000000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000004000000000000000d000000000000000a0000000000000000000000000000000000000000000000000000000a00010600000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048000100736d332d636500"/308], 0x180}}, 0x20000000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f00"/55, @ANYRES64=r5, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r7, @ANYRESHEX=r4], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000740)={0x3}) io_uring_register$IORING_REGISTER_MEM_REGION(r9, 0x22, &(0x7f0000000340)={&(0x7f0000000300)={&(0x7f0000000280)="477feee9188f51872d30322d6b66f1c65aad293e225cd564d1b7cf75f07ddf311ef87dc3b5de48471f7d54634dada84dcaf5531d1e88fc9b55e3", 0x3a, 0x9d89d66e6e819765, 0x80000000, 0xb292}}, 0x1) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 1.968063569s ago: executing program 2 (id=2666): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 1.864315484s ago: executing program 5 (id=2667): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0x0, 0x9, {0x0, 0x0, 0x7, 0x3, 0xfffffff0, 0xa5, {0x0, 0xb43d, 0x3, 0x9, 0x8000000000000001, 0x9, 0x4, 0x800, 0x40, 0x6000, 0x4, 0x0, 0x0, 0xffffffff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x0, {0x0, 0x2, 0x7f, 0x1b7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.780459778s ago: executing program 4 (id=2668): creat(&(0x7f00000002c0)='./file0\x00', 0x10c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r3, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, r2, &(0x7f0000000180)='\x00', 0x1001}]) dup3(r0, r2, 0x6700000000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 1.637255556s ago: executing program 1 (id=2669): socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETNODEID(r0, 0x89e1, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) socket(0x2b, 0x80801, 0x1) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000008000000cffd3f00ff01000080010000", @ANYRES32, @ANYBLOB="1239000000000000c6bb500000000040000000000000000000001a0000c13973c2311a79cc0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r3, r3, 0x0, 0x40008) 1.512714746s ago: executing program 2 (id=2670): futex_waitv(&(0x7f0000001880)=[{0x0, &(0x7f0000000000), 0x2}, {0x0, 0x0, 0x82}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000)=0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = dup(0xffffffffffffffff) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000ac0)={0x0, 0xc6, 0xfffffffe}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r5, 0x0, 0xa0028000}, 0x38) write$UHID_INPUT(r3, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="71756f74612c0076803d1ef1e21d15ecae5550b872972cd5fd8e642f1e64ccb6bbcfe6ba65a7cf4fdbc772c2977e319ff8f2cc885c06cc0d16a110373fa6cff7b62d0d527d078b3154bfe4913a1a66b19475a0a4d0c5831d8f2c3697d547a24e519af5b610225e5ed819cdd7c1676f08c149c1769b8d66861e3aeddb1cfbce19e76c1b822025d12ad2d4c98f62c117e2b3a0681f7893eeef0f20e8f7c2f8a903b3d0a783c57a9c7ac98e6c5543386319ed2da8a82aeae272314d6303856667"]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x167e032d8b0d392, 0x300) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)) 1.353642154s ago: executing program 4 (id=2671): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) 0s ago: executing program 2 (id=2672): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x3d, 0xb, @dev={0xfe, 0x80, '\x00', 0x12}, 0x2}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000001200), 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r6 = dup(r5) fsmount(r6, 0x1, 0x2) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r6}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r7, 0x1, &(0x7f0000000240)) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000380)={0x8, 0x1400}) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000440)=0x30de68c6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) kernel console output (not intermixed with test programs): pid=9894 comm="syz.3.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad2f8e169 code=0x7ffc0000 [ 284.567119][ T30] audit: type=1326 audit(1745312059.880:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.3.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad2f8e169 code=0x7ffc0000 [ 284.592745][ T30] audit: type=1326 audit(1745312059.880:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.3.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ad2f8e169 code=0x7ffc0000 [ 284.615722][ T30] audit: type=1326 audit(1745312059.880:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.3.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad2f8e169 code=0x7ffc0000 [ 284.638643][ T30] audit: type=1326 audit(1745312059.880:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.3.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad2f8e169 code=0x7ffc0000 [ 284.732986][ T30] audit: type=1326 audit(1745312059.880:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.3.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ad2f8e169 code=0x7ffc0000 [ 284.787637][ T9910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.810766][ T9910] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.125058][ T9924] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1404'. [ 285.140959][ T9924] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1404'. [ 285.154364][ T9925] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1403'. [ 285.177279][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.186769][ T9924] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1404'. [ 285.195943][ T9925] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1403'. [ 285.301578][ T9924] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1404'. [ 285.326722][ T9925] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1403'. [ 285.476584][ T9924] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1404'. [ 285.525621][ T9925] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1403'. [ 286.518396][ T9941] loop5: detected capacity change from 0 to 128 [ 286.616904][ T9941] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.654969][ T9941] ext4 filesystem being mounted at /235/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 286.926018][ T5837] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 286.939165][ T9958] smc: net device bond0 applied user defined pnetid SYZ0 [ 286.967854][ T9958] smc: net device bond0 erased user defined pnetid SYZ0 [ 289.102953][ T9979] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1423'. [ 289.302040][ T9994] tipc: Started in network mode [ 289.318501][ T9994] tipc: Node identity 7, cluster identity 4711 [ 289.343605][ T9994] tipc: Node number set to 7 [ 289.481270][T10004] loop2: detected capacity change from 0 to 1024 [ 289.507161][T10004] EXT4-fs: quotafile must be on filesystem root [ 290.919209][T10025] loop1: detected capacity change from 0 to 128 [ 290.947181][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 290.947204][ T30] audit: type=1800 audit(1745312066.600:847): pid=10025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1440" name="file2" dev="loop1" ino=28 res=0 errno=0 [ 290.976313][T10024] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 290.989586][T10024] FAT-fs (loop1): Filesystem has been set read-only [ 290.997578][T10024] syz.1.1440: attempt to access beyond end of device [ 290.997578][T10024] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 291.046257][T10024] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 291.067811][T10024] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 291.082120][T10027] __nla_validate_parse: 3 callbacks suppressed [ 291.082138][T10027] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1443'. [ 291.112666][T10025] syz.1.1440: attempt to access beyond end of device [ 291.112666][T10025] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 291.145392][T10027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1443'. [ 291.158313][T10025] syz.1.1440: attempt to access beyond end of device [ 291.158313][T10025] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 291.177162][T10027] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1443'. [ 291.186436][T10027] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1443'. [ 292.600388][T10073] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 292.654952][T10073] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 292.734743][T10073] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 292.803851][T10075] loop4: detected capacity change from 0 to 128 [ 292.878983][T10075] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 292.899709][T10071] loop5: detected capacity change from 0 to 8192 [ 292.981289][T10075] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 293.006096][T10081] loop1: detected capacity change from 0 to 128 [ 293.057689][ T30] audit: type=1800 audit(1745312068.710:848): pid=10081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1457" name="file2" dev="loop1" ino=31 res=0 errno=0 [ 293.068576][T10080] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 293.165786][T10080] FAT-fs (loop1): Filesystem has been set read-only [ 293.175230][T10080] syz.1.1457: attempt to access beyond end of device [ 293.175230][T10080] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 293.207714][T10085] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1459'. [ 293.219827][T10080] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 293.242005][T10080] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 293.258251][T10081] syz.1.1457: attempt to access beyond end of device [ 293.258251][T10081] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 293.283407][T10085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1459'. [ 293.290896][T10081] syz.1.1457: attempt to access beyond end of device [ 293.290896][T10081] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 293.308168][ T5839] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 293.321987][T10085] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1459'. [ 293.364462][T10085] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1459'. [ 295.133990][T10133] loop3: detected capacity change from 0 to 128 [ 295.159782][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1474'. [ 295.177166][T10137] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1476'. [ 295.206942][T10133] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.224363][T10135] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.235735][T10135] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.235794][T10135] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.235830][T10135] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.235877][T10133] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 295.404299][ T30] audit: type=1326 audit(1745312071.050:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10139 comm="syz.0.1477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe20398e169 code=0x0 [ 295.455630][ T5844] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 295.617205][T10158] loop1: detected capacity change from 0 to 512 [ 295.666270][T10158] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 295.741675][T10158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.774513][T10158] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.986465][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.398689][T10192] __nla_validate_parse: 4 callbacks suppressed [ 296.398715][T10192] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1491'. [ 296.443586][T10192] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1491'. [ 296.473990][T10192] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1491'. [ 296.486206][T10192] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1491'. [ 296.878321][ T30] audit: type=1326 audit(1745312072.530:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10197 comm="syz.4.1494" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde0958e169 code=0x0 [ 296.960912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 296.969621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 296.978237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 296.986912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 297.167616][T10214] loop0: detected capacity change from 0 to 1024 [ 297.222526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 297.267121][T10214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.341164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 297.367406][T10214] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1498: bg 0: block 88: padding at end of block bitmap is not set [ 297.553843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 297.656820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 297.784942][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1499'. [ 297.974298][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.113730][T10231] hub 6-0:1.0: USB hub found [ 298.146167][T10231] hub 6-0:1.0: 1 port detected [ 298.189736][T10235] loop3: detected capacity change from 0 to 512 [ 298.203686][T10235] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 298.234900][T10235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.250877][T10235] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.270816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 298.499396][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.592181][T10249] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1507'. [ 298.618072][T10249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1507'. [ 298.627178][T10249] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1507'. [ 298.643008][T10249] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1507'. [ 299.158351][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 299.335683][ T9] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 299.357112][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.366799][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.378778][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.388944][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.400499][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.416292][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.425705][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.435414][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.446843][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.455310][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.470416][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.481896][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.491259][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.501943][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.513426][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.521426][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.537486][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.548837][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.559193][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.568840][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.580129][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.591504][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 299.600559][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 299.613235][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 299.626263][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 299.635379][ T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 299.645291][ T9] usb 4-1: Product: syz [ 299.649487][ T9] usb 4-1: Manufacturer: syz [ 299.660696][ T9] usb 4-1: SerialNumber: syz [ 299.686475][ T9] usb 4-1: config 0 descriptor?? [ 299.722429][ T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 299.970949][ T9] usb 4-1: USB disconnect, device number 2 [ 299.993480][ T9] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 300.432719][T10270] loop0: detected capacity change from 0 to 512 [ 300.484080][T10270] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 300.538338][T10270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.551946][T10270] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.571491][ T915] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 300.607436][ T30] audit: type=1800 audit(1745312076.260:851): pid=10270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1513" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 300.655730][T10279] loop1: detected capacity change from 0 to 1024 [ 300.674630][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.751192][ T915] usb 5-1: Using ep0 maxpacket: 16 [ 300.763189][ T915] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 300.768891][T10279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.777328][ T915] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 300.802611][ T915] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 300.805037][T10284] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1516'. [ 300.816635][ T915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 300.836529][ T915] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 300.847123][ T915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.855370][ T915] usb 5-1: Product: syz [ 300.859608][ T915] usb 5-1: Manufacturer: syz [ 300.864265][ T915] usb 5-1: SerialNumber: syz [ 300.874987][ T915] usb 5-1: config 0 descriptor?? [ 301.018858][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.101165][ T915] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 301.148869][ T5190] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 301.196821][ T5190] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 301.226828][ T5190] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 301.260237][ T5190] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 301.414678][T10268] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 301.432791][ T915] usb 5-1: USB disconnect, device number 2 [ 302.097355][T10326] loop5: detected capacity change from 0 to 512 [ 302.131341][T10326] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 302.195082][T10326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.262729][T10326] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.349055][ T9] IPVS: starting estimator thread 0... [ 302.389649][ T30] audit: type=1800 audit(1745312078.040:852): pid=10338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1529" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 302.471571][T10336] IPVS: using max 23 ests per chain, 55200 per kthread [ 302.506127][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.722403][T10340] loop5: detected capacity change from 0 to 1024 [ 302.799822][T10340] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.821936][T10349] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 302.830998][T10349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.910206][T10340] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1532: bg 0: block 88: padding at end of block bitmap is not set [ 303.062922][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.081182][ T5892] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 303.113619][T10354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 303.120921][T10354] IPv6: NLM_F_CREATE should be set when creating new route [ 303.254167][ T5892] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 303.270735][ T5892] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 303.296613][ T5892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 303.315581][ T5892] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 303.345410][ T5892] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 303.383035][ T5892] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 303.415174][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 303.435509][ T5892] usb 3-1: Product: syz [ 303.439746][ T5892] usb 3-1: Manufacturer: syz [ 303.507689][ T5892] cdc_wdm 3-1:1.0: skipping garbage [ 303.526562][ T5892] cdc_wdm 3-1:1.0: skipping garbage [ 303.547603][ T5892] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 303.555280][T10373] loop0: detected capacity change from 0 to 512 [ 303.568250][ T5892] cdc_wdm 3-1:1.0: Unknown control protocol [ 303.589408][T10373] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 303.639624][T10373] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.686163][T10373] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.714570][ T5892] usb 3-1: USB disconnect, device number 2 [ 303.775181][ T30] audit: type=1800 audit(1745312079.430:853): pid=10373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1544" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 303.857958][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.312251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 304.706515][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1551'. [ 304.715892][T10400] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 304.741381][T10400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.125526][T10413] syzkaller0: entered promiscuous mode [ 305.135097][T10413] syzkaller0: entered allmulticast mode [ 305.525873][T10427] loop2: detected capacity change from 0 to 512 [ 305.603268][T10427] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 305.659249][T10427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.690385][T10427] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.718289][ T30] audit: type=1800 audit(1745312081.370:854): pid=10427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1561" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 305.869056][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.128371][ T8390] Bluetooth: hci5: unexpected event for opcode 0x200a [ 307.468383][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'. [ 307.478829][T10447] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 307.490038][T10447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.054376][ T30] audit: type=1804 audit(1745312083.530:855): pid=10454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1568" name="/newroot/271/file0" dev="tmpfs" ino=1439 res=1 errno=0 [ 309.145840][T10452] Falling back ldisc for ptm0. [ 309.595998][T10467] loop1: detected capacity change from 0 to 512 [ 309.604101][T10467] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 309.666889][T10467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.700474][T10467] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.759454][ T30] audit: type=1800 audit(1745312085.410:856): pid=10467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1574" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 309.826168][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.984860][T10478] loop0: detected capacity change from 0 to 1024 [ 310.033285][T10478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.093344][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.192973][T10419] pim6reg1: entered promiscuous mode [ 310.199529][T10419] pim6reg1: entered allmulticast mode [ 311.478825][T10504] loop4: detected capacity change from 0 to 1024 [ 311.494124][T10505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1586'. [ 311.510879][T10505] openvswitch: netlink: Flow key attr not present in new flow. [ 311.516349][T10497] loop3: detected capacity change from 0 to 8192 [ 311.556748][T10504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.626401][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1586'. [ 311.683292][T10504] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1588: bg 0: block 88: padding at end of block bitmap is not set [ 311.752767][T10512] evm: overlay not supported [ 311.921810][T10515] loop2: detected capacity change from 0 to 512 [ 311.956746][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.971497][T10515] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 312.081990][T10515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.129348][T10515] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.187709][ T30] audit: type=1800 audit(1745312087.840:857): pid=10515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1591" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 312.331156][T10529] loop5: detected capacity change from 0 to 1024 [ 312.349717][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.375006][T10529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.578368][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.689307][T10537] syzkaller0: entered promiscuous mode [ 312.715798][T10537] syzkaller0: entered allmulticast mode [ 313.559072][T10550] exFAT-fs (nullb0): invalid boot record signature [ 313.607485][T10550] exFAT-fs (nullb0): failed to read boot sector [ 313.661843][T10550] exFAT-fs (nullb0): failed to recognize exfat type [ 313.955196][T10563] loop1: detected capacity change from 0 to 1024 [ 314.127351][T10563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.342569][T10563] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1605: bg 0: block 88: padding at end of block bitmap is not set [ 314.474188][T10564] loop4: detected capacity change from 0 to 8192 [ 314.499114][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.935817][T10580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1608'. [ 314.950569][T10580] openvswitch: netlink: Flow key attr not present in new flow. [ 315.054140][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1608'. [ 316.226990][T10584] loop1: detected capacity change from 0 to 512 [ 316.235403][T10584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 316.275238][T10584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.288729][T10584] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.333210][ T30] audit: type=1800 audit(1745312091.980:858): pid=10584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1609" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 316.371070][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.029867][T10597] loop3: detected capacity change from 0 to 1024 [ 317.084957][T10597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.381378][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.369973][T10618] loop2: detected capacity change from 0 to 1024 [ 318.445412][T10618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.894593][T10639] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1618: bg 0: block 88: padding at end of block bitmap is not set [ 319.139064][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.662787][T10644] loop3: detected capacity change from 0 to 512 [ 319.702935][T10644] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 319.832030][T10644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.880833][T10644] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.008623][ T30] audit: type=1800 audit(1745312095.650:859): pid=10644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1622" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 320.200015][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.368030][T10655] syzkaller0: entered promiscuous mode [ 320.375949][T10655] syzkaller0: entered allmulticast mode [ 320.416635][T10664] pim6reg1: entered promiscuous mode [ 320.478068][T10664] pim6reg1: entered allmulticast mode [ 320.653291][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1627'. [ 320.713141][T10671] openvswitch: netlink: Flow key attr not present in new flow. [ 320.834918][T10675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1627'. [ 321.644508][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.658865][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.417356][T10704] loop4: detected capacity change from 0 to 1024 [ 322.470956][T10704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.498351][T10704] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1633: bg 0: block 88: padding at end of block bitmap is not set [ 322.565764][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.875433][T10738] loop5: detected capacity change from 0 to 512 [ 323.900355][T10738] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 324.138435][T10738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.138531][T10738] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.271295][ T30] audit: type=1800 audit(1745312099.920:860): pid=10738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1637" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 324.404664][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.572539][T10754] macvlan2: entered promiscuous mode [ 324.607123][T10754] bridge0: entered promiscuous mode [ 326.016197][T10776] loop4: detected capacity change from 0 to 1024 [ 326.213758][T10774] syzkaller0: entered promiscuous mode [ 326.261271][T10776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.279500][T10774] syzkaller0: entered allmulticast mode [ 326.291525][T10772] loop0: detected capacity change from 0 to 8192 [ 326.349202][T10776] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1646: bg 0: block 88: padding at end of block bitmap is not set [ 326.575712][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.770249][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1650'. [ 326.797427][T10802] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 326.816689][T10799] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1643'. [ 326.831434][T10802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.852056][T10799] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1643'. [ 326.852334][ T5840] kernel write not supported for file /uinput (pid: 5840 comm: kworker/0:2) [ 326.891011][T10799] netlink: 'syz.1.1643': attribute type 6 has an invalid length. [ 326.912079][T10799] netlink: 'syz.1.1643': attribute type 5 has an invalid length. [ 326.919870][T10799] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1643'. [ 327.105202][T10812] loop4: detected capacity change from 0 to 512 [ 327.125342][T10812] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 327.248090][T10812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.283347][T10812] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.343409][ T30] audit: type=1800 audit(1745312103.000:861): pid=10812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1653" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 327.441683][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.320302][T10852] loop4: detected capacity change from 0 to 8192 [ 330.910942][ T9] Process accounting resumed [ 331.019953][T10868] loop5: detected capacity change from 0 to 512 [ 331.032819][T10868] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 331.225027][T10868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.276222][T10868] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.393141][ T30] audit: type=1800 audit(1745312107.030:862): pid=10868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1668" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 331.406737][T10884] syzkaller0: entered promiscuous mode [ 331.450164][T10884] syzkaller0: entered allmulticast mode [ 331.582078][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.042330][T10903] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1676'. [ 333.053439][T10903] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1676'. [ 333.063742][T10903] netlink: 'syz.5.1676': attribute type 6 has an invalid length. [ 333.071956][T10903] netlink: 'syz.5.1676': attribute type 5 has an invalid length. [ 333.079697][T10903] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1676'. [ 334.055371][T10889] macvlan2: entered promiscuous mode [ 334.060969][T10889] bridge0: entered promiscuous mode [ 334.972679][T10917] loop3: detected capacity change from 0 to 8192 [ 335.057442][T10924] loop4: detected capacity change from 0 to 512 [ 335.106183][T10924] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 335.326793][T10924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.364897][T10924] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.650490][ T30] audit: type=1800 audit(1745312111.300:863): pid=10938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1688" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 335.849176][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.943022][T10949] random: crng reseeded on system resumption [ 335.952604][T10948] syz!: rxe_newlink: already configured on team_slave_0 [ 336.419688][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1692'. [ 336.434007][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1692'. [ 339.333286][T10997] loop3: detected capacity change from 0 to 512 [ 339.360240][T10997] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 339.418490][T10997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.447097][T10997] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.506514][T10996] loop2: detected capacity change from 0 to 8192 [ 339.550784][ T30] audit: type=1800 audit(1745312115.200:864): pid=10997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1708" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 339.758675][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.891242][T11025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1714'. [ 340.938172][T11025] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 340.986158][T11025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.163819][T11031] random: crng reseeded on system resumption [ 341.604800][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1717'. [ 341.614027][T11041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1717'. [ 342.325057][T11047] loop1: detected capacity change from 0 to 512 [ 342.336332][T11047] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 342.405707][T11047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.463441][T11047] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.624162][ T30] audit: type=1800 audit(1745312118.270:865): pid=11056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1721" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 342.633428][T11054] loop4: detected capacity change from 0 to 8192 [ 342.788878][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.101941][T11096] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 344.250995][ T30] audit: type=1326 audit(1745312119.910:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11092 comm="syz.4.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde09585127 code=0x7ffc0000 [ 344.357080][ T30] audit: type=1326 audit(1745312119.930:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11092 comm="syz.4.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde0952a359 code=0x7ffc0000 [ 344.384294][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 344.426874][T11099] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1736'. [ 344.507823][ T30] audit: type=1326 audit(1745312119.930:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11092 comm="syz.4.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0958e169 code=0x7ffc0000 [ 344.552434][ T30] audit: type=1326 audit(1745312119.930:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11092 comm="syz.4.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde09585127 code=0x7ffc0000 [ 344.645190][ T30] audit: type=1326 audit(1745312119.930:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11092 comm="syz.4.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde0952a359 code=0x7ffc0000 [ 344.697079][T11101] loop4: detected capacity change from 0 to 512 [ 344.705420][T11101] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 344.721339][ T30] audit: type=1326 audit(1745312119.930:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11092 comm="syz.4.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fde0958e169 code=0x7ffc0000 [ 344.772530][ T30] audit: type=1326 audit(1745312119.930:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11092 comm="syz.4.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde09585127 code=0x7ffc0000 [ 344.825819][T11101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.888173][T11101] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.950256][ T30] audit: type=1326 audit(1745312119.930:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11092 comm="syz.4.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fde0952a359 code=0x7ffc0000 [ 345.044224][ T30] audit: type=1326 audit(1745312119.930:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11092 comm="syz.4.1735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0958e169 code=0x7ffc0000 [ 345.095645][ T30] audit: type=1800 audit(1745312120.660:875): pid=11101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1737" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 345.127000][ T53] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 345.204650][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.302821][ T53] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 345.321048][ T53] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 345.343378][ T53] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 345.365343][ T53] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 345.399797][ T53] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 345.445238][ T53] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 345.455037][ T53] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 345.505255][ T53] usb 4-1: Product: syz [ 346.282786][ T53] usb 4-1: Manufacturer: syz [ 346.316449][ T53] cdc_wdm 4-1:1.0: skipping garbage [ 346.338233][ T53] cdc_wdm 4-1:1.0: skipping garbage [ 346.361661][ T53] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 346.367601][ T53] cdc_wdm 4-1:1.0: Unknown control protocol [ 346.651415][ T5895] usb 4-1: USB disconnect, device number 3 [ 347.175076][ T30] audit: type=1326 audit(1745312122.810:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11135 comm="syz.5.1747" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff001f8e169 code=0x0 [ 347.538501][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1750'. [ 347.547644][T11146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1750'. [ 347.630042][T11150] syzkaller1: entered promiscuous mode [ 347.667759][T11150] syzkaller1: entered allmulticast mode [ 349.821745][T11163] IPv6: NLM_F_REPLACE set, but no existing node found! [ 349.848647][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1758'. [ 349.862981][T11169] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 349.876267][T11169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.310862][T11180] macsec1: entered allmulticast mode [ 350.636801][T11192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1765'. [ 350.646153][T11192] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1765'. [ 350.952567][T11170] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 351.921524][T11208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1770'. [ 351.958126][T11208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 353.044801][T11215] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1770'. [ 353.166518][ T30] audit: type=1326 audit(1745312128.820:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0958e169 code=0x7fc00000 [ 353.229349][ T30] audit: type=1326 audit(1745312128.820:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde0958e169 code=0x7fc00000 [ 353.324906][ T30] audit: type=1326 audit(1745312128.820:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0958e169 code=0x7fc00000 [ 353.368504][T11226] syzkaller1: entered promiscuous mode [ 353.384191][T11226] syzkaller1: entered allmulticast mode [ 353.411119][ T30] audit: type=1326 audit(1745312128.820:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0958e169 code=0x7fc00000 [ 353.486335][ T30] audit: type=1326 audit(1745312128.820:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0958e169 code=0x7fc00000 [ 353.544345][ T30] audit: type=1326 audit(1745312128.820:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0958e169 code=0x7fc00000 [ 353.607701][ T30] audit: type=1326 audit(1745312128.820:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0958e169 code=0x7fc00000 [ 353.671040][ T30] audit: type=1326 audit(1745312128.820:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0958e169 code=0x7fc00000 [ 353.694364][ T30] audit: type=1326 audit(1745312128.820:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0958e169 code=0x7fc00000 [ 353.747469][ T30] audit: type=1326 audit(1745312128.820:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11207 comm="syz.4.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0958e169 code=0x7fc00000 [ 354.002938][T11240] random: crng reseeded on system resumption [ 354.632176][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1779'. [ 354.832697][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1779'. [ 356.520929][ T5848] Bluetooth: hci6: command 0x1003 tx timeout [ 356.520992][ T8390] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 356.550798][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 356.834683][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 356.876618][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.926259][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.957691][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 356.988891][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 357.000122][T11274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1789'. [ 357.003975][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 357.042354][ T9] usb 2-1: SerialNumber: syz [ 357.259730][T11284] syzkaller1: entered promiscuous mode [ 357.259761][T11284] syzkaller1: entered allmulticast mode [ 357.302137][ T9] cdc_acm 2-1:1.0: skipping garbage [ 357.560994][ T5840] usb 2-1: USB disconnect, device number 2 [ 357.579051][T11253] delete_channel: no stack [ 360.762096][T11321] 9pnet_virtio: no channels available for device syz [ 362.686764][T11330] syzkaller1: entered promiscuous mode [ 362.693531][T11330] syzkaller1: entered allmulticast mode [ 363.566588][T11346] pim6reg: entered allmulticast mode [ 363.641548][T11347] pim6reg: left allmulticast mode [ 363.777102][T11349] loop1: detected capacity change from 0 to 512 [ 363.847681][T11349] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 364.228439][T11349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.434293][T11349] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.411852][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 365.411875][ T30] audit: type=1800 audit(1745312141.060:917): pid=11349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1812" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 365.474209][T11365] netlink: 'syz.2.1815': attribute type 1 has an invalid length. [ 365.518947][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.812509][T11365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1815'. [ 365.893236][T11370] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 365.936978][T11370] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 365.946442][T11370] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 365.960849][T11370] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 365.978850][T11370] bond3: (slave geneve2): making interface the new active one [ 365.989412][T11370] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 366.033016][T11365] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.782292][T11379] loop1: detected capacity change from 0 to 8192 [ 367.854732][T11395] wireguard0: entered promiscuous mode [ 367.860471][T11395] wireguard0: entered allmulticast mode [ 368.138364][T11398] loop0: detected capacity change from 0 to 1024 [ 368.234558][T11398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.292213][T11398] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1823: bg 0: block 88: padding at end of block bitmap is not set [ 368.644178][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.516037][T11419] loop1: detected capacity change from 0 to 512 [ 369.614611][T11419] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 369.829204][T11419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.905889][T11419] ext4 filesystem being mounted at /311/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.950684][ T5895] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 369.978958][ T30] audit: type=1800 audit(1745312145.630:918): pid=11419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1829" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 370.072421][T11395] syz.4.1819 (11395) used greatest stack depth: 18728 bytes left [ 370.141568][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 370.195616][ T5895] usb 4-1: config 0 has no interfaces? [ 370.210927][ T5895] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 370.234176][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.387473][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.475177][ T5895] usb 4-1: config 0 descriptor?? [ 370.594445][T11437] warning: `syz.0.1834' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 371.133807][ T5892] usb 4-1: USB disconnect, device number 4 [ 371.312179][ T915] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 371.614169][T11448] loop0: detected capacity change from 0 to 8192 [ 371.631182][T11456] sp0: Synchronizing with TNC [ 371.638421][T11458] sp0: Found TNC [ 371.662826][ T30] audit: type=1804 audit(1745312147.320:919): pid=11458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1838" name="/newroot/296/file0" dev="tmpfs" ino=1579 res=1 errno=0 [ 371.697522][ T915] usb 3-1: config 0 has no interfaces? [ 371.720848][ T915] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 371.833007][ T915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.949037][ T915] usb 3-1: Product: syz [ 371.967786][ T915] usb 3-1: Manufacturer: syz [ 371.987502][ T915] usb 3-1: SerialNumber: syz [ 372.000575][ T915] usb 3-1: config 0 descriptor?? [ 372.254131][ T915] usb 3-1: USB disconnect, device number 3 [ 373.535776][ T30] audit: type=1800 audit(1745312149.180:920): pid=11443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1833" name="bus" dev="ramfs" ino=24403 res=0 errno=0 [ 374.478755][T11481] syzkaller1: entered promiscuous mode [ 374.520715][T11481] syzkaller1: entered allmulticast mode [ 374.849357][T11483] loop2: detected capacity change from 0 to 512 [ 374.872567][T11483] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 375.811506][T11493] random: crng reseeded on system resumption [ 375.839565][T11483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.904939][T11499] fuse: Bad value for 'fd' [ 375.975505][T11483] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.053716][ T30] audit: type=1800 audit(1745312151.710:921): pid=11483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1845" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 376.240424][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.671798][T11510] loop0: detected capacity change from 0 to 8192 [ 376.841009][ T5895] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 377.030399][T11525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1858'. [ 377.040496][T11525] openvswitch: netlink: Flow key attr not present in new flow. [ 377.068635][ T5895] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 377.102316][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1858'. [ 377.306069][ T5895] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 377.410927][ T30] audit: type=1326 audit(1745312153.040:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11523 comm="syz.0.1857" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe20398e169 code=0x0 [ 377.989061][ T5895] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 377.998288][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.012198][T11513] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 378.024472][ T5895] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.263447][ T5895] usb 6-1: USB disconnect, device number 2 [ 378.466577][T11527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1855'. [ 379.459641][ T30] audit: type=1804 audit(1745312155.100:923): pid=11555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1861" name="/newroot/300/file0" dev="tmpfs" ino=1587 res=1 errno=0 [ 379.925013][T11551] Falling back ldisc for ptm1. [ 380.363158][ T5848] Bluetooth: hci6: command 0x1003 tx timeout [ 380.369481][ T8390] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 380.511991][T11559] loop0: detected capacity change from 0 to 512 [ 380.535054][T11559] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 380.576336][T11559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.589402][T11559] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.655195][ T30] audit: type=1800 audit(1745312156.310:924): pid=11559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1863" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 380.755397][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.155010][T11573] 9pnet_fd: Insufficient options for proto=fd [ 381.217627][T11573] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1867'. [ 381.710765][ T30] audit: type=1326 audit(1745312157.350:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11580 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f1f8e169 code=0x7ffc0000 [ 382.040361][ T30] audit: type=1326 audit(1745312157.360:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11580 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f1f8e169 code=0x7ffc0000 [ 382.159483][ T30] audit: type=1326 audit(1745312157.360:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11580 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7f1f8e169 code=0x7ffc0000 [ 382.394437][ T30] audit: type=1326 audit(1745312157.360:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11580 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f1f8e169 code=0x7ffc0000 [ 382.420827][ T30] audit: type=1326 audit(1745312157.360:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11580 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f1f8e169 code=0x7ffc0000 [ 382.504771][ T30] audit: type=1326 audit(1745312157.360:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11580 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7f1f8e169 code=0x7ffc0000 [ 382.625777][ T30] audit: type=1326 audit(1745312157.370:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11580 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f1f8e169 code=0x7ffc0000 [ 382.625843][ T30] audit: type=1326 audit(1745312157.370:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11580 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f1f8e169 code=0x7ffc0000 [ 382.625900][ T30] audit: type=1326 audit(1745312157.370:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11580 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7f1f8e169 code=0x7ffc0000 [ 382.625953][ T30] audit: type=1326 audit(1745312157.370:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11580 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f1f8e169 code=0x7ffc0000 [ 382.626003][ T30] audit: type=1326 audit(1745312157.370:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11580 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f1f8e169 code=0x7ffc0000 [ 382.626054][ T30] audit: type=1326 audit(1745312157.370:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11580 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7ff7f1f8e169 code=0x7ffc0000 [ 382.626105][ T30] audit: type=1326 audit(1745312157.370:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11580 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f1f8e169 code=0x7ffc0000 [ 383.234362][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.234478][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.796123][ C1] vkms_vblank_simulate: vblank timer overrun [ 383.891518][T11604] IPVS: stopping backup sync thread 11603 ... [ 384.222015][T11610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1878'. [ 384.222047][T11610] openvswitch: netlink: Flow key attr not present in new flow. [ 384.269548][T11613] 9pnet_fd: Insufficient options for proto=fd [ 384.277898][T11615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1878'. [ 384.437933][T11618] sp0: Synchronizing with TNC [ 384.440144][T11618] sp0: Found TNC [ 384.478516][ T30] audit: type=1804 audit(1745312160.100:938): pid=11618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1876" name="/newroot/333/file0" dev="tmpfs" ino=1766 res=1 errno=0 [ 385.097401][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.412141][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.611130][T11625] syzkaller1: entered promiscuous mode [ 385.662350][T11625] syzkaller1: entered allmulticast mode [ 386.220745][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 386.500809][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 386.528993][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.586314][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.639030][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 386.670387][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.717929][ T9] usb 2-1: config 0 descriptor?? [ 387.441412][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1891'. [ 387.498702][T11656] openvswitch: netlink: Flow key attr not present in new flow. [ 387.669843][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1891'. [ 388.689152][ T915] kernel write not supported for file /dsp1 (pid: 915 comm: kworker/1:2) [ 388.854462][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 388.854484][ T30] audit: type=1326 audit(1745312164.510:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11678 comm="syz.5.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff001f8e169 code=0x7ffc0000 [ 388.894065][T11680] Bluetooth: MGMT ver 1.23 [ 388.948691][ T30] audit: type=1326 audit(1745312164.550:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11678 comm="syz.5.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff001f8e169 code=0x7ffc0000 [ 389.084659][ T30] audit: type=1326 audit(1745312164.550:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11678 comm="syz.5.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff001f8e169 code=0x7ffc0000 [ 389.207410][T11681] syzkaller1: entered promiscuous mode [ 389.213275][T11681] syzkaller1: entered allmulticast mode [ 389.227212][ T30] audit: type=1326 audit(1745312164.550:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11678 comm="syz.5.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff001f8e169 code=0x7ffc0000 [ 389.284200][ T30] audit: type=1326 audit(1745312164.550:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11678 comm="syz.5.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff001f8e169 code=0x7ffc0000 [ 389.326370][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 389.332714][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 389.394599][ T9] usb 2-1: USB disconnect, device number 3 [ 389.403880][ T30] audit: type=1326 audit(1745312164.550:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11678 comm="syz.5.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff001f8e169 code=0x7ffc0000 [ 389.498723][ T30] audit: type=1326 audit(1745312164.550:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11678 comm="syz.5.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff001f8e169 code=0x7ffc0000 [ 389.636966][ T30] audit: type=1326 audit(1745312164.550:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11678 comm="syz.5.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff001f8e169 code=0x7ffc0000 [ 389.756412][ T30] audit: type=1326 audit(1745312164.550:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11678 comm="syz.5.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff001f8e169 code=0x7ffc0000 [ 389.988052][ T30] audit: type=1326 audit(1745312164.550:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11678 comm="syz.5.1897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7ff001f8e169 code=0x7ffc0000 [ 390.883242][T11695] sp0: Synchronizing with TNC [ 390.888564][T11696] sp0: Found TNC [ 391.748055][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1908'. [ 391.758362][T11723] openvswitch: netlink: Flow key attr not present in new flow. [ 391.827240][T11725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1908'. [ 391.871087][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1905'. [ 392.057158][T11717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1905'. [ 392.475441][T11717] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.483874][T11717] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.492124][T11717] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.500393][T11717] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.657551][T11730] netlink: 'syz.4.1910': attribute type 1 has an invalid length. [ 392.988589][T11732] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 393.075166][T11732] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 393.166977][T11732] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 393.246601][T11732] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 393.268011][T11732] bond2: (slave geneve2): making interface the new active one [ 393.296097][T11732] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 394.576646][T11771] syzkaller0: entered promiscuous mode [ 394.608952][T11771] syzkaller0: entered allmulticast mode [ 394.790002][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1923'. [ 395.575967][T11779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1923'. [ 397.812936][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1928'. [ 397.920321][T11800] openvswitch: netlink: Flow key attr not present in new flow. [ 398.013452][T11803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1928'. [ 399.147841][T11809] netlink: 'syz.2.1930': attribute type 5 has an invalid length. [ 400.337132][T11815] pimreg: entered allmulticast mode [ 400.396948][T11815] pimreg: left allmulticast mode [ 400.640807][ T5892] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 400.835220][ T5892] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 400.861019][ T5892] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 400.889241][ T5892] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 400.935495][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.002151][T11821] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 401.042709][ T5892] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 401.255179][ T53] usb 5-1: USB disconnect, device number 3 [ 402.336248][T11845] delete_channel: no stack [ 402.481168][ T53] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 402.690982][ T53] usb 1-1: Using ep0 maxpacket: 16 [ 402.713051][ T53] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.794148][ T53] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.835904][ T53] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 402.917486][ T53] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 402.950868][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 402.959077][ T53] usb 1-1: SerialNumber: syz [ 403.022674][ T53] cdc_acm 1-1:1.0: skipping garbage [ 403.237798][T11854] delete_channel: no stack [ 403.242914][ T9] usb 1-1: USB disconnect, device number 2 [ 403.388868][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1949'. [ 403.401235][T11868] openvswitch: netlink: Flow key attr not present in new flow. [ 403.519990][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1949'. [ 403.799176][ T8390] Bluetooth: hci3: unexpected event for opcode 0x006d [ 404.271046][T11889] random: crng reseeded on system resumption [ 404.420756][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1955'. [ 404.434956][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1955'. [ 404.764695][T11878] ceph: No mds server is up or the cluster is laggy [ 405.468072][T11899] loop2: detected capacity change from 0 to 512 [ 405.578226][T11899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 405.600866][T11899] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.990235][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1961'. [ 406.056793][T11913] bridge0: port 3(vlan2) entered blocking state [ 406.064110][T11913] bridge0: port 3(vlan2) entered disabled state [ 406.072046][T11913] vlan2: entered allmulticast mode [ 406.077269][T11913] bridge0: entered allmulticast mode [ 406.910696][T11913] vlan2: left allmulticast mode [ 406.915629][T11913] bridge0: left allmulticast mode [ 407.502332][ T8390] Bluetooth: hci2: unexpected event for opcode 0x006d [ 407.607162][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 407.872861][T11924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1966'. [ 408.509373][ T53] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 408.641508][T11939] random: crng reseeded on system resumption [ 408.740750][ T53] usb 3-1: Using ep0 maxpacket: 16 [ 408.748270][ T53] usb 3-1: config 0 has no interfaces? [ 408.754226][ T53] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 408.806079][ T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.858443][ T53] usb 3-1: config 0 descriptor?? [ 408.871898][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'. [ 408.884177][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'. [ 409.486727][T11947] syz.5.1974: attempt to access beyond end of device [ 409.486727][T11947] nbd5: rw=0, sector=16, nr_sectors = 1 limit=0 [ 409.558745][T11947] qnx6: unable to read the first superblock [ 409.596622][T11947] syz.5.1974: attempt to access beyond end of device [ 409.596622][T11947] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 409.596708][T11947] qnx6: unable to read the first superblock [ 409.596717][T11947] qnx6: unable to read the first superblock [ 409.696798][ T9] usb 3-1: USB disconnect, device number 4 [ 410.071172][ T53] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 410.261757][ T53] usb 4-1: Using ep0 maxpacket: 8 [ 410.281714][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.303575][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.317816][T11971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1981'. [ 410.331386][ T53] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 410.351130][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.374386][ T53] usb 4-1: config 0 descriptor?? [ 410.377919][T11971] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.388568][T11971] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.397424][T11971] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.406209][T11971] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.411948][ T5892] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 410.477914][T11971] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.487166][T11971] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.496272][T11971] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.505274][T11971] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.620932][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.640823][ T5892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.674732][ T5892] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 410.729303][ T5892] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 410.769194][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.854792][ T5892] usb 6-1: config 0 descriptor?? [ 411.161589][ T53] usbhid 4-1:0.0: can't add hid device: -71 [ 411.180198][ T53] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 411.211836][ T53] usb 4-1: USB disconnect, device number 5 [ 411.308692][ T5892] usbhid 6-1:0.0: can't add hid device: -71 [ 411.347976][ T5892] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 411.388176][ T5892] usb 6-1: USB disconnect, device number 3 [ 411.938640][T11994] 9pnet_virtio: no channels available for device syz [ 411.957060][T11994] overlay: ./file0 is not a directory [ 412.665720][T11998] syz.0.1989: attempt to access beyond end of device [ 412.665720][T11998] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 412.750767][T11998] qnx6: unable to read the first superblock [ 413.036972][T11998] syz.0.1989: attempt to access beyond end of device [ 413.036972][T11998] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 413.098896][T11998] qnx6: unable to read the first superblock [ 413.126135][T12007] sp0: Synchronizing with TNC [ 413.133643][T12007] sp0: Found TNC [ 413.157859][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 413.157884][ T30] audit: type=1804 audit(1745312188.790:962): pid=12007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1993" name="/newroot/316/file0" dev="tmpfs" ino=1672 res=1 errno=0 [ 413.191940][T11998] qnx6: unable to read the first superblock [ 413.358101][T12007] ref_ctr_offset mismatch. inode: 0x688 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 415.664089][T12039] trusted_key: encrypted_key: keylen parameter is missing [ 415.780735][ T5920] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 416.000741][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 416.041733][ T5920] usb 2-1: config 0 has no interfaces? [ 416.054080][ T5920] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 416.110897][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.230221][ T5920] usb 2-1: config 0 descriptor?? [ 417.368074][T12066] netlink: 'syz.3.2011': attribute type 1 has an invalid length. [ 417.442503][ T9] usb 2-1: USB disconnect, device number 4 [ 417.777288][T12071] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 419.663500][T12110] loop4: detected capacity change from 0 to 512 [ 419.738674][T12112] netlink: 'syz.0.2026': attribute type 1 has an invalid length. [ 419.751335][T12110] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 419.811483][T12110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.832309][T12110] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.916066][ T30] audit: type=1800 audit(1745312195.570:963): pid=12110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2025" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 420.039276][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.380699][ T53] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 420.447468][T12131] capability: warning: `syz.2.2027' uses deprecated v2 capabilities in a way that may be insecure [ 420.581094][ T53] usb 4-1: Using ep0 maxpacket: 16 [ 420.607127][ T53] usb 4-1: config 0 has no interfaces? [ 420.613525][ T53] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 420.629027][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.669437][ T53] usb 4-1: config 0 descriptor?? [ 421.173698][ T24] usb 4-1: USB disconnect, device number 6 [ 425.492161][T12187] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 428.106947][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'. [ 429.078318][T12244] CUSE: unknown device info "ÿ" [ 429.083961][T12244] CUSE: zero length info key specified [ 432.668746][T12266] blktrace: Concurrent blktraces are not allowed on sg0 [ 435.780905][T12260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.012408][T12293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2074'. [ 436.750887][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 436.870726][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 437.003091][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.057180][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.130845][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 437.138442][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 437.146951][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 437.156994][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 437.167797][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 437.178082][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.225996][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 437.412353][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 437.421579][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.465477][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 437.520423][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.565950][ T24] usb 4-1: config 0 descriptor?? [ 437.660865][ T9] usb 6-1: usb_control_msg returned -32 [ 437.679139][ T9] usbtmc 6-1:16.0: can't read capabilities [ 437.889166][T12332] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 438.001194][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 438.007344][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 438.038385][ T24] usb 4-1: USB disconnect, device number 7 [ 438.154683][T12342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2091'. [ 438.398075][ T30] audit: type=1400 audit(1745312214.050:964): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=12349 comm="syz.2.2092" [ 439.398919][T12364] wireguard0: entered promiscuous mode [ 439.464910][T12364] wireguard0: entered allmulticast mode [ 439.649619][ T5920] usb 6-1: USB disconnect, device number 4 [ 440.803540][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2103'. [ 440.853371][T12387] netlink: 'syz.4.2103': attribute type 2 has an invalid length. [ 441.096679][T12394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2104'. [ 441.266766][T12399] random: crng reseeded on system resumption [ 441.674062][T12413] fuse: Bad value for 'fd' [ 442.291981][T12420] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2112'. [ 442.321403][T12420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2112'. [ 442.365702][T12420] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2112'. [ 442.458698][T12420] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2112'. [ 442.588491][T12425] sp0: Synchronizing with TNC [ 443.966017][T12444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2119'. [ 444.657856][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.664368][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.023744][T12477] overlay: ./file1 is not a directory [ 445.964601][T12481] wireguard0: entered promiscuous mode [ 446.032978][T12481] wireguard0: entered allmulticast mode [ 448.397631][T12507] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2137'. [ 449.493073][T12523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2142'. [ 450.145129][ T24] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 450.295975][ T24] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 450.487291][ T24] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 450.531677][ T24] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 450.544334][ T24] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 450.598316][ T24] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 450.628504][T12550] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2152'. [ 450.681036][ T24] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 450.805718][ T24] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 451.250685][ T24] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 451.507695][ T24] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 451.518275][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2155'. [ 451.526206][ T24] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 451.544713][ T24] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 451.635129][ T24] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 451.730982][ T24] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 451.793971][ T24] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 451.866640][T12565] gtp0: entered allmulticast mode [ 451.883468][ T24] hid-generic FFF9:0000:0203.0004: unknown main item tag 0x0 [ 451.926039][ T24] hid-generic FFF9:0000:0203.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 452.292048][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2162'. [ 452.326599][T12574] openvswitch: netlink: Flow key attr not present in new flow. [ 452.431459][T12577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2162'. [ 453.105200][T12585] IPVS: stopping backup sync thread 12586 ... [ 453.111816][T12586] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 453.616188][T12590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2166'. [ 454.216364][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2170'. [ 454.280803][ T5848] Bluetooth: hci6: command 0x1003 tx timeout [ 454.287203][ T8390] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 454.718667][T12603] 9pnet: p9_errstr2errno: server reported unknown error [ 455.088782][T12615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2177'. [ 455.088806][T12615] openvswitch: netlink: Flow key attr not present in new flow. [ 455.155749][T12619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2177'. [ 455.322423][T12623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2179'. [ 455.841785][T12632] bond0: (slave dummy0): Releasing backup interface [ 456.618249][T12632] bridge_slave_0: left allmulticast mode [ 456.618284][T12632] bridge_slave_0: left promiscuous mode [ 456.618492][T12632] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.668054][T12632] bridge_slave_1: left allmulticast mode [ 456.668083][T12632] bridge_slave_1: left promiscuous mode [ 456.668255][T12632] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.694433][T12632] bond0: (slave bond_slave_0): Releasing backup interface [ 456.697757][T12632] bond0: (slave bond_slave_1): Releasing backup interface [ 456.720242][T12632] team0: Port device team_slave_0 removed [ 456.777113][T12632] team0: Port device team_slave_1 removed [ 456.778139][T12632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.778189][T12632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.817549][T12632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.817602][T12632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.077802][T12632] team0: Port device geneve0 removed [ 457.097813][T12648] trusted_key: syz.3.2185 sent an empty control message without MSG_MORE. [ 457.117850][T12632] bond2: (slave geneve2): Releasing active interface [ 457.131327][T12632] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 457.131378][T12632] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 457.131414][T12632] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 457.131449][T12632] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 457.193490][T12636] team0: Mode changed to "activebackup" [ 457.194395][T12638] tipc: Enabled bearer , priority 0 [ 457.235168][ T1135] tipc: Resetting bearer [ 457.801182][ T5848] Bluetooth: hci6: command 0x1003 tx timeout [ 457.801284][ T8390] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 458.094776][T12669] serio: Serial port pts0 [ 459.399594][ T8390] Bluetooth: hci3: unexpected event for opcode 0x200a [ 460.563391][T12661] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.609233][T12665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2192'. [ 460.783070][T12661] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.376353][T12661] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.023066][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2204'. [ 462.038933][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2204'. [ 462.090193][T12661] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.824081][T12661] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.894191][T12661] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.424885][T12661] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.528993][T12661] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.747403][T12742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2213'. [ 463.909380][T12746] syzkaller1: entered promiscuous mode [ 463.909410][T12746] syzkaller1: entered allmulticast mode [ 464.072316][T12749] netlink: 'syz.2.2216': attribute type 1 has an invalid length. [ 467.060311][T12785] serio: Serial port ptm0 [ 467.348612][T12792] syzkaller1: entered promiscuous mode [ 467.360855][T12792] syzkaller1: entered allmulticast mode [ 467.371981][T12794] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2228'. [ 467.419412][T12762] trusted_key: encrypted_key: keylen parameter is missing [ 467.573418][T12800] netlink: 'syz.1.2233': attribute type 1 has an invalid length. [ 469.746242][T12840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2240'. [ 469.850993][T12841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2245'. [ 470.479105][T12841] team0: Port device team_slave_1 removed [ 470.535626][T12847] syzkaller1: entered promiscuous mode [ 470.582613][T12847] syzkaller1: entered allmulticast mode [ 471.535236][T12860] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2247'. [ 471.544687][T12860] 0ªX¹¦À: renamed from caif0 [ 471.595395][T12860] 0ªX¹¦À: entered allmulticast mode [ 471.601027][T12860] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 471.640301][T12859] trusted_key: encrypted_key: keylen parameter is missing [ 474.431503][T12895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2260'. [ 474.440571][T12895] openvswitch: netlink: Flow key attr not present in new flow. [ 474.575550][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2260'. [ 474.707540][T12904] sp0: Synchronizing with TNC [ 475.582055][T12917] blktrace: Concurrent blktraces are not allowed on sg0 [ 475.641502][T12912] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2263'. [ 475.921172][T12929] tmpfs: Bad value for 'nr_inodes' [ 476.882474][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 476.923286][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 476.963850][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 477.003655][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 477.220706][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 477.228164][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 477.241261][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 477.248679][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 477.270845][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 477.289576][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 477.310726][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 477.328071][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 477.341455][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 477.360777][ T53] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 477.376087][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 477.382160][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2277'. [ 477.567333][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 477.574956][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 477.582975][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 477.590417][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 477.600843][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 477.608353][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 477.615810][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 477.624598][T12953] openvswitch: netlink: Flow key attr not present in new flow. [ 477.632436][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 477.646968][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 477.736415][ T53] usb 1-1: config 0 has no interfaces? [ 478.480020][ T53] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 478.494226][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 478.510439][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.518535][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 478.528256][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 478.538989][ T53] usb 1-1: config 0 descriptor?? [ 478.547063][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 478.554631][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 478.605880][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 478.613534][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2277'. [ 478.623168][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 478.630569][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 478.814829][ T915] hid-generic 0080:0004:0000.0005: unknown main item tag 0x0 [ 478.826856][ T915] hid-generic 0080:0004:0000.0005: hidraw0: HID vffffff.ff Device [syz1] on syz0 [ 479.807351][ T5890] usb 1-1: USB disconnect, device number 3 [ 479.982867][T12974] pimreg: entered allmulticast mode [ 480.008983][T12976] pimreg: left allmulticast mode [ 480.071876][T12977] blktrace: Concurrent blktraces are not allowed on sg0 [ 480.149660][T12981] tmpfs: Bad value for 'nr_inodes' [ 480.305921][T12985] block device autoloading is deprecated and will be removed. [ 482.010046][T12995] trusted_key: encrypted_key: keylen parameter is missing [ 482.031377][T13009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2291'. [ 482.040505][T13009] openvswitch: netlink: Flow key attr not present in new flow. [ 482.170846][ T8390] Bluetooth: hci1: unexpected event for opcode 0x200a [ 482.207972][T13015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2291'. [ 483.569478][T13021] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2289'. [ 484.852067][T13035] blktrace: Concurrent blktraces are not allowed on sg0 [ 486.803381][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2309'. [ 486.852974][T13067] openvswitch: netlink: Flow key attr not present in new flow. [ 486.865546][T13069] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2310'. [ 487.068281][T13075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2309'. [ 488.129870][T13088] loop4: detected capacity change from 0 to 128 [ 488.155489][T13088] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 488.214715][T13088] EXT4-fs: error: could not find journal device path [ 488.236919][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 488.289156][ T5848] Bluetooth: hci1: unexpected event for opcode 0x200a [ 489.217847][T13109] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2324'. [ 489.279906][T13114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2326'. [ 489.370215][T13114] openvswitch: netlink: Flow key attr not present in new flow. [ 489.474202][T13114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2326'. [ 489.509230][T13118] 9pnet_fd: Insufficient options for proto=fd [ 489.999384][T13129] loop4: detected capacity change from 0 to 128 [ 490.037336][T13129] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 490.115742][T13129] EXT4-fs: error: could not find journal device path [ 490.306575][ T5848] Bluetooth: hci6: command 0x1003 tx timeout [ 490.310345][ T8390] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 491.647655][T13137] wireguard0: entered promiscuous mode [ 491.667268][T13137] wireguard0: entered allmulticast mode [ 492.491851][T13153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2340'. [ 492.731676][T13158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2343'. [ 492.756288][T13158] openvswitch: netlink: Flow key attr not present in new flow. [ 492.772047][T13162] 9pnet_fd: Insufficient options for proto=fd [ 492.869257][T13166] loop5: detected capacity change from 0 to 512 [ 492.932409][T13168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2343'. [ 493.003063][T13166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 493.066598][T13166] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.115184][T13164] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2345'. [ 493.282282][T13180] loop1: detected capacity change from 0 to 128 [ 493.308038][T13180] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 493.358095][T13180] EXT4-fs: error: could not find journal device path [ 493.392872][ T8390] Bluetooth: hci2: unexpected event for opcode 0x200a [ 493.778370][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 494.252034][T13194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2354'. [ 495.354418][T13207] bridge_slave_0: left allmulticast mode [ 495.415788][T13207] bridge_slave_0: left promiscuous mode [ 495.471394][T13207] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.573867][T13207] bridge_slave_1: left allmulticast mode [ 495.579592][T13207] bridge_slave_1: left promiscuous mode [ 495.655816][T13216] loop6: detected capacity change from 0 to 524287999 [ 495.667207][T13216] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.676596][T13216] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.686101][T13216] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 495.695583][T13216] buffer_io_error: 4 callbacks suppressed [ 495.695601][T13216] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 495.712626][T13216] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.722212][T13216] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 495.731734][T13216] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 495.741184][T13207] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.748416][T13216] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 495.975664][T13207] bond0: (slave bond_slave_0): Releasing backup interface [ 496.860031][T13207] bond0: (slave bond_slave_1): Releasing backup interface [ 496.943194][T13207] team0: Port device team_slave_0 removed [ 497.021351][T13207] team0: Port device team_slave_1 removed [ 497.052278][T13207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.077567][T13207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.103626][T13221] loop5: detected capacity change from 0 to 128 [ 497.137875][T13207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.191272][T13207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.198247][T13221] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 497.387820][T13221] EXT4-fs: error: could not find journal device path [ 497.398890][ T5920] syz!: Port: 1 Link DOWN [ 497.825668][T13232] loop5: detected capacity change from 0 to 512 [ 497.967016][T13232] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 498.081034][T13232] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.117044][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2367'. [ 498.137222][T13232] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2365'. [ 498.208673][T13242] openvswitch: netlink: Flow key attr not present in new flow. [ 498.419973][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2367'. [ 498.441348][T13249] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2368'. [ 499.158385][ T5837] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 499.452605][T13259] wireguard0: entered promiscuous mode [ 499.481467][T13259] wireguard0: entered allmulticast mode [ 499.713089][T13269] tipc: Resetting bearer [ 500.268547][T13271] tipc: Resetting bearer [ 500.373583][ T8390] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 500.405557][T13271] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 500.485235][T13273] pimreg: entered allmulticast mode [ 500.504280][T13274] pimreg: left allmulticast mode [ 500.689013][T13277] loop5: detected capacity change from 0 to 128 [ 500.717075][T13277] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 500.758516][T13277] EXT4-fs: error: could not find journal device path [ 500.997354][ T8390] Bluetooth: hci1: unexpected event for opcode 0x200a [ 501.334335][T13288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2381'. [ 501.589308][T13291] 9pnet_virtio: no channels available for device syz [ 501.870069][T13294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2383'. [ 501.953589][T13294] openvswitch: netlink: Flow key attr not present in new flow. [ 502.050963][T13296] netlink: set zone limit has 8 unknown bytes [ 502.173826][T13300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2383'. [ 503.631718][T13323] block nbd2: NBD_DISCONNECT [ 503.770267][T13319] block nbd2: Disconnected due to user request. [ 503.776961][T13319] block nbd2: shutting down sockets [ 504.137680][T13337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2394'. [ 504.451303][ T8390] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 504.461513][ T8390] Bluetooth: hci4: Injecting HCI hardware error event [ 504.470116][ T5848] Bluetooth: hci4: hardware error 0x00 [ 505.968688][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.975134][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.801849][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2403'. [ 506.807586][ T8390] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 506.923307][T13364] openvswitch: netlink: Flow key attr not present in new flow. [ 507.001428][T13375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2403'. [ 507.400973][ T5848] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 509.914642][ T5848] Bluetooth: hci2: unexpected event for opcode 0x200a [ 510.841363][ T5848] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 510.851177][ T5848] Bluetooth: hci3: Injecting HCI hardware error event [ 510.860961][ T8390] Bluetooth: hci3: hardware error 0x00 [ 510.966983][T13418] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 510.993988][T13418] CIFS mount error: No usable UNC path provided in device string! [ 510.993988][T13418] [ 511.005378][T13418] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 511.577155][T13423] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2415'. [ 511.613632][T13428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2421'. [ 511.628688][T13428] openvswitch: netlink: Flow key attr not present in new flow. [ 511.683227][T13423] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2415'. [ 511.702489][T13423] netlink: 'syz.1.2415': attribute type 6 has an invalid length. [ 511.711349][T13428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2421'. [ 511.888802][T13423] netlink: 'syz.1.2415': attribute type 5 has an invalid length. [ 511.909408][T13423] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2415'. [ 512.921151][ T8390] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 514.513490][ T8390] Bluetooth: hci0: unexpected event for opcode 0x200a [ 515.741345][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2436'. [ 515.806942][T13477] openvswitch: netlink: Flow key attr not present in new flow. [ 515.932943][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2436'. [ 516.326376][T13484] syzkaller0: entered promiscuous mode [ 516.369114][T13484] syzkaller0: entered allmulticast mode [ 516.722149][T13492] input: syz0 as /devices/virtual/input/input7 [ 520.552470][T13495] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2441'. [ 520.581022][T13495] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2441'. [ 520.608661][T13495] netlink: 'syz.0.2441': attribute type 6 has an invalid length. [ 520.617127][T13495] netlink: 'syz.0.2441': attribute type 5 has an invalid length. [ 520.629168][T13495] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2441'. [ 522.069162][T13504] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2444'. [ 522.211408][T13504] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2444'. [ 522.752544][T13537] input: syz0 as /devices/virtual/input/input8 [ 523.740208][T13546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2455'. [ 523.759419][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2456'. [ 523.781624][T13546] openvswitch: netlink: Flow key attr not present in new flow. [ 523.877044][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2455'. [ 524.560802][ T5890] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 524.744079][ T5890] usb 1-1: device descriptor read/64, error -71 [ 524.814169][T13571] syz.3.2464: attempt to access beyond end of device [ 524.814169][T13571] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 524.817464][T13569] syzkaller0: entered promiscuous mode [ 524.895909][T13569] syzkaller0: entered allmulticast mode [ 525.097091][T13571] qnx6: unable to read the first superblock [ 525.114148][T13571] syz.3.2464: attempt to access beyond end of device [ 525.114148][T13571] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 525.755289][ T5890] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 525.785934][T13571] qnx6: unable to read the first superblock [ 525.795765][T13571] qnx6: unable to read the first superblock [ 525.950749][ T5890] usb 1-1: device descriptor read/64, error -71 [ 526.061311][ T5890] usb usb1-port1: attempt power cycle [ 527.446736][ T5890] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 527.723620][ T5890] usb 1-1: device not accepting address 6, error -71 [ 529.473247][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2473'. [ 530.383476][T13622] fuse: Bad value for 'group_id' [ 530.388647][T13622] fuse: Bad value for 'group_id' [ 530.474371][T13624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2476'. [ 530.493313][T13624] openvswitch: netlink: Flow key attr not present in new flow. [ 530.557215][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2476'. [ 531.479030][T13632] syz.2.2479: attempt to access beyond end of device [ 531.479030][T13632] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 531.617198][T13632] qnx6: unable to read the first superblock [ 531.663848][T13632] syz.2.2479: attempt to access beyond end of device [ 531.663848][T13632] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 531.763026][T13632] qnx6: unable to read the first superblock [ 532.085914][T13632] qnx6: unable to read the first superblock [ 532.470376][T13654] pimreg: entered allmulticast mode [ 532.533877][T13654] pimreg: left allmulticast mode [ 533.772731][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2490'. [ 534.079017][T13678] syzkaller0: entered promiscuous mode [ 534.092745][T13678] syzkaller0: entered allmulticast mode [ 534.113144][T13682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2492'. [ 534.338559][T13682] openvswitch: netlink: Flow key attr not present in new flow. [ 535.188211][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2492'. [ 536.811562][ T8390] Bluetooth: hci0: unexpected event for opcode 0x2011 [ 536.908176][T13705] fuse: Bad value for 'fd' [ 537.990767][ T5890] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 538.151593][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 538.158733][ T5890] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 538.201126][ T5890] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 538.219147][ T5890] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 538.229618][ T5890] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 538.248052][ T5890] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.268595][ T5890] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 538.278156][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.379954][T13709] syz.0.2500: attempt to access beyond end of device [ 538.379954][T13709] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 538.397793][T13709] qnx6: unable to read the first superblock [ 538.407510][T13709] syz.0.2500: attempt to access beyond end of device [ 538.407510][T13709] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 538.425573][T13709] qnx6: unable to read the first superblock [ 538.434348][T13709] qnx6: unable to read the first superblock [ 538.501207][ T5890] usb 3-1: usb_control_msg returned -32 [ 538.506960][ T5890] usbtmc 3-1:16.0: can't read capabilities [ 540.852593][ T8390] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 540.864478][ T8390] Bluetooth: hci0: Injecting HCI hardware error event [ 540.875908][ T8390] Bluetooth: hci0: hardware error 0x00 [ 541.031537][ T5890] usb 3-1: USB disconnect, device number 5 [ 541.730726][ T5890] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 541.922495][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.151061][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.850240][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 542.863472][ T5890] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 542.872584][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.899626][ T5890] usb 2-1: config 0 descriptor?? [ 542.968017][ T8390] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 543.140734][ T30] audit: type=1800 audit(1745312318.790:965): pid=13736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2507" name="/" dev="fuse" ino=0 res=0 errno=0 [ 543.387967][ T5890] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 543.399078][T13746] pimreg: entered allmulticast mode [ 543.422329][T13747] pimreg: left allmulticast mode [ 543.430212][ T5890] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 543.491012][ T5890] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 543.669114][ T5890] usb 2-1: USB disconnect, device number 5 [ 545.593104][T13777] input: syz0 as /devices/virtual/input/input11 [ 546.429264][T13774] syzkaller0: entered promiscuous mode [ 546.434881][T13774] syzkaller0: entered allmulticast mode [ 547.001351][T13723] Bluetooth: hci6: command 0x1003 tx timeout [ 547.009350][ T8390] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 547.380189][T13795] 9pnet_virtio: no channels available for device syz [ 548.310177][ T8390] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 548.686764][T13800] Bluetooth: MGMT ver 1.23 [ 548.779386][T13800] block device autoloading is deprecated and will be removed. [ 549.605618][T13803] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 549.615616][T13806] loop6: detected capacity change from 0 to 524287999 [ 549.628798][T13806] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 549.638110][T13806] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 549.647655][T13806] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 549.657197][T13806] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 549.669608][T13806] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 549.678954][T13806] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 549.688283][T13806] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 549.697684][T13806] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 551.238920][T13817] loop6: detected capacity change from 0 to 524287999 [ 551.247272][T13817] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 551.256598][T13817] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 551.265898][T13817] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 551.275338][T13817] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 551.284849][T13817] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 551.294237][T13817] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 552.361002][ T8390] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 552.371318][ T8390] Bluetooth: hci2: Injecting HCI hardware error event [ 552.380136][ T8390] Bluetooth: hci2: hardware error 0x00 [ 554.603171][ T8390] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 555.149153][T13849] loop2: detected capacity change from 0 to 512 [ 555.196245][T13849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 555.221506][T13849] ext4 filesystem being mounted at /419/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.235072][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2540'. [ 555.620374][T13829] pimreg: entered allmulticast mode [ 555.626231][T13830] pimreg: left allmulticast mode [ 555.654704][T13842] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2537'. [ 555.667592][T13842] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2537'. [ 555.983353][ T915] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 556.192722][ T915] usb 4-1: Using ep0 maxpacket: 16 [ 556.231506][ T915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.253809][T13865] loop6: detected capacity change from 0 to 524287999 [ 556.261867][T13865] blk_print_req_error: 2 callbacks suppressed [ 556.261884][T13865] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 556.277231][T13865] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 556.286962][T13865] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 556.296438][T13865] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 556.306465][T13865] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 556.318121][T13865] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 556.327532][T13865] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 556.337303][T13865] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 556.540130][ T915] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.560691][ T915] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 556.600714][ T915] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 556.613758][ T915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 556.644158][ T915] usb 4-1: SerialNumber: syz [ 557.311792][ T915] cdc_acm 4-1:1.0: skipping garbage [ 557.320017][T13853] delete_channel: no stack [ 557.578215][ T915] usb 4-1: USB disconnect, device number 8 [ 557.683091][T13874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2547'. [ 558.462841][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 558.626501][ T8390] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 561.064605][T13895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2553'. [ 561.096325][T13895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2553'. [ 561.263536][T13901] pimreg: entered allmulticast mode [ 561.282275][T13901] pimreg: left allmulticast mode [ 561.768882][ T8390] Bluetooth: hci5: unexpected event for opcode 0x200a [ 562.682499][T13723] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 562.692672][T13723] Bluetooth: hci1: Injecting HCI hardware error event [ 562.703369][T13723] Bluetooth: hci1: hardware error 0x00 [ 563.278176][T13945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2569'. [ 563.300745][T13945] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2569'. [ 563.637695][T13959] fuse: Unknown parameter 'grou00000000000000000000' [ 563.960833][T13938] Bluetooth: hci5: command 0x0406 tx timeout [ 564.280357][T13970] sp0: Synchronizing with TNC [ 565.080910][T13723] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 565.130999][T13981] syz.0.2581: attempt to access beyond end of device [ 565.130999][T13981] nbd0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 565.144602][T13981] qnx6: unable to read the first superblock [ 565.151046][T13981] syz.0.2581: attempt to access beyond end of device [ 565.151046][T13981] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 565.166822][T13981] qnx6: unable to read the first superblock [ 565.173436][T13981] qnx6: unable to read the first superblock [ 565.642551][T14003] fuse: Unknown parameter 'grou00000000000000000000' [ 565.883773][T14007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2589'. [ 565.908876][T14007] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2589'. [ 567.236342][T14027] syz.5.2596: attempt to access beyond end of device [ 567.236342][T14027] nbd5: rw=0, sector=16, nr_sectors = 1 limit=0 [ 567.253316][T14027] qnx6: unable to read the first superblock [ 567.259557][T14027] syz.5.2596: attempt to access beyond end of device [ 567.259557][T14027] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 567.291589][T14027] qnx6: unable to read the first superblock [ 567.298154][T14027] qnx6: unable to read the first superblock [ 567.407717][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.414765][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.237439][T14041] Falling back ldisc for ptm0. [ 569.346195][T13993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2585'. [ 569.356392][T13993] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2585'. [ 569.379597][T14011] pimreg: entered allmulticast mode [ 569.409106][T14014] pimreg: left allmulticast mode [ 569.489523][T14049] fuse: Unknown parameter 'grou00000000000000000000' [ 569.573750][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2604'. [ 569.600903][T14051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2604'. [ 569.646679][T14055] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2606'. [ 570.419364][T14069] syz.1.2609: attempt to access beyond end of device [ 570.419364][T14069] nbd1: rw=0, sector=16, nr_sectors = 1 limit=0 [ 570.512325][T14069] qnx6: unable to read the first superblock [ 570.614071][T14069] syz.1.2609: attempt to access beyond end of device [ 570.614071][T14069] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 570.646858][T14069] qnx6: unable to read the first superblock [ 570.861430][T14074] lo speed is unknown, defaulting to 1000 [ 570.867971][T14074] lo speed is unknown, defaulting to 1000 [ 570.881002][T14069] qnx6: unable to read the first superblock [ 570.935380][T14074] lo speed is unknown, defaulting to 1000 [ 571.019546][T14074] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 571.311115][T14084] sp0: Synchronizing with TNC [ 571.315874][T14074] lo speed is unknown, defaulting to 1000 [ 571.400341][T14074] lo speed is unknown, defaulting to 1000 [ 572.280182][T14074] lo speed is unknown, defaulting to 1000 [ 572.290292][T14074] lo speed is unknown, defaulting to 1000 [ 572.298335][T14074] lo speed is unknown, defaulting to 1000 [ 572.306058][T14074] lo speed is unknown, defaulting to 1000 [ 573.268781][T14102] sp0: Synchronizing with TNC [ 573.321381][T14107] fuse: Unknown parameter 'group_i00000000000000000000' [ 573.452780][T14113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2621'. [ 573.740945][T14113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2621'. [ 575.055903][T14123] netlink: 'syz.0.2625': attribute type 10 has an invalid length. [ 575.081048][T14123] openvswitch: netlink: Flow actions attr not present in new flow. [ 575.110768][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 575.331376][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2627'. [ 575.350255][T14130] netlink: 'syz.3.2627': attribute type 5 has an invalid length. [ 575.359114][T14130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2627'. [ 575.370024][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 575.384653][ T9] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 575.395668][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 575.405061][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.423154][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 575.431495][ T9] usb 6-1: invalid MIDI out EP 0 [ 575.510562][ T9] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 575.685713][ T9] usb 6-1: USB disconnect, device number 5 [ 576.165246][T14138] siw: device registration error -23 [ 577.319668][T14130] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 577.334098][T14130] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 577.345030][T14130] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 577.356829][T14130] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 577.367589][T14130] geneve2: entered promiscuous mode [ 577.391105][T14130] geneve2: entered allmulticast mode [ 577.421328][T14105] [U] è [ 577.515652][T14141] Falling back ldisc for ptm0. [ 577.635382][T14146] fuse: Unknown parameter 'group_i00000000000000000000' [ 577.974814][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2635'. [ 578.020344][T14156] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2635'. [ 578.159062][T14161] netlink: 'syz.4.2636': attribute type 1 has an invalid length. [ 578.182368][T14161] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2636'. [ 579.061091][T14174] kAFS: No cell specified [ 581.476062][T14203] siw: device registration error -23 [ 581.551285][T14205] fuse: Unknown parameter 'group_i00000000000000000000' [ 581.571756][T14204] sp0: Synchronizing with TNC [ 582.148701][T14211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2651'. [ 582.157710][T14211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2651'. [ 582.409360][T14219] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2650'. [ 584.229041][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2662'. [ 584.397008][T14246] openvswitch: netlink: Flow key attr not present in new flow. [ 585.260394][T14253] fuse: Unknown parameter 'group_id00000000000000000000' [ 585.391477][T14246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2662'. [ 585.521963][T14260] siw: device registration error -23 [ 585.551575][T14238] loop3: detected capacity change from 0 to 32768 [ 586.125256][T14238] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 586.125256][T14238] allowing incompatible features above 0.0: (unknown version) [ 586.337245][T14238] bcachefs (loop3): initializing new filesystem [ 586.810129][T14283] 9pnet_fd: Insufficient options for proto=fd [ 587.249179][T14238] bcachefs (loop3): going read-write [ 587.284224][T14280] ================================================================== [ 587.292306][T14280] BUG: KASAN: slab-use-after-free in rose_link_device_down+0x7a/0xb0 [ 587.300397][T14280] Read of size 8 at addr ffff88805cab3800 by task syz.4.2671/14280 [ 587.308299][T14280] [ 587.310627][T14280] CPU: 1 UID: 0 PID: 14280 Comm: syz.4.2671 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 587.310656][T14280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 587.310679][T14280] Call Trace: [ 587.310691][T14280] [ 587.310702][T14280] dump_stack_lvl+0x241/0x360 [ 587.310745][T14280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.310776][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 587.310799][T14280] ? rcu_is_watching+0x15/0xb0 [ 587.310817][T14280] ? __virt_addr_valid+0x183/0x530 [ 587.310842][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 587.310864][T14280] ? lock_release+0x4e/0x3e0 [ 587.310895][T14280] ? __virt_addr_valid+0x183/0x530 [ 587.310919][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 587.310944][T14280] print_report+0x16e/0x5b0 [ 587.310963][T14280] ? __virt_addr_valid+0x183/0x530 [ 587.310987][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 587.311009][T14280] ? __virt_addr_valid+0x45f/0x530 [ 587.311034][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 587.311056][T14280] ? __phys_addr+0xba/0x170 [ 587.311081][T14280] ? rose_link_device_down+0x7a/0xb0 [ 587.311109][T14280] kasan_report+0x143/0x180 [ 587.311128][T14280] ? rose_link_device_down+0x7a/0xb0 [ 587.311161][T14280] rose_link_device_down+0x7a/0xb0 [ 587.311190][T14280] rose_device_event+0x5fe/0x6a0 [ 587.311217][T14280] ? __pfx_rose_device_event+0x10/0x10 [ 587.311241][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 587.311263][T14280] ? __local_bh_enable_ip+0x168/0x200 [ 587.311295][T14280] ? nr_device_event+0x134/0x150 [ 587.311320][T14280] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 587.311351][T14280] ? do_raw_spin_unlock+0x13c/0x8b0 [ 587.311381][T14280] notifier_call_chain+0x1a7/0x3f0 [ 587.311404][T14280] dev_close_many+0x33e/0x4c0 [ 587.311432][T14280] ? __pfx_dev_close_many+0x10/0x10 [ 587.311458][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 587.311480][T14280] ? bond_netdev_event+0x168/0xfb0 [ 587.311502][T14280] netif_close+0x1c2/0x2d0 [ 587.311526][T14280] ? __pfx_netif_close+0x10/0x10 [ 587.311548][T14280] ? tun_device_event+0x7c/0x1090 [ 587.311573][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 587.311594][T14280] ? __asan_memset+0x23/0x50 [ 587.311621][T14280] dev_close+0x137/0x280 [ 587.311648][T14280] bpq_device_event+0x36a/0x620 [ 587.311684][T14280] notifier_call_chain+0x1a7/0x3f0 [ 587.311705][T14280] dev_close_many+0x33e/0x4c0 [ 587.311729][T14280] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 587.311752][T14280] ? __pfx_dev_close_many+0x10/0x10 [ 587.311773][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 587.311794][T14280] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 587.311819][T14280] netif_close+0x1c2/0x2d0 [ 587.311842][T14280] ? __pfx_netif_close+0x10/0x10 [ 587.311866][T14280] ? lockdep_hardirqs_on+0x9d/0x150 [ 587.311887][T14280] dev_close+0x137/0x280 [ 587.311913][T14280] bond_setup_by_slave+0x64/0x420 [ 587.311939][T14280] bond_enslave+0x7fb/0x38d0 [ 587.311963][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 587.311985][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 587.312007][T14280] ? __pfx_stack_trace_save+0x10/0x10 [ 587.312029][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 587.312050][T14280] ? stack_depot_save_flags+0x44/0x940 [ 587.312079][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 587.312099][T14280] ? aa_get_newest_label+0x101/0x6f0 [ 587.312124][T14280] ? __pfx_bond_enslave+0x10/0x10 [ 587.312152][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 587.312173][T14280] ? apparmor_capable+0x13b/0x1b0 [ 587.312190][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 587.312210][T14280] ? full_name_hash+0x93/0xe0 [ 587.312233][T14280] bond_do_ioctl+0x7c9/0xc00 [ 587.312261][T14280] ? __pfx_bond_do_ioctl+0x10/0x10 [ 587.312287][T14280] ? __mutex_lock+0x380/0x10c0 [ 587.312310][T14280] ? __lock_acquire+0xad5/0xd80 [ 587.312338][T14280] ? __pfx___mutex_lock+0x10/0x10 [ 587.312356][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 587.312376][T14280] ? full_name_hash+0x93/0xe0 [ 587.312398][T14280] dev_ifsioc+0x97c/0x1010 [ 587.312425][T14280] dev_ioctl+0x80f/0x1260 [ 587.312449][T14280] sock_do_ioctl+0x22f/0x400 [ 587.312472][T14280] ? __pfx_sock_do_ioctl+0x10/0x10 [ 587.312494][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 587.312515][T14280] ? __lock_acquire+0xad5/0xd80 [ 587.312546][T14280] sock_ioctl+0x644/0x900 [ 587.312566][T14280] ? __pfx_sock_ioctl+0x10/0x10 [ 587.312584][T14280] ? __fget_files+0x2a/0x420 [ 587.312601][T14280] ? __fget_files+0x2a/0x420 [ 587.312618][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 587.312639][T14280] ? __fget_files+0x2a/0x420 [ 587.312657][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 587.312685][T14280] ? __pfx_sock_ioctl+0x10/0x10 [ 587.312706][T14280] __se_sys_ioctl+0xf3/0x160 [ 587.312731][T14280] do_syscall_64+0xf3/0x210 [ 587.312753][T14280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.312771][T14280] RIP: 0033:0x7fde0958e169 [ 587.312787][T14280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.312802][T14280] RSP: 002b:00007fde0a425038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.312822][T14280] RAX: ffffffffffffffda RBX: 00007fde097b5fa0 RCX: 00007fde0958e169 [ 587.312835][T14280] RDX: 0000200000000180 RSI: 0000000000008990 RDI: 0000000000000007 [ 587.312847][T14280] RBP: 00007fde09610a68 R08: 0000000000000000 R09: 0000000000000000 [ 587.312858][T14280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.312870][T14280] R13: 0000000000000000 R14: 00007fde097b5fa0 R15: 00007ffe60f20de8 [ 587.312891][T14280] [ 587.312898][T14280] [ 587.363859][T14238] bcachefs (loop3): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 587.366506][T14280] Allocated by task 14280: [ 587.366522][T14280] kasan_save_track+0x3f/0x80 [ 587.376405][T14238] bcachefs (loop3): flushing journal and stopping allocators, journal seq 0 [ 587.376713][T14280] __kasan_kmalloc+0x9d/0xb0 [ 587.376753][T14280] __kmalloc_cache_noprof+0x236/0x370 [ 587.891814][T14280] rose_add_node+0x209/0xdb0 [ 587.896455][T14280] rose_rt_ioctl+0xac2/0xf80 [ 587.901061][T14280] rose_ioctl+0x3ca/0x9e0 [ 587.905398][T14280] sock_do_ioctl+0x154/0x400 [ 587.909990][T14280] sock_ioctl+0x644/0x900 [ 587.914317][T14280] __se_sys_ioctl+0xf3/0x160 [ 587.918995][T14280] do_syscall_64+0xf3/0x210 [ 587.923495][T14280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.929386][T14280] [ 587.931718][T14280] Freed by task 14285: [ 587.935776][T14280] kasan_save_track+0x3f/0x80 [ 587.940459][T14280] kasan_save_free_info+0x40/0x50 [ 587.945485][T14280] __kasan_slab_free+0x59/0x70 [ 587.950457][T14280] kfree+0x198/0x430 [ 587.954365][T14280] rose_rt_ioctl+0x356/0xf80 [ 587.958963][T14280] rose_ioctl+0x3ca/0x9e0 [ 587.963290][T14280] sock_do_ioctl+0x154/0x400 [ 587.967879][T14280] sock_ioctl+0x644/0x900 [ 587.972209][T14280] __se_sys_ioctl+0xf3/0x160 [ 587.976801][T14280] do_syscall_64+0xf3/0x210 [ 587.981302][T14280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.987192][T14280] [ 587.989513][T14280] The buggy address belongs to the object at ffff88805cab3800 [ 587.989513][T14280] which belongs to the cache kmalloc-512 of size 512 [ 588.003564][T14280] The buggy address is located 0 bytes inside of [ 588.003564][T14280] freed 512-byte region [ffff88805cab3800, ffff88805cab3a00) [ 588.017182][T14280] [ 588.019501][T14280] The buggy address belongs to the physical page: [ 588.025903][T14280] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5cab0 [ 588.034661][T14280] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 588.043151][T14280] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 588.050688][T14280] page_type: f5(slab) [ 588.054662][T14280] raw: 00fff00000000040 ffff88801b041c80 dead000000000100 dead000000000122 [ 588.063241][T14280] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 588.071822][T14280] head: 00fff00000000040 ffff88801b041c80 dead000000000100 dead000000000122 [ 588.080600][T14280] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 588.089278][T14280] head: 00fff00000000002 ffffea000172ac01 00000000ffffffff 00000000ffffffff [ 588.098039][T14280] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 588.106707][T14280] page dumped because: kasan: bad access detected [ 588.113110][T14280] page_owner tracks the page as allocated [ 588.118809][T14280] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5844, tgid 5844 (syz-executor), ts 91662223925, free_ts 29431073190 [ 588.138086][T14280] post_alloc_hook+0x1f4/0x240 [ 588.142873][T14280] get_page_from_freelist+0x360a/0x37a0 [ 588.148454][T14280] __alloc_frozen_pages_noprof+0x211/0x5b0 [ 588.154269][T14280] alloc_pages_mpol+0x339/0x690 [ 588.159114][T14280] allocate_slab+0x8f/0x3b0 [ 588.163619][T14280] ___slab_alloc+0xc3b/0x1500 [ 588.168343][T14280] __slab_alloc+0x58/0xa0 [ 588.172675][T14280] __kmalloc_noprof+0x2ea/0x4d0 [ 588.177519][T14280] switchdev_deferred_enqueue+0x4d/0x2a0 [ 588.183153][T14280] br_set_state+0x2cd/0x7b0 [ 588.187922][T14280] br_init_port+0xa0/0x210 [ 588.192348][T14280] new_nbp+0x30c/0x440 [ 588.196411][T14280] br_add_if+0x28d/0xef0 [ 588.200648][T14280] do_set_master+0x57b/0x730 [ 588.205335][T14280] do_setlink+0xf76/0x4390 [ 588.209754][T14280] rtnl_newlink+0x17e2/0x1fe0 [ 588.214437][T14280] page last free pid 1 tgid 1 stack trace: [ 588.220238][T14280] __free_frozen_pages+0xde8/0x10a0 [ 588.225440][T14280] free_contig_range+0x154/0x430 [ 588.230472][T14280] destroy_args+0x94/0x4b0 [ 588.234890][T14280] debug_vm_pgtable+0x555/0x590 [ 588.239752][T14280] do_one_initcall+0x24c/0x940 [ 588.244535][T14280] do_initcall_level+0x157/0x210 [ 588.249471][T14280] do_initcalls+0x71/0xd0 [ 588.253880][T14280] kernel_init_freeable+0x432/0x5d0 [ 588.259091][T14280] kernel_init+0x1d/0x2b0 [ 588.263424][T14280] ret_from_fork+0x4d/0x80 [ 588.267834][T14280] ret_from_fork_asm+0x1a/0x30 [ 588.272593][T14280] [ 588.274904][T14280] Memory state around the buggy address: [ 588.280521][T14280] ffff88805cab3700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 588.288574][T14280] ffff88805cab3780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 588.296629][T14280] >ffff88805cab3800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 588.304687][T14280] ^ [ 588.308744][T14280] ffff88805cab3880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 588.316799][T14280] ffff88805cab3900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 588.324882][T14280] ================================================================== [ 588.350985][T14238] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 0 [ 588.405949][T14280] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 588.413189][T14280] CPU: 0 UID: 0 PID: 14280 Comm: syz.4.2671 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 588.425254][T14280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 588.435304][T14280] Call Trace: [ 588.438574][T14280] [ 588.441499][T14280] dump_stack_lvl+0x241/0x360 [ 588.446180][T14280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.451388][T14280] ? __pfx__printk+0x10/0x10 [ 588.455978][T14280] ? vprintk_emit+0x81f/0xa40 [ 588.460754][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.466383][T14280] ? vscnprintf+0x5d/0x90 [ 588.470729][T14280] panic+0x349/0x880 [ 588.474637][T14280] ? check_panic_on_warn+0x21/0xb0 [ 588.479773][T14280] ? __pfx_panic+0x10/0x10 [ 588.484205][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.489849][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.495826][T14280] ? _raw_spin_unlock_irqrestore+0x134/0x140 [ 588.501831][T14280] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 588.508165][T14280] check_panic_on_warn+0x86/0xb0 [ 588.513102][T14280] ? rose_link_device_down+0x7a/0xb0 [ 588.518383][T14280] end_report+0x77/0x160 [ 588.522613][T14280] kasan_report+0x154/0x180 [ 588.527116][T14280] ? rose_link_device_down+0x7a/0xb0 [ 588.532414][T14280] rose_link_device_down+0x7a/0xb0 [ 588.537530][T14280] rose_device_event+0x5fe/0x6a0 [ 588.542468][T14280] ? __pfx_rose_device_event+0x10/0x10 [ 588.547937][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.553584][T14280] ? __local_bh_enable_ip+0x168/0x200 [ 588.558958][T14280] ? nr_device_event+0x134/0x150 [ 588.563909][T14280] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 588.569670][T14280] ? do_raw_spin_unlock+0x13c/0x8b0 [ 588.574887][T14280] notifier_call_chain+0x1a7/0x3f0 [ 588.579995][T14280] dev_close_many+0x33e/0x4c0 [ 588.584699][T14280] ? __pfx_dev_close_many+0x10/0x10 [ 588.589893][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.595519][T14280] ? bond_netdev_event+0x168/0xfb0 [ 588.600690][T14280] netif_close+0x1c2/0x2d0 [ 588.605116][T14280] ? __pfx_netif_close+0x10/0x10 [ 588.610047][T14280] ? tun_device_event+0x7c/0x1090 [ 588.615074][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.620787][T14280] ? __asan_memset+0x23/0x50 [ 588.625398][T14280] dev_close+0x137/0x280 [ 588.629744][T14280] bpq_device_event+0x36a/0x620 [ 588.634636][T14280] notifier_call_chain+0x1a7/0x3f0 [ 588.639743][T14280] dev_close_many+0x33e/0x4c0 [ 588.644454][T14280] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 588.650258][T14280] ? __pfx_dev_close_many+0x10/0x10 [ 588.655452][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.661081][T14280] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 588.667114][T14280] netif_close+0x1c2/0x2d0 [ 588.671550][T14280] ? __pfx_netif_close+0x10/0x10 [ 588.676503][T14280] ? lockdep_hardirqs_on+0x9d/0x150 [ 588.681711][T14280] dev_close+0x137/0x280 [ 588.685990][T14280] bond_setup_by_slave+0x64/0x420 [ 588.691033][T14280] bond_enslave+0x7fb/0x38d0 [ 588.695623][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.701278][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.706903][T14280] ? __pfx_stack_trace_save+0x10/0x10 [ 588.712277][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.717935][T14280] ? stack_depot_save_flags+0x44/0x940 [ 588.723402][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.729026][T14280] ? aa_get_newest_label+0x101/0x6f0 [ 588.734312][T14280] ? __pfx_bond_enslave+0x10/0x10 [ 588.739359][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.744986][T14280] ? apparmor_capable+0x13b/0x1b0 [ 588.749999][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.755625][T14280] ? full_name_hash+0x93/0xe0 [ 588.760296][T14280] bond_do_ioctl+0x7c9/0xc00 [ 588.764891][T14280] ? __pfx_bond_do_ioctl+0x10/0x10 [ 588.770006][T14280] ? __mutex_lock+0x380/0x10c0 [ 588.774781][T14280] ? __lock_acquire+0xad5/0xd80 [ 588.779651][T14280] ? __pfx___mutex_lock+0x10/0x10 [ 588.784685][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.790309][T14280] ? full_name_hash+0x93/0xe0 [ 588.794984][T14280] dev_ifsioc+0x97c/0x1010 [ 588.799402][T14280] dev_ioctl+0x80f/0x1260 [ 588.803726][T14280] sock_do_ioctl+0x22f/0x400 [ 588.808331][T14280] ? __pfx_sock_do_ioctl+0x10/0x10 [ 588.813438][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.819061][T14280] ? __lock_acquire+0xad5/0xd80 [ 588.824011][T14280] sock_ioctl+0x644/0x900 [ 588.828336][T14280] ? __pfx_sock_ioctl+0x10/0x10 [ 588.833177][T14280] ? __fget_files+0x2a/0x420 [ 588.837781][T14280] ? __fget_files+0x2a/0x420 [ 588.842358][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.847981][T14280] ? __fget_files+0x2a/0x420 [ 588.852664][T14280] ? srso_alias_return_thunk+0x5/0xfbef5 [ 588.858286][T14280] ? __pfx_sock_ioctl+0x10/0x10 [ 588.863133][T14280] __se_sys_ioctl+0xf3/0x160 [ 588.867718][T14280] do_syscall_64+0xf3/0x210 [ 588.872213][T14280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.878091][T14280] RIP: 0033:0x7fde0958e169 [ 588.882494][T14280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.902095][T14280] RSP: 002b:00007fde0a425038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 588.910505][T14280] RAX: ffffffffffffffda RBX: 00007fde097b5fa0 RCX: 00007fde0958e169 [ 588.918469][T14280] RDX: 0000200000000180 RSI: 0000000000008990 RDI: 0000000000000007 [ 588.926444][T14280] RBP: 00007fde09610a68 R08: 0000000000000000 R09: 0000000000000000 [ 588.934406][T14280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.942381][T14280] R13: 0000000000000000 R14: 00007fde097b5fa0 R15: 00007ffe60f20de8 [ 588.950349][T14280] [ 588.953627][T14280] Kernel Offset: disabled [ 588.957950][T14280] Rebooting in 86400 seconds..