last executing test programs: 3m2.814327346s ago: executing program 2 (id=1063): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0086401, &(0x7f0000000000)={0x4000, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x3cc, 0xffffffff, 0x0, 0x0, 0xe4, 0xfeffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0xd0, 0xf4, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x428) r4 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) 2m59.095185041s ago: executing program 2 (id=1072): mkdir(&(0x7f0000002200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) fsopen(&(0x7f0000000380)='btrfs\x00', 0x1) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x21e021, 0x0) 2m50.176755512s ago: executing program 2 (id=1099): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x800000}, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="b8e863ffa5ae", 0x6}, {&(0x7f00000007c0)="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", 0x149}], 0x2, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x114c}, 0x0, 0x8841}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) io_submit(0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x18) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0xffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x1, @bcast, @bpq0, 0xfff4, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3ff, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r7, 0x0, &(0x7f0000000100)=0xffffffffffffffd1, 0x800) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) bind$ax25(r8, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r8, &(0x7f00000001c0)={{0x3, @default, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) preadv(r9, &(0x7f0000000140)=[{&(0x7f0000001180)=""/4100, 0x1004}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[], 0x44}}, 0x0) 2m46.796509091s ago: executing program 2 (id=1106): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 2m46.332042182s ago: executing program 2 (id=1112): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000180)) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r3, 0x800c5011, &(0x7f0000000000)) lseek(0xffffffffffffffff, 0xfffffffe, 0x3) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 2m42.425180176s ago: executing program 2 (id=1121): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r8 = socket$inet(0x2b, 0x801, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x118, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xec, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x2, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_LINK={0x8}, @TCA_U32_POLICE={0x4c, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x10000000, 0xebb, 0x1, 0x2, {0x3, 0x2, 0x3, 0x3, 0x6}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}, @TCA_POLICE_RATE64={0xc}]}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x28, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b01}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) 2m41.697376965s ago: executing program 32 (id=1121): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r8 = socket$inet(0x2b, 0x801, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x118, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xec, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x2, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_LINK={0x8}, @TCA_U32_POLICE={0x4c, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x10000000, 0xebb, 0x1, 0x2, {0x3, 0x2, 0x3, 0x3, 0x6}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x6}, 0x6, 0x0, 0xfafd}}, @TCA_POLICE_RATE64={0xc}]}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x80}, 0x40) openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x28, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b01}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x40000) socket$inet6_udp(0xa, 0x2, 0x0) 2m4.553850582s ago: executing program 0 (id=1228): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x8000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[@ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x30) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x814004, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[], 0x24, 0x3) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) 2m3.128285537s ago: executing program 0 (id=1233): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0086401, &(0x7f0000000000)={0x4000, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r4 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x6, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8}) 2m1.266547755s ago: executing program 0 (id=1236): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000002000000000000b703000000000000850000000400000095000000000000000000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r1, 0x0, 0x0, 0x1400, 0x0, 0x0) 2m0.397366879s ago: executing program 0 (id=1238): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201003f72f60000020000", @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007"], 0x6c}}, 0x840) 1m58.588829742s ago: executing program 0 (id=1243): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20040000) socket$kcm(0x2b, 0x1, 0x0) io_uring_setup(0x2d58, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) acct(&(0x7f0000000340)='./file0/../file0\x00') 1m53.551765669s ago: executing program 0 (id=1259): read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace(0x1, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") request_key(&(0x7f0000000740)='id_legacy\x00', &(0x7f0000000780)={'syz', 0x2}, &(0x7f00000007c0)='@', 0xfffffffffffffffb) 1m37.896681559s ago: executing program 33 (id=1259): read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace(0x1, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") request_key(&(0x7f0000000740)='id_legacy\x00', &(0x7f0000000780)={'syz', 0x2}, &(0x7f00000007c0)='@', 0xfffffffffffffffb) 10.057966692s ago: executing program 6 (id=1704): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) fsmount(0xffffffffffffffff, 0x0, 0x6) 9.810960543s ago: executing program 6 (id=1707): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcb65000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 7.71017325s ago: executing program 3 (id=1715): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480), 0x0) 7.291121734s ago: executing program 3 (id=1717): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000010"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001200)={&(0x7f00000005c0)='kmem_cache_free\x00', r2, 0x0, 0x8000000000000000}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x300, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x4d, 0x0, @wg=@data}}}}}, 0x0) 7.063576105s ago: executing program 3 (id=1720): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) 6.676168452s ago: executing program 3 (id=1723): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0, 0x0) sync() setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 5.629114638s ago: executing program 4 (id=1728): io_setup(0x401, &(0x7f0000000340)=0x0) timerfd_create(0x0, 0x800) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 5.42557672s ago: executing program 7 (id=1729): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPNiDurJvyeatLzFpfr/2+4GSycw8u7OZSXk27WYv3/3yo0rJ0kp6Q6JJJRERkSuRrEQlEPEfo245IWGH8srMnz+/uL5ZTHoVaiW/8WpOKTU3/8PHn6X8bmfTcpF9//KP3O8Xz148f/nvxodlS5UtVa01lK62a7829G3TULtlq6IptWoaumWoctUy6l77d/52zNreXlPp1d3Z9F7dsCylV5uqYjRVo6Ya9abSP9DLVaVpmppNC25SPF5b0/NDBu+MeDAYk3o9r0+JSKqnpXg8kQEBAICJ6s7/o05KP0z+vyVzhcLymnI6t/P/k5fOGzPvnM75+f9Zol/+/9ov3rY68n/ndKKd/9e884PSzfn/13KH/L83I3pchs7/s2MYDIYzn+ipinQ8c/L/tP/+dR29d7LoFsj/AQAAAAAAAAAAAAAAAAAAAAB4GlzZdsa27UzwGPy0LyHwn+NBGjT/0yKSdGbfZv4fsvXNLUm6F+45c2x+sV/cL3qPfodzETHF+Mfu5qyN4Moj5cjKj+aBH3+wX5xyW/IlKTvxsiQZybrrKRRv2ytvFZaXlMePb12mlA7H5yQjz4Tjv3dXpxOf64z395+QlxdC8Zpk5KcdqYkpu25ke/+fLyn15tuFrviU209Efrv3SQEAAAAAYMQ01dL3/F3TBrV73zKSL7kfExmyKBn5u//5/WLf8/NY5oXYpI8eAAAAAIDHwWp+WtElatTdgmn2K6RkYNMICrGOmriI9O2c6KqJX7flqdAR3nY8CfHuYPJ/j+ub4FW9S1TwjxTOwFtN/h1VZLjxBMfv1kRiw09T5FDcBXAYborKLcJj3YOfdypU384LA7dz5B9Iqyb42Cgx4HWW1d7tRK9ZCfGeGjsy3AJ47qtv/xrdG+T1U38FfHJz5yPTsA/kNpPSVXB20dsUH/svHgAAAAD3rp30BzVvhJvDNxIJ3yyHv9wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBCY/lKv67CpI8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFL8FwAA//8GuPOT") r2 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x800000009) 5.193981899s ago: executing program 3 (id=1732): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x755) 5.160708496s ago: executing program 4 (id=1733): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x10) r1 = io_uring_setup(0x192, &(0x7f0000000240)={0x0, 0x4914, 0x400, 0x8000002, 0x3d7}) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000c00)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5.025272556s ago: executing program 5 (id=1734): unshare(0x6a040000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 4.86310896s ago: executing program 7 (id=1736): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 4.805328329s ago: executing program 3 (id=1737): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x731e0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.619615357s ago: executing program 6 (id=1739): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x8000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[@ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x30) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x814004, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000010000000000200000000000000022"], 0x24, 0x3) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[], 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) 4.359191204s ago: executing program 4 (id=1742): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0xfffffffdffffffff) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0xffffffffffffff6d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x1, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x14, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r8 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x5) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r8, &(0x7f0000002980), 0x400000000000239, 0x0) 4.342498442s ago: executing program 5 (id=1743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000000)=0xc92b) 3.185268706s ago: executing program 6 (id=1744): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0xe) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 3.0971493s ago: executing program 1 (id=1745): io_setup(0x401, &(0x7f0000000340)=0x0) io_submit(r0, 0x1, &(0x7f0000000240)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) io_getevents(r0, 0x0, 0x0, 0x0, 0x0) 2.60520708s ago: executing program 7 (id=1746): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x4d3f, &(0x7f0000000240)={0x0, 0xca6a, 0x40, 0x1, 0x6}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000480), 0x0) 2.578139695s ago: executing program 5 (id=1747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/44}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r4 = syz_open_dev$loop(&(0x7f00000020c0), 0x101, 0x10b040) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r5, &(0x7f0000000080)={0x2, 0x20, 0x9, 0x20, 0x7}, 0xd) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) write$vga_arbiter(r3, &(0x7f0000000200), 0xf) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = epoll_create1(0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r8, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0x20000014}) r10 = dup(r9) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r10, &(0x7f00000000c0)={0x2000}) close_range(r6, 0xffffffffffffffff, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r11, 0x89f0, &(0x7f0000000a40)={'ip6tnl0\x00', &(0x7f00000009c0)={'ip6tnl0\x00', 0x0, 0x0, 0x9f, 0x1, 0x4, 0x21, @empty, @empty, 0x20, 0x700, 0x776, 0xc}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 2.47041089s ago: executing program 6 (id=1748): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) connect$vsock_stream(r7, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000280)={0x20000000000001de, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) accept4$vsock_stream(r7, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x80000) timer_gettime(0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a00)={0x5a19, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x17, 0x14, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0x5, 0x1, 0x0, r4}, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xba}, @printk={@llu}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x1000, &(0x7f00000015c0)=""/4096, 0x40f00, 0x3c, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0xe, 0x401, 0x8}, 0x10, r8, r5, 0x1, &(0x7f0000000a40)=[r3, r3, r3, 0xffffffffffffffff, r4, r4, r4], &(0x7f0000000a80)=[{0x2, 0x2, 0x1, 0x7}], 0x10, 0x6, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 2.385873178s ago: executing program 4 (id=1749): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x755) 2.265144199s ago: executing program 7 (id=1750): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) 2.196858552s ago: executing program 4 (id=1751): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000080)={[{@discard}, {@noload}]}, 0x64, 0x526, &(0x7f0000000a40)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 2.150348265s ago: executing program 1 (id=1752): mkdir(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 1.767837432s ago: executing program 5 (id=1753): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d000000000000060400", 0x32}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010100}, 0xc) 1.756636837s ago: executing program 7 (id=1754): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x192, &(0x7f0000000240)={0x0, 0x4914, 0x400, 0x8000002, 0x3d7}) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000c00)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.73104497s ago: executing program 1 (id=1755): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) 1.453148986s ago: executing program 1 (id=1756): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(r2) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) 1.428347835s ago: executing program 5 (id=1757): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x8000) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[@ANYRES16=r1], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000480)='./file0\x00', 0x30) mkdir(&(0x7f0000000300)='./bus\x00', 0x40) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x814004, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010000000000000004000000000000001000010000000000200000000000000022"], 0x24, 0x3) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[], 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) 1.30105791s ago: executing program 4 (id=1758): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) listxattr(0x0, &(0x7f0000000100)=""/104, 0x68) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="170000000000000004000000ff00"], 0x48) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={r2, 0xfffe}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$kcm(0x2b, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(r4, 0x6, 0x7, &(0x7f0000000040), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0xd81, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0xd73, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty, {[@end]}}, {0x0, 0x0, 0xd5b, 0x0, @opaque="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"}}}}}, 0x0) syz_clone(0x20001080, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4000000) 1.296789261s ago: executing program 6 (id=1759): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x800000}, 0x0, &(0x7f00000001c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000300)="b8e863ffa5aeb6a7", 0x8}, {&(0x7f00000007c0)="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", 0x149}], 0x2, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], 0x114c}, 0x0, 0x8841}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) io_submit(0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x18) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0xffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x1, @bcast, @bpq0, 0xfff4, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3ff, 0x2, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r7, 0x0, &(0x7f0000000100)=0xffffffffffffffd1, 0x800) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) bind$ax25(r8, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r8, &(0x7f00000001c0)={{0x3, @default, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) preadv(r9, &(0x7f0000000140)=[{&(0x7f0000001180)=""/4100, 0x1004}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[], 0x44}}, 0x0) 1.069295924s ago: executing program 1 (id=1760): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 239.400491ms ago: executing program 7 (id=1761): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0xe) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 42.818658ms ago: executing program 5 (id=1762): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0xfffffffdffffffff) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0xffffffffffffff6d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x1, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x14, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r8 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x5) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r8, &(0x7f0000002980), 0x400000000000239, 0x0) 0s ago: executing program 1 (id=1763): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x755) kernel console output (not intermixed with test programs): ting filesystem 00000000-0000-0000-0000-000000000000. [ 252.180452][ T7253] kernel read not supported for file /eth0 (pid: 7253 comm: syz.4.371) [ 252.470311][ T5899] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 252.472774][ T30] audit: type=1800 audit(1744861477.135:36): pid=7253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.371" name="eth0" dev="mqueue" ino=11388 res=0 errno=0 [ 252.497483][ C0] vkms_vblank_simulate: vblank timer overrun [ 252.629217][ T7258] 9pnet_virtio: no channels available for device syz [ 253.153577][ T7256] loop5: detected capacity change from 0 to 164 [ 253.161185][ T5899] usb 6-1: device not accepting address 5, error -71 [ 253.213621][ T5899] usb usb6-port1: unable to enumerate USB device [ 253.234634][ T7256] Unable to read rock-ridge attributes [ 254.972647][ T7284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.380'. [ 256.530526][ T7287] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.809823][ T7287] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.934023][ T7314] fuse: Unknown parameter 'group_i00000000000000000000' [ 257.020509][ T7287] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.374474][ T5905] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 257.542660][ T5905] usb 2-1: device descriptor read/64, error -71 [ 257.617949][ T7287] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.822721][ T5905] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 257.995160][ T5905] usb 2-1: device descriptor read/64, error -71 [ 258.016112][ T7287] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.125504][ T5905] usb usb2-port1: attempt power cycle [ 258.196963][ T7287] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.310816][ T7287] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.367836][ T7287] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.431985][ T7334] 9pnet_virtio: no channels available for device syz [ 259.102763][ T5905] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 259.137335][ T5905] usb 2-1: device descriptor read/8, error -71 [ 259.404394][ T5905] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 259.500544][ T5905] usb 2-1: device descriptor read/8, error -71 [ 259.560307][ T7346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.396'. [ 259.641180][ T5905] usb usb2-port1: unable to enumerate USB device [ 259.791964][ T7350] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 261.087634][ T7369] fuse: Unknown parameter 'group_i00000000000000000000' [ 263.267010][ T7407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.410'. [ 263.296972][ T7402] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 263.634037][ T5905] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 263.785405][ T5905] usb 3-1: device descriptor read/64, error -71 [ 264.032912][ T5905] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 264.301653][ T5905] usb 3-1: device descriptor read/64, error -71 [ 264.442715][ T5905] usb usb3-port1: attempt power cycle [ 264.942674][ T5905] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 265.004024][ T5905] usb 3-1: device descriptor read/8, error -71 [ 265.252592][ T5905] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 265.309090][ T5905] usb 3-1: device descriptor read/8, error -71 [ 265.440464][ T5905] usb usb3-port1: unable to enumerate USB device [ 265.804022][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.810386][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.080637][ T7463] netlink: 24 bytes leftover after parsing attributes in process `syz.5.426'. [ 267.549856][ T7472] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 269.617651][ T7510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.442'. [ 270.486881][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 270.653007][ T24] usb 3-1: device descriptor read/64, error -71 [ 270.902659][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 271.052898][ T24] usb 3-1: device descriptor read/64, error -71 [ 271.173218][ T24] usb usb3-port1: attempt power cycle [ 271.562725][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 271.633522][ T24] usb 3-1: device descriptor read/8, error -71 [ 271.740947][ T7543] random: crng reseeded on system resumption [ 272.775684][ T7540] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 273.398803][ T30] audit: type=1326 audit(1744861498.305:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f96df185127 code=0x7ffc0000 [ 273.565253][ T30] audit: type=1326 audit(1744861498.305:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f96df12a359 code=0x7ffc0000 [ 273.696106][ T30] audit: type=1326 audit(1744861498.305:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96df18e169 code=0x7ffc0000 [ 273.799839][ T30] audit: type=1326 audit(1744861498.315:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f96df185127 code=0x7ffc0000 [ 273.932683][ T30] audit: type=1326 audit(1744861498.315:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f96df12a359 code=0x7ffc0000 [ 273.959271][ T7572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.455'. [ 274.303729][ T30] audit: type=1326 audit(1744861498.315:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f96df185127 code=0x7ffc0000 [ 274.381687][ T30] audit: type=1326 audit(1744861498.315:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f96df12a359 code=0x7ffc0000 [ 274.438135][ T30] audit: type=1326 audit(1744861498.325:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f96df185127 code=0x7ffc0000 [ 274.531276][ T30] audit: type=1326 audit(1744861498.325:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f96df12a359 code=0x7ffc0000 [ 274.642122][ T30] audit: type=1326 audit(1744861498.325:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7559 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f96df185127 code=0x7ffc0000 [ 274.664199][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.694131][ T7592] random: crng reseeded on system resumption [ 276.219217][ T5937] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 277.202664][ T5937] usb 3-1: device descriptor read/64, error -71 [ 277.449248][ T7599] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 277.522652][ T5937] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 277.696542][ T5937] usb 3-1: device descriptor read/64, error -71 [ 277.851401][ T5937] usb usb3-port1: attempt power cycle [ 278.273605][ T5937] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 278.617311][ T5937] usb 3-1: device not accepting address 13, error -71 [ 279.990093][ T7627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.475'. [ 280.646991][ T7635] random: crng reseeded on system resumption [ 283.293683][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'. [ 283.502761][ T7653] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 284.027950][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 284.372790][ T10] usb 6-1: device descriptor read/64, error -71 [ 285.439905][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 285.965337][ T7675] random: crng reseeded on system resumption [ 286.742637][ T10] usb 6-1: device descriptor read/64, error -71 [ 287.053077][ T10] usb usb6-port1: attempt power cycle [ 287.079929][ T7682] netlink: 24 bytes leftover after parsing attributes in process `syz.2.490'. [ 287.115791][ T7685] kernel read not supported for file /eth0 (pid: 7685 comm: syz.0.493) [ 287.165092][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 287.165117][ T30] audit: type=1800 audit(1744861512.075:79): pid=7685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.493" name="eth0" dev="mqueue" ino=7311 res=0 errno=0 [ 287.286834][ T9] kernel read not supported for file /eth0 (pid: 9 comm: kworker/0:0) [ 289.122844][ T30] audit: type=1326 audit(1744861513.935:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7709 comm="syz.3.502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f516cb8e169 code=0x0 [ 290.829941][ T7734] random: crng reseeded on system resumption [ 291.931190][ T7732] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 292.606556][ T47] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 292.792589][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 293.089281][ T47] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 293.103251][ T47] usb 4-1: can't read configurations, error -61 [ 293.238439][ T30] audit: type=1326 audit(1744861518.145:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96df18e169 code=0x7ffc0000 [ 293.260531][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.262693][ T47] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 293.290372][ T30] audit: type=1326 audit(1744861518.185:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f96df18e169 code=0x7ffc0000 [ 293.312472][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.334409][ T7746] loop0: detected capacity change from 0 to 512 [ 293.350448][ T30] audit: type=1326 audit(1744861518.185:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96df18e169 code=0x7ffc0000 [ 293.373593][ T30] audit: type=1326 audit(1744861518.185:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96df18e169 code=0x7ffc0000 [ 293.395691][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.412555][ T30] audit: type=1326 audit(1744861518.185:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96df18e169 code=0x7ffc0000 [ 293.437427][ T7748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.510'. [ 293.466027][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 293.493272][ T47] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 293.500881][ T47] usb 4-1: can't read configurations, error -61 [ 293.510726][ T7746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.523669][ T47] usb usb4-port1: attempt power cycle [ 293.597281][ T7746] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.629193][ T30] audit: type=1326 audit(1744861518.195:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96df18e169 code=0x7ffc0000 [ 293.709152][ T7755] kernel read not supported for file /eth0 (pid: 7755 comm: syz.5.512) [ 293.753847][ T30] audit: type=1326 audit(1744861518.195:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96df18e169 code=0x7ffc0000 [ 293.775954][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.810905][ T7756] 9pnet_fd: Insufficient options for proto=fd [ 293.953846][ T47] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 294.034733][ T30] audit: type=1326 audit(1744861518.235:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f96df18e169 code=0x7ffc0000 [ 294.056977][ T30] audit: type=1326 audit(1744861518.235:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f96df18e1a3 code=0x7ffc0000 [ 294.078868][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.085033][ T30] audit: type=1326 audit(1744861518.235:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.0.509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f96df18cc1f code=0x7ffc0000 [ 294.215715][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.514'. [ 294.250775][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.304775][ T47] usb 4-1: device not accepting address 5, error -71 [ 295.273243][ T7771] fuse: Bad value for 'user_id' [ 295.318897][ T7771] fuse: Bad value for 'user_id' [ 296.705657][ T7793] random: crng reseeded on system resumption [ 297.764538][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.525'. [ 297.803855][ T7791] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 298.222052][ T7805] kernel read not supported for file /eth0 (pid: 7805 comm: syz.2.529) [ 299.089161][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 299.089185][ T30] audit: type=1800 audit(1744861523.995:107): pid=7805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.529" name="eth0" dev="mqueue" ino=13518 res=0 errno=0 [ 299.172836][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 299.187953][ T10] kernel read not supported for file /eth0 (pid: 10 comm: kworker/0:1) [ 299.370096][ T7815] loop0: detected capacity change from 0 to 1024 [ 299.387034][ T7815] EXT4-fs: Ignoring removed orlov option [ 299.393117][ T7815] EXT4-fs: Ignoring removed oldalloc option [ 300.222577][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 300.230438][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 300.242692][ T9] usb 5-1: can't read configurations, error -61 [ 300.383096][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 300.395654][ T7815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.459716][ T30] audit: type=1804 audit(1744861525.365:108): pid=7815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.531" name="/newroot/100/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 300.516971][ T30] audit: type=1326 audit(1744861525.425:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7822 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516cb8e169 code=0x7ffc0000 [ 300.575335][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 300.596797][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 300.616850][ T30] audit: type=1326 audit(1744861525.435:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7822 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f516cb8e169 code=0x7ffc0000 [ 300.639593][ T9] usb 5-1: can't read configurations, error -61 [ 300.670248][ T9] usb usb5-port1: attempt power cycle [ 300.719837][ T30] audit: type=1326 audit(1744861525.435:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7822 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516cb8e169 code=0x7ffc0000 [ 300.728573][ T7832] fuse: Bad value for 'user_id' [ 300.747472][ T7832] fuse: Bad value for 'user_id' [ 300.816824][ T30] audit: type=1326 audit(1744861525.435:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7822 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f516cb8e169 code=0x7ffc0000 [ 300.862066][ T30] audit: type=1326 audit(1744861525.445:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7822 comm="syz.3.534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516cb8e169 code=0x7ffc0000 [ 300.905429][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.938985][ T30] audit: type=1326 audit(1744861525.835:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.3.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516cb8e169 code=0x7ffc0000 [ 301.015731][ T30] audit: type=1326 audit(1744861525.835:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.3.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516cb8e169 code=0x7ffc0000 [ 301.042703][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 301.218428][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.542'. [ 301.272682][ T9] usb 5-1: device not accepting address 6, error -71 [ 301.381358][ T30] audit: type=1326 audit(1744861525.845:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.3.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f516cb8e169 code=0x7ffc0000 [ 301.685946][ T7850] random: crng reseeded on system resumption [ 305.956764][ T7868] kernel read not supported for file /eth0 (pid: 7868 comm: syz.2.547) [ 306.004320][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 306.004343][ T30] audit: type=1800 audit(1744861530.895:163): pid=7868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.547" name="eth0" dev="mqueue" ino=13518 res=0 errno=0 [ 306.022290][ T7871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.548'. [ 306.083562][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.548'. [ 306.096851][ T7870] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 306.119192][ T9] kernel read not supported for file /eth0 (pid: 9 comm: kworker/0:0) [ 306.329274][ T7879] xt_hashlimit: max too large, truncated to 1048576 [ 306.556773][ T7886] fuse: Bad value for 'fd' [ 306.763535][ T5898] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 307.220814][ T7904] random: crng reseeded on system resumption [ 308.112576][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 308.132594][ T5898] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 308.148628][ T5898] usb 4-1: can't read configurations, error -61 [ 308.562686][ T5898] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 308.784447][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 308.825345][ T5898] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 308.870856][ T5898] usb 4-1: can't read configurations, error -61 [ 308.898312][ T5898] usb usb4-port1: attempt power cycle [ 309.002037][ T7918] netlink: 28 bytes leftover after parsing attributes in process `syz.5.566'. [ 309.021330][ T7918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.566'. [ 309.060695][ T7921] kernel read not supported for file /eth0 (pid: 7921 comm: syz.4.567) [ 309.090136][ T30] audit: type=1800 audit(1744861533.995:164): pid=7921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.567" name="eth0" dev="mqueue" ino=11388 res=0 errno=0 [ 309.109871][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.195414][ T7923] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 309.250098][ T47] kernel read not supported for file /eth0 (pid: 47 comm: kworker/1:1) [ 309.292726][ T5898] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 309.346990][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 309.389431][ T5898] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 309.478107][ T5898] usb 4-1: can't read configurations, error -61 [ 309.632717][ T5898] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 309.674223][ T5898] usb 4-1: device descriptor read/8, error -71 [ 309.834532][ T5898] usb usb4-port1: unable to enumerate USB device [ 310.569641][ T7946] fuse: Bad value for 'fd' [ 310.688257][ T7948] overlayfs: failed to resolve './file1': -2 [ 310.930217][ T7953] 9pnet_virtio: no channels available for device syz [ 311.927646][ T7956] random: crng reseeded on system resumption [ 312.715591][ T7965] netlink: 28 bytes leftover after parsing attributes in process `syz.4.581'. [ 312.795528][ T7965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 312.912283][ T7969] netlink: 32 bytes leftover after parsing attributes in process `syz.2.582'. [ 313.202242][ T7972] kernel read not supported for file /eth0 (pid: 7972 comm: syz.5.583) [ 313.355961][ T5898] kernel read not supported for file /eth0 (pid: 5898 comm: kworker/1:3) [ 313.361796][ T30] audit: type=1800 audit(1744861538.185:165): pid=7972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.583" name="eth0" dev="mqueue" ino=8660 res=0 errno=0 [ 313.861089][ T7982] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 313.892621][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 313.932735][ T5856] Bluetooth: hci5: command 0x0405 tx timeout [ 314.070512][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 314.101122][ T9] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 314.118257][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.131073][ T9] usb 3-1: config 0 has no interface number 0 [ 314.141639][ T9] usb 3-1: config 0 interface 255 has no altsetting 0 [ 314.316702][ T9] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 314.426962][ T7993] random: crng reseeded on system resumption [ 315.219052][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.282699][ T9] usb 3-1: Product: syz [ 315.286915][ T9] usb 3-1: Manufacturer: syz [ 315.312627][ T9] usb 3-1: SerialNumber: syz [ 315.329365][ T7997] fuse: Bad value for 'fd' [ 315.349725][ T9] usb 3-1: config 0 descriptor?? [ 315.664903][ T9] streamzap 3-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 315.728066][ T8001] 9pnet_virtio: no channels available for device syz [ 315.898235][ T5898] usb 3-1: USB disconnect, device number 15 [ 316.049285][ T8008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.596'. [ 316.062604][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'. [ 316.757024][ T8023] 9pnet_fd: Insufficient options for proto=fd [ 317.634249][ T8036] random: crng reseeded on system resumption [ 318.399173][ T8039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.609'. [ 318.567713][ T8040] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 318.831333][ T8047] loop4: detected capacity change from 0 to 512 [ 318.873068][ T8047] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 318.964895][ T8049] fuse: Bad value for 'fd' [ 318.975760][ T8047] EXT4-fs (loop4): 1 truncate cleaned up [ 319.037789][ T8047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.232346][ T8057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.613'. [ 319.286318][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'. [ 319.335973][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.787607][ T8068] 9pnet_fd: Insufficient options for proto=fd [ 319.862765][ T5905] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 320.322687][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 320.724265][ T5905] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 320.732714][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.748149][ T5905] usb 5-1: config 0 has no interface number 0 [ 320.754982][ T5905] usb 5-1: config 0 interface 255 has no altsetting 0 [ 320.767355][ T5905] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 320.782589][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.799661][ T5905] usb 5-1: Product: syz [ 320.832534][ T5905] usb 5-1: Manufacturer: syz [ 320.847447][ T5905] usb 5-1: SerialNumber: syz [ 320.879072][ T5905] usb 5-1: config 0 descriptor?? [ 320.906555][ T5905] streamzap 5-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 321.058496][ T8084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.624'. [ 321.124366][ T5905] usb 5-1: USB disconnect, device number 8 [ 321.483701][ T8087] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 322.018090][ T8092] fuse: Bad value for 'fd' [ 324.738870][ T5905] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 325.179550][ T8127] 9pnet_virtio: no channels available for device syz [ 325.758709][ T5905] usb 1-1: Using ep0 maxpacket: 8 [ 325.788977][ T5905] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 325.822039][ T5905] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.923523][ T5905] usb 1-1: config 0 has no interface number 0 [ 325.947217][ T5905] usb 1-1: config 0 interface 255 has no altsetting 0 [ 325.972609][ T5905] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 326.006473][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.043648][ T5905] usb 1-1: Product: syz [ 326.070150][ T5905] usb 1-1: Manufacturer: syz [ 326.313808][ T8136] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 326.345334][ T5905] usb 1-1: SerialNumber: syz [ 326.354821][ T5905] usb 1-1: config 0 descriptor?? [ 326.527716][ T5905] usb 1-1: can't set config #0, error -71 [ 326.550497][ T5905] usb 1-1: USB disconnect, device number 2 [ 326.773188][ T8143] netlink: 24 bytes leftover after parsing attributes in process `syz.0.646'. [ 326.904000][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.910372][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.556210][ T8172] random: crng reseeded on system resumption [ 331.527758][ T8184] netlink: 'syz.1.661': attribute type 4 has an invalid length. [ 331.547587][ T8184] netlink: 'syz.1.661': attribute type 4 has an invalid length. [ 331.562586][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 331.736683][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 331.750368][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.417036][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 332.435599][ T9] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 332.452623][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.460666][ T9] usb 6-1: Product: syz [ 332.468359][ T9] usb 6-1: Manufacturer: syz [ 332.498740][ T9] usb 6-1: SerialNumber: syz [ 332.524103][ T9] usb 6-1: config 0 descriptor?? [ 332.768148][ T8192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.664'. [ 332.900289][ T9] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 332.911838][ T9] usb 6-1: USB disconnect, device number 9 [ 334.129023][ T8210] overlayfs: failed to resolve './file0': -2 [ 334.707354][ T8216] random: crng reseeded on system resumption [ 336.371623][ T8226] netlink: 'syz.1.674': attribute type 4 has an invalid length. [ 336.685340][ T8226] netlink: 'syz.1.674': attribute type 4 has an invalid length. [ 338.075352][ T8253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.682'. [ 339.623282][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 339.802658][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 340.473664][ T8270] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 340.489137][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.502578][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 340.519033][ T9] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 340.530383][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.538729][ T9] usb 2-1: Product: syz [ 340.544183][ T9] usb 2-1: Manufacturer: syz [ 340.549659][ T9] usb 2-1: SerialNumber: syz [ 340.561347][ T9] usb 2-1: config 0 descriptor?? [ 340.776039][ T9] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 340.803256][ T9] usb 2-1: USB disconnect, device number 6 [ 343.655379][ T8308] netlink: 24 bytes leftover after parsing attributes in process `syz.3.698'. [ 347.404257][ T8334] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 347.897988][ T8343] syz.2.705: attempt to access beyond end of device [ 347.897988][ T8343] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 349.880747][ T969] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 351.192557][ T969] usb 4-1: Using ep0 maxpacket: 8 [ 351.445206][ T969] usb 4-1: device descriptor read/all, error -71 [ 351.872667][ T8368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.713'. [ 356.417003][ T8404] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 358.540335][ T8422] netlink: 24 bytes leftover after parsing attributes in process `syz.5.730'. [ 358.727010][ T8424] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.074142][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 359.221837][ T8424] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.252743][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 359.854387][ T24] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 359.892652][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.966608][ T24] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 359.994179][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.032602][ T24] usb 2-1: Product: syz [ 360.042765][ T24] usb 2-1: Manufacturer: syz [ 360.328495][ T24] usb 2-1: SerialNumber: syz [ 360.332918][ T8424] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.357491][ T24] usb 2-1: config 0 descriptor?? [ 360.376475][ T24] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 360.622361][ T8424] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.625123][ T24] usb 2-1: USB disconnect, device number 7 [ 360.858687][ T8424] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.029950][ T8424] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.123156][ T8424] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.174947][ T8424] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.812725][ T8470] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 363.174863][ T8474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.745'. [ 367.022573][ T969] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 367.336245][ T8509] 9pnet_fd: Insufficient options for proto=fd [ 368.269355][ T969] usb 3-1: Using ep0 maxpacket: 8 [ 368.293732][ T969] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 368.342601][ T969] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 368.377528][ T969] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 368.387311][ T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.140682][ T8524] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 369.170914][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.5.761'. [ 369.222516][ T969] usb 3-1: Product: syz [ 369.226719][ T969] usb 3-1: Manufacturer: syz [ 369.239792][ T969] usb 3-1: SerialNumber: syz [ 369.259521][ T969] usb 3-1: config 0 descriptor?? [ 369.280528][ T969] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 369.476948][ T969] usb 3-1: USB disconnect, device number 16 [ 373.938637][ T8562] random: crng reseeded on system resumption [ 377.127965][ T8585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.777'. [ 378.906357][ T8601] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 382.097401][ T8616] random: crng reseeded on system resumption [ 383.690798][ T8625] fuse: Bad value for 'fd' [ 385.327344][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.792'. [ 387.305678][ T8660] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 388.337880][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.353334][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.938962][ T8674] random: crng reseeded on system resumption [ 391.092201][ T8683] fuse: Bad value for 'fd' [ 392.807984][ T8701] netlink: 'syz.3.813': attribute type 4 has an invalid length. [ 392.932355][ T8701] netlink: 'syz.3.813': attribute type 4 has an invalid length. [ 395.215049][ T8724] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 395.253445][ T5905] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 395.412664][ T5905] usb 6-1: Using ep0 maxpacket: 8 [ 396.100306][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 396.123319][ T5905] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 396.133921][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.142188][ T5905] usb 6-1: Product: syz [ 396.166705][ T5905] usb 6-1: Manufacturer: syz [ 396.189060][ T5905] usb 6-1: SerialNumber: syz [ 396.215606][ T5905] usb 6-1: config 0 descriptor?? [ 396.250291][ T5905] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 396.553400][ T5905] usb 6-1: USB disconnect, device number 10 [ 396.646007][ T8734] fuse: Bad value for 'fd' [ 397.306169][ T8737] netlink: 76 bytes leftover after parsing attributes in process `syz.0.823'. [ 398.711335][ T8752] netlink: 'syz.4.828': attribute type 4 has an invalid length. [ 398.820046][ T8758] netlink: 'syz.4.828': attribute type 4 has an invalid length. [ 401.973217][ T8782] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 402.851907][ T5899] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 403.032647][ T5899] usb 6-1: Using ep0 maxpacket: 8 [ 403.044740][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 403.065343][ T5899] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 403.074867][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.092588][ T5899] usb 6-1: Product: syz [ 403.107965][ T5899] usb 6-1: Manufacturer: syz [ 403.127205][ T5899] usb 6-1: SerialNumber: syz [ 403.152082][ T5899] usb 6-1: config 0 descriptor?? [ 403.175258][ T5899] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 403.230067][ T8794] netlink: 76 bytes leftover after parsing attributes in process `syz.0.841'. [ 403.381654][ T5899] usb 6-1: USB disconnect, device number 11 [ 403.602376][ T8804] netlink: 'syz.4.848': attribute type 4 has an invalid length. [ 403.684703][ T8804] netlink: 'syz.4.848': attribute type 4 has an invalid length. [ 405.876288][ T8834] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 406.546124][ T8841] loop4: detected capacity change from 0 to 128 [ 406.756525][ T8843] netlink: 76 bytes leftover after parsing attributes in process `syz.1.859'. [ 407.007436][ T8849] netlink: 'syz.1.863': attribute type 4 has an invalid length. [ 407.026587][ T8847] loop4: detected capacity change from 0 to 2048 [ 407.045569][ T8849] netlink: 'syz.1.863': attribute type 4 has an invalid length. [ 407.091346][ T8847] EXT4-fs (loop4): failed to initialize system zone (-117) [ 407.123080][ T8847] EXT4-fs (loop4): mount failed [ 407.662595][ T969] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 407.863071][ T969] usb 2-1: Using ep0 maxpacket: 8 [ 407.880693][ T969] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 408.531424][ T969] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 409.279325][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.288296][ T969] usb 2-1: Product: syz [ 409.298679][ T969] usb 2-1: Manufacturer: syz [ 409.303626][ T969] usb 2-1: SerialNumber: syz [ 409.311581][ T969] usb 2-1: config 0 descriptor?? [ 409.364977][ T969] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 409.607469][ T8878] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 409.616749][ T47] usb 2-1: USB disconnect, device number 8 [ 410.112028][ T8887] serio: Serial port ptm0 [ 410.883811][ T8886] netlink: 76 bytes leftover after parsing attributes in process `syz.2.875'. [ 410.916544][ T8891] netlink: 'syz.4.878': attribute type 4 has an invalid length. [ 411.003952][ T8891] netlink: 'syz.4.878': attribute type 4 has an invalid length. [ 414.955158][ T8943] serio: Serial port ptm0 [ 415.720994][ T8940] netlink: 76 bytes leftover after parsing attributes in process `syz.1.895'. [ 415.841513][ T8947] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 415.932720][ T8954] netlink: 'syz.1.898': attribute type 4 has an invalid length. [ 415.942593][ T47] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 415.964147][ T8954] netlink: 'syz.1.898': attribute type 4 has an invalid length. [ 416.173454][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 416.185086][ T47] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 416.498926][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 416.512596][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 416.526171][ T47] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 416.541878][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.468215][ T47] usb 4-1: Product: syz [ 417.749464][ T47] usb 4-1: Manufacturer: syz [ 417.754742][ T47] usb 4-1: SerialNumber: syz [ 417.795083][ T47] usb 4-1: config 0 descriptor?? [ 417.828236][ T47] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 417.997616][ T10] usb 4-1: USB disconnect, device number 13 [ 418.153699][ T8988] netlink: 76 bytes leftover after parsing attributes in process `syz.5.910'. [ 419.241694][ T8996] netlink: 'syz.5.913': attribute type 4 has an invalid length. [ 419.261717][ T8996] netlink: 'syz.5.913': attribute type 4 has an invalid length. [ 419.700404][ T8999] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 422.473760][ T9026] fuse: Unknown parameter 'user_i0x0000000000000003' [ 422.622618][ T5147] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 422.696742][ T9028] netlink: 28 bytes leftover after parsing attributes in process `syz.4.925'. [ 422.716410][ T9028] netlink: 32 bytes leftover after parsing attributes in process `syz.4.925'. [ 423.052775][ T5147] usb 6-1: Using ep0 maxpacket: 8 [ 423.070681][ T5147] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 423.089059][ T5147] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 423.223796][ T5147] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 423.758291][ T5147] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 423.834059][ T5147] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.862915][ T5147] usb 6-1: Product: syz [ 423.873997][ T5147] usb 6-1: Manufacturer: syz [ 424.016132][ T5147] usb 6-1: SerialNumber: syz [ 424.065262][ T5147] usb 6-1: config 0 descriptor?? [ 424.104213][ T5147] streamzap 6-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 424.113045][ T9046] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 424.479835][ T10] usb 6-1: USB disconnect, device number 12 [ 425.788819][ T9065] fuse: Unknown parameter 'user_id0x0000000000000003' [ 426.125165][ T9072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.942'. [ 426.136244][ T9072] netlink: 32 bytes leftover after parsing attributes in process `syz.0.942'. [ 429.928648][ T9098] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 430.405478][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 430.593081][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 430.664087][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 430.716298][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 430.749540][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 430.782262][ T9] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 430.811283][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.834986][ T9] usb 5-1: Product: syz [ 430.855848][ T9] usb 5-1: Manufacturer: syz [ 430.878859][ T9] usb 5-1: SerialNumber: syz [ 430.900934][ T9] usb 5-1: config 0 descriptor?? [ 430.927017][ T9] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 431.151563][ T9] usb 5-1: USB disconnect, device number 9 [ 431.367409][ T9117] fuse: Unknown parameter 'user_id0x0000000000000003' [ 431.388528][ T9119] netlink: 28 bytes leftover after parsing attributes in process `syz.2.957'. [ 431.398091][ T9119] netlink: 32 bytes leftover after parsing attributes in process `syz.2.957'. [ 432.842957][ T30] audit: type=1326 audit(1744861657.725:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bc38e169 code=0x7ffc0000 [ 432.932580][ T30] audit: type=1326 audit(1744861657.725:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bc38e169 code=0x7ffc0000 [ 432.954825][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.252850][ T30] audit: type=1326 audit(1744861657.735:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7bc38e169 code=0x7ffc0000 [ 433.275835][ T30] audit: type=1326 audit(1744861657.735:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bc38e169 code=0x7ffc0000 [ 433.309442][ T30] audit: type=1326 audit(1744861657.735:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bc38e169 code=0x7ffc0000 [ 433.332114][ T30] audit: type=1326 audit(1744861657.735:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7bc38e169 code=0x7ffc0000 [ 433.585541][ T30] audit: type=1326 audit(1744861657.735:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bc38e169 code=0x7ffc0000 [ 434.081919][ T30] audit: type=1326 audit(1744861657.735:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bc38e169 code=0x7ffc0000 [ 434.104141][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.117894][ T30] audit: type=1326 audit(1744861657.735:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb7bc38e169 code=0x7ffc0000 [ 434.316383][ T30] audit: type=1326 audit(1744861657.735:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9127 comm="syz.2.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7bc38e169 code=0x7ffc0000 [ 434.338575][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.989592][ T9144] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 435.392715][ T9157] netlink: 'syz.4.970': attribute type 4 has an invalid length. [ 435.461295][ T9157] netlink: 'syz.4.970': attribute type 4 has an invalid length. [ 435.702043][ T9160] fuse: Unknown parameter 'user_id0x0000000000000003' [ 441.974639][ T9210] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 443.313315][ T9219] fuse: Bad value for 'fd' [ 443.583058][ T9227] netlink: 28 bytes leftover after parsing attributes in process `syz.0.993'. [ 443.641965][ T9227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.993'. [ 448.332823][ T9271] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 448.516625][ T9276] fuse: Bad value for 'fd' [ 448.727893][ T9279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1009'. [ 448.740301][ T9279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1009'. [ 449.793912][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.800288][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.914595][ T9293] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 453.023406][ T9328] fuse: Bad value for 'fd' [ 453.441587][ T9334] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 453.704570][ T9337] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1024'. [ 453.741080][ T9337] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1024'. [ 455.830606][ T9358] 9pnet_virtio: no channels available for device syz [ 459.060642][ T9388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1040'. [ 459.242604][ T9388] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1040'. [ 459.939942][ T9401] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 460.145215][ T9408] netlink: 'syz.2.1046': attribute type 4 has an invalid length. [ 462.900357][ T9423] 9pnet_virtio: no channels available for device syz [ 464.429628][ T9436] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1054'. [ 464.474227][ T9436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1054'. [ 466.051101][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 466.051126][ T30] audit: type=1326 audit(1744861690.955:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0a38e169 code=0x7ffc0000 [ 466.188236][ T30] audit: type=1326 audit(1744861690.955:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.4.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0a38e169 code=0x7ffc0000 [ 466.379349][ T9456] netlink: 'syz.4.1061': attribute type 4 has an invalid length. [ 466.521846][ T9463] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 469.252796][ T9478] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1069'. [ 469.312983][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1069'. [ 470.520765][ T9492] overlayfs: failed to resolve './file0': -2 [ 471.801474][ T9508] netlink: 'syz.0.1077': attribute type 4 has an invalid length. [ 473.854065][ T9528] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1082'. [ 474.105858][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'. [ 474.970227][ T9531] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 476.765235][ T9552] fuse: Unknown parameter '00000000000000000003' [ 477.272673][ T9561] netlink: 'syz.1.1093': attribute type 4 has an invalid length. [ 480.732317][ T9580] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 480.764081][ T5905] kernel write not supported for file /input/event0 (pid: 5905 comm: kworker/0:4) [ 482.303252][ T9601] fuse: Unknown parameter '00000000000000000003' [ 482.473713][ T9607] netlink: 'syz.1.1107': attribute type 4 has an invalid length. [ 485.725171][ T9643] fuse: Bad value for 'group_id' [ 485.730225][ T9643] fuse: Bad value for 'group_id' [ 486.775649][ T9649] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 487.004667][ T6278] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.238167][ T6278] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.444866][ T6278] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.463029][ T9656] fuse: Unknown parameter '00000000000000000003' [ 487.674946][ T6278] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.900226][ T9667] hub 2-0:1.0: USB hub found [ 487.965313][ T9667] hub 2-0:1.0: 1 port detected [ 489.235994][ T6278] bridge_slave_1: left allmulticast mode [ 489.264761][ T6278] bridge_slave_1: left promiscuous mode [ 489.456763][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.979064][ T6278] bridge_slave_0: left allmulticast mode [ 490.052494][ T6278] bridge_slave_0: left promiscuous mode [ 490.092774][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.264650][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 490.274677][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 490.282387][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 490.413986][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 490.422245][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 490.479705][ T9695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1136'. [ 490.519295][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'. [ 490.562629][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 491.532626][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 491.540115][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 491.591857][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 491.604399][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 492.425011][ T10] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 492.437035][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.445932][ T10] usb 4-1: Product: syz [ 492.450139][ T10] usb 4-1: Manufacturer: syz [ 492.454786][ T10] usb 4-1: SerialNumber: syz [ 492.462820][ T10] usb 4-1: config 0 descriptor?? [ 492.472294][ T10] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 492.492665][ T55] Bluetooth: hci1: command tx timeout [ 492.773157][ T6278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.796217][ T6278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.066004][ T6278] bond0 (unregistering): Released all slaves [ 493.402769][ T5898] usb 4-1: USB disconnect, device number 14 [ 494.812802][ T55] Bluetooth: hci1: command tx timeout [ 496.957453][ T55] Bluetooth: hci1: command tx timeout [ 497.598018][ T9758] serio: Serial port ptm0 [ 498.799840][ T9764] fuse: Unknown parameter 'fd00000000000000000003' [ 499.008747][ T55] Bluetooth: hci1: command tx timeout [ 499.685531][ T9767] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1156'. [ 499.705837][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 499.822317][ T9688] chnl_net:caif_netlink_parms(): no params data found [ 499.997776][ T9776] Invalid ELF header magic: != ELF [ 500.482524][ T969] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 501.354249][ T6278] hsr_slave_0: left promiscuous mode [ 501.392625][ T6278] hsr_slave_1: left promiscuous mode [ 501.413738][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.442568][ T969] usb 1-1: Using ep0 maxpacket: 8 [ 501.453528][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.454597][ T969] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 501.483933][ T6278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.488308][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 501.501587][ T6278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.528501][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 501.538635][ T9795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1163'. [ 501.555538][ T969] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 501.569213][ T6278] veth1_macvtap: left promiscuous mode [ 501.574310][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.588035][ T6278] veth0_macvtap: left promiscuous mode [ 501.609798][ T6278] veth1_vlan: left promiscuous mode [ 501.612458][ T969] usb 1-1: Product: syz [ 501.621485][ T6278] veth0_vlan: left promiscuous mode [ 501.642458][ T969] usb 1-1: Manufacturer: syz [ 501.647105][ T969] usb 1-1: SerialNumber: syz [ 501.669226][ T969] usb 1-1: config 0 descriptor?? [ 501.686238][ T969] streamzap 1-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 501.916797][ T5898] usb 1-1: USB disconnect, device number 3 [ 502.762383][ T9815] loop5: detected capacity change from 0 to 128 [ 502.775038][ T9815] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 502.784412][ T9815] System zones: 1-3, 19-19, 35-36 [ 502.794580][ T9815] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 503.023747][ T9815] ext4 filesystem being mounted at /199/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 503.055677][ C0] vkms_vblank_simulate: vblank timer overrun [ 503.298610][ T9820] serio: Serial port ptm0 [ 504.351829][ T9826] fuse: Unknown parameter 'fd00000000000000000003' [ 504.414015][ T5844] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 504.751552][ T9831] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1171'. [ 504.780539][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1171'. [ 506.127341][ T6278] team0 (unregistering): Port device team_slave_1 removed [ 506.198893][ T6278] team0 (unregistering): Port device team_slave_0 removed [ 507.891892][ T9688] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.903117][ T9688] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.910309][ T9688] bridge_slave_0: entered allmulticast mode [ 507.931068][ T9688] bridge_slave_0: entered promiscuous mode [ 508.052649][ T969] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 508.092983][ T9688] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.100208][ T9688] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.107504][ T9688] bridge_slave_1: entered allmulticast mode [ 508.118994][ T9688] bridge_slave_1: entered promiscuous mode [ 508.220521][ T969] usb 1-1: Using ep0 maxpacket: 8 [ 508.230457][ T969] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 508.249855][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1179'. [ 508.257577][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 508.278074][ T9688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.291004][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 508.315524][ T969] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 508.335239][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.517591][ T969] usb 1-1: Product: syz [ 508.521802][ T969] usb 1-1: Manufacturer: syz [ 508.542328][ T969] usb 1-1: SerialNumber: syz [ 508.575949][ T9688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.526834][ T969] usb 1-1: config 0 descriptor?? [ 509.546154][ T969] streamzap 1-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 510.062562][ T9862] serio: Serial port ptm0 [ 510.549429][ T969] usb 1-1: USB disconnect, device number 4 [ 510.839561][ T9688] team0: Port device team_slave_0 added [ 511.531584][ T9688] team0: Port device team_slave_1 added [ 511.596190][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.603882][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.083530][ T9886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1190'. [ 512.102570][ T9688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.119773][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 512.132635][ T9688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.209235][ T9688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.224831][ T9688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.231792][ T9688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.037370][ T9688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.234297][ T9906] loop1: detected capacity change from 0 to 512 [ 514.323831][ T9906] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.1194: bg 0: block 35: padding at end of block bitmap is not set [ 514.367639][ T9906] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 514.525440][ T9911] serio: Serial port ptm0 [ 514.715675][ T9906] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #13: comm syz.1.1194: invalid indirect mapped block 4294967295 (level 1) [ 514.846468][ T9906] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #13: comm syz.1.1194: invalid indirect mapped block 4294967295 (level 2) [ 514.941771][ T9688] hsr_slave_0: entered promiscuous mode [ 514.964240][ T9688] hsr_slave_1: entered promiscuous mode [ 514.980528][ T9906] EXT4-fs (loop1): 1 truncate cleaned up [ 514.987373][ T9688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.003237][ T9906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.018838][ T9688] Cannot create hsr debugfs directory [ 515.136580][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'. [ 515.323517][ T9906] hsr_slave_0: left promiscuous mode [ 515.366316][ T9906] hsr_slave_1: left promiscuous mode [ 515.489123][ T9916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1194'. [ 516.006619][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.092596][ T9376] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 516.204916][ T9688] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 516.298961][ T9688] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 516.357832][ T9688] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 516.522547][ T9376] usb 5-1: Using ep0 maxpacket: 8 [ 516.545767][ T9376] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 517.353663][ T9688] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 517.542942][ T9376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 517.562469][ T9376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 518.234571][ T9941] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1205'. [ 518.244689][ T9376] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 518.263650][ T9376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.271677][ T9376] usb 5-1: Product: syz [ 518.275916][ T9376] usb 5-1: Manufacturer: syz [ 518.280536][ T9376] usb 5-1: SerialNumber: syz [ 518.290510][ T9376] usb 5-1: config 0 descriptor?? [ 518.300937][ T9376] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 519.156387][ T9952] serio: Serial port ptm0 [ 519.336016][ T5898] usb 5-1: USB disconnect, device number 10 [ 519.906178][ T9688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.002294][ T9688] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.055090][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.062291][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.076559][ T9961] Invalid ELF header magic: != ELF [ 520.099085][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.106295][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.422035][ T9968] syz.3.1215 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 521.469058][ T9688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 523.566598][ T9995] netlink: 'syz.4.1221': attribute type 4 has an invalid length. [ 523.887522][ T9688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.974346][ T9999] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1223'. [ 524.301537][T10009] Invalid ELF header magic: != ELF [ 524.422652][T10012] overlayfs: failed to resolve './file1': -2 [ 524.592489][ T5147] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 525.025627][T10021] 9pnet_virtio: no channels available for device syz [ 525.592511][ T5147] usb 5-1: Using ep0 maxpacket: 8 [ 525.636720][ T5147] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 525.710220][ T5147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 525.732243][ T9688] veth0_vlan: entered promiscuous mode [ 525.794076][ T5147] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 525.815883][ T9688] veth1_vlan: entered promiscuous mode [ 525.858440][T10023] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 525.883216][ T5147] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 525.892283][ T5147] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.208266][ T5147] usb 5-1: Product: syz [ 526.213139][ T5147] usb 5-1: Manufacturer: syz [ 526.224252][ T5147] usb 5-1: SerialNumber: syz [ 526.232129][ T5147] usb 5-1: config 0 descriptor?? [ 526.241170][ T5147] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 527.181943][ T9688] veth0_macvtap: entered promiscuous mode [ 527.194926][ T5898] usb 5-1: USB disconnect, device number 11 [ 527.431465][ T9688] veth1_macvtap: entered promiscuous mode [ 527.583797][ T9688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.652836][ T9688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.690536][ T9688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.712623][T10037] netlink: 'syz.5.1235': attribute type 4 has an invalid length. [ 527.772689][ T9688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.052644][ T9688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.064067][ T9688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.074876][ T9688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.087363][ T9688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.097768][ T9688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.109688][ T9688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.519488][ T9688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.858940][ T9688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.876521][ T9688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.887639][ T9688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.898607][ T9688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.922489][ T9688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.051120][T10049] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1238'. [ 529.197304][T10053] Invalid ELF header magic: != ELF [ 529.239378][ T9688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.252070][ T9688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.269245][ T9688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.279166][ T9688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.289987][ T9688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.124022][ T9688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.314408][ T9688] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.371784][ T9688] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.449361][ T9688] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.474839][ T9688] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.553556][T10063] overlayfs: failed to resolve './file1': -2 [ 530.915380][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.943088][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.990406][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.022456][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.107038][T10086] netlink: 'syz.3.1250': attribute type 4 has an invalid length. [ 535.123901][T10106] overlayfs: failed to resolve './file1': -2 [ 538.133735][T10138] netlink: 'syz.3.1265': attribute type 4 has an invalid length. [ 538.149574][T10139] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 539.502075][T10158] Invalid ELF header magic: != ELF [ 543.213521][T10192] netlink: 'syz.4.1282': attribute type 4 has an invalid length. [ 543.386944][T10190] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 543.965907][T10206] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1287'. [ 545.073590][T10218] openvswitch: netlink: Message has 8 unknown bytes. [ 546.984354][ T30] audit: type=1326 audit(1744861771.895:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 547.086144][ T30] audit: type=1326 audit(1744861771.945:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 547.109610][ T30] audit: type=1326 audit(1744861771.955:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 547.136322][ T30] audit: type=1326 audit(1744861771.955:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10225 comm="syz.1.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 547.455091][T10240] netlink: 'syz.6.1299': attribute type 4 has an invalid length. [ 550.939812][T10271] loop5: detected capacity change from 0 to 512 [ 551.041214][T10271] EXT4-fs error (device loop5): ext4_init_orphan_info:586: comm syz.5.1311: inode #0: comm syz.5.1311: iget: illegal inode # [ 551.103589][T10271] EXT4-fs (loop5): get orphan inode failed [ 551.121455][T10271] EXT4-fs (loop5): mount failed [ 551.180229][ T30] audit: type=1326 audit(1744861776.085:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10276 comm="syz.6.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98ba18e169 code=0x7ffc0000 [ 551.283867][ T30] audit: type=1326 audit(1744861776.115:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10276 comm="syz.6.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98ba18e169 code=0x7ffc0000 [ 551.309396][T10283] netlink: 'syz.1.1313': attribute type 4 has an invalid length. [ 551.378252][ T30] audit: type=1326 audit(1744861776.115:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10276 comm="syz.6.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98ba18e169 code=0x7ffc0000 [ 551.482572][ T30] audit: type=1326 audit(1744861776.115:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10276 comm="syz.6.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98ba18e169 code=0x7ffc0000 [ 551.545106][ T30] audit: type=1326 audit(1744861776.115:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10276 comm="syz.6.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98ba18e169 code=0x7ffc0000 [ 551.569859][ T30] audit: type=1326 audit(1744861776.115:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10276 comm="syz.6.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f98ba18e169 code=0x7ffc0000 [ 552.087746][T10301] syz.1.1323 uses obsolete (PF_INET,SOCK_PACKET) [ 552.133521][T10301] 9pnet_fd: Insufficient options for proto=fd [ 552.697452][ T5856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 552.706912][T10312] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 552.715148][T10312] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 552.723896][T10312] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 552.731732][T10312] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 554.145777][T10330] 9pnet_virtio: no channels available for device syz [ 554.682816][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 554.682840][ T30] audit: type=1326 audit(1744861779.575:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.5.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8403f8e169 code=0x7ffc0000 [ 554.751057][T10332] netlink: 'syz.4.1331': attribute type 4 has an invalid length. [ 554.791771][T10329] loop5: detected capacity change from 0 to 512 [ 554.854291][T10312] Bluetooth: hci6: command tx timeout [ 554.912574][ T30] audit: type=1326 audit(1744861779.575:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.5.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8403f8e169 code=0x7ffc0000 [ 554.979243][ T30] audit: type=1326 audit(1744861779.575:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.5.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8403f8e169 code=0x7ffc0000 [ 555.007333][T10329] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 555.072701][ T30] audit: type=1326 audit(1744861779.575:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.5.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8403f8e169 code=0x7ffc0000 [ 555.095044][ C0] vkms_vblank_simulate: vblank timer overrun [ 555.168424][T10329] EXT4-fs (loop5): 1 truncate cleaned up [ 555.212696][ T30] audit: type=1326 audit(1744861779.575:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.5.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8403f8e169 code=0x7ffc0000 [ 555.215834][T10329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.313474][T10310] chnl_net:caif_netlink_parms(): no params data found [ 555.358455][ T30] audit: type=1326 audit(1744861779.575:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.5.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8403f8e169 code=0x7ffc0000 [ 555.380797][ C0] vkms_vblank_simulate: vblank timer overrun [ 555.472473][ T30] audit: type=1326 audit(1744861779.575:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.5.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8403f8e169 code=0x7ffc0000 [ 555.494813][ C0] vkms_vblank_simulate: vblank timer overrun [ 555.549923][ T30] audit: type=1326 audit(1744861779.645:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.5.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8403f8e169 code=0x7ffc0000 [ 555.585714][ T30] audit: type=1326 audit(1744861779.645:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.5.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8403f8e169 code=0x7ffc0000 [ 555.779385][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.982952][ T30] audit: type=1326 audit(1744861779.675:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.5.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8403f8e169 code=0x7ffc0000 [ 556.728529][T10363] serio: Serial port ptm0 [ 556.893082][T10312] Bluetooth: hci6: command tx timeout [ 557.737867][T10372] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1344'. [ 557.805662][T10310] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.842892][T10310] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.870405][T10310] bridge_slave_0: entered allmulticast mode [ 557.912235][T10310] bridge_slave_0: entered promiscuous mode [ 557.941121][T10310] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.948960][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1344'. [ 557.979159][T10310] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.009154][T10310] bridge_slave_1: entered allmulticast mode [ 558.038992][T10310] bridge_slave_1: entered promiscuous mode [ 558.561356][T10387] 9pnet_virtio: no channels available for device syz [ 559.222473][T10312] Bluetooth: hci6: command tx timeout [ 559.796063][T10310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.826734][T10310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.081134][T10310] team0: Port device team_slave_0 added [ 560.126862][T10310] team0: Port device team_slave_1 added [ 560.150709][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 560.150731][ T30] audit: type=1326 audit(1744861785.045:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10401 comm="syz.3.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516cb8e169 code=0x7ffc0000 [ 560.179299][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.326588][ T30] audit: type=1326 audit(1744861785.045:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10401 comm="syz.3.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516cb8e169 code=0x7ffc0000 [ 560.470876][T10310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.482583][ T30] audit: type=1326 audit(1744861785.145:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10401 comm="syz.3.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f516cb8e169 code=0x7ffc0000 [ 560.517028][T10310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.542963][ C0] vkms_vblank_simulate: vblank timer overrun [ 560.648764][ T30] audit: type=1326 audit(1744861785.145:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10401 comm="syz.3.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516cb8e169 code=0x7ffc0000 [ 560.682772][ T30] audit: type=1326 audit(1744861785.145:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10401 comm="syz.3.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516cb8e169 code=0x7ffc0000 [ 560.802221][ T30] audit: type=1326 audit(1744861785.145:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10401 comm="syz.3.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f516cb8e169 code=0x7ffc0000 [ 560.915823][ T30] audit: type=1326 audit(1744861785.145:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10401 comm="syz.3.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516cb8e169 code=0x7ffc0000 [ 561.041145][ T30] audit: type=1326 audit(1744861785.145:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10401 comm="syz.3.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f516cb8e169 code=0x7ffc0000 [ 561.378929][T10312] Bluetooth: hci6: command tx timeout [ 561.413762][ T30] audit: type=1326 audit(1744861785.145:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10401 comm="syz.3.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516cb8e169 code=0x7ffc0000 [ 561.624830][T10310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.638199][T10310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.645463][T10310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.675385][T10310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.446917][T10420] GUP no longer grows the stack in syz.1.1360 (10420): 200000004000-20000000a000 (200000002000) [ 562.459890][T10420] CPU: 0 UID: 0 PID: 10420 Comm: syz.1.1360 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 562.459939][T10420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 562.459962][T10420] Call Trace: [ 562.459974][T10420] [ 562.459987][T10420] dump_stack_lvl+0x16c/0x1f0 [ 562.460048][T10420] gup_vma_lookup+0x1d2/0x220 [ 562.460096][T10420] __get_user_pages+0x234/0x36f0 [ 562.460161][T10420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.460211][T10420] ? __pfx___get_user_pages+0x10/0x10 [ 562.460257][T10420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.460313][T10420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.460368][T10420] get_user_pages_remote+0x258/0xb20 [ 562.460422][T10420] ? __pfx_mtree_load+0x10/0x10 [ 562.460483][T10420] ? __pfx_get_user_pages_remote+0x10/0x10 [ 562.460537][T10420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.460589][T10420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.460650][T10420] __access_remote_vm+0x233/0x9d0 [ 562.460703][T10420] ? __pfx___access_remote_vm+0x10/0x10 [ 562.460759][T10420] proc_pid_cmdline_read+0x4de/0x900 [ 562.460821][T10420] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 562.460881][T10420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.460925][T10420] ? rw_verify_area+0xcf/0x680 [ 562.460974][T10420] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 562.461029][T10420] vfs_readv+0x6bf/0x8a0 [ 562.461092][T10420] ? __pfx_vfs_readv+0x10/0x10 [ 562.461155][T10420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.461224][T10420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.461268][T10420] ? __fget_files+0x20e/0x3c0 [ 562.461338][T10420] ? do_preadv+0x1af/0x270 [ 562.461383][T10420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.461428][T10420] do_preadv+0x1af/0x270 [ 562.461478][T10420] ? __pfx_do_preadv+0x10/0x10 [ 562.461525][T10420] ? rcu_is_watching+0x12/0xc0 [ 562.461573][T10420] ? srso_alias_return_thunk+0x5/0xfbef5 [ 562.461638][T10420] do_syscall_64+0xcd/0x260 [ 562.461701][T10420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.461738][T10420] RIP: 0033:0x7fe33398e169 [ 562.461766][T10420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.461803][T10420] RSP: 002b:00007fe3347e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 562.461837][T10420] RAX: ffffffffffffffda RBX: 00007fe333bb5fa0 RCX: 00007fe33398e169 [ 562.461862][T10420] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000009 [ 562.461886][T10420] RBP: 00007fe333a10a68 R08: 00000000fffffff9 R09: 0000000000000000 [ 562.461909][T10420] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000 [ 562.461932][T10420] R13: 0000000000000000 R14: 00007fe333bb5fa0 R15: 00007ffe82d77258 [ 562.461983][T10420] [ 562.731676][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.307280][T10310] hsr_slave_0: entered promiscuous mode [ 563.320636][T10310] hsr_slave_1: entered promiscuous mode [ 563.329378][T10310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.376066][T10310] Cannot create hsr debugfs directory [ 563.385492][T10420] netlink: 'syz.1.1360': attribute type 11 has an invalid length. [ 563.434286][T10420] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1360'. [ 563.512991][T10420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.026411][T10440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1367'. [ 564.053934][T10440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1367'. [ 564.082190][T10442] loop3: detected capacity change from 0 to 512 [ 564.111596][T10442] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 564.136226][T10442] EXT4-fs (loop3): orphan cleanup on readonly fs [ 564.143240][T10442] EXT4-fs warning (device loop3): ext4_enable_quotas:7166: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 564.158187][T10442] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 564.166618][T10442] EXT4-fs error (device loop3): ext4_orphan_get:1416: comm syz.3.1368: bad orphan inode 768 [ 564.270162][T10442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 564.984702][T10442] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 565.043428][T10442] EXT4-fs warning (device loop3): ext4_multi_mount_protect:397: Unable to create kmmpd thread for loop3. [ 565.160745][T10310] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 565.210895][T10310] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 565.233684][ T30] audit: type=1326 audit(1744861790.135:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0a38e169 code=0x7ffc0000 [ 565.281826][T10310] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 565.303281][ T30] audit: type=1326 audit(1744861790.145:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0a38e169 code=0x7ffc0000 [ 565.344911][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.368403][T10310] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 565.377665][ T30] audit: type=1326 audit(1744861790.175:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d0a38e169 code=0x7ffc0000 [ 565.428175][ T30] audit: type=1326 audit(1744861790.175:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0a38e169 code=0x7ffc0000 [ 565.528789][ T30] audit: type=1326 audit(1744861790.175:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0a38e169 code=0x7ffc0000 [ 565.647202][ T30] audit: type=1326 audit(1744861790.175:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d0a38e169 code=0x7ffc0000 [ 565.805742][T10452] serio: Serial port ptm0 [ 565.938762][ T30] audit: type=1326 audit(1744861790.175:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0a38e169 code=0x7ffc0000 [ 565.962221][ T30] audit: type=1326 audit(1744861790.175:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0a38e169 code=0x7ffc0000 [ 565.985569][ T30] audit: type=1326 audit(1744861790.175:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d0a38e169 code=0x7ffc0000 [ 566.040811][ T30] audit: type=1326 audit(1744861790.175:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10465 comm="syz.4.1377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d0a38e169 code=0x7ffc0000 [ 566.769800][T10310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.929923][T10310] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.006487][ T6842] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.013707][ T6842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.059739][T10487] netlink: 344 bytes leftover after parsing attributes in process `syz.3.1383'. [ 567.088905][ T2903] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.096140][ T2903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.318734][T10310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 569.208470][T10310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.835895][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 570.835921][ T30] audit: type=1326 audit(1744861795.745:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 570.906805][ T9] Process accounting resumed [ 571.022728][ T30] audit: type=1326 audit(1744861795.745:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 571.187614][ T30] audit: type=1326 audit(1744861795.775:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 571.209962][ C0] vkms_vblank_simulate: vblank timer overrun [ 571.323320][ T30] audit: type=1326 audit(1744861795.775:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 571.347584][ T30] audit: type=1326 audit(1744861795.775:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 571.370087][ T30] audit: type=1326 audit(1744861795.785:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 571.392566][ T30] audit: type=1326 audit(1744861795.785:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 571.422599][ T30] audit: type=1326 audit(1744861795.785:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 571.465382][ T30] audit: type=1326 audit(1744861795.785:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 571.512464][ T30] audit: type=1326 audit(1744861795.795:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10533 comm="syz.1.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 571.789266][T10310] veth0_vlan: entered promiscuous mode [ 571.892275][T10557] pimreg: entered allmulticast mode [ 571.910748][T10557] pimreg: left allmulticast mode [ 571.960212][T10310] veth1_vlan: entered promiscuous mode [ 572.550051][T10565] fuse: Unknown parameter 'group_id00000000000000000000' [ 573.163937][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.170302][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.226385][T10310] veth0_macvtap: entered promiscuous mode [ 573.290261][T10310] veth1_macvtap: entered promiscuous mode [ 573.360001][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.371049][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.383412][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.393921][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.403830][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.414330][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.424201][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.434672][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.444824][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.455989][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.466057][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.485394][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.501895][T10310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.541658][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.566713][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.579463][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.612342][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.622271][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.650849][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.736072][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.768746][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.796479][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.821664][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.871219][T10575] loop5: detected capacity change from 0 to 512 [ 573.884914][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.920796][T10575] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 573.942260][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.968274][T10310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.989116][T10310] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.991698][T10575] EXT4-fs (loop5): orphan cleanup on readonly fs [ 574.006557][T10575] EXT4-fs warning (device loop5): ext4_enable_quotas:7166: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 574.022537][T10575] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 574.029279][T10575] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm syz.5.1411: bad orphan inode 768 [ 574.088586][T10585] 9pnet_virtio: no channels available for device syz [ 574.731281][T10575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 574.886210][T10310] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.900358][T10310] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.920016][T10310] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.952643][T10575] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 575.049393][T10575] EXT4-fs warning (device loop5): ext4_multi_mount_protect:397: Unable to create kmmpd thread for loop5. [ 575.323468][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.409644][ T6582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.428972][ T6582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.553603][ T6582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.577756][ T6582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.684616][T10602] block device autoloading is deprecated and will be removed. [ 575.770333][T10602] : attempt to access beyond end of device [ 575.770333][T10602] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 576.609676][T10621] fuse: Unknown parameter 'group_id00000000000000000000' [ 577.821145][T10632] 9pnet_virtio: no channels available for device syz [ 578.839714][T10642] loop7: detected capacity change from 0 to 512 [ 578.984018][T10642] EXT4-fs (loop7): 1 orphan inode deleted [ 578.991978][T10642] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.026824][ T6582] __quota_error: 35 callbacks suppressed [ 579.026847][ T6582] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 579.027905][T10647] loop5: detected capacity change from 0 to 1024 [ 579.063208][ T6582] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 1 [ 579.075166][T10647] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 579.106851][T10642] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 579.114413][T10647] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 579.159371][T10647] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (23579!=20869) [ 579.192683][T10647] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: inode #2: comm syz.5.1436: iget: special inode unallocated [ 579.234359][T10647] EXT4-fs (loop5): no journal found [ 579.426926][T10310] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.854423][T10664] fuse: Unknown parameter 'group_id00000000000000000000' [ 581.417561][T10674] serio: Serial port ptm0 [ 582.181256][T10690] 9pnet_virtio: no channels available for device syz [ 583.173569][T10698] Invalid ELF header magic: != ELF [ 584.493853][T10709] loop3: detected capacity change from 0 to 2048 [ 585.146978][T10709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.485142][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.778202][T10724] 9pnet_fd: Insufficient options for proto=fd [ 586.358215][T10740] Invalid ELF header magic: != ELF [ 586.530017][T10744] 9pnet_virtio: no channels available for device syz [ 587.739493][T10757] fuse: Bad value for 'user_id' [ 587.744644][T10757] fuse: Bad value for 'user_id' [ 589.004174][T10770] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1481'. [ 589.299370][T10779] Invalid ELF header magic: != ELF [ 590.876588][T10788] loop7: detected capacity change from 0 to 8192 [ 591.361156][T10807] serio: Serial port ptm0 [ 591.633559][T10815] netlink: 'syz.7.1497': attribute type 1 has an invalid length. [ 593.622532][T10865] loop3: detected capacity change from 0 to 1024 [ 593.645604][T10865] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 593.673686][T10865] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 593.724816][T10865] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 593.753258][T10865] EXT4-fs (loop3): orphan cleanup on readonly fs [ 593.821800][T10865] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 593.916553][T10865] EXT4-fs (loop3): Remounting filesystem read-only [ 593.959764][T10865] Quota error (device loop3): write_blk: dquota write failed [ 594.023590][T10865] Quota error (device loop3): write_blk: dquota write failed [ 594.100063][T10865] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 594.124462][T10865] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 594.320637][T10875] loop6: detected capacity change from 0 to 256 [ 594.477180][T10875] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 594.634056][T10865] EXT4-fs (loop3): 1 orphan inode deleted [ 595.108081][T10865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 595.207708][T10865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.513107][T10885] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1528'. [ 595.743803][ T30] audit: type=1326 audit(1744861820.655:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 595.976709][ T30] audit: type=1326 audit(1744861820.685:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 596.056871][ T30] audit: type=1326 audit(1744861820.685:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 596.079991][ T30] audit: type=1326 audit(1744861820.685:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 596.127918][ T30] audit: type=1326 audit(1744861820.685:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10889 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 596.958252][ T30] audit: type=1326 audit(1744861821.855:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10906 comm="syz.5.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8403f8e169 code=0x7ffc0000 [ 597.283564][T10916] IPv4: Oversized IP packet from 127.202.26.0 [ 597.924266][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 597.938364][T10937] serio: Serial port ptm0 [ 598.534290][T10936] overlayfs: missing 'lowerdir' [ 598.822547][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 598.844928][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 598.895407][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 598.937204][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 598.977451][ T10] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 599.018800][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.037579][ T10] usb 5-1: Product: syz [ 599.048495][T10947] hub 2-0:1.0: USB hub found [ 599.058297][ T10] usb 5-1: Manufacturer: syz [ 599.071203][T10947] hub 2-0:1.0: 1 port detected [ 599.094163][ T10] usb 5-1: SerialNumber: syz [ 599.195114][ T10] usb 5-1: config 0 descriptor?? [ 599.264603][ T10] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 600.283091][ T10] usb 5-1: USB disconnect, device number 12 [ 601.520358][T10964] loop6: detected capacity change from 0 to 256 [ 601.596507][T10964] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000400) [ 601.632489][T10964] FAT-fs (loop6): Filesystem has been set read-only [ 602.931291][T10986] fuse: Bad value for 'fd' [ 603.044350][T10984] overlayfs: missing 'workdir' [ 603.726133][T11003] dvmrp5: entered allmulticast mode [ 603.750547][T11005] dvmrp5: left allmulticast mode [ 604.107025][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 604.872444][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 604.881476][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 604.935225][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 604.972885][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 604.988927][ T10] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 605.010140][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.032937][ T10] usb 4-1: Product: syz [ 605.037126][ T10] usb 4-1: Manufacturer: syz [ 605.041764][ T10] usb 4-1: SerialNumber: syz [ 605.191315][ T10] usb 4-1: config 0 descriptor?? [ 605.309038][ T10] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 605.434175][ T10] usb 4-1: USB disconnect, device number 15 [ 606.089316][T11032] 9pnet_virtio: no channels available for device syz [ 606.697917][T11035] serio: Serial port ptm0 [ 607.197867][T11042] overlayfs: missing 'workdir' [ 607.756067][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 607.756093][ T30] audit: type=1326 audit(1744861832.655:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11046 comm="syz.3.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516cb8e169 code=0x7ffc0000 [ 607.895696][ T30] audit: type=1326 audit(1744861832.665:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11046 comm="syz.3.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f516cb8e169 code=0x7ffc0000 [ 607.994593][ T30] audit: type=1326 audit(1744861832.665:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11046 comm="syz.3.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f516cb8e169 code=0x7ffc0000 [ 609.263677][ T30] audit: type=1326 audit(1744861834.175:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.1.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 609.405005][ T30] audit: type=1326 audit(1744861834.175:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.1.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 609.427354][ C0] vkms_vblank_simulate: vblank timer overrun [ 609.522586][T11067] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1592'. [ 609.581503][ T30] audit: type=1326 audit(1744861834.175:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.1.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 609.604627][ T30] audit: type=1326 audit(1744861834.175:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.1.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 609.627366][ T30] audit: type=1326 audit(1744861834.185:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.1.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 609.655972][ T30] audit: type=1326 audit(1744861834.395:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.1.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 610.349504][ T30] audit: type=1326 audit(1744861834.395:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11063 comm="syz.1.1591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 611.195179][T11079] IPv6: Can't replace route, no match found [ 611.293225][T11081] netlink: 'syz.1.1596': attribute type 13 has an invalid length. [ 611.462511][T11085] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1598'. [ 611.502940][T11085] unsupported nlmsg_type 40 [ 611.532981][ T5905] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 611.702875][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 611.723098][ T5905] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 611.748265][T11089] netlink: 'syz.1.1601': attribute type 4 has an invalid length. [ 611.751799][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 611.821189][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 611.844248][ T5905] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 611.861291][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.873259][ T5905] usb 4-1: Product: syz [ 611.877446][ T5905] usb 4-1: Manufacturer: syz [ 611.921664][ T5905] usb 4-1: SerialNumber: syz [ 611.948488][ T5905] usb 4-1: config 0 descriptor?? [ 611.966727][ T5905] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 612.130253][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1605'. [ 612.172049][ T5905] usb 4-1: USB disconnect, device number 16 [ 612.825902][T11114] serio: Serial port ptm0 [ 614.039373][T11129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1616'. [ 616.091476][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 617.336641][T11161] loop5: detected capacity change from 0 to 1024 [ 617.344099][T11161] EXT4-fs: Ignoring removed orlov option [ 617.426245][T11161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.672830][T11161] EXT4-fs: Ignoring removed orlov option [ 617.695209][T11161] EXT4-fs (loop5): can't enable nombcache during remount [ 617.877023][ T5844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.693332][T11186] netlink: 344 bytes leftover after parsing attributes in process `syz.1.1636'. [ 623.354205][T11219] serio: Serial port ptm0 [ 623.365723][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 623.365746][ T30] audit: type=1326 audit(1744861848.275:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.5.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8403f8e169 code=0x7ffc0000 [ 623.445681][ T30] audit: type=1326 audit(1744861848.285:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.5.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8403f8e169 code=0x7ffc0000 [ 623.612235][ T30] audit: type=1326 audit(1744861848.285:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.5.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8403f8e169 code=0x7ffc0000 [ 623.655934][ T30] audit: type=1326 audit(1744861848.285:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.5.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8403f8e169 code=0x7ffc0000 [ 623.793705][ T30] audit: type=1326 audit(1744861848.285:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.5.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8403f8e169 code=0x7ffc0000 [ 623.882707][ T30] audit: type=1326 audit(1744861848.285:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.5.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8403f8e169 code=0x7ffc0000 [ 623.905080][ C0] vkms_vblank_simulate: vblank timer overrun [ 623.982304][ T30] audit: type=1326 audit(1744861848.285:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.5.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8403f8e169 code=0x7ffc0000 [ 624.004886][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.023666][T11235] netlink: 344 bytes leftover after parsing attributes in process `syz.6.1652'. [ 624.056199][ T30] audit: type=1326 audit(1744861848.295:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.5.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8403f8e169 code=0x7ffc0000 [ 624.128049][ T30] audit: type=1326 audit(1744861848.295:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.5.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8403f8e169 code=0x7ffc0000 [ 624.231383][ T30] audit: type=1326 audit(1744861848.295:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11223 comm="syz.5.1647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8403f8e169 code=0x7ffc0000 [ 626.507574][T11269] 9pnet_virtio: no channels available for device syz [ 628.598619][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 628.598645][ T30] audit: type=1326 audit(1744861853.505:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.7.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8d78e169 code=0x7ffc0000 [ 629.450492][ T30] audit: type=1326 audit(1744861853.585:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.7.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8d78e169 code=0x7ffc0000 [ 629.472920][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.479371][ T30] audit: type=1326 audit(1744861853.645:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.7.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a8d78e169 code=0x7ffc0000 [ 629.591594][ T30] audit: type=1326 audit(1744861854.085:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.7.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8d78e169 code=0x7ffc0000 [ 629.638945][ T30] audit: type=1326 audit(1744861854.085:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.7.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8d78e169 code=0x7ffc0000 [ 629.672892][ T30] audit: type=1326 audit(1744861854.135:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.7.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f5a8d78e169 code=0x7ffc0000 [ 629.746403][ T30] audit: type=1326 audit(1744861854.135:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.7.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8d78e169 code=0x7ffc0000 [ 629.842551][ T30] audit: type=1326 audit(1744861854.135:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.7.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8d78e169 code=0x7ffc0000 [ 630.362900][ T9376] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 630.702446][ T9376] usb 5-1: Using ep0 maxpacket: 8 [ 630.753062][ T9376] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 630.816480][ T9376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 630.883026][ T9376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 630.955126][ T9376] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 631.002555][ T9376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.158061][ T9376] usb 5-1: Product: syz [ 631.162282][ T9376] usb 5-1: Manufacturer: syz [ 631.168685][ T9376] usb 5-1: SerialNumber: syz [ 632.259930][T11330] 9pnet_virtio: no channels available for device syz [ 632.483573][ T9376] usb 5-1: config 0 descriptor?? [ 632.616703][ T9376] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 634.468464][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.474917][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.823983][ T10] usb 5-1: USB disconnect, device number 13 [ 636.082890][T11360] Illegal XDP return value 3654802014 on prog (id 435) dev syz_tun, expect packet loss! [ 636.187568][T11361] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 636.831070][T11374] loop1: detected capacity change from 0 to 512 [ 636.907265][T11377] ipt_ECN: cannot use operation on non-tcp rule [ 636.975214][ T9376] IPVS: starting estimator thread 0... [ 637.196820][T11374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 637.296429][T11374] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.373179][T11387] 9pnet_virtio: no channels available for device syz [ 638.672815][T11380] IPVS: using max 21 ests per chain, 50400 per kthread [ 638.962536][ T5905] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 639.118188][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 639.160252][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 639.169519][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 639.186550][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 639.209725][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 639.260269][ T5905] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 639.273399][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.288904][ T5905] usb 5-1: Product: syz [ 639.295512][ T5905] usb 5-1: Manufacturer: syz [ 639.301354][ T5905] usb 5-1: SerialNumber: syz [ 639.339217][ T5905] usb 5-1: config 0 descriptor?? [ 639.386978][ T5905] streamzap 5-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 639.487230][T11405] loop6: detected capacity change from 0 to 1024 [ 639.540837][T11405] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.606325][ T5905] usb 5-1: USB disconnect, device number 14 [ 640.918505][ T30] audit: type=1800 audit(1744861865.815:396): pid=11417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1707" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 640.938878][ C0] vkms_vblank_simulate: vblank timer overrun [ 641.012602][ T30] audit: type=1326 audit(1744861865.915:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.1.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 641.082543][ T30] audit: type=1326 audit(1744861865.915:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.1.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 641.152528][ T30] audit: type=1326 audit(1744861865.925:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.1.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 641.240730][ T30] audit: type=1326 audit(1744861865.925:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.1.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 641.322469][ T30] audit: type=1326 audit(1744861865.925:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.1.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 641.422784][ T30] audit: type=1326 audit(1744861865.925:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.1.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 641.492425][ T30] audit: type=1326 audit(1744861865.925:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.1.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 641.542438][ T30] audit: type=1326 audit(1744861865.925:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.1.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 641.598521][ T30] audit: type=1326 audit(1744861865.925:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11418 comm="syz.1.1710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe33398e169 code=0x7ffc0000 [ 643.085935][T11451] netlink: 'syz.1.1724': attribute type 4 has an invalid length. [ 643.146414][T11449] loop3: detected capacity change from 0 to 1024 [ 643.173688][T11449] EXT4-fs: Ignoring removed orlov option [ 643.232548][T11449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 643.387184][T11449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.757690][T11468] loop7: detected capacity change from 0 to 128 [ 643.833196][ T5837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.993548][T11473] syz.7.1729: attempt to access beyond end of device [ 643.993548][T11473] loop7: rw=0, sector=121, nr_sectors = 8 limit=128 [ 644.166398][T10878] kworker/u8:18: attempt to access beyond end of device [ 644.166398][T10878] loop7: rw=1, sector=129, nr_sectors = 912 limit=128 [ 644.406275][ T9688] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.453737][T11489] netlink: 'syz.1.1740': attribute type 4 has an invalid length. [ 644.950290][T11500] 9pnet_virtio: no channels available for device syz [ 646.730600][T11515] loop6: detected capacity change from 0 to 512 [ 646.738210][T11515] EXT4-fs: Ignoring removed nobh option [ 646.877814][T11515] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #16: comm syz.6.1748: corrupted inode contents [ 646.938767][T11515] EXT4-fs (loop6): Remounting filesystem read-only [ 646.956160][T11515] EXT4-fs (loop6): 1 truncate cleaned up [ 646.981566][T11515] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.019358][T11523] loop4: detected capacity change from 0 to 512 [ 647.033104][T10878] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 647.053041][T11515] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.072749][T10878] __quota_error: 25 callbacks suppressed [ 647.072771][T10878] Quota error (device loop6): write_blk: dquota write failed [ 647.095793][T10878] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 647.110435][T10878] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 647.127773][T10878] Quota error (device loop6): write_blk: dquota write failed [ 647.137740][T10878] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 647.158270][T11523] Quota error (device loop4): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 647.214091][ T30] audit: type=1326 audit(1744861872.125:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11514 comm="syz.6.1748" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98ba18e169 code=0x0 [ 647.256944][T11523] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 647.274914][T10878] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 647.275198][T11533] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1748'. [ 647.332535][T11523] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1751: Failed to acquire dquot type 1 [ 647.341605][T10878] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 647.377778][T10878] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 647.406030][T11523] EXT4-fs (loop4): 1 truncate cleaned up [ 647.441500][T11523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.448684][T11538] netlink: 'syz.5.1753': attribute type 4 has an invalid length. [ 647.465750][T11539] IPv6: Can't replace route, no match found [ 647.482300][T11523] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.537439][T11523] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 647.709698][ T5843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.712019][ T9688] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.131709][T11547] 9pnet_virtio: no channels available for device syz [ 648.723962][T11546] hub 2-0:1.0: USB hub found [ 648.772846][T11546] hub 2-0:1.0: 1 port detected [ 649.069767][T11551] [ 649.072144][T11551] ====================================================== [ 649.079167][T11551] WARNING: possible circular locking dependency detected [ 649.086182][T11551] 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 Not tainted [ 649.093289][T11551] ------------------------------------------------------ [ 649.100301][T11551] syz.6.1759/11551 is trying to acquire lock: [ 649.106366][T11551] ffffffff90381b38 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x1a/0x290 [ 649.115815][T11551] [ 649.115815][T11551] but task is already holding lock: [ 649.123178][T11551] ffff888012f05070 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x60b/0x2c00 [ 649.132542][T11551] [ 649.132542][T11551] which lock already depends on the new lock. [ 649.132542][T11551] [ 649.142944][T11551] [ 649.142944][T11551] the existing dependency chain (in reverse order) is: [ 649.151959][T11551] [ 649.151959][T11551] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 649.159985][T11551] _raw_spin_lock_bh+0x33/0x40 [ 649.165297][T11551] nr_rt_device_down+0x18e/0x810 [ 649.170776][T11551] nr_device_event+0x126/0x170 [ 649.176089][T11551] notifier_call_chain+0xbc/0x410 [ 649.181665][T11551] call_netdevice_notifiers_info+0xbe/0x140 [ 649.188120][T11551] dev_close_many+0x319/0x630 [ 649.193329][T11551] netif_close+0x17f/0x230 [ 649.198273][T11551] dev_close+0xaa/0x240 [ 649.202977][T11551] bpq_device_event+0x601/0x840 [ 649.208384][T11551] notifier_call_chain+0xbc/0x410 [ 649.213964][T11551] call_netdevice_notifiers_info+0xbe/0x140 [ 649.220415][T11551] dev_close_many+0x319/0x630 [ 649.225625][T11551] netif_close+0x17f/0x230 [ 649.230576][T11551] dev_close+0xaa/0x240 [ 649.235280][T11551] bond_enslave+0x1f67/0x6050 [ 649.240496][T11551] bond_do_ioctl+0x601/0x6c0 [ 649.245623][T11551] dev_ifsioc+0xe9c/0x1f70 [ 649.250584][T11551] dev_ioctl+0x223/0x10e0 [ 649.255451][T11551] sock_do_ioctl+0x19d/0x280 [ 649.260602][T11551] sock_ioctl+0x227/0x6b0 [ 649.265465][T11551] __x64_sys_ioctl+0x193/0x200 [ 649.270772][T11551] do_syscall_64+0xcd/0x260 [ 649.275829][T11551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.282256][T11551] [ 649.282256][T11551] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 649.290110][T11551] _raw_spin_lock_bh+0x33/0x40 [ 649.295416][T11551] nr_rt_device_down+0xd3/0x810 [ 649.300802][T11551] nr_device_event+0x126/0x170 [ 649.306115][T11551] notifier_call_chain+0xbc/0x410 [ 649.311693][T11551] call_netdevice_notifiers_info+0xbe/0x140 [ 649.318143][T11551] dev_close_many+0x319/0x630 [ 649.323350][T11551] netif_close+0x17f/0x230 [ 649.328297][T11551] dev_close+0xaa/0x240 [ 649.333003][T11551] bpq_device_event+0x601/0x840 [ 649.338403][T11551] notifier_call_chain+0xbc/0x410 [ 649.343982][T11551] call_netdevice_notifiers_info+0xbe/0x140 [ 649.350433][T11551] dev_close_many+0x319/0x630 [ 649.355659][T11551] netif_close+0x17f/0x230 [ 649.360612][T11551] dev_close+0xaa/0x240 [ 649.365337][T11551] bond_enslave+0x1f67/0x6050 [ 649.370552][T11551] bond_do_ioctl+0x601/0x6c0 [ 649.375683][T11551] dev_ifsioc+0xe9c/0x1f70 [ 649.380639][T11551] dev_ioctl+0x223/0x10e0 [ 649.385511][T11551] sock_do_ioctl+0x19d/0x280 [ 649.390654][T11551] sock_ioctl+0x227/0x6b0 [ 649.395519][T11551] __x64_sys_ioctl+0x193/0x200 [ 649.400823][T11551] do_syscall_64+0xcd/0x260 [ 649.405878][T11551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.412308][T11551] [ 649.412308][T11551] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 649.420247][T11551] __lock_acquire+0x1173/0x1ba0 [ 649.425656][T11551] lock_acquire+0x179/0x350 [ 649.430693][T11551] _raw_spin_lock_bh+0x33/0x40 [ 649.436002][T11551] nr_remove_neigh+0x1a/0x290 [ 649.441213][T11551] nr_add_node+0x2408/0x2c00 [ 649.446337][T11551] nr_rt_ioctl+0x11b7/0x29b0 [ 649.451460][T11551] nr_ioctl+0x19a/0x2e0 [ 649.456166][T11551] sock_do_ioctl+0x118/0x280 [ 649.461315][T11551] sock_ioctl+0x227/0x6b0 [ 649.466185][T11551] __x64_sys_ioctl+0x193/0x200 [ 649.471489][T11551] do_syscall_64+0xcd/0x260 [ 649.476547][T11551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.482977][T11551] [ 649.482977][T11551] other info that might help us debug this: [ 649.482977][T11551] [ 649.493206][T11551] Chain exists of: [ 649.493206][T11551] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 649.493206][T11551] [ 649.507066][T11551] Possible unsafe locking scenario: [ 649.507066][T11551] [ 649.514511][T11551] CPU0 CPU1 [ 649.519871][T11551] ---- ---- [ 649.525231][T11551] lock(&nr_node->node_lock); [ 649.530013][T11551] lock(nr_node_list_lock); [ 649.537145][T11551] lock(&nr_node->node_lock); [ 649.544443][T11551] lock(nr_neigh_list_lock); [ 649.549132][T11551] [ 649.549132][T11551] *** DEADLOCK *** [ 649.549132][T11551] [ 649.557271][T11551] 1 lock held by syz.6.1759/11551: [ 649.562381][T11551] #0: ffff888012f05070 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x60b/0x2c00 [ 649.572184][T11551] [ 649.572184][T11551] stack backtrace: [ 649.578076][T11551] CPU: 1 UID: 0 PID: 11551 Comm: syz.6.1759 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(full) [ 649.578120][T11551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 649.578142][T11551] Call Trace: [ 649.578152][T11551] [ 649.578164][T11551] dump_stack_lvl+0x116/0x1f0 [ 649.578215][T11551] print_circular_bug+0x275/0x350 [ 649.578272][T11551] check_noncircular+0x14c/0x170 [ 649.578333][T11551] __lock_acquire+0x1173/0x1ba0 [ 649.578399][T11551] lock_acquire+0x179/0x350 [ 649.578428][T11551] ? nr_remove_neigh+0x1a/0x290 [ 649.578463][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.578504][T11551] ? do_raw_spin_lock+0x12c/0x2b0 [ 649.578547][T11551] _raw_spin_lock_bh+0x33/0x40 [ 649.578589][T11551] ? nr_remove_neigh+0x1a/0x290 [ 649.578622][T11551] nr_remove_neigh+0x1a/0x290 [ 649.578658][T11551] nr_add_node+0x2408/0x2c00 [ 649.578705][T11551] nr_rt_ioctl+0x11b7/0x29b0 [ 649.578747][T11551] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 649.578786][T11551] ? srso_alias_return_thunk+0xbdf7/0xfbef5 [ 649.578829][T11551] ? __pfx_aa_get_newest_label+0x10/0x10 [ 649.578875][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.578916][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.578957][T11551] ? security_capable+0x7e/0x260 [ 649.578991][T11551] nr_ioctl+0x19a/0x2e0 [ 649.579042][T11551] sock_do_ioctl+0x118/0x280 [ 649.579098][T11551] ? __pfx_sock_do_ioctl+0x10/0x10 [ 649.579154][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.579205][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.579250][T11551] sock_ioctl+0x227/0x6b0 [ 649.579282][T11551] ? __pfx_sock_ioctl+0x10/0x10 [ 649.579314][T11551] ? hook_file_ioctl_common+0x145/0x410 [ 649.579355][T11551] ? srso_alias_return_thunk+0x5/0xfbef5 [ 649.579397][T11551] ? __fget_files+0x20e/0x3c0 [ 649.579446][T11551] ? __entry_text_end+0x1020c5/0x1020c9 [ 649.579490][T11551] ? __pfx_sock_ioctl+0x10/0x10 [ 649.579524][T11551] __x64_sys_ioctl+0x193/0x200 [ 649.579567][T11551] do_syscall_64+0xcd/0x260 [ 649.579621][T11551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.579655][T11551] RIP: 0033:0x7f98ba18e169 [ 649.579685][T11551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.579719][T11551] RSP: 002b:00007f98bb091038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 649.579750][T11551] RAX: ffffffffffffffda RBX: 00007f98ba3b5fa0 RCX: 00007f98ba18e169 [ 649.579773][T11551] RDX: 0000200000000280 RSI: 000000000000890b RDI: 000000000000000a [ 649.579795][T11551] RBP: 00007f98ba210a68 R08: 0000000000000000 R09: 0000000000000000 [ 649.579816][T11551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.579837][T11551] R13: 0000000000000000 R14: 00007f98ba3b5fa0 R15: 00007ffdd190d698 [ 649.579871][T11551] [ 649.879917][T11556] netlink: 'syz.4.1758': attribute type 10 has an invalid length. [ 650.183661][T11556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.193511][T11556] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 650.219835][T11556] syz.4.1758 (11556) used greatest stack depth: 20784 bytes left [ 650.227695][T11551] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 652.352406][ T6278] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3