last executing test programs: 8m21.350573199s ago: executing program 2 (id=430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) 8m20.304690802s ago: executing program 2 (id=432): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) syz_clone(0x100e180, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000400)={0x7, 0x64d, 0x0, 0x0}) setresuid(0x0, 0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) 8m18.763546654s ago: executing program 2 (id=437): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x66032, 0xffffffffffffffff, 0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r1, &(0x7f00000002c0)=""/153, 0x99) 8m15.36305919s ago: executing program 2 (id=445): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x20000800) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 8m13.64330233s ago: executing program 2 (id=450): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0xc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m12.082801184s ago: executing program 2 (id=455): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, &(0x7f0000000300)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xae}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(r6, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) 8m11.041006057s ago: executing program 32 (id=455): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, &(0x7f0000000300)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xae}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) preadv2(r6, &(0x7f0000000280)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) 6m14.742605717s ago: executing program 0 (id=827): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) timer_create(0x7, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) preadv2(r1, 0x0, 0x0, 0x80, 0x8000, 0x0) r2 = memfd_secret(0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000300)={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x4, 0x1, 0x4, 0x400, 0x2, 0x100004}) 6m13.978755643s ago: executing program 0 (id=828): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mlock2(&(0x7f00003ba000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000371000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f000094f000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000273000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m13.558162724s ago: executing program 0 (id=833): truncate(0x0, 0x2200) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x50, @remote, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'xfrm0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) 6m13.039191866s ago: executing program 0 (id=836): r0 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x10, 0x1213, &(0x7f0000000600)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x1, &(0x7f00000008c0)={0x31, 0x7, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x2e) unlinkat(0xffffffffffffff9c, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000961000/0x1000)=nil, 0x1000}, 0x1}) 6m11.422569505s ago: executing program 0 (id=847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7400000000010104000000000000000002000000240001801400018008000100ac14143408000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000100005800a000100512e3933"], 0x74}}, 0x0) 6m10.445710072s ago: executing program 0 (id=855): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x0, 0x0, &(0x7f00000002c0), 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 6m9.494936125s ago: executing program 33 (id=855): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kexec_load(0x0, 0x0, &(0x7f00000002c0), 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 2m6.771410278s ago: executing program 3 (id=1622): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000540)='\xdd#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xf9\xff\xff\xff\x00\x17?$^\xe1Ob\xe1Y\x03\x00\x00\x00\x00\x00\x00\x00\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\xdc\xaa<\x96\xedE>{\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7\x00\xc3\"\xf1FH\x98\\\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\x87\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T[\xb7\xa4\xb0\bk&\xede\x8b\xc2\xb2\xcd\xef\xcf\x0fE\xc5\x86]\xc0]}\xdd^\xf6&\x16>c\x9d\x9c\xc9\x01\x04\x00\x00\xe9h\xbd\x10p\x8f\x14\x1f2\"\x1b;\xfda\x19\x8bo^\x96\x9a~Q\xce\x95\x02\xb8e\xbbG\xb0V[\xfe\x80\x94$y\x8a\\@\xa9^\x95!IJ\xcf\xf7\xafoX/qG\x97ITp\x01\xae\f\"n;%\xecT\xf6\xb6\xbf;\xde\xec\xb4z\xaa\xd9%\xa5;wy~\xcb\x9a\xd7\r\xe2\xcd\xf0C\x16\xbf0\x89\xb4\xf5\x86\xf3\x99\x9bq\xd3\x15\xe1:\x86\xe4\x14\x805K\xcf\xf6\xda\xd1A>\xf4r>\xfdyAH\x0f\x00'/426, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa000000000000015030000088d4e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c070000000000000095cb202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec85eeeb83ccaec388158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d0800e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb400f692f374dfab73f90000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1d913c3fd6edc9b9bfc8c6a14ff595eff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a0397c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed551c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95f9ddf30e066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18092f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aac263dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d85fa4373d5b569ac3353cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2ff070000cfb030dd4ac0fe54db67510d3e9a5d36b900000074000000000000000000000000006e96ba8f5e7e89bef4226173e20ebb17b924e9e6d0ee163713b2bd56f58dec64df91417beaac4061e6216774e048276e110d25ae7feb600897c8364af49ce59027a6ee5d7c6e12c0f45c0f376d9da065ca0499e209655d2420fcfa10fccf2cbe7b60161cc6cbd874c928689acd9d4e00cefacc887b76767ca1279e34d20b276dff8318e0ec5ab2929e63ef6a32b1abc55859804e2ec19e5b96a2df9f488e7e25a839701e37cdd850c2f26685047f1d492571482f993bb96642a3f56a0ea24d765c6edf2352e00bc4ff4a723ee2d9307e6f25bd05f98583cc0868"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r2}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f00000000c0)=r2}, 0x20) socket$nl_route(0x10, 0x3, 0x0) semget$private(0x0, 0x5, 0x0) socket$inet(0x2, 0x2, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2m6.423330932s ago: executing program 3 (id=1624): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 2m5.878185976s ago: executing program 3 (id=1627): socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'wlc\x00', 0x20, 0xfffffffe, 0x7f}, 0x2c) select(0x17, &(0x7f0000000980)={0x7f}, 0x0, 0x0, 0x0) 2m2.878952432s ago: executing program 3 (id=1634): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file2\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000100)={[{@errors_remount}, {@noload}, {@nogrpid}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@dioread_lock}, {@minixdf}], [], 0x3d}, 0x1, 0x51f, &(0x7f00000007c0)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r1, 0x0, 0x6}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r2}, 0x18) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000080)=0x36, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002001, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xfe8) 2m2.319723758s ago: executing program 3 (id=1640): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket(0x28, 0x5, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) close(0xffffffffffffffff) close(r2) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r3, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x1000000000000000) 2m0.780439469s ago: executing program 3 (id=1643): mmap$IORING_OFF_SQ_RING(&(0x7f000040d000/0x4000)=nil, 0x4000, 0xd, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![&\\^\'$)\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) 1m45.027523035s ago: executing program 34 (id=1643): mmap$IORING_OFF_SQ_RING(&(0x7f000040d000/0x4000)=nil, 0x4000, 0xd, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='(\\.\x03/\']\\\x81\xac5\x17+.-![&\\^\'$)\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) 16.330823267s ago: executing program 5 (id=1856): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 11.178110466s ago: executing program 6 (id=1867): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='netlink_extack\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 10.877337875s ago: executing program 6 (id=1868): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x30c00, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000080)) mlock(&(0x7f0000fee000/0x12000)=nil, 0x12000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000f80)="4f7d669ddbee291bffe1f05ba4ddbda9", 0x10}, {&(0x7f0000000080)="b097daea750d345cb5c6b2c996201d5e", 0x10}], 0x2}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) 9.983003104s ago: executing program 1 (id=1871): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000) shutdown(r1, 0x1) 9.952751827s ago: executing program 6 (id=1872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001240)={0xffffffffffffffff}, 0x111, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @loopback}, {0xa, 0x4e24, 0x101, @mcast2, 0x7}, r2, 0x9}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) dup2(r3, r1) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={0x0, @l2={0x1f, 0x8, @none, 0xfff0, 0x2}, @ethernet={0x306, @local}, @l2tp={0x2, 0x0, @private=0xa010102, 0x1}, 0xfffa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000, 0x10000, 0x9}) 8.582712002s ago: executing program 4 (id=1874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1c04744, &(0x7f0000000300), 0x1, 0x49b, &(0x7f0000000680)="$eJzs3M9rHFUcAPDvTDb9qU2s9UdrwWgVgz+SJm21Bz0oCh4UFD3UY0zSUrttpIlgS9FUpB6l4F08Cv4FnjyJehJE8KB3KRQtQlsvrszuTJJdd9ImTbJb9/OBbd/MvJ33vnnzdt++t7MB9Kyh7J8k4o6I+DUiBhqbzRmGGv9du3Ju8vqVc5NJ1Gpv/JHU8129cm4yP8XC87bnO4bTiPTjJC+k2eyZsycmqtXp0/n26NzJd0dnz5x96vjJiWPTx6ZPjR8+fPDA2DNPjx9qet6hVcaZxXd1zwcze3e//NbFVyePXHz7+6+y/Wl+vIhjLQ1lgf9Zq2s99uhaF9Zh/9QW40wqna4NN6svIrLm6q/3/4Hoi8XGG4iXPupo5YB1lb1mby4/PF8D/seS6HQNgM4o3uizz7/5o3+Dhh5d4fLzjQ9AWezX8kfjSGVhbmA9/yBDEXFk/u/Ps0e0zEPU2swbAADcqm+y8c+TTeO/fPyRxr1L8u3I14YGI+KuiNgZEXdHxK6IuCeinve+iLh/heW3Lg39dx0mvbSY/nmFZ7+xbPz3bL621Tz+K0Z/MdiXb91Zj78/OXq8Or0//5sMR//mbHus3cmLU7z406dl5S8d/2WPrPxiLJif5FKlZYJuamJuYq0GpZfPR+yptIs/WVgJSCJid0TsWdmpdxSJ449/ubcs043jX8YarDPVvoh4rNH+89ESfyFZfn1ydEtUp/ePNq6KvjZl/PDjhdfKyr+l+NdA1v7bmq//lhwDfyVL12tnV17Ghd8+KV1brazy+t+UvFlf092U73t/Ym7u9FjEpuSV+nbT/iXXSX17fDF/Fv/wvvb9f2f+nCz+ByJib8QvRbd7MG+7hyLi4YjYt0z8373wyDtlx7qh/afavv4tXP+Dze2/8kTfiW+/Liu/Nf4k317MkbX/wXpqON9Tf/3LbS05b3l1tuQ5Vns1AwAAwO0nrX83PklHFtJpOjLS+A7/rtiWVmdm5544OvPeqanGd+gHoz8t5j8HlsyHjiXz+Rkb2+P5XHFx/EA+b/xZ39Ykier0yORMdarDsUOv217S/zO/t5vMjojnNrSGwLpyvxb0rtb+n3aoHsDG8/4PvUv/h96l/0PvKvr/60v2fdiSp2QtALjNef+H3qX/Q+9a6P/nO1sPYON5/4ee1O4m+eI3Dm7hlv9lE8VvM5TlqSxz936XJorZ0W6pz4kkIta3iEi7I9LSROQ/YtEt9Vl54nptlU+vLNO7bzax8a9FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6+HfAAAA//9IHuJO") sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x2, 0x1, 0xfd, 0x0, 0x9}}) 8.291274151s ago: executing program 1 (id=1875): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) getdents64(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup(r2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) dup3(r1, r3, 0x0) r4 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r5, &(0x7f0000000300)=[{&(0x7f0000000600)="8414", 0x2}, {&(0x7f0000000640)='hQ', 0x2}], 0x2, 0xffffffff, 0x4) 8.156010354s ago: executing program 7 (id=1876): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) statfs(0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) unshare(0x2c060000) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) unlinkat(r1, 0x0, 0x0) setrlimit(0x1, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="6d2004", 0x3, 0x600000fff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) 7.864496354s ago: executing program 5 (id=1877): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001800090324bd7000fbdbdf2506"], 0x14}}, 0x40050) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r6 = open(0x0, 0x14927e, 0x0) fallocate(r6, 0x8, 0x9, 0x7fffffffffffffff) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 7.627536247s ago: executing program 1 (id=1878): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) fsopen(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x68}}, 0x20000000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 7.2901679s ago: executing program 4 (id=1879): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) 7.234854506s ago: executing program 6 (id=1880): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00'}, 0x18) 6.920752256s ago: executing program 7 (id=1881): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x7, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8}, {0xfff2}, {0xfff1, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}}, 0x0) 6.621982726s ago: executing program 7 (id=1882): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) setfsuid(0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r1, 0x402, 0x1a) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r2, 0x1, r0, 0x4}) 6.221735296s ago: executing program 6 (id=1883): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) syz_mount_image$iso9660(&(0x7f0000001440), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="686964652c696f636861727365743d6c736f383835392d31d7f948cc15222a7c152413847632ea8667368ec75b6696098c70a9c846580e19245a9b5dca57e3c2581f7c78cd7de2fc2458bfb7694a4c0472b71389bcf0e9beeb3879d1078e3dd2da17ad12528f17a346c6f80d2a644e1d3642f6373c58ed35f1d83e0be3e2349ad27c2f97f295fe57b036a0335c813632027f202230956e37da0c87d24f178f5d39e68f278860e3e2ec3ffbea966ff502c06c7d429698fc55c20482ab9bd9c6aef841c459b6ff3cd3fece0530b37c20d94f8c8eda484383aad44d2174233e9e5b00"/239], 0x1, 0x144b, &(0x7f0000001480)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000c00)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES8], 0xfc, 0x2b6, &(0x7f0000000480)="$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") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x189800, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x445bd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x3724, &(0x7f0000000440)={0x0, 0x3, 0x400, 0x1, 0xffffff}, &(0x7f00000001c0), &(0x7f0000000380)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x2000000) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000500), 0x1, 0x4f8, &(0x7f0000001900)="$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") ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, 0x0) 6.220569765s ago: executing program 1 (id=1884): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000d80)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x38, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x800) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6.219725296s ago: executing program 5 (id=1893): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) 5.847358973s ago: executing program 4 (id=1885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in=@loopback, {0x300, 0x3, 0x2, 0xfeffff7f00000002}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x104}}, 0x0) 5.106885536s ago: executing program 7 (id=1886): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 5.077027439s ago: executing program 5 (id=1887): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x420, 0x3f4, 0x300, 0x70bd25, 0x25dfdbfb, {0x3, 0x1, 0x23, [0x0, 0x7, 0x6, 0x6, 0x7fff, 0x5d4, 0x80000000, 0x6, 0xb4, 0x4, 0x8, 0x0, 0x6, 0x900, 0x4, 0x10001, 0x6, 0x5, 0x3, 0x4, 0x4, 0x7, 0x5, 0xff, 0x8, 0xffffff64, 0x7, 0x1000, 0x6, 0x2, 0x7, 0x3, 0xfffff8a2, 0x6, 0x6, 0xf, 0x2, 0x3ae, 0x80, 0x3, 0x4, 0x2, 0x8, 0x4, 0x6, 0x2, 0x6, 0x4, 0xffffffff, 0x7, 0x10000000, 0x7d, 0x80000001, 0x1, 0x1ff, 0x9, 0xe1, 0x2, 0x1, 0xff, 0x1, 0x3, 0x9, 0xe], [0x6, 0x9, 0xa, 0x1ad, 0x24e, 0x2, 0xfffffffc, 0x4, 0x0, 0xfffffff9, 0x0, 0x6, 0x8001, 0x4, 0x0, 0x9, 0x8, 0xfffffe01, 0x2, 0x7, 0x3, 0x1, 0x7fff, 0x0, 0x2, 0x400, 0x8, 0x7, 0x7, 0x1, 0x800, 0x7, 0x4, 0x9, 0x2bc12b12, 0x6d82b4e5, 0x0, 0x3, 0x0, 0x40, 0x6, 0x9, 0x6, 0x7, 0x5, 0x761d, 0x0, 0xff, 0x0, 0x0, 0x3, 0x1, 0x193e2, 0x8001, 0x200, 0xfffffffb, 0x4, 0x5, 0x7, 0x81, 0x7fff, 0x2b3d, 0x8, 0x7], [0x7, 0x4, 0x1c, 0x3, 0x10001, 0x7, 0x9, 0x3, 0x6, 0xd3, 0xb, 0x3ff, 0xbbe, 0x0, 0x8001, 0x1, 0x9, 0x2, 0x9, 0x6, 0x4, 0x8001, 0x2, 0x0, 0x1ff, 0x400, 0x4, 0x0, 0x9c, 0x3, 0x7fff, 0x9, 0xfffffffa, 0x0, 0x744b, 0x2, 0x3, 0xf6, 0x1, 0xffff, 0x4, 0xd, 0x1, 0x3e, 0x9, 0x7fff, 0x6, 0x2, 0xfffffffa, 0x5, 0x0, 0xc, 0x21, 0x1, 0xfffffff7, 0x1, 0x3ff, 0x5dfc, 0x7, 0x0, 0x1000, 0x5, 0x7, 0xfff], [0xf, 0x80000000, 0x8001, 0x4, 0x1, 0x2, 0xb, 0xf6c, 0x5dc, 0xfb76, 0x2, 0x7fff, 0xd, 0x1ff, 0xc027a258, 0x5, 0x5a, 0x8, 0x2bb5, 0xad26, 0x8, 0x5, 0x9, 0x6, 0x3ff, 0xb34, 0x0, 0x6, 0x847, 0x4, 0x8, 0x100, 0x80, 0x6, 0x4, 0x3, 0xb39, 0xb2a1, 0x9, 0x1, 0xfffffff8, 0x0, 0xf, 0xed03, 0xffff, 0x7, 0x4, 0x10001, 0x7ff, 0x9, 0x6, 0x5, 0x8001, 0xffffffff, 0x200, 0x3, 0x4689c12e, 0x10000, 0x754, 0x10, 0xa3b, 0x1, 0x40, 0x8001]}}, 0x420}, 0x1, 0x0, 0x0, 0x40}, 0x4008004) 5.076273959s ago: executing program 1 (id=1888): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x1, 0x800, 0x1800}, {0x1, 0xe65b}], 0x3) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) 4.088595607s ago: executing program 4 (id=1889): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x38, 0x0, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast2}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x880) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) sendto$inet(r1, 0x0, 0x0, 0x20000010, 0x0, 0x0) 3.873122778s ago: executing program 5 (id=1890): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'sit0\x00'}]}, 0x50}}, 0x0) 2.050572678s ago: executing program 7 (id=1891): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) dup(0xffffffffffffffff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.016107961s ago: executing program 1 (id=1892): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) unshare(0x42000000) 1.92321661s ago: executing program 4 (id=1894): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8040, 0x3a) fanotify_init(0x200, 0x40800) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x5b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 697.539761ms ago: executing program 5 (id=1895): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1, 0x30}, 0xc) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000280)="1a", 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x60}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0x5], 0x80a0000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 668.621544ms ago: executing program 6 (id=1896): mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setuid(r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 90.543981ms ago: executing program 4 (id=1897): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x3ff, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0x7fffffffffffffff], 0xffff1001, 0x43000}) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000004, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x9, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x15, 0x3, 0xd, 0x87}, {0x6000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xe, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x2, 0x1500, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 7 (id=1898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4503000}]}}}]}]}], {0x14}}, 0xc0}}, 0x4800) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffb, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c044}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'fo\x00', 0x1, 0x4, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblc\x00', 0x0, 0x81, 0x39}, {@rand_addr=0x64010500, 0x4e26, 0x2, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x20, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): 8.058762][ T4271] Bluetooth: hci3: failed to register connection device [ 230.795391][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.5.591'. [ 231.168314][ T6484] 9pnet: p9_errstr2errno: server reported unknown error [ 231.764734][ T6505] netlink: 'syz.5.597': attribute type 1 has an invalid length. [ 232.786683][ T6514] mmap: syz.5.601 (6514) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 238.575233][ T6578] binder: 6575:6578 unknown command 0 [ 238.620922][ T6578] binder: 6575:6578 ioctl c0306201 200000000080 returned -22 [ 239.021576][ T6591] netlink: 44 bytes leftover after parsing attributes in process `syz.1.620'. [ 239.063918][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 239.090888][ T6591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.620'. [ 241.590595][ T6618] loop3: detected capacity change from 0 to 256 [ 241.887433][ T6618] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 243.101742][ T6639] exFAT-fs (loop3): error, exfat_zeroed_cluster: out of range(sect:248 len:8) [ 243.156977][ T6639] exFAT-fs (loop3): Filesystem has been set read-only [ 244.730356][ T6660] loop3: detected capacity change from 0 to 512 [ 244.806374][ T6660] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 244.900720][ T6660] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 245.180890][ T6667] loop5: detected capacity change from 0 to 2048 [ 245.209660][ T6671] netlink: 'syz.1.638': attribute type 1 has an invalid length. [ 245.250811][ T6667] EXT4-fs: Ignoring removed mblk_io_submit option [ 245.306295][ T6671] device bond3 entered promiscuous mode [ 245.331218][ T6667] EXT4-fs: Ignoring removed i_version option [ 245.464229][ T6674] bond3: (slave ip6gretap1): making interface the new active one [ 245.476744][ T6674] device ip6gretap1 entered promiscuous mode [ 245.501303][ T6674] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 245.523474][ T6667] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 245.568034][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 246.035039][ T5903] EXT4-fs (loop5): unmounting filesystem. [ 247.433975][ T126] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 247.623877][ T126] usb 4-1: Using ep0 maxpacket: 32 [ 247.635756][ T126] usb 4-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99 [ 247.703148][ T126] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.742343][ T126] usb 4-1: Product: syz [ 247.759967][ T126] usb 4-1: Manufacturer: syz [ 247.806921][ T126] usb 4-1: SerialNumber: syz [ 247.836118][ T7] libceph: connect (1)[c::]:6789 error -101 [ 247.872543][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 248.324775][ T126] usb 4-1: config 0 descriptor?? [ 248.355179][ T6700] ceph: No mds server is up or the cluster is laggy [ 248.364160][ T4318] libceph: connect (1)[c::]:6789 error -101 [ 248.370230][ T4318] libceph: mon0 (1)[c::]:6789 connect error [ 248.575680][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 248.619231][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.643'. [ 248.693346][ T6691] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 248.727985][ T6709] netlink: 9 bytes leftover after parsing attributes in process `syz.0.645'. [ 248.776882][ T5457] usb 4-1: USB disconnect, device number 5 [ 248.819406][ T6709] device gretap0 entered promiscuous mode [ 248.969052][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 248.969068][ T26] audit: type=1326 audit(1760712504.807:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.5.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 249.038740][ T26] audit: type=1326 audit(1760712504.807:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.5.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 249.099770][ T26] audit: type=1326 audit(1760712504.807:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.5.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 249.186754][ T26] audit: type=1326 audit(1760712504.807:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.5.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 249.266255][ T26] audit: type=1326 audit(1760712504.807:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.5.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 249.316904][ T6719] loop5: detected capacity change from 0 to 128 [ 249.350046][ T6719] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 249.372665][ T26] audit: type=1326 audit(1760712504.807:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.5.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 249.445533][ T6719] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 249.483906][ T26] audit: type=1326 audit(1760712504.807:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.5.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 249.610000][ T26] audit: type=1326 audit(1760712504.807:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.5.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 249.634605][ T6722] loop3: detected capacity change from 0 to 512 [ 249.668349][ T6722] ext2: Unknown parameter 'func' [ 249.723430][ T26] audit: type=1326 audit(1760712504.807:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.5.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 249.789725][ T26] audit: type=1326 audit(1760712504.807:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.5.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 249.815782][ T4955] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 250.020135][ T6722] loop3: detected capacity change from 0 to 4096 [ 250.095965][ T6722] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 250.159538][ T6722] fs-verity: sha256 using implementation "sha256-avx2" [ 250.193243][ T6737] netlink: 60 bytes leftover after parsing attributes in process `syz.5.652'. [ 250.228564][ T6722] fs-verity (loop3, inode 16): fs-verity keyring is empty, rejecting signed file! [ 250.462477][ T6722] EXT4-fs (loop3): unmounting filesystem. [ 251.515614][ T6757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.656'. [ 251.635986][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 255.516846][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.523308][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.585463][ T6804] fuse: Bad value for 'fd' [ 255.836970][ T6811] netlink: 'syz.0.668': attribute type 3 has an invalid length. [ 260.109176][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 260.109191][ T26] audit: type=1326 audit(1760712515.947:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 260.450123][ T26] audit: type=1326 audit(1760712515.987:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 260.536815][ T26] audit: type=1326 audit(1760712515.987:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 260.887081][ T6905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.682'. [ 261.016618][ T26] audit: type=1326 audit(1760712515.987:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 261.410541][ T26] audit: type=1326 audit(1760712515.987:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 261.538260][ T26] audit: type=1326 audit(1760712515.987:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 261.678265][ T26] audit: type=1326 audit(1760712515.997:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 261.782539][ T26] audit: type=1326 audit(1760712515.997:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 261.924366][ T26] audit: type=1326 audit(1760712515.997:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 262.552443][ T26] audit: type=1326 audit(1760712515.997:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6853 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 264.067608][ T6952] loop5: detected capacity change from 0 to 128 [ 264.154582][ T4955] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 264.186063][ T4271] Bluetooth: Wrong link type (-22) [ 264.191671][ T4271] Bluetooth: Wrong link type (-71) [ 264.197356][ T4271] Bluetooth: hci2: link tx timeout [ 264.203030][ T4271] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 264.326030][ T6956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 264.682843][ T6961] 8021q: adding VLAN 0 to HW filter on device bond1 [ 264.753082][ T6961] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 264.845820][ T6961] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 264.971574][ T6967] netlink: 24 bytes leftover after parsing attributes in process `syz.4.696'. [ 265.111734][ T6971] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 265.172701][ T6984] syz.0.698 uses obsolete (PF_INET,SOCK_PACKET) [ 266.246635][ T4271] Bluetooth: hci2: command 0x0406 tx timeout [ 266.282712][ T6993] netlink: 'syz.4.702': attribute type 3 has an invalid length. [ 266.354666][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 266.354703][ T26] audit: type=1107 audit(1760712522.187:222): pid=6986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 266.452407][ T6993] netlink: 'syz.4.702': attribute type 3 has an invalid length. [ 267.339408][ T7009] loop0: detected capacity change from 0 to 512 [ 267.442158][ T7009] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 267.461893][ T7009] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 267.520336][ T7009] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.706: corrupted inode contents [ 267.601531][ T7009] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #2: comm syz.0.706: mark_inode_dirty error [ 267.619115][ T7009] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #2: comm syz.0.706: corrupted inode contents [ 267.634382][ T7009] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.706: mark_inode_dirty error [ 268.007493][ T7023] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 268.214086][ T26] audit: type=1326 audit(1760712523.917:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7020 comm="syz.3.710" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x0 [ 268.783404][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 269.023202][ T7036] loop0: detected capacity change from 0 to 2048 [ 269.291830][ T7047] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.719'. [ 269.341442][ T7036] loop0: p1 < > p3 [ 269.517806][ T7036] loop0: p3 size 134217728 extends beyond EOD, truncated [ 272.692594][ T4402] udevd[4402]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 272.849487][ T4955] udevd[4955]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 273.732844][ T7074] device syzkaller1 entered promiscuous mode [ 274.675544][ T5457] kernel read not supported for file [userfaultfd] (pid: 5457 comm: kworker/1:13) [ 276.214324][ T7128] syz.3.739 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 277.798396][ T7148] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 277.806210][ T7148] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 277.813948][ T7148] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 277.821637][ T7148] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 278.222692][ T7148] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 278.230679][ T7148] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 278.238575][ T7148] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 278.246334][ T7148] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 278.254081][ T7148] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 278.261873][ T7148] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 278.724108][ T7166] netlink: 56 bytes leftover after parsing attributes in process `syz.3.750'. [ 278.733054][ T7166] tc_dump_action: action bad kind [ 281.122394][ T7217] syz.4.760 (7217) used greatest stack depth: 17184 bytes left [ 282.863262][ T7236] bond2: (slave geneve3): making interface the new active one [ 283.069804][ T7236] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 283.085385][ T7240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.765'. [ 283.196150][ T7240] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.868523][ T6893] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 284.587258][ T7256] syz.3.771[7256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.587419][ T7256] syz.3.771[7256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.253958][ T14] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 286.470032][ T14] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.491204][ T14] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.519222][ T14] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 286.643792][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 286.651894][ T14] usb 6-1: SerialNumber: syz [ 287.311996][ T7306] Invalid option length (1032005) for dns_resolver key [ 287.366852][ T14] usb 6-1: 0:2 : does not exist [ 287.376233][ T14] usb 6-1: unit 7 not found! [ 287.412258][ T14] usb 6-1: USB disconnect, device number 2 [ 287.829986][ T4955] udevd[4955]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.907018][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'. [ 289.327823][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.788'. [ 289.357694][ T7337] validate_nla: 42 callbacks suppressed [ 289.357734][ T7337] netlink: 'syz.0.788': attribute type 14 has an invalid length. [ 289.882950][ T7337] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.892447][ T7337] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.901267][ T7337] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.910041][ T7337] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.981057][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.788'. [ 289.996209][ T7337] netlink: 'syz.0.788': attribute type 14 has an invalid length. [ 290.044197][ T5455] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 290.057425][ T7336] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 290.119556][ T7336] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.133866][ T26] audit: type=1326 audit(1760712545.967:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47a58efc9 code=0x7ffc0000 [ 290.168885][ T26] audit: type=1326 audit(1760712545.967:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc47a58efc9 code=0x7ffc0000 [ 290.234062][ T5455] usb 4-1: Using ep0 maxpacket: 32 [ 290.245307][ T5455] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.268656][ T5455] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 290.278117][ T26] audit: type=1326 audit(1760712546.087:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47a58efc9 code=0x7ffc0000 [ 290.331702][ T5455] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 290.349360][ T5455] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.353984][ T26] audit: type=1326 audit(1760712546.097:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47a58efc9 code=0x7ffc0000 [ 290.372406][ T5455] usb 4-1: Product: syz [ 290.394861][ T5455] usb 4-1: Manufacturer: syz [ 290.415094][ T5455] usb 4-1: SerialNumber: syz [ 290.452704][ T26] audit: type=1326 audit(1760712546.107:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc47a5c1885 code=0x7ffc0000 [ 290.455155][ T5455] usb 4-1: config 0 descriptor?? [ 290.522058][ T26] audit: type=1326 audit(1760712546.277:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7351 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc47a58efc9 code=0x7ffc0000 [ 290.616904][ T26] audit: type=1326 audit(1760712546.347:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fc47a58efc9 code=0x7ffc0000 [ 290.691520][ T26] audit: type=1326 audit(1760712546.347:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47a58efc9 code=0x7ffc0000 [ 290.787724][ T26] audit: type=1326 audit(1760712546.347:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc47a58efc9 code=0x7ffc0000 [ 290.827950][ T26] audit: type=1326 audit(1760712546.347:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.0.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fc47a58efc9 code=0x7ffc0000 [ 291.034008][ T4318] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 291.256012][ T4318] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.280013][ T4318] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 291.307256][ T4318] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 291.320041][ T4318] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.351571][ T4318] usb 6-1: Product: syz [ 291.390222][ T4318] usb 6-1: Manufacturer: syz [ 291.400655][ T4318] usb 6-1: SerialNumber: syz [ 291.428881][ T4318] usb 6-1: config 0 descriptor?? [ 291.549010][ T7379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.799'. [ 291.741710][ T4318] usb 6-1: USB disconnect, device number 3 [ 291.743647][ T7377] loop0: detected capacity change from 0 to 8192 [ 291.822517][ T7377] loop0: p1 p2 [ 291.854907][ T5455] usb 4-1: USB disconnect, device number 6 [ 291.862350][ T7377] loop0: partition table partially beyond EOD, truncated [ 291.903335][ T7377] loop0: p1 start 16777216 is beyond EOD, truncated [ 291.953146][ T7377] loop0: p2 size 515840 extends beyond EOD, truncated [ 292.118722][ T7385] syz.1.802[7385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.118881][ T7385] syz.1.802[7385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.137796][ T4955] udevd[4955]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 292.432996][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 292.520816][ T7392] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 292.570597][ T4264] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 292.618428][ T4264] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 293.593477][ T7404] loop3: detected capacity change from 0 to 1764 [ 293.670901][ T7404] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 294.103743][ C1] sched: RT throttling activated [ 296.175730][ T5454] kernel read not supported for file [userfaultfd] (pid: 5454 comm: kworker/1:10) [ 296.306399][ T4318] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 296.513958][ T4318] usb 4-1: Using ep0 maxpacket: 16 [ 296.521851][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 296.544931][ T4318] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 296.569370][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.581792][ T4318] usb 4-1: Product: syz [ 296.588584][ T4318] usb 4-1: Manufacturer: syz [ 296.593281][ T4318] usb 4-1: SerialNumber: syz [ 296.608567][ T4318] usb 4-1: config 0 descriptor?? [ 296.622890][ T4318] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 296.636546][ T4318] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 296.731361][ T7433] loop5: detected capacity change from 0 to 8192 [ 296.784210][ T14] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 296.803923][ T7433] loop5: p1 p2 [ 296.808955][ T7433] loop5: partition table partially beyond EOD, truncated [ 296.823024][ T7433] loop5: p1 start 16777216 is beyond EOD, truncated [ 296.840074][ T7433] loop5: p2 size 515840 extends beyond EOD, truncated [ 296.996028][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.022543][ T14] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 297.053546][ T14] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 297.083157][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.100354][ T14] usb 1-1: Product: syz [ 297.115474][ T14] usb 1-1: Manufacturer: syz [ 297.127962][ T14] usb 1-1: SerialNumber: syz [ 297.152228][ T14] usb 1-1: config 0 descriptor?? [ 297.234049][ T4318] em28xx 4-1:0.0: chip ID is em2765 [ 297.252774][ T4402] udevd[4402]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 297.455713][ T14] usb 1-1: USB disconnect, device number 2 [ 297.857396][ T4318] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 297.870703][ T4318] em28xx 4-1:0.0: board has no eeprom [ 298.153860][ T4318] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 298.173005][ T4318] em28xx 4-1:0.0: dvb set to bulk mode. [ 298.231732][ T4318] usb 4-1: USB disconnect, device number 7 [ 298.239848][ T4271] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 298.250120][ T4271] Bluetooth: hci4: Injecting HCI hardware error event [ 298.258822][ T4275] Bluetooth: hci4: hardware error 0x00 [ 298.268357][ T4318] em28xx 4-1:0.0: Disconnecting em28xx [ 298.275221][ T14] em28xx 4-1:0.0: Binding DVB extension [ 298.425135][ T7451] bridge0: port 4(batadv0) entered blocking state [ 298.519961][ T7451] bridge0: port 4(batadv0) entered disabled state [ 298.560595][ T14] em28xx 4-1:0.0: Registering input extension [ 299.217856][ T7451] device batadv0 entered promiscuous mode [ 299.301998][ T4318] em28xx 4-1:0.0: Closing input extension [ 299.314853][ T4541] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 299.324840][ T4541] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 299.329271][ T4318] em28xx 4-1:0.0: Freeing device [ 299.368367][ T7456] device batadv0 left promiscuous mode [ 299.554917][ T7456] bridge0: port 4(batadv0) entered disabled state [ 300.314279][ T4275] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 302.002517][ T7501] loop3: detected capacity change from 0 to 64 [ 302.339357][ T7507] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.346612][ T7507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.513217][ T7509] loop0: detected capacity change from 0 to 8192 [ 302.579040][ T7509] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 303.825310][ T7535] netlink: 'syz.3.848': attribute type 1 has an invalid length. [ 304.095318][ T7540] 8021q: adding VLAN 0 to HW filter on device bond3 [ 304.126435][ T7540] bond2: (slave bond3): making interface the new active one [ 304.176526][ T7540] bond2: (slave bond3): Enslaving as an active interface with an up link [ 304.230005][ T7535] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 304.770097][ T4297] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.195791][ T4297] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.631430][ T4297] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.643582][ T4297] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.915543][ T4297] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.956533][ T4297] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.884001][ T4297] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.913806][ T4297] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.954038][ T7569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 307.078730][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.102640][ T4271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.239896][ T7587] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 307.497020][ T4271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.512820][ T4271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.542568][ T4271] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 307.553044][ T4271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.024486][ T7594] overlayfs: failed to clone upperpath [ 308.487159][ T5457] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 309.175662][ T5457] usb 6-1: Using ep0 maxpacket: 16 [ 309.195178][ T5457] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 309.288021][ T5457] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 309.373222][ T5457] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.414056][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 309.414074][ T26] audit: type=1326 audit(1760712565.157:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 309.466542][ T5457] usb 6-1: Product: syz [ 309.470783][ T5457] usb 6-1: Manufacturer: syz [ 309.523652][ T5457] usb 6-1: SerialNumber: syz [ 309.593876][ T26] audit: type=1326 audit(1760712565.167:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 309.618356][ T5457] usb 6-1: config 0 descriptor?? [ 309.647383][ T5457] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 309.725258][ T5457] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 309.790015][ T26] audit: type=1326 audit(1760712565.167:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 309.833911][ T4271] Bluetooth: hci0: command 0x0409 tx timeout [ 309.989103][ T26] audit: type=1326 audit(1760712565.167:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 310.170420][ T26] audit: type=1326 audit(1760712565.167:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 310.235160][ T5457] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 310.285743][ T26] audit: type=1326 audit(1760712565.167:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 310.308110][ T26] audit: type=1326 audit(1760712565.167:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 310.489411][ T26] audit: type=1326 audit(1760712565.167:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 310.533779][ T26] audit: type=1326 audit(1760712565.167:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 310.655123][ T26] audit: type=1326 audit(1760712565.167:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7610 comm="syz.3.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 310.990328][ T7585] chnl_net:caif_netlink_parms(): no params data found [ 311.489946][ T5457] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 311.544686][ T5457] em28xx 6-1:0.0: board has no eeprom [ 311.862469][ T7585] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.873976][ T7585] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.896646][ T7585] device bridge_slave_0 entered promiscuous mode [ 311.913867][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 311.943846][ T5457] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 311.959846][ T5457] em28xx 6-1:0.0: dvb set to bulk mode. [ 311.998432][ T5457] em28xx 6-1:0.0: Binding DVB extension [ 312.117042][ T7585] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.137252][ T7585] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.241480][ T7585] device bridge_slave_1 entered promiscuous mode [ 312.565794][ T7585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.614187][ T4297] IPVS: stopping backup sync thread 5198 ... [ 312.648584][ T7585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.772209][ T7585] team0: Port device team_slave_0 added [ 312.878989][ T7592] em28xx 6-1:0.0: reading from i2c device at 0x8 failed (error=-5) [ 312.916660][ T7] usb 6-1: USB disconnect, device number 4 [ 312.923201][ T7] em28xx 6-1:0.0: Disconnecting em28xx [ 313.155402][ T7585] team0: Port device team_slave_1 added [ 313.172835][ T5457] em28xx 6-1:0.0: Registering input extension [ 313.204818][ T7] em28xx 6-1:0.0: Closing input extension [ 313.302762][ T7] em28xx 6-1:0.0: Freeing device [ 313.541567][ T7585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.574424][ T7585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.716089][ T7585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.801531][ T7585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.820109][ T7585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.888249][ T7585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.913864][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 313.949243][ T4297] device hsr_slave_0 left promiscuous mode [ 313.974614][ T4297] device hsr_slave_1 left promiscuous mode [ 313.984131][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.993933][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 314.007674][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.032920][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.043313][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.092276][ T4297] device bridge_slave_1 left promiscuous mode [ 314.108155][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.152976][ T7682] sctp: [Deprecated]: syz.5.883 (pid 7682) Use of int in max_burst socket option. [ 314.152976][ T7682] Use struct sctp_assoc_value instead [ 314.180927][ T4297] device bridge_slave_0 left promiscuous mode [ 314.197598][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.280614][ T4297] device veth1_macvtap left promiscuous mode [ 314.293001][ T4297] device veth0_macvtap left promiscuous mode [ 314.304761][ T4297] device veth1_vlan left promiscuous mode [ 314.320451][ T4297] device veth0_vlan left promiscuous mode [ 314.745634][ T4297] bond2 (unregistering): (slave geneve3): Releasing active interface [ 314.950517][ T4297] bond2 (unregistering): Released all slaves [ 315.016630][ T4297] bond1 (unregistering): (slave geneve2): Releasing active interface [ 315.159919][ T4297] bond1 (unregistering): Released all slaves [ 315.712930][ T4297] team0 (unregistering): Port device team_slave_1 removed [ 315.758377][ T4297] team0 (unregistering): Port device team_slave_0 removed [ 315.803055][ T4297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.852712][ T4297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.076465][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 316.361626][ T4297] bond0 (unregistering): Released all slaves [ 316.464104][ T7682] kthread_run failed with err -4 [ 316.484750][ T7705] bridge0: port 4(syz_tun) entered blocking state [ 316.503921][ T7705] bridge0: port 4(syz_tun) entered disabled state [ 316.512822][ T7705] device syz_tun entered promiscuous mode [ 316.695513][ T7585] device hsr_slave_0 entered promiscuous mode [ 316.759509][ T7585] device hsr_slave_1 entered promiscuous mode [ 316.956484][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.962892][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.956226][ T7732] device wlan0 entered promiscuous mode [ 318.039520][ T7732] device vlan2 entered promiscuous mode [ 318.352889][ T7585] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 318.401830][ T7585] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 318.433239][ T7585] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 318.479971][ T7585] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 318.738567][ T7585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.788602][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 318.832325][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.872776][ T7585] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.908620][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 318.958456][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.994601][ T6891] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.002054][ T6891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.045473][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 319.101835][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.131485][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.159963][ T6891] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.167499][ T6891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.214408][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.267031][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 319.289395][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.315531][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.338062][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 319.366237][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.419179][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 319.445129][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 319.492906][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.552818][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 319.580825][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.623926][ T7585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 319.731541][ T4264] libceph: connect (1)[c::]:6789 error -101 [ 319.742376][ T7768] device ip6gretap0 entered promiscuous mode [ 319.776377][ T4264] libceph: mon0 (1)[c::]:6789 connect error [ 319.809866][ T7765] ceph: No mds server is up or the cluster is laggy [ 320.411682][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 320.422906][ T4657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 320.451983][ T7585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.377694][ T7840] Cannot find set identified by id 3 to match [ 323.773317][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 323.813338][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 323.934592][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 323.963147][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.026307][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.044952][ T6895] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.260562][ T7585] device veth0_vlan entered promiscuous mode [ 324.278480][ T7585] device veth1_vlan entered promiscuous mode [ 324.340373][ T6897] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 324.381480][ T6897] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 324.504962][ T6897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 324.560940][ T6897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 324.747862][ T7585] device veth0_macvtap entered promiscuous mode [ 324.836465][ T6897] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 325.089996][ T7585] device veth1_macvtap entered promiscuous mode [ 325.192649][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.402420][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.412856][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.462891][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.472985][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.535737][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.557838][ T7585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.536080][ T6897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 327.545100][ T6897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 327.579496][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.643752][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.703779][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.737470][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.794552][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.829172][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.867130][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.907065][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.135603][ T7585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.508445][ T7585] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.704263][ T7585] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.713043][ T7585] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.721970][ T7585] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.820226][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 328.906450][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 329.109830][ T7904] 8021q: adding VLAN 0 to HW filter on device bond3 [ 329.197066][ T7909] netlink: 24 bytes leftover after parsing attributes in process `syz.5.934'. [ 329.306291][ T7907] 8021q: adding VLAN 0 to HW filter on device bond3 [ 329.328579][ T7907] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 329.356384][ T7907] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 329.489196][ T7914] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 329.510688][ T7904] device macvlan3 entered promiscuous mode [ 329.538949][ T7904] bond3: (slave macvlan3): Error -98 calling set_mac_address [ 329.588846][ T6891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.636630][ T6891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.696748][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 329.716220][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.752362][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.763156][ T7925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.936'. [ 329.804348][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 331.517657][ T7946] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 332.205868][ T7947] loop6: detected capacity change from 0 to 128 [ 333.063879][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 333.064076][ T26] audit: type=1326 audit(1760712588.887:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7952 comm="syz.5.944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x0 [ 333.124046][ T4264] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 333.510293][ T26] audit: type=1326 audit(1760712589.347:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.3.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 333.580931][ T26] audit: type=1326 audit(1760712589.377:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.3.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 333.617039][ T26] audit: type=1326 audit(1760712589.377:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.3.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 333.640055][ T26] audit: type=1326 audit(1760712589.377:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.3.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 333.663310][ T26] audit: type=1326 audit(1760712589.377:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.3.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 333.703855][ T4264] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 333.726389][ T26] audit: type=1326 audit(1760712589.377:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.3.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 333.757868][ T4264] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.789740][ T26] audit: type=1326 audit(1760712589.377:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.3.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 333.817878][ T26] audit: type=1326 audit(1760712589.377:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.3.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 333.859082][ T4264] usb 7-1: config 0 descriptor?? [ 333.867705][ T26] audit: type=1326 audit(1760712589.377:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.3.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 333.895095][ T4264] cp210x 7-1:0.0: cp210x converter detected [ 334.723459][ T4264] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 334.776258][ T4264] cp210x 7-1:0.0: querying part number failed [ 336.096738][ T4264] usb 7-1: cp210x converter now attached to ttyUSB0 [ 336.328636][ T126] usb 7-1: USB disconnect, device number 2 [ 336.367424][ T126] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 336.430487][ T126] cp210x 7-1:0.0: device disconnected [ 336.447787][ T7994] netlink: 44 bytes leftover after parsing attributes in process `syz.3.954'. [ 336.484044][ T7994] netlink: 51 bytes leftover after parsing attributes in process `syz.3.954'. [ 336.504765][ T7994] netlink: 51 bytes leftover after parsing attributes in process `syz.3.954'. [ 337.601919][ T8008] loop6: detected capacity change from 0 to 1024 [ 337.848291][ T8013] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 339.100193][ T8029] capability: warning: `syz.3.963' uses 32-bit capabilities (legacy support in use) [ 341.316586][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 344.704532][ T8122] loop6: detected capacity change from 0 to 128 [ 345.103285][ T8134] loop5: detected capacity change from 0 to 8 [ 345.688294][ T8135] syz.6.988: attempt to access beyond end of device [ 345.688294][ T8135] loop6: rw=2049, sector=145, nr_sectors = 40 limit=128 [ 347.373314][ T8160] tipc: Started in network mode [ 347.378315][ T8156] loop6: detected capacity change from 0 to 512 [ 347.414412][ T8160] tipc: Node identity 4, cluster identity 4711 [ 347.432963][ T8160] tipc: Node number set to 4 [ 347.528307][ T8156] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 347.583152][ T8156] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 347.607610][ T8156] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #2: comm syz.6.995: corrupted inode contents [ 347.667335][ T8156] EXT4-fs error (device loop6): ext4_dirty_inode:6119: inode #2: comm syz.6.995: mark_inode_dirty error [ 347.758661][ T8156] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #2: comm syz.6.995: corrupted inode contents [ 347.801037][ T8156] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.995: mark_inode_dirty error [ 347.993064][ T7585] EXT4-fs (loop6): unmounting filesystem. [ 350.535763][ T8199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1003'. [ 351.331662][ T8201] netlink: 'syz.6.1001': attribute type 1 has an invalid length. [ 351.525114][ T8205] device gretap1 entered promiscuous mode [ 356.792520][ T8256] sctp: [Deprecated]: syz.5.1017 (pid 8256) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.792520][ T8256] Use struct sctp_sack_info instead [ 357.920414][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1021'. [ 358.115751][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 358.115768][ T26] audit: type=1326 audit(1760712613.957:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.3.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 358.243836][ T26] audit: type=1326 audit(1760712613.957:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.3.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 358.314026][ T26] audit: type=1326 audit(1760712613.987:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.3.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 358.398103][ T26] audit: type=1326 audit(1760712613.987:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.3.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 358.426475][ T26] audit: type=1326 audit(1760712613.987:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.3.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 358.457272][ T26] audit: type=1326 audit(1760712613.987:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.3.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 358.509625][ T26] audit: type=1326 audit(1760712613.997:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.3.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 358.554020][ T26] audit: type=1326 audit(1760712613.997:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.3.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 358.637726][ T26] audit: type=1326 audit(1760712613.997:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.3.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7f018d810 code=0x7ffc0000 [ 358.714529][ T26] audit: type=1326 audit(1760712613.997:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.3.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7f018d810 code=0x7ffc0000 [ 361.219991][ T8322] loop5: detected capacity change from 0 to 2048 [ 361.305686][ T8322] loop5: p1 < > p4 [ 361.375070][ T8322] loop5: p4 size 8388608 extends beyond EOD, truncated [ 361.505139][ T8322] EXT4-fs (loop5p1): unable to read superblock [ 361.789312][ T8227] udevd[8227]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 361.826215][ T8325] udevd[8325]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 364.298382][ T8364] Cannot find del_set index 16384 as target [ 366.398068][ T126] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 366.589363][ T8384] loop5: detected capacity change from 0 to 256 [ 366.656014][ T8384] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 366.729314][ T126] usb 7-1: Using ep0 maxpacket: 16 [ 366.736487][ T126] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 366.790023][ T126] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 366.958366][ T126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.185589][ T126] usb 7-1: Product: syz [ 367.298766][ T126] usb 7-1: Manufacturer: syz [ 367.553784][ T126] usb 7-1: SerialNumber: syz [ 367.650126][ T126] usb 7-1: config 0 descriptor?? [ 367.909282][ T126] usb 7-1: can't set config #0, error -71 [ 367.966066][ T126] usb 7-1: USB disconnect, device number 3 [ 368.008880][ T8392] bridge0: port 4(syz_tun) entered blocking state [ 368.015520][ T8392] bridge0: port 4(syz_tun) entered listening state [ 368.022470][ T8392] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.029767][ T8392] bridge0: port 2(bridge_slave_1) entered listening state [ 368.037315][ T8392] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.044508][ T8392] bridge0: port 1(bridge_slave_0) entered listening state [ 368.706448][ T8392] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 368.754345][ T8392] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.609218][ T8435] bridge0: port 3(syz_tun) entered blocking state [ 370.616697][ T8435] bridge0: port 3(syz_tun) entered disabled state [ 370.626226][ T8435] device syz_tun entered promiscuous mode [ 370.636847][ T8435] bridge0: port 3(syz_tun) entered blocking state [ 370.643440][ T8435] bridge0: port 3(syz_tun) entered forwarding state [ 370.920667][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1062'. [ 372.168526][ T8451] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 372.263253][ T8453] device bond4 entered promiscuous mode [ 372.283312][ T8453] device bridge3 entered promiscuous mode [ 372.600356][ T4318] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 373.448386][ T8481] loop5: detected capacity change from 0 to 256 [ 373.502912][ T8481] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 373.534496][ T4318] usb 7-1: config 0 has no interfaces? [ 373.547542][ T4318] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 373.599328][ T4318] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.621050][ T4318] usb 7-1: Product: syz [ 373.625886][ T4318] usb 7-1: Manufacturer: syz [ 373.630724][ T4318] usb 7-1: SerialNumber: syz [ 373.648196][ T8481] bridge0: port 3(batadv0) entered blocking state [ 373.689433][ T8481] bridge0: port 3(batadv0) entered disabled state [ 373.704659][ T4318] usb 7-1: config 0 descriptor?? [ 373.777146][ T8481] device batadv0 entered promiscuous mode [ 373.859129][ T8481] bridge0: port 3(batadv0) entered blocking state [ 373.865998][ T8481] bridge0: port 3(batadv0) entered forwarding state [ 373.923166][ T8482] VFS: Mount too revealing [ 374.238257][ T8492] device batadv0 left promiscuous mode [ 374.401905][ T6889] batman_adv: batadv0: IGMP Querier appeared [ 374.408206][ T6889] batman_adv: batadv0: MLD Querier appeared [ 374.524570][ T8492] bridge0: port 3(batadv0) entered disabled state [ 374.877084][ T4318] usb 7-1: USB disconnect, device number 4 [ 375.403568][ T8520] netlink: 64691 bytes leftover after parsing attributes in process `syz.5.1077'. [ 376.346693][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1079'. [ 376.996378][ T8540] Invalid option length (1032005) for dns_resolver key [ 378.964843][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.971209][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.216688][ T8587] loop5: detected capacity change from 0 to 1024 [ 382.366256][ T8587] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 382.722574][ T5903] EXT4-fs (loop5): unmounting filesystem. [ 383.528340][ T8604] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 384.581867][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1099'. [ 385.756931][ T8633] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1104'. [ 389.244143][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'. [ 389.608327][ T8682] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1115'. [ 390.894676][ T8700] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 393.807288][ T8729] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 394.544804][ T8739] overlayfs: failed to clone upperpath [ 396.813963][ T4271] Bluetooth: hci2: command 0x2021 tx timeout [ 397.406738][ T8777] Error parsing options; rc = [-22] [ 398.676028][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 398.685335][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 398.692639][ C0] bridge0: port 4(syz_tun) entered learning state [ 402.006212][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1154'. [ 405.228095][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 405.228111][ T26] audit: type=1326 audit(1760712661.067:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.6.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865778efc9 code=0x7ffc0000 [ 405.331391][ T26] audit: type=1326 audit(1760712661.107:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.6.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f865778efc9 code=0x7ffc0000 [ 405.572215][ T26] audit: type=1326 audit(1760712661.107:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.6.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865778efc9 code=0x7ffc0000 [ 405.618957][ T26] audit: type=1326 audit(1760712661.107:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.6.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865778efc9 code=0x7ffc0000 [ 406.169549][ T26] audit: type=1326 audit(1760712661.127:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.6.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f865778efc9 code=0x7ffc0000 [ 406.302294][ T26] audit: type=1326 audit(1760712661.127:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.6.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865778efc9 code=0x7ffc0000 [ 406.331316][ T26] audit: type=1326 audit(1760712661.127:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.6.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865778efc9 code=0x7ffc0000 [ 406.385365][ T26] audit: type=1326 audit(1760712661.127:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.6.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f865778efc9 code=0x7ffc0000 [ 406.415400][ T8884] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 406.422939][ T8884] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 406.430481][ T26] audit: type=1326 audit(1760712661.127:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.6.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865778efc9 code=0x7ffc0000 [ 406.632048][ T8884] device bridge_slave_0 left promiscuous mode [ 406.679441][ T8884] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.755619][ T8884] device bridge_slave_1 left promiscuous mode [ 406.817195][ T8884] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.846784][ T26] audit: type=1326 audit(1760712661.127:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.6.1164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865778efc9 code=0x7ffc0000 [ 406.954344][ T8884] bond0: (slave bond_slave_0): Releasing backup interface [ 407.064783][ T8884] bond0: (slave bond_slave_1): Releasing backup interface [ 407.263423][ T8905] xt_TCPMSS: Only works on TCP SYN packets [ 407.740330][ T8884] team0: Port device team_slave_0 removed [ 407.801630][ T8884] team0: Port device team_slave_1 removed [ 407.862171][ T8884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.913273][ T8884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.945056][ T8884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.019649][ T8884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.144699][ T8888] team0: Mode changed to "loadbalance" [ 408.220327][ T8911] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1169'. [ 410.721872][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 410.721888][ T26] audit: type=1326 audit(1760712666.557:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d05d8efc9 code=0x50000 [ 410.769669][ T26] audit: type=1326 audit(1760712666.597:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d05d8efc9 code=0x50000 [ 410.811916][ T26] audit: type=1326 audit(1760712666.597:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d05d8efc9 code=0x50000 [ 410.866664][ T26] audit: type=1326 audit(1760712666.597:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d05d8efc9 code=0x50000 [ 410.897071][ T26] audit: type=1326 audit(1760712666.597:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d05d8efc9 code=0x50000 [ 410.939400][ T26] audit: type=1326 audit(1760712666.597:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d05d8efc9 code=0x50000 [ 410.984194][ T26] audit: type=1326 audit(1760712666.597:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d05d8efc9 code=0x50000 [ 411.025227][ T26] audit: type=1326 audit(1760712666.597:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d05d8efc9 code=0x50000 [ 411.053892][ T26] audit: type=1326 audit(1760712666.597:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d05d8efc9 code=0x50000 [ 411.076413][ T26] audit: type=1326 audit(1760712666.597:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8943 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d05d8efc9 code=0x50000 [ 411.691443][ T8944] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1179'. [ 414.814625][ T8992] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1186'. [ 417.706855][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 417.706870][ T26] audit: type=1326 audit(1760712673.547:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 417.787371][ T26] audit: type=1326 audit(1760712673.547:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 417.888216][ T26] audit: type=1326 audit(1760712673.547:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 417.929814][ T26] audit: type=1326 audit(1760712673.547:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 418.582600][ T26] audit: type=1326 audit(1760712673.547:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 418.622381][ T26] audit: type=1326 audit(1760712673.547:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 418.646666][ T26] audit: type=1326 audit(1760712673.547:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 418.673084][ T26] audit: type=1326 audit(1760712673.547:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 418.696378][ T26] audit: type=1326 audit(1760712673.547:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 418.799312][ T26] audit: type=1326 audit(1760712673.547:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9032 comm="syz.5.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 419.170254][ T9056] loop6: detected capacity change from 0 to 2048 [ 419.231171][ T9056] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 419.334556][ T9064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1209'. [ 420.710524][ T9080] netlink: 'syz.6.1216': attribute type 1 has an invalid length. [ 420.857247][ T9084] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 420.882252][ T9080] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1216'. [ 420.912483][ T9080] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 420.944212][ T9080] bond1 (unregistering): Released all slaves [ 421.209457][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1223'. [ 421.219151][ T9095] device vlan2 left promiscuous mode [ 421.225652][ T9095] bridge0: port 3(vlan2) entered disabled state [ 421.234277][ T9095] device bridge_slave_1 left promiscuous mode [ 421.240720][ T9095] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.250123][ T9095] device bridge_slave_0 left promiscuous mode [ 421.256556][ T9095] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.278656][ T9105] netlink: 'syz.6.1226': attribute type 4 has an invalid length. [ 423.689141][ T9126] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1231'. [ 424.859578][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 424.866610][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 424.874582][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 424.882432][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 425.251318][ T9146] atomic_op ffff888027105198 conn xmit_atomic 0000000000000000 [ 429.370217][ C0] bridge0: port 4(syz_tun) entered forwarding state [ 429.376951][ C0] bridge0: topology change detected, propagating [ 429.384399][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.391650][ C0] bridge0: topology change detected, propagating [ 429.398168][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.405429][ C0] bridge0: topology change detected, propagating [ 429.423933][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 431.760247][ T4275] Bluetooth: hci0: command 0x0406 tx timeout [ 432.829350][ T9200] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1250'. [ 432.965344][ T9200] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1250'. [ 433.016678][ T9200] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1250'. [ 433.088113][ T9200] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1250'. [ 433.944416][ T9200] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1250'. [ 433.981147][ T9205] netlink: 27 bytes leftover after parsing attributes in process `syz.6.1250'. [ 434.814882][ T9218] xt_TCPMSS: Only works on TCP SYN packets [ 441.029308][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.035737][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.363926][ T4275] Bluetooth: hci3: command 0x2016 tx timeout [ 443.977204][ T9305] sctp: [Deprecated]: syz.3.1283 (pid 9305) Use of struct sctp_assoc_value in delayed_ack socket option. [ 443.977204][ T9305] Use struct sctp_sack_info instead [ 445.275614][ T9316] netlink: 'syz.3.1287': attribute type 10 has an invalid length. [ 445.466640][ T9320] batman_adv: batadv0: Adding interface: dummy0 [ 445.473165][ T9320] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.584436][ T9320] batman_adv: batadv0: Interface activated: dummy0 [ 447.922756][ T9318] batadv0: mtu less than device minimum [ 448.066046][ T9318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.079016][ T9318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.091115][ T9318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.102850][ T9318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.114609][ T9318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.126228][ T9318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.137889][ T9318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.149484][ T9318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.161264][ T9318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 448.797484][ T26] kauditd_printk_skb: 86 callbacks suppressed [ 448.797499][ T26] audit: type=1326 audit(1760712704.637:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.5.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 449.781025][ T9349] loop6: detected capacity change from 0 to 2048 [ 449.804813][ T26] audit: type=1326 audit(1760712704.637:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.5.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 449.841887][ T9349] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 449.883637][ T9349] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 449.917087][ T26] audit: type=1326 audit(1760712704.667:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.5.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 449.930629][ T9352] device syz_tun left promiscuous mode [ 449.960081][ T9349] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 449.973795][ T9349] UDF-fs: Scanning with blocksize 512 failed [ 449.981721][ T9352] bridge0: port 4(syz_tun) entered disabled state [ 450.005831][ T26] audit: type=1326 audit(1760712704.667:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.5.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 450.037855][ T9349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 450.095796][ T26] audit: type=1326 audit(1760712704.667:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.5.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 450.102519][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 450.204683][ T26] audit: type=1326 audit(1760712704.667:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.5.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 450.271948][ T9352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 450.279343][ T26] audit: type=1326 audit(1760712704.667:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.5.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 450.279408][ T26] audit: type=1326 audit(1760712704.667:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.5.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 450.279448][ T26] audit: type=1326 audit(1760712704.667:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.5.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 450.279490][ T26] audit: type=1326 audit(1760712704.667:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.5.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57c38efc9 code=0x7ffc0000 [ 450.641108][ T9352] device bridge_slave_0 left promiscuous mode [ 450.666924][ T9352] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.958569][ T9372] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 451.246838][ T9352] device bridge_slave_1 left promiscuous mode [ 451.256444][ T9377] loop6: detected capacity change from 0 to 2048 [ 451.263484][ T9352] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.327672][ T9352] device vlan0 left promiscuous mode [ 451.339940][ T9352] device bond0 left promiscuous mode [ 451.353944][ T9352] device bond_slave_0 left promiscuous mode [ 451.370555][ T9352] device bond_slave_1 left promiscuous mode [ 451.371293][ T9377] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 451.404285][ T9352] bond0: (slave bond_slave_0): Releasing backup interface [ 451.477990][ T9352] bond0: (slave bond_slave_1): Releasing backup interface [ 451.541767][ T9352] team0: Port device team_slave_0 removed [ 451.543555][ T9377] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1306: bg 0: block 234: padding at end of block bitmap is not set [ 451.667464][ T9352] team0: Port device team_slave_1 removed [ 451.678261][ T9377] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 642 with error 28 [ 451.771335][ T9352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.825199][ T9352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.878501][ T9377] EXT4-fs (loop6): This should not happen!! Data will be lost [ 451.878501][ T9377] [ 451.927876][ T9352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.961569][ T9377] EXT4-fs (loop6): Total free blocks count 0 [ 451.981258][ T9352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.002873][ T9377] EXT4-fs (loop6): Free/Dirty block details [ 452.042997][ T9377] EXT4-fs (loop6): free_blocks=0 [ 452.110943][ T9377] EXT4-fs (loop6): dirty_blocks=656 [ 452.140203][ T9352] bond1: (slave ip6gretap1): Removing an active aggregator [ 452.171923][ T9377] EXT4-fs (loop6): Block reservation details [ 452.210550][ T9352] bond1: (slave ip6gretap1): Releasing backup interface [ 452.220750][ T9377] EXT4-fs (loop6): i_reserved_data_blocks=41 [ 452.256868][ T9352] bridge0: port 3(vlan0) entered disabled state [ 452.273002][ T9352] bond4: (slave bridge3): Releasing backup interface [ 452.293610][ T9352] device bridge3 left promiscuous mode [ 452.312573][ T9358] device batadv_slave_1 entered promiscuous mode [ 452.369480][ T7585] EXT4-fs (loop6): unmounting filesystem. [ 452.400256][ T9357] team0: Mode changed to "loadbalance" [ 452.407182][ T9364] device veth1_virt_wifi entered promiscuous mode [ 452.486369][ T9364] device veth1_virt_wifi left promiscuous mode [ 452.493100][ T9364] device batadv_slave_1 left promiscuous mode [ 453.967065][ T9403] netlink: 'syz.4.1310': attribute type 10 has an invalid length. [ 454.984853][ T9413] Malformed UNC in devname [ 454.984853][ T9413] [ 454.991698][ T9413] CIFS: VFS: Malformed UNC in devname [ 455.203105][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 455.203121][ T26] audit: type=1326 audit(1760712711.037:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d05d8efc9 code=0x7ffc0000 [ 455.235029][ T9425] batman_adv: batadv0: Interface deactivated: dummy0 [ 455.252743][ T9425] batman_adv: batadv0: Removing interface: dummy0 [ 455.271230][ T26] audit: type=1326 audit(1760712711.077:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d05d8efc9 code=0x7ffc0000 [ 455.321141][ T9425] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 455.340411][ T26] audit: type=1326 audit(1760712711.077:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d05d8efc9 code=0x7ffc0000 [ 455.368366][ T9425] bond0: (slave bond_slave_0): Releasing backup interface [ 455.404359][ T9425] bond0: (slave bond_slave_1): Releasing backup interface [ 455.414128][ T26] audit: type=1326 audit(1760712711.077:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d05d8efc9 code=0x7ffc0000 [ 455.414173][ T26] audit: type=1326 audit(1760712711.077:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d05d8efc9 code=0x7ffc0000 [ 455.414210][ T26] audit: type=1326 audit(1760712711.077:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f1d05d8efc9 code=0x7ffc0000 [ 455.414247][ T26] audit: type=1326 audit(1760712711.077:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d05d8efc9 code=0x7ffc0000 [ 455.414284][ T26] audit: type=1326 audit(1760712711.077:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f1d05d8efc9 code=0x7ffc0000 [ 455.414320][ T26] audit: type=1326 audit(1760712711.077:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d05d8efc9 code=0x7ffc0000 [ 455.414357][ T26] audit: type=1326 audit(1760712711.077:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9426 comm="syz.4.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f1d05d8efc9 code=0x7ffc0000 [ 455.424412][ T9425] device team_slave_0 left promiscuous mode [ 455.506520][ T9425] team0: Port device team_slave_0 removed [ 455.507448][ T9425] device team_slave_1 left promiscuous mode [ 455.572167][ T9425] team0: Port device team_slave_1 removed [ 455.715163][ T4264] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 455.723912][ T4264] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 455.743178][ T9425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.768048][ T9425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.798526][ T9425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.822487][ T9425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.903266][ T9425] bond0: (slave macvlan2): Releasing backup interface [ 455.953633][ T9425] device team0 left promiscuous mode [ 456.109339][ T9425] bond3: (slave ip6gretap1): Releasing active interface [ 456.157843][ T9425] device ip6gretap1 left promiscuous mode [ 457.204398][ T4275] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 457.213520][ T4275] Bluetooth: hci0: Injecting HCI hardware error event [ 457.223062][ T4271] Bluetooth: hci0: hardware error 0x00 [ 457.383196][ T9428] team0: Mode changed to "loadbalance" [ 457.469898][ T9428] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1321'. [ 457.583090][ T9450] device vlan3 entered promiscuous mode [ 459.273831][ T4271] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 460.019912][ T9467] loop6: detected capacity change from 0 to 128 [ 460.384657][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 460.384672][ T26] audit: type=1326 audit(1760712716.227:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.3.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 460.616128][ T26] audit: type=1326 audit(1760712716.257:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.3.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 461.226551][ T26] audit: type=1326 audit(1760712716.257:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.3.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 461.403769][ T26] audit: type=1326 audit(1760712716.257:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.3.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 461.445582][ T26] audit: type=1326 audit(1760712716.267:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.3.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 462.480553][ T26] audit: type=1326 audit(1760712716.267:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.3.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 462.543849][ T26] audit: type=1326 audit(1760712716.277:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.3.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 462.582143][ T9489] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1339'. [ 462.612463][ T9489] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1339'. [ 462.630778][ T26] audit: type=1326 audit(1760712716.277:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.3.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 462.645616][ T9489] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1339'. [ 462.708977][ T26] audit: type=1326 audit(1760712716.277:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.3.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 462.719733][ T9489] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1339'. [ 462.795089][ T26] audit: type=1326 audit(1760712716.287:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9475 comm="syz.3.1335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f018efc9 code=0x7ffc0000 [ 462.849627][ T9489] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1339'. [ 462.934127][ T9500] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1339'. [ 463.768153][ T9516] device vlan2 entered promiscuous mode [ 464.844528][ T9528] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1362'. [ 467.659361][ T9564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1363'. [ 469.050574][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1363'. [ 470.747436][ T9599] Cannot find del_set index 3 as target [ 471.514140][ T4271] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 471.523362][ T4271] Bluetooth: hci3: Injecting HCI hardware error event [ 471.536920][ T4275] Bluetooth: hci3: hardware error 0x00 [ 471.656763][ T9601] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1374'. [ 471.768646][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1377'. [ 471.813816][ T9608] device bond0 entered promiscuous mode [ 471.854425][ T9608] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 471.886601][ T9608] device bond0 left promiscuous mode [ 473.096502][ T9632] netlink: 'syz.3.1384': attribute type 16 has an invalid length. [ 473.112864][ T9632] netlink: 'syz.3.1384': attribute type 17 has an invalid length. [ 473.131016][ T9632] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 473.179707][ T9632] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 473.194083][ T9632] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 473.206317][ T9632] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 473.224349][ T9632] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 473.253783][ T9632] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 473.279738][ T9632] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 473.308920][ T9632] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 473.349857][ T9632] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 473.371648][ T9632] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 473.390981][ T9632] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 473.408937][ T9632] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 473.448214][ T9632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 473.458041][ T9632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 473.596434][ T4275] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 474.198097][ T9645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1390'. [ 475.999812][ T9678] rdma_op ffff88805456f1f0 conn xmit_rdma 0000000000000000 [ 477.306339][ T9690] delete_channel: no stack [ 479.632920][ T9722] overlayfs: failed to clone upperpath [ 483.598013][ T9745] device vlan3 entered promiscuous mode [ 487.104103][ T9766] MTD: Couldn't look up './file0': -15 [ 488.172636][ T9772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1431'. [ 488.346105][ T9779] tipc: Enabling of bearer rejected, failed to enable media [ 489.020117][ T9795] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1439'. [ 492.580497][ T9826] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 493.633257][ T9836] overlayfs: failed to clone upperpath [ 494.189590][ T9843] netlink: 'syz.1.1454': attribute type 2 has an invalid length. [ 496.436821][ T9870] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 496.943317][ T9875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1463'. [ 498.002914][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1467'. [ 500.256854][ T52] block nbd0: Attempted send on invalid socket [ 500.263548][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 500.267308][ T9902] device bridge0 entered promiscuous mode [ 500.280941][ T9902] device vlan1 entered promiscuous mode [ 501.462280][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.470843][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.736606][ T9917] loop6: detected capacity change from 0 to 8 [ 502.797870][ T9917] SQUASHFS error: xz decompression failed, data probably corrupt [ 502.816743][ T9917] SQUASHFS error: Failed to read block 0x108: -5 [ 502.823296][ T9917] SQUASHFS error: Unable to read metadata cache entry [106] [ 502.832018][ T9917] SQUASHFS error: Unable to read inode 0x11f [ 502.839620][ T9924] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1477'. [ 502.933261][ T9928] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1477'. [ 511.432999][ T9992] netlink: 'syz.6.1497': attribute type 1 has an invalid length. [ 513.079409][ T9996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 513.811843][ T9996] bond1: (slave bond2): making interface the new active one [ 513.862949][ T9996] bond1: (slave bond2): Enslaving as an active interface with an up link [ 513.872332][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1496'. [ 513.944794][ T9992] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 513.980680][T10011] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1497'. [ 514.052501][T10011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.101451][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 518.630584][T10081] netlink: 'syz.5.1521': attribute type 11 has an invalid length. [ 519.405688][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 519.413315][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 519.947168][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 519.954965][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 519.962646][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 519.970395][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 519.981004][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 519.988568][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 521.643291][ T4511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.997307][ T4511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.526664][T10148] set match dimension is over the limit! [ 529.285481][T10192] loop6: detected capacity change from 0 to 2048 [ 529.354993][T10192] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 529.474543][T10198] EXT4-fs (loop6): shut down requested (0) [ 530.171879][ T7585] EXT4-fs (loop6): unmounting filesystem. [ 533.896207][T10246] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.1565'. [ 533.909813][T10246] net_ratelimit: 11 callbacks suppressed [ 533.909829][T10246] netlink: del zone limit has 4 unknown bytes [ 536.915415][T10285] netlink: 'syz.4.1581': attribute type 1 has an invalid length. [ 538.072819][T10285] 8021q: adding VLAN 0 to HW filter on device bond6 [ 538.086807][T10285] bond5: (slave bond6): making interface the new active one [ 538.102248][T10285] bond5: (slave bond6): Enslaving as an active interface with an up link [ 538.121822][T10304] bond5: (slave gretap2): Enslaving as a backup interface with an up link [ 538.225286][T10305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1581'. [ 538.252614][T10305] 8021q: adding VLAN 0 to HW filter on device bond5 [ 538.283505][ T8917] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 538.322787][ T8921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.341207][ T8921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.419179][T10318] netlink: 'syz.1.1586': attribute type 1 has an invalid length. [ 538.450955][T10318] netlink: 'syz.1.1586': attribute type 2 has an invalid length. [ 538.535759][T10322] netlink: 'syz.1.1586': attribute type 1 has an invalid length. [ 538.550182][T10322] netlink: 'syz.1.1586': attribute type 2 has an invalid length. [ 540.233375][T10345] loop6: detected capacity change from 0 to 256 [ 540.288748][T10345] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 540.356687][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 540.356703][ T26] audit: type=1326 audit(1760712801.188:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10344 comm="syz.6.1594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f865778efc9 code=0x0 [ 540.456611][T10348] xt_NFQUEUE: number of total queues is 0 [ 543.737602][T10398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1610'. [ 543.746684][T10398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1610'. [ 545.853016][T10420] netlink: 'syz.5.1615': attribute type 2 has an invalid length. [ 546.036366][T10420] device .*! entered promiscuous mode [ 552.846188][T10493] No such timeout policy "syz0" [ 553.685070][T10503] netlink: 1272 bytes leftover after parsing attributes in process `syz.3.1640'. [ 555.514236][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.003528][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.143133][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.776423][ T5455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.109872][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.140044][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.148517][ T5455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.218918][ T5455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.715983][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.933805][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.496898][ T5455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.204790][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.296023][ T5454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.943917][ T5454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.003936][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.032793][ T5454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.424468][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.191972][ T5454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.410581][T10603] sctp: [Deprecated]: syz.1.1678 (pid 10603) Use of struct sctp_assoc_value in delayed_ack socket option. [ 571.410581][T10603] Use struct sctp_sack_info instead [ 572.260376][ T5454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.273980][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.333887][ T5455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.430713][T10631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.601106][ T5455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.633518][T10631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.619067][ T4271] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 575.629857][ T4271] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 575.639942][ T4271] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 575.661031][ T4271] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 575.694605][ T4271] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 575.702602][ T4271] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 575.743836][ T5454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.747327][T10624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.326857][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.492189][ T4541] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.781384][ T4541] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.513824][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.754291][ T4275] Bluetooth: hci5: command 0x0409 tx timeout [ 577.902061][ T4541] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.565886][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.324193][ T4541] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.892892][ T4275] Bluetooth: hci5: command 0x041b tx timeout [ 579.904283][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.927348][T10634] chnl_net:caif_netlink_parms(): no params data found [ 579.962484][ T5455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.995340][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.449257][T10634] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.480930][T10634] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.519842][T10634] device bridge_slave_0 entered promiscuous mode [ 580.577261][T10634] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.612439][T10634] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.683560][T10634] device bridge_slave_1 entered promiscuous mode [ 581.051965][ T5455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.109645][T10634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.139839][T10634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.290078][T10634] team0: Port device team_slave_0 added [ 581.904735][T10684] loop6: detected capacity change from 0 to 128 [ 581.981213][ T4275] Bluetooth: hci5: command 0x040f tx timeout [ 582.023912][T10684] qnx6: superblock #1 checksum error [ 582.108111][ T5455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.022755][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.076238][T10634] team0: Port device team_slave_1 added [ 583.131299][ T5455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.308356][T10634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.318130][T10634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.411386][T10634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.519874][T10634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.532182][T10634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.618746][T10634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.851117][T10634] device hsr_slave_0 entered promiscuous mode [ 583.867835][T10634] device hsr_slave_1 entered promiscuous mode [ 583.890546][T10634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.903119][T10634] Cannot create hsr debugfs directory [ 584.002518][ T4275] Bluetooth: hci5: command 0x0419 tx timeout [ 584.445032][ T5454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.548379][ T4541] bond2: (slave gretap1): Releasing backup interface [ 584.975936][T10722] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1694'. [ 585.568728][ T5454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.578295][ T4541] IPVS: stopping backup sync thread 5148 ... [ 586.483108][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.495710][ T4625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.648145][ T5455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.676628][T10731] loop6: detected capacity change from 0 to 128 [ 586.731947][T10731] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 587.058601][ T4625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.070618][ T4511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.080509][ T5460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.800820][ T5457] net_ratelimit: 2 callbacks suppressed [ 588.800839][ T5457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.844349][ T4541] bond0: (slave wlan1): Releasing backup interface [ 588.874798][ T4541] device wlan1 left promiscuous mode [ 588.939929][T10749] tipc: Enabling of bearer rejected, failed to enable media [ 589.514021][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.174050][ T5457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.241642][ T4541] device hsr_slave_0 left promiscuous mode [ 590.255091][ T4541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.263812][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.303822][ T4541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.335221][ T4541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.352917][ T4541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.811756][T10745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.835279][ T26] audit: type=1107 audit(1760712851.944:641): pid=10757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' Pf[G O\iS *̕_Y֎HXDW' [ 591.884517][ T4541] device bond0 left promiscuous mode [ 591.899990][ T4541] device bond_slave_0 left promiscuous mode [ 591.928527][ T4541] device bond_slave_1 left promiscuous mode [ 591.948349][ T4541] device macvlan2 left promiscuous mode [ 591.966823][ T4541] device team0 left promiscuous mode [ 591.972361][ T4541] device team_slave_0 left promiscuous mode [ 591.989304][ T4541] device team_slave_1 left promiscuous mode [ 592.003244][ T4541] device veth1_macvtap left promiscuous mode [ 592.018938][ T4541] device veth0_macvtap left promiscuous mode [ 592.109505][ T4541] device veth1_vlan left promiscuous mode [ 592.159185][ T4511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.271497][ T4541] device veth0_vlan left promiscuous mode [ 592.828204][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.891309][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.992997][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.084824][ T5181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.104853][ T5181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.124402][ T5460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.178327][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.213755][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.000874][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.016096][T10745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.189268][ T4541] bond2 (unregistering): (slave bond3): Releasing backup interface [ 596.210118][ T4541] bond3 (unregistering): Released all slaves [ 596.243136][ T4541] bond2 (unregistering): Released all slaves [ 596.620238][ T4541] bond1 (unregistering): Released all slaves [ 596.672050][ T4541] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 597.379806][T10745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.916766][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.134118][ T4541] team0 (unregistering): Port device team_slave_1 removed [ 599.202108][ T4511] net_ratelimit: 2 callbacks suppressed [ 599.202127][ T4511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.215933][ T4511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.225503][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.243031][ T4318] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.243972][ T4541] team0 (unregistering): Port device team_slave_0 removed [ 599.319368][ T4541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.389098][ T4541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.441482][T10745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.835820][ T4625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.844181][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.180337][ T4541] bond0 (unregistering): Released all slaves [ 600.201832][T10767] tipc: Enabling of bearer rejected, failed to enable media [ 600.211760][T10826] netlink: 'syz.6.1721': attribute type 1 has an invalid length. [ 600.346045][T10831] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1723'. [ 600.369507][T10634] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 600.408668][T10634] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 600.479589][T10634] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 600.497606][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.509218][T10634] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 601.056624][T10835] loop6: detected capacity change from 0 to 1024 [ 601.222226][T10835] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 601.453357][T10850] ptrace attach of "./syz-executor exec"[4280] was attempted by " [ 602.179671][T10745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.303886][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.367009][ T26] audit: type=1326 audit(1760712863.204:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10834 comm="syz.6.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865778efc9 code=0x7ffc0000 [ 603.682894][ T26] audit: type=1326 audit(1760712863.204:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10834 comm="syz.6.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865778efc9 code=0x7ffc0000 [ 603.784763][ T26] audit: type=1326 audit(1760712863.234:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10834 comm="syz.6.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f865778efc9 code=0x7ffc0000 [ 603.907111][T10634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.926603][ T7585] EXT4-fs (loop6): unmounting filesystem. [ 603.931441][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 603.941115][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 603.953511][T10634] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.136269][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 604.164516][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 604.173565][ T4511] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.181362][ T4511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.189602][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 604.208575][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 604.220035][ T4511] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.227290][ T4511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.244256][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 604.260948][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 604.304952][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 604.315137][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 604.339801][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 604.382582][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 604.424413][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 604.447216][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 604.497918][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 604.517592][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 605.826003][ T7] net_ratelimit: 2 callbacks suppressed [ 605.826023][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.853027][ T4511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.863826][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.953375][ T5460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.005406][T10634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 606.059025][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.070271][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.093908][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.103712][T10634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 606.128040][T10887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.151371][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 606.161278][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 607.394076][T10898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.441138][T10745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.725211][T10905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.909071][T10905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 607.959989][T10905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.378948][ T8916] net_ratelimit: 3 callbacks suppressed [ 611.378967][ T8916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.490297][T10745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.499566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.513947][ T5457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.523334][ T5457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.544411][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.570547][ T1176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.625599][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.629172][T10922] netlink: 'syz.5.1744': attribute type 10 has an invalid length. [ 611.642435][ T1176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.654331][ T8916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.688678][T10922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.735686][T10922] team0: Port device bond0 added [ 611.749445][T10924] netlink: 'syz.4.1745': attribute type 1 has an invalid length. [ 611.772413][T10926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1744'. [ 612.010984][T10926] team0 (unregistering): Port device bond0 removed [ 612.044672][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1755'. [ 612.070393][T10928] bond7: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 612.089962][T10924] 8021q: adding VLAN 0 to HW filter on device bond7 [ 612.103271][T10932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1755'. [ 612.332005][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 612.340504][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 612.348498][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 613.033881][T10634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.825587][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 616.840633][ T4625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 616.862094][T10968] net_ratelimit: 9 callbacks suppressed [ 616.862111][T10968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.877081][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.896050][T10634] device veth0_vlan entered promiscuous mode [ 616.915940][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 616.931888][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 616.948484][T10634] device veth1_vlan entered promiscuous mode [ 616.956518][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 616.966385][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 616.975770][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 617.003476][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 617.013427][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 617.025444][ T5181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 617.037676][T10634] device veth0_macvtap entered promiscuous mode [ 617.051789][T10634] device veth1_macvtap entered promiscuous mode [ 617.069119][T10634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.079725][T10634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.091987][T10634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.100076][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 617.108101][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.118396][T10967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.127270][ T5457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.129611][ T8916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.140253][T10966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.152137][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.164566][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 617.174250][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 617.183225][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 617.195058][T10634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.206765][T10634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.221705][T10634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.231192][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 617.241316][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 617.253379][T10634] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.277027][T10634] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.297103][T10634] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.307793][T10634] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.127634][T10986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.164791][ T5457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.254568][ T1176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.355104][T10986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.422425][T10991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.946985][T11001] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1763'. [ 620.975180][T11000] tipc: Started in network mode [ 620.990464][T11000] tipc: Node identity f25186131384, cluster identity 4711 [ 621.008104][T11000] tipc: Enabled bearer , priority 0 [ 621.020675][T11000] device syzkaller0 entered promiscuous mode [ 621.117865][T11000] tipc: Resetting bearer [ 621.162456][T10998] tipc: Resetting bearer [ 621.234380][T10998] tipc: Disabling bearer [ 622.128255][ T4541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.169790][ T8916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.179546][ T8916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.205009][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 622.222577][ T4541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.252756][ T5457] net_ratelimit: 7 callbacks suppressed [ 622.252782][ T5457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.272954][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 622.314051][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.592650][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.139115][T11017] Cannot find add_set index 0 as target [ 623.386795][ T5181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.394840][ T126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.277695][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.297451][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.409511][T10745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.595053][ T1176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.802417][T10745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.811486][ T5455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.012189][T10745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.724083][ T5460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.388253][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.399490][T10745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.779097][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.826716][ T5457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.939440][ T1176] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 630.246439][T11083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 630.303872][ T1176] usb 7-1: Using ep0 maxpacket: 32 [ 630.313455][ T1176] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.507974][ T1176] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.530489][ T1176] usb 7-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 630.547468][ T1176] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.524779][ T1176] usb 7-1: config 0 descriptor?? [ 631.531381][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.562792][ T5460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.571877][ T5455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.814829][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.844999][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.079342][ T7] net_ratelimit: 1 callbacks suppressed [ 633.079361][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.120303][T10745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.172094][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.293811][T11107] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 633.320711][T11107] CIFS mount error: No usable UNC path provided in device string! [ 633.320711][T11107] [ 633.331224][T11107] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 633.804460][ T5457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.066067][T11111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.077626][T11111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.086512][T11111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.095211][T11111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.104193][T11111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.112963][T11111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.194667][ T1176] usbhid 7-1:0.0: can't add hid device: -71 [ 635.200743][ T1176] usbhid: probe of 7-1:0.0 failed with error -71 [ 635.258090][ T1176] usb 7-1: USB disconnect, device number 5 [ 639.335470][ T4750] net_ratelimit: 358 callbacks suppressed [ 639.335489][ T4750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.368405][ T1176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.422656][ T5457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.497535][ T5454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.209157][T11142] device bridge0 entered promiscuous mode [ 640.223434][T11142] bridge0: port 1(macsec1) entered blocking state [ 640.274033][T11142] bridge0: port 1(macsec1) entered disabled state [ 640.284056][ T4325] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 640.377405][T11142] device bridge0 left promiscuous mode [ 640.506121][ T4325] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.532883][ T4325] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 640.542516][ T4325] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 640.558825][ T4325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.644898][ T4325] usb 7-1: config 0 descriptor?? [ 640.663775][ T5457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.678221][ T4325] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 641.344961][ T4625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.376814][ T4325] dvb-usb: bulk message failed: -22 (3/0) [ 641.573053][ T4325] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 641.650698][ T4325] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 641.682301][ T4325] usb 7-1: media controller created [ 641.719074][ T4325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 641.851060][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.907161][ T4325] dvb-usb: bulk message failed: -22 (6/0) [ 641.923862][ T4325] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 642.002717][T11165] xt_bpf: check failed: parse error [ 642.030553][ T4325] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input7 [ 642.567080][ T4325] dvb-usb: schedule remote query interval to 150 msecs. [ 642.764483][ T4325] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 642.834951][ T5455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.379708][ T5454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.715442][ T5457] dvb-usb: bulk message failed: -22 (1/0) [ 643.743726][ T5457] dvb-usb: error while querying for an remote control event. [ 643.744159][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.840085][ T4332] usb 7-1: USB disconnect, device number 6 [ 643.908716][T11181] xt_CT: You must specify a L4 protocol and not use inversions on it [ 643.992388][ T4332] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 644.871984][ T5455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.082706][ T5457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.091238][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.122182][ T4511] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.031463][ T4625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.411268][ T1176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.786470][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.686744][T11237] loop7: detected capacity change from 0 to 512 [ 649.663843][ T5457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.672265][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.328822][T11237] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 650.351143][T11237] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 651.200792][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.209556][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.217766][ T1176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.350349][T11265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.359750][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.423357][T11265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.483254][T11271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.511515][T11275] loop6: detected capacity change from 0 to 128 [ 651.531835][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1830'. [ 651.544440][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.563667][T11271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.614673][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.705217][T10634] EXT4-fs (loop7): unmounting filesystem. [ 652.834990][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'. [ 652.855454][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1838'. [ 652.922061][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 652.958600][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 652.980817][T11297] loop7: detected capacity change from 0 to 128 [ 653.064074][T11297] FAT-fs (loop7): Unrecognized mount option "" or missing value [ 653.939993][T11294] netlink: 'syz.5.1836': attribute type 10 has an invalid length. [ 654.035686][T11294] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 657.278218][ T6885] net_ratelimit: 11 callbacks suppressed [ 657.278238][ T6885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.320589][ T4332] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.344531][ T5455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.353423][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.486131][T11334] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1848'. Stopping sshd: [ 657.646437][T11339] tipc: Started in network mode [ 657.651399][T11339] tipc: Node identity 4, cluster identity 4711 [ 657.684266][T11339] tipc: Node number set to 4 [ 658.444993][ T5457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.685157][ T4614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.411863][T11355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1854'. [ 659.522307][ T5457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog stopped /usr/sbin/sshd (pid 4024) OK [ 660.285682][T11363] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.295384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.394395][ T5457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog Stopping crond: [ 662.477887][ T4479] net_ratelimit: 4 callbacks suppressed [ 662.477907][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.784542][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog stopped /usr/sbin/crond (pid 4010) OK [ 663.248459][T11391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.671937][T11391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.682603][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.713711][T11391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.772911][T11391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.926175][ T4325] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.935703][T11391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.944013][T11391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog Stopping dhcpcd... no /sbin/dhcpcd found; none killed [ 667.525514][ T26] audit: type=1326 audit(1760712928.287:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.7.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e7f8efc9 code=0x7ffc0000 Stopping network: [ 667.716088][ T26] audit: type=1326 audit(1760712928.287:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.7.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e7f8efc9 code=0x7ffc0000 [ 667.806542][ T5457] net_ratelimit: 6 callbacks suppressed [ 667.806562][ T5457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.831007][ T26] audit: type=1326 audit(1760712928.327:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.7.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f16e7f8efc9 code=0x7ffc0000 [ 667.888551][ T26] audit: type=1326 audit(1760712928.336:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.7.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e7f8efc9 code=0x7ffc0000 [ 667.907086][T11441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.948147][ T26] audit: type=1326 audit(1760712928.336:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.7.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e7f8efc9 code=0x7ffc0000 [ 667.971788][T11441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.020742][T11441] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.074305][ T26] audit: type=1326 audit(1760712928.356:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.7.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f16e7f8efc9 code=0x7ffc0000 [ 668.155712][ T26] audit: type=1326 audit(1760712928.386:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.7.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e7f8efc9 code=0x7ffc0000 [ 668.203555][ T26] audit: type=1326 audit(1760712928.386:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.7.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e7f8efc9 code=0x7ffc0000 [ 668.244692][ T26] audit: type=1326 audit(1760712928.406:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.7.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f16e7f8efc9 code=0x7ffc0000 [ 668.277062][ T26] audit: type=1326 audit(1760712928.436:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.7.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e7f8efc9 code=0x7ffc0000 [ 668.303892][T11452] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1881'. [ 668.317287][ T4378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.404219][T11452] HTB: quantum of class 80210008 is small. Consider r2q change. [ 669.085645][T11463] loop6: detected capacity change from 0 to 2368 [ 669.828491][T11463] loop6: detected capacity change from 0 to 256 [ 670.102677][ T5457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.955875][ T4479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.116197][ T5455] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.290270][ T4750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog OK serialport: VM disconnected.