last executing test programs: 1m18.578375669s ago: executing program 2 (id=2916): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000240)="673aaa44fa73c2d18f929b3e0b096f9c4f483461835123dc2371a7ef12576b0192d51da57ac78a1ee9c176c58e8b5363a4d075e8e513c58bba87aeb73c75144e4c3ed16c852112472af5d7ae09", 0x4d) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x10) r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x42}, 0x80, 0x0}, 0x24048015) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f0000000040)={0x3, @bcast}) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}, {}]}) 1m17.579802157s ago: executing program 2 (id=2920): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r4, &(0x7f00000003c0), 0x0, 0x0, 0x0) write$sysctl(r4, 0x0, 0x0) writev(r4, &(0x7f00000003c0), 0x100000000000022d) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) close(r3) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0xee01, 0x0) epoll_create1(0x0) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) 1m14.098912919s ago: executing program 2 (id=2923): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x20}, 0x8, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 1m13.855021364s ago: executing program 2 (id=2926): syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) socket(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000001c0)=0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, 0x4, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6840}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) 1m12.70549136s ago: executing program 2 (id=2929): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) 56.453846536s ago: executing program 32 (id=2929): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) 20.669000439s ago: executing program 0 (id=3033): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 16.611667412s ago: executing program 0 (id=3043): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x3, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x10003300, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}]}, 0x68}}, 0x4000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 13.347625761s ago: executing program 4 (id=3051): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f00000000c0)={0x372, @time={0x7665642f, 0x6}, 0x0, {}, 0x1, 0x1, 0x70}) sendto$inet(r6, &(0x7f0000000140), 0x0, 0x20008005, 0x0, 0x0) shutdown(r6, 0x0) recvfrom(r6, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, 0x0) 11.873310716s ago: executing program 4 (id=3052): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3a) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000024000040020011"], 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f00000001c0)) signalfd4(r4, &(0x7f0000000240)={[0xb]}, 0x8, 0x80000) 10.229365821s ago: executing program 0 (id=3055): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f0000000100), 0x1003) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x756be000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="0400000200"/20, @ANYRES32=0x0, @ANYBLOB="000000000000001aa3"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000f6ff00007b8af8ff000000000000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300007f22c4c6e3df645221e8f1c636d72375c0671cdc0f08525592a1e3d6313b937cffbbee2d4ce179f16731ad70cfab07e0630a0be4d20bcf71aa10b4502bc3638b2dffbf0d0a652ffcc216fb1a6a375bbfbd30478a7c161d45ec0ddbd5e5f19608bb19e34decb078a62ffeb0", @ANYRES32=r4, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r5, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r0, 0x0, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x81) socket$inet_sctp(0x2, 0x5, 0x84) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000025000103"], 0x114}], 0x1}, 0x40000) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB], 0xa) 9.155447912s ago: executing program 4 (id=3057): fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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") pipe2$9p(&(0x7f00000001c0), 0x0) syz_clone(0x5a86480, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000004c0)={0x5, 0x0, 0x0, 'queue0\x00', 0x12}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x801, 0x0) pipe2(&(0x7f0000000100), 0x0) 7.789992871s ago: executing program 1 (id=3059): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) socket(0x28, 0x801, 0x0) r1 = userfaultfd(0x80001) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x3, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmmsg(r2, 0x0, 0x0, 0x40840) fsmount(r0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 7.759940183s ago: executing program 4 (id=3061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100", @ANYRES32=0x0, @ANYBLOB], 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={0x0, @multicast1, @broadcast}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r3, 0x58, &(0x7f0000000880)}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006d00010023bd7000fddbdf2500000000", @ANYRES32=r5, @ANYBLOB="0a000200b226fb00000000ffec"], 0x38}, 0x1, 0x0, 0x0, 0x4000005}, 0x40000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8}, @func_proto, @restrict={0x0, 0x0, 0x0, 0x9}]}, {0x0, [0x2e, 0x2e, 0x5f, 0x0, 0x2e, 0x61, 0x2e]}}, 0x0, 0x4a}, 0x28) getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, &(0x7f0000000280)={'IDLETIMER\x00'}, &(0x7f00000002c0)=0x1e) 7.684627277s ago: executing program 5 (id=2960): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x20}, 0x8, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 7.536166506s ago: executing program 1 (id=3062): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000240)="673aaa44fa73c2d18f929b3e0b096f9c4f483461835123dc2371a7ef12576b0192d51da57ac78a1ee9c176c58e8b5363a4d075e8e513c58bba87aeb73c75144e4c3ed16c852112472af5d7ae09", 0x4d) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x10) r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x42}, 0x80, 0x0}, 0x24048015) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f0000000040)={0x3, @bcast}) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}, {}]}) 6.771368979s ago: executing program 5 (id=3063): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0) bind$xdp(r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) r6 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000003300)={'filter\x00', 0x0, [0x2, 0x4, 0x5, 0x3, 0x2]}, &(0x7f0000003380)=0x54) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x40) 6.654430766s ago: executing program 3 (id=3064): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000240)="673aaa44fa73c2d18f929b3e0b096f9c4f483461835123dc2371a7ef12576b0192d51da57ac78a1ee9c176c58e8b5363a4d075e8e513c58bba87aeb73c75144e4c3ed16c852112472af5d7ae09", 0x4d) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x10) r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x42}, 0x80, 0x0}, 0x24048015) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f0000000040)={0x3, @bcast}) 6.652402406s ago: executing program 4 (id=3065): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000240)='virtiofs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000100)='\x00', 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r6 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x1, 0x10}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) r7 = syz_io_uring_setup(0x3b93, &(0x7f0000000080)={0x0, 0x62e4, 0x8, 0x2, 0x1fb, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x1622}, 0x1}) syz_io_uring_submit(r8, r9, &(0x7f0000001700)=@IORING_OP_RECVMSG={0xa, 0x16, 0x0, r2, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=@pptp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)=""/64, 0x40}], 0x1, &(0x7f0000000480)=""/174, 0xae}, 0x0, 0x10001, 0x0, {0x2}}) io_uring_enter(r7, 0x1808, 0x0, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x8001022, 0x401, 0x1, 0x6dc2, 0xfff, 0x5, 0x0, 0x3df, 0x200e, 0x3ff, 0x4, 0xfffff350, 0x9, 0x9, 0x4, 0x4, 0x2, 0x9, 0x80000089, 0xfffffffe, 0x8, 0xfffffff5, 0x8000, 0x0, 0x3a2, 0x0, 0x1e9f, 0xc6, 0xdffffffa]}) 5.234380288s ago: executing program 5 (id=3066): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 5.145881293s ago: executing program 3 (id=3067): open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) writev(r6, &(0x7f00000005c0)=[{&(0x7f00000004c0)='F', 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.145186093s ago: executing program 1 (id=3077): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000240)="673aaa44fa73c2d18f929b3e0b096f9c4f483461835123dc2371a7ef12576b0192d51da57ac78a1ee9c176c58e8b5363a4d075e8e513c58bba87aeb73c75144e4c3ed16c852112472af5d7ae09", 0x4d) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x10) r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x0, 0x42}, 0x80, 0x0}, 0x24048015) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f0000000040)={0x3, @bcast}) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000040)={[{@dyn}, {}]}) 4.446631673s ago: executing program 3 (id=3068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 4.041502027s ago: executing program 4 (id=3069): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r1, 0x40086f52, &(0x7f0000000000)={0x3c, &(0x7f0000000100)}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) sendmsg$sock(r5, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e21, 0x41d, @ipv4={'\x00', '\xff\xff', @private=0xa010105}, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x10, 0x1, 0x24, 0x800}}, @mark={{0x10, 0x1, 0x51, 0x108}}], 0x20}, 0x80) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 4.018070778s ago: executing program 1 (id=3070): syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000001c0)=0xb) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x4, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0xc010) 3.009355767s ago: executing program 0 (id=3071): socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r8, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r8, 0x40047435, &(0x7f0000000200)=0x2) 2.661231446s ago: executing program 3 (id=3072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x20000023896) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f00000002c0)=0x803, 0x4) syz_emit_ethernet(0x9a, &(0x7f0000000ec0)={@broadcast, @random="00759d7800", @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x8, [{@remote, 0xfdd}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x2a5b}]}]}}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "fff522a45d565fd1bef2bde44c7648f5ba27bbe6628c1000836849b5e92bda7c", "146a317637af5c94b1e2cab23b8908c4", {"1440048630554f6e84da34a7130f3e64", "2585ff3e812ec53f2f0d7d41bea87c5c"}}}}}}}, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x100000000, 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000023c0), 0x80, 0x0) ioctl$PTP_SYS_OFFSET(r6, 0x43403d05, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.476761538s ago: executing program 1 (id=3073): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000100)={0x20}, 0x8, 0x0) landlock_restrict_self(r5, 0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) 1.057318999s ago: executing program 3 (id=3074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000440)=""/231, 0xe7}], 0x1, 0x8001, 0xfffffffc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000140)={0x100, r4}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r5 = landlock_create_ruleset(0x0, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f00000002c0)={0x20, r6}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) 1.02913321s ago: executing program 0 (id=3075): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000100)={0x20}, 0x8, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r2, 0x0) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x8, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x0) 973.797404ms ago: executing program 1 (id=3076): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$IPC_RMID(0x0, 0x0, 0x10) add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) openat$dir(0xffffffffffffff9c, 0x0, 0x51f180, 0x100) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@host}) getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c07a9d47564656661756c7420757365723a"], 0x2a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x2, 0xfed, &(0x7f0000001e00)=""/4077}, 0x70) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0xffffffffffffffff) 24.155308ms ago: executing program 3 (id=3078): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0) bind$xdp(r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) r6 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000003300)={'filter\x00', 0x0, [0x2, 0x4, 0x5, 0x3, 0x2]}, &(0x7f0000003380)=0x54) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) creat(0x0, 0x15) 0s ago: executing program 0 (id=3079): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1c, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) utimensat(r3, 0x0, 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000002000/0x4000)=nil) shmctl$SHM_LOCK(r6, 0xb) socket$nl_audit(0x10, 0x3, 0x9) shmctl$SHM_UNLOCK(r6, 0xc) sendmsg$nl_route(r5, 0x0, 0x0) read$FUSE(r4, &(0x7f00000012c0)={0x2020}, 0x2020) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) capset(0x0, 0x0) kernel console output (not intermixed with test programs): T5294] bond1: (slave erspan1): making interface the new active one [ 130.849156][ T5294] device erspan1 entered promiscuous mode [ 130.866980][ T5294] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 130.913963][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 130.938219][ T26] audit: type=1804 audit(3918351897.120:16): pid=5301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.285" name="bus" dev="ramfs" ino=36291 res=1 errno=0 [ 131.401861][ T21] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 131.567171][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.577530][ T26] audit: type=1804 audit(3918351897.120:17): pid=5301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.285" name="bus" dev="ramfs" ino=36291 res=1 errno=0 [ 131.621157][ T21] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.678526][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.719181][ T21] usb 1-1: config 0 descriptor?? [ 131.944405][ T21] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 131.981698][ T1107] usb 1-1: USB disconnect, device number 3 [ 133.869590][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.878241][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.093792][ T5326] loop3: detected capacity change from 0 to 128 [ 135.572266][ T5326] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.744065][ T5326] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.196154][ T5343] Cannot find del_set index 4 as target [ 141.744859][ T5368] tipc: Failed to remove unknown binding: 66,0,0/0:185988947/185988948 [ 141.792919][ T5368] tipc: Failed to remove unknown binding: 66,0,0/0:185988947/185988948 [ 142.823133][ T5387] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.832168][ T5387] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.196212][ T5387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.378267][ T5387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.240531][ T5387] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.251181][ T5387] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.260213][ T5387] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.268591][ T5387] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.300255][ T5387] device bond1 left promiscuous mode [ 146.306126][ T5387] device erspan1 left promiscuous mode [ 146.487392][ T5471] binder: 5466:5471 ioctl 0 0 returned -22 [ 147.978100][ T5493] loop4: detected capacity change from 0 to 128 [ 147.985134][ T5491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 148.059035][ T5476] loop1: detected capacity change from 0 to 8192 [ 148.140642][ T5476] loop1: p1 p2 [ 148.167522][ T5476] loop1: partition table partially beyond EOD, truncated [ 148.179061][ T5476] loop1: p1 start 16777216 is beyond EOD, truncated [ 148.222533][ T5476] loop1: p2 size 515840 extends beyond EOD, truncated [ 148.589783][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 149.606558][ T5540] loop4: detected capacity change from 0 to 131072 [ 150.237779][ T5540] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 150.244761][ T5540] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 150.257391][ T5540] F2FS-fs (loop4): invalid crc value [ 150.316257][ T5540] F2FS-fs (loop4): Found nat_bits in checkpoint [ 150.370290][ T5540] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 150.377473][ T5540] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 151.124382][ T5540] F2FS-fs (loop4): f2fs_remove_inode_page: inconsistent i_blocks, ino:7, iblocks:10232 [ 151.248297][ T5571] device syzkaller0 entered promiscuous mode [ 151.425187][ T5577] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 152.784483][ T26] audit: type=1326 audit(3918351918.970:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5584 comm="syz.2.356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f929d3d4f79 code=0x0 [ 155.584415][ T5626] device syzkaller0 entered promiscuous mode [ 155.651924][ T5629] netlink: 'syz.3.365': attribute type 1 has an invalid length. [ 155.723511][ T5629] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.948991][ T5631] bond1: (slave geneve2): making interface the new active one [ 155.970706][ T5631] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 156.006030][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 156.247469][ T5643] loop3: detected capacity change from 0 to 2048 [ 157.282967][ T5643] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.548902][ T5670] loop2: detected capacity change from 0 to 128 [ 158.689184][ T5670] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.711743][ T5670] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.474209][ T5676] loop4: detected capacity change from 0 to 256 [ 159.606933][ T5676] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.621004][ T5676] vfat filesystem being mounted at /69/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 159.913256][ T4519] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.462956][ T5709] xt_l2tp: missing protocol rule (udp|l2tpip) [ 161.623283][ T5719] loop4: detected capacity change from 0 to 128 [ 161.684972][ T5723] loop2: detected capacity change from 0 to 256 [ 161.767414][ T5725] loop3: detected capacity change from 0 to 128 [ 161.776907][ T5723] vfat filesystem being mounted at /84/file1 supports timestamps until 2107-12-31 (0x10390e2fe) [ 161.809884][ T5719] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.894959][ T5719] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.820625][ T5751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 164.769723][ T5776] loop3: detected capacity change from 0 to 256 [ 165.567536][ T5780] loop2: detected capacity change from 0 to 131072 [ 165.681562][ T5776] vfat filesystem being mounted at /87/file1 supports timestamps until 2107-12-31 (0x10390e2fe) [ 166.057049][ T5780] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 166.064603][ T5780] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 166.104297][ T5790] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 166.923389][ T5780] F2FS-fs (loop2): invalid crc value [ 167.297266][ T5780] F2FS-fs (loop2): Found nat_bits in checkpoint [ 167.687341][ T5780] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 167.694442][ T5780] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 169.305085][ T5810] netlink: 'syz.0.413': attribute type 10 has an invalid length. [ 169.369372][ T5814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.415'. [ 170.190498][ T5826] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 170.961261][ T5836] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 171.038298][ T5837] tipc: Started in network mode [ 171.062112][ T5837] tipc: Node identity 4, cluster identity 4711 [ 171.062496][ T5839] syz.1.424 uses obsolete (PF_INET,SOCK_PACKET) [ 171.068801][ T5837] tipc: Node number set to 4 [ 171.114798][ T5841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'. [ 173.283774][ T5868] loop2: detected capacity change from 0 to 2048 [ 173.516072][ T5868] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.421686][ T5897] 9p filesystem being mounted at /83/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 176.291712][ T5450] Bluetooth: hci2: command 0x0406 tx timeout [ 176.297824][ T5450] Bluetooth: hci4: command 0x0406 tx timeout [ 176.310360][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.331441][ T5450] Bluetooth: hci3: command 0x0406 tx timeout [ 176.351595][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.359896][ T5450] Bluetooth: hci1: command 0x0406 tx timeout [ 176.599292][ T5911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.607628][ T5911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.597913][ T5921] loop3: detected capacity change from 0 to 131072 [ 177.787240][ T5921] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 177.795555][ T5921] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 177.816696][ T5921] F2FS-fs (loop3): invalid crc value [ 179.818364][ T5921] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 180.514219][ T5938] binder: BINDER_SET_CONTEXT_MGR already set [ 181.732954][ T5938] binder: 5937:5938 ioctl 4018620d 200000004a80 returned -16 [ 182.957319][ T5974] xt_policy: output policy not valid in PREROUTING and INPUT [ 184.075148][ T5975] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 184.290614][ T5984] loop3: detected capacity change from 0 to 256 [ 184.595660][ T5984] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.820903][ T5984] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 185.203881][ T5984] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 186.994081][ T5984] exfat filesystem being mounted at /98/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 187.936202][ T6007] kvm: emulating exchange as write [ 188.576330][ T6021] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000 [ 189.863232][ T6040] IPv6: NLM_F_CREATE should be specified when creating new route [ 189.937525][ T6044] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 189.957089][ T6044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.481'. [ 190.011557][ T4250] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 190.131709][ T6049] syz.4.493 sent an empty control message without MSG_MORE. [ 190.718595][ T21] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 191.004323][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 191.004447][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 191.006089][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.006204][ T6060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.071973][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.101374][ T21] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x4B, skipping [ 191.119449][ T21] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD9, skipping [ 191.130905][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 191.221671][ T21] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 191.241142][ T21] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 191.261078][ T21] usb 4-1: Manufacturer: syz [ 191.291592][ T4250] usb 1-1: unable to get BOS descriptor or descriptor too short [ 191.299262][ T21] usb 4-1: config 0 descriptor?? [ 191.321733][ T6040] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 191.361604][ T4250] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 191.369392][ T4250] usb 1-1: can't read configurations, error -71 [ 191.579282][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.588116][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.610141][ T5450] usb 4-1: USB disconnect, device number 4 [ 191.914164][ T6065] loop4: detected capacity change from 0 to 256 [ 191.947950][ T6065] FAT-fs (loop4): Directory bread(block 64) failed [ 191.954758][ T6065] FAT-fs (loop4): Directory bread(block 65) failed [ 191.961503][ T6065] FAT-fs (loop4): Directory bread(block 66) failed [ 191.969320][ T6065] FAT-fs (loop4): Directory bread(block 67) failed [ 191.976532][ T6065] FAT-fs (loop4): Directory bread(block 68) failed [ 191.983399][ T6065] FAT-fs (loop4): Directory bread(block 69) failed [ 191.991194][ T6065] FAT-fs (loop4): Directory bread(block 70) failed [ 191.997964][ T6065] FAT-fs (loop4): Directory bread(block 71) failed [ 192.005282][ T6065] FAT-fs (loop4): Directory bread(block 72) failed [ 192.012009][ T6065] FAT-fs (loop4): Directory bread(block 73) failed [ 192.545527][ T6065] vfat filesystem being mounted at /91/bus supports timestamps until 2107-12-31 (0x10391447e) [ 193.014820][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 193.193250][ T6097] binder_alloc: 6091: binder_alloc_buf, no vma [ 193.578336][ T6095] 9p filesystem being mounted at /92/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 194.913204][ T6115] loop2: detected capacity change from 0 to 7 [ 194.945546][ T4177] loop2: [ 194.948524][ T4177] loop2: partition table partially beyond EOD, truncated [ 195.176113][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.182469][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.216116][ T6115] loop2: [ 195.225178][ T6115] loop2: partition table partially beyond EOD, truncated [ 195.278192][ T6119] binder: 6118:6119 ioctl c0306201 2000000003c0 returned -14 [ 198.635775][ T6146] device ip6gre1 entered promiscuous mode [ 198.672744][ T6152] 9p filesystem being mounted at /111/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 200.484932][ T6167] ODEBUG: Out of memory. ODEBUG disabled [ 200.611267][ T6166] loop3: detected capacity change from 0 to 256 [ 201.206474][ T6184] xt_policy: neither incoming nor outgoing policy selected [ 201.261384][ T6166] exfat: Deprecated parameter 'utf8' [ 201.950021][ T6166] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 201.979896][ T6166] exfat filesystem being mounted at /105/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 202.872073][ T6205] Invalid option length (1047662) for dns_resolver key [ 203.364953][ T6213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.529'. [ 203.409917][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.532'. [ 203.553938][ T6213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.529'. [ 203.651686][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 203.734780][ T6214] 9p filesystem being mounted at /105/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 205.042124][ T6237] loop2: detected capacity change from 0 to 256 [ 205.855028][ T6237] FAT-fs (loop2): Directory bread(block 64) failed [ 205.861973][ T6237] FAT-fs (loop2): Directory bread(block 65) failed [ 205.869049][ T6237] FAT-fs (loop2): Directory bread(block 66) failed [ 205.875801][ T6237] FAT-fs (loop2): Directory bread(block 67) failed [ 205.882872][ T6237] FAT-fs (loop2): Directory bread(block 68) failed [ 205.889578][ T6237] FAT-fs (loop2): Directory bread(block 69) failed [ 205.896598][ T6237] FAT-fs (loop2): Directory bread(block 70) failed [ 205.903347][ T6237] FAT-fs (loop2): Directory bread(block 71) failed [ 205.910366][ T6237] FAT-fs (loop2): Directory bread(block 72) failed [ 205.917065][ T6237] FAT-fs (loop2): Directory bread(block 73) failed [ 205.984486][ T6237] vfat filesystem being mounted at /115/bus supports timestamps until 2107-12-31 (0x10391447e) [ 207.306156][ T6254] Invalid option length (1047662) for dns_resolver key [ 208.336573][ T6259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.560153][ T6259] team0: Port device bond0 added [ 208.579138][ T6262] netlink: 'syz.0.545': attribute type 16 has an invalid length. [ 209.001418][ T6262] netlink: 'syz.0.545': attribute type 17 has an invalid length. [ 209.018216][ T6262] team0: Failed to send port change of device bond0 via netlink (err -105) [ 209.061182][ T6262] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.452539][ T6268] tmpfs: Bad value for 'uid' [ 209.685473][ T6262] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 209.696082][ T6262] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 211.186457][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 211.530360][ T6303] Invalid option length (1047662) for dns_resolver key [ 212.305106][ T4228] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 212.611466][ T4228] usb 5-1: Using ep0 maxpacket: 32 [ 212.751834][ T4228] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 212.772015][ T4228] usb 5-1: config 0 has no interface number 0 [ 212.781638][ T4228] usb 5-1: config 0 interface 184 has no altsetting 0 [ 212.971812][ T4228] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 213.005543][ T6312] netlink: 'syz.0.560': attribute type 11 has an invalid length. [ 213.029440][ T4228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.129979][ T4228] usb 5-1: Product: syz [ 213.196366][ T4228] usb 5-1: Manufacturer: syz [ 213.303967][ T4228] usb 5-1: SerialNumber: syz [ 213.479783][ T4228] usb 5-1: config 0 descriptor?? [ 213.564610][ T4228] smsc75xx v1.0.0 [ 215.293738][ T4228] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 215.342309][ T4228] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 215.397443][ T6341] loop2: detected capacity change from 0 to 16 [ 215.476573][ T6341] erofs: Unknown parameter './cgroup/syz1' [ 216.481580][ T4228] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 216.501364][ T4228] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 216.530333][ T26] audit: type=1326 audit(3918351982.710:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f611e7eed97 code=0x7ffc0000 [ 216.560830][ T4228] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 216.586455][ T4228] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 216.595101][ T26] audit: type=1326 audit(3918351982.710:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f611e796399 code=0x7ffc0000 [ 216.649307][ T4228] usb 5-1: USB disconnect, device number 3 [ 216.751402][ T26] audit: type=1326 audit(3918351982.710:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611e7f4f79 code=0x7ffc0000 [ 216.823361][ T6380] syz.4.580 (6380): /proc/6378/oom_adj is deprecated, please use /proc/6378/oom_score_adj instead. [ 216.841407][ T26] audit: type=1326 audit(3918351982.760:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f611e7eed97 code=0x7ffc0000 [ 217.612041][ T26] audit: type=1326 audit(3918351982.760:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f611e796399 code=0x7ffc0000 [ 217.672653][ T26] audit: type=1326 audit(3918351982.760:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f611e7f4f79 code=0x7ffc0000 [ 217.771630][ T26] audit: type=1326 audit(3918351982.760:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611e7f4f79 code=0x7ffc0000 [ 218.038558][ T26] audit: type=1326 audit(3918351982.760:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611e7f4f79 code=0x7ffc0000 [ 218.068944][ T6391] loop4: detected capacity change from 0 to 16 [ 218.308969][ T4228] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 218.349517][ T6391] erofs: Unknown parameter './cgroup/syz1' [ 218.827874][ T26] audit: type=1326 audit(3918351982.760:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f611e7f4f79 code=0x7ffc0000 [ 218.914038][ T4228] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 218.936333][ T26] audit: type=1326 audit(3918351982.760:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611e7f4f79 code=0x7ffc0000 [ 218.961501][ T6397] loop3: detected capacity change from 0 to 1024 [ 219.102004][ T6393] MPTCP: addr_signal error, add_addr=1, echo=0 [ 219.105837][ T6397] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 219.151197][ T6397] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 219.242755][ T6397] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 220.101984][ T6397] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,nolazytime,abort,errors=continue,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,nobarrier,,errors=continue. Quota mode: writeback. [ 222.957534][ T4228] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 223.247243][ T6440] IPv6: NLM_F_CREATE should be specified when creating new route [ 223.273726][ T4228] usb 3-1: Using ep0 maxpacket: 32 [ 223.351539][ T4228] usb 3-1: device descriptor read/all, error -71 [ 225.115336][ T6461] trusted_key: encrypted_key: master key parameter 'šÙ|™{E' is invalid [ 225.571544][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 229.199097][ T6513] loop3: detected capacity change from 0 to 128 [ 230.200152][ T6513] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 230.393970][ T6513] ext4 filesystem being mounted at /118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 234.076957][ T6579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.634'. [ 234.390805][ T6581] device syzkaller0 entered promiscuous mode [ 235.155972][ T6601] loop2: detected capacity change from 0 to 1024 [ 235.528141][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.643'. [ 235.673938][ T6609] fuse: Bad value for 'fd' [ 235.695197][ T6601] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 235.713685][ T6601] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.565187][ T6631] loop4: detected capacity change from 0 to 512 [ 236.865930][ T6631] EXT4-fs (loop4): Ignoring removed bh option [ 237.543935][ T6631] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 237.621602][ T6631] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.656731][ T6631] EXT4-fs error (device loop4): ext4_resize_begin:61: comm syz.4.651: resize_inode disabled but reserved GDT blocks non-zero [ 237.829212][ T6631] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.651: iget: bad i_size value: 2533274857506816 [ 237.912993][ T6631] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.651: iget: bad i_size value: 2533274857506816 [ 237.951180][ T6644] device syzkaller0 entered promiscuous mode [ 237.960670][ T6649] netlink: 'syz.2.655': attribute type 11 has an invalid length. [ 237.969034][ T6642] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.651: iget: bad i_size value: 2533274857506816 [ 238.149155][ T6654] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.173161][ T6654] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 238.336819][ T6654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.349447][ T6654] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.363128][ T6654] device bridge_slave_0 left promiscuous mode [ 238.369410][ T6654] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.306133][ T6679] loop3: detected capacity change from 0 to 512 [ 240.475684][ T6681] netlink: zone id is out of range [ 240.496277][ T6681] netlink: zone id is out of range [ 240.504927][ T6681] netlink: zone id is out of range [ 240.521119][ T6681] netlink: zone id is out of range [ 240.529981][ T6681] netlink: zone id is out of range [ 240.540522][ T6681] netlink: zone id is out of range [ 240.573196][ T6681] netlink: zone id is out of range [ 240.578335][ T6681] netlink: zone id is out of range [ 240.590203][ T6654] device bridge_slave_1 left promiscuous mode [ 240.596380][ T6681] netlink: zone id is out of range [ 240.597740][ T6679] FAT-fs (loop3): Unrecognized mount option "/dev/comedi5" or missing value [ 240.601777][ T6654] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.618621][ T6681] netlink: zone id is out of range [ 240.645472][ T6654] bond0: (slave bond_slave_0): Releasing backup interface [ 240.677882][ T6654] bond0: (slave bond_slave_1): Releasing backup interface [ 241.677486][ T6654] team0: Port device team_slave_0 removed [ 241.704024][ T6679] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 241.704024][ T6679] The task syz.3.662 (6679) triggered the difference, watch for misbehavior. [ 242.958886][ T6695] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 243.004027][ T6654] team0: Port device team_slave_1 removed [ 243.070401][ T6654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.178028][ T6654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.407990][ T6654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.418523][ T6654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.455364][ T6654] bond1: (slave gretap1): Releasing active interface [ 244.424839][ T6661] team0: Mode changed to "loadbalance" [ 244.438750][ T6705] netlink: 'syz.4.668': attribute type 1 has an invalid length. [ 244.530490][ T6707] bond1: (slave gretap1): making interface the new active one [ 244.542810][ T6707] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 244.693387][ T6728] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 245.724674][ T6745] loop3: detected capacity change from 0 to 256 [ 245.917694][ T6745] vfat filesystem being mounted at /126/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 247.005777][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.681'. [ 247.163147][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 247.163161][ T26] audit: type=1326 audit(3918352013.350:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.2.685" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f929d3d4f79 code=0x0 [ 250.695533][ T6811] device bridge_slave_1 left promiscuous mode [ 250.704965][ T6811] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.763542][ T6812] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 250.789977][ T6812] CIFS mount error: No usable UNC path provided in device string! [ 250.789977][ T6812] [ 250.800404][ T6812] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 251.133155][ T6811] device bridge_slave_0 left promiscuous mode [ 251.183798][ T6811] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.259587][ T6811] bond0: (slave bridge0): Releasing backup interface [ 251.478668][ T6820] sctp: [Deprecated]: syz.2.704 (pid 6820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.478668][ T6820] Use struct sctp_sack_info instead [ 252.446302][ T6832] loop2: detected capacity change from 0 to 256 [ 252.451467][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 252.496764][ T6832] FAT-fs (loop2): Unrecognized mount option "smackfsroot=shortname=mixed" or missing value [ 252.585050][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.709'. [ 252.678958][ T6845] bridge0: port 1(veth5) entered blocking state [ 252.692969][ T6845] bridge0: port 1(veth5) entered disabled state [ 252.705704][ T6845] device veth5 entered promiscuous mode [ 253.636848][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 253.723292][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.713'. [ 253.740636][ T6842] bridge0: port 2(veth7) entered blocking state [ 253.752854][ T6842] bridge0: port 2(veth7) entered disabled state [ 253.760247][ T6842] device veth7 entered promiscuous mode [ 253.769621][ T6857] loop3: detected capacity change from 0 to 4096 [ 254.908892][ T6875] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.937069][ T6874] device syzkaller0 entered promiscuous mode [ 255.252146][ T6891] fuse: Bad value for 'fd' [ 255.654396][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.667872][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.932855][ T4519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.945501][ T4519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.193434][ T6928] loop2: detected capacity change from 0 to 128 [ 257.675485][ T6928] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 257.948083][ T26] audit: type=1800 audit(3918352024.130:56): pid=6857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.714" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 257.967508][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.064054][ T6928] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 258.205593][ T6928] ext2 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.772513][ T6945] device syzkaller0 left promiscuous mode [ 265.513489][ T6999] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 265.599315][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.761'. [ 265.985255][ T2240] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 266.482003][ T2240] usb 4-1: config 0 has no interfaces? [ 266.682092][ T2240] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 266.891236][ T2240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 266.900938][ T2240] usb 4-1: SerialNumber: syz [ 266.923640][ T2240] usb 4-1: config 0 descriptor?? [ 267.314855][ T1107] usb 4-1: USB disconnect, device number 5 [ 268.282901][ T7043] loop2: detected capacity change from 0 to 128 [ 268.596981][ T7043] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 268.615519][ T7043] ext4 filesystem being mounted at /167/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 269.774815][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.145895][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.202630][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 272.018236][ T7100] loop2: detected capacity change from 0 to 128 [ 272.149355][ T7100] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.365189][ T7100] ext4 filesystem being mounted at /170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 273.949382][ T7094] fuse: Bad value for 'user_id' [ 274.331029][ T7137] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.339884][ T7137] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.348768][ T7137] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.357600][ T7137] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.605427][ T7137] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 275.650622][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 275.697180][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.805'. [ 275.785999][ T7152] bridge1: port 1(veth3) entered blocking state [ 275.792583][ T7152] bridge1: port 1(veth3) entered disabled state [ 275.800263][ T7152] device veth3 entered promiscuous mode [ 275.848221][ T7146] bridge1: port 2(veth5) entered blocking state [ 276.156471][ T7146] bridge1: port 2(veth5) entered disabled state [ 276.189940][ T7146] device veth5 entered promiscuous mode [ 277.317159][ T7173] loop4: detected capacity change from 0 to 1024 [ 277.383480][ T7177] loop7: detected capacity change from 0 to 7 [ 277.434112][ T7173] EXT4-fs (loop4): Ignoring removed orlov option [ 277.474107][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.485303][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 277.496427][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.507354][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 277.526031][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.536958][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 278.158430][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.169410][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 278.190473][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.201492][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 278.219740][ T7173] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,grpquota,grpquota,nobarrier,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 278.277436][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.288386][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 278.315282][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.326360][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 278.334704][ T4176] ldm_validate_partition_table(): Disk read failed. [ 278.341827][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.352777][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 278.364512][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.375466][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 278.421010][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.431992][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 278.463980][ T7191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.473384][ T7191] team0: Port device bond0 added [ 278.504499][ T7191] netlink: 'syz.1.820': attribute type 16 has an invalid length. [ 278.514476][ T4176] Dev loop7: unable to read RDB block 0 [ 278.518073][ T7191] netlink: 'syz.1.820': attribute type 17 has an invalid length. [ 278.530448][ T4176] loop7: unable to read partition table [ 278.617334][ T7191] team0: Failed to send port change of device bond0 via netlink (err -105) [ 279.201562][ T4176] loop7: partition table beyond EOD, truncated [ 279.208721][ T7194] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 279.302724][ T7177] ldm_validate_partition_table(): Disk read failed. [ 279.317762][ T7202] loop4: detected capacity change from 0 to 128 [ 279.328737][ T7177] Dev loop7: unable to read RDB block 0 [ 279.383474][ T7202] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 279.388235][ T7177] loop7: unable to read partition table [ 279.401639][ T7202] ext4 filesystem being mounted at /157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 279.433432][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.482626][ T7177] loop7: partition table beyond EOD, truncated [ 279.523703][ T7177] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 280.674224][ T26] audit: type=1326 audit(3918352046.860:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7221 comm="syz.0.839" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdeb339af79 code=0x0 [ 282.785795][ T7243] loop2: detected capacity change from 0 to 512 [ 282.956321][ T7243] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 283.126595][ T7243] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 283.416152][ T7243] EXT4-fs (loop2): orphan cleanup on readonly fs [ 283.437351][ T7243] Quota error (device loop2): v2_read_file_info: Block with free entry too big (4294967071 >= 6). [ 283.464707][ T7243] EXT4-fs warning (device loop2): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 283.480124][ T7243] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 283.488552][ T7243] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #16: comm syz.2.832: iget: immutable or append flags not allowed on symlinks [ 283.751592][ T7243] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.832: couldn't read orphan inode 16 (err -117) [ 283.945192][ T7243] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 284.071381][ T4250] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 284.176463][ T7243] mmap: syz.2.832 (7243) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 284.660588][ T7270] loop2: detected capacity change from 0 to 2048 [ 284.667857][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'. [ 284.681230][ T7257] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.690006][ T7257] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.698806][ T7257] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.707681][ T7257] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.741239][ T7270] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 284.762441][ T7270] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,lazytime,. Quota mode: none. [ 284.801241][ T7270] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.841: bg 0: block 234: padding at end of block bitmap is not set [ 284.819547][ T7270] EXT4-fs (loop2): Remounting filesystem read-only [ 284.826386][ T4250] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.844942][ T4250] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.860212][ T4250] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.873211][ T4250] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.882344][ T4250] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.893940][ T4250] usb 4-1: config 0 descriptor?? [ 285.804232][ T4250] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 285.828686][ T4250] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 286.170479][ T2240] usb 4-1: USB disconnect, device number 6 [ 286.171823][ T7246] usb 4-1: string descriptor 0 read error: -19 [ 286.194352][ T7301] netlink: 'syz.0.852': attribute type 1 has an invalid length. [ 286.325364][ T7301] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.402997][ T7308] device macvlan2 entered promiscuous mode [ 286.524578][ T7309] bond1: (slave ip6gretap1): making interface the new active one [ 286.542814][ T7309] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 286.556781][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 287.386297][ T7327] loop4: detected capacity change from 0 to 128 [ 287.908174][ T7327] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 287.975094][ T7327] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 289.026180][ T7327] vfat filesystem being mounted at /162/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 289.200393][ T7348] capability: warning: `syz.1.863' uses 32-bit capabilities (legacy support in use) [ 289.568322][ T7365] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.576362][ T7365] IPv6: NLM_F_CREATE should be set when creating new route [ 289.588124][ T7365] device sit0 entered promiscuous mode [ 289.611126][ T7365] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 289.629408][ T7365] netlink: 1 bytes leftover after parsing attributes in process `syz.3.872'. [ 289.694176][ T4250] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 290.472272][ T4250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.497624][ T4250] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.525918][ T4250] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 290.552445][ T4250] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 290.565323][ T4250] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.575959][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.875'. [ 290.596728][ T4250] usb 3-1: config 0 descriptor?? [ 290.643030][ T7378] device hsr_slave_0 left promiscuous mode [ 292.273538][ T7397] MPTCP: kernel_bind error, err=-98 [ 292.414596][ T4250] usbhid 3-1:0.0: can't add hid device: -71 [ 292.441437][ T4250] usbhid: probe of 3-1:0.0 failed with error -71 [ 292.498775][ T4250] usb 3-1: USB disconnect, device number 4 [ 294.598573][ T7435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.619823][ T7435] team0: Port device bond0 added [ 294.632748][ T7441] netlink: 'syz.2.891': attribute type 16 has an invalid length. [ 294.661649][ T7441] netlink: 'syz.2.891': attribute type 17 has an invalid length. [ 294.706748][ T7441] team0: Failed to send port change of device bond0 via netlink (err -105) [ 294.727532][ T7449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.829416][ T7452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.949765][ T7454] gfs2: gfs2 mount does not exist [ 296.591873][ T7474] loop2: detected capacity change from 0 to 256 [ 296.681662][ T7483] netlink: 'syz.2.898': attribute type 4 has an invalid length. [ 298.228311][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.907'. [ 298.916840][ T7503] tipc: Started in network mode [ 298.921826][ T7503] tipc: Node identity ac14140f, cluster identity 4711 [ 298.929460][ T7503] tipc: New replicast peer: 10.1.1.2 [ 298.935244][ T7503] tipc: Enabled bearer , priority 10 [ 299.116999][ T7509] device syzkaller0 entered promiscuous mode [ 299.131231][ T7509] netlink: 'syz.2.910': attribute type 10 has an invalid length. [ 300.632704][ T4250] tipc: Node number set to 2886997007 [ 300.752849][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.919'. [ 300.833879][ T7541] netlink: 32 bytes leftover after parsing attributes in process `syz.4.919'. [ 303.041905][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.925'. [ 303.284257][ T7556] HTB: quantum of class 4000A is big. Consider r2q change. [ 303.292364][ T7556] HTB: quantum of class 4000A is big. Consider r2q change. [ 304.598946][ T7585] netlink: 'syz.2.932': attribute type 1 has an invalid length. [ 304.630789][ T7585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 304.666686][ T7585] 8021q: adding VLAN 0 to HW filter on device bond3 [ 304.669709][ T26] audit: type=1326 audit(3918352070.850:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.4.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611e7f4f79 code=0x7fc00000 [ 304.674103][ T7585] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 304.707822][ T7585] bond3: (slave vxcan3): Error -22 calling dev_set_mtu [ 304.723768][ T26] audit: type=1326 audit(3918352070.850:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.4.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f611e7f4f79 code=0x7fc00000 [ 304.746420][ T26] audit: type=1326 audit(3918352070.850:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.4.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611e7f4f79 code=0x7fc00000 [ 304.749211][ T7594] device gretap1 entered promiscuous mode [ 304.768488][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.768691][ T26] audit: type=1326 audit(3918352070.850:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.4.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611e7f4f79 code=0x7fc00000 [ 304.803468][ T26] audit: type=1326 audit(3918352070.850:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.4.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611e7f4f79 code=0x7fc00000 [ 304.829222][ T26] audit: type=1326 audit(3918352070.850:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.4.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611e7f4f79 code=0x7fc00000 [ 304.851282][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.866369][ T7594] bond3: (slave gretap1): making interface the new active one [ 304.876215][ T7594] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 304.885217][ T26] audit: type=1326 audit(3918352070.850:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.4.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611e7f4f79 code=0x7fc00000 [ 304.908108][ T26] audit: type=1326 audit(3918352070.850:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.4.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611e7f4f79 code=0x7fc00000 [ 304.931142][ T7593] device ip6gre1 entered promiscuous mode [ 304.954215][ T26] audit: type=1326 audit(3918352070.850:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.4.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611e7f4f79 code=0x7fc00000 [ 304.990951][ T26] audit: type=1326 audit(3918352070.850:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.4.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611e7f4f79 code=0x7fc00000 [ 305.312811][ T7609] tipc: Started in network mode [ 305.317886][ T7609] tipc: Node identity ac14140f, cluster identity 4711 [ 305.328792][ T7609] tipc: New replicast peer: 10.1.1.2 [ 305.335132][ T7609] tipc: Enabled bearer , priority 10 [ 305.843838][ T4251] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 305.852298][ T4251] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 305.871515][ T4250] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 306.032060][ T4251] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 306.331151][ T7625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.852080][ C0] net_ratelimit: 23 callbacks suppressed [ 306.852100][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.861466][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 306.885432][ T4251] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 306.977432][ T7632] loop2: detected capacity change from 0 to 128 [ 306.995468][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.005154][ T4249] tipc: Node number set to 2886997007 [ 307.505625][ T7632] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 308.057882][ T4250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.066266][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.096077][ T7632] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 308.126847][ T7632] ext2 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.711957][ T7660] tipc: Started in network mode [ 308.716868][ T7660] tipc: Node identity ac14140f, cluster identity 4711 [ 308.723882][ T7660] tipc: New replicast peer: 10.1.1.2 [ 308.729345][ T7660] tipc: Enabled bearer , priority 10 [ 309.434720][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.511897][ T7667] netlink: 'syz.1.957': attribute type 1 has an invalid length. [ 309.666540][ T7668] loop4: detected capacity change from 0 to 512 [ 309.971448][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 310.153848][ T7668] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 310.655693][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.679975][ T7667] 8021q: adding VLAN 0 to HW filter on device bond2 [ 310.951702][ T7668] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 311.046271][ T7688] gfs2: gfs2 mount does not exist [ 311.069527][ T7674] device macvlan2 entered promiscuous mode [ 311.111859][ T7668] EXT4-fs (loop4): orphan cleanup on readonly fs [ 311.218000][ T7668] __quota_error: 48 callbacks suppressed [ 311.218216][ T7668] Quota error (device loop4): v2_read_file_info: Block with free entry too big (4294967071 >= 6). [ 311.778118][ T4251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.811096][ T7678] bond2: (slave ip6gretap1): making interface the new active one [ 311.836358][ T7678] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 311.847376][ T7668] EXT4-fs warning (device loop4): ext4_enable_quotas:6486: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 311.926730][ T2240] tipc: Node number set to 2886997007 [ 311.931413][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.940645][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 311.966719][ T7668] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 311.979310][ T7668] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #16: comm syz.4.955: iget: immutable or append flags not allowed on symlinks [ 312.004167][ T7668] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.955: couldn't read orphan inode 16 (err -117) [ 312.037655][ T7668] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 312.068061][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'. [ 313.043608][ T4251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.344775][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.547544][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.643094][ T7729] netlink: 'syz.2.976': attribute type 1 has an invalid length. [ 314.722774][ T7729] 8021q: adding VLAN 0 to HW filter on device bond4 [ 314.749928][ T7731] device macvlan2 entered promiscuous mode [ 314.785674][ T7729] bond4: (slave ip6gretap1): making interface the new active one [ 314.797788][ T7729] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 314.807551][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 314.858041][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.784395][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.692266][ T7749] gfs2: gfs2 mount does not exist [ 317.187986][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.194352][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.202425][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.151921][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 319.188653][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.309080][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.339634][ T7773] netlink: 'syz.3.990': attribute type 1 has an invalid length. [ 319.533247][ T7773] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.842390][ T7780] device macvlan2 entered promiscuous mode [ 320.409564][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.412312][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.122117][ T7805] gfs2: gfs2 mount does not exist [ 322.213002][ T2240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.776762][ T2240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.798267][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.833636][ T7807] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 323.407265][ T7807] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 325.799889][ T7839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.808941][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.817585][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.852257][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.740855][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.970045][ T7875] loop4: detected capacity change from 0 to 128 [ 328.328055][ T7873] syz.3.1016 (7873): drop_caches: 2 [ 329.067228][ T7875] FAT-fs (loop4): Unrecognized mount option "fowner=00000000004294967295" or missing value [ 329.145702][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.153876][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.167697][ T7884] netlink: 'syz.0.1020': attribute type 1 has an invalid length. [ 329.240023][ T7884] 8021q: adding VLAN 0 to HW filter on device bond2 [ 329.284143][ T7883] device syzkaller0 entered promiscuous mode [ 329.530784][ T7889] 8021q: adding VLAN 0 to HW filter on device bond2 [ 329.575617][ T7889] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 329.605766][ T7889] bond2: (slave vxcan1): Error -22 calling dev_set_mtu [ 329.643226][ T7883] netlink: 'syz.3.1019': attribute type 10 has an invalid length. [ 329.752335][ T7883] device wlan1 entered promiscuous mode [ 329.777820][ T7883] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 329.791148][ T7884] device gretap1 entered promiscuous mode [ 329.961499][ T7884] bond2: (slave gretap1): making interface the new active one [ 330.047737][ T7884] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 330.421585][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.491571][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.119711][ T4251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.268945][ T4251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.381098][ T7953] netlink: 'syz.1.1039': attribute type 1 has an invalid length. [ 334.547506][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.585195][ T7953] 8021q: adding VLAN 0 to HW filter on device bond3 [ 334.685245][ T7966] 8021q: adding VLAN 0 to HW filter on device bond3 [ 334.709985][ T7966] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 334.740570][ T7966] bond3: (slave vxcan3): Error -22 calling dev_set_mtu [ 334.825296][ T7984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1050'. [ 335.661504][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 335.855213][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.873150][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.579431][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.728177][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.744353][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.780403][ T8005] netlink: 'syz.3.1054': attribute type 3 has an invalid length. [ 340.790967][ T8005] netlink: 'syz.3.1054': attribute type 3 has an invalid length. [ 340.960990][ T8015] fuse: Bad value for 'fd' [ 341.074486][ T8015] overlayfs: failed to clone lowerpath [ 341.415709][ T2240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.653259][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.885793][ T8025] netlink: 'syz.3.1063': attribute type 1 has an invalid length. [ 343.877716][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.523296][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.535488][ T8025] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.550401][ T8042] netlink: 'syz.1.1062': attribute type 10 has an invalid length. [ 344.599580][ T8042] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 344.625831][ T8035] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.636204][ T8035] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 344.662366][ T8035] bond3: (slave vxcan1): Error -22 calling dev_set_mtu [ 344.718093][ T8025] device gretap1 entered promiscuous mode [ 344.735898][ T8025] bond3: (slave gretap1): making interface the new active one [ 344.750257][ T8025] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 344.759713][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1066'. [ 345.260074][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.507222][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.571892][ T2240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.690033][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1076'. [ 347.792934][ T8085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1078'. [ 347.802059][ T8085] chnl_net:caif_netlink_parms(): no params data found [ 348.950090][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.212320][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.306851][ T8109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.315360][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.826872][ T2240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.022986][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.031796][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.571575][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.878399][ T8144] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 353.083160][ T8144] device bond5 entered promiscuous mode [ 353.090331][ T8144] 8021q: adding VLAN 0 to HW filter on device bond5 [ 353.317652][ T1107] net_ratelimit: 3 callbacks suppressed [ 353.317678][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.444943][ T8144] bond5: (slave veth5): Enslaving as an active interface with a down link [ 355.256048][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.829518][ T8166] fuse: Bad value for 'fd' [ 355.867037][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.412887][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.464255][ T8195] device vlan3 entered promiscuous mode [ 358.051572][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 358.058781][ C1] EXT4-fs (loop0): initial error at time 1770868175: ext4_read_inode_bitmap:140 [ 358.067927][ C1] EXT4-fs (loop0): last error at time 1770868179: ext4_validate_block_bitmap:429 [ 358.291585][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'. [ 358.625430][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.733762][ T8212] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1113'. [ 359.678601][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.930400][ T2240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.634205][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.691677][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.915049][ T8238] loop4: detected capacity change from 0 to 128 [ 361.934191][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.435355][ T8238] vfat filesystem being mounted at /207/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 362.885683][ T26] audit: type=1804 audit(3918352129.071:116): pid=8238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1123" name="/newroot/207/file0/bus" dev="loop4" ino=1048603 res=1 errno=0 [ 363.667932][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.731509][ T2240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.751029][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.869125][ T8262] netlink: 'syz.2.1129': attribute type 1 has an invalid length. [ 363.926732][ T8262] device bond6 entered promiscuous mode [ 364.053754][ T8266] bond6: (slave ip6gretap2): making interface the new active one [ 364.061760][ T8266] device ip6gretap2 entered promiscuous mode [ 364.069034][ T8266] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 364.994282][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.021663][ T8262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1129'. [ 365.043397][ T8262] device bond6 left promiscuous mode [ 365.058027][ T8262] device ip6gretap2 left promiscuous mode [ 365.112834][ T8262] 8021q: adding VLAN 0 to HW filter on device bond6 [ 365.371428][ T8290] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 366.551509][ T8292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1138'. [ 366.692440][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.596974][ T8305] tmpfs: Bad value for 'nr_blocks' [ 367.736836][ T2240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.790521][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.301528][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 368.465468][ T8314] bond2: (slave ip6gretap3): making interface the new active one [ 368.513520][ T8314] bond2: (slave ip6gretap3): Enslaving as an active interface with an up link [ 368.914366][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.097881][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.609683][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.625707][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.198581][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.251223][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.435761][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.629135][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1169'. [ 374.715830][ T8397] 9pnet: Insufficient options for proto=fd [ 376.139069][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.426207][ T2240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.465177][ T8412] overlayfs: failed to clone upperpath [ 377.172350][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.226040][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1177'. [ 379.182052][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.193732][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.202737][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.242498][ T26] audit: type=1326 audit(3918352401.430:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8438 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929d3d4f79 code=0x7ffc0000 [ 380.447851][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.499845][ T26] audit: type=1326 audit(3918352401.450:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8438 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929d3d4f79 code=0x7ffc0000 [ 380.681254][ T2240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.690225][ T26] audit: type=1326 audit(3918352402.710:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8438 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f929d3d4f79 code=0x7ffc0000 [ 380.713411][ T26] audit: type=1326 audit(3918352402.710:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8438 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929d3d4f79 code=0x7ffc0000 [ 380.781190][ T26] audit: type=1326 audit(3918352402.710:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8438 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929d3d4f79 code=0x7ffc0000 [ 381.424484][ T26] audit: type=1326 audit(3918352402.710:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8438 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f929d3d4f79 code=0x7ffc0000 [ 381.446878][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.492053][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.606808][ T26] audit: type=1326 audit(3918352402.710:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8438 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929d3d4f79 code=0x7ffc0000 [ 381.844113][ T8474] xt_time: unknown flags 0xc [ 382.935187][ T4251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.961700][ T26] audit: type=1326 audit(3918352402.710:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8438 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929d3d4f79 code=0x7ffc0000 [ 383.152292][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.161080][ T26] audit: type=1326 audit(3918352402.710:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8438 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f929d3d4f79 code=0x7ffc0000 [ 383.183394][ T26] audit: type=1326 audit(3918352402.710:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8438 comm="syz.2.1181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f929d3d4f79 code=0x7ffc0000 [ 383.762654][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1192'. [ 384.082069][ T8490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.231890][ T8490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.240296][ T8490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.220968][ T4251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.233700][ T8490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.263231][ T8502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1198'. [ 385.562386][ T8490] net_ratelimit: 132 callbacks suppressed [ 385.562408][ T8490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.342255][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.074194][ T8529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.114365][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.137171][ T4274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.146515][ T4251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.836243][ T4251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.903120][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.452311][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.497478][ T8556] wlan0 speed is unknown, defaulting to 1000 [ 390.612507][ T8556] wlan0 speed is unknown, defaulting to 1000 [ 390.663898][ T8556] wlan0 speed is unknown, defaulting to 1000 [ 390.783160][ T8556] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 390.813669][ T8567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1216'. [ 391.174650][ T8556] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 391.491555][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.589988][ T8567] 9p filesystem being mounted at /225/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 391.700197][ T8556] wlan0 speed is unknown, defaulting to 1000 [ 392.885986][ T8556] wlan0 speed is unknown, defaulting to 1000 [ 392.937237][ T4251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.949854][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.984310][ T8556] wlan0 speed is unknown, defaulting to 1000 [ 393.037871][ T8556] wlan0 speed is unknown, defaulting to 1000 [ 393.061552][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.107066][ T8556] wlan0 speed is unknown, defaulting to 1000 [ 393.479176][ T8595] ptrace attach of "./syz-executor exec"[4197] was attempted by ""[8595] [ 393.905570][ T5538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.922333][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.018979][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.093385][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.162334][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1234'. [ 396.465765][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.531345][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.543372][ T8629] bond2: option mode: unable to set because the bond device has slaves [ 396.986740][ T8638] ptrace attach of "./syz-executor exec"[4184] was attempted by ""[8638] [ 397.957009][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.632908][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.641086][ T4250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.696523][ T4310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.833100][ T4250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.850428][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.710269][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.218937][ T4250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.227130][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.330952][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.332709][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.298061][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.396036][ T8722] xt_time: unknown flags 0xc [ 407.411693][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.142782][ T8735] loop4: detected capacity change from 0 to 736 [ 408.598462][ T8737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1268'. [ 408.638891][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.657892][ T8735] rock: directory entry would overflow storage [ 408.678050][ T8735] rock: sig=0x3b10, size=4, remaining=3 [ 408.812211][ T8751] device team0 entered promiscuous mode [ 408.817993][ T8751] device team_slave_0 entered promiscuous mode [ 408.824545][ T8751] device team_slave_1 entered promiscuous mode [ 408.851260][ T8751] device bond0 entered promiscuous mode [ 408.866388][ T8751] device bond_slave_0 entered promiscuous mode [ 408.873226][ T8751] device bond_slave_1 entered promiscuous mode [ 408.879767][ T8751] device wlan1 entered promiscuous mode [ 408.888362][ T8751] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 408.897814][ T8751] device team0 left promiscuous mode [ 408.903513][ T8751] device team_slave_0 left promiscuous mode [ 408.909861][ T8751] device team_slave_1 left promiscuous mode [ 408.916980][ T8751] device bond0 left promiscuous mode [ 408.922964][ T8751] device bond_slave_0 left promiscuous mode [ 408.929220][ T8751] device bond_slave_1 left promiscuous mode [ 408.935873][ T8751] device wlan1 left promiscuous mode [ 410.984891][ T4249] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.716046][ T8754] bridge0: port 3(vlan2) entered blocking state [ 411.728252][ T4251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.761506][ T8754] bridge0: port 3(vlan2) entered disabled state [ 411.774155][ T8754] device vlan2 entered promiscuous mode [ 411.780624][ T8754] device bond0 entered promiscuous mode [ 411.824645][ T8754] device bond_slave_0 entered promiscuous mode [ 411.834927][ T8754] device bond_slave_1 entered promiscuous mode [ 411.871549][ T8754] device wlan1 entered promiscuous mode [ 412.518185][ T8786] xt_time: unknown flags 0xc [ 412.533283][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.753765][ T8793] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1286'. [ 413.654487][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.703656][ T8803] loop4: detected capacity change from 0 to 128 [ 413.756417][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.785736][ T8803] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 413.814213][ T8803] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 413.933295][ T8803] ext2 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.381458][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.872967][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.905726][ T4250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.365126][ T5438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.425116][ T8842] netlink: 'syz.1.1298': attribute type 1 has an invalid length. [ 418.597842][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.605990][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.669641][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.692349][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.779156][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.977550][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.457707][ T4250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.490887][ T5438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.810368][ T8925] ipt_CLUSTERIP: Please specify destination IP [ 424.824122][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.255973][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.621586][ T5450] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 426.030820][ T5438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.891667][ T5450] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.901940][ T5450] usb 5-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=9d.94 [ 426.911072][ T5450] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.952044][ T5450] usb 5-1: config 0 descriptor?? [ 426.994025][ T5450] pl2303 5-1:0.0: required endpoints missing [ 427.200245][ T5438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.815461][ T5438] usb 5-1: USB disconnect, device number 4 [ 427.866220][ T8966] netlink: 'syz.0.1337': attribute type 1 has an invalid length. [ 428.038084][ T8969] device veth7 entered promiscuous mode [ 428.055090][ T8969] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 428.064102][ T8972] bridge0: port 3(syz_tun) entered blocking state [ 428.071659][ T8972] bridge0: port 3(syz_tun) entered disabled state [ 428.083122][ T8976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.084418][ T8974] fuse: Bad value for 'fd' [ 428.094523][ T8972] device syz_tun entered promiscuous mode [ 428.103731][ T8972] bridge0: port 3(syz_tun) entered blocking state [ 428.105593][ T8976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.110222][ T8972] bridge0: port 3(syz_tun) entered forwarding state [ 428.135291][ T8976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.137474][ T8966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1337'. [ 428.165852][ T8966] 8021q: adding VLAN 0 to HW filter on device bond3 [ 428.211268][ T8979] siw: device registration error -23 [ 428.217559][ T5438] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.294147][ T5450] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.313462][ T8986] netlink: 'syz.3.1342': attribute type 13 has an invalid length. [ 428.404691][ T8993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.431493][ T8993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.439806][ T8993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.633231][ T8999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.808263][ T9001] ip6t_srh: unknown srh invflags 7F00 [ 429.858365][ T8993] net_ratelimit: 324 callbacks suppressed [ 429.858383][ T8993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.872845][ T8993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.960109][ T8986] bridge0: port 3(syz_tun) entered disabled state [ 430.224238][ T8986] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.231564][ T8986] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.451688][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.658539][ T8986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.677211][ T8986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.911855][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.596994][ T4252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.755058][ T8986] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.764232][ T8986] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.773213][ T8986] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.782306][ T8986] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 431.806716][ T8986] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.816472][ T8986] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.825445][ T8986] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.834413][ T8986] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.875892][ T9002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.035587][ T4228] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 432.118244][ T9042] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1361'. [ 433.691929][ T4228] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.748135][ T4228] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.943672][ T4228] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 434.429910][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 434.462984][ T4228] usb 5-1: SerialNumber: syz [ 434.862228][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 435.131560][ T4228] usb 5-1: can't set config #1, error -71 [ 435.283402][ T4228] usb 5-1: USB disconnect, device number 5 [ 435.302145][ T9078] overlayfs: failed to resolve './file1': -2 [ 436.385243][ T9095] netlink: 'syz.3.1376': attribute type 1 has an invalid length. [ 437.548534][ T9095] 8021q: adding VLAN 0 to HW filter on device bond4 [ 437.586681][ T9099] bond4: (slave vlan3): Opening slave failed [ 439.102533][ T9138] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1389'. [ 439.367050][ T9145] netlink: 'syz.0.1391': attribute type 29 has an invalid length. [ 439.378690][ T9145] netlink: 'syz.0.1391': attribute type 29 has an invalid length. [ 439.401136][ T9145] netlink: 'syz.0.1391': attribute type 29 has an invalid length. [ 439.410182][ T9145] netlink: 'syz.0.1391': attribute type 29 has an invalid length. [ 439.473060][ T9160] ptrace attach of "./syz-executor exec"[4197] was attempted by " [ 439.630148][ T9145] netlink: 'syz.0.1391': attribute type 29 has an invalid length. [ 439.717209][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.911258][ T9145] netlink: 'syz.0.1391': attribute type 29 has an invalid length. [ 439.919600][ T9145] netlink: 'syz.0.1391': attribute type 29 has an invalid length. [ 439.928035][ T9145] netlink: 'syz.0.1391': attribute type 29 has an invalid length. [ 439.937008][ T9158] netlink: 'syz.1.1395': attribute type 3 has an invalid length. [ 439.992197][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.104610][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.869401][ T9177] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1399'. [ 442.770298][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 442.775731][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 442.782867][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 444.089067][ T9209] syz.2.1408 (9209) used greatest stack depth: 17464 bytes left [ 446.842975][ T9222] wlan0 speed is unknown, defaulting to 1000 [ 448.259728][ T9234] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1418'. [ 449.167354][ T9255] validate_nla: 1 callbacks suppressed [ 449.167420][ T9255] netlink: 'syz.2.1422': attribute type 9 has an invalid length. [ 449.180926][ T9255] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1422'. [ 449.748216][ T9260] loop4: detected capacity change from 0 to 256 [ 450.861250][ T9260] FAT-fs (loop4): Directory bread(block 64) failed [ 450.892976][ T9260] FAT-fs (loop4): Directory bread(block 65) failed [ 450.930246][ T9260] FAT-fs (loop4): Directory bread(block 66) failed [ 450.951431][ T9260] FAT-fs (loop4): Directory bread(block 67) failed [ 450.967117][ T9260] FAT-fs (loop4): Directory bread(block 68) failed [ 450.994178][ T9260] FAT-fs (loop4): Directory bread(block 69) failed [ 451.001073][ T9260] FAT-fs (loop4): Directory bread(block 70) failed [ 451.035773][ T9260] FAT-fs (loop4): Directory bread(block 71) failed [ 451.061413][ T9260] FAT-fs (loop4): Directory bread(block 72) failed [ 451.076483][ T9260] FAT-fs (loop4): Directory bread(block 73) failed [ 451.123357][ T9260] vfat filesystem being mounted at /252/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 452.202737][ T9290] fuse: Bad value for 'fd' [ 453.870544][ T9313] tmpfs: Bad value for 'nr_blocks' [ 456.729229][ T9338] loop4: detected capacity change from 0 to 65536 [ 456.841916][ T9338] XFS: noattr2 mount option is deprecated. [ 456.943750][ T9338] XFS (loop4): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems. [ 457.063154][ T9353] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1447'. [ 457.158968][ T9353] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1447'. [ 457.392588][ T9366] loop4: detected capacity change from 0 to 128 [ 457.502371][ T9366] FAT-fs (loop4): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 458.287038][ T9378] overlayfs: failed to clone upperpath [ 460.138618][ T9400] netlink: 'syz.1.1472': attribute type 1 has an invalid length. [ 460.354630][ T9410] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1463'. [ 460.892720][ T9400] 8021q: adding VLAN 0 to HW filter on device bond4 [ 460.966883][ T9411] bond4: (slave vlan2): Enslaving as an active interface with a down link [ 468.809563][ T9487] wlan0 speed is unknown, defaulting to 1000 [ 470.199764][ T9496] overlayfs: failed to clone upperpath [ 472.478582][ T9528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1495'. [ 472.580805][ T9532] netlink: 'syz.2.1497': attribute type 1 has an invalid length. [ 472.829246][ T9532] device veth7 entered promiscuous mode [ 472.838732][ T9532] bond7: (slave veth7): Enslaving as a backup interface with a down link [ 472.866327][ T9539] device syz_tun entered promiscuous mode [ 472.882415][ T9539] device syz_tun left promiscuous mode [ 473.120526][ T9532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1497'. [ 473.278619][ T9532] 8021q: adding VLAN 0 to HW filter on device bond7 [ 473.408056][ T9547] sch_tbf: burst 480 is lower than device lo mtu (1550) ! [ 473.602330][ T9551] overlayfs: failed to clone upperpath [ 473.950015][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'. [ 475.449296][ T9577] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1513'. [ 476.576203][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1519'. [ 483.566861][ T9661] netlink: 'syz.4.1535': attribute type 1 has an invalid length. [ 484.123635][ T9685] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1536'. [ 484.769797][ T9676] device veth11 entered promiscuous mode [ 484.823136][ T9676] bond2: (slave veth11): Enslaving as a backup interface with a down link [ 484.871885][ T9689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1535'. [ 484.920545][ T9689] 8021q: adding VLAN 0 to HW filter on device bond2 [ 486.531029][ T9708] SET target dimension over the limit! [ 490.001037][ T9739] fuse: Bad value for 'fd' [ 496.931925][ T9824] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1577'. [ 497.713235][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1580'. [ 500.638814][ T9861] overlayfs: missing 'lowerdir' [ 501.690663][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.697069][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.008705][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 504.009076][ T26] audit: type=1326 audit(3918353038.192:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb339af79 code=0x7ffc0000 [ 504.037496][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.125428][ T26] audit: type=1326 audit(3918353038.192:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb339af79 code=0x7ffc0000 [ 504.148242][ T26] audit: type=1326 audit(3918353038.192:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fdeb339af79 code=0x7ffc0000 [ 504.199531][ T26] audit: type=1326 audit(3918353038.192:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb339af79 code=0x7ffc0000 [ 506.087536][ T26] audit: type=1326 audit(3918353038.192:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb339af79 code=0x7ffc0000 [ 506.110339][ T26] audit: type=1326 audit(3918353038.192:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fdeb339af79 code=0x7ffc0000 [ 506.224525][ T26] audit: type=1326 audit(3918353038.192:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb339af79 code=0x7ffc0000 [ 506.247801][ T26] audit: type=1326 audit(3918353038.192:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb339af79 code=0x7ffc0000 [ 506.279132][ T26] audit: type=1326 audit(3918353038.192:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdeb339af79 code=0x7ffc0000 [ 506.301442][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.567802][ T26] audit: type=1326 audit(3918353038.192:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb339af79 code=0x7ffc0000 [ 512.538758][ T9979] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 513.396215][ T9988] xt_SECMARK: invalid mode: 2 [ 514.999726][T10020] delete_channel: no stack [ 519.645327][T10067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.145849][T10140] tipc: Enabling of bearer rejected, failed to enable media [ 528.521744][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1671'. [ 530.748165][T10183] IPv6: NLM_F_CREATE should be specified when creating new route [ 532.454723][T10206] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1684'. [ 533.591880][T10225] overlayfs: failed to clone lowerpath [ 540.025662][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1711'. [ 540.504692][T10295] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1710'. [ 540.535527][T10295] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 540.719369][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1711'. [ 549.540864][T10358] batman_adv: batadv0: Adding interface: gretap3 [ 549.548201][T10358] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.574056][T10358] batman_adv: batadv0: Interface activated: gretap3 [ 554.593411][T10393] device ip6gre1 left promiscuous mode [ 554.615338][T10393] device macvlan2 left promiscuous mode [ 558.963987][T10432] tipc: Enabled bearer , priority 0 [ 560.145817][T10450] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1754'. [ 560.480397][T10444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1753'. [ 560.503538][T10444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1753'. [ 561.643699][T10444] device team0 entered promiscuous mode [ 561.675736][T10444] device team_slave_0 entered promiscuous mode [ 561.693509][T10444] device team_slave_1 entered promiscuous mode [ 561.924907][T10444] device bond0 entered promiscuous mode [ 562.425208][T10444] device bond_slave_0 entered promiscuous mode [ 562.431621][T10444] device bond_slave_1 entered promiscuous mode [ 562.446609][T10444] device wlan1 entered promiscuous mode [ 562.462857][T10444] device team0 left promiscuous mode [ 562.478871][T10444] device team_slave_0 left promiscuous mode [ 562.485102][T10444] device team_slave_1 left promiscuous mode [ 562.495581][T10444] device bond0 left promiscuous mode [ 562.501124][T10444] device bond_slave_0 left promiscuous mode [ 562.508385][T10444] device bond_slave_1 left promiscuous mode [ 562.562400][T10444] device wlan1 left promiscuous mode [ 563.967926][T10479] wlan0 speed is unknown, defaulting to 1000 [ 564.130963][T10487] Cannot find del_set index 286 as target [ 564.712955][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 564.790601][T10500] tipc: Started in network mode [ 564.814764][T10500] tipc: Node identity 080211, cluster identity 4711 [ 564.842044][T10500] tipc: Enabled bearer , priority 0 [ 564.878019][T10504] tipc: Enabled bearer , priority 0 [ 566.193709][ T4250] tipc: Node number set to 134353152 [ 566.298170][T10527] tipc: Enabling of bearer rejected, already enabled [ 566.314796][T10529] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1776'. [ 566.933424][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.953986][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.528403][T10873] xt_recent: Unsupported userspace flags (000000de) [ 572.399505][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 580.337542][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1821'. [ 584.696176][T11266] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1832'. [ 590.900131][T11326] overlayfs: failed to clone lowerpath [ 593.793221][T11349] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1852'. [ 603.611444][T11416] tipc: Enabling of bearer rejected, already enabled [ 603.620575][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1869'. [ 603.673308][T11416] tipc: Disabling bearer [ 615.784472][T11822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.951761][T11832] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 619.946383][T11858] netlink: 'syz.1.1913': attribute type 3 has an invalid length. [ 619.954412][T11858] netlink: 'syz.1.1913': attribute type 1 has an invalid length. [ 620.377496][T11869] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1905'. [ 624.810062][T11902] xt_SECMARK: invalid mode: 2 [ 627.124760][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 632.857915][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 632.864240][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.921502][T11999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1936'. [ 634.947261][T11999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1936'. [ 634.982075][T11999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1936'. [ 635.765470][T12023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1946'. [ 637.163954][T12029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1951'. [ 637.172934][T12029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1951'. [ 637.196366][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1949'. [ 640.562312][T12058] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 643.255425][T12087] delete_channel: no stack [ 643.496452][T12099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1971'. [ 643.751614][T12102] ipt_REJECT: ECHOREPLY no longer supported. [ 645.451020][T12121] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 655.898517][T12208] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2003'. [ 655.910961][T12208] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 657.753558][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2016'. [ 658.705118][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2016'. [ 672.232010][T12334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2037'. [ 672.241193][T12334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2037'. [ 673.130709][T12334] device team0 entered promiscuous mode [ 673.136320][T12334] device team_slave_0 entered promiscuous mode [ 673.300653][T12334] device team_slave_1 entered promiscuous mode [ 673.334839][T12334] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 673.345253][T12334] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 673.356087][T12334] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 677.953909][T12385] tipc: Enabling of bearer rejected, already enabled [ 678.951890][T12405] tipc: Enabling of bearer rejected, already enabled [ 689.887061][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2079'. [ 689.957581][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2079'. [ 694.316146][T12532] xt_l2tp: v2 tid > 0xffff: 37482740 [ 694.930820][T12551] kAFS: unable to lookup cell '' [ 700.069072][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 700.075423][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 703.475255][T12608] overlayfs: failed to clone upperpath [ 708.215053][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2130'. [ 711.609564][T12690] 0: reclassify loop, rule prio 0, protocol 800 [ 713.756778][T12713] overlayfs: failed to clone lowerpath [ 717.578702][T12744] overlayfs: failed to clone upperpath [ 719.131573][T12772] overlayfs: failed to clone upperpath [ 720.748770][T12796] netlink: 'syz.1.2169': attribute type 1 has an invalid length. [ 722.449340][T12825] netlink: 'syz.2.2180': attribute type 1 has an invalid length. [ 722.469503][T12825] 8021q: adding VLAN 0 to HW filter on device bond8 [ 722.492251][T12825] device macvlan3 entered promiscuous mode [ 722.498784][T12825] device bond8 entered promiscuous mode [ 722.505429][T12825] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 722.515256][T12825] team0: Port device macvlan3 added [ 724.157409][T12836] overlayfs: failed to clone upperpath [ 726.686057][T12875] print_req_error: 25 callbacks suppressed [ 726.686126][T12875] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 726.704572][T12875] SQUASHFS error: Failed to read block 0x0: -5 [ 731.082610][T12885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2197'. [ 732.339630][T12898] IPv4: Oversized IP packet from 127.202.26.0 [ 733.718116][T12914] device syzkaller0 left promiscuous mode [ 733.726784][T12914] device gretap1 left promiscuous mode [ 733.739392][T12914] device macvlan2 left promiscuous mode [ 733.750438][T12914] device bond5 left promiscuous mode [ 733.774518][T12914] device veth7 left promiscuous mode [ 733.786984][T12914] device macvlan3 left promiscuous mode [ 733.792682][T12914] device bond8 left promiscuous mode [ 735.371677][T12937] overlayfs: failed to clone upperpath [ 736.319306][T12944] xt_cgroup: path and classid specified [ 737.341881][T12966] device sit0 left promiscuous mode [ 737.348559][T12966] device vlan2 left promiscuous mode [ 737.355015][T12966] device macvlan2 left promiscuous mode [ 737.361356][T12966] device gretap1 left promiscuous mode [ 739.476481][T12992] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 740.846069][T12998] overlayfs: failed to clone upperpath [ 744.647327][T13025] device ip6gre1 left promiscuous mode [ 744.653990][T13025] device syzkaller0 left promiscuous mode [ 744.660594][T13025] tipc: Resetting bearer [ 744.673648][T13025] device veth11 left promiscuous mode [ 746.347079][T13053] overlayfs: failed to clone upperpath [ 751.591007][T13099] device macvlan2 left promiscuous mode [ 751.622215][T13099] device gretap1 left promiscuous mode [ 751.673698][T13099] device veth7 left promiscuous mode [ 752.439664][T13108] overlayfs: failed to clone upperpath [ 757.557493][T13168] tipc: Resetting bearer [ 762.823443][T13219] xt_cgroup: path and classid specified [ 766.775874][T13257] Timeout policy `syz1' can only be used by L3 protocol number 34825 [ 771.328909][T13287] fuse: Unknown parameter '0xffffffffffffffff' [ 771.347989][T13288] netlink: 'syz.0.2310': attribute type 1 has an invalid length. [ 771.382787][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 771.389140][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 771.472236][T13288] 8021q: adding VLAN 0 to HW filter on device bond4 [ 771.534000][T13292] device macvlan3 entered promiscuous mode [ 771.540348][T13292] device bond4 entered promiscuous mode [ 771.560367][T13292] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 771.569559][T13292] team0: Port device macvlan3 added [ 773.299880][T13313] netlink: 'syz.4.2317': attribute type 1 has an invalid length. [ 777.601397][T13353] netlink: 'syz.4.2329': attribute type 1 has an invalid length. [ 777.907402][T13353] 8021q: adding VLAN 0 to HW filter on device bond3 [ 787.288496][T13435] overlayfs: failed to clone lowerpath [ 792.925324][ C0] hrtimer: interrupt took 33492 ns [ 796.718205][T13500] bond2: option mode: unable to set because the bond device has slaves [ 796.884651][T13500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 797.021194][T13515] xt_CONNSECMARK: invalid mode: 0 [ 804.382995][T13555] ERROR: device name not specified. [ 806.490062][T13572] x_tables: duplicate underflow at hook 1 [ 811.594720][T13610] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 812.248712][T13616] delete_channel: no stack [ 812.271872][T13616] delete_channel: no stack [ 824.095946][T13679] xt_CT: You must specify a L4 protocol and not use inversions on it [ 825.003535][T13694] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2422'. [ 826.260460][T13691] ERROR: device name not specified. [ 829.971378][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 829.971393][ T26] audit: type=1326 audit(3918353352.248:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13696 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb339af79 code=0x7ffc0000 [ 830.107919][ T26] audit: type=1326 audit(3918353352.248:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13696 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb339af79 code=0x7ffc0000 [ 830.130335][ T26] audit: type=1326 audit(3918353352.248:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13696 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fdeb339af79 code=0x7ffc0000 [ 830.170656][ T26] audit: type=1326 audit(3918353352.248:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13696 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb339af79 code=0x7ffc0000 [ 830.221010][ T26] audit: type=1326 audit(3918353352.248:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13696 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb339af79 code=0x7ffc0000 [ 830.243359][ C1] vkms_vblank_simulate: vblank timer overrun [ 830.287884][ T26] audit: type=1326 audit(3918353352.248:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13696 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fdeb339af79 code=0x7ffc0000 [ 832.423251][ T26] audit: type=1326 audit(3918353352.248:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13696 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb339af79 code=0x7ffc0000 [ 832.821802][T13740] ipt_CLUSTERIP: Please specify destination IP [ 832.991807][ T26] audit: type=1326 audit(3918353352.248:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13696 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb339af79 code=0x7ffc0000 [ 833.043468][ T26] audit: type=1326 audit(3918353352.248:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13696 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdeb339af79 code=0x7ffc0000 [ 833.066346][ T26] audit: type=1326 audit(3918353352.248:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13696 comm="syz.0.2424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeb339af79 code=0x7ffc0000 [ 833.297600][T13749] 9pnet: Insufficient options for proto=fd [ 834.010641][T13752] 9pnet: p9_fd_create_unix (13752): problem connecting socket: ./file0: -2 [ 836.495465][T13785] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 837.233498][T13799] xt_CONNSECMARK: invalid mode: 0 [ 837.988576][T13804] netlink: 34 bytes leftover after parsing attributes in process `syz.3.2455'. [ 839.387529][T13822] wlan0 speed is unknown, defaulting to 1000 [ 840.710139][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 840.716499][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 841.901794][T13845] delete_channel: no stack [ 842.007991][T13845] delete_channel: no stack [ 844.688770][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 844.688785][ T26] audit: type=1326 audit(3918353624.862:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13872 comm="syz.4.2476" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f611e7f4f79 code=0x0 [ 851.624085][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 856.070286][T13993] tipc: Failed to remove unknown binding: 66,0,0/134353152:3179898831/3179898832 [ 871.576927][T14122] overlayfs: failed to clone upperpath [ 874.831559][T14127] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 875.440355][ T26] audit: type=1326 audit(3918353653.625:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14128 comm="syz.4.2545" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f611e7f4f79 code=0x0 [ 879.177053][T14159] delete_channel: no stack [ 879.282137][T14159] delete_channel: no stack [ 880.904528][ T5450] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 880.930946][ T5450] Bluetooth: hci1: Injecting HCI hardware error event [ 880.984854][ T4187] Bluetooth: hci1: hardware error 0x00 [ 890.431595][T14285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2589'. [ 890.452242][T14285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2589'. [ 892.917952][T14285] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 892.926864][T14285] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 892.935627][T14285] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 892.944468][T14285] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 893.793344][T14297] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 898.282575][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2601'. [ 898.291783][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2601'. [ 898.300834][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2601'. [ 898.309967][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2601'. [ 898.318989][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2601'. [ 898.328114][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2601'. [ 898.337220][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2601'. [ 898.346311][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2601'. [ 898.355466][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2601'. [ 898.364602][T14349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2601'. [ 899.722915][ T26] audit: type=1107 audit(2000000009.587:188): pid=14344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 902.750167][T14390] xt_CONNSECMARK: invalid mode: 0 [ 906.504046][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 906.510371][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 908.450586][T14442] 9pnet: p9_fd_create_unix (14442): problem connecting socket: ./file0: -2 [ 913.152678][T14497] xt_time: unknown flags 0xc [ 919.817074][ T26] audit: type=1107 audit(2000000028.024:189): pid=14554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 922.026591][T14601] __nla_validate_parse: 85 callbacks suppressed [ 922.026662][T14601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2673'. [ 930.736262][T14677] delete_channel: no stack [ 930.742677][T14677] delete_channel: no stack [ 930.820861][T14651] orangefs_mount: mount request failed with -4 [ 933.717367][T14694] virtio-fs: tag not found [ 934.227829][T14706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2704'. [ 936.218916][T14726] delete_channel: no stack [ 936.229137][T14726] delete_channel: no stack [ 941.771571][T14784] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 942.282143][T14786] overlayfs: failed to clone lowerpath [ 971.232922][T15082] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 971.983016][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 971.989615][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 977.040122][T15130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 993.296389][T15274] siw: device registration error -23 [ 1002.336530][T15338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2877'. [ 1003.050718][T15338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2877'. [ 1003.081565][T15338] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1003.090441][T15338] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1003.099395][T15338] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1003.108350][T15338] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1003.136015][T15339] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1003.148992][T15339] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.866337][T15472] wlan0 speed is unknown, defaulting to 1000 [ 1028.637945][T15561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2934'. [ 1033.259022][T15608] tipc: Resetting bearer [ 1036.463131][T15637] tipc: New replicast peer: 255.255.255.255 [ 1036.470574][T15637] tipc: Enabled bearer , priority 10 [ 1037.890321][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1037.896751][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1044.447742][T15682] wlan0 speed is unknown, defaulting to 1000 [ 1046.454845][ T4250] Bluetooth: hci4: command 0x0409 tx timeout [ 1046.548978][T15682] chnl_net:caif_netlink_parms(): no params data found [ 1049.086888][ T5450] Bluetooth: hci4: command 0x041b tx timeout [ 1049.431294][T15682] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.467992][T15682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.675061][T15682] device bridge_slave_0 entered promiscuous mode [ 1049.683731][T15682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.690869][T15682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.699736][T15682] device bridge_slave_1 entered promiscuous mode [ 1050.081295][T15682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.105469][T15682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1051.253908][ T4250] Bluetooth: hci4: command 0x040f tx timeout [ 1052.220309][T15682] team0: Port device team_slave_0 added [ 1052.722440][T15682] team0: Port device team_slave_1 added [ 1052.765970][T15682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.773018][T15682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.814135][T15682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.842459][T15682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.418984][T15682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.444940][ C1] vkms_vblank_simulate: vblank timer overrun [ 1053.794234][ T4250] Bluetooth: hci4: command 0x0419 tx timeout [ 1054.697218][T15682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.768297][T15682] device hsr_slave_0 entered promiscuous mode [ 1054.990899][T15682] device hsr_slave_1 entered promiscuous mode [ 1055.105948][T15682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1055.131802][T15682] Cannot create hsr debugfs directory [ 1056.662981][T15790] overlayfs: failed to clone upperpath [ 1065.243496][T15872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3006'. [ 1066.210869][T15873] wlan0 speed is unknown, defaulting to 1000 [ 1067.032788][T15682] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1067.059738][T15682] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1067.187236][ C1] MPTCP: addr_signal error, add_addr=2, echo=1 [ 1067.196516][T15879] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3008'. [ 1068.010407][ T4311] tipc: Left network mode [ 1068.024260][T15682] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1068.072077][T15682] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1068.635763][T15900] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3013'. [ 1069.127075][ T4311] bond4: (slave ip6gretap1): Releasing active interface [ 1069.245956][ T4311] bond6: (slave ip6gretap2): Releasing active interface [ 1069.265669][ T4311] bond2: (slave ip6gretap3): Releasing active interface [ 1069.477913][T15918] overlayfs: failed to clone upperpath [ 1069.603228][T15919] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1071.375717][T15682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.552973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1071.564333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1071.595411][T15682] 8021q: adding VLAN 0 to HW filter on device team0 [ 1071.622723][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1071.998768][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1072.007494][ T5538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.015568][ T5538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.264654][ T4311] bond1: (slave erspan1): Releasing active interface [ 1072.351229][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1072.375988][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1072.403476][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1072.412379][ T5538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.419518][ T5538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.637443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1072.647583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1074.804112][ T4311] batman_adv: batadv0: Interface deactivated: gretap3 [ 1074.826464][ T4311] bond3: (slave gretap1): Releasing active interface [ 1074.840990][ T4311] batman_adv: batadv0: Removing interface: gretap3 [ 1075.451177][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1075.465967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1075.476815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1075.486041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1075.496256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1075.538920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1075.548404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1075.557413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1075.566577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1075.630848][T15682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1075.959526][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1077.234944][ T4311] bond0: (slave wlan1): Releasing backup interface [ 1077.760432][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1077.783866][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1077.949924][T15682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1078.253500][ T4311] device hsr_slave_0 left promiscuous mode [ 1078.264832][ T4311] device hsr_slave_1 left promiscuous mode [ 1078.304416][ T4311] device bridge_slave_1 left promiscuous mode [ 1078.315820][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.396315][ T4311] device bridge_slave_0 left promiscuous mode [ 1078.437446][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.695258][ T4311] team0 (unregistering): Port device macvlan3 removed [ 1078.758765][ T4311] bond8 (unregistering): Released all slaves [ 1078.860189][ T4311] bond7 (unregistering): (slave veth7): Releasing backup interface [ 1078.935167][ T4311] bond7 (unregistering): Released all slaves [ 1078.984599][ T4311] bond6 (unregistering): Released all slaves [ 1079.072787][ T4311] bond5 (unregistering): (slave veth5): Releasing active interface [ 1079.154980][ T4311] bond5 (unregistering): Released all slaves [ 1079.316737][ T4311] bond4 (unregistering): Released all slaves [ 1079.337806][ T4311] bond3 (unregistering): Released all slaves [ 1079.363454][ T4311] bond2 (unregistering): Released all slaves [ 1079.385211][ T4311] bond1 (unregistering): Released all slaves [ 1079.681883][ T4311] team0 (unregistering): Port device team_slave_1 removed [ 1079.727803][ T4311] team0 (unregistering): Port device team_slave_0 removed [ 1079.784277][ T4311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.831916][ T4311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.197162][ T4311] team0 (unregistering): Port device bond0 removed [ 1080.371725][ T4311] bond0 (unregistering): Released all slaves [ 1084.304813][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1084.401105][ T1147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1085.192643][T13976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1085.218612][T13976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1085.245736][T15682] device veth0_vlan entered promiscuous mode [ 1085.275789][T13976] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1085.296452][T13976] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1085.578680][T15682] device veth1_vlan entered promiscuous mode [ 1085.640782][T13976] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1085.811032][T15682] device veth0_macvtap entered promiscuous mode [ 1085.822852][T15682] device veth1_macvtap entered promiscuous mode [ 1085.841067][T15682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1085.851550][T15682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.862222][T15682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.873726][T15682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1085.885583][T15682] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.894691][T15682] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.910253][T15682] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.921085][T15682] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.967680][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1085.979935][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1086.003562][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1086.034406][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1086.048524][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1086.061276][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1086.193183][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1086.312027][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1087.053393][T13976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.103812][T13976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.147885][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1087.896185][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.928313][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.096120][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1208.758008][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1208.765071][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4311/1:b..l [ 1208.773502][ C0] (detected by 0, t=10502 jiffies, g=40513, q=161) [ 1208.780170][ C0] task:kworker/u4:8 state:R running task stack:21464 pid: 4311 ppid: 2 flags:0x00004000 [ 1208.792503][ C0] Workqueue: netns cleanup_net [ 1208.797358][ C0] Call Trace: [ 1208.800615][ C0] [ 1208.803527][ C0] __schedule+0x11ef/0x43c0 [ 1208.808074][ C0] ? mark_lock+0x94/0x320 [ 1208.812433][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1208.818398][ C0] ? mark_lock+0x94/0x320 [ 1208.822718][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 1208.827988][ C0] preempt_schedule_irq+0xbb/0x160 [ 1208.833166][ C0] ? __cond_resched+0xd0/0xd0 [ 1208.837822][ C0] ? rcu_is_watching+0x11/0xa0 [ 1208.842639][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 1208.848433][ C0] irqentry_exit+0x63/0x70 [ 1208.852858][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1208.858889][ C0] RIP: 0010:lock_acquire+0x208/0x400 [ 1208.864217][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 1208.883813][ C0] RSP: 0018:ffffc90002fbf900 EFLAGS: 00000206 [ 1208.889977][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: bb50ca234e847f00 [ 1208.897938][ C0] RDX: 0000000000000000 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f740 [ 1208.905897][ C0] RBP: ffffc90002fbfa20 R08: dffffc0000000000 R09: 1ffffffff203a418 [ 1208.914279][ C0] R10: dffffc0000000000 R11: fffffbfff203a419 R12: ffffffff8c31eaa0 [ 1208.922232][ C0] R13: 1ffff920005f7f2c R14: 0000000000000246 R15: dffffc0000000000 [ 1208.930198][ C0] ? rcu_lock_release+0x5/0x20 [ 1208.935130][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1208.940520][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 1208.945532][ C0] ? __rcu_read_unlock+0x2e/0xd0 [ 1208.950457][ C0] rcu_lock_acquire+0x2a/0x30 [ 1208.955115][ C0] ? rcu_lock_acquire+0x5/0x30 [ 1208.959853][ C0] inet_twsk_purge+0x119/0x840 [ 1208.964599][ C0] ? __inet_twsk_schedule+0x130/0x130 [ 1208.969966][ C0] ? iput+0x706/0x8a0 [ 1208.973958][ C0] ? dccp_v6_exit_net+0x80/0x80 [ 1208.978963][ C0] cleanup_net+0x791/0xba0 [ 1208.983373][ C0] ? ops_free_list+0x330/0x330 [ 1208.988126][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 1208.993563][ C0] process_one_work+0x85f/0x1010 [ 1208.998551][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1209.004159][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 1209.009438][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1209.014443][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1209.019967][ C0] ? wq_worker_running+0x97/0x170 [ 1209.024971][ C0] worker_thread+0xaa6/0x1290 [ 1209.029641][ C0] kthread+0x436/0x520 [ 1209.033688][ C0] ? rcu_lock_release+0x20/0x20 [ 1209.038513][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1209.043084][ C0] ret_from_fork+0x1f/0x30 [ 1209.047486][ C0] [ 1209.050485][ C0] rcu: rcu_preempt kthread starved for 9781 jiffies! g40513 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1209.061575][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1209.071525][ C0] rcu: RCU grace-period kthread stack dump: [ 1209.077396][ C0] task:rcu_preempt state:R running task stack:26960 pid: 15 ppid: 2 flags:0x00004000 [ 1209.088143][ C0] Call Trace: [ 1209.091405][ C0] [ 1209.094320][ C0] __schedule+0x11ef/0x43c0 [ 1209.098814][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1209.104683][ C0] ? __mod_timer+0x91e/0xd00 [ 1209.109332][ C0] schedule+0x11b/0x1e0 [ 1209.113468][ C0] schedule_timeout+0x184/0x2d0 [ 1209.118300][ C0] ? console_conditional_schedule+0x40/0x40 [ 1209.124169][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1209.130070][ C0] ? update_process_times+0x200/0x200 [ 1209.135428][ C0] ? prepare_to_swait_event+0x331/0x350 [ 1209.140956][ C0] rcu_gp_fqs_loop+0x2be/0x11d0 [ 1209.145781][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1209.151043][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 1209.157170][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 1209.161997][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1209.167179][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1209.172357][ C0] rcu_gp_kthread+0x9b/0x370 [ 1209.176975][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1209.182846][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1209.187935][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1209.193808][ C0] ? __kthread_parkme+0x157/0x1b0 [ 1209.198812][ C0] kthread+0x436/0x520 [ 1209.202860][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1209.207944][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1209.212511][ C0] ret_from_fork+0x1f/0x30 [ 1209.216910][ C0] [ 1209.219907][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1209.226200][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1209.231396][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10