last executing test programs: 44.661035495s ago: executing program 3 (id=2594): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c00070000000000000000000800090071000000070006007272000008000800"], 0x54}}, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_create(0x1) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x37c, &(0x7f0000000ec0)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000000080000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000850000002a000000950000000000000057"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 42.311818541s ago: executing program 3 (id=2600): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1) 41.346480376s ago: executing program 3 (id=2603): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x100}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 40.146986194s ago: executing program 3 (id=2608): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000140)={[{@mblk_io_submit}, {@resuid={'resuid', 0x3d, 0xee00}}]}, 0xfc, 0x474, &(0x7f00000003c0)="$eJzs3MtrXFUYAPBv7mTSpM/4qNqHGl9YfDRN+rALN4qCCwVBF9VdTNNSm1ppIthSTBSpSym4F5eCf4Er3Yi6EtzqXgpBsml8gFfunXvzfk0yyUTn94MJ59x7Zu75zrlncu65MxNA2+rN/lQidkfEL1k6ybMz0qJQVm566vrQH1PXhyqRpq/9Xsn33Z66PlSWLZ+3u8gcSSKSjytxaInjjl69dnFwZGT4SpHvG7v0bt/o1WtPX7g0eH74/PA7A6dPnzje/8ypgZNNiXNPVteDH1w+fOClN26+MnTm5ls/fNVR1nVBHM3SG73z2nKux5p9sBbbMydd6WhhRWhINSKy7qrl439fVGO28/bFix+1tHLApkrTNN27/O6JFPgfq0SrawC0RvmP/vZUd3Rt0nXwdjb5XP0CKIt7unjU93REUpSpLbi+baauYt3kzMSfn0fe/jvaqv0BgK33TTb/eao+/ykf9T09cc+ccnvz9eBsa8QdEXFnRNwVEXdHxP6IvOy9EXFfg8fvXZBfPP9Mbq0rsDXK5n/PFve25s//itnfP2lPtcjtie7oiVrl3IWR4WNFmxyJ2o4s37/CMb594edPl9vXW8z9ykd2/HIuWNTjVseO+c85Ozg2uLGoZ01+mK8Bji+Of/bOVZY6EBEH1/H62bz5whNfHl5u/+rxr6AJ95nSLyIer/f/RKwQ/8L7k93FvlMDJ/u6YmT4WF95Viz24083Xl3u+BuKvwmy/t+55Pk/E39PZe792tHGj3Hj10+WvaZp4Px/s9ySnf+dldfzdGex7f3BsbEr/RGdlZcXbx+YfbUyX5af3L0/4pGlx3/2HpedY1n8hyIiO4nvj4gHIuLBou4PRcTDkb/EUsanI+L75x99ez3xJ6s1bBNk/X92Xv/HKv3feKJ68buv1xN/Xdb/J/LUkWLLWt7/1lrBjbQdAAAA/Fck+WfgK8nRmXSSHD0asStf292ZjFweHXvy3OX3/jpb/6x8T9SScqWrvh5cXw/tL9aGy/zAgvzxYt34s2p3nt9Z3PsGWmfX3PGfLzjWx3/mt2qLKwdsPt/XgvZl/EP7Mv6hfRn/0L7WOv7TTa4HsPWWGv/jLagHsPXM/6F9Gf/Qvox/aF/GP7SljXyvX2KVxHjDzdsVK5Xp3CZx5YlI8kQ63sJq/F38DMvaCm9efcpfy1i9cK0Yd9uhB1dOtO49CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJn+DQAA//85XdxN") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) mount(0x0, 0x0, 0x0, 0x1001000, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x41) preadv2(r1, &(0x7f0000000d80)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x1, 0x0, 0x0, 0x1b) 37.017953682s ago: executing program 3 (id=2621): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x235, &(0x7f0000000300)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sysinfo(&(0x7f0000000400)=""/245) 36.375385532s ago: executing program 3 (id=2625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r4) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x44, r5, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x88800}, 0x0) 34.404371853s ago: executing program 32 (id=2625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r4) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x44, r5, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x88800}, 0x0) 15.189435997s ago: executing program 5 (id=2703): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 13.488278043s ago: executing program 5 (id=2707): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 12.154582293s ago: executing program 0 (id=2710): r0 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x11, 0x0) 12.153494623s ago: executing program 4 (id=2712): socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 12.023926406s ago: executing program 0 (id=2714): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/61, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ebffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12.023080755s ago: executing program 2 (id=2715): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000980)={{0x7f, 0x45, 0x4c, 0x46, 0x91, 0x3, 0xc1, 0x2, 0x7fffffffffffffff, 0x3, 0x3e, 0x5, 0x248, 0x38, 0x8c, 0x9, 0x1, 0x20, 0x1, 0x8, 0x6c, 0x1000}, [{0x2, 0xf0e6, 0x4, 0x0, 0x6, 0x0, 0x8, 0x217}]}, 0x58) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$key(0xf, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @local}) recvmmsg(r2, &(0x7f0000000440), 0x0, 0x2000000022, 0x0) 9.82280204s ago: executing program 4 (id=2717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf6334000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x8000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x21) 9.79049364s ago: executing program 0 (id=2719): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1) 8.132059035s ago: executing program 2 (id=2720): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x211000, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES16=r1, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRESOCT, @ANYRES64=r1, @ANYRESDEC=r1, @ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYRESDEC, @ANYRES16=r1, @ANYRESOCT=0x0, @ANYRESHEX, @ANYRES16], 0x5, 0x1527, &(0x7f0000001700)="$eJzs3AuYjtX6MPD7Xms9jGnS2ySHYa11P7w0WCRJDgk5JEmSJDklJEmShMSQU9KQhBwnyWEIyWEak8b5fMg5abKlSZKQkLC+S7U/u3/tf//97f7bt/fcv+ta16x7nnfd773mnnee53mva96ve4ys06xuzSZEBP8U/PlLEgDEAMBQALgGAAIAqBBfIf7S8TwSk/65J2F/rgdSr3QF7Eri/uds3P+cjfufs3H/czbuf87G/c/ZuP85G/efsZxs2+xC1/5LR95/8fP9wVB/Wq7iua/0Xv5fBr//n5Px+f8/SHaZSZ9vKHN9z39gCfc/Z+P+5zBxvw65/zkb9z9n4/7nbNz//3w1/ptj3P+cjfvPWE52pd9/5vEvGbn+3rEr/fvHGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYyxnOOsvUwDw1/mVrosxxhhjjDHGGGN/Hp/7SlfAGGOMMcYYY4yx/30IAiQoCCAX5IYYyAOxcBXEwdWQF66BCFwL8XAd5IPrIT8UgIJQCBKgMBQBDQYsEIRQFIpBFIpDCbgBEqEklILS4KAMlIUboRzcBOXhZqgAt0BFuBUqQWWoAlXhNqgGt0N1qAE14Q6oBbWhDtSFO6Ee3AX14W5oAPdAQ7gXGsF90BjuhybwADSFB6EZPATN4WFoAS2hFbSGNv/wekhqDs9DH3gB+kI/SIL+MABehIEwCAbDEBgKL8EweBmGwyuQDCNgJLwKo+A1GA2vwxgYC+PgDRgPE2AiTILJMAVS4E2YCm/BNHgbpsMMmAmzIBVmwxx4B+bCPJgP78ICeA8WwiJYDEsgDd6HdFgKGfABLIMPIROWwwpYCatgNayBtbAO1sMG2AibYDNsga2wDT6C7bADdsIu2A17YC98DPvgE9gPn0IWfPYPrj/zX9b3REBAgQIVKsyFuTAGYzAWYzEO4zAv5sUIRjAe4zEf5sP8mB8LYkFMwAQsgkXQoEFCwqJYFKMYxRJYAhMxEUthKXTosCyWxXJ4E5bH8lgBK2BFrIiVsDJWxqpYFathNayO1bEm1sRaWAvrYB28E+/Eu7A+1scG2AAbYkNshI2wMTbGJtgEm2JTbIbNsDk2xxbYAlthK2yDbbAttsV22A47YAfsiB2xE3bCztgZu2AX7IpdsRt2w+7YHXtgD+yJvbAXPo/P4wv4AvbDWqI/DsABOBAH4mAcgkPwJRyGL+PL+Aom4wgcia/iq/gajsbTOAbH4jgch9XEBJyIk5DEFEzBFJyKU3EaTsPpOANn4CxMxdk4B+fgXJyH8/BdXIDv4Xu4CBfhEkzDNEzHpZiBGbgMz2AmLscVuBJX4WpchWtxHa7FDbgRN+Bm3IxbcSt+hB/hDtyBu3AX7sE9+DF+jJ/gJ5iMWZiFB/AAHsSDeAgPYTZm42E8jEfwCB7Fo3gMj+FxPIEn8QSeQvzl5X4Wz+E5PI/PJnzZdE/J9ckgLlFCiVwil4gRMSJWxIo4ESfyirwKAES8iBf5RD6RX+QXBUVBkSASRBFRRBhhBIlQFBVFRVRERQlRQiSKRFFKlBJOOFFWlBXlRDlRXpQXFcQtoqK4VVQSlUV7V1VUFdVEB1dd1BA1RU1RS9QWdURdUVfUE/VEfVFfNBANREPRUDQS94nGoj8OxgfEpc40EyOwuRiJLURL0Uq0Fq/hI6KtGI3tRHvRQTwmxuIY7CTaus7iSdFFTMSu4mkxCZ8R3cUU7CGeEz1FL9FbPC/6iHaur+gnpmN/MUDMwoFikBgshoi5WFtc6lgd8YpIFiPESPGqWIKvidHidTFGjBXjxBtivJggJopJYrKYIlLEm2KqeEtME2+L6WKGmClmiVQxW8wR74i5Yp6YL94VC8R7YqFYJBaLJSJNvC/SxVKRIT4Qy8SHIlMsFyvESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNfCS2ix1ip9gldos9Yq/4WOwTn4j94lORJT4TB8RfxEHxuTgkvhDZ4ktxWHwljoivxVHxjTgmvhXHxQlxUnwnTonvxWlxRpwVP4hz4kdxXlwQF4UXIFEKKaWSgcwlc8sYmUfGyqtknLxa5pXXyIi8VsbL62Q+eb3MLwvIgrKQTJCFZRGppZFWkgxlUVlMRmVxWULeIBNlSVlKlpZOlpFl5Y2ynLxJlpc3ywryFllR3iorycqyiqwqb5PV5O2yuqwha8o7ZC1ZW9aRdeWdsp68S9aXd8sG8h7ZUN4rG8n7ZGN5v2wiH5BN5YOymXxINpcPyxaypWwlW8s28hHZVj4q28n2soN8THaUj8tO8gnZWT4pu8inZFf5tOwmn5Hd5bOyh3xO9pS9ZG95QV6UXvaV/WSS7C8HyBflQDlIDpZD5FD5khwmX5bD5SsyWY6QI+WrcpR8TY6Wr8sxcqwcJ9+Q4+UEOVFOkpPlFJki35RT5VtymnxbTpcz5Ew5S6bK2XLwL5nm/w/Wv/U764f/9Oxb5Tb5kdwud8idcpfcLffIvXKv3Cf3yf1yv8ySWfKAPCAPyoPykDwks2W2PCwPyyPyiDwqj8pj8pg8Lk/IH+R38pT8Xp6WZ+QZ+YM8J8/J87/8DEChEkoqpQKVS+VWMSqPilVXqTh1tcqrrlERda2KV9epfOp6lV8VUAVVIZWgCqsiSiujrCIVqqKqmIqq4qqEukElqpKqlCqtnCqjyqob/+n1f1RfG9VGtVVtVTvVTnVQHVRH1VF1Up1UZ9VZdVFdVFfVVXVT3VR31V31UD1UT9VT9Va9VR/VR/VVfVWSSlID1ItqoBqkBqshaqh6SQ1Tw9RwNVwlq2Q1Uo1Uo9QoNVqNVmPUGDVOjVPj1Xg1UU1Uk9VklaJS1FQ1VU1T09R0NV3NVDNVqkpVc9QcNVfNVfPVfLVALVAL1UK1WC1WaSpNpat0laEy1DK1TGWq5Wq5WqlWqtVqtVqr1qr1ar3aqDaqzWqzylTb1Da1XW1XO9VOtVvtVnvVXrVP7VP71X6VpbLUAXVAHVQH1SF1SGWrbHVYHVZH1BF1VB1Vx9QxdVwdVyfVSXVKnVKn1Wl1Vp1V59Q5dV6dVxfVxUuXfYEIRKACFeQKcgUxQUwQG8QGcUFckDfIG0SCSBAfxAf5guuD/EGBoGBQKEgICgdFAh2YwAYUhEHRoFgQDYoHJYIbgsSgZFAqKB24oExwPO7nU0754OZYAAgqBrcGlYLKQZWganBbUC24Page1AhqBncEtYLaQZ2gbnBnUC+4K6gf3B00CO4JGgb3Bo2C+4LGwf1Bk+CBoGnwYNAseChoHjwctAhaBq2C1kGb4KagfHBzUCG45U/I7/3pAo+6vrqfTtL99QD9oh6oB+nBeogeql/Sw/TLerh+RSfrEXqkflWP0q/p0fp1PUaP1eP0G3q8nqAn6kl6sp6iU/Sbeqp+S0/Tb+vpeoaeqWfpVD1bz9Hv6Ll6np6v39UL9Ht6oV6kF+slOk2/r9P1Up2hP9DL9Ic6Uy/XK/RKvUqv1mv0Wr1Or9cb9Ea9SW/WW/RWvU1/pLfrHXqn3qV36z16r/5Y79Of6P36U52lP9MH9F/0Qf25PqS/0Nn6S31Yf6WP6K/1Uf2NPqa/1cf1CX1Sf6dP6e/1aX1Gn9U/6HP6R31eX9AXtb90cX/p9G6UUSaXyWViTIyJNbEmzsSZvCaviZiIiTfxJp/JZ/Kb/KagKWgSTIIpYoqYS8iQKWqKmqiJmhKmhEk0iaaUKWWccaasKWvKmXKmvClvKpgKpqKpaCqZSqaKqWJuM7eZ283tpoapYe4wd5japrapa+qaeqaeqW/qmwamgWloGppGppFpbBqbJqaJaWqammammWlumpsWpoVpZVqZNqaNaWvamnamnelgOpiOpqPpZDqZzqaz6WK6mK6mq+lmupnuprvpYXqYnqan6W16mz6mj+lr+pokk2QGmAFmoBloBpvBZqgZaoaZYWa4GW6STbIZaUaaUWaUGW1GmzFmrBln3jDjzQQz0Uwyk80Uk2JSzFQz1Uwz08x0M93MNDNNqkk1c8wcM9fMNfPNfLPALDALzUKz2Cw2aSbNpJt0k2EyzDKzzGSaTLPCrDCrzCqzxqwx68w6s8FsMJvMJrPFbDHbzDaz3Ww3O81Os9vsNnvNXrPPeO/9fpNlsswBc8AcNAfNIXPIZJtsc9gcNkfMEXPUHDXHzDFz3Bw3J81Jc8qcMqfNaXPWnDXnzI/mvLlgLhpvYqyAWHuVjbNX27z2Ghtj89i/jQvaQjbBFrZFrLb5bYFfxcZam2hL2lK2tHW2jC1rb/xNXMlWtlVsVXubrWZvt9V/E9ezd9n69m7bwN5j69o7fxU3tPfaRvYh29g+bJvYlrapbW2b2Ydsc/uwbWFb2la2te1oH7ed7BO2s33SdrFP/SZOt0vtOrvebrAb7T77iT1rf7BH7Nf2nP3R9rX97FD7kh1mX7bD7Ss22Y74TTzOvmHH2wl2op1kJ9spv4ln2lk21c62c+w7dq6d95s4zb5vF9gMu9Ausovtkp/iSzVl2A/sMvuhzbTL7Qq70q6yq+0au/b/1rrSbrZb7Fa7135st9sddqfdZXfbPT/Fl/ax335qs+xn9rD9yh60n9tD9qjNtl/+FF/a31H7jT1mv7XH7Ql70n5nT9nv7Wl75qf9X9r7d/aCvWi9BUISJElRQLkoN8VQHoqlqyiOrqa8dA1F6FqKp+soH11P+akAFaRClECFqQhpMmSJKKSiVIyiVJxK0A2USCWpFJUmR2WoLN1I5egmKk83UwW6hSrSrVSJKlMVqkq3UTW6napTDapJd1Atqk11qC7dSfXoLqpPd1MDuoca0r3UiO6jxnQ/NaEHqCk9SM3oIWpOD1MLakmtqDW1oUeoLT1K7ag9daDHqCM9Tp3oCepMT1IXeoq60tPUjZ6h7vQs9aDnqCf1ot70PPWhF6gv9aMk6k8D6EUaSINoMA2hofQSDaOXaTi9Qsk0gkbSqzSKXqPR9DqNobE0jt6g8TSBJtIkmkxTKIXepKn0Fk2jt2k6zaCZNItSaTbNoXdoLs2j+fQuLaD3aCEtosW0hNLofUqnpZRBH9Ay+pAyaTmtoJW0ilbTGlpL62g9baCNtIk20xbaStvoI9pOO2gn7aLdtIf20se0jz6h/fQpZdFndID+QgfpczpEX1A2fUmH6Ss6ooCO0jd0jL6l43SCTtJ3dIq+p9N0hs7SD3SOfqTzdIEukjwNIYYilKEKgzBXmDuMCfOEseFVYVx4dZg3vCaMhNeG8eF1Yb7w+jB/WCAsGBYKE8LCYZFQhya0IYVhWDQsFkbD4mGJ8IYwMSwZlgpLhy4sE5YNbwzLhTeF5cObwwrhLWHF8NawUlg5fOiequFtYbXw9rB6WCOsGd4R1gprh3XCuuGdYb3wrrB+eHfYILwnLB/eGzYK7wsbh/eHTcIHwqbhg2Gz8KGwefhw2CJsGbYKW4dtwkfCtuGjYbuwfdghfCzsGD4edgqfCDuHT4Zdwqf+8HhS2D8cEL4Yvhh6f7dcHF0STYu+H02PLo1mRD+ILot+GM2MLo+uiK6Mroqujq6Jro2ui66PbohujG6Kbo5uiW6Nel83Nzh0wkmnXOByudwuxuVxse4qF+eudnndNS7irnXx7jqXz13v8rsCrqAr5BJcYVfEaWecdeRCV9QVc1FX3JVwN7hEV9KVcqWdc2VcWdfatXFtXFv3qGvn2rsO7jH3mHvcPe6ecE+4J10X95Tr6p523dwzrrt71j3rnnM9XS/X2z3v+rgXXF/XzyW5JDfADXAD3UA32A12Q91QN8wNc8PdcJfskt1IN9KNcqPcaDfajXFj3Dg3zo13491EN9FNdpNdiktxU91UN81Nc9PddDfTzXSpLtXNcXPcXDfXzXfz3YLEBW6hW+gWu8UuzaW5dJfuMlyGW+aWuUyX6Va4FW6VW+XWuDVunVvnNrgNbpPb5La4LW6b2+YEbHc73U632+12e91et8/tc/vdfpflstwBd8AddAfdIfeFy3ZfusPuK3fEfe2Oum/cMfetO+5OuJPuO3fKfe9OuzPurPvBnXM/uvPugrvovEuJvBmZGnkrMi3ydmR6ZEZkZmRWJDUyOzIn8k5kbmReZH7k3ciCyHuRhZFFkcWRJZG0yPuR9MjSSEbkg8iyyIeRzMjyyIrIysiqCES8L7w99EV9MR/1xX0Jf4NP9CV9KV/aO1/Gl/U3+nL+Jl/e3+wr+Ft8RX+rr+Qr+yr+Yd/Ct/StfGvfxj/i2/pHfTvf3nfwj/mO/nHfyT/hO/snfRf/lO/qn/bd/DO+u3/W9/DP+Z6+l+/tn/d9/Au+r+/nk3x/P8C/6Af6QX6wH+KH+pf8MP+yH+5f8cl+hB/pX/Wj/Gt+tH/dj/Fj/Tj/hh/vJ/iJfpKf7Kf4FP+mn+rf8tP82366n+Fn+lk+1c/2c/w7fq6f5+f7d/0C/55f6Bf5xX6JT/Pv+3S/1Gf4D/wy/6HP9Mv9Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Mf+e1+h9/pd/ndfo/f+/PtQSz4T32W/8wf8H/xB/3n/pD/wmf7L/1h/5U/4r/2R/03/pj/1h/3J/xJ/50/5b/3p/0Zf9b/4M/5H/15f8E/e5z/Z40xxhhj7H9C/sHx/r/zPfHLuGQAAFy9o1D2f825Kf/P80EioWMEAJ7s1+OBv45atZKSkn55bKaEoNgiAIhcXp8L/iZO6gCPQ2doD+V+t75Botc5+oP80VsuXWReFgOX4+Xw1/w3/Z38jzw2Lr1ieDb+v8m/CCCx2OU1eeByfDl/+b+Tv0DbP6g/z+cpAO3+Zk0cXI4v5y8Lj8JT0PlXj2SMMcYYY4wxxn42SFTp9uv7T/m79+cJ6vKa3PBT/NMnB1y+//z9+3PGGGOMMcYYY4xdec/06v3EI507t+/2bzKJ+aXu/1/q4cl/6AT/TV8gf9rkCv5RYowxxhhjjP2vuHzRf6UrYYwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGcq5/xceJAeCV3iZjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2Rf2fAAAA//9h2CZR") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800000000003) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800002, &(0x7f0000000580)={[], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/kvM\x00w\xb1\xe5\xafC\xe9\x84\x01\x97\x98\x95BR\xedh*\xff\xb9k\xd7L\xd7\'K\x18\x7f:X\x1a\xb1\x7f\\\v\xc1\x02\x86~\x87\xf0F\x96o9\xfe\x91\xcf\xaa/\xe5\x96\xbd2\xb4\x17\x05\xec\x03\xe6j]\xb6sV\x9a\x95k\xe5%O\xe0\x13`\xbd\x8b\x91z\x10\x0fZ%\xf8!\x12\x1e\xba\xa5\x14b\xd7\x18\xd0\xa7\xfeq\xcf\xf1W\x81\xea\xda\xc4@\xbd\x84\x81\xf8\x84\x0f\x99^\x8fb\xe0\xd3}\xcf.I\xfdn\x1a\x1f=\x05\xb1\x81\xc7n\xf3\xc3\xc6\xc9$\x18f.\xc4\x8d\x00\xb1\xa5\xae\x87\x16*\xda\xa7\x1b\b\x94\x88\xda\xb3\x9a\x8e@b\xc6\xd7\x0f\n=\x8bO\xb0\xff+s\xcd~4<^:2\x95\x82\xfdLq\xac\vyi\xb0\xc5\x88\xaf\x97[~\xb9cP\xd1X\x99\f(&\x9bQ\xe6\xfc|\f\x14\v\x18@\xf7\xea\xd7\x1f\xb6\xf7\xfe\xe5\x9c'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}, 0x6, 0x510, &(0x7f00000011c0)="$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") sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000040)='attr/fscreate\x00') r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000000080), &(0x7f00000000c0), 0x0) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.131392315s ago: executing program 0 (id=2721): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 8.125514215s ago: executing program 4 (id=2722): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 7.859571499s ago: executing program 2 (id=2723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c19", 0x1f}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a", 0x2e}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=""/76, 0x4c}], 0x1}, 0x0) 6.273991404s ago: executing program 1 (id=2724): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x210, 0x9403, 0x0, 0x210, 0x2c0, 0x300, 0x3d8, 0x3d8, 0x300, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @private0, [], [0xffffffff], 'veth0_to_batadv\x00', 'batadv0\x00'}, 0x0, 0x1d0, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@srh={{0x30}, {0x33, 0x2, 0x8, 0x1, 0x5, 0x21}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x1, {0x2}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 6.269939734s ago: executing program 0 (id=2725): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x3ff}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000) dup3(r0, r1, 0x0) 6.269341324s ago: executing program 5 (id=2726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, 0x0) r4 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) 5.971339578s ago: executing program 4 (id=2727): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)=@req={0x4, 0x2, 0x2ed3ac52}, 0xfcf5) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000480)={[{@subsystem='blkio'}, {@subsystem='rdma'}, {@subsystem='cpuacct'}], [{@obj_role={'obj_role', 0x3d, 'J@+,S\x00{@\''}}, {@pcr={'pcr', 0x3d, 0x17}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@subj_user={'subj_user', 0x3d, '!($\x9d:'}}, {@uid_gt}, {@fowner_eq}]}) 5.17963604s ago: executing program 0 (id=2728): socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 5.17930602s ago: executing program 1 (id=2729): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/61, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="ebffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.063995132s ago: executing program 5 (id=2730): ioctl$TIOCSTI(0xffffffffffffffff, 0x80045440, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0x3, 0x8001, 0x1}}, 0x44) 4.797029466s ago: executing program 1 (id=2731): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/61, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.58790154s ago: executing program 1 (id=2732): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf6334000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x8000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x21) 4.58728996s ago: executing program 2 (id=2733): socket(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) mount(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000004240)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r4, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000004280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@aname={'aname', 0x3d, '@#@'}}], [], 0x6b}}) syz_fuse_handle_req(r0, &(0x7f0000002240)="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", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000007100)={0x2020}, 0x941f) 3.433922667s ago: executing program 5 (id=2734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) capset(&(0x7f0000000100)={0x20080522}, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, 0x0) 3.324709709s ago: executing program 1 (id=2735): r0 = socket(0x10, 0x803, 0x0) getdents(0xffffffffffffffff, &(0x7f00000000c0)=""/56, 0x38) getdents64(0xffffffffffffffff, 0x0, 0x43) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x100000042db7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xa, 0xffff}, {0xffe0, 0xf}}}, 0x24}}, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) gettid() sendmsg$nl_crypto(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="e0000000100001002dbd7000fcdbdf256563622861726334292d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300"/111], 0xe0}, 0x1, 0x0, 0x0, 0x24008805}, 0x80) 3.322523969s ago: executing program 4 (id=2736): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000001000000000300060000000e0002000000e0000009000000000000000002000100000000000000000200000000030005000000000002000004e00000010000000000000000"], 0x50}}, 0x0) 3.319247039s ago: executing program 2 (id=2745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x1000000, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x21, 0x0) 2.255653135s ago: executing program 5 (id=2737): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 796.251258ms ago: executing program 2 (id=2738): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x5) r1 = open(&(0x7f00000002c0)='./file1\x00', 0x113000, 0xb) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x1, 0x5000003a, r4, 0x0) mkdirat(r3, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x2) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000001c0)='./file1/../file0\x00', 0x2) 715.930089ms ago: executing program 1 (id=2739): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x3ff}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000) dup3(r0, r1, 0x0) 0s ago: executing program 4 (id=2740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, 0x0, 0x0, 0x1, 0x1) write$dsp(r3, &(0x7f00000000c0)="b1606cb6414b6362b17b43dccdf1ae", 0xf) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-avx2\x00'}}) kernel console output (not intermixed with test programs): ubj=unconfined pid=6259 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f6e55b0c929 code=0x7ffc0000 [ 209.256510][ T26] audit: type=1326 audit(1752180473.998:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e55b0c929 code=0x7ffc0000 [ 209.310709][ T26] audit: type=1326 audit(1752180473.998:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e55b0c929 code=0x7ffc0000 [ 209.410067][ T26] audit: type=1326 audit(1752180473.998:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.3.617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6e55b0c929 code=0x7ffc0000 [ 209.575739][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 209.586172][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.595271][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.657513][ T6292] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 211.559007][ T6314] overlayfs: failed to clone upperpath [ 212.347936][ T6321] overlayfs: failed to clone upperpath [ 212.486619][ T6329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.639'. [ 212.585704][ T6336] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 212.742127][ T6338] loop3: detected capacity change from 0 to 128 [ 212.774596][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.640'. [ 212.815677][ T6338] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 213.410070][ T6339] FAT-fs (loop3): FAT read failed (blocknr 128) [ 213.529207][ T6359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.650'. [ 213.936170][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.073756][ T26] audit: type=1326 audit(1752180483.258:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 215.102968][ T26] audit: type=1326 audit(1752180483.258:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 215.150232][ T26] audit: type=1326 audit(1752180483.258:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 215.214048][ T26] audit: type=1326 audit(1752180483.258:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 215.300822][ T26] audit: type=1326 audit(1752180483.258:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 215.363561][ T26] audit: type=1326 audit(1752180483.258:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 215.420715][ T26] audit: type=1326 audit(1752180483.258:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 215.476863][ T6366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.700980][ T26] audit: type=1326 audit(1752180483.258:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 215.991269][ T26] audit: type=1326 audit(1752180483.258:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 216.236241][ T26] audit: type=1326 audit(1752180483.258:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.4.656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 216.447207][ T6366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.447405][ T6366] device macsec0 left promiscuous mode [ 217.506879][ T6366] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.515911][ T6366] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.528898][ T6366] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.538345][ T6366] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.738225][ T6366] syz.2.653 (6366) used greatest stack depth: 19200 bytes left [ 217.752463][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.654'. [ 217.978706][ T6407] netlink: 'syz.3.667': attribute type 10 has an invalid length. [ 218.037321][ T6407] bridge0: port 3(netdevsim0) entered disabled state [ 218.044205][ T6407] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.051598][ T6407] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.872916][ T6407] bridge0: port 3(netdevsim0) entered blocking state [ 218.879676][ T6407] bridge0: port 3(netdevsim0) entered listening state [ 218.886668][ T6407] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.893821][ T6407] bridge0: port 2(bridge_slave_1) entered listening state [ 218.901729][ T6407] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.908824][ T6407] bridge0: port 1(bridge_slave_0) entered listening state [ 219.168361][ T6407] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 219.374573][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 219.392732][ T6426] loop0: detected capacity change from 0 to 256 [ 219.548243][ T6420] device netdevsim0 left promiscuous mode [ 219.725335][ T6420] bridge0: port 3(netdevsim0) entered disabled state [ 220.148376][ T6420] device bridge_slave_1 left promiscuous mode [ 220.154694][ T6420] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.163160][ T6420] device bridge_slave_0 left promiscuous mode [ 220.169313][ T6420] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.100017][ T6420] bond0: (slave bridge0): Releasing backup interface [ 227.046189][ T6480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.247789][ T6442] device batadv_slave_0 left promiscuous mode [ 228.287746][ T6442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.530695][ T6442] device vlan0 left promiscuous mode [ 228.704683][ T6442] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.713650][ T6442] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.723264][ T6442] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.732618][ T6442] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.143747][ T6500] ODEBUG: Out of memory. ODEBUG disabled [ 230.382374][ T6500] syz.3.691 (6500): drop_caches: 2 [ 230.426417][ T6513] netlink: 'syz.1.697': attribute type 1 has an invalid length. [ 230.482169][ T6513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.485494][ T6516] loop3: detected capacity change from 0 to 512 [ 230.502806][ T1110] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 230.509397][ T6517] bond0: (slave vlan2): making interface the new active one [ 230.543416][ T6517] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 230.557416][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 230.570411][ T6516] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 230.629431][ T6516] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 230.638102][ T6516] System zones: 1-12 [ 230.643961][ T6516] EXT4-fs (loop3): orphan cleanup on readonly fs [ 230.665895][ T6516] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.698: bg 0: block 361: padding at end of block bitmap is not set [ 230.725218][ T6516] EXT4-fs (loop3): Remounting filesystem read-only [ 230.751051][ T6516] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 230.767334][ T6516] EXT4-fs (loop3): Remounting filesystem read-only [ 230.786980][ T6516] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.698: invalid indirect mapped block 12 (level 1) [ 230.823238][ T6516] EXT4-fs (loop3): Remounting filesystem read-only [ 230.835580][ T6516] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.698: invalid indirect mapped block 2 (level 2) [ 230.851730][ T6516] EXT4-fs (loop3): Remounting filesystem read-only [ 230.859206][ T6516] EXT4-fs (loop3): 1 truncate cleaned up [ 230.865550][ T6516] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000008,max_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000000080000,errors=remount-ro,jqfmt=vfsv0. Quota mode: none. [ 230.886648][ T1110] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 230.907274][ T1110] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 230.921419][ T1110] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.063063][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 231.063077][ T26] audit: type=1326 audit(1752180499.248:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.1.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e20507929 code=0x7fc00000 [ 231.131441][ T1110] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 231.140573][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 231.205499][ T1110] usb 1-1: Product: syz [ 231.241412][ T1110] usb 1-1: Manufacturer: syz [ 231.580190][ T26] audit: type=1326 audit(1752180499.278:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6535 comm="syz.1.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e20507929 code=0x7fc00000 [ 231.586042][ T1110] usb 1-1: SerialNumber: syz [ 232.586745][ T6557] netlink: 'syz.2.711': attribute type 1 has an invalid length. [ 232.621961][ T1110] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 232.632879][ T6557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.444133][ T6507] netlink: 47 bytes leftover after parsing attributes in process `syz.0.695'. [ 233.518698][ T6561] bond2: (slave vlan0): Opening slave failed [ 233.717388][ T6547] loop3: detected capacity change from 0 to 32768 [ 233.832547][ T6547] XFS: ikeep mount option is deprecated. [ 234.296131][ T6547] XFS (loop3): Mounting V5 Filesystem [ 235.210043][ T4267] usb 1-1: USB disconnect, device number 3 [ 235.267790][ T4267] usblp0: removed [ 235.334798][ T6547] XFS (loop3): Ending clean mount [ 235.355417][ T6547] XFS (loop3): Quotacheck needed: Please wait. [ 235.391112][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.722'. [ 235.418876][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 235.429706][ T6604] netlink: 36 bytes leftover after parsing attributes in process `syz.0.722'. [ 235.470792][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 237.693162][ T6547] XFS (loop3): Quotacheck: Done. [ 237.711200][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 237.862186][ T4181] XFS (loop3): Unmounting Filesystem [ 239.649228][ T6639] netlink: 47 bytes leftover after parsing attributes in process `syz.4.734'. [ 239.884450][ T26] audit: type=1326 audit(1752180508.068:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.2.736" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feff32d3929 code=0x0 [ 240.902655][ T6666] 9pnet: Insufficient options for proto=fd [ 241.006754][ T6674] loop0: detected capacity change from 0 to 512 [ 241.024443][ T6672] netlink: 'syz.4.745': attribute type 1 has an invalid length. [ 241.174335][ T6674] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 241.257332][ T6674] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 241.267701][ T6674] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.746: invalid indirect mapped block 2683928664 (level 1) [ 241.283009][ T6674] EXT4-fs (loop0): Remounting filesystem read-only [ 241.295911][ T6674] EXT4-fs (loop0): 1 truncate cleaned up [ 241.346668][ T6674] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 243.423458][ T26] audit: type=1326 audit(1752180511.608:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.755" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a4b9b4929 code=0x0 [ 243.445377][ T6720] device wireguard0 entered promiscuous mode [ 243.471110][ T4267] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 243.931136][ T4267] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 244.023961][ T4267] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 244.111231][ T4267] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.188170][ T6726] loop0: detected capacity change from 0 to 16 [ 244.266550][ T6726] erofs: (device loop0): mounted with root inode @ nid 36. [ 244.321206][ T4267] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 244.330297][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 244.387066][ T4267] usb 4-1: Product: syz [ 244.401345][ T6726] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 244.434772][ T4267] usb 4-1: Manufacturer: syz [ 244.436555][ T6726] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress -3 in[47, 4049] out[1851] [ 244.439406][ T4267] usb 4-1: SerialNumber: syz [ 244.472425][ T6726] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 245.249662][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.760'. [ 245.258124][ T4267] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 245.319264][ T6738] futex_wake_op: syz.1.761 tries to shift op by 36; fix this program [ 245.342190][ T6738] netlink: 'syz.1.761': attribute type 4 has an invalid length. [ 245.350018][ T6738] netlink: 17 bytes leftover after parsing attributes in process `syz.1.761'. [ 245.459002][ T6744] netlink: 'syz.2.765': attribute type 1 has an invalid length. [ 245.528308][ T6712] netlink: 47 bytes leftover after parsing attributes in process `syz.3.753'. [ 245.552565][ T6748] netlink: 16 bytes leftover after parsing attributes in process `syz.1.775'. [ 246.767293][ T6368] usb 4-1: USB disconnect, device number 6 [ 246.774763][ T6368] usblp0: removed [ 248.885728][ T6773] loop0: detected capacity change from 0 to 512 [ 249.387800][ T6773] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #2: comm syz.0.772: corrupted xattr block 255 [ 249.393484][ T6781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.776'. [ 249.409998][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 249.460796][ T6773] EXT4-fs (loop0): Remounting filesystem read-only [ 249.472957][ T6773] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 249.490242][ T6773] EXT4-fs (loop0): mounted filesystem without journal. Opts: data_err=abort,nolazytime,errors=remount-ro,nombcache,auto_da_alloc,grpjquota=.nouid32,barrier=0x0000000000000007,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 249.512226][ T6773] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #2: comm syz.0.772: corrupted xattr block 255 [ 249.534220][ T6773] EXT4-fs (loop0): Remounting filesystem read-only [ 250.090723][ T6779] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 250.130368][ T6791] netlink: 47 bytes leftover after parsing attributes in process `syz.1.780'. [ 250.590200][ T6779] EXT4-fs (loop0): Remounting filesystem read-only [ 250.940792][ T4611] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 252.681337][ T4611] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 777 [ 252.701201][ T4611] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 252.791410][ T4611] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 252.921087][ T4611] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 252.940741][ T4611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.053963][ T4611] usb 4-1: can't set config #27, error -71 [ 254.061190][ T4611] usb 4-1: USB disconnect, device number 7 [ 254.314502][ T6837] netlink: 68 bytes leftover after parsing attributes in process `syz.4.796'. [ 254.331876][ T6837] netlink: 'syz.4.796': attribute type 4 has an invalid length. [ 255.464247][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.565132][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.801'. [ 255.599441][ T6859] netlink: 48 bytes leftover after parsing attributes in process `syz.2.800'. [ 255.645570][ T6857] device bond1 entered promiscuous mode [ 255.655329][ T6857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 257.380222][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.813'. [ 257.644811][ T6894] loop3: detected capacity change from 0 to 256 [ 259.443286][ T6909] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 261.008305][ T6953] device wlan0 entered promiscuous mode [ 263.336580][ T6977] netlink: 48 bytes leftover after parsing attributes in process `syz.1.843'. [ 263.439381][ T6981] netlink: 68 bytes leftover after parsing attributes in process `syz.0.845'. [ 263.454513][ T6980] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 263.473216][ T6981] netlink: 'syz.0.845': attribute type 4 has an invalid length. [ 263.526372][ T6983] loop0: detected capacity change from 0 to 16 [ 263.558194][ T6981] netlink: 'syz.0.845': attribute type 4 has an invalid length. [ 263.579013][ T6983] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature f8, please upgrade kernel version [ 263.784817][ T6981] netlink: 'syz.0.845': attribute type 4 has an invalid length. [ 263.871218][ T6993] IPv6: sit1: Disabled Multicast RS [ 265.092337][ T7005] netlink: 'syz.1.855': attribute type 10 has an invalid length. [ 265.113014][ T7005] netlink: 40 bytes leftover after parsing attributes in process `syz.1.855'. [ 265.203262][ T7005] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 266.065663][ T7022] netlink: 'syz.2.860': attribute type 4 has an invalid length. [ 266.130051][ T7023] netlink: 32 bytes leftover after parsing attributes in process `syz.3.859'. [ 266.178826][ T7023] device erspan0 entered promiscuous mode [ 266.225461][ T7023] netlink: 32 bytes leftover after parsing attributes in process `syz.3.859'. [ 266.304372][ T26] audit: type=1326 audit(1752180534.478:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 266.359050][ T26] audit: type=1326 audit(1752180534.488:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 266.421074][ T26] audit: type=1326 audit(1752180534.488:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 266.504640][ T26] audit: type=1326 audit(1752180534.488:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 266.530934][ T6368] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 266.584238][ T26] audit: type=1326 audit(1752180534.488:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 266.740556][ T26] audit: type=1326 audit(1752180534.488:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 266.777783][ T26] audit: type=1326 audit(1752180534.488:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 267.569056][ T26] audit: type=1326 audit(1752180534.488:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 267.641399][ T26] audit: type=1326 audit(1752180534.488:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 267.821012][ T6368] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 267.829045][ T6368] usb 4-1: config 0 has no interface number 0 [ 267.849966][ T6368] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 267.865511][ T7050] loop0: detected capacity change from 0 to 4096 [ 267.885490][ T26] audit: type=1326 audit(1752180534.488:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7031 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 268.232499][ T6368] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 268.290433][ T6368] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 268.376139][ T6368] usb 4-1: Product: syz [ 268.400942][ T6368] usb 4-1: SerialNumber: syz [ 268.717876][ T6368] usb 4-1: config 0 descriptor?? [ 268.763069][ T6368] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 268.786920][ T7050] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 268.858783][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.873'. [ 268.992095][ T7023] udc-core: couldn't find an available UDC or it's busy [ 269.048537][ T7023] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 269.568018][ T7067] loop0: detected capacity change from 0 to 128 [ 269.731720][ T7067] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue. Quota mode: none. [ 269.748273][ T7067] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 269.997912][ T7083] fuse: Bad value for 'fd' [ 270.018176][ T7083] netlink: 'syz.2.882': attribute type 12 has an invalid length. [ 270.857368][ T2341] usb 4-1: USB disconnect, device number 8 [ 271.138359][ T7094] loop0: detected capacity change from 0 to 8 [ 271.179281][ T7094] SQUASHFS error: lzo decompression failed, data probably corrupt [ 271.194758][ T7094] SQUASHFS error: Failed to read block 0x91: -5 [ 271.217552][ T7094] SQUASHFS error: Unable to read metadata cache entry [8f] [ 271.237484][ T7094] SQUASHFS error: Unable to read inode 0x11f [ 272.539210][ T7130] mmap: syz.2.897 (7130) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 272.562154][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 272.562169][ T26] audit: type=1326 audit(1752180540.738:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7068 comm="syz.1.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e20507929 code=0x7fc00000 [ 273.071291][ T7146] loop0: detected capacity change from 0 to 8192 [ 273.179057][ T7146] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 273.189328][ T7146] REISERFS (device loop0): using ordered data mode [ 273.196150][ T7146] reiserfs: using flush barriers [ 273.214698][ T7146] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 273.233296][ T7146] REISERFS (device loop0): checking transaction log (loop0) [ 273.285695][ T7150] syz.1.903[7150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.294210][ T7150] syz.1.903[7150] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.680373][ T7146] REISERFS (device loop0): Using tea hash to sort names [ 273.712567][ T7146] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 276.990420][ T7222] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 277.046467][ T7220] sit0 speed is unknown, defaulting to 1000 [ 277.860120][ T7241] tipc: Enabled bearer , priority 0 [ 279.845635][ T26] audit: type=1326 audit(1752180548.028:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7219 comm="syz.4.920" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x0 [ 279.848928][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.884706][ T7270] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.958493][ T7277] netlink: 'syz.1.938': attribute type 16 has an invalid length. [ 279.970966][ T7277] netlink: 'syz.1.938': attribute type 17 has an invalid length. [ 279.996325][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 280.010831][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 280.029529][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.045307][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 280.062296][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.079331][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.098939][ T7277] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.106224][ T7277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.130425][ T7277] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.137567][ T7277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.193353][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 280.210950][ T7277] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 280.233541][ T7280] sch_tbf: burst 32854 is lower than device lo mtu (11337746) ! [ 280.374519][ T7293] loop3: detected capacity change from 0 to 1024 [ 280.417045][ T7293] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 280.505286][ T7293] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 284.760539][ T7333] device bridge_slave_0 left promiscuous mode [ 284.795776][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.942874][ T7333] device bridge_slave_1 left promiscuous mode [ 284.949130][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.959264][ T7333] bond0: (slave bond_slave_0): Releasing backup interface [ 284.973438][ T7333] bond0: (slave bond_slave_1): Releasing backup interface [ 285.165458][ T7333] team0: Port device team_slave_0 removed [ 285.204287][ T7333] team0: Port device team_slave_1 removed [ 285.238581][ T7333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.287818][ T7333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.370924][ T7333] bond1: (slave gretap1): Releasing backup interface [ 285.955937][ T7336] team0: Mode changed to "loadbalance" [ 288.104742][ T7377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.965'. [ 288.140831][ T4267] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 288.438876][ T4267] usb 1-1: Using ep0 maxpacket: 16 [ 288.710900][ T4267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.738503][ T4267] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.806982][ T4267] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 288.882045][ T4267] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 288.902254][ T4267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.738077][ T7406] Invalid ELF header magic: != ELF [ 290.498348][ T4267] usb 1-1: config 0 descriptor?? [ 290.569539][ T7417] MPTCP: addr_signal error, add_addr=1, echo=0 [ 290.611451][ T7417] MPTCP: addr_signal error, add_addr=1, echo=0 [ 290.632917][ T7420] loop3: detected capacity change from 0 to 512 [ 290.734881][ T7420] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,grpquota,,errors=continue. Quota mode: writeback. [ 290.752580][ T7420] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.760866][ T4267] usbhid 1-1:0.0: can't add hid device: -71 [ 290.773598][ T4267] usbhid: probe of 1-1:0.0 failed with error -71 [ 290.792292][ T4267] usb 1-1: USB disconnect, device number 4 [ 291.027180][ T7442] loop0: detected capacity change from 0 to 512 [ 291.095361][ T7442] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,grpquota,,errors=continue. Quota mode: writeback. [ 291.168840][ T7442] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.271201][ T7455] netlink: 'syz.3.988': attribute type 10 has an invalid length. [ 291.287883][ T7455] netlink: 2 bytes leftover after parsing attributes in process `syz.3.988'. [ 293.048245][ T7471] binfmt_misc: register: failed to install interpreter file ./file2 [ 293.084035][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1003'. [ 293.263548][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1006'. [ 293.282412][ T7503] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 295.264913][ T7527] netlink: 'syz.2.1012': attribute type 10 has an invalid length. [ 295.273158][ T7527] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1012'. [ 295.283831][ T7527] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.293178][ T7527] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.302256][ T7527] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.311012][ T7527] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.328899][ T7527] team0: Port device geneve0 added [ 295.462380][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1018'. [ 296.419658][ T26] audit: type=1326 audit(1752180820.606:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff32d3929 code=0x7ffc0000 [ 296.469539][ T26] audit: type=1326 audit(1752180820.636:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7feff32d3929 code=0x7ffc0000 [ 296.535854][ T26] audit: type=1326 audit(1752180820.636:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff32d3929 code=0x7ffc0000 [ 296.559244][ T26] audit: type=1326 audit(1752180820.636:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7feff32d3929 code=0x7ffc0000 [ 296.589594][ T26] audit: type=1326 audit(1752180820.636:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff32d3929 code=0x7ffc0000 [ 297.276204][ T26] audit: type=1326 audit(1752180820.636:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feff32d3929 code=0x7ffc0000 [ 297.457696][ T26] audit: type=1326 audit(1752180820.636:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff32d3929 code=0x7ffc0000 [ 297.557579][ T26] audit: type=1326 audit(1752180820.646:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feff32d3929 code=0x7ffc0000 [ 297.590159][ T26] audit: type=1326 audit(1752180820.646:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff32d3929 code=0x7ffc0000 [ 297.622020][ T26] audit: type=1326 audit(1752180820.646:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7feff32d3929 code=0x7ffc0000 [ 297.677066][ T7595] MPTCP: kernel_bind error, err=-99 [ 298.615035][ T7612] tipc: Enabling of bearer rejected, failed to enable media [ 300.500204][ T7638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'. [ 301.012132][ T7652] loop3: detected capacity change from 0 to 512 [ 301.256134][ T7652] EXT4-fs (loop3): Ignoring removed orlov option [ 301.292790][ T7652] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,noblock_validity,noquota,auto_da_alloc=0x0000000000000004,orlov,,errors=continue. Quota mode: writeback. [ 301.353663][ T7652] ext4 filesystem being mounted at /178/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.150972][ T7661] netlink: 'syz.2.1052': attribute type 16 has an invalid length. [ 302.219529][ T7661] netlink: 'syz.2.1052': attribute type 17 has an invalid length. [ 302.234084][ T7663] sch_tbf: burst 32854 is lower than device lo mtu (65550) ! [ 302.251130][ T7663] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 302.405362][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 303.365316][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.373220][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.399478][ T7676] bond0: (slave bond_slave_0): Releasing backup interface [ 303.462400][ T7676] bond0: (slave bond_slave_1): Releasing backup interface [ 303.482349][ T7676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.489797][ T7676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.521658][ T7693] loop0: detected capacity change from 0 to 8 [ 304.528662][ T7676] bond1: (slave gretap1): Releasing backup interface [ 304.589330][ T7676] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 304.601559][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 304.726062][ T7704] device bridge_slave_0 left promiscuous mode [ 304.737873][ T7704] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.747466][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 304.747480][ T26] audit: type=1800 audit(1752181084.928:156): pid=7693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1061" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 304.781432][ T7704] bond0: (slave bridge_slave_1): Releasing backup interface [ 304.793242][ T7704] bond0: (slave bond_slave_0): Releasing backup interface [ 304.804809][ T7704] bond0: (slave bond_slave_1): Releasing backup interface [ 304.821488][ T7704] team0: Port device team_slave_0 removed [ 304.828905][ T7704] team0: Port device team_slave_1 removed [ 304.838086][ T7704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.858644][ T7704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.879841][ T7704] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.895199][ T7704] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.905317][ T7704] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.918404][ T7709] loop0: detected capacity change from 0 to 512 [ 304.925235][ T7704] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.962280][ T7709] EXT4-fs (loop0): Ignoring removed orlov option [ 304.985856][ T7704] team0: Port device geneve0 removed [ 304.998475][ T7704] bond1: (slave gretap1): Releasing backup interface [ 305.010563][ T7702] netlink: 'syz.4.1066': attribute type 16 has an invalid length. [ 305.018759][ T7702] netlink: 'syz.4.1066': attribute type 17 has an invalid length. [ 305.029572][ T7709] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,noblock_validity,noquota,auto_da_alloc=0x0000000000000004,orlov,,errors=continue. Quota mode: writeback. [ 305.093834][ T7705] team0: Mode changed to "loadbalance" [ 305.100297][ T7709] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.241286][ T7714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.429009][ T7730] MPTCP: kernel_bind error, err=-99 [ 306.485953][ T7733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1074'. [ 307.127514][ T7748] netlink: 'syz.0.1080': attribute type 16 has an invalid length. [ 307.146272][ T7748] netlink: 'syz.0.1080': attribute type 17 has an invalid length. [ 309.738257][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1088'. [ 309.749652][ T7778] netlink: set zone limit has 8 unknown bytes [ 310.205837][ T7769] ipt_REJECT: TCP_RESET invalid for non-tcp [ 311.017767][ T7789] loop0: detected capacity change from 0 to 512 [ 311.287047][ T7798] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1095'. [ 311.298769][ T7798] netlink: 'syz.2.1095': attribute type 4 has an invalid length. [ 311.319849][ T7789] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1091: bg 0: block 248: padding at end of block bitmap is not set [ 311.334345][ T7793] netlink: 'syz.1.1093': attribute type 1 has an invalid length. [ 311.736930][ T7789] Quota error (device loop0): write_blk: dquota write failed [ 311.786440][ T7789] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 312.233283][ T7789] EXT4-fs error (device loop0): ext4_acquire_dquot:6207: comm syz.0.1091: Failed to acquire dquot type 1 [ 312.260294][ T7789] EXT4-fs (loop0): 1 truncate cleaned up [ 312.277692][ T7789] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 312.292283][ T7789] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.399800][ T7793] 8021q: adding VLAN 0 to HW filter on device bond2 [ 312.456882][ T7810] tipc: Enabling of bearer rejected, failed to enable media [ 312.607128][ T7820] device vlan3 entered promiscuous mode [ 312.614201][ T7820] device bond0 entered promiscuous mode [ 312.619891][ T7820] device vlan2 entered promiscuous mode [ 312.628935][ T7820] device veth1 entered promiscuous mode [ 314.467449][ T7832] loop0: detected capacity change from 0 to 128 [ 314.513926][ T7836] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1108'. [ 314.606178][ T7836] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1108'. [ 315.065143][ T7846] usb usb8: usbfs: process 7846 (syz.3.1111) did not claim interface 0 before use [ 316.963141][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.895750][ T7862] loop3: detected capacity change from 0 to 512 [ 318.105024][ T7862] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1113: bg 0: block 248: padding at end of block bitmap is not set [ 318.141356][ T7862] Quota error (device loop3): write_blk: dquota write failed [ 318.156187][ T7862] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 318.216966][ T7862] EXT4-fs error (device loop3): ext4_acquire_dquot:6207: comm syz.3.1113: Failed to acquire dquot type 1 [ 318.306697][ T7862] EXT4-fs (loop3): 1 truncate cleaned up [ 318.316206][ T7862] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 318.348691][ T7880] device syz_tun entered promiscuous mode [ 318.357610][ T7862] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.439752][ T7880] device batadv_slave_0 entered promiscuous mode [ 318.563435][ T7880] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 318.717479][ T7880] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 319.097921][ T7900] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1125'. [ 321.266386][ T7918] MPTCP: addr_signal error, add_addr=1, echo=0 [ 321.278251][ T7918] MPTCP: addr_signal error, rm_addr=1 [ 323.424597][ T7953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1143'. [ 323.451399][ T7953] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1143'. [ 323.504213][ T7961] xt_TCPMSS: Only works on TCP SYN packets [ 324.514498][ T4314] Bluetooth: hci5: command 0x1003 tx timeout [ 324.520666][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 325.533230][ T7993] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.1157'. [ 325.641058][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1157'. [ 326.146313][ T8007] loop0: detected capacity change from 0 to 256 [ 326.330249][ T8007] FAT-fs (loop0): Directory bread(block 64) failed [ 326.349280][ T8007] FAT-fs (loop0): Directory bread(block 65) failed [ 326.369547][ T8007] FAT-fs (loop0): Directory bread(block 66) failed [ 326.388839][ T8007] FAT-fs (loop0): Directory bread(block 67) failed [ 326.391657][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1160'. [ 326.404795][ T8007] FAT-fs (loop0): Directory bread(block 68) failed [ 326.411367][ T8007] FAT-fs (loop0): Directory bread(block 69) failed [ 326.418300][ T8007] FAT-fs (loop0): Directory bread(block 70) failed [ 326.425342][ T8007] FAT-fs (loop0): Directory bread(block 71) failed [ 326.432416][ T8007] FAT-fs (loop0): Directory bread(block 72) failed [ 326.439092][ T8007] FAT-fs (loop0): Directory bread(block 73) failed [ 326.572188][ T4267] Bluetooth: hci5: command 0x1001 tx timeout [ 326.578661][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 327.437998][ T8022] netlink: 'syz.1.1169': attribute type 2 has an invalid length. [ 328.387958][ T26] audit: type=1326 audit(1752181364.576:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7fc00000 [ 328.652687][ T4267] Bluetooth: hci5: command 0x1009 tx timeout [ 329.146384][ T26] audit: type=1326 audit(1752181365.336:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8048 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0a4b950b19 code=0x7fc00000 [ 329.234568][ T8062] lo speed is unknown, defaulting to 1000 [ 329.245020][ T8063] netlink: 'syz.0.1182': attribute type 2 has an invalid length. [ 329.267355][ T8062] lo speed is unknown, defaulting to 1000 [ 329.298109][ T8062] lo speed is unknown, defaulting to 1000 [ 329.341884][ T8062] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 329.360241][ T8062] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 329.432130][ T8062] lo speed is unknown, defaulting to 1000 [ 329.439367][ T8062] lo speed is unknown, defaulting to 1000 [ 329.463594][ T8062] lo speed is unknown, defaulting to 1000 [ 329.470346][ T8062] lo speed is unknown, defaulting to 1000 [ 329.502829][ T8062] lo speed is unknown, defaulting to 1000 [ 330.569399][ T8071] loop0: detected capacity change from 0 to 32768 [ 330.821201][ T8071] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1186 (8071) [ 330.882388][ T8071] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 330.891481][ T8071] BTRFS info (device loop0): using free space tree [ 330.915518][ T8071] BTRFS info (device loop0): has skinny extents [ 332.733187][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1206'. [ 334.123700][ T8071] BTRFS error (device loop0): open_ctree failed: -22 [ 334.164368][ T6601] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (6601) [ 337.909197][ T8180] loop3: detected capacity change from 0 to 8192 [ 337.948193][ T8180] FAT-fs (loop3): Unrecognized mount option "./file0" or missing value [ 338.045609][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1212'. [ 340.575521][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1237'. [ 341.020245][ T8251] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 341.046537][ T8251] CIFS mount error: No usable UNC path provided in device string! [ 341.046537][ T8251] [ 341.056919][ T8251] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 342.342987][ T8281] 8021q: VLANs not supported on vcan0 [ 342.371858][ T8281] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1245'. [ 342.455716][ T8286] siw: device registration error -23 [ 342.569507][ T8290] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 342.581797][ T8290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 342.595219][ T8290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 342.607926][ T8290] device bridge_slave_0 left promiscuous mode [ 342.620542][ T8290] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.649337][ T8290] device bridge_slave_1 left promiscuous mode [ 342.662263][ T8290] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.716437][ T8290] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 342.749776][ T8290] bond0: (slave vlan2): Releasing active interface [ 342.762342][ T8290] device vlan2 left promiscuous mode [ 342.769201][ T8290] device veth1 left promiscuous mode [ 342.808439][ T8296] netlink: 'syz.1.1248': attribute type 33 has an invalid length. [ 342.902106][ T8296] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1248'. [ 344.117989][ T8324] overlayfs: failed to clone upperpath [ 345.881317][ T8335] loop3: detected capacity change from 0 to 512 [ 345.897360][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1260'. [ 346.227647][ T8335] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 346.318707][ T8335] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 346.389620][ T8335] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 346.432324][ T8335] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 346.441577][ T8335] System zones: 0-1, 15-15, 18-18, 34-34 [ 346.448280][ T8335] EXT4-fs (loop3): orphan cleanup on readonly fs [ 346.454858][ T8335] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 346.464283][ T8335] EXT4-fs warning (device loop3): ext4_enable_quotas:6459: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 346.480108][ T8335] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 346.493081][ T8335] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1258: bg 0: block 40: padding at end of block bitmap is not set [ 346.540197][ T8335] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 346.563735][ T8335] EXT4-fs (loop3): 1 truncate cleaned up [ 346.569443][ T8335] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,nogrpid,dioread_lock,,errors=continue. Quota mode: writeback. [ 346.648763][ T8335] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 346.684428][ T8335] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 346.742258][ T8337] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 347.873975][ T8377] ieee802154 phy0 wpan0: encryption failed: -22 [ 349.008557][ T8390] sit0 speed is unknown, defaulting to 1000 [ 349.237290][ T8390] lo speed is unknown, defaulting to 1000 [ 350.144123][ T8406] device vlan0 entered promiscuous mode [ 351.877461][ T4183] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 352.032997][ T8435] syz.4.1292 sent an empty control message without MSG_MORE. [ 352.342692][ T8440] netlink: zone id is out of range [ 352.347893][ T8440] netlink: zone id is out of range [ 352.353455][ T8440] netlink: zone id is out of range [ 352.358583][ T8440] netlink: zone id is out of range [ 352.387038][ T8440] netlink: zone id is out of range [ 352.404180][ T8440] netlink: zone id is out of range [ 353.167959][ T8440] netlink: zone id is out of range [ 353.173168][ T8440] netlink: zone id is out of range [ 353.178529][ T8440] netlink: zone id is out of range [ 353.283528][ T8440] netlink: zone id is out of range [ 354.982296][ T6368] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 355.083444][ T8492] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 355.482023][ T6368] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 356.128867][ T6368] usb 4-1: config 0 has no interface number 0 [ 356.216118][ T6368] usb 4-1: config 0 interface 106 has no altsetting 0 [ 356.432199][ T6368] usb 4-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 356.446567][ T8514] device vlan2 entered promiscuous mode [ 356.453574][ T6368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.816889][ T8514] device gretap0 entered promiscuous mode [ 357.127584][ T6368] usb 4-1: Product: syz [ 357.131790][ T6368] usb 4-1: Manufacturer: syz [ 357.136468][ T6368] usb 4-1: SerialNumber: syz [ 357.142815][ T6368] usb 4-1: config 0 descriptor?? [ 357.162131][ T6368] usb 4-1: can't set config #0, error -71 [ 357.783324][ T6368] usb 4-1: USB disconnect, device number 9 [ 358.667644][ T8537] netlink: 'syz.1.1324': attribute type 10 has an invalid length. [ 358.983930][ T8548] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1328'. [ 359.786433][ T8564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1333'. [ 361.147374][ T8582] 8021q: adding VLAN 0 to HW filter on device bond4 [ 361.914460][ T8609] loop3: detected capacity change from 0 to 4096 [ 362.103223][ T8609] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 362.957965][ T8609] ntfs3: loop3: Failed to load $Extend. [ 363.227135][ T8627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1351'. [ 365.005536][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 365.038884][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 365.054161][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 365.070978][ T8635] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 366.073150][ T8674] netlink: 'syz.4.1367': attribute type 33 has an invalid length. [ 366.081010][ T8674] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1367'. [ 366.151453][ T8677] loop3: detected capacity change from 0 to 512 [ 367.650836][ T8677] EXT4-fs error (device loop3): ext4_fill_super:4839: inode #2: comm syz.3.1368: iget: bad i_size value: -1 [ 367.665191][ T8677] EXT4-fs (loop3): get root inode failed [ 367.670866][ T8677] EXT4-fs (loop3): mount failed [ 369.816755][ T8714] loop3: detected capacity change from 0 to 128 [ 370.847749][ T8714] ADFS-fs (loop3): error: can't find an ADFS filesystem on dev loop3. [ 373.007495][ T8739] sit0 speed is unknown, defaulting to 1000 [ 373.096856][ T8739] lo speed is unknown, defaulting to 1000 [ 374.456324][ T8757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1387'. [ 374.764972][ T8764] device vlan1 entered promiscuous mode [ 374.770665][ T8764] device erspan0 entered promiscuous mode [ 375.867686][ T8782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1397'. [ 375.992628][ T8789] sit0 speed is unknown, defaulting to 1000 [ 377.112650][ T8789] lo speed is unknown, defaulting to 1000 [ 378.442329][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.155816][ T8816] futex_wake_op: syz.4.1406 tries to shift op by -1; fix this program [ 387.382131][ T8866] loop3: detected capacity change from 0 to 1024 [ 387.544361][ T8866] hfsplus: failed to load root directory [ 389.016511][ T8880] device vlan1 left promiscuous mode [ 389.021955][ T8880] device erspan0 left promiscuous mode [ 389.043917][ T8886] netlink: 'syz.0.1428': attribute type 1 has an invalid length. [ 389.169594][ T8889] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 389.285240][ T8891] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 389.335876][ T8891] bond1 (unregistering): Released all slaves [ 390.207896][ T8927] Cannot find del_set index 2 as target [ 391.395373][ T8931] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 391.402656][ T8931] IPv6: NLM_F_CREATE should be set when creating new route [ 391.648341][ T8939] kAFS: unable to lookup cell ' [ 391.648341][ T8939] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 391.648341][ T8939] ' [ 396.375433][ T8931] device vlan0 left promiscuous mode [ 396.391427][ T8931] device macvlan0 left promiscuous mode [ 397.302385][ T26] audit: type=1326 audit(1752181433.496:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8990 comm="syz.4.1461" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a4b9b4929 code=0x0 [ 397.341183][ T8931] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.350124][ T8931] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.361751][ T8931] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.370681][ T8931] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.441629][ T8931] device wlan0 left promiscuous mode [ 397.490516][ T8931] device bond1 left promiscuous mode [ 397.502913][ T8931] device vlan3 left promiscuous mode [ 397.508202][ T8931] device bond0 left promiscuous mode [ 397.522859][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1454'. [ 397.559543][ T8968] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 397.604486][ T8976] netlink: 'syz.0.1454': attribute type 2 has an invalid length. [ 397.719646][ T9001] overlayfs: failed to clone upperpath [ 398.038341][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1470'. [ 398.071676][ T9015] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1470'. [ 398.116152][ T9015] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.124965][ T9015] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.133821][ T9015] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.142601][ T9015] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.214253][ T9015] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.223206][ T9015] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.232115][ T9015] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.240980][ T9015] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 399.866572][ T9043] netlink: 'syz.2.1480': attribute type 10 has an invalid length. [ 399.917553][ T9043] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 402.071347][ T9074] netlink: 'syz.3.1491': attribute type 1 has an invalid length. [ 402.192526][ T9074] loop3: detected capacity change from 0 to 512 [ 402.302870][ T9074] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 402.438671][ T9074] EXT4-fs (loop3): 1 truncate cleaned up [ 402.449853][ T9074] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,usrjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 402.470306][ C1] vkms_vblank_simulate: vblank timer overrun [ 402.712285][ T9074] EXT4-fs (loop3): Unrecognized mount option "ì¥YðÌÚ„yµ²Fm¤ïŠ©«±ZÉ1Ø(O[½Å [ 402.712285][ T9074] ^¥Æ+EïóªØ]0rQ#Íó{ØÌŽÎcÄpç6;æ°:ªPŸrïfè˜l¿íÐIG>Žá¦?Ï…-H"’&Fþ)ð!Iˆ|.z" or missing value [ 403.022022][ T8960] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 403.461109][ T9111] Cannot find del_set index 2 as target [ 403.484006][ T8960] usb 4-1: unable to get BOS descriptor or descriptor too short [ 403.592934][ T8960] usb 4-1: not running at top speed; connect to a high speed hub [ 403.792794][ T8960] usb 4-1: config 1 has an invalid descriptor of length 3, skipping remainder of the config [ 403.933888][ T8960] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 404.164611][ T9113] device vlan4 entered promiscuous mode [ 404.170759][ T26] audit: type=1326 audit(1752181440.356:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9114 comm="syz.0.1512" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f743d737929 code=0x0 [ 404.227783][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1502'. [ 404.346600][ T8960] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 404.360362][ T8960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.380726][ T8960] usb 4-1: Product: syz [ 404.389630][ T8960] usb 4-1: Manufacturer: syz [ 404.398744][ T8960] usb 4-1: SerialNumber: syz [ 405.433169][ T8960] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 405.468816][ T8960] usb 4-1: unit 5 not found! [ 405.492362][ T9135] overlayfs: failed to clone lowerpath [ 405.640217][ T8960] usb 4-1: USB disconnect, device number 10 [ 406.845642][ T9158] netlink: 'syz.4.1517': attribute type 8 has an invalid length. [ 408.030884][ T9173] net_ratelimit: 23 callbacks suppressed [ 408.030899][ T9173] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 409.675010][ T9202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1531'. [ 410.606340][ T9214] sit0 speed is unknown, defaulting to 1000 [ 411.590045][ T9214] lo speed is unknown, defaulting to 1000 [ 413.174143][ T9226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1538'. [ 413.195729][ T9226] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1538'. [ 414.912864][ T9256] netlink: 'syz.2.1547': attribute type 4 has an invalid length. [ 416.747351][ T26] audit: type=1107 audit(1752181452.936:161): pid=9278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 416.976514][ T9291] netlink: 'syz.0.1557': attribute type 10 has an invalid length. [ 416.992111][ T9291] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1557'. [ 417.283261][ T9295] loop3: detected capacity change from 0 to 32768 [ 417.338511][ T9295] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1558 (9295) [ 417.378642][ T9295] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 417.387401][ T9295] BTRFS info (device loop3): setting nodatacow, compression disabled [ 417.395535][ T9295] BTRFS info (device loop3): max_inline at 0 [ 417.401511][ T9295] BTRFS info (device loop3): enabling disk space caching [ 417.408572][ T9295] BTRFS info (device loop3): turning off barriers [ 417.414996][ T9295] BTRFS info (device loop3): turning on flush-on-commit [ 417.421957][ T9295] BTRFS info (device loop3): doing ref verification [ 417.428611][ T9295] BTRFS info (device loop3): force clearing of disk cache [ 417.435754][ T9295] BTRFS info (device loop3): enabling ssd optimizations [ 417.442731][ T9295] BTRFS info (device loop3): max_inline at 4096 [ 417.448963][ T9295] BTRFS info (device loop3): disk space caching is enabled [ 417.456164][ T9295] BTRFS info (device loop3): has skinny extents [ 417.656739][ T9328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1562'. [ 417.707605][ T9295] BTRFS info (device loop3): clearing free space tree [ 417.714942][ T9295] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 417.724977][ T9295] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 418.009311][ T26] audit: type=1800 audit(1752181454.196:162): pid=9336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1558" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 419.653320][ T9364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1568'. [ 425.722668][ T9431] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 426.674282][ T9435] loop3: detected capacity change from 0 to 2048 [ 426.740608][ T9446] device vlan2 entered promiscuous mode [ 426.769955][ T8997] loop3: p1 < > p3 [ 426.785494][ T8997] loop3: p3 size 134217728 extends beyond EOD, truncated [ 426.805994][ T9441] kvm: emulating exchange as write [ 426.837619][ T9435] loop3: p1 < > p3 [ 426.867486][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1595'. [ 426.872323][ T9435] loop3: p3 size 134217728 extends beyond EOD, truncated [ 426.896812][ T9454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.001398][ T9458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1598'. [ 427.152223][ T9464] netlink: 'syz.3.1601': attribute type 10 has an invalid length. [ 427.304902][ T9464] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1601'. [ 427.318882][ T9464] netlink: 'syz.3.1601': attribute type 10 has an invalid length. [ 428.650520][ T9464] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1601'. [ 428.694130][ T9068] udevd[9068]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 428.708957][ T8997] udevd[8997]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 428.785446][ T9068] udevd[9068]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 428.816112][ T8997] udevd[8997]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 428.838136][ T9487] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 430.396364][ T9506] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1615'. [ 430.405459][ T9506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1615'. [ 431.684929][ T9525] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1622'. [ 431.907017][ T9535] netlink: 'syz.0.1626': attribute type 1 has an invalid length. [ 434.509373][ T9561] netlink: 'syz.2.1635': attribute type 1 has an invalid length. [ 435.375628][ T9561] device bond4 entered promiscuous mode [ 435.439264][ T9561] 8021q: adding VLAN 0 to HW filter on device bond4 [ 435.595669][ T9579] loop3: detected capacity change from 0 to 32768 [ 435.607942][ T9583] netlink: set zone limit has 8 unknown bytes [ 435.628064][ T9584] netlink: 'syz.1.1640': attribute type 29 has an invalid length. [ 435.636607][ T9575] device bridge_slave_1 left promiscuous mode [ 435.648347][ T9575] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.682589][ T9579] JBD2: Ignoring recovery information on journal [ 435.690450][ T9579] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 435.698974][ T9579] JBD2: bad block at offset 32 [ 435.714731][ T9575] device bridge_slave_0 left promiscuous mode [ 435.721350][ T9575] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.734074][ T9579] (syz.3.1639,9579,0):ocfs2_load_local_alloc:311 ERROR: Invalid local alloc inode, 75 [ 435.743759][ T9579] (syz.3.1639,9579,0):ocfs2_load_local_alloc:355 ERROR: status = -22 [ 435.751866][ T9579] (syz.3.1639,9579,0):ocfs2_check_volume:2465 ERROR: status = -22 [ 435.759747][ T9579] (syz.3.1639,9579,0):ocfs2_check_volume:2493 ERROR: status = -22 [ 435.767568][ T9579] (syz.3.1639,9579,0):ocfs2_mount_volume:1824 ERROR: status = -22 [ 435.804210][ T9579] (syz.3.1639,9579,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 435.935444][ T9565] 8021q: adding VLAN 0 to HW filter on device bond4 [ 435.951906][ T9565] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 436.047399][ T9565] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 436.763688][ T9565] bond4: (slave ip6gre1): making interface the new active one [ 436.774652][ T9565] device ip6gre1 entered promiscuous mode [ 436.783489][ T9565] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 436.793404][ T9584] netlink: 'syz.1.1640': attribute type 29 has an invalid length. [ 436.827501][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 436.869566][ T9597] fuse: Unknown parameter 'grou' [ 436.941903][ T9601] netlink: 'syz.1.1647': attribute type 1 has an invalid length. [ 437.942714][ T26] audit: type=1326 audit(1752184052.131:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9607 comm="syz.4.1650" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x0 [ 437.964475][ C0] vkms_vblank_simulate: vblank timer overrun [ 438.019856][ T9615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1653'. [ 439.282567][ T9630] overlayfs: failed to clone upperpath [ 439.381904][ T9632] loop3: detected capacity change from 0 to 256 [ 439.506239][ T9632] FAT-fs (loop3): Directory bread(block 64) failed [ 439.566935][ T9632] FAT-fs (loop3): Directory bread(block 65) failed [ 439.573829][ T9632] FAT-fs (loop3): Directory bread(block 66) failed [ 439.596482][ T9632] FAT-fs (loop3): Directory bread(block 67) failed [ 439.615205][ T9632] FAT-fs (loop3): Directory bread(block 68) failed [ 439.627151][ T9632] FAT-fs (loop3): Directory bread(block 69) failed [ 439.635135][ T9632] FAT-fs (loop3): Directory bread(block 70) failed [ 439.645049][ T9632] FAT-fs (loop3): Directory bread(block 71) failed [ 439.652792][ T9632] FAT-fs (loop3): Directory bread(block 72) failed [ 439.659454][ T9632] FAT-fs (loop3): Directory bread(block 73) failed [ 439.774267][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.190701][ T9650] Cannot find del_set index 2 as target [ 440.793453][ T9632] loop3: detected capacity change from 0 to 256 [ 442.229399][ T9632] FAT-fs (loop3): Directory bread(block 64) failed [ 442.305843][ T9632] FAT-fs (loop3): Directory bread(block 65) failed [ 442.312597][ T9632] FAT-fs (loop3): Directory bread(block 66) failed [ 442.319136][ T9632] FAT-fs (loop3): Directory bread(block 67) failed [ 442.326163][ T9632] FAT-fs (loop3): Directory bread(block 68) failed [ 442.327409][ T9675] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.332757][ T9632] FAT-fs (loop3): Directory bread(block 69) failed [ 442.332880][ T9632] FAT-fs (loop3): Directory bread(block 70) failed [ 442.354637][ T9632] FAT-fs (loop3): Directory bread(block 71) failed [ 442.365114][ T9632] FAT-fs (loop3): Directory bread(block 72) failed [ 442.373680][ T9632] FAT-fs (loop3): Directory bread(block 73) failed [ 442.388557][ T9675] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.397693][ T9675] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.409622][ T9675] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.419543][ T9675] device geneve2 entered promiscuous mode [ 442.433932][ T9675] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.438305][ T9682] netlink: zone id is out of range [ 442.448638][ T9675] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.469590][ T9675] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.494099][ T9675] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.355664][ T9717] Cannot find del_set index 2 as target [ 445.164365][ T9720] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 448.715452][ T9750] sit0 speed is unknown, defaulting to 1000 [ 450.701978][ T9750] lo speed is unknown, defaulting to 1000 [ 450.962060][ T9779] loop3: detected capacity change from 0 to 32768 [ 451.414224][ T9779] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 452.851358][ T4181] ocfs2: Unmounting device (7,3) on (node local) [ 454.610119][ T9827] xt_TPROXY: Can be used only with -p tcp or -p udp [ 459.952167][ T9884] xt_time: unknown flags 0xc [ 459.972130][ T9884] loop3: detected capacity change from 0 to 2048 [ 460.874149][ T9877] GPT:first_usable_lbas don't match. [ 460.885978][ T9877] GPT:34 != 290 [ 460.899530][ T9877] GPT: Use GNU Parted to correct GPT errors. [ 461.018873][ T9877] loop3: p1 p2 p3 [ 461.073898][ T9884] GPT:first_usable_lbas don't match. [ 461.079280][ T9884] GPT:34 != 290 [ 461.082757][ T9884] GPT: Use GNU Parted to correct GPT errors. [ 461.088909][ T9884] loop3: p1 p2 p3 [ 462.062889][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1733'. [ 462.101661][ T9877] udevd[9877]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 462.121369][ T9904] udevd[9904]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 462.129791][ T9903] udevd[9903]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 462.225729][ T9877] udevd[9877]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 462.230959][ T9903] udevd[9903]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 462.249580][ T9904] udevd[9904]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 462.900003][ T9920] netlink: 'syz.4.1739': attribute type 10 has an invalid length. [ 463.367876][ T9925] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1739'. [ 463.430627][ T9925] bond0 (unregistering): Released all slaves [ 466.820981][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1749'. [ 470.344804][T10000] syz.4.1760[10000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 470.344954][T10000] syz.4.1760[10000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.228158][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1762'. [ 471.610848][T10016] usb usb1: usbfs: process 10016 (syz.3.1764) did not claim interface 6 before use [ 471.899081][T10020] loop3: detected capacity change from 0 to 256 [ 474.419997][T10042] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1772'. [ 475.653935][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1781'. [ 475.693442][T10069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1782'. [ 476.506163][T10082] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1786'. [ 476.782519][T10082] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1786'. [ 481.640823][T10149] netlink: 'syz.0.1807': attribute type 32 has an invalid length. [ 481.646981][T10145] bridge0: port 1(batadv0) entered blocking state [ 481.655280][T10145] bridge0: port 1(batadv0) entered disabled state [ 481.674721][T10145] device batadv0 entered promiscuous mode [ 482.350735][ T4265] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 482.360747][ T4265] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 482.613352][T10158] netlink: 'syz.0.1811': attribute type 21 has an invalid length. [ 482.621312][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1811'. [ 484.562813][ T26] audit: type=1804 audit(1752184098.757:164): pid=10197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1823" name="file1" dev="ramfs" ino=47943 res=1 errno=0 [ 485.691557][T10221] nftables ruleset with unbound chain [ 487.211663][T10243] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1836'. [ 487.338051][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1837'. [ 487.468239][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1837'. [ 488.018913][T10250] bond0: (slave bond_slave_0): Releasing backup interface [ 488.221971][T10250] bond0: (slave bond_slave_1): Releasing backup interface [ 488.237997][T10250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.253898][T10250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.329154][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 488.405158][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 488.774369][T10267] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1843'. [ 489.614253][T10284] device bridge5 entered promiscuous mode [ 489.630219][T10284] team0: Port device bridge5 added [ 489.648248][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1849'. [ 490.322219][T10284] team0 (unregistering): Port device bridge5 removed [ 490.605644][T10301] syz.3.1851[10301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 490.606074][T10301] syz.3.1851[10301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.277279][T10304] netlink: 'syz.0.1855': attribute type 1 has an invalid length. [ 491.433683][T10304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.091551][T10320] fuse: Unknown parameter '' [ 492.100888][ T26] audit: type=1326 audit(1752184106.288:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.2.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff32d3929 code=0x7ffc0000 [ 492.155509][T10308] device vlan3 entered promiscuous mode [ 492.161113][T10308] device bond1 entered promiscuous mode [ 492.276042][ T26] audit: type=1326 audit(1752184106.328:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.2.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff32d3929 code=0x7ffc0000 [ 492.298990][ T26] audit: type=1326 audit(1752184106.328:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.2.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feff32d3929 code=0x7ffc0000 [ 492.472003][ T26] audit: type=1326 audit(1752184106.328:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.2.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff32d3929 code=0x7ffc0000 [ 492.580310][T10337] netlink: 'syz.4.1862': attribute type 12 has an invalid length. [ 493.126682][ T26] audit: type=1326 audit(1752184106.328:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.2.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff32d3929 code=0x7ffc0000 [ 493.200270][T10349] overlayfs: failed to clone upperpath [ 493.211668][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 493.226004][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 493.235744][T10344] ceph: No mds server is up or the cluster is laggy [ 493.252047][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 493.258395][ T26] audit: type=1326 audit(1752184106.328:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.2.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feff32d3929 code=0x7ffc0000 [ 493.299234][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 493.361866][ T26] audit: type=1326 audit(1752184106.328:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.2.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff32d3929 code=0x7ffc0000 [ 493.386617][ T26] audit: type=1326 audit(1752184106.328:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.2.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff32d3929 code=0x7ffc0000 [ 493.444361][ T26] audit: type=1326 audit(1752184106.328:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.2.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7feff32d3929 code=0x7ffc0000 [ 493.483669][ T26] audit: type=1326 audit(1752184106.328:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10319 comm="syz.2.1860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feff32d3929 code=0x7ffc0000 [ 493.571530][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1871'. [ 493.623136][ T4314] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 493.639864][T10355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1871'. [ 495.584265][ T4314] usb 4-1: Using ep0 maxpacket: 8 [ 497.273706][ T4314] usb 4-1: device descriptor read/all, error -71 [ 500.429162][T10435] device bridge0 entered promiscuous mode [ 500.527669][T10434] device bridge0 left promiscuous mode [ 501.206347][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.570818][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1902'. [ 501.673297][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1902'. [ 505.481572][T10514] netlink: 'syz.2.1922': attribute type 24 has an invalid length. [ 505.517230][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1923'. [ 505.608015][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1923'. [ 507.669119][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1928'. [ 509.247050][T10551] loop3: detected capacity change from 0 to 8 [ 510.133096][T10551] SQUASHFS error: lzo decompression failed, data probably corrupt [ 510.140960][T10551] SQUASHFS error: Failed to read block 0x91: -5 [ 510.152737][T10551] SQUASHFS error: Unable to read metadata cache entry [8f] [ 510.162125][T10551] SQUASHFS error: Unable to read inode 0x11f [ 515.563304][T10612] overlayfs: failed to clone upperpath [ 517.031173][T10633] netlink: 'syz.1.1956': attribute type 10 has an invalid length. [ 517.958645][T10633] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1956'. [ 521.933549][T10677] netlink: set zone limit has 8 unknown bytes [ 522.178225][T10688] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1973'. [ 522.438194][T10696] loop3: detected capacity change from 0 to 16 [ 528.194063][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1976'. [ 531.179834][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 531.179849][ T26] audit: type=1326 audit(1752184145.373:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e55b0c929 code=0x7ffc0000 [ 531.256250][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1991'. [ 531.285729][ T26] audit: type=1326 audit(1752184145.413:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6e55b0c929 code=0x7ffc0000 [ 531.309173][T10762] cgroup: Unknown subsys name 'obj_role' [ 531.353460][T10761] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 531.388376][T10761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1991'. [ 531.420373][ T26] audit: type=1326 audit(1752184145.413:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e55b0c929 code=0x7ffc0000 [ 531.443583][ T26] audit: type=1326 audit(1752184145.413:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6e55b0c929 code=0x7ffc0000 [ 531.595526][ T26] audit: type=1326 audit(1752184145.413:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e55b0c929 code=0x7ffc0000 [ 531.624010][ T26] audit: type=1326 audit(1752184145.413:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e55b0c929 code=0x7ffc0000 [ 531.653222][ T26] audit: type=1326 audit(1752184145.413:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e55b0c929 code=0x7ffc0000 [ 531.682983][ T26] audit: type=1326 audit(1752184145.423:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e55b0c929 code=0x7ffc0000 [ 531.809385][ T26] audit: type=1326 audit(1752184145.423:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e55b0c929 code=0x7ffc0000 [ 532.363929][ T26] audit: type=1326 audit(1752184145.423:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10758 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e55b0c929 code=0x7ffc0000 [ 534.067346][T10785] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 536.030920][T10810] xt_CT: You must specify a L4 protocol and not use inversions on it [ 537.799509][T10826] dns_resolver: Unsupported server list version (0) [ 539.275760][T10848] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 539.808262][T10851] netlink: 41294 bytes leftover after parsing attributes in process `syz.0.2015'. [ 546.120510][T10895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2029'. [ 546.147907][T10895] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2029'. [ 547.820313][T10934] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2038'. [ 549.889157][T10962] lo speed is unknown, defaulting to 1000 [ 549.920556][T10962] lo speed is unknown, defaulting to 1000 [ 549.926695][T10962] lo speed is unknown, defaulting to 1000 [ 549.944359][T10962] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 549.997660][T10962] lo speed is unknown, defaulting to 1000 [ 550.018986][T10962] lo speed is unknown, defaulting to 1000 [ 550.025721][T10962] lo speed is unknown, defaulting to 1000 [ 550.047322][T10962] lo speed is unknown, defaulting to 1000 [ 550.053947][T10962] lo speed is unknown, defaulting to 1000 [ 550.086355][T10963] xt_TPROXY: Can be used only with -p tcp or -p udp [ 551.043315][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 551.043327][ T26] audit: type=1326 audit(1752184165.245:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7fc00000 [ 551.508997][ T26] audit: type=1326 audit(1752184165.245:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a4b9b4929 code=0x7fc00000 [ 552.069113][ T26] audit: type=1326 audit(1752184165.245:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7fc00000 [ 552.100716][ T26] audit: type=1326 audit(1752184165.245:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7fc00000 [ 552.172568][T11002] UBIFS error (pid: 11002): cannot open "./file0", error -22 [ 552.970416][ T26] audit: type=1326 audit(1752184165.245:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7fc00000 [ 553.007175][ T26] audit: type=1326 audit(1752184165.245:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7fc00000 [ 553.033924][ T26] audit: type=1326 audit(1752184165.245:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7fc00000 [ 553.847365][ T26] audit: type=1326 audit(1752184165.245:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10978 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7fc00000 [ 561.994807][T11072] netlink: 'syz.4.2075': attribute type 1 has an invalid length. [ 562.049277][T11073] loop3: detected capacity change from 0 to 128 [ 562.106986][T11073] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 562.137539][T11073] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 562.187769][T11073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2076'. [ 562.230999][ T4297] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 563.834051][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.259543][T11110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2082'. [ 569.650980][T11175] nfs: Unknown parameter 'ntext' [ 570.899804][T11188] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2107'. [ 572.826883][T11225] netlink: 'syz.1.2118': attribute type 3 has an invalid length. [ 572.840999][T11225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2118'. [ 573.661890][T11232] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 573.668456][T11232] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 573.696689][T11232] vhci_hcd vhci_hcd.0: Device attached [ 573.732868][T11239] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 573.739418][T11239] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 573.792413][T11246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.795864][T11239] vhci_hcd vhci_hcd.0: Device attached [ 574.218142][T11251] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 575.244722][T11240] vhci_hcd: connection closed [ 575.246112][ T9] vhci_hcd: stop threads [ 575.255390][T11236] vhci_hcd: connection closed [ 575.257112][ T9] vhci_hcd: release socket [ 575.266444][ T9] vhci_hcd: disconnect device [ 576.338182][ T9] vhci_hcd: stop threads [ 576.362216][ T9] vhci_hcd: release socket [ 576.370492][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2128'. [ 576.389929][ T9] vhci_hcd: disconnect device [ 576.496341][ T4226] vhci_hcd: vhci_device speed not set [ 576.541176][T11276] netlink: 'syz.1.2131': attribute type 10 has an invalid length. [ 576.551748][T11276] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2131'. [ 577.675050][T11292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2135'. [ 579.184289][T11317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2143'. [ 579.250028][T11317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2143'. [ 579.322127][T11324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2146'. [ 582.127278][T11350] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2155'. [ 584.049920][T11371] syz.2.2163[11371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 584.050059][T11371] syz.2.2163[11371] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 585.526704][T11389] netlink: 'syz.3.2167': attribute type 32 has an invalid length. [ 585.576934][T11390] bridge0: port 1(batadv1) entered blocking state [ 585.588615][T11390] bridge0: port 1(batadv1) entered disabled state [ 585.597507][T11390] device batadv1 entered promiscuous mode [ 586.714945][ T4357] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 586.724285][ T4357] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 586.773315][ T26] audit: type=1326 audit(1752184200.979:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11414 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e20507929 code=0x7ffc0000 [ 586.842216][ T26] audit: type=1326 audit(1752184200.979:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11414 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4e20507929 code=0x7ffc0000 [ 586.969544][ T26] audit: type=1326 audit(1752184200.979:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11414 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4e20507963 code=0x7ffc0000 [ 587.192554][ T26] audit: type=1326 audit(1752184200.979:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11414 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4e205063df code=0x7ffc0000 [ 587.504209][ T26] audit: type=1326 audit(1752184200.989:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11414 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4e205079b7 code=0x7ffc0000 [ 587.788467][ T26] audit: type=1326 audit(1752184200.989:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11414 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4e20506290 code=0x7ffc0000 [ 587.822010][ T26] audit: type=1326 audit(1752184200.989:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11414 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4e2050658a code=0x7ffc0000 [ 587.854643][ T26] audit: type=1326 audit(1752184200.989:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11414 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e20507929 code=0x7ffc0000 [ 587.895110][ T26] audit: type=1326 audit(1752184200.999:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11414 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4e20507929 code=0x7ffc0000 [ 587.997500][ T26] audit: type=1326 audit(1752184200.999:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11414 comm="syz.1.2174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4e20507963 code=0x7ffc0000 [ 588.025396][T11437] sit0 speed is unknown, defaulting to 1000 [ 589.098289][T11437] lo speed is unknown, defaulting to 1000 [ 589.107267][T11437] lo speed is unknown, defaulting to 1000 [ 589.258731][T11457] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2187'. [ 589.272736][T11457] netlink: 'syz.2.2187': attribute type 11 has an invalid length. [ 589.280853][T11457] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2187'. [ 593.412789][T11502] tmpfs: Unknown parameter 'uid<00000000000000000000,9' [ 593.764268][T11513] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2211'. [ 595.935317][T11535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2208'. [ 598.566948][T11559] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2216'. [ 598.712599][ T8140] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 599.751452][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 599.751466][ T26] audit: type=1804 audit(1752184213.951:268): pid=11570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2220" name="file1" dev="ramfs" ino=52487 res=1 errno=0 [ 600.208353][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2222'. [ 600.294415][ T8140] usb 4-1: not running at top speed; connect to a high speed hub [ 600.411720][ T8140] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 600.423540][ T8140] usb 4-1: config 1 has no interface number 1 [ 601.559699][ T8140] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 601.569046][ T8140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.577132][ T8140] usb 4-1: Product: syz [ 601.581361][ T8140] usb 4-1: Manufacturer: syz [ 601.585972][ T8140] usb 4-1: SerialNumber: syz [ 601.631328][ T8140] usb 4-1: can't set config #1, error -71 [ 601.668168][ T8140] usb 4-1: USB disconnect, device number 13 [ 603.678620][ T26] audit: type=1326 audit(1752184217.881:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11609 comm="syz.4.2234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x0 [ 604.067461][T11623] 9pnet: Insufficient options for proto=fd [ 604.991339][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2243'. [ 605.179829][T11641] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2240'. [ 606.846427][T11657] netlink: 'syz.2.2258': attribute type 1 has an invalid length. [ 607.659759][T11657] 8021q: adding VLAN 0 to HW filter on device bond5 [ 607.697661][ T26] audit: type=1326 audit(1752184221.902:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743d737929 code=0x7ffc0000 [ 607.773337][ T26] audit: type=1326 audit(1752184221.902:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743d737929 code=0x7ffc0000 [ 607.808507][ T26] audit: type=1326 audit(1752184221.932:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f743d737929 code=0x7ffc0000 [ 607.857884][ T26] audit: type=1326 audit(1752184221.932:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743d737929 code=0x7ffc0000 [ 607.902891][T11666] bond5: (slave gretap2): making interface the new active one [ 607.918082][T11666] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 607.927014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 607.964101][T11675] netlink: 'syz.3.2251': attribute type 4 has an invalid length. [ 608.033493][ T26] audit: type=1326 audit(1752184221.932:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743d737929 code=0x7ffc0000 [ 608.056238][ T26] audit: type=1326 audit(1752184221.932:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f743d737929 code=0x7ffc0000 [ 608.100715][ T26] audit: type=1326 audit(1752184221.932:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743d737929 code=0x7ffc0000 [ 608.815152][ T26] audit: type=1326 audit(1752184221.932:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743d737929 code=0x7ffc0000 [ 608.856279][ T26] audit: type=1326 audit(1752184221.932:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f743d737929 code=0x7ffc0000 [ 609.055840][ T26] audit: type=1326 audit(1752184221.932:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743d737929 code=0x7ffc0000 [ 610.743179][T11714] 9pnet: Insufficient options for proto=fd [ 612.783609][T11743] device wg2 entered promiscuous mode [ 617.066935][T11754] tipc: Failed to remove unknown binding: 66,1,1/2886997007:427621836/427621838 [ 617.077923][T11754] tipc: Failed to remove unknown binding: 66,1,1/2886997007:427621836/427621838 [ 621.656334][T11813] loop3: detected capacity change from 0 to 32768 [ 621.720816][T11813] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2295 (11813) [ 621.872964][T11813] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 621.881843][T11813] BTRFS info (device loop3): setting nodatacow, compression disabled [ 621.890007][T11813] BTRFS info (device loop3): max_inline at 0 [ 621.895979][T11813] BTRFS info (device loop3): enabling disk space caching [ 621.903016][T11813] BTRFS info (device loop3): turning off barriers [ 621.909440][T11813] BTRFS info (device loop3): turning on flush-on-commit [ 621.916364][T11813] BTRFS info (device loop3): doing ref verification [ 621.922970][T11813] BTRFS info (device loop3): force clearing of disk cache [ 621.930133][T11813] BTRFS info (device loop3): enabling ssd optimizations [ 621.937092][T11813] BTRFS info (device loop3): max_inline at 4096 [ 621.943409][T11813] BTRFS info (device loop3): disk space caching is enabled [ 621.950625][T11813] BTRFS info (device loop3): has skinny extents [ 623.446149][T11848] netlink: 'syz.0.2301': attribute type 16 has an invalid length. [ 623.471830][T11848] netlink: 'syz.0.2301': attribute type 3 has an invalid length. [ 623.497493][T11848] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2301'. [ 623.809398][T11813] BTRFS error (device loop3): open_ctree failed: -12 [ 624.110910][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.668117][T11886] siw: device registration error -23 [ 625.733196][T11901] loop3: detected capacity change from 0 to 512 [ 626.968517][T11901] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 627.966267][T11901] EXT4-fs (loop3): 1 truncate cleaned up [ 627.974184][T11901] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 628.415936][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 628.415950][ T26] audit: type=1800 audit(1752184242.624:303): pid=11901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2316" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 629.252590][T11935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2325'. [ 629.269641][T11935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2325'. [ 629.302931][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2326'. [ 629.402706][T11947] MPTCP: kernel_bind error, err=-99 [ 629.406046][T11947] siw: device registration error -23 [ 629.506673][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2324'. [ 630.267985][T11956] bond0: (slave wlan1): Error: Slave device does not support XDP [ 630.283135][T11956] netlink: 'syz.2.2329': attribute type 10 has an invalid length. [ 630.293642][T11956] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 630.306522][T11956] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2329'. [ 630.327446][T11956] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 631.201606][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2335'. [ 631.228798][T11966] netlink: 'syz.4.2335': attribute type 1 has an invalid length. [ 631.236918][T11966] netlink: 'syz.4.2335': attribute type 1 has an invalid length. [ 631.267758][T11956] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 631.316179][T11956] bond0 (unregistering): Released all slaves [ 633.406529][T11997] xt_nfacct: accounting object `syz1' does not exists [ 636.506764][T12034] tipc: Enabling of bearer rejected, already enabled [ 637.939096][T12053] nfs: Unknown parameter 'f' [ 639.232644][T12075] overlayfs: failed to clone lowerpath [ 643.581165][T12118] netlink: 'syz.1.2376': attribute type 1 has an invalid length. [ 644.437003][T12118] 8021q: adding VLAN 0 to HW filter on device bond3 [ 644.460638][T12128] bond3: (slave ip6erspan0): making interface the new active one [ 644.491647][T12128] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 644.512978][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 647.496324][T12158] netlink: 'syz.3.2383': attribute type 10 has an invalid length. [ 647.590728][T12158] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 648.732107][T12173] Cannot find set identified by id 65534 to match [ 649.125184][T12158] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2383'. [ 650.908466][T12158] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 650.944677][T12158] bond0 (unregistering): Released all slaves [ 653.598117][T12190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.925603][T12229] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 655.925603][T12229] The task syz.3.2408 (12229) triggered the difference, watch for misbehavior. [ 658.905228][T12268] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 658.914961][T12268] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 658.924954][T12268] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 658.936903][T12268] syz.3.2428 (12268) used greatest stack depth: 18592 bytes left [ 659.200629][ T26] audit: type=1800 audit(1752184273.117:304): pid=12268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2428" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 660.470457][T12273] netlink: 'syz.0.2419': attribute type 10 has an invalid length. [ 660.507696][T12273] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 660.541317][T12275] delete_channel: no stack [ 660.550171][T12273] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2419'. [ 660.715515][T12273] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 661.225899][T12273] bond0 (unregistering): Released all slaves [ 661.469913][T12289] device wg2 entered promiscuous mode [ 662.564226][T12309] tipc: Enabling of bearer rejected, already enabled [ 665.013932][T12334] xt_socket: unknown flags 0xc [ 665.299658][T12341] netlink: 'syz.1.2442': attribute type 10 has an invalid length. [ 665.336579][T12341] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2442'. [ 667.378882][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2452'. [ 667.451050][T12377] input: syz1 as /devices/virtual/input/input7 [ 667.635615][T12378] device batadv_slave_0 entered promiscuous mode [ 670.321508][T12424] netlink: 'syz.2.2465': attribute type 4 has an invalid length. [ 674.523291][T12481] xt_connbytes: Forcing CT accounting to be enabled [ 674.530510][T12481] Cannot find set identified by id 0 to match [ 675.099271][T12482] Device name cannot be null; rc = [-22] [ 677.870451][T12506] loop3: detected capacity change from 0 to 2048 [ 685.562778][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.902507][T12621] xt_recent: hitcount (692) is larger than allowed maximum (255) [ 692.670949][T12649] MPTCP: kernel_bind error, err=-99 [ 692.853507][ T26] audit: type=1326 audit(1752184307.051:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12642 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743d737929 code=0x7ffc0000 [ 693.274051][ T26] audit: type=1326 audit(1752184307.051:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12642 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f743d737929 code=0x7ffc0000 [ 693.308330][ T26] audit: type=1326 audit(1752184307.071:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12642 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743d737929 code=0x7ffc0000 [ 693.331598][ T26] audit: type=1326 audit(1752184307.071:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12642 comm="syz.0.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743d737929 code=0x7ffc0000 [ 693.358631][T12655] siw: device registration error -23 [ 693.696619][T12670] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 693.707516][T12670] netlink: 'syz.2.2537': attribute type 16 has an invalid length. [ 694.379735][T12670] netlink: 'syz.2.2537': attribute type 3 has an invalid length. [ 694.387907][T12670] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2537'. [ 694.592386][T12677] xt_recent: hitcount (692) is larger than allowed maximum (255) [ 695.286438][T12690] tipc: Enabling of bearer rejected, already enabled [ 695.861782][T12695] loop3: detected capacity change from 0 to 64 [ 697.270342][T12695] hfs: unable to locate alternate MDB [ 697.300223][T12695] hfs: continuing without an alternate MDB [ 697.429838][ T4247] Bluetooth: hci4: command 0x0405 tx timeout [ 697.658959][T12708] siw: device registration error -23 [ 702.446721][T12765] loop3: detected capacity change from 0 to 1024 [ 702.590128][T12765] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 702.973525][T12765] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,bsddf,sysvgroups,discard,noblock_validity,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 705.319744][T12791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2567'. [ 705.529228][T12791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2567'. [ 706.351646][T12800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2572'. [ 706.601280][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2575'. [ 707.828491][T12821] netlink: 'syz.2.2589': attribute type 3 has an invalid length. [ 707.838751][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2589'. [ 707.839435][T12823] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 707.886445][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2588'. [ 707.954907][T12823] netlink: 'syz.4.2579': attribute type 16 has an invalid length. [ 707.974396][T12823] netlink: 'syz.4.2579': attribute type 3 has an invalid length. [ 707.998110][T12823] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2579'. [ 708.422351][T12835] Device name cannot be null; rc = [-22] [ 709.214890][T12843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2585'. [ 710.147872][T12856] netlink: 'syz.3.2592': attribute type 3 has an invalid length. [ 710.188884][T12857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2591'. [ 710.273397][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2592'. [ 710.466570][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2594'. [ 710.490219][T12864] loop3: detected capacity change from 0 to 256 [ 711.374220][T12864] FAT-fs (loop3): Directory bread(block 64) failed [ 711.414605][T12864] FAT-fs (loop3): Directory bread(block 65) failed [ 711.421610][T12864] FAT-fs (loop3): Directory bread(block 66) failed [ 711.428149][T12864] FAT-fs (loop3): Directory bread(block 67) failed [ 711.435089][T12864] FAT-fs (loop3): Directory bread(block 68) failed [ 711.446842][T12864] FAT-fs (loop3): Directory bread(block 69) failed [ 711.457583][T12864] FAT-fs (loop3): Directory bread(block 70) failed [ 711.468572][T12864] FAT-fs (loop3): Directory bread(block 71) failed [ 711.475161][T12864] FAT-fs (loop3): Directory bread(block 72) failed [ 711.509954][T12864] FAT-fs (loop3): Directory bread(block 73) failed [ 713.399353][ T26] audit: type=1326 audit(1752184327.624:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12888 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743d737929 code=0x7ffc0000 [ 713.421730][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.429944][T12889] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2599'. [ 713.513413][ T26] audit: type=1326 audit(1752184327.664:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12888 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743d737929 code=0x7ffc0000 [ 713.535878][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.592010][ T26] audit: type=1326 audit(1752184327.734:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12888 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f743d737929 code=0x7ffc0000 [ 713.614547][ T26] audit: type=1326 audit(1752184327.734:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12888 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f743d737963 code=0x7ffc0000 [ 713.636949][ T26] audit: type=1326 audit(1752184327.774:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12888 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f743d7363df code=0x7ffc0000 [ 713.698477][ T26] audit: type=1326 audit(1752184327.784:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12888 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f743d7379b7 code=0x7ffc0000 [ 713.779544][ T26] audit: type=1326 audit(1752184327.784:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12888 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f743d736290 code=0x7ffc0000 [ 713.802041][ C1] vkms_vblank_simulate: vblank timer overrun [ 713.809861][T12900] tipc: Enabling of bearer rejected, already enabled [ 713.823405][ T26] audit: type=1326 audit(1752184327.784:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12888 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f743d73658a code=0x7ffc0000 [ 713.854173][ T26] audit: type=1326 audit(1752184327.794:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12888 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743d737929 code=0x7ffc0000 [ 713.896568][ T26] audit: type=1326 audit(1752184327.794:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12888 comm="syz.0.2601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743d737929 code=0x7ffc0000 [ 713.918958][ C1] vkms_vblank_simulate: vblank timer overrun [ 715.006524][T12917] loop3: detected capacity change from 0 to 512 [ 715.068618][T12917] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 715.145693][T12917] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.2608: invalid block [ 715.220367][T12917] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2608: invalid indirect mapped block 10 (level 1) [ 715.333623][T12917] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2608: invalid indirect mapped block 8 (level 1) [ 715.372976][T12917] EXT4-fs (loop3): 1 truncate cleaned up [ 715.382495][T12917] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 717.504875][T12919] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 214761 in block_group 0 [ 718.047259][ T4181] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=262143, rec_len=65535, size=1024 fake=0 [ 718.156792][T11197] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm syz.3.2108: Invalid inode table block 3924211046 in block_group 0 [ 718.177965][T11197] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 718.191618][T11197] EXT4-fs error (device loop3): ext4_dirty_inode:6040: inode #2: comm syz.3.2108: mark_inode_dirty error [ 718.203729][ T9] EXT4-fs error (device loop3): __ext4_get_inode_loc:4321: comm kworker/u4:0: Invalid inode table block 3924211046 in block_group 0 [ 721.763923][T12985] sit0 speed is unknown, defaulting to 1000 [ 722.043752][T12985] lo speed is unknown, defaulting to 1000 [ 722.079817][T12985] lo speed is unknown, defaulting to 1000 [ 722.170597][T13008] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2638'. [ 723.848177][ T8961] Bluetooth: hci1: command 0x0409 tx timeout [ 723.922507][T12985] chnl_net:caif_netlink_parms(): no params data found [ 724.137863][T13034] netlink: 'syz.0.2647': attribute type 11 has an invalid length. [ 724.157200][T13034] netlink: 428 bytes leftover after parsing attributes in process `syz.0.2647'. [ 724.183222][T12985] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.338969][T12985] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.534441][T12985] device bridge_slave_0 entered promiscuous mode [ 724.837800][T12985] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.922895][T12985] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.931092][T12985] device bridge_slave_1 entered promiscuous mode [ 725.111280][T12985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.140272][T12985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 726.204457][ T8961] Bluetooth: hci1: command 0x041b tx timeout [ 726.276105][T12985] team0: Port device team_slave_0 added [ 726.284670][T12985] team0: Port device team_slave_1 added [ 726.324153][T13050] overlayfs: failed to clone upperpath [ 726.325132][T12985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.338264][T12985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.364547][T12985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.384350][T12985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.391897][T12985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 726.434720][T12985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.525524][T12985] device hsr_slave_0 entered promiscuous mode [ 726.533194][T12985] device hsr_slave_1 entered promiscuous mode [ 726.540006][T12985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 726.549512][T12985] Cannot create hsr debugfs directory [ 728.202834][T12985] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 728.222583][T12985] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 728.232628][T12985] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 728.243453][T12985] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 728.296574][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 729.507655][T13081] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2657'. [ 729.551673][T12985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.575948][T12985] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.593959][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 729.603927][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 729.612199][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 729.621054][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 729.630860][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.637941][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.656820][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 729.665029][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 729.674368][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 729.705103][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.712213][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.757584][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 729.766777][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 729.777616][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 729.789359][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 730.422071][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 730.472706][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 730.484194][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 730.509039][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 730.523065][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 730.559612][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 730.617297][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 730.627394][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 731.636740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 731.646611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 731.711158][T12985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.731432][T13135] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2670'. [ 732.365704][T13144] tmpfs: Unknown parameter 'uid<00000000000000000000,9' [ 732.379355][T13139] netlink: 'syz.4.2670': attribute type 11 has an invalid length. [ 732.442812][T13139] netlink: 428 bytes leftover after parsing attributes in process `syz.4.2670'. [ 733.300975][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 733.410040][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 733.453113][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 733.468420][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 733.539029][T12985] device veth0_vlan entered promiscuous mode [ 733.555645][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 733.576992][T13171] 9pnet: Insufficient options for proto=fd [ 733.584289][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 733.610665][T12985] device veth1_vlan entered promiscuous mode [ 733.699063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 733.714597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 733.723726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 733.738758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 733.755417][T12985] device veth0_macvtap entered promiscuous mode [ 733.770401][T12985] device veth1_macvtap entered promiscuous mode [ 733.804541][T12985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 733.812239][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 733.829268][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 733.850954][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 733.872024][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 733.891570][T12985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.912860][T12985] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.930852][T12985] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.944417][T12985] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.961529][T12985] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.989105][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 734.008045][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 734.777782][ T4346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.818309][ T4346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.853293][ T1162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 734.873539][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.887179][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.907742][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 736.247769][T13211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2684'. [ 736.384404][T13213] tmpfs: Unknown parameter 'uid<00000000000000000000,9' [ 743.023073][T13295] overlayfs: failed to clone upperpath [ 745.528830][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2716'. [ 745.541335][T13309] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 745.560818][T13309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2716'. [ 746.954857][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.987614][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 749.987627][ T26] audit: type=1326 audit(1752184364.208:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13351 comm="syz.4.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 750.248193][ T26] audit: type=1326 audit(1752184364.458:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13351 comm="syz.4.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 750.281040][ T26] audit: type=1326 audit(1752184364.458:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13351 comm="syz.4.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 750.329851][ T26] audit: type=1326 audit(1752184364.458:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13351 comm="syz.4.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 750.336090][T13359] cgroup: Unknown subsys name 'obj_role' [ 750.434737][ T26] audit: type=1326 audit(1752184364.458:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13351 comm="syz.4.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 750.503288][ T26] audit: type=1326 audit(1752184364.468:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13351 comm="syz.4.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 750.541206][ T26] audit: type=1326 audit(1752184364.468:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13351 comm="syz.4.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 750.604942][ T26] audit: type=1326 audit(1752184364.468:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13351 comm="syz.4.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 750.663119][ T26] audit: type=1326 audit(1752184364.498:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13351 comm="syz.4.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 750.685974][ T26] audit: type=1326 audit(1752184364.498:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13351 comm="syz.4.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0a4b9b4929 code=0x7ffc0000 [ 755.201007][T13391] general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN [ 755.212784][T13391] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 755.221206][T13391] CPU: 1 PID: 13391 Comm: syz.1.2739 Not tainted 5.15.187-syzkaller #0 [ 755.229451][T13391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 755.239528][T13391] RIP: 0010:__list_del_entry_valid+0x1f/0x120 [ 755.245619][T13391] Code: de 4c 89 f1 e8 52 4d bf 05 0f 0b 41 57 41 56 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 45 7a dd fd 4c 8b 7b 08 48 89 d8 48 c1 e8 [ 755.265259][T13391] RSP: 0000:ffffc900034feed0 EFLAGS: 00010202 [ 755.271347][T13391] RAX: 000000000000000b RBX: 0000000000000050 RCX: 0000000000080000 [ 755.279327][T13391] RDX: ffffc900053c9000 RSI: 0000000000000ec9 RDI: 0000000000000058 [ 755.287307][T13391] RBP: 1ffffffff1605308 R08: ffff8880249b0000 R09: 0000000000000002 [ 755.295295][T13391] R10: 00000000ffffffff R11: 0000000000000002 R12: dffffc0000000000 [ 755.303284][T13391] R13: dffffc0000000000 R14: 0000000000000050 R15: ffffffff8b029840 [ 755.311266][T13391] FS: 00007f4e1e36f6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 755.320202][T13391] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 755.326797][T13391] CR2: 0000200000002340 CR3: 000000001e1e8000 CR4: 00000000003506e0 [ 755.334782][T13391] Call Trace: [ 755.338079][T13391] [ 755.341024][T13391] drr_qlen_notify+0x28/0x100 [ 755.345725][T13391] qdisc_tree_reduce_backlog+0x25f/0x430 [ 755.351389][T13391] fq_codel_change+0xa71/0xf10 [ 755.356167][T13391] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 755.361843][T13391] ? fq_codel_destroy+0x90/0x90 [ 755.366717][T13391] fq_codel_init+0x319/0x8f0 [ 755.371435][T13391] ? lockdep_rtnl_is_held+0x22/0x30 [ 755.376657][T13391] ? qdisc_peek_dequeued+0x1f0/0x1f0 [ 755.381958][T13391] qdisc_create+0x7bd/0x1170 [ 755.386572][T13391] ? qdisc_notify+0x350/0x350 [ 755.391270][T13391] tc_modify_qdisc+0xaad/0x16c0 [ 755.396147][T13391] ? rcu_lock_release+0x20/0x20 [ 755.401016][T13391] ? rcu_lock_release+0x20/0x20 [ 755.405879][T13391] rtnetlink_rcv_msg+0x9b9/0xe60 [ 755.410838][T13391] ? rtnetlink_bind+0x80/0x80 [ 755.415535][T13391] ? __lock_acquire+0x12d9/0x7c60 [ 755.420598][T13391] ? preempt_schedule_irq+0xd0/0x150 [ 755.425892][T13391] ? verify_lock_unused+0x140/0x140 [ 755.431101][T13391] ? verify_lock_unused+0x140/0x140 [ 755.436316][T13391] ? rcu_preempt_deferred_qs_irqrestore+0x836/0xc10 [ 755.442929][T13391] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 755.448844][T13391] netlink_rcv_skb+0x1e0/0x430 [ 755.453625][T13391] ? rtnetlink_bind+0x80/0x80 [ 755.458321][T13391] ? netlink_ack+0xb60/0xb60 [ 755.462930][T13391] netlink_unicast+0x77c/0x920 [ 755.467717][T13391] netlink_sendmsg+0x8ab/0xbc0 [ 755.472604][T13391] ? netlink_getsockopt+0x560/0x560 [ 755.477822][T13391] ? aa_sock_msg_perm+0x94/0x150 [ 755.482777][T13391] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 755.488070][T13391] ? security_socket_sendmsg+0x7c/0xa0 [ 755.493541][T13391] ? netlink_getsockopt+0x560/0x560 [ 755.498748][T13391] ____sys_sendmsg+0x5a2/0x8c0 [ 755.503525][T13391] ? memset+0x1e/0x40 [ 755.507514][T13391] ? __sys_sendmsg_sock+0x30/0x30 [ 755.512553][T13391] ? import_iovec+0x6f/0xa0 [ 755.517073][T13391] ___sys_sendmsg+0x1f0/0x260 [ 755.521768][T13391] ? __sys_sendmsg+0x250/0x250 [ 755.526569][T13391] ? __fdget+0x18b/0x210 [ 755.530827][T13391] __se_sys_sendmsg+0x190/0x250 [ 755.535689][T13391] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 755.541356][T13391] ? __x64_sys_sendmsg+0x80/0x80 [ 755.546320][T13391] ? syscall_enter_from_user_mode+0x2a/0x70 [ 755.552231][T13391] do_syscall_64+0x4c/0xa0 [ 755.552258][T13391] ? clear_bhb_loop+0x30/0x80 [ 755.552280][T13391] ? clear_bhb_loop+0x30/0x80 [ 755.566310][T13391] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 755.572326][T13391] RIP: 0033:0x7f4e20507929 [ 755.576762][T13391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.596381][T13391] RSP: 002b:00007f4e1e36f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 755.604813][T13391] RAX: ffffffffffffffda RBX: 00007f4e2072efa0 RCX: 00007f4e20507929 [ 755.612811][T13391] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000008 [ 755.620794][T13391] RBP: 00007f4e20589b39 R08: 0000000000000000 R09: 0000000000000000 [ 755.628781][T13391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.636766][T13391] R13: 0000000000000000 R14: 00007f4e2072efa0 R15: 00007ffead32e568 [ 755.644764][T13391] [ 755.647804][T13391] Modules linked in: [ 755.651825][T13391] ---[ end trace 74d3cfaa6fa017e5 ]--- [ 755.657368][T13391] RIP: 0010:__list_del_entry_valid+0x1f/0x120 [ 755.663476][T13391] Code: de 4c 89 f1 e8 52 4d bf 05 0f 0b 41 57 41 56 41 54 53 48 89 fb 49 bc 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 45 7a dd fd 4c 8b 7b 08 48 89 d8 48 c1 e8 [ 755.683116][T13391] RSP: 0000:ffffc900034feed0 EFLAGS: 00010202 [ 755.689219][T13391] RAX: 000000000000000b RBX: 0000000000000050 RCX: 0000000000080000 [ 755.697220][T13391] RDX: ffffc900053c9000 RSI: 0000000000000ec9 RDI: 0000000000000058 [ 755.705224][T13391] RBP: 1ffffffff1605308 R08: ffff8880249b0000 R09: 0000000000000002 [ 755.713225][T13391] R10: 00000000ffffffff R11: 0000000000000002 R12: dffffc0000000000 [ 755.721219][T13391] R13: dffffc0000000000 R14: 0000000000000050 R15: ffffffff8b029840 [ 755.729212][T13391] FS: 00007f4e1e36f6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 755.738170][T13391] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 755.744777][T13391] CR2: 0000200000002340 CR3: 000000001e1e8000 CR4: 00000000003506e0 [ 755.752812][T13391] Kernel panic - not syncing: Fatal exception in interrupt [ 755.760336][T13391] Kernel Offset: disabled [ 755.764669][T13391] Rebooting in 86400 seconds..