last executing test programs: 19m7.648123145s ago: executing program 32 (id=38): r0 = semget$private(0x0, 0x2, 0x0) semctl$SEM_STAT_ANY(r0, 0x4, 0x14, &(0x7f0000000280)=""/25) 19m7.148423562s ago: executing program 33 (id=40): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x10002000}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') read$char_usb(r3, &(0x7f0000001080)=""/4124, 0x101c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000e40)='net/mcfilter6\x00') bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000cb5000/0x3000)=nil, 0x3000) munlock(&(0x7f0000dba000/0x4000)=nil, 0x4000) munlock(&(0x7f00006d6000/0x2000)=nil, 0x2000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r5}, 0x8) socket$packet(0x11, 0x3, 0x300) openat$dir(0xffffffffffffff9c, 0x0, 0x21c0, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8413, &(0x7f0000000080)={[{@oldalloc}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@nogrpid}, {@abort}], [{@seclabel}, {@seclabel, 0x22}]}, 0x0, 0x523, &(0x7f0000000600)="$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") ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x40000000000005, 0x3a, '[-.-', 0x3a, '\xb5\xddW\xbd :\xa4G\xcc:\\', 0x3a, './file0'}, 0x36) 18m16.254422596s ago: executing program 34 (id=83): gettid() openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(0x0, &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x200f, {"1ae30a30ed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19300305d3f46635eb016d5b18e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a027d5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf050000008000000000f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2f5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e09d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89100000dd385a603336c00000077cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046ca5b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe6531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e6586df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59555e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb601203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 17m39.256702625s ago: executing program 35 (id=123): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, 0xffffffffffffffff) 16m39.177708431s ago: executing program 36 (id=215): r0 = syz_open_dev$mouse(&(0x7f0000000100), 0x9, 0x41) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r0, 0x0, 0x8007fff, 0x0) 16m20.011967185s ago: executing program 37 (id=222): gettid() openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x200f, {"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", 0x1000}}, 0x1006) 14m14.463458833s ago: executing program 5 (id=530): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[], 0x114}}, 0x8080) 14m13.331288045s ago: executing program 5 (id=533): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @rand_addr=0x64010102}, {0x0, @random="9f444415c302"}, 0xffffff6f, {0x2, 0x0, @empty}, 'batadv_slave_1\x00'}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240)="a7a9096677328eaf531b94f25dec2b026c682ee9567346f0398a11de688f30a6aa4e51cf2f72fdcd38c50a9230bb18c9833f9acb18b39aa9f328830be0bd3ec19e439d0f39c98517ca78169f0193ca6f72", 0x51, 0x4000084, &(0x7f00000003c0)={0x11, 0x2, r3, 0x1, 0x7, 0x6, @random="7e0e31204973"}, 0x14) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0)=0x5, 0x4) socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xc5, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000080)=0x4, 0x4) sendmmsg$inet6(r1, &(0x7f0000004880)=[{{&(0x7f0000000380)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, '\x00', 0xa}, 0x9}, 0x1c, 0x0}}], 0x1, 0x0) r6 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbbf051"], 0x0) 14m11.37336795s ago: executing program 5 (id=538): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) dup(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xcb, 0x12d5f, 0x12d5c}}, 0x44) 14m9.195457191s ago: executing program 5 (id=544): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0x7, 0xfe, 0x401, 0x7, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r1}) 14m7.528491454s ago: executing program 5 (id=549): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 14m6.061881527s ago: executing program 38 (id=515): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 14m6.038376195s ago: executing program 5 (id=553): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x2, 0x2, 0x1, {0xa, 0x4e22, 0x0, @local, 0x5}}}, 0x3a) socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='stat\x00') lseek(r3, 0xc1e, 0x0) 13m50.689352824s ago: executing program 39 (id=553): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) munmap(&(0x7f0000ff2000/0x2000)=nil, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x2, 0x2, 0x1, {0xa, 0x4e22, 0x0, @local, 0x5}}}, 0x3a) socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='stat\x00') lseek(r3, 0xc1e, 0x0) 12m57.44327673s ago: executing program 9 (id=659): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/67, 0x0, 0x166676000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000500)=""/58, 0x6000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000d80)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) 12m56.755424177s ago: executing program 9 (id=662): ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x200) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(0xffffffffffffffff, &(0x7f00000002c0)='%', 0x300000, 0x241, 0x0, 0x0) 12m56.407821416s ago: executing program 9 (id=663): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="18010000100003052dbd70000000000000000000", @ANYRES32=0x0, @ANYRES32=r1], 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 12m55.507053676s ago: executing program 9 (id=666): syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x20c00) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x70, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffddd, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x0, 0x3a, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) msgsnd(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB], 0x54, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) r2 = gettid() r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000080), 0x10) listen(r3, 0x0) accept4$llc(r3, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 12m53.710464919s ago: executing program 9 (id=672): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 12m44.574534896s ago: executing program 9 (id=683): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = gettid() tkill(r0, 0x12) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = io_uring_setup(0x320c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 12m28.246196175s ago: executing program 40 (id=683): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = gettid() tkill(r0, 0x12) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = io_uring_setup(0x320c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 7m32.670986694s ago: executing program 4 (id=1347): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r0, 0x0, 0x0) 7m30.673382896s ago: executing program 4 (id=1352): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x88}, 0x0) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)="01", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, 0x0) 7m29.799622709s ago: executing program 4 (id=1355): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x49, 0x2, 0x0, "bc3e099e0066055ac9086a00090089ee8e00"}) 7m28.998615549s ago: executing program 4 (id=1356): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000080)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 7m27.517526455s ago: executing program 4 (id=1360): socket(0x2, 0x80805, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) close(r0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x20008040) 7m26.388147197s ago: executing program 4 (id=1365): creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) write(r2, &(0x7f0000000040)='\a\x00\x00', 0x3) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, 0x0) r4 = dup(r1) r5 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0xa, [{}, {0x4}, {0x9}]}]}}, &(0x7f0000000f40)=""/4080, 0x3e, 0xff0, 0x1, 0x3, 0x0, @void, @value}, 0x28) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x4e64, @multicast1}}}, 0x88) getsockopt$inet_buf(r5, 0x0, 0x30, 0x0, &(0x7f0000001000)) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c6bf1f2e5027579d049d5ed7acd7c861e7ab2a606abb370566426f4c0b7cf9128febab84f27373ed466b2f0d73c9c6165f2d25016b61b7d6637bca3aacd36c9190d47e615d3f0b6a7f5590d7615919c970ade4f98a16ced4c88a5f8ca9f7bc00251549f263a45bb07a91bd0df69734ba84305bbc48e17384262d5ca88477d00000000000000cf082b624fcfb45f825a35aa16c7"]) truncate(&(0x7f00000002c0)='./file0\x00', 0x9) open(&(0x7f0000000340)='./file0\x00', 0x1c3e40, 0x40) 7m10.811678515s ago: executing program 41 (id=1365): creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) write(r2, &(0x7f0000000040)='\a\x00\x00', 0x3) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, 0x0) r4 = dup(r1) r5 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0xa, [{}, {0x4}, {0x9}]}]}}, &(0x7f0000000f40)=""/4080, 0x3e, 0xff0, 0x1, 0x3, 0x0, @void, @value}, 0x28) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000000)={0x6, {{0x2, 0x4e64, @multicast1}}}, 0x88) getsockopt$inet_buf(r5, 0x0, 0x30, 0x0, &(0x7f0000001000)) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c6bf1f2e5027579d049d5ed7acd7c861e7ab2a606abb370566426f4c0b7cf9128febab84f27373ed466b2f0d73c9c6165f2d25016b61b7d6637bca3aacd36c9190d47e615d3f0b6a7f5590d7615919c970ade4f98a16ced4c88a5f8ca9f7bc00251549f263a45bb07a91bd0df69734ba84305bbc48e17384262d5ca88477d00000000000000cf082b624fcfb45f825a35aa16c7"]) truncate(&(0x7f00000002c0)='./file0\x00', 0x9) open(&(0x7f0000000340)='./file0\x00', 0x1c3e40, 0x40) 4m50.503349139s ago: executing program 3 (id=1639): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 4m42.991400222s ago: executing program 3 (id=1648): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r0, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) 4m35.062691027s ago: executing program 3 (id=1653): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @rand_addr=0x64010102}, {0x0, @random="9f444415c302"}, 0xffffff6f, {0x2, 0x0, @empty}, 'batadv_slave_1\x00'}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240), 0x0, 0x4000084, &(0x7f00000003c0)={0x11, 0x2, r3, 0x1, 0x7, 0x6, @random="7e0e31204973"}, 0x14) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0)=0x5, 0x4) socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xc5, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000080)=0x4, 0x4) sendmmsg$inet6(r1, &(0x7f0000004880)=[{{&(0x7f0000000380)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, '\x00', 0xa}, 0x9}, 0x1c, 0x0}}], 0x1, 0x0) r6 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x3a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbbf051"], 0x0) socket(0x840000000002, 0x3, 0xff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair(0x28, 0x1, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r10, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getaddr={0x3c, 0x16, 0x4, 0x70bd28, 0x25dfdbfb, {0xa, 0x1f, 0x81, 0xff, r7}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_FLAGS={0x8, 0x8, 0x202}, @IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1f}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24000004) setsockopt$sock_attach_bpf(r8, 0x10f, 0x82, &(0x7f0000000180), 0x17e) flock(r9, 0xa) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4m33.191287123s ago: executing program 3 (id=1657): creat(&(0x7f0000000080)='./bus\x00', 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0xc201, &(0x7f0000000140)=ANY=[@ANYBLOB="00dde689531d8d52b3a20eed958c88ce2cd824e524638fb555e11b1efd64be80c985fde21180aeb7233493b590fa064417399367f12c04ebe71cdae5980d90ba3a25e5b30c69ab4af43b8a4147c0d08a1f03f67aaa5379d1ff7a938dbd67aa4930540a"], 0xfe, 0x551d, &(0x7f00000079c0)="$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") 4m29.129616265s ago: executing program 3 (id=1675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000018000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='sys_enter\x00', r1}, 0x10) fremovexattr(0xffffffffffffffff, 0x0) 4m28.13015673s ago: executing program 3 (id=1677): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r4, 0x0, 0x7fffffff) 4m12.935975677s ago: executing program 42 (id=1677): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r4, 0x0, 0x7fffffff) 3m23.882692063s ago: executing program 1 (id=1745): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) close(r0) 3m20.96977745s ago: executing program 1 (id=1747): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2) socket(0x10, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) socket$igmp6(0xa, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) socket$kcm(0x2, 0xa, 0x2) epoll_create1(0x80000) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 3m14.469212447s ago: executing program 1 (id=1751): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x244, 0x30, 0x800, 0x70b52d, 0x25dfdbff, {}, [{0x230, 0x1, [@m_gact={0xb8, 0x3, 0x0, 0x0, {{0x9}, {0x4}, {0x89, 0x6, "6df9a3ff45af6728f15b399ae1e6c602b6fdc9641eb649419ed32e608a2f859ccdf40eef7eacae75151807a3f7b8ecded072ef88f4489c0d072daf9cdc0a1d651b2533f0275e191dc4ed2a0098a62051d98c633efc53bfb7b1971e5917acf7ad01a479f12d119916c688f7e477836bae70c06e0d3887dd9672445a63e29820734e42be66fd"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_vlan={0x120, 0xd, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x40, 0xffffffffffffffff, 0x7, 0xfffffffa}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x1, 0x7, 0x228000, 0x5}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0xa9, 0x6, "a0c2bbb59630dd69c8e8225426ab221055f763b5147afa1560de2b861f8b24ea45e2ac7064017c5b5200f0e0418940015006562c9c04a6e77bfb89af64efb0d53a479d7a9a681879e2de2428e90d7f2ab1eec74a59c3d5f641a8e327701c4386030c2a2cc2aeabf004fbca31f2e48d69725252c26227a7e4bd39586075c6b9308213936eb67b92b715ebf25647d2720e4c4c74485838cee09ca3fa73460257d6bf91cb3e28"}, {0xc, 0x7, {0x0, 0xbe6c4a687f3af6cc}}, {0xc, 0x8, {0x11b520613f9bf6d1, 0x1}}}}, @m_gact={0x54, 0xb, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xfff, 0x1, 0x7fff, 0xa}}]}, {0xf, 0x6, "7e6c2e2bf82e0b0d455cae"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x3}}}}]}]}, 0x244}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3m13.670095334s ago: executing program 1 (id=1752): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x10, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000210001"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x1, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xfe}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x44}, 0x1, 0x0, 0x0, 0x48001}, 0x40000) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x4) 3m8.324270249s ago: executing program 1 (id=1759): socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_MARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x10000) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1}, 0x0) 2m57.620925961s ago: executing program 1 (id=1764): open(0x0, 0x60840, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1004410, &(0x7f0000000400), 0x84, 0x46e, &(0x7f0000000900)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIUqihNRFCbDWGq+EvUI8m/gWe9GLUk8Yr3o0JMVxED2bM7M7A0m7L/uh2i/v5JNO+N/N23vvOzNt9M283gL41kv9JInZGxNWIGKplby8wUvt34/ql6b+vX5pOIsve+jOplvvr+qXpsmj5uh1FZjSNSD9NYn+DeucvXDwzNTs7c77Ijy+cfX98/sLF50+fnTo1c2rm3OTRo0cOT7z04uQLzYQxeKcCu/K27vto7sDeY+9ceWP6+JV3f/w6b+/OYnt9HDXDzdS7ppEYuf1Y1nmq471vLrvq0slADxtCSyoRMVB0oKsxFJW4dfKG4vVPeto4oKuyLMu2rlhbKRNL2U2LGfB/k0SvWwD0RvlBn9//lkts28ABSI9de6V2A5THfaNYalsGIi3KDC67v11PIxFxfOmfz/MlGj6HAABYX9/m45/nlo3/qtJ4sK7cvcXc0HBE3BcRuyPi/ojYExEPRFTLPhQRD7dY/8iy/Mrxzy9dHY3m47+Xi7mt28d/5egvhitFblc1/sHk5OnZmUPFMRmNwa15fmKNOr577dfPqokGs1T14798yesvx4JFO/4YWPaA7sTUwlSncZeufRyxb6BR/MnNmYAkIvZGxL429p8fs9PPfHVgte13jn8N6zDPlH0Z8XTt/C/FsvhLydrzk+P3xOzMofHyqljpp58vv7la/R3Fvw7y87+94fV/M/7hpH6+dr71Oi7/lq16T9Pu9b8lebua3lKs+3BqYeH8RMSWZGnl+slbry3zZfk8/tGDjfv/7oh/vyhetz8i8ov4kYh4NCIeK9r+eEQ8EREH14j/h1effK/9+Lsrj/9ES+d/jUQaDTdVznz/zWr1N3f+j1RTo8WaZt7/7tDSDq5mAAAAuPvUvgOfpGPFM86dkaZjY7Xv8O+J7ens3PzCsyfnPjh3ovZd+eEYTMsnXUN1z0MnimfDZX5yWf5w9blxlmXZtmp+bHputltz6kBzdqzS/3O/V3rdOqDrWppHW+0XbcBdye81oX/p/9C/GvT/a71oB7Cxtvn8h77WqP8vRtzoQVOADebzH/qX/g/9S/+H/qX/Q19q6kfybSR2H+vWnjdRIlusHcSO9lPpdRRtJiLdFM1oL5FujmbUElsjotnCi51dbC0kev3OBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsD7+CwAA//+VhOcD") 2m42.384838478s ago: executing program 43 (id=1764): open(0x0, 0x60840, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1004410, &(0x7f0000000400), 0x84, 0x46e, &(0x7f0000000900)="$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") 13.554821021s ago: executing program 2 (id=2052): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 12.562073925s ago: executing program 6 (id=2055): truncate(&(0x7f0000000000)='./file0\x00', 0x1) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x408040, 0x20, 0x20}, 0x18) name_to_handle_at(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0xbc36, 0x1ff, 0xc, 0x800, 0x790}}, &(0x7f0000000140), 0x200) socket$nl_route(0x10, 0x3, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300), &(0x7f00000004c0)={[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', 0x0, 0x0]}) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000540)=0x7fffffff) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000005c0)=0x1c, 0x0) recvfrom$inet6(r2, &(0x7f0000000600)=""/135, 0x87, 0x12041, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0xc0, 0x3, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0x39, 0xc, "fbb7b5a98daeff94c08f7baf5659c5bbc7c390e1d5771ad09be6ecdecc63632db05de918236ff7f0368edd9b2bf8fbd50793daca78"}, @NFTA_CHAIN_HOOK={0x68, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6908766c}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5b50b9b2}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'hsr0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x108, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x17, 0x7, 0x1, 0x0, "e9eff925f1af3113732810bff45f8239d0e8cc"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xa01}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x884c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xe0db}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1f0}}, 0x24000874) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000980)={'ip6gre0\x00', 0x0, 0x4, 0xa, 0x8, 0x10000, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x8000, 0x8, 0xa, 0x2}}) r4 = dup(r1) getsockopt$rose(r4, 0x104, 0x4, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) r5 = socket$isdn_base(0x22, 0x3, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000b00), 0x40, 0x0) write$bt_hci(r6, &(0x7f0000000b40)={0x1, @le_create_cis={{0x2064, 0x1d}, {0x7, [{0x4, 0x3}, {0x7}, {0x7, 0x2fa}, {0x8, 0x3}, {0x11, 0x7}, {0x5, 0x1}, {0xf, 0x8001}]}}}, 0x21) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x100010, r6, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000001, 0x11, r6, 0x10000000) r9 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000bc0)=@IORING_OP_FILES_UPDATE={0x14, 0x30, 0x0, 0x0, 0x9, &(0x7f0000000b80)=[r5, r3, r1, r9, r5, r3], 0x6, 0x0, 0x1, {0x0, r10}}) lsetxattr$security_capability(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), &(0x7f0000000c80)=@v1={0x1000000, [{0x401}]}, 0xc, 0x2) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r4) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xf4, r11, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0xfc4, 0xe, 0x1, 0x1, 0x4]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff0}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x2, 0x800, 0x81]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x400}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x18}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80000000}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x52a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1c}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x7, 0x0, 0x9, 0x5, 0x8d0, 0x4, 0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5df6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2e}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x10004084}, 0x80) r12 = syz_usbip_server_init(0x3) pread64(r12, &(0x7f0000000ec0)=""/65, 0x41, 0x1d22) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000f40)) 10.400335464s ago: executing program 6 (id=2058): r0 = socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) unshare(0x24060400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x18208e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000009c0)=""/151, 0x97}, {&(0x7f00000000c0)=""/190, 0xbe}, {&(0x7f0000000200)=""/134, 0x86}, {&(0x7f0000000340)=""/190, 0xbe}, {&(0x7f0000001640)=""/4073, 0xfe9}], 0x5}, 0x4}], 0x1, 0x40000000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) capset(&(0x7f0000000400)={0x20071026}, &(0x7f0000000040)={0x200004, 0x200000, 0x0, 0x0, 0x8, 0x7}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000001800010000000000000000000a03000000000000000000000c001600080001000500000008000400", @ANYRES32=r4, @ANYBLOB="0600150007"], 0x38}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socket$netlink(0x10, 0x3, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000240)=[{{0x2}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x1, 0x1}}], 0x10) 7.586935959s ago: executing program 7 (id=2063): socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x26004080) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="4604", @ANYBLOB], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_io_uring_setup(0x6ba1, &(0x7f00000005c0)={0x0, 0x2005097, 0x4, 0x81, 0x244}, &(0x7f0000000580)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400455668ae138e75d49d21ea2dccde3818b806c880bdbae18c9eb833ae0e9962d29ee04bebe9155fcc6254dd15e482ef46c5785032254f87285529dcaac317cbc09fd112ee25a11529a6acfaab3f6844e13ea551e1a856a572b23f0285dc3c5e2755de02cb2b8d12daa0bd14e31b927d2560e9116ea4a4a004fe2dd75362ed2ffa3122a64d21120d818ff36ad854f569f3994dfc8ac345fb7b1bbdb133e8285f238d900d2c71f70fb9b8f836aa5979a7f1f8c982823af9be218957502ca674e259b45946f381dc7679217d23b62c987abf57623d61ef4ade23ea1fbb5c9ca62b2a01a1e566b6b0", @ANYRES16=r8, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="08002600850900000a001800030303030303000004005a80"], 0x34}}, 0x40840) io_uring_enter(r4, 0x568, 0x0, 0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000380), 0xb, 0x101601) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}]}]}], {0x14, 0x10}}, 0xec}}, 0x0) 7.452829526s ago: executing program 2 (id=2064): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 7.308739043s ago: executing program 6 (id=2065): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 7.250042176s ago: executing program 0 (id=2066): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001380), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000013c0)={{0x1, 0x0, 0x0, 0x0, 0x6}}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) 6.950507535s ago: executing program 2 (id=2067): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfb84e000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$inet6(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000010c0)="bf", 0x1}], 0x1}, 0x0) shutdown(r1, 0x1) 6.122879762s ago: executing program 6 (id=2069): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x60000) r1 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006241a0000000c241b48000500000500800509058103000200000009040100"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) accept$unix(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prlimit64(0x0, 0xe, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x10010) 6.068229456s ago: executing program 7 (id=2070): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040600, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.607280684s ago: executing program 7 (id=2071): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) 4.710062247s ago: executing program 0 (id=2072): r0 = socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) unshare(0x24060400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x18208e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000009c0)=""/151, 0x97}, {&(0x7f00000000c0)=""/190, 0xbe}, {&(0x7f0000000200)=""/134, 0x86}, {&(0x7f0000000340)=""/190, 0xbe}, {&(0x7f0000001640)=""/4073, 0xfe9}], 0x5}, 0x4}], 0x1, 0x40000000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) capset(&(0x7f0000000400)={0x20071026}, &(0x7f0000000040)={0x200004, 0x200000, 0x0, 0x0, 0x8, 0x7}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000001800010000000000000000000a03000000000000000000000c001600080001000500000008000400", @ANYRES32=r4, @ANYBLOB="0600150007"], 0x38}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000240)=[{{0x2}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x1, 0x1}}], 0x10) 4.618845891s ago: executing program 7 (id=2073): r0 = socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) unshare(0x24060400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x18208e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ptrace(0x10, 0x0) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000009c0)=""/151, 0x97}, {&(0x7f00000000c0)=""/190, 0xbe}, {&(0x7f0000000200)=""/134, 0x86}, {&(0x7f0000000340)=""/190, 0xbe}, {&(0x7f0000001640)=""/4073, 0xfe9}], 0x5}, 0x4}], 0x1, 0x40000000, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) capset(&(0x7f0000000400)={0x20071026}, &(0x7f0000000040)={0x200004, 0x200000, 0x0, 0x0, 0x8, 0x7}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000001800010000000000000000000a03000000000000000000000c001600080001000500000008000400", @ANYRES32=r3, @ANYBLOB="0600150007"], 0x38}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r5, 0x4b66, &(0x7f0000000000)) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000240)=[{{0x2}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x1, 0x1}}], 0x10) 4.569518755s ago: executing program 8 (id=2074): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x20000, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r5, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) writev(r1, 0x0, 0x0) 4.363324953s ago: executing program 2 (id=2075): unshare(0x2a020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x7fff, 0x100000000, 0x1) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x4c80, &(0x7f0000005780)={0x0, 0x0, "ac563d05d310141258e0a2a06783eb29e46b1fac57461914278705b6afba000000000000536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000180000000c0996d78e489eef651d35ca509de7cf52e7578e9ce37710000001000032936e283ae72a63729b333fc1ee6b15fb899a2072631f76cd0a59b1709500000000000000c0df2d95b9c3fbccef0111f1fc6db466c73268074c38df1f6bf2cc88aa61ffffffff2b887e04e671d55f281047000002000000000003000000000100000039fb00", "2fc7eecad58f368bf3ba45a6f7874bf0f0a2e2d039d23b33645c7a714b200d1ec427e16f2d87c3a7f0a258b1856e10dbfadd1f9f5b294c68af413bb746e6b0803177028065618aa080c2ca8efe18fbb6c85459e9ff5c1aa9c17498a05220b09c2d859832bf5ae846009f6a415023b9a7110bda56f514841bf04e54bf592d28107037e86729ff5789dd40d9180160cf72a92609650dc97d806d75425c3cbabb3e8f59afcd807086dc9a87048f229a1c8b183c2077b18922f8dcade6cbf835b715887e9a20c69f14468fb321e017c8a2361f5300617d2ff15e5e2df6b8fa425461dc9c997020beed571b01b0ae899a7a21fe7f9dce8b2ff0374cde255fe2cd3444fa236242d0a976de3ceed2abb0bcb9e4580db4bf248fa20f27dc7c9a953b420f032e6fe0de2a657b7903f0a3d4d67908255b1ac3274313a683ad8a328816336d20dbfdc9f262073dade576891220dd05e0cb6e97bb433637adb6f42c3a040a0089d9a86b42dffeba614460c184bd405cf3749fad5a47609eeb5c48f0222ea459597a0fa855c9d6d789ed17235c6cbf62757d54c99a03b777b7af6058a33b32aa49973625747e0ff1d3c4898a1ea7e68807d9be2b9ca09de22790441964131b1e6dbf633f06c23ddb02736a741396cb1c3dbe49eabdad6f662ee642be86560e24bf2578bc93119d19b446587a8455b445e1cbcb86848331888a8a8adb0836628a73c9c41f8501ae67caa0165fca251674fcfd5f78415a4497519f0d4a79ba166a55721c4db05be7155ae7bca92f4fff5cdcf2d581d2da972ee240355984210e5927904ee74bd15da96d23e0b5bb07ce1adf2683032e8ae4dd9dd6f5bd841ef30ccdce954426f1cf29f2f35decb485f4faa36caae23e7d136317dbb6ace192dc0484d5e3cc341dee5041430dcd5f320a9f3679196bd2a2348619c4a55e090cecf0da78fdba2b25a3373a813d5e719ef2fbfea38035828e28d1666b64dbabce44140e9f0c7e8685e69d8192d1953c1dba2c2a471658538ade2e295732c4a23ca63b54252673ea15374da608ff431e56c9b74bc88b858511910a8ff6a294354093449e90994cf70a60cb108e19ad7625c27bc7934076a8a8fa8a14b06b0e94813a9ff3961e251856a0d34b728025121cf045be55d3997ca1ba4643509fb7eb84b1dbf97663f63fbf32b32f92eebff4ff420cd8c45fda163c09aa879283c282ef4bc93d416854ada56921cc6f82a67a3d024c1a828eb8d4c901f6066f8df327f694f828124d880da4f98c66087f8a825b9b01609f980a0f48c471fdcb7696e493a02a7b34420ccddae0e26b8f4db77ee712ccbc480fb8fe625d51ee2ead77637b9f7bd4a70fc21581498915c72ce999eb2a3888ad4c66c5e623d2f9c983f4c3e17714a63af06c222a62671b407a8f30619f1cb8a9efc177a18ceefc0760a27f5001124e81eeff04950364cf1881c03c1cc99b1e5dbc36ec94ed875c54a87dc19143303b2ad34738e683fdfe7e257fa5609e785e3c81dcd387bccfba8d31077b2140b06a361167ab1abb6e8c9b6e7b8918c992a7c4fce8797048bc3eba6ef7f65789b6d59ce4e4dcc5a3d44b9ef24de8996347c79cbaaaaef13dbac1dab9fb6090a757be36cf3e15bcde5bddc318bd42265371ebfe941f63a5d2dbcd9c6103ab91b5c292ae86e4dc6df13194dd81319db2ad7f51fe377196b2b87db9614cd1d572f3df9b518d36aacd8c4f454c1a61fd587642e87e8a4d4029e46064cc730e7b75efae0e6b798184b33765160696e327ce80ad8ec0a5c20e57b07b2cc19f849b1c527994b6631ae61bd9c6703966d141714bffb6cfb7708e2c6669cf33f42c8e8130d73a2bdb42bbd3316e1a2deae59b7bbe6e77518326d11714ac543143c8bc4c9cf39d84b06bf10ad463d7b9d14f5d44d98c78f5bc96793c254a612e300065a0e568234110f4f3d93b584b5767e41cb9d2514a16138d8dd650b885b6ac87ce233957dee5c1d2004fc5882d41ffcc1751d565ad92d04ce0cf0221ac7d7a0441f4024ce74ff4d3df9559026ebb5b5602ee9e8d87f1899d20e61879c417a00321e87ceac1b952e51700d384ed3b07c70fd8be0d61290b6100abc393bfd33f425892509e55350797f139b64b68e357f66a1776504ea67689ca482534308c9c7b76c7f9fbe1d1cc739dee391c0b7a781d6bade90ec2a46f617d436cc7f51eb1c94de092ccf1d7b57c31fc1c8e18b9bab9858792a129dfa62b379d22aec6129065a867bda550337e30edcfc0732a5b69559c8d45270d7df9d06b385c51a05e57280d66f5c02c7ca1f463e6ef6d1d2e3b04c6df77fd88e06197acf4d5287660e90d7b1d5d4b7410d44e36aa3652e86d9b97935fc19459bd155e497bee58013f9cbef97b669b3d8fbd77a286a50b86aa11e4376e44275297bcdcb252ad8ca4742a6cd66563c4ba6318b765899d853043877b6400d654ba955fa6376857b6307d443168211dde06a156d8908269ab033c9de9546b3cc41583e7cae7038720d909fed58b52f7bc7aba12b1be3a2e23474af919426326556cf37d584c4e905f8d84604fdb192f0993b213107fae21c323d69f3113d2f5d6371a49a40b98030868c824ff0916556044bc32ce80497c46c01e254e2accfd01aeabf18c545b907cd5fd0b00a82c42e644690ad1099dc3ec5e0df8c5d783ec93e6712857137eee4d06762fa12233d1ba4e7bc597d970a434ce615ffe432f6289bd297f7973f29e8460391c44cab29f2e21f639e7aea6c0c7e57a35585573b88ce6a2beed7807278b73a9eb21d82a477f7f9eef24c1cf0b7fddee8b3dfa633cb37c3f1ac53f34acd6dc0e29494d644f9bdce8d65e734fa52d1cdd0f147d48f02000b31fd0dcd2766cf8ea8b92bd340195c6833e4320eaf125ad61fa8772ac380f363fd2b3b5df23aa0e08034cfe5963fada592e851f5b274e6defae6cb1dbc5f29c52855352d8417262780ba7c8040cac21a0fda09a76af7a58b66f9a89d35f7a957548cf49f7117542a2f0f2c1c8bb371eba256aaac009798a97a27a62256fafad3988bb9b577eb00c06d28a91c85aa20f176e44e52b37a8068bfec1434c1277e68619e8459f83359976c81ca49462e1b9abf83fed9d4e08d9fdc6626bd73099ff8c2e95384e0517eff3e02a1882ef5a804989ad5a9536628f3989631f610ba9172c92c44c372ff48d590be9896e741012b3ea511727a1476d706debdea7216e1bf2461fda61a7bc6db99c098fe4e32eafbe2ac15782ddfd1609cec300015b542c835ff195cd779699d8ced1edd571f3734ef6373c526553ee9684674cd5ae1e8f390065ed761257cbb120168dcebacc94f22a15d6bc8444afff61601305c9212f086ae5a322968983568bfaed808fd935a8260709781a58bf3ce77e94912e0361c149076abd1aa186ac38e65d879e92bc58bc7adde9339f712b8a07d798ad573318559a31c1e64354bfc5f3e9a195118cab384d9b7d192305e5fe6e8eaebd7403095e3833fb3a6425e7b8b7ae0515d5cba8a19c2b49e33cd9bedbac96f01c5a24ddc36b35f16cfd55ec584f18ecf7313a812d5d44b6ac02808ab4389e7ed6426454d9f4c69a288d36a211f27c4770cad16daba3c97e0d51a7012ba7ee4881daf21ca720c0a14d54852516c8342989ed328d13366be829416218e0d2cc9c708a06669873b4a7a32e35dbc59d5f7eeebb7fb3c307e84c287c2e3a921e94149a90a56e4c8bcf9548442961c388ba8cb9e2f881582131cce0898c86ad57795a5984ca55e6159bdfab2f7c1a925301eb6a33bf33baf957f18d648b55e0c613db371343cc7ce89f91423629e644b286bba4d8b4cbb116e30da5f7a4bba8606093fe5d6bad8bc5f98fb1ac476bf8724a8008a725ed3bed86c763f2eac7d77f1ef9a96702e13ec5080bb82606741e08fde37aceb1dd32c11afa92be85ff46ec2010ce17d5cf92e91243ccb1070000002a746ca1f1135b1b0638ffe19c8b31644a08f9f1990685e0f458f096daae910e9f36a83a8ba01dde2b5d0d3097b1cf03be7aee0a8c7c4c8672d45c6310e7d2e5558143ad9e79a9751b8ac54a3e86fdfd9320ef69c7130460e259462be21db94fcbd3181903130f3f982f4c8011bfe62bd5903ad8713281be0fa8de38553ea6c3e566152518bd80fbeb5863f0de7c7cf26606b48b63c89d9f9c798816e7e1e1dbb3946a1048ebf383f117ac9bf565a277086fd9cc0250dd22cf1d2c3cf58fa227f4f2c201be2df79230b6a95333f3a3ded0d11f9b647da9b4cb70fa02631552df57b7a6009b1b36d8f7c9f2fc7ac53912f29e79fdb57acecd431adf2dca1c0e7d31d7ff38ce7b3089416d9ab4f7474f1b68141228d4350ad7541676caf115e6c4eeecc706e0268c2eda740cce7a22e1090fb0216608a13c50316ee056414d0dfce99ab3f9c4619df20d7e0c254c3e9a9717f140b1a4ecdba1ca5ce3bb252083a69bb107338184f55d064c912745aa81588de2299fb9f77201c5ded7cbf572b64c0d6d300344226355d1a4cb8088e43780e01e190e9b877ba14431d115296e31c2cc0266c0df82da2530ac1e094cdfee42fcfdb8ee5d03c251d24d5b0fefafa7b9c2a2e73a814e768d57a5429372dce6266dc547a4c93a05dece1e7601a658d4855843db66ba8ecae9cd1703d66a3aff1beabe77c0ce96772d570c73f88d028eb8716dcb5e49792b39f1a5a4275a4f83d8ae2ea8883bbfaa42050392da86d7a4a22835553cd2fdcd0cca630ad003c4a15ae0b7a7cee875b5a08f0ef70d86187054260001c9698419bf1569b1802439cd3fe320d9272b853e7b34a322a5fbade5cd3ad0e1c4b07d111981494215d3b82c2fe8a7697052a3b7b1ef3fb22d5e33e57c8d422b5e3dc9cf1a5df5401559c56610f44a4e409b12aa82bf661c17a2bb76e469583531f782b55da4eabbb68cb39bf32844398fe0ffb79e4c95e3e3c3ed3e9ac304cf1980b7cde8fcf76966cca196748e4ad7a02debd6ccc4a3e9b8adaa7dc668a76cbd137b2e6fbc673900000100000000009bf5ed16d5f5818535802fa7627a7d352f4216ba3f84481394c0500b7aea67e838d5dd0422eeb940ad42546e1f3c2cd85c53abbaada51b5571323d7ea53d436c2d349befca87909c1dc2a23d2db53ecc272b80896b65fa0cad8854e6b36e052ecbe677024b9614a180fc54c20fac7ed4d16e7ba17a368f0a00a036d23ae4b19ad3d99642ff054850233b60e706a4f575e49234acc76211a5bace9b8417eb6d986dab4bc6b8b510ee0477f6b8738f00709b7f35aac1730017c0037e5c40404d145b527a29500fab1e3c00"}) openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x414080, 0x18d) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0xff7f, 0x0, {0x0, 0x0, 0x0, r3, 0x40000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x60044, 0x42242}}}}}}]}, 0x48}}, 0x0) 3.730002242s ago: executing program 8 (id=2076): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) 3.336399468s ago: executing program 0 (id=2077): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) 3.287238263s ago: executing program 7 (id=2078): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x200000, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f00000017c0)="$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") r5 = accept4(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000200)=0x80, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000000300)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x3dd, &(0x7f00000008c0)="$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") syz_emit_ethernet(0x289, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r8, 0xffffffffffffffff, 0x2d, 0x2000000, @val=@netfilter={0xa, 0x0, 0xfffffed4, 0x1}}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000180)={0x7, 0x9a66, 0x5, 0x1}, 0x10) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$tty1(0xc, 0x4, 0x4) close_range(r9, 0xffffffffffffffff, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1000, &(0x7f0000000600)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r10, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r11, 0xd4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r10, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r11}}, 0x18) 3.167328621s ago: executing program 2 (id=2079): unshare(0x2a020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x7fff, 0x100000000, 0x1) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x4c80, &(0x7f0000005780)={0x0, 0x0, "ac563d05d310141258e0a2a06783eb29e46b1fac57461914278705b6afba000000000000536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000180000000c0996d78e489eef651d35ca509de7cf52e7578e9ce37710000001000032936e283ae72a63729b333fc1ee6b15fb899a2072631f76cd0a59b1709500000000000000c0df2d95b9c3fbccef0111f1fc6db466c73268074c38df1f6bf2cc88aa61ffffffff2b887e04e671d55f281047000002000000000003000000000100000039fb00", "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"}) openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x414080, 0x18d) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 3.138624152s ago: executing program 8 (id=2080): socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x26004080) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="460400", @ANYBLOB], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_io_uring_setup(0x6ba1, &(0x7f00000005c0)={0x0, 0x2005097, 0x4, 0x81, 0x244}, &(0x7f0000000580)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400455668ae138e75d49d21ea2dccde3818b806c880bdbae18c9eb833ae0e9962d29ee04bebe9155fcc6254dd15e482ef46c5785032254f87285529dcaac317cbc09fd112ee25a11529a6acfaab3f6844e13ea551e1a856a572b23f0285dc3c5e2755de02cb2b8d12daa0bd14e31b927d2560e9116ea4a4a004fe2dd75362ed2ffa3122a64d21120d818ff36ad854f569f3994dfc8ac345fb7b1bbdb133e8285f238d900d2c71f70fb9b8f836aa5979a7f1f8c982823af9be218957502ca674e259b45946f381dc7679217d23b62c987abf57623d61ef4ade23ea1fbb5c9ca62b2a01a1e566b6b0", @ANYRES16=r8, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="08002600850900000a001800030303030303000004005a80"], 0x34}}, 0x40840) io_uring_enter(r4, 0x568, 0x0, 0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000380), 0xb, 0x101601) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}]}]}], {0x14, 0x10}}, 0xec}}, 0x0) 2.606588103s ago: executing program 0 (id=2081): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040600, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.369375254s ago: executing program 2 (id=2082): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001380), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000013c0)={{0x1, 0x0, 0x0, 0x0, 0x6}}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) 2.296405473s ago: executing program 8 (id=2083): sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0}, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 1.910983589s ago: executing program 0 (id=2084): truncate(&(0x7f0000000000)='./file0\x00', 0x1) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x408040, 0x20, 0x20}, 0x18) name_to_handle_at(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0xbc36, 0x1ff, 0xc, 0x800, 0x790}}, &(0x7f0000000140), 0x200) socket$nl_route(0x10, 0x3, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300), &(0x7f00000004c0)={[&(0x7f0000000340)='\x00', &(0x7f00000003c0)='./*{{$$#{.\x00', 0x0]}) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000540)=0x7fffffff) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000005c0)=0x1c, 0x0) recvfrom$inet6(r2, &(0x7f0000000600)=""/135, 0x87, 0x12041, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000940)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0xc0, 0x3, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0x39, 0xc, "fbb7b5a98daeff94c08f7baf5659c5bbc7c390e1d5771ad09be6ecdecc63632db05de918236ff7f0368edd9b2bf8fbd50793daca78"}, @NFTA_CHAIN_HOOK={0x68, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6908766c}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5b50b9b2}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'hsr0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELRULE={0x108, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x17, 0x7, 0x1, 0x0, "e9eff925f1af3113732810bff45f8239d0e8cc"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_RULE_COMPAT={0x54, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xa01}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x884c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xe0db}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1f0}}, 0x24000874) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000a00)={'syztnl0\x00', &(0x7f0000000980)={'ip6gre0\x00', 0x0, 0x4, 0xa, 0x8, 0x10000, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x8000, 0x8, 0xa, 0x2}}) r4 = dup(r1) getsockopt$rose(r4, 0x104, 0x4, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) r5 = socket$isdn_base(0x22, 0x3, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000b00), 0x40, 0x0) write$bt_hci(r6, &(0x7f0000000b40)={0x1, @le_create_cis={{0x2064, 0x1d}, {0x7, [{0x4, 0x3}, {0x7}, {0x7, 0x2fa}, {0x8, 0x3}, {0x11, 0x7}, {0x5, 0x1}, {0xf, 0x8001}]}}}, 0x21) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x100010, r6, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000001, 0x11, r6, 0x10000000) r9 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000bc0)=@IORING_OP_FILES_UPDATE={0x14, 0x30, 0x0, 0x0, 0x9, &(0x7f0000000b80)=[r5, r3, r1, r9, r5, r3], 0x6, 0x0, 0x1, {0x0, r10}}) lsetxattr$security_capability(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), &(0x7f0000000c80)=@v1={0x1000000, [{0x401}]}, 0xc, 0x2) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r4) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xf4, r11, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0xfc4, 0xe, 0x1, 0x1, 0x4]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff0}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x2, 0x800, 0x81]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x400}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x18}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80000000}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x52a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1c}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x7, 0x0, 0x9, 0x5, 0x8d0, 0x4, 0x5]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5df6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2e}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x10004084}, 0x80) r12 = syz_usbip_server_init(0x3) pread64(r12, &(0x7f0000000ec0)=""/65, 0x41, 0x1d22) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000f40)) 1.763116578s ago: executing program 8 (id=2085): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfb84e000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmsg$inet6(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000010c0)="bf", 0x1}], 0x1}, 0x0) shutdown(r1, 0x1) 1.28171929s ago: executing program 6 (id=2086): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_io_uring_submit(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) 1.168896933s ago: executing program 7 (id=2087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c00028005000100000000000800084000009503040010"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x18) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x8ffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000240)={[{@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5db, &(0x7f0000000940)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r9, 0x0, 0xee01) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x8004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) 178.731735ms ago: executing program 6 (id=2088): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x20000, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r5, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) writev(r1, 0x0, 0x0) 119.927162ms ago: executing program 8 (id=2089): unshare(0x2a020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x7fff, 0x100000000, 0x1) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x4c80, &(0x7f0000005780)={0x0, 0x0, "ac563d05d310141258e0a2a06783eb29e46b1fac57461914278705b6afba000000000000536dfdc9ce9c12d1207f8a3ad1dad7ed0fc16b2ccd00000000000000180000000c0996d78e489eef651d35ca509de7cf52e7578e9ce37710000001000032936e283ae72a63729b333fc1ee6b15fb899a2072631f76cd0a59b1709500000000000000c0df2d95b9c3fbccef0111f1fc6db466c73268074c38df1f6bf2cc88aa61ffffffff2b887e04e671d55f281047000002000000000003000000000100000039fb00", "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"}) openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x414080, 0x18d) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0x401, 0xff7f, 0x0, {0x0, 0x0, 0x0, r3, 0x40000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r3, 0x60044, 0x42242}}}}}}]}, 0x48}}, 0x0) 0s ago: executing program 0 (id=2090): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): : port 2(bridge_slave_1) entered disabled state [ 1019.193896][T11388] bridge_slave_1: entered allmulticast mode [ 1019.202841][T11388] bridge_slave_1: entered promiscuous mode [ 1020.194161][ T5082] Bluetooth: hci0: command tx timeout [ 1020.395340][T11388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.418401][T11388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.134146][T11450] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1407'. [ 1021.309822][T11388] team0: Port device team_slave_0 added [ 1021.357632][T11450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.441183][T11388] team0: Port device team_slave_1 added [ 1021.841487][T11388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.849223][T11388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.875995][T11388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.021649][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 1022.021727][ T29] audit: type=1326 audit(1734407961.777:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.7.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1022.052365][ T29] audit: type=1326 audit(1734407961.777:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.7.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1022.075297][ T29] audit: type=1326 audit(1734407961.797:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.7.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1022.098254][ T29] audit: type=1326 audit(1734407961.797:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.7.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1022.121261][ T29] audit: type=1326 audit(1734407961.797:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.7.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1022.144996][ T29] audit: type=1326 audit(1734407961.797:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.7.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1022.168009][ T29] audit: type=1326 audit(1734407961.817:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.7.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1022.190883][ T29] audit: type=1326 audit(1734407961.817:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.7.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1022.213732][ T29] audit: type=1326 audit(1734407961.817:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.7.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1022.237536][ T29] audit: type=1326 audit(1734407961.957:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11458 comm="syz.7.1409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1022.287327][T11388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.294873][T11388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.321322][T11388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.772105][T11461] loop7: detected capacity change from 0 to 164 [ 1022.924205][T11460] syz.7.1409: attempt to access beyond end of device [ 1022.924205][T11460] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 1022.939124][T11460] syz.7.1409: attempt to access beyond end of device [ 1022.939124][T11460] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1022.993615][T11388] hsr_slave_0: entered promiscuous mode [ 1023.143404][T11388] hsr_slave_1: entered promiscuous mode [ 1023.200203][T11388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1023.208401][T11388] Cannot create hsr debugfs directory [ 1023.974107][T11471] netlink: 'syz.6.1411': attribute type 61 has an invalid length. [ 1026.301856][T11486] IPVS: Scheduler module ip_vs_ not found [ 1026.906278][T11499] kvm: user requested TSC rate below hardware speed [ 1027.343341][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 1027.343420][ T29] audit: type=1326 audit(1734407967.097:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdb385d19 code=0x7ffc0000 [ 1027.373721][ T29] audit: type=1326 audit(1734407967.097:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f9fdb385d19 code=0x7ffc0000 [ 1027.396552][ T29] audit: type=1326 audit(1734407967.097:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdb385d19 code=0x7ffc0000 [ 1027.419494][ T29] audit: type=1326 audit(1734407967.097:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fdb385d19 code=0x7ffc0000 [ 1027.443114][ T29] audit: type=1326 audit(1734407967.097:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdb385d19 code=0x7ffc0000 [ 1027.466029][ T29] audit: type=1326 audit(1734407967.097:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fdb385d19 code=0x7ffc0000 [ 1027.489802][ T29] audit: type=1326 audit(1734407967.097:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdb385d19 code=0x7ffc0000 [ 1027.513201][ T29] audit: type=1326 audit(1734407967.097:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fdb385d19 code=0x7ffc0000 [ 1027.536186][ T29] audit: type=1326 audit(1734407967.097:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fdb385d19 code=0x7ffc0000 [ 1027.559167][ T29] audit: type=1326 audit(1734407967.097:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11508 comm="syz.3.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fdb385d19 code=0x7ffc0000 [ 1027.792199][T11509] dummy0: entered promiscuous mode [ 1027.798639][T11509] macvtap1: entered promiscuous mode [ 1027.805389][T11509] macvtap1: entered allmulticast mode [ 1027.811037][T11509] dummy0: entered allmulticast mode [ 1027.837406][T11510] loop3: detected capacity change from 0 to 164 [ 1027.866061][T11509] dummy0: left allmulticast mode [ 1027.875768][T11509] dummy0: left promiscuous mode [ 1027.966330][T11510] syz.3.1421: attempt to access beyond end of device [ 1027.966330][T11510] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 1027.983148][T11510] syz.3.1421: attempt to access beyond end of device [ 1027.983148][T11510] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1028.228329][T11388] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1028.485750][T11510] syz.3.1421: attempt to access beyond end of device [ 1028.485750][T11510] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1028.555638][T11510] syz.3.1421: attempt to access beyond end of device [ 1028.555638][T11510] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1028.570226][T11388] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1028.674717][T11388] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1028.797974][T11388] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1029.746904][T11531] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1427'. [ 1030.280932][T11388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.324844][T11388] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.415977][ T3991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.423743][ T3991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.441856][ T3991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.449646][ T3991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.546140][T11388] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1030.557558][T11388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1031.922333][T11388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1032.430939][T11388] veth0_vlan: entered promiscuous mode [ 1032.441996][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 1032.442072][ T29] audit: type=1326 audit(1734407972.207:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.8.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f9185d19 code=0x7ffc0000 [ 1032.565595][ T29] audit: type=1326 audit(1734407972.237:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.8.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f76f9185d19 code=0x7ffc0000 [ 1032.589640][ T29] audit: type=1326 audit(1734407972.237:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.8.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f9185d19 code=0x7ffc0000 [ 1032.613284][ T29] audit: type=1326 audit(1734407972.247:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.8.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76f9185d19 code=0x7ffc0000 [ 1032.636428][ T29] audit: type=1326 audit(1734407972.247:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.8.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f9185d19 code=0x7ffc0000 [ 1032.659397][ T29] audit: type=1326 audit(1734407972.247:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.8.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76f9185d19 code=0x7ffc0000 [ 1032.683175][ T29] audit: type=1326 audit(1734407972.247:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.8.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f9185d19 code=0x7ffc0000 [ 1032.706718][ T29] audit: type=1326 audit(1734407972.257:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.8.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76f9185d19 code=0x7ffc0000 [ 1032.729608][ T29] audit: type=1326 audit(1734407972.257:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.8.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76f9185d19 code=0x7ffc0000 [ 1032.752691][ T29] audit: type=1326 audit(1734407972.267:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11565 comm="syz.8.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76f9185d19 code=0x7ffc0000 [ 1032.774632][T11388] veth1_vlan: entered promiscuous mode [ 1033.163688][T11566] loop8: detected capacity change from 0 to 164 [ 1033.185605][T11571] overlayfs: failed to resolve './file0': -2 [ 1033.236253][T11388] veth0_macvtap: entered promiscuous mode [ 1033.238406][T11566] syz.8.1435: attempt to access beyond end of device [ 1033.238406][T11566] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 1033.257287][T11566] syz.8.1435: attempt to access beyond end of device [ 1033.257287][T11566] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1033.339894][T11388] veth1_macvtap: entered promiscuous mode [ 1033.619537][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.630502][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.640796][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.651564][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.661693][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.672514][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.682764][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1033.693488][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.708850][T11388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1034.227429][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.238356][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.248645][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.259412][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.269550][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.280434][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.291309][T11388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1034.302085][T11388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1034.316492][T11388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1034.610128][T11388] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.619698][T11388] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.630261][T11388] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.639469][T11388] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.871636][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1443'. [ 1037.516791][T11621] loop7: detected capacity change from 0 to 164 [ 1037.520791][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 1037.520876][ T29] audit: type=1326 audit(1734407977.207:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.7.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1037.554236][ T29] audit: type=1326 audit(1734407977.207:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.7.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1037.574545][T11624] overlayfs: failed to resolve './file0': -2 [ 1037.577911][ T29] audit: type=1326 audit(1734407977.207:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.7.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1037.607463][ T29] audit: type=1326 audit(1734407977.207:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.7.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1037.632226][ T29] audit: type=1326 audit(1734407977.207:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.7.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1037.658282][ T29] audit: type=1326 audit(1734407977.207:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.7.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1037.681941][ T29] audit: type=1326 audit(1734407977.207:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.7.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1037.706674][ T29] audit: type=1326 audit(1734407977.207:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.7.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1037.729522][ T29] audit: type=1326 audit(1734407977.217:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.7.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1037.752790][ T29] audit: type=1326 audit(1734407977.217:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11620 comm="syz.7.1449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1037.779605][ T6395] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1037.867595][T11621] syz.7.1449: attempt to access beyond end of device [ 1037.867595][T11621] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 1037.882069][T11621] syz.7.1449: attempt to access beyond end of device [ 1037.882069][T11621] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1038.188104][ T3763] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.243056][ T6395] usb 4-1: Using ep0 maxpacket: 16 [ 1038.306328][ T6395] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1038.316981][ T6395] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1038.325608][ T6395] usb 4-1: Product: syz [ 1038.330025][ T6395] usb 4-1: Manufacturer: syz [ 1038.334993][ T6395] usb 4-1: SerialNumber: syz [ 1038.420566][ T6395] usb 4-1: config 0 descriptor?? [ 1038.728326][ T3763] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.754845][ T6395] usb 4-1: USB disconnect, device number 13 [ 1038.897388][ T3763] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.773571][ T3763] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.033430][ T3763] bridge_slave_1: left allmulticast mode [ 1041.039359][ T3763] bridge_slave_1: left promiscuous mode [ 1041.046571][ T3763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.657746][T11669] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1458'. [ 1042.668671][T11669] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1458'. [ 1042.716375][ T3763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1042.784498][ T3763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1042.837115][ T3763] bond0 (unregistering): Released all slaves [ 1042.964725][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1457'. [ 1043.357900][T11675] overlayfs: failed to resolve './file0': -2 [ 1043.467242][ T3763] hsr_slave_0: left promiscuous mode [ 1043.501968][ T3763] hsr_slave_1: left promiscuous mode [ 1043.559798][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1043.567765][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1043.639099][ T3763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1043.647232][ T3763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1043.761305][ T3763] veth1_macvtap: left promiscuous mode [ 1043.767336][ T3763] veth0_macvtap: left promiscuous mode [ 1043.773798][ T3763] veth1_vlan: left promiscuous mode [ 1043.779367][ T3763] veth0_vlan: left promiscuous mode [ 1045.942130][T11699] process 'syz.8.1465' launched './file0' with NULL argv: empty string added [ 1046.190818][ T3763] team0 (unregistering): Port device team_slave_1 removed [ 1046.398442][ T3763] team0 (unregistering): Port device team_slave_0 removed [ 1050.548483][ T3763] IPVS: stop unused estimator thread 0... [ 1051.259360][ T4747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.267848][ T4747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.589863][ T3698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.598291][ T3698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.317619][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1470'. [ 1052.626876][T11729] overlayfs: failed to resolve './file0': -2 [ 1057.614978][T11771] loop8: detected capacity change from 0 to 256 [ 1057.790450][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1483'. [ 1058.023555][T11771] FAT-fs (loop8): Directory bread(block 64) failed [ 1058.030719][T11771] FAT-fs (loop8): Directory bread(block 65) failed [ 1058.040193][T11771] FAT-fs (loop8): Directory bread(block 66) failed [ 1058.047379][T11771] FAT-fs (loop8): Directory bread(block 67) failed [ 1058.054819][T11771] FAT-fs (loop8): Directory bread(block 68) failed [ 1058.061995][T11771] FAT-fs (loop8): Directory bread(block 69) failed [ 1058.069672][T11771] FAT-fs (loop8): Directory bread(block 70) failed [ 1058.081088][T11771] FAT-fs (loop8): Directory bread(block 71) failed [ 1058.089578][T11771] FAT-fs (loop8): Directory bread(block 72) failed [ 1058.096629][T11771] FAT-fs (loop8): Directory bread(block 73) failed [ 1058.718228][T11781] overlayfs: failed to resolve './file0': -2 [ 1061.479444][T11801] loop7: detected capacity change from 0 to 256 [ 1064.321277][T11801] FAT-fs (loop7): Directory bread(block 64) failed [ 1064.330825][T11801] FAT-fs (loop7): Directory bread(block 65) failed [ 1064.338746][T11801] FAT-fs (loop7): Directory bread(block 66) failed [ 1064.345717][T11801] FAT-fs (loop7): Directory bread(block 67) failed [ 1064.353460][T11801] FAT-fs (loop7): Directory bread(block 68) failed [ 1064.360192][T11801] FAT-fs (loop7): Directory bread(block 69) failed [ 1064.367157][T11801] FAT-fs (loop7): Directory bread(block 70) failed [ 1064.374136][T11801] FAT-fs (loop7): Directory bread(block 71) failed [ 1064.381059][T11801] FAT-fs (loop7): Directory bread(block 72) failed [ 1064.388105][T11801] FAT-fs (loop7): Directory bread(block 73) failed [ 1066.857205][T11826] loop7: detected capacity change from 0 to 2048 [ 1067.236754][T11826] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1068.160337][T11847] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1069.862776][ T2073] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1070.515382][ T2073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.526793][ T2073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.537044][ T2073] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1070.546496][ T2073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.552265][ T6448] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1070.870888][ T2073] usb 2-1: config 0 descriptor?? [ 1071.429045][ T2073] lenovo 0003:17EF:6047.0004: ignoring exceeding usage max [ 1071.707898][ T2073] lenovo 0003:17EF:6047.0004: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 1073.508118][ T2073] lenovo 0003:17EF:6047.0004: Failed to switch middle button: -71 [ 1073.997022][ T2073] lenovo 0003:17EF:6047.0004: Fn-lock setting failed: -71 [ 1074.348790][ T2073] lenovo 0003:17EF:6047.0004: Sensitivity setting failed: -71 [ 1074.375840][ T2073] usb 2-1: USB disconnect, device number 4 [ 1080.047535][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1084.464603][T11938] overlayfs: failed to resolve './file1': -2 [ 1097.575318][T12004] loop6: detected capacity change from 0 to 16 [ 1097.597271][T12004] erofs (device loop6): mounted with root inode @ nid 36. [ 1098.135973][T12004] erofs (device loop6): readahead error at folio 8 @ nid 36 [ 1098.145026][T12004] erofs (device loop6): readahead error at folio 6 @ nid 36 [ 1098.154046][T12004] erofs (device loop6): readahead error at folio 4 @ nid 36 [ 1098.161994][T12004] erofs (device loop6): invalid logical cluster 0 at nid 36 [ 1098.170213][T12004] erofs (device loop6): readahead error at folio 0 @ nid 36 [ 1098.178180][T12004] syz.6.1547: attempt to access beyond end of device [ 1098.178180][T12004] loop6: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1098.192793][T12004] syz.6.1547: attempt to access beyond end of device [ 1098.192793][T12004] loop6: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1098.207422][T12004] syz.6.1547: attempt to access beyond end of device [ 1098.207422][T12004] loop6: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 1098.224155][T12004] syz.6.1547: attempt to access beyond end of device [ 1098.224155][T12004] loop6: rw=524288, sector=720, nr_sectors = 24 limit=16 [ 1100.587057][T12037] loop1: detected capacity change from 0 to 8192 [ 1101.115037][T12051] loop8: detected capacity change from 0 to 512 [ 1101.128267][T12051] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1101.381575][T12051] EXT4-fs (loop8): 1 truncate cleaned up [ 1101.399856][T12051] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1102.662612][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 1102.662693][ T29] audit: type=1804 audit(1734408042.007:520): pid=12037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1557" name="/newroot/19/bus/bus" dev="loop1" ino=1048698 res=1 errno=0 [ 1102.691545][ T29] audit: type=1804 audit(1734408042.007:521): pid=12037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1557" name="/newroot/19/bus/bus" dev="loop1" ino=1048698 res=1 errno=0 [ 1104.556054][T12066] syz.8.1562 (pid 12066) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1109.826966][ T7031] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1111.219689][T12110] loop8: detected capacity change from 0 to 512 [ 1111.485224][T12110] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.8.1575: corrupted xattr block 95: invalid header [ 1111.501880][T12110] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1575: bg 0: block 7: invalid block bitmap [ 1111.521854][T12110] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1111.553566][T12110] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2977: inode #11: comm syz.8.1575: corrupted xattr block 95: invalid header [ 1111.593667][T12110] EXT4-fs warning (device loop8): ext4_evict_inode:276: xattr delete (err -117) [ 1111.603174][T12110] EXT4-fs (loop8): 1 orphan inode deleted [ 1111.610754][T12110] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1122.016161][ T7031] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.216032][T12175] loop8: detected capacity change from 0 to 40427 [ 1125.272971][T12175] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1125.281162][T12175] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1125.428384][ T6388] IPVS: starting estimator thread 0... [ 1125.533531][T12196] IPVS: using max 240 ests per chain, 12000 per kthread [ 1125.538695][T12175] F2FS-fs (loop8): invalid crc value [ 1125.547421][T12175] F2FS-fs (loop8): Failed to start F2FS issue_checkpoint_thread (-4) [ 1129.144670][ T6408] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1129.373061][ T6408] usb 4-1: Using ep0 maxpacket: 8 [ 1129.473339][ T6408] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1129.481831][ T6408] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.492697][ T6408] usb 4-1: config 0 has no interface number 0 [ 1129.726308][ T6408] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1129.736137][ T6408] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.744679][ T6408] usb 4-1: Product: syz [ 1129.749087][ T6408] usb 4-1: Manufacturer: syz [ 1129.754261][ T6408] usb 4-1: SerialNumber: syz [ 1130.034729][ T6408] usb 4-1: config 0 descriptor?? [ 1130.096558][ T6408] usb 4-1: Found UVC 0.00 device syz (046d:08c3) [ 1130.103600][ T6408] usb 4-1: No valid video chain found. [ 1130.282331][ T6408] usb 4-1: USB disconnect, device number 14 [ 1135.352895][ T6388] IPVS: starting estimator thread 0... [ 1135.455598][T12248] IPVS: using max 240 ests per chain, 12000 per kthread [ 1137.632804][ T5793] Bluetooth: hci0: command 0x0406 tx timeout [ 1138.580014][T12261] loop8: detected capacity change from 0 to 2048 [ 1138.824886][T12261] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1139.666050][T12282] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1139.938030][T12284] input: syz0 as /devices/virtual/input/input14 [ 1140.705506][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1140.790397][ T7031] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.400416][T12339] loop8: detected capacity change from 0 to 512 [ 1147.514704][T12339] EXT4-fs: Ignoring removed i_version option [ 1147.521214][T12339] EXT4-fs: Ignoring removed mblk_io_submit option [ 1147.528669][T12339] ext4: Unknown parameter 'seclabel' [ 1164.647275][T12429] netlink: 596 bytes leftover after parsing attributes in process `syz.7.1655'. [ 1166.154671][T12444] kvm: vcpu 0: requested 48 ns lapic timer period limited to 200000 ns [ 1167.603792][T12442] loop3: detected capacity change from 0 to 40427 [ 1167.645799][T12442] F2FS-fs (loop3): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 1167.654598][T12442] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1167.783867][T12442] F2FS-fs (loop3): invalid crc value [ 1167.820788][T12442] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1168.117539][T12442] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30 [ 1168.125418][T12442] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1168.161146][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.169641][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.177593][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.185680][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.193719][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.201435][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.209289][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.217175][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.225031][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.232851][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.240568][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.248500][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.269884][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.279205][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.287046][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.294981][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.302788][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.310488][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.318451][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.326386][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.334227][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.341912][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.349726][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.357582][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.366548][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.374398][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.382097][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.390645][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.398468][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.406285][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.414204][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.421888][ T2073] hid-generic 0002:0000:0000.0005: unknown main item tag 0x0 [ 1168.601329][T12475] loop6: detected capacity change from 0 to 1024 [ 1168.603841][ T2073] hid-generic 0002:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1168.635334][T12475] EXT4-fs: Mount option(s) incompatible with ext2 [ 1169.043208][T12484] loop8: detected capacity change from 0 to 128 [ 1170.404439][T12496] loop6: detected capacity change from 0 to 256 [ 1170.415528][T12496] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1170.563742][ T2073] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1170.664018][T12496] FAT-fs (loop6): Directory bread(block 64) failed [ 1170.673209][T12496] FAT-fs (loop6): Directory bread(block 65) failed [ 1170.684171][T12496] FAT-fs (loop6): Directory bread(block 66) failed [ 1170.691354][T12496] FAT-fs (loop6): Directory bread(block 67) failed [ 1170.698271][T12496] FAT-fs (loop6): Directory bread(block 68) failed [ 1170.706389][T12496] FAT-fs (loop6): Directory bread(block 69) failed [ 1170.715694][T12496] FAT-fs (loop6): Directory bread(block 70) failed [ 1170.722601][T12496] FAT-fs (loop6): Directory bread(block 71) failed [ 1170.729618][T12496] FAT-fs (loop6): Directory bread(block 72) failed [ 1170.736379][T12496] FAT-fs (loop6): Directory bread(block 73) failed [ 1170.812083][ T2073] usb 8-1: Using ep0 maxpacket: 32 [ 1170.876864][ T2073] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1170.889991][ T2073] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1170.903487][ T2073] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1170.913166][ T2073] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.249538][ T2073] usb 8-1: config 0 descriptor?? [ 1171.258362][T12495] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1171.370055][ T2073] hub 8-1:0.0: USB hub found [ 1174.620661][ T2073] hub 8-1:0.0: config failed, can't read hub descriptor (err -22) [ 1174.643852][ T2073] usbhid 8-1:0.0: can't add hid device: -71 [ 1174.650691][ T2073] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1174.680667][ T2073] usb 8-1: USB disconnect, device number 14 [ 1186.292047][T12570] loop8: detected capacity change from 0 to 512 [ 1186.347911][T12570] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1186.499800][T12570] EXT4-fs error (device loop8): ext4_orphan_get:1389: inode #15: comm syz.8.1690: iget: bad extended attribute block 512 [ 1186.572324][T12570] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.1690: couldn't read orphan inode 15 (err -117) [ 1186.659502][T12570] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1187.604429][T12583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1187.618145][T12583] 8021q: adding VLAN 0 to HW filter on device team0 [ 1188.163180][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1188.181791][T12585] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1188.255217][T12585] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1188.301832][T12585] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1188.362108][T12585] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1188.378143][T12585] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1188.399143][T12583] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1190.103883][ T7031] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.487277][T12597] loop7: detected capacity change from 0 to 256 [ 1190.894114][T12597] FAT-fs (loop7): Directory bread(block 64) failed [ 1190.902250][T12597] FAT-fs (loop7): Directory bread(block 65) failed [ 1190.909427][T12597] FAT-fs (loop7): Directory bread(block 66) failed [ 1190.916205][T12597] FAT-fs (loop7): Directory bread(block 67) failed [ 1190.923212][T12597] FAT-fs (loop7): Directory bread(block 68) failed [ 1190.930228][T12597] FAT-fs (loop7): Directory bread(block 69) failed [ 1190.939740][T12597] FAT-fs (loop7): Directory bread(block 70) failed [ 1190.946527][T12597] FAT-fs (loop7): Directory bread(block 71) failed [ 1190.954137][T12597] FAT-fs (loop7): Directory bread(block 72) failed [ 1190.961057][T12597] FAT-fs (loop7): Directory bread(block 73) failed [ 1191.243113][ T5082] Bluetooth: hci1: command tx timeout [ 1191.930334][T12580] chnl_net:caif_netlink_parms(): no params data found [ 1193.348204][ T5082] Bluetooth: hci1: command tx timeout [ 1193.781804][ T29] audit: type=1326 audit(2000000010.850:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.6.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1193.806568][ T29] audit: type=1326 audit(2000000010.860:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.6.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1193.830229][ T29] audit: type=1326 audit(2000000010.860:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.6.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1193.854560][ T29] audit: type=1326 audit(2000000010.860:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.6.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1193.877402][ T29] audit: type=1326 audit(2000000010.860:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.6.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1193.902569][ T29] audit: type=1326 audit(2000000010.860:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.6.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1193.925919][ T29] audit: type=1326 audit(2000000010.870:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.6.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1193.948905][ T29] audit: type=1326 audit(2000000010.870:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.6.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1193.971742][ T29] audit: type=1326 audit(2000000010.870:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.6.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1193.994589][ T29] audit: type=1326 audit(2000000010.870:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.6.1697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1196.107112][ T5082] Bluetooth: hci1: command tx timeout [ 1196.994724][T12580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.003239][T12580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.011508][T12580] bridge_slave_0: entered allmulticast mode [ 1197.020767][T12580] bridge_slave_0: entered promiscuous mode [ 1198.711281][T12580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.721993][T12580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.729986][T12580] bridge_slave_1: entered allmulticast mode [ 1198.738880][T12580] bridge_slave_1: entered promiscuous mode [ 1198.768903][ T5082] Bluetooth: hci1: command tx timeout [ 1199.373172][T12580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1199.543532][T12580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1200.686642][ T3991] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.145733][ T3991] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.330916][T12580] team0: Port device team_slave_0 added [ 1201.473257][ T3991] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.644518][T12580] team0: Port device team_slave_1 added [ 1201.944427][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1202.018558][ T6408] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1202.092235][ T3991] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.154783][T12580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1202.162275][T12580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1202.188821][T12580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1202.206472][T12580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1202.213780][T12580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1202.240275][T12580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1202.715236][T12655] loop6: detected capacity change from 0 to 1024 [ 1203.303498][ T3991] bridge_slave_1: left allmulticast mode [ 1203.309687][ T3991] bridge_slave_1: left promiscuous mode [ 1203.316525][ T3991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.430746][ T3991] bridge_slave_0: left allmulticast mode [ 1203.436865][ T3991] bridge_slave_0: left promiscuous mode [ 1203.443844][ T3991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.538569][ T6408] usb 2-1: Using ep0 maxpacket: 8 [ 1203.593523][ T6408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.605845][ T6408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1203.616742][ T6408] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 1203.627020][ T6408] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.660320][ T6408] usb 2-1: config 0 descriptor?? [ 1204.301835][ T6408] saitek 0003:06A3:0CCD.0006: item fetching failed at offset 8/11 [ 1204.321925][ T6408] saitek 0003:06A3:0CCD.0006: parse failed [ 1204.329941][ T6408] saitek 0003:06A3:0CCD.0006: probe with driver saitek failed with error -22 [ 1204.375534][ T3991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1204.408883][ T3991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1204.431360][ T3991] bond0 (unregistering): Released all slaves [ 1204.464444][T12580] hsr_slave_0: entered promiscuous mode [ 1204.496819][ T6388] usb 2-1: USB disconnect, device number 5 [ 1204.523137][T12580] hsr_slave_1: entered promiscuous mode [ 1204.583704][T12674] loop6: detected capacity change from 0 to 512 [ 1204.667773][T12674] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1204.780617][T12674] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1204.839410][T12674] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1712: bg 0: block 248: padding at end of block bitmap is not set [ 1204.963239][T12674] __quota_error: 10 callbacks suppressed [ 1204.963323][T12674] Quota error (device loop6): write_blk: dquota write failed [ 1204.978891][T12674] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1204.989347][T12674] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.1712: Failed to acquire dquot type 1 [ 1205.285614][T12674] EXT4-fs (loop6): 1 truncate cleaned up [ 1205.392433][T12674] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1205.736530][ T3991] hsr_slave_0: left promiscuous mode [ 1205.769970][ T3991] hsr_slave_1: left promiscuous mode [ 1205.809744][ T3991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1205.817709][ T3991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1205.862677][ T3991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1205.872645][ T3991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1205.970798][ T3991] veth1_macvtap: left promiscuous mode [ 1205.976747][ T3991] veth0_macvtap: left promiscuous mode [ 1205.982985][ T3991] veth1_vlan: left promiscuous mode [ 1205.990973][ T3991] veth0_vlan: left promiscuous mode [ 1210.160941][ T8898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.028694][T12706] loop7: detected capacity change from 0 to 16 [ 1214.065267][T12706] erofs (device loop7): mounted with root inode @ nid 36. [ 1215.700452][ T3991] team0 (unregistering): Port device team_slave_1 removed [ 1215.877618][ T3991] team0 (unregistering): Port device team_slave_0 removed [ 1216.289070][T12713] tipc: Failed to remove unknown binding: 66,1,1/0:752495097/752495099 [ 1216.298708][T12713] tipc: Failed to remove unknown binding: 66,1,1/0:752495097/752495099 [ 1218.415148][ T3991] IPVS: stop unused estimator thread 0... [ 1220.119008][T12580] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1220.264664][T12580] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1220.375437][T12580] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1220.500854][T12580] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1222.402086][T12762] sp0: Synchronizing with TNC [ 1225.199974][T12580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.630577][T12580] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.739859][T12580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1225.751296][T12580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1225.803028][ T4151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.810860][ T4151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.826497][ T4151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.834341][ T4151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1230.792983][T12580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1230.916375][T12580] veth0_vlan: entered promiscuous mode [ 1230.952522][T12580] veth1_vlan: entered promiscuous mode [ 1231.032701][T12580] veth0_macvtap: entered promiscuous mode [ 1231.720563][T12777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.753811][T12777] bridge_slave_1: left allmulticast mode [ 1231.761608][T12777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.823970][T12580] veth1_macvtap: entered promiscuous mode [ 1232.003595][T12580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.014841][T12580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.025124][T12580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.035905][T12580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.046240][T12580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1232.056991][T12580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.071924][T12580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1232.228677][T12580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.239589][T12580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.252727][T12580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.266635][T12580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.276787][T12580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1232.287577][T12580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1232.305764][T12580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1232.364752][T12580] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.374008][T12580] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.383192][T12580] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.392351][T12580] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.003734][T12812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.013263][T12812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.023658][T12812] bridge0: entered allmulticast mode [ 1233.683964][T12813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.691803][T12813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.700536][T12813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.708281][T12813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.717170][T12813] bridge0: entered promiscuous mode [ 1237.581008][T12830] loop7: detected capacity change from 0 to 512 [ 1237.907747][T12830] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1237.921225][T12830] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1243.910209][ T6448] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1245.172577][T12870] loop8: detected capacity change from 0 to 256 [ 1248.248863][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1752'. [ 1250.244692][ T5082] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1250.540414][ T5082] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1250.569019][ T5082] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1250.596202][ T5082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1250.639355][ T5082] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1250.650356][ T5082] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1252.924659][ T5082] Bluetooth: hci3: command tx timeout [ 1255.069518][T12585] Bluetooth: hci3: command tx timeout [ 1255.369942][T12891] chnl_net:caif_netlink_parms(): no params data found [ 1256.073319][ T3991] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.307236][T12585] Bluetooth: hci3: command tx timeout [ 1259.373190][ T5082] Bluetooth: hci3: command tx timeout [ 1260.686229][ T3991] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.824969][ T3991] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.101585][ T3991] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.498919][ T3991] bridge_slave_1: left allmulticast mode [ 1262.505072][ T3991] bridge_slave_1: left promiscuous mode [ 1262.512493][ T3991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.651460][ T3991] bridge_slave_0: left allmulticast mode [ 1262.657553][ T3991] bridge_slave_0: left promiscuous mode [ 1262.664460][ T3991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.313116][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1264.919933][ T3991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1264.990551][ T3991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1265.045567][ T3991] bond0 (unregistering): Released all slaves [ 1265.476468][ T3991] hsr_slave_0: left promiscuous mode [ 1265.546960][ T3991] hsr_slave_1: left promiscuous mode [ 1265.586802][ T3991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1265.595465][ T3991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1265.662742][ T3991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1265.671306][ T3991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1265.727928][ T3991] veth1_macvtap: left promiscuous mode [ 1265.736049][ T3991] veth0_macvtap: left promiscuous mode [ 1265.742580][ T3991] veth1_vlan: left promiscuous mode [ 1265.748429][ T3991] veth0_vlan: left promiscuous mode [ 1266.177883][T12969] loop7: detected capacity change from 0 to 512 [ 1266.249694][T12969] EXT4-fs: Ignoring removed i_version option [ 1266.256184][T12969] EXT4-fs: Ignoring removed mblk_io_submit option [ 1266.265040][T12969] ext4: Unknown parameter 'seclabel' [ 1274.668538][ T3991] team0 (unregistering): Port device team_slave_1 removed [ 1274.692120][ T3991] team0 (unregistering): Port device team_slave_0 removed [ 1274.993296][T12891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.005875][T12891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.013900][T12891] bridge_slave_0: entered allmulticast mode [ 1275.023109][T12891] bridge_slave_0: entered promiscuous mode [ 1275.041459][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1771'. [ 1275.282337][T12891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.290213][T12891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.298379][T12891] bridge_slave_1: entered allmulticast mode [ 1275.307368][T12891] bridge_slave_1: entered promiscuous mode [ 1275.921499][T12891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1275.964551][T12891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.287503][T12891] team0: Port device team_slave_0 added [ 1276.367684][T12891] team0: Port device team_slave_1 added [ 1276.739057][T12891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1276.748748][T12891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1276.776796][T12891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1276.915310][T12891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1276.922753][T12891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1276.951589][T12891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1277.451691][T12891] hsr_slave_0: entered promiscuous mode [ 1277.515960][T12891] hsr_slave_1: entered promiscuous mode [ 1277.589351][T12585] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1277.604159][T12585] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1277.613789][T12585] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1277.629288][T12585] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1277.641708][T12585] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1277.651450][T12585] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1279.848585][T12585] Bluetooth: hci1: command tx timeout [ 1279.987545][T13025] chnl_net:caif_netlink_parms(): no params data found [ 1281.133685][T12891] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1281.283472][T12891] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1281.933666][T12585] Bluetooth: hci1: command tx timeout [ 1282.735937][T13055] loop8: detected capacity change from 0 to 1024 [ 1282.781405][T13055] EXT4-fs: Ignoring removed nobh option [ 1282.835306][T13025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.843228][T13025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.851278][T13025] bridge_slave_0: entered allmulticast mode [ 1282.860996][T13025] bridge_slave_0: entered promiscuous mode [ 1282.885878][T13055] EXT4-fs (loop8): blocks per group (1280) and clusters per group (8192) inconsistent [ 1283.038627][T13025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.046340][T13025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.054474][T13025] bridge_slave_1: entered allmulticast mode [ 1283.064165][T13025] bridge_slave_1: entered promiscuous mode [ 1283.160658][T12891] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1283.253191][T12891] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1284.020395][T12585] Bluetooth: hci1: command tx timeout [ 1284.491919][T13025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1284.702682][T13025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1286.160144][T12585] Bluetooth: hci1: command tx timeout [ 1286.346930][T12891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1286.392707][T12891] 8021q: adding VLAN 0 to HW filter on device team0 [ 1286.498558][T12891] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1286.509337][T12891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1289.252984][T13025] team0: Port device team_slave_0 added [ 1289.287923][ T3698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.295720][ T3698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1289.311565][ T3698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.319362][ T3698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1289.477453][ T3698] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.595991][T13025] team0: Port device team_slave_1 added [ 1289.924327][T13025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1289.932168][T13025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1289.959115][T13025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1290.023165][ T3698] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.072814][T13025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1290.081876][T13025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1290.109579][T13025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1290.198859][ T3698] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.342918][ T3698] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.790400][T13025] hsr_slave_0: entered promiscuous mode [ 1290.819897][T13025] hsr_slave_1: entered promiscuous mode [ 1290.868268][T13025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1290.876656][T13025] Cannot create hsr debugfs directory [ 1291.450184][ T3698] bridge_slave_1: left allmulticast mode [ 1291.456175][ T3698] bridge_slave_1: left promiscuous mode [ 1291.463886][ T3698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.537231][ T3698] bridge_slave_0: left allmulticast mode [ 1291.543910][ T3698] bridge_slave_0: left promiscuous mode [ 1291.550830][ T3698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.439210][ T3698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1292.484204][ T3698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1292.541260][ T3698] bond0 (unregistering): Released all slaves [ 1292.762406][T12891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1293.306789][ T3698] hsr_slave_0: left promiscuous mode [ 1293.332574][ T3698] hsr_slave_1: left promiscuous mode [ 1293.370362][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1293.378763][ T3698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1293.392797][ T3698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1293.400659][ T3698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1293.470958][ T3698] veth1_macvtap: left promiscuous mode [ 1293.476731][ T3698] veth0_macvtap: left promiscuous mode [ 1293.482965][ T3698] veth1_vlan: left promiscuous mode [ 1293.488699][ T3698] veth0_vlan: left promiscuous mode [ 1294.976471][ T3698] team0 (unregistering): Port device team_slave_1 removed [ 1295.011274][ T3698] team0 (unregistering): Port device team_slave_0 removed [ 1295.856625][ T3698] IPVS: stop unused estimator thread 0... [ 1296.457790][T12891] veth0_vlan: entered promiscuous mode [ 1296.487826][T12891] veth1_vlan: entered promiscuous mode [ 1296.565526][T12891] veth0_macvtap: entered promiscuous mode [ 1296.585366][T12891] veth1_macvtap: entered promiscuous mode [ 1296.632591][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1296.643375][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.654521][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1296.665339][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.679663][T12891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1296.697331][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1296.708166][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.718955][T12891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1296.730442][T12891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.744971][T12891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1296.763428][T12891] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.772613][T12891] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.781781][T12891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1296.790891][T12891] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1298.108439][ T6388] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1298.283865][ T6388] usb 9-1: Using ep0 maxpacket: 16 [ 1298.517228][ T6388] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1298.529659][ T6388] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1298.699659][ T6388] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1298.710484][ T6388] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.719057][ T6388] usb 9-1: Product: syz [ 1298.723483][ T6388] usb 9-1: Manufacturer: syz [ 1298.728534][ T6388] usb 9-1: SerialNumber: syz [ 1298.743767][ T6388] usb 9-1: config 0 descriptor?? [ 1298.765957][ T6388] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1298.775866][ T6388] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1298.955263][T13025] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1299.041850][T13025] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1299.102460][T13025] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1299.192543][T13025] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1299.248471][T13143] loop7: detected capacity change from 0 to 512 [ 1299.283084][T13143] EXT4-fs: Ignoring removed orlov option [ 1299.291480][T13143] EXT4-fs: Ignoring removed i_version option [ 1299.297761][T13143] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1299.404362][T13143] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1299.413159][T13143] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 1299.519229][T13143] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1299.526153][T13143] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 1299.538781][T13143] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1299.554227][T13143] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 1299.704935][T13143] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1796: bg 0: block 40: padding at end of block bitmap is not set [ 1299.788898][T13143] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1299.872733][ T6388] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1299.883981][ T6388] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1299.890402][T13143] EXT4-fs (loop7): 1 truncate cleaned up [ 1299.898971][T13143] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1300.918610][ T29] audit: type=1326 audit(2000000118.430:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.6.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1300.942892][ T29] audit: type=1326 audit(2000000118.430:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.6.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1300.965794][ T29] audit: type=1326 audit(2000000118.450:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.6.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1300.989097][ T29] audit: type=1326 audit(2000000118.450:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.6.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1301.012410][ T29] audit: type=1326 audit(2000000118.450:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.6.1798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1301.229481][T13025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1301.288897][T13025] 8021q: adding VLAN 0 to HW filter on device team0 [ 1301.442208][T13025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1301.453159][T13025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1301.517221][ T4037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.525050][ T4037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1301.540893][ T4037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.548673][ T4037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1301.597394][ T6388] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 1301.604761][ T6388] em28xx 9-1:0.0: No AC97 audio processor [ 1302.415083][T13158] usb 9-1: USB disconnect, device number 15 [ 1302.422659][T13158] em28xx 9-1:0.0: Disconnecting em28xx [ 1302.456223][ T6448] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1302.512118][T13158] em28xx 9-1:0.0: Freeing device [ 1302.991804][T13170] loop7: detected capacity change from 0 to 512 [ 1303.172023][T13025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1303.245695][T13170] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1303.259652][T13170] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1303.503278][T13025] veth0_vlan: entered promiscuous mode [ 1303.580863][T13025] veth1_vlan: entered promiscuous mode [ 1303.690319][T13025] veth0_macvtap: entered promiscuous mode [ 1303.711284][T13025] veth1_macvtap: entered promiscuous mode [ 1303.762409][T13025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1303.773290][T13025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.784143][T13025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1303.795006][T13025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.805577][T13025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1303.816416][T13025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.830796][T13025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1303.849586][T13025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.860417][T13025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.870601][T13025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.881955][T13025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.892465][T13025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.903238][T13025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.917585][T13025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1303.936196][T13025] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.945366][T13025] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.955335][T13025] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.964537][T13025] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.405657][T13081] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1304.658702][T13081] usb 8-1: Using ep0 maxpacket: 16 [ 1304.786163][T13081] usb 8-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice= 6.8a [ 1304.795995][T13081] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.804931][T13081] usb 8-1: Product: syz [ 1304.809855][T13081] usb 8-1: Manufacturer: syz [ 1304.814761][T13081] usb 8-1: SerialNumber: syz [ 1305.010530][T13081] usb 8-1: config 0 descriptor?? [ 1305.060175][T13081] mcba_usb 8-1:0.0: Can't find endpoints [ 1305.467463][ T6408] usb 8-1: USB disconnect, device number 15 [ 1306.393612][ T6448] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1309.572963][T11948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.581184][T11948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.385745][ T3991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.394023][ T3991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.521253][ T29] audit: type=1326 audit(2000000129.370:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13230 comm="syz.7.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1311.544297][ T29] audit: type=1326 audit(2000000129.370:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13230 comm="syz.7.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1311.567734][ T29] audit: type=1326 audit(2000000129.370:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13230 comm="syz.7.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1311.592447][ T29] audit: type=1326 audit(2000000129.370:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13230 comm="syz.7.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1311.616075][ T29] audit: type=1326 audit(2000000129.370:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13230 comm="syz.7.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1311.640689][ T29] audit: type=1326 audit(2000000129.380:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13230 comm="syz.7.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1311.664109][ T29] audit: type=1326 audit(2000000129.380:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13230 comm="syz.7.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1311.688398][ T29] audit: type=1326 audit(2000000129.380:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13230 comm="syz.7.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1311.712029][ T29] audit: type=1326 audit(2000000129.380:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13230 comm="syz.7.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1311.734920][ T29] audit: type=1326 audit(2000000129.380:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13230 comm="syz.7.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1313.556431][ T5082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1313.585550][ T5082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1313.600549][ T5082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1313.615159][ T5082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1313.635663][ T5082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1313.647089][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1314.557566][T13249] loop7: detected capacity change from 0 to 512 [ 1314.657074][T13249] EXT4-fs: Ignoring removed orlov option [ 1314.663514][T13249] EXT4-fs: Ignoring removed i_version option [ 1314.670136][T13249] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1314.819975][T13249] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1314.829954][T13249] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 1315.008958][T13249] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1315.015818][T13249] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1315.031299][T13249] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 1315.038300][ T6408] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1315.102999][T13249] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1808: bg 0: block 40: padding at end of block bitmap is not set [ 1315.120306][T13249] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1315.279866][T13249] EXT4-fs (loop7): 1 truncate cleaned up [ 1315.287675][T13249] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1315.787118][ T5082] Bluetooth: hci0: command tx timeout [ 1316.053020][ T6408] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1316.065309][ T6408] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1316.076333][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.084652][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.149677][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.157746][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.200047][ T6408] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1316.209717][ T6408] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.218170][ T6408] usb 7-1: Product: syz [ 1316.222592][ T6408] usb 7-1: Manufacturer: syz [ 1316.227467][ T6408] usb 7-1: SerialNumber: syz [ 1316.308441][T13238] chnl_net:caif_netlink_parms(): no params data found [ 1316.329501][ T6448] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1316.716484][T13246] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1317.026553][ T4151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.176381][ T4151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.354458][ T4151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.407441][T13246] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1317.509073][ T4151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.527557][T13081] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1317.650878][ T6408] cdc_mbim 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1317.657821][ T6408] cdc_mbim 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1317.665960][ T6408] cdc_mbim 7-1:1.0: setting rx_max = 2048 [ 1317.751948][T13081] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.762893][T13081] usb 9-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1317.774878][T13081] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1317.788546][T13081] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1317.798143][T13081] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.863292][ T5082] Bluetooth: hci0: command tx timeout [ 1317.898688][T13246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.909064][T13246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.937556][ T6408] cdc_mbim 7-1:1.0: setting tx_max = 184 [ 1318.019742][ T2073] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1318.030556][ T6408] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 1318.062731][T13081] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1318.089977][ T6408] wwan wwan0: port wwan0mbim0 attached [ 1318.159591][T13081] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1318.219196][ T2073] usb 8-1: config 64 has an invalid interface number: 178 but max is 0 [ 1318.227910][ T2073] usb 8-1: config 64 has no interface number 0 [ 1318.234697][ T2073] usb 8-1: config 64 interface 178 has no altsetting 0 [ 1318.243740][ T2073] usb 8-1: New USB device found, idVendor=167b, idProduct=4001, bcdDevice=c1.ed [ 1318.253966][ T2073] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1318.266575][T13081] usb 9-1: USB disconnect, device number 16 [ 1318.351218][ T6408] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 42:42:42:42:42:42 [ 1318.381498][ T6408] usb 7-1: USB disconnect, device number 8 [ 1318.389116][ T6408] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 1318.435490][ T4151] bridge_slave_1: left allmulticast mode [ 1318.443951][ T4151] bridge_slave_1: left promiscuous mode [ 1318.450952][ T4151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.528820][ T4151] bridge_slave_0: left allmulticast mode [ 1318.534899][ T4151] bridge_slave_0: left promiscuous mode [ 1318.542235][ T4151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.831038][T13293] loop7: detected capacity change from 0 to 128 [ 1319.938481][ T5082] Bluetooth: hci0: command tx timeout [ 1320.140760][ T4151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1320.257488][ T4151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1320.731047][ T4151] bond0 (unregistering): Released all slaves [ 1321.148269][T13238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.155973][T13238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.163963][T13238] bridge_slave_0: entered allmulticast mode [ 1321.173219][T13238] bridge_slave_0: entered promiscuous mode [ 1321.285843][ T6408] wwan wwan0: port wwan0mbim0 disconnected [ 1321.960976][T13314] Process accounting resumed [ 1322.018679][ T5082] Bluetooth: hci0: command tx timeout [ 1324.778132][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1324.920455][T13238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.927105][ T2073] usb 8-1: string descriptor 0 read error: -71 [ 1324.928656][T13238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.942252][T13238] bridge_slave_1: entered allmulticast mode [ 1324.944978][ T2073] usb 8-1: USB disconnect, device number 16 [ 1324.951314][T13238] bridge_slave_1: entered promiscuous mode [ 1325.546125][ T4151] hsr_slave_0: left promiscuous mode [ 1325.584003][ T4151] hsr_slave_1: left promiscuous mode [ 1325.617824][ T4151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1325.625986][ T4151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1325.673269][ T4151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1325.682386][ T4151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1325.787327][ T4151] veth1_macvtap: left promiscuous mode [ 1325.793862][ T4151] veth0_macvtap: left promiscuous mode [ 1325.801313][ T4151] veth1_vlan: left promiscuous mode [ 1325.806873][ T4151] veth0_vlan: left promiscuous mode [ 1326.508373][ T6408] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1326.739960][ T6408] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.750611][ T6408] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1326.763309][ T6408] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1326.778071][ T6408] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1326.787410][ T6408] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.023255][ T6408] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1327.031894][ T6408] usb 9-1: invalid MIDI out EP 0 [ 1327.423414][ T6408] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1327.470136][ T4151] team0 (unregistering): Port device team_slave_1 removed [ 1327.710642][ T4151] team0 (unregistering): Port device team_slave_0 removed [ 1328.738742][T13238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1328.959420][T13238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1329.571062][ T6408] usb 9-1: USB disconnect, device number 17 [ 1329.658630][T13238] team0: Port device team_slave_0 added [ 1329.738769][T13238] team0: Port device team_slave_1 added [ 1330.323910][T13238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1330.331943][T13238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1330.359068][T13238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1330.524175][T13238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1330.531665][T13238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1330.559617][T13238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1331.195118][T13395] loop8: detected capacity change from 0 to 512 [ 1331.222774][T13395] EXT4-fs: Ignoring removed mblk_io_submit option [ 1331.252325][T13238] hsr_slave_0: entered promiscuous mode [ 1331.266230][T13238] hsr_slave_1: entered promiscuous mode [ 1331.273157][T13395] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1331.354750][T13395] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c198, mo2=0002] [ 1331.377725][T13395] System zones: 1-12 [ 1331.422224][T13395] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.1837: corrupted in-inode xattr: e_value size too large [ 1331.509398][T13395] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.1837: couldn't read orphan inode 15 (err -117) [ 1331.560476][T13395] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1331.766719][T13398] kvm: kvm [13397]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6d00000800 [ 1331.973321][ T7031] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1332.041103][ T5082] Bluetooth: hci5: unexpected Set CIG Parameters response data [ 1332.049271][ T5082] Bluetooth: hci5: unexpected event for opcode 0x2062 [ 1332.198500][ T2073] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1332.369678][ T2073] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.380588][ T2073] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1332.392193][ T2073] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1332.405718][ T2073] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1332.416675][ T2073] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.645072][ T2073] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1332.653876][ T2073] usb 8-1: invalid MIDI out EP 0 [ 1333.004751][T13423] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1846'. [ 1333.809472][T13429] futex_wake_op: syz.2.1846 tries to shift op by -1; fix this program [ 1336.900686][ T5082] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1336.909367][ T5082] Bluetooth: hci5: Injecting HCI hardware error event [ 1336.916843][ T5082] Bluetooth: hci5: hardware error 0x00 [ 1339.208973][ T2073] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1339.297681][ T2073] usb 8-1: USB disconnect, device number 17 [ 1339.564932][T13238] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1339.587877][T13238] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1339.679345][T13238] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1339.751997][T13238] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1340.751805][T13454] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input15 [ 1341.288388][ T5082] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1341.704254][T13462] loop7: detected capacity change from 0 to 128 [ 1341.805542][T13238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1341.887840][T13238] 8021q: adding VLAN 0 to HW filter on device team0 [ 1341.959652][ T3991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.967354][ T3991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1341.983536][ T3991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.991295][ T3991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1344.553155][T13238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1345.128377][ T6408] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1345.851073][ T6408] usb 3-1: device descriptor read/all, error -71 [ 1346.924443][T13238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1347.386988][T13238] veth0_vlan: entered promiscuous mode [ 1347.416770][T13238] veth1_vlan: entered promiscuous mode [ 1347.496757][T13238] veth0_macvtap: entered promiscuous mode [ 1347.517481][T13238] veth1_macvtap: entered promiscuous mode [ 1347.567698][T13238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1347.578981][T13238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.589151][T13238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1347.599934][T13238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.612396][T13238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1347.623197][T13238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.640512][T13238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1347.660639][T13238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1347.671536][T13238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.681743][T13238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1347.692540][T13238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.702684][T13238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1347.713997][T13238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.730292][T13238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1347.749285][T13238] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.758446][T13238] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.767477][T13238] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.779081][T13238] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.787845][T13540] loop6: detected capacity change from 0 to 4096 [ 1353.865073][T13540] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1355.861362][T13540] ntfs3(loop6): ino=1e, "file1" no data attribute [ 1355.868456][T13540] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1355.875861][T13540] ntfs3(loop6): ino=3, ntfs_set_state failed, -22. [ 1356.873350][T13563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1357.650151][ T3698] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22. [ 1358.743928][ T3889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.752286][ T3889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.820435][T11948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.829084][T11948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.947388][T13579] kvm: kvm [13578]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 1363.503773][T13624] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 1363.519392][T13620] IPVS: stopping master sync thread 13624 ... [ 1364.830755][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1364.830836][ T29] audit: type=1107 audit(2000000182.770:567): pid=13634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1364.923736][T13637] loop8: detected capacity change from 0 to 128 [ 1369.647330][T13691] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1909'. [ 1370.670168][T13708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1913'. [ 1370.784532][T13716] loop7: detected capacity change from 0 to 512 [ 1370.873373][T13716] EXT4-fs: Ignoring removed oldalloc option [ 1370.880484][T13716] EXT4-fs: Ignoring removed i_version option [ 1371.094423][T13716] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.7.1914: corrupted xattr block 95: invalid header [ 1371.210075][T13716] EXT4-fs (loop7): Remounting filesystem read-only [ 1371.217008][T13716] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 1371.227755][T13716] EXT4-fs (loop7): 1 orphan inode deleted [ 1371.235564][T13716] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1371.647885][ T6448] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1371.807394][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1917'. [ 1371.816731][T13725] bridge_slave_1: left allmulticast mode [ 1371.822718][T13725] bridge_slave_1: left promiscuous mode [ 1371.829255][T13725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.973763][T13725] bridge_slave_0: left allmulticast mode [ 1371.981773][T13725] bridge_slave_0: left promiscuous mode [ 1371.988636][T13725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.388387][T13738] loop7: detected capacity change from 0 to 2048 [ 1372.438867][T13738] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 1372.447200][T13738] UDF-fs: Scanning with blocksize 512 failed [ 1372.629360][T13738] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1373.748386][ T6408] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1374.265514][ T6408] usb 9-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1374.277613][ T6408] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1374.279105][T13759] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1924'. [ 1374.289670][ T6408] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1374.309931][ T6408] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1374.320170][ T6408] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.345552][T13748] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1375.511139][T13772] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input17 [ 1377.301272][ T6408] aiptek 9-1:17.0: Aiptek using 400 ms programming speed [ 1377.311487][ T6408] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input16 [ 1377.644055][ C0] aiptek 9-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1377.648504][T13788] loop6: detected capacity change from 0 to 2048 [ 1377.652587][ T6408] usb 9-1: USB disconnect, device number 18 [ 1377.994260][T13788] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1378.002334][T13788] UDF-fs: Scanning with blocksize 512 failed [ 1378.106374][T13788] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1379.498965][T13820] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1938'. [ 1381.696190][T13847] loop8: detected capacity change from 0 to 1024 [ 1382.574751][T13860] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1948'. [ 1382.651120][ T3698] hfsplus: b-tree write err: -5, ino 4 [ 1382.861209][T13868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1952'. [ 1382.964266][T13863] loop6: detected capacity change from 0 to 1764 [ 1383.179386][T13863] iso9660: Corrupted directory entry in block 0 of inode 1792 [ 1386.200413][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1386.345394][T13902] overlayfs: failed to resolve './file0': -2 [ 1386.614379][T13882] loop8: detected capacity change from 0 to 4096 [ 1386.662311][T13882] EXT4-fs: error -4 creating inode table initialization thread [ 1386.699500][T13882] EXT4-fs (loop8): mount failed [ 1387.196895][T13914] loop7: detected capacity change from 0 to 512 [ 1387.259595][T13914] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1387.336764][T13914] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1387.435121][T13914] EXT4-fs (loop7): 1 truncate cleaned up [ 1387.447681][T13914] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1387.625237][T13914] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1387.648285][T13923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1964'. [ 1389.174103][T13932] bridge0: port 2(vlan2) entered blocking state [ 1389.181852][T13932] bridge0: port 2(vlan2) entered disabled state [ 1389.189246][T13932] vlan2: entered allmulticast mode [ 1389.297826][T13932] vlan2: left allmulticast mode [ 1390.809236][T13943] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1391.089127][T13951] overlayfs: failed to resolve './file0': -2 [ 1391.224929][T13953] loop7: detected capacity change from 0 to 512 [ 1391.346137][T13953] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1391.355370][T13953] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1391.419209][T13953] System zones: 0-1, 15-15, 18-18, 34-34 [ 1391.428303][T13955] netlink: 'syz.0.1974': attribute type 10 has an invalid length. [ 1391.436978][T13955] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1391.449520][T13955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1391.473256][T13953] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1391.480243][T13953] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 1391.490343][T13953] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1391.505379][T13953] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 1391.594377][T13953] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.1973: bad orphan inode 16 [ 1391.660941][T13953] ext4_test_bit(bit=15, block=18) = 1 [ 1391.666695][T13953] is_bad_inode(inode)=0 [ 1391.671580][T13953] NEXT_ORPHAN(inode)=0 [ 1391.675852][T13953] max_ino=32 [ 1391.679366][T13953] i_nlink=2 [ 1391.684331][T13953] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1391.742011][T13961] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 1391.748870][T13961] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1391.757644][T13961] vhci_hcd vhci_hcd.0: Device attached [ 1391.802729][T13963] loop6: detected capacity change from 0 to 1024 [ 1391.837654][T13967] vhci_hcd: connection closed [ 1392.028846][ T2073] usb 49-1: new high-speed USB device number 2 using vhci_hcd [ 1392.047603][T11948] vhci_hcd: stop threads [ 1392.052299][T11948] vhci_hcd: release socket [ 1392.056915][T11948] vhci_hcd: disconnect device [ 1392.188286][T13974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1978'. [ 1392.780249][T11948] hfsplus: b-tree write err: -5, ino 4 [ 1392.789496][ T6448] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1393.192585][T13990] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1980'. [ 1393.245706][T13990] bond_slave_0: entered promiscuous mode [ 1393.252084][T13990] bond_slave_1: entered promiscuous mode [ 1393.258477][T13990] macvtap1: entered promiscuous mode [ 1393.263995][T13990] bond0: entered promiscuous mode [ 1393.272177][T13990] macvtap1: entered allmulticast mode [ 1393.278597][T13990] bond0: entered allmulticast mode [ 1393.283941][T13990] bond_slave_0: entered allmulticast mode [ 1393.290375][T13990] bond_slave_1: entered allmulticast mode [ 1393.302259][T13990] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1393.477140][T13993] loop6: detected capacity change from 0 to 512 [ 1393.642951][ T29] audit: type=1326 audit(2000000211.490:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.6.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1393.667245][ T29] audit: type=1326 audit(2000000211.590:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.6.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1393.748849][ T29] audit: type=1326 audit(2000000211.690:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.6.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1393.942165][ T29] audit: type=1326 audit(2000000211.840:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14005 comm="syz.6.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6f68fb85c5 code=0x7ffc0000 [ 1394.502734][ T29] audit: type=1326 audit(2000000211.910:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.6.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1394.528262][ T29] audit: type=1326 audit(2000000212.310:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14005 comm="syz.6.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1394.541750][T14004] loop7: detected capacity change from 0 to 512 [ 1394.552642][ T29] audit: type=1326 audit(2000000212.360:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.6.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1394.580263][ T29] audit: type=1326 audit(2000000212.390:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.6.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1394.603093][ T29] audit: type=1326 audit(2000000212.520:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.6.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1395.690998][T14004] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1395.704516][T14004] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1396.963507][T14016] netlink: 'syz.0.1988': attribute type 10 has an invalid length. [ 1396.971813][T14016] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1396.985426][T14016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1397.138522][ T2073] vhci_hcd: vhci_device speed not set [ 1397.153308][ T6448] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1397.609573][T14031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1992'. [ 1398.614012][T14040] loop7: detected capacity change from 0 to 512 [ 1398.689011][T14045] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1398.695848][T14045] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1398.704908][T14045] vhci_hcd vhci_hcd.0: Device attached [ 1398.978435][ T6408] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 1399.126557][T14054] sp0: Synchronizing with TNC [ 1399.190132][T14050] vhci_hcd: connection reset by peer [ 1399.244466][ T4747] vhci_hcd: stop threads [ 1399.250177][ T4747] vhci_hcd: release socket [ 1399.254852][ T4747] vhci_hcd: disconnect device [ 1399.316286][T14040] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1399.324891][T14040] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1400.038994][T14040] System zones: 0-1, 15-15, 18-18, 34-34 [ 1400.046144][T14040] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1400.053137][T14040] __quota_error: 22 callbacks suppressed [ 1400.053209][T14040] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 1400.073141][T14040] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1400.088365][T14040] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 1400.189042][T14040] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.1990: bad orphan inode 16 [ 1400.666161][T14040] ext4_test_bit(bit=15, block=18) = 1 [ 1400.675365][T14040] is_bad_inode(inode)=0 [ 1400.680436][T14040] NEXT_ORPHAN(inode)=0 [ 1400.684705][T14040] max_ino=32 [ 1400.688230][T14040] i_nlink=2 [ 1400.693308][T14040] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1401.288557][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1996'. [ 1401.393604][T14064] bond_slave_0: entered promiscuous mode [ 1401.399621][T14064] bond_slave_1: entered promiscuous mode [ 1401.405806][T14064] macvtap1: entered promiscuous mode [ 1401.411384][T14064] bond0: entered promiscuous mode [ 1401.418604][T14064] macvtap1: entered allmulticast mode [ 1401.424111][T14064] bond0: entered allmulticast mode [ 1401.429828][T14064] bond_slave_0: entered allmulticast mode [ 1401.435751][T14064] bond_slave_1: entered allmulticast mode [ 1401.445065][T14064] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1403.686714][T12585] Bluetooth: hci1: command 0x0406 tx timeout [ 1404.027081][ T6448] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1404.106429][ T6408] vhci_hcd: vhci_device speed not set [ 1404.454469][T14085] netlink: 'syz.7.2002': attribute type 10 has an invalid length. [ 1404.463750][T14085] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1404.476465][T14085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1405.404462][T14094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2004'. [ 1406.021683][T14102] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 1406.028526][T14102] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1406.038685][T14102] vhci_hcd vhci_hcd.0: Device attached [ 1406.153869][T14104] vhci_hcd: connection closed [ 1406.156189][ T3698] vhci_hcd: stop threads [ 1406.165886][ T3698] vhci_hcd: release socket [ 1406.171003][ T3698] vhci_hcd: disconnect device [ 1406.746575][T14111] sp0: Synchronizing with TNC [ 1409.309925][T14119] loop7: detected capacity change from 0 to 4096 [ 1409.471549][T14119] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1409.769585][T14119] netlink: 'syz.7.2011': attribute type 27 has an invalid length. [ 1409.781885][T14128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2013'. [ 1410.568907][T14119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.744647][T14144] netlink: 'syz.8.2017': attribute type 10 has an invalid length. [ 1411.704203][T14150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2018'. [ 1411.833690][T14119] bridge_slave_1: left promiscuous mode [ 1412.157010][T14119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1412.194638][T14119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1413.157394][T14119] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.170204][T14119] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.180807][T14119] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.190122][T14119] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.315991][T14119] bond0: left allmulticast mode [ 1413.321294][T14119] bond_slave_0: left allmulticast mode [ 1413.327166][T14119] bond_slave_1: left allmulticast mode [ 1413.333419][T14119] bond0: left promiscuous mode [ 1413.338658][T14119] bond_slave_0: left promiscuous mode [ 1413.344857][T14119] bond_slave_1: left promiscuous mode [ 1413.465908][T14119] macvtap1: left promiscuous mode [ 1413.476189][T14119] macvtap1: left allmulticast mode [ 1413.650886][T14128] macvtap2: entered promiscuous mode [ 1413.657272][T14128] macvtap2: entered allmulticast mode [ 1413.667792][T14128] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1413.719488][ T6448] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1414.115110][T14144] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1414.126827][T14144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1414.246719][T14173] sp0: Synchronizing with TNC [ 1416.261464][T14186] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1416.268295][T14186] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1416.276731][T14186] vhci_hcd vhci_hcd.0: Device attached [ 1417.019858][T14187] vhci_hcd: connection closed [ 1417.080697][ T3698] vhci_hcd: stop threads [ 1417.085178][ T3698] vhci_hcd: release socket [ 1417.090000][ T3698] vhci_hcd: disconnect device [ 1418.122043][ T6408] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1418.855092][ T6408] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1418.866696][ T6408] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1418.876266][ T6408] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1418.965298][ T6408] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1418.974827][ T6408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.983584][ T6408] usb 1-1: Product: syz [ 1418.988149][ T6408] usb 1-1: Manufacturer: syz [ 1418.992979][ T6408] usb 1-1: SerialNumber: syz [ 1419.087192][ T6408] cdc_mbim 1-1:1.0: skipping garbage [ 1419.093040][ T6408] cdc_mbim 1-1:1.0: CDC Union missing and no IAD found [ 1419.103214][ T6408] cdc_mbim 1-1:1.0: bind() failure [ 1419.298135][T14221] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2032'. [ 1419.406764][T14221] macvtap2: entered promiscuous mode [ 1419.415299][T14221] bond0: entered promiscuous mode [ 1419.422707][T14221] bond_slave_0: entered promiscuous mode [ 1419.433250][T14221] bond_slave_1: entered promiscuous mode [ 1419.441046][T14221] macvtap2: entered allmulticast mode [ 1419.446668][T14221] bond0: entered allmulticast mode [ 1419.452360][T14221] bond_slave_0: entered allmulticast mode [ 1419.458520][T14221] bond_slave_1: entered allmulticast mode [ 1419.466498][T14221] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 1419.572507][T14224] bond0: left allmulticast mode [ 1419.577531][T14224] bond_slave_0: left allmulticast mode [ 1419.583487][T14224] bond_slave_1: left allmulticast mode [ 1419.589199][T14224] bond0: left promiscuous mode [ 1419.594504][T14224] bond_slave_0: left promiscuous mode [ 1419.600844][T14224] bond_slave_1: left promiscuous mode [ 1419.931502][T14228] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2034'. [ 1420.387477][T14223] loop8: detected capacity change from 0 to 4096 [ 1420.750259][T14223] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1421.199632][T14223] netlink: 'syz.8.2031': attribute type 27 has an invalid length. [ 1421.287472][T12663] usb 1-1: USB disconnect, device number 2 [ 1421.404438][T14256] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2037'. [ 1421.414040][T14256] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2037'. [ 1421.424723][T14256] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2037'. [ 1421.424827][T14256] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2037'. [ 1422.408381][T14266] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1422.415212][T14266] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1422.423597][T14266] vhci_hcd vhci_hcd.0: Device attached [ 1422.474510][T14269] vhci_hcd: connection closed [ 1422.482457][ T3991] vhci_hcd: stop threads [ 1422.486906][ T3991] vhci_hcd: release socket [ 1422.491748][ T3991] vhci_hcd: disconnect device [ 1422.953651][T14272] kvm: kvm [14271]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6d00000800 [ 1423.865713][T14284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2045'. [ 1423.899635][T14283] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2044'. [ 1423.907529][T14287] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2046'. [ 1423.908880][T14283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2044'. [ 1423.946095][ T7031] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1423.985688][T14284] bond_slave_0: entered promiscuous mode [ 1423.991832][T14284] bond_slave_1: entered promiscuous mode [ 1424.000315][T14284] macvtap1: entered promiscuous mode [ 1424.005846][T14284] bond0: entered promiscuous mode [ 1424.019298][T14284] macvtap1: entered allmulticast mode [ 1424.024994][T14284] bond0: entered allmulticast mode [ 1424.030667][T14284] bond_slave_0: entered allmulticast mode [ 1424.036632][T14284] bond_slave_1: entered allmulticast mode [ 1424.047720][T14284] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1424.299025][T14289] bond0: left allmulticast mode [ 1424.304877][T14289] bond_slave_0: left allmulticast mode [ 1424.310963][T14289] bond_slave_1: left allmulticast mode [ 1424.316727][T14289] bond0: left promiscuous mode [ 1424.326227][T14289] bond_slave_0: left promiscuous mode [ 1424.331996][T14289] bond_slave_1: left promiscuous mode [ 1424.772029][T14295] loop7: detected capacity change from 0 to 2048 [ 1424.978671][T14295] loop7: p1 < > p4 [ 1424.998504][T14295] loop7: p4 size 8388608 extends beyond EOD, truncated [ 1425.128304][T14306] bridge0: port 1(vlan2) entered blocking state [ 1425.135277][T14306] bridge0: port 1(vlan2) entered disabled state [ 1425.146654][T14306] vlan2: entered allmulticast mode [ 1425.238218][T13269] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1425.397220][T14306] vlan2: left allmulticast mode [ 1425.484423][T13269] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1425.496407][T13269] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1425.506556][T13269] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1425.927170][T13269] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1425.937335][T13269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.946305][T13269] usb 1-1: Product: syz [ 1425.950778][T13269] usb 1-1: Manufacturer: syz [ 1425.955604][T13269] usb 1-1: SerialNumber: syz [ 1426.120268][T13269] cdc_mbim 1-1:1.0: skipping garbage [ 1426.125840][T13269] cdc_mbim 1-1:1.0: CDC Union missing and no IAD found [ 1426.133236][T13269] cdc_mbim 1-1:1.0: bind() failure [ 1426.894849][T14322] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 1426.901672][T14322] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1426.910436][T14322] vhci_hcd vhci_hcd.0: Device attached [ 1427.001031][T14325] vhci_hcd: connection closed [ 1427.002101][ T60] vhci_hcd: stop threads [ 1427.011942][ T60] vhci_hcd: release socket [ 1427.016569][ T60] vhci_hcd: disconnect device [ 1428.088129][T14333] __nla_validate_parse: 2 callbacks suppressed [ 1428.088207][T14333] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2056'. [ 1428.105465][T14333] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2056'. [ 1428.115687][T14333] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2056'. [ 1428.125288][T14333] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2056'. [ 1428.567781][T13269] usb 1-1: USB disconnect, device number 3 [ 1428.782046][T14336] loop8: detected capacity change from 0 to 4096 [ 1429.069850][T14338] loop6: detected capacity change from 0 to 512 [ 1429.218514][ T29] audit: type=1326 audit(2000000247.160:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.6.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1429.888102][ T29] audit: type=1326 audit(2000000247.200:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.6.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1429.911219][ T29] audit: type=1326 audit(2000000247.250:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.6.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1429.934197][ T29] audit: type=1326 audit(2000000247.470:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14343 comm="syz.6.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6f68fb85c5 code=0x7ffc0000 [ 1429.959527][ T29] audit: type=1326 audit(2000000247.500:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.6.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1429.959748][ T29] audit: type=1326 audit(2000000247.500:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.6.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1430.006666][ T29] audit: type=1326 audit(2000000247.550:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.6.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1430.029627][ T29] audit: type=1326 audit(2000000247.620:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.6.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1430.052498][ T29] audit: type=1326 audit(2000000247.620:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14337 comm="syz.6.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1430.077505][ T29] audit: type=1326 audit(2000000247.640:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14343 comm="syz.6.2058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6f68f85d19 code=0x7ffc0000 [ 1430.077832][T14348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2061'. [ 1430.855936][T14336] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1431.191747][T14311] Set syz1 is full, maxelem 65536 reached [ 1431.360374][T14336] netlink: 'syz.8.2057': attribute type 27 has an invalid length. [ 1431.815135][T14365] bridge0: port 1(vlan2) entered blocking state [ 1431.822496][T14365] bridge0: port 1(vlan2) entered disabled state [ 1431.829892][T14365] vlan2: entered allmulticast mode [ 1431.909406][T14365] vlan2: left allmulticast mode [ 1432.091337][ T7031] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1433.043008][T14381] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 1433.049834][T14381] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1433.058739][T14381] vhci_hcd vhci_hcd.0: Device attached [ 1433.104765][T14382] vhci_hcd: connection closed [ 1433.151840][T11948] vhci_hcd: stop threads [ 1433.161264][T11948] vhci_hcd: release socket [ 1433.165976][T11948] vhci_hcd: disconnect device [ 1433.189889][ T6408] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1433.393922][ T6408] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.404785][ T6408] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1433.493524][ T6408] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1433.503962][ T6408] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.512534][ T6408] usb 7-1: Product: syz [ 1433.517055][ T6408] usb 7-1: Manufacturer: syz [ 1433.522015][ T6408] usb 7-1: SerialNumber: syz [ 1433.625564][ T6408] usb 7-1: selecting invalid altsetting 1 [ 1434.491491][T14394] loop0: detected capacity change from 0 to 512 [ 1434.579627][ T6408] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS [ 1434.586128][ T6408] cdc_mbim 7-1:1.0: bind() failure [ 1434.632037][T14398] loop7: detected capacity change from 0 to 512 [ 1434.648931][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 1434.649014][ T29] audit: type=1326 audit(2000000252.570:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14393 comm="syz.0.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e02585d19 code=0x7ffc0000 [ 1434.680725][ T29] audit: type=1326 audit(2000000252.570:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14393 comm="syz.0.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e02585d19 code=0x7ffc0000 [ 1434.704537][ T29] audit: type=1326 audit(2000000252.570:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14393 comm="syz.0.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3e02585d19 code=0x7ffc0000 [ 1434.750090][ T29] audit: type=1326 audit(2000000252.680:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14395 comm="syz.7.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1434.776102][ T29] audit: type=1326 audit(2000000252.690:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14395 comm="syz.7.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1434.800093][ T29] audit: type=1326 audit(2000000252.690:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14395 comm="syz.7.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1434.823029][ T29] audit: type=1326 audit(2000000252.700:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14395 comm="syz.7.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1434.866097][T14397] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2074'. [ 1434.876439][T14397] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2074'. [ 1434.886517][T14397] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2074'. [ 1434.896023][T14397] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2074'. [ 1435.094587][ T29] audit: type=1326 audit(2000000252.860:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14395 comm="syz.7.2073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f273a385d19 code=0x7ffc0000 [ 1435.118112][ T29] audit: type=1326 audit(2000000252.860:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14393 comm="syz.0.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e02585d19 code=0x7ffc0000 [ 1435.141075][ T29] audit: type=1326 audit(2000000252.860:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14393 comm="syz.0.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e02585d19 code=0x7ffc0000 [ 1435.309163][T14411] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2076'. [ 1435.767849][T14420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1435.777555][T14420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1436.240924][T14419] loop7: detected capacity change from 0 to 4096 [ 1436.455871][T14419] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1436.885780][T14419] netlink: 'syz.7.2078': attribute type 27 has an invalid length. [ 1436.897542][T14419] macvtap2: left promiscuous mode [ 1436.903180][T14419] macvtap2: left allmulticast mode [ 1437.476178][T13269] usb 7-1: USB disconnect, device number 9 [ 1437.529409][T14448] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1437.536241][T14448] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1437.546367][T14448] vhci_hcd vhci_hcd.0: Device attached [ 1437.603832][T14449] vhci_hcd: connection closed [ 1437.623049][ T3698] vhci_hcd: stop threads [ 1437.633409][ T3698] vhci_hcd: release socket [ 1437.638912][ T3698] vhci_hcd: disconnect device [ 1437.691328][ T6448] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1438.854107][T14461] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2088'. [ 1438.866376][T14461] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2088'. [ 1438.876660][T14461] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2088'. [ 1438.886053][T14461] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2088'. [ 1438.912684][ C0] ===================================================== [ 1438.920408][ C0] BUG: KMSAN: uninit-value in tcp_parse_options+0x1006/0x1de0 [ 1438.928189][ C0] tcp_parse_options+0x1006/0x1de0 [ 1438.933508][ C0] tcp_validate_incoming+0x3ea/0x3070 [ 1438.939195][ C0] tcp_rcv_established+0xa32/0x2510 [ 1438.944605][ C0] tcp_v4_do_rcv+0x7f3/0x11a0 [ 1438.949660][ C0] tcp_v4_rcv+0x51df/0x5750 [ 1438.954375][ C0] ip_protocol_deliver_rcu+0x2a3/0x13d0 [ 1438.960268][ C0] ip_local_deliver_finish+0x336/0x500 [ 1438.965919][ C0] ip_local_deliver+0x21f/0x490 [ 1438.971073][ C0] ip_rcv_finish+0x4a2/0x520 [ 1438.975860][ C0] ip_rcv+0xcd/0x380 [ 1438.980076][ C0] __netif_receive_skb+0x319/0xa00 [ 1438.985499][ C0] process_backlog+0x4ad/0xa50 [ 1438.990550][ C0] __napi_poll+0xe7/0x980 [ 1438.995069][ C0] net_rx_action+0xa5a/0x19b0 [ 1439.000043][ C0] handle_softirqs+0x1a0/0x7c0 [ 1439.005104][ C0] __do_softirq+0x14/0x1a [ 1439.009817][ C0] do_softirq+0x9a/0x100 [ 1439.014293][ C0] __local_bh_enable_ip+0x9f/0xb0 [ 1439.019674][ C0] __dev_queue_xmit+0x2758/0x57d0 [ 1439.024893][ C0] ip_finish_output2+0x187c/0x1b70 [ 1439.030309][ C0] __ip_finish_output+0x287/0x810 [ 1439.035562][ C0] ip_finish_output+0x4b/0x600 [ 1439.040621][ C0] ip_output+0x15f/0x3f0 [ 1439.045055][ C0] __ip_queue_xmit+0x1f2a/0x20d0 [ 1439.050291][ C0] ip_queue_xmit+0x60/0x80 [ 1439.054913][ C0] __tcp_transmit_skb+0x3cea/0x4900 [ 1439.060394][ C0] tcp_write_xmit+0x3b90/0x9070 [ 1439.065412][ C0] __tcp_push_pending_frames+0xc4/0x380 [ 1439.071261][ C0] tcp_send_fin+0x9f6/0xf50 [ 1439.075931][ C0] __tcp_close+0x140c/0x1550 [ 1439.080825][ C0] __mptcp_close_ssk+0x74e/0x16f0 [ 1439.086162][ C0] mptcp_close_ssk+0x26b/0x2c0 [ 1439.091236][ C0] mptcp_pm_nl_rm_addr_or_subflow+0x635/0xd10 [ 1439.097591][ C0] mptcp_pm_nl_flush_addrs_doit+0xe10/0x1630 [ 1439.103871][ C0] genl_rcv_msg+0x1214/0x12c0 [ 1439.108899][ C0] netlink_rcv_skb+0x375/0x650 [ 1439.113907][ C0] genl_rcv+0x40/0x60 [ 1439.118124][ C0] netlink_unicast+0xf52/0x1260 [ 1439.123155][ C0] netlink_sendmsg+0x10da/0x11e0 [ 1439.128377][ C0] __sock_sendmsg+0x30f/0x380 [ 1439.133355][ C0] ____sys_sendmsg+0x877/0xb60 [ 1439.138409][ C0] ___sys_sendmsg+0x28d/0x3c0 [ 1439.143284][ C0] __x64_sys_sendmsg+0x212/0x3c0 [ 1439.148496][ C0] x64_sys_call+0x2ed6/0x3c30 [ 1439.153418][ C0] do_syscall_64+0xcd/0x1e0 [ 1439.158251][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.164435][ C0] [ 1439.166856][ C0] Uninit was created at: [ 1439.171481][ C0] kmem_cache_alloc_node_noprof+0x907/0xe00 [ 1439.177659][ C0] kmalloc_reserve+0x13d/0x4a0 [ 1439.182756][ C0] __alloc_skb+0x363/0x7b0 [ 1439.187341][ C0] tcp_send_fin+0x3b9/0xf50 [ 1439.192134][ C0] __tcp_close+0x140c/0x1550 [ 1439.196943][ C0] __mptcp_close_ssk+0x74e/0x16f0 [ 1439.202282][ C0] mptcp_close_ssk+0x26b/0x2c0 [ 1439.207246][ C0] mptcp_pm_nl_rm_addr_or_subflow+0x635/0xd10 [ 1439.213655][ C0] mptcp_pm_nl_flush_addrs_doit+0xe10/0x1630 [ 1439.219944][ C0] genl_rcv_msg+0x1214/0x12c0 [ 1439.224798][ C0] netlink_rcv_skb+0x375/0x650 [ 1439.229866][ C0] genl_rcv+0x40/0x60 [ 1439.234010][ C0] netlink_unicast+0xf52/0x1260 [ 1439.239156][ C0] netlink_sendmsg+0x10da/0x11e0 [ 1439.244302][ C0] __sock_sendmsg+0x30f/0x380 [ 1439.249311][ C0] ____sys_sendmsg+0x877/0xb60 [ 1439.254267][ C0] ___sys_sendmsg+0x28d/0x3c0 [ 1439.259226][ C0] __x64_sys_sendmsg+0x212/0x3c0 [ 1439.264366][ C0] x64_sys_call+0x2ed6/0x3c30 [ 1439.269362][ C0] do_syscall_64+0xcd/0x1e0 [ 1439.274052][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.280266][ C0] [ 1439.282737][ C0] CPU: 0 UID: 0 PID: 14461 Comm: syz.6.2088 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1439.293829][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1439.304136][ C0] ===================================================== [ 1439.311290][ C0] Disabling lock debugging due to kernel taint [ 1439.317574][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 1439.324147][ C0] CPU: 0 UID: 0 PID: 14461 Comm: syz.6.2088 Tainted: G B 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 1439.336613][ C0] Tainted: [B]=BAD_PAGE [ 1439.340881][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1439.351093][ C0] Call Trace: [ 1439.354494][ C0] [ 1439.357447][ C0] dump_stack_lvl+0x216/0x2d0 [ 1439.362339][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1439.368345][ C0] dump_stack+0x1e/0x24 [ 1439.372703][ C0] panic+0x4e2/0xcf0 [ 1439.376806][ C0] ? kmsan_get_metadata+0xf1/0x1c0 [ 1439.382120][ C0] kmsan_report+0x2c7/0x2d0 [ 1439.386806][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1439.392201][ C0] ? kmsan_internal_poison_memory+0x7d/0x90 [ 1439.398338][ C0] ? ip_queue_xmit+0x60/0x80 [ 1439.403127][ C0] ? __msan_warning+0x95/0x120 [ 1439.408109][ C0] ? tcp_parse_options+0x1006/0x1de0 [ 1439.413610][ C0] ? tcp_validate_incoming+0x3ea/0x3070 [ 1439.419385][ C0] ? tcp_rcv_established+0xa32/0x2510 [ 1439.424970][ C0] ? tcp_v4_do_rcv+0x7f3/0x11a0 [ 1439.430034][ C0] ? tcp_v4_rcv+0x51df/0x5750 [ 1439.434926][ C0] ? ip_protocol_deliver_rcu+0x2a3/0x13d0 [ 1439.440830][ C0] ? ip_local_deliver_finish+0x336/0x500 [ 1439.446650][ C0] ? ip_local_deliver+0x21f/0x490 [ 1439.451866][ C0] ? ip_rcv_finish+0x4a2/0x520 [ 1439.456814][ C0] ? ip_rcv+0xcd/0x380 [ 1439.461050][ C0] ? __netif_receive_skb+0x319/0xa00 [ 1439.466531][ C0] ? process_backlog+0x4ad/0xa50 [ 1439.471674][ C0] ? __napi_poll+0xe7/0x980 [ 1439.476368][ C0] ? net_rx_action+0xa5a/0x19b0 [ 1439.481422][ C0] ? handle_softirqs+0x1a0/0x7c0 [ 1439.486581][ C0] ? __do_softirq+0x14/0x1a [ 1439.491296][ C0] ? do_softirq+0x9a/0x100 [ 1439.495929][ C0] ? __local_bh_enable_ip+0x9f/0xb0 [ 1439.501349][ C0] ? __dev_queue_xmit+0x2758/0x57d0 [ 1439.506739][ C0] ? ip_finish_output2+0x187c/0x1b70 [ 1439.512252][ C0] ? __ip_finish_output+0x287/0x810 [ 1439.517682][ C0] ? ip_finish_output+0x4b/0x600 [ 1439.522835][ C0] ? ip_output+0x15f/0x3f0 [ 1439.527456][ C0] ? __ip_queue_xmit+0x1f2a/0x20d0 [ 1439.532802][ C0] ? ip_queue_xmit+0x60/0x80 [ 1439.537592][ C0] ? __tcp_transmit_skb+0x3cea/0x4900 [ 1439.543181][ C0] ? tcp_write_xmit+0x3b90/0x9070 [ 1439.548377][ C0] ? __tcp_push_pending_frames+0xc4/0x380 [ 1439.554377][ C0] ? tcp_send_fin+0x9f6/0xf50 [ 1439.559239][ C0] ? __tcp_close+0x140c/0x1550 [ 1439.564227][ C0] ? __mptcp_close_ssk+0x74e/0x16f0 [ 1439.569637][ C0] ? mptcp_close_ssk+0x26b/0x2c0 [ 1439.574794][ C0] ? mptcp_pm_nl_rm_addr_or_subflow+0x635/0xd10 [ 1439.581259][ C0] ? mptcp_pm_nl_flush_addrs_doit+0xe10/0x1630 [ 1439.587624][ C0] ? genl_rcv_msg+0x1214/0x12c0 [ 1439.592657][ C0] ? netlink_rcv_skb+0x375/0x650 [ 1439.597807][ C0] ? genl_rcv+0x40/0x60 [ 1439.602132][ C0] ? netlink_unicast+0xf52/0x1260 [ 1439.607359][ C0] ? netlink_sendmsg+0x10da/0x11e0 [ 1439.612692][ C0] ? __sock_sendmsg+0x30f/0x380 [ 1439.617776][ C0] ? ____sys_sendmsg+0x877/0xb60 [ 1439.622912][ C0] ? ___sys_sendmsg+0x28d/0x3c0 [ 1439.627949][ C0] ? __x64_sys_sendmsg+0x212/0x3c0 [ 1439.633260][ C0] ? x64_sys_call+0x2ed6/0x3c30 [ 1439.638337][ C0] ? do_syscall_64+0xcd/0x1e0 [ 1439.643193][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.649497][ C0] ? __memcg_slab_free_hook+0x195/0x570 [ 1439.655264][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1439.660657][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1439.666672][ C0] __msan_warning+0x95/0x120 [ 1439.671498][ C0] tcp_parse_options+0x1006/0x1de0 [ 1439.676849][ C0] tcp_validate_incoming+0x3ea/0x3070 [ 1439.682461][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1439.687862][ C0] tcp_rcv_established+0xa32/0x2510 [ 1439.693288][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1439.699315][ C0] ? __pfx_ipv4_dst_check+0x10/0x10 [ 1439.704797][ C0] tcp_v4_do_rcv+0x7f3/0x11a0 [ 1439.709712][ C0] tcp_v4_rcv+0x51df/0x5750 [ 1439.714477][ C0] ? tcp_v4_rcv+0x1811/0x5750 [ 1439.719375][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1439.724444][ C0] ip_protocol_deliver_rcu+0x2a3/0x13d0 [ 1439.730205][ C0] ip_local_deliver_finish+0x336/0x500 [ 1439.735879][ C0] ip_local_deliver+0x21f/0x490 [ 1439.740921][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1439.747115][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 1439.752687][ C0] ip_rcv_finish+0x4a2/0x520 [ 1439.757480][ C0] ip_rcv+0xcd/0x380 [ 1439.761551][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1439.766863][ C0] ? ip6_rcv_finish+0x8d0/0x970 [ 1439.771990][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1439.776674][ C0] __netif_receive_skb+0x319/0xa00 [ 1439.782002][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1439.787499][ C0] process_backlog+0x4ad/0xa50 [ 1439.792490][ C0] ? __pfx_process_backlog+0x10/0x10 [ 1439.797989][ C0] __napi_poll+0xe7/0x980 [ 1439.802514][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1439.807906][ C0] net_rx_action+0xa5a/0x19b0 [ 1439.812799][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1439.818195][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1439.824225][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1439.829568][ C0] handle_softirqs+0x1a0/0x7c0 [ 1439.834572][ C0] __do_softirq+0x14/0x1a [ 1439.839108][ C0] do_softirq+0x9a/0x100 [ 1439.843569][ C0] [ 1439.846610][ C0] [ 1439.849657][ C0] __local_bh_enable_ip+0x9f/0xb0 [ 1439.854946][ C0] __dev_queue_xmit+0x2758/0x57d0 [ 1439.860167][ C0] ? stack_depot_save_flags+0x2c/0x750 [ 1439.865946][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1439.871334][ C0] ? __dev_queue_xmit+0x3d6/0x57d0 [ 1439.876636][ C0] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1439.883225][ C0] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1439.889725][ C0] ip_finish_output2+0x187c/0x1b70 [ 1439.895080][ C0] __ip_finish_output+0x287/0x810 [ 1439.900325][ C0] ? nf_nat_ipv4_out+0x587/0x7d0 [ 1439.905567][ C0] ip_finish_output+0x4b/0x600 [ 1439.910552][ C0] ? __rcu_read_unlock+0x48/0xe0 [ 1439.915769][ C0] ip_output+0x15f/0x3f0 [ 1439.920213][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 1439.925792][ C0] ? __pfx_ip_output+0x10/0x10 [ 1439.930747][ C0] __ip_queue_xmit+0x1f2a/0x20d0 [ 1439.935911][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1439.941928][ C0] ip_queue_xmit+0x60/0x80 [ 1439.946550][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 1439.951868][ C0] __tcp_transmit_skb+0x3cea/0x4900 [ 1439.957288][ C0] ? mptcp_established_options+0x2440/0x39c0 [ 1439.963500][ C0] ? filter_irq_stacks+0x60/0x1a0 [ 1439.968814][ C0] tcp_write_xmit+0x3b90/0x9070 [ 1439.973864][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1439.979255][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1439.985307][ C0] __tcp_push_pending_frames+0xc4/0x380 [ 1439.991065][ C0] tcp_send_fin+0x9f6/0xf50 [ 1439.995768][ C0] __tcp_close+0x140c/0x1550 [ 1440.000582][ C0] ? __local_bh_enable_ip+0x74/0xb0 [ 1440.006016][ C0] ? _raw_spin_unlock_bh+0x2d/0x40 [ 1440.011337][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1440.016737][ C0] __mptcp_close_ssk+0x74e/0x16f0 [ 1440.021994][ C0] mptcp_close_ssk+0x26b/0x2c0 [ 1440.026992][ C0] mptcp_pm_nl_rm_addr_or_subflow+0x635/0xd10 [ 1440.033310][ C0] mptcp_pm_nl_flush_addrs_doit+0xe10/0x1630 [ 1440.039521][ C0] ? __pfx_mptcp_pm_nl_flush_addrs_doit+0x10/0x10 [ 1440.046170][ C0] genl_rcv_msg+0x1214/0x12c0 [ 1440.051053][ C0] ? __pfx_mptcp_pm_nl_flush_addrs_doit+0x10/0x10 [ 1440.057723][ C0] netlink_rcv_skb+0x375/0x650 [ 1440.062723][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1440.067946][ C0] ? __pfx_genl_rcv+0x10/0x10 [ 1440.072798][ C0] genl_rcv+0x40/0x60 [ 1440.076940][ C0] netlink_unicast+0xf52/0x1260 [ 1440.082015][ C0] netlink_sendmsg+0x10da/0x11e0 [ 1440.087181][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1440.092678][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1440.098185][ C0] __sock_sendmsg+0x30f/0x380 [ 1440.103091][ C0] ____sys_sendmsg+0x877/0xb60 [ 1440.108073][ C0] ___sys_sendmsg+0x28d/0x3c0 [ 1440.112971][ C0] ? __rcu_read_unlock+0x7b/0xe0 [ 1440.118131][ C0] ? __fget_files+0x42b/0x500 [ 1440.123030][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1440.128412][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1440.134415][ C0] __x64_sys_sendmsg+0x212/0x3c0 [ 1440.139561][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 1440.144950][ C0] x64_sys_call+0x2ed6/0x3c30 [ 1440.149854][ C0] do_syscall_64+0xcd/0x1e0 [ 1440.154558][ C0] ? clear_bhb_loop+0x25/0x80 [ 1440.159470][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.165605][ C0] RIP: 0033:0x7f6f68f85d19 [ 1440.170177][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1440.190018][ C0] RSP: 002b:00007f6f69cf2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1440.198647][ C0] RAX: ffffffffffffffda RBX: 00007f6f69175fa0 RCX: 00007f6f68f85d19 [ 1440.206797][ C0] RDX: 0000000000000800 RSI: 0000000020000200 RDI: 0000000000000008 [ 1440.214934][ C0] RBP: 00007f6f69001a20 R08: 0000000000000000 R09: 0000000000000000 [ 1440.223076][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1440.231204][ C0] R13: 0000000000000000 R14: 00007f6f69175fa0 R15: 00007ffdf13999c8 [ 1440.239378][ C0] [ 1440.242810][ C0] Kernel Offset: disabled [ 1440.247222][ C0] Rebooting in 86400 seconds..