last executing test programs: 4m31.297159784s ago: executing program 2 (id=83): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000040000a9f850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='netlink_extack\x00', r4}, 0x10) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 4m30.093896682s ago: executing program 2 (id=88): syz_emit_ethernet(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) iopl(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000540)=ANY=[], 0x0) 4m28.998038244s ago: executing program 2 (id=94): syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x1}, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x3, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x4, 0x6, 0x3, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x2, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$unix(0x1, 0x2, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x1000d, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m28.141016927s ago: executing program 2 (id=95): mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1be) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) epoll_create1(0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x31001, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 4m26.188023739s ago: executing program 2 (id=103): openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 4m24.888619855s ago: executing program 2 (id=106): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @empty}, {0x0, @link_local}, 0xa, {0x2, 0x0, @multicast2}, 'lo\x00'}) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x4e, {}, 'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 4m22.029160908s ago: executing program 32 (id=106): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @empty}, {0x0, @link_local}, 0xa, {0x2, 0x0, @multicast2}, 'lo\x00'}) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x4e, {}, 'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2m23.108375133s ago: executing program 3 (id=399): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2m18.892901396s ago: executing program 3 (id=406): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036887f"], 0x38}}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100104b3ec10030478fa03000000030109021200010004004009049a0000a2"], 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x58, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7000}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x10001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 2m16.055870803s ago: executing program 3 (id=417): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f00000000c0)={0x0, 0x30, 0x33, {0x33, 0x1, "dcdacc7be562a4533b84aea757a40580a2af821519e64a13fe4305c1772069d7bfd533a38770412a7da7fde55ab261e050"}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x81, 0xffffffff}) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 2m12.124035666s ago: executing program 3 (id=427): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', &(0x7f0000000140)=@ethtool_perm_addr={0x4b, 0x3c, "daf1684742d14158e6f99acdcb772855f1382b7174e79aa7f0cc9b7df925b75915486e4660ac7ad098cde9ce80baf8a1c16f14c05616fb6827b1c709"}}) socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c3741, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000040)={0x80000008}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r2, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) 2m10.973918126s ago: executing program 3 (id=430): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001800)='./file0\x00', 0x1242c50, &(0x7f0000000080)=ANY=[], 0xfd, 0x1500, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bELADQGTtjF+yCXbErdsPn8Dl8Hp/HF/AF7IVVVW/sg32wL/bF/jgAB+BLOAhfxpfxFRyCQ3EYvoqv4ms4As/gSByFo3E0VlJjcRyOR1YTMRmTMTNMwsk4GafgVJyK03EGzsRZOAtn4xycg+/iPJyP83EhLsTFuASX4FJ8H1MwBZfhWUzF5bgCV+IqXI2rcC2uw7W4ATfiBtyMm3ErbsWP8CPcgTtwF+7CPbgHP8aP8RP8BIdgGqbhATyAB/EgHsJDeBgP4xE8gkfxKB7DY3gcj+MJPImn8CSextN4Bs/iOQA4j+fxAl7Ai3gx/cOv0hllVCaVSSWoBJWoElVWlVVlV9lVTMVUTpVT5VK5VG6VW+VVeVV+lV8VVAUVKVKsIlVIFVJxFVdFVBFVVBVVxVVx5ZRTpVQpVVqVVmVUGVVW3azKqVtUeVVBtXG3qltVJdXWVVZ3qCqqiqqqqqnqqoaqoWqqmqqWqqVqq9qqjqqj6qr7VT3VG/tjA5XemUZqKDZWw7CpaqaaqxbqNXxYtVIjsLVqo9qqR9UoHIntVSvXQT2hOqpx2Ek9pcbj06qLmohd1bOqm3pOdVfPqx6qteupeqkp2Fv1UdOxr+qn+qsBajZWU+kdq65eUc9nHqqGqVfVYnxNjVCvq5FqlBqt3lBj1Fg1To1XE9RElazeVJPUW2qyeltNUVPVNDVdzVAz1Sz1jpqt5qi56l01T81XC9RCtUgtVkvUe2qpel+lqA/UMvWhSlXL1Qq1Uq1Sq9UatVatU+vVBrVRbVKb1Ra1VW1TH6ntaofaqXap3WqP2qs+VvvUJ2q/+lSlqc/UAfUXdVB9rg6pL9Rh9aU6or5SR9XX6pj6Rh1X36oT6qQ6pb5Tp9X36ow6q86pH9R59aO6oH5SF5VXoFErrbXRgc6kM+sEnUUn6qt0Vp1NZ9c5dExfrXPqa3Qufa3OrfPovCafzq8L6II61KStZh3pQrqwjuvrdBF9vS6qi+niuoR2uqQupW/QpfWNuoy+SZfVN+ty+hZdXlfQFT3o23QlfbuurO/QVfSduqqupqvrGvouXVPfrWvpe3Rtfa+uo+/TdfX9up5+QNfXDXRD/aBupB/SjXUT3VQ30811C91SP6xb6Ud0a91Gt9WP6nb6Md1eP6476Cd0R/2k7qSf0p3107qLfkZ31c/qbvo53V3/pC9qr3vqXjpJ99Z99Iu6r+6n++sBeqB+SQ/SL+vB+hU9RA/Vw/Srerh+TY/Qr+uRepQerd/QY/RYPU6P1xP0RJ2s39ST9Ft6sn5bT9FT9TQ9Xc/QM3X/X2ea+0/kv/V38gf/fPatepv+SG/XO/ROvUvv1nv0Xr1X79P79H69X6fpNH1AH9AH9UF9SB/Sh/VhfUQf0Uf1UX1MH9PH9XF9Qp/UP+jv9Gn9vT6jz+qz+gd9Xp/XF379GYBBo4w2xgQmk8lsEkwWk2iuMllNNpPd5DAxc7XJaa4xucy1JrfJY/KafCa/KWAKmtCQsYZNZAqZwiZurjNFzPWmqClmipsSxpmSppS54X+cf7n6WpqWppVpZVqb1qataWvamXamvWlvOpgOpqPpaDqZTqaz6Wy6mC6mq+lqupluprvpbnqYHqan6WmSTJLpY140fU0/098MMAPNS2aQGWQGm8FmiBlihplhZrgZbkaYEWakGWlGm9FmjBljxplxZoKZYJJ9DjPJTDKTzWQzxUwx0wbmMDPMDDPLzDKzzWwz18w188w8s8AsMIvMIrPELDFLzVKTYlLMMrPMpJrlZrlZaVaa1Wa1WWvWmvVmvdloNprNZrNJNdvMNrPdbDc7zU6z2+w2e81es8/sM/vNfpNm0swBc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQX02/7AhWowAQmyBRkChKChCAxSAyyBlmD7EH2IBbEgpxBziBXcG2QO8gT5A3yBfmDAkHBIAwosAEHUVAoKBzEg+uCIsH1QdGgWFA8KBG4oGRQKrghKB3cGJQJbgrKBjcH5YJbgvJBhaBicGtwW1ApuD2oHNwRVAnuDKoG1YLqQY3grqBmcHdQK7gnqB3cG9QJ7gvqBvcH9YIHgvpBg6Bh8GDQKHgoaBw0CZoGzYLmQYug5R86v/dn8jzieoa9wqSwd9gnfDHsG/YL+4cDwoHhS+Gg8OVwcPhKOCQcGg4LXw2Hh6+FI8LXw5HhqHB0+EY4JhwbjgvHhxPCiWFy+GY4KXwrnBy+HU4Jp4bTgunhjHBmOCt8J5wdzgnnhu+G88L54YJwYbgoXBziL7fEkBJ+EC4LPwxTw+XhinBluCpcHa4J14brwvXhhnBjuCncXHbQL4eG28Md4c5wV7g73BPuDT8O94WfhPvDT8O08LPwQPiX8GD4eXgo/CI8HH4ZHgm/Co+GX4fHwm/C4+G34YnwZHgq/C48HX4fngnPhufCH8Lz4Y/hhfCn8GLo02/u0y/vZMhQJspECZRAiZRIWSkrZafsFKMY5aSclItyUW7KTXkpL+Wn/FSQClI6JqZCVIjiFKciVISKUlEqTsXJkaNSVIpKU2kqQ2WoLJWlclSOylN5qkgV6Ta6jW6n2+kOuoPupDupGlWjGlSDalJNqkW1qDbVpjpUh+pSXapH9ag+1aeG1JAaUSNqTI2pKTWl5tScWlJLakWtqDW1prbUltpRO2pP7akDdaCO1JE6USfqTJ2pC3WhrtSVulE36k7dqQf1oJ7Uk5IoifpQH+pLfak/9aeBNJAG0SAaTINpCA2hYTSMhtNwGkEjaCSNotH0Bo2hsTSOxtMEmkjJlEyTaBJNpsk0habQNJpGM2gGzaJZNJtm01yaS/NoHi2gBbSIFtESWkJLaSmlUAoto2WUSqm0glbQKlpFa2gNraN1tIE20CbaRFtoC22jbbSdttNO2km7aTftpb20j/bRftpPaZRGB+gAHaSDdIgO0WE6TEfoCB2lo3SMjtFxOk4n6ASdolN0mk7TGTpD5+gcnacf6QL9RBfJU4LNYhPtVTarzWaz2xz2r+O8Np/NbwvYgja0uW2e38VkrS1qi9nitoR1tqQtZW/4m7i8rWAr2lvtbbaSvd1WtuVtFvivcU17t61l77G17b22hr3rd3Ede5+tax+y9WwTW982sw1tC9vIPmQb2ya2qW1mm9sWtp19zLa3j9sO9gnb0T75N/FS+75dZ9fbDXaj3Wc/sefsD/ao/dqetz/anraXHWhfsoPsy3awfcUOsUN/HwPY0fYNO8aOtePseDvBTvybeJqdbmfYmXaWfcfOtnP+Jl5i37PzbIpdYBfaRXbxz3F6TSn2A7vMfmhT7XK7wq60q+xqu8au/b+1rrSb7Ra71e61H9vtdofdaXfZ3XbPz3H6OvbbT22a/cwesV/Zg/Zze8ges4ftlz/H6es7Zr+xx+239oQ9aU/Z7+xp+709Y8/+vP70tX9nf7IXrbfAyIo1Gw44E2fmBM7CiXwVZ+VsnJ1zcIyv5px8Defiazk35+G8nI/zcwEuyCETW2aOuBAX5jhfx0X4ei7Kxbg4l2DHJbkU38Cl+UYuwzdxWb6Zy/EtXJ4rcEW+lW/jSnw7V+Y7uArfyVW5GlfnGnwX1+S7uRbfw7X5Xq7D93Fdvp/r8QNcnxtwQ36QG/FD3JibcFNuxs25Bbfkh7kVP8KtuQ235Ue5HT/G7flx7sBPcEd+kjvxU9yZn+Yu/Ax35We5Gz/H3fl57sEvcE/uxUncm/vwi9yX+3F/HsAD+SUexC/zYH6Fh/BQHsav8nB+jUfw6zySR/FofoPH8Fgex+N5Ak/kZH6TJ/FbPJnf5ik8lafxdJ7BM3kWv8OzeQ7P5Xd5Hs/nBbyQF/FiXsLv8VJ+n1P4A17GH3IqL+cVvJJX8Wpew2t5Ha/nDbyRN/Fm3sJbeRt/xNt5B+/kXbyb9/Be/pj38Se8nz/lNP6MD/Bf+CB/zof4Cz7MX/IR/oqP8td8jL/h4/wtn+CTfIq/49P8PZ/hs3yOf+Dz/CNf4J/4InuGCCMV6chEQZQpyhwlRFmixOiqKGuULcoe5Yhi0dVRzuiaKFd0bZQ7yhPljfJF+aMCUcEojCiyEUdRVCgqHMWj66Ii0fVR0ahYVDwqEbmoZFQquiEqHd0YlYluispGN0flolui8lGFqGJ0a3RbVCm6Paoc3RFVie6MqkbVoupRjeiuqGZ0d1QruieqHd0blYnui+pG90f1ogei+lGDqGH0YNQoeihqHDWJmkbNouZRi6hl9HDUKnokah21idpGj0btosei9tHjUYfoiahj9OSl/cWCX66mf7U/Keod6V/fkN2jF8UXx5fE34svjb8fT4l/EF8W/zCeGl8eXxFfGV8VXx1fE18bXxdfH98Q3xjfFN8c3xLfGve+RmZwmP4gDMYFLpPL7BJcFpfornJZXTaX3eVwMXe1y+mucbnctS63y+PyunwuvyvgCrrQkbOOXeQKucIu7q5zRdz1rqgr5oq7Es65kq6Ua+FaupaulXvEtXZtXFv3qHvUPeYec48n/Fq46+Secp3d066Le8Y945513dxzrrt73vVwL7ierpdLckmuj+vj+rq+rr/r7wa6gW6QG+QGu8FuiBvihrlhbrgb7ka4EW6kG+lGu9FujBvjxrlxboKb4JJdspvkJrnJbrKb4qa4aW6am+FmuFlulpvtZru5bq6b5+a5BW6BW+QWuSVuiVvqlroUl+KWuWUu1aW6FW6FW+VWuTVujVvn1rkNboPb5Da5LW6L2+a2ue1uu9vpdrrdbrfb6/a6fW6f2+/2uzSX5g64A+6gO+gOuS/cYfelO+K+ckfd1+6Y+8Ydd9+6E+6kO+W8Pu2+d2fcWXfO/eDOux/dBfeTu+i8S469GZsUeys2OfZ2bEpsamxabHpsRmxmbFbsndjs2JzY3Ni7sXmx+bEFsYWxRbHFsSWx92JLY+/HUmIfxJbFPoylxpbHVsRWxlbFVse8L7A98oV8YR/31/ki/npf1BfzxX0J73xJX8rf4Ev7G30Zf5Mv62/25fwtvryv4Cv6Jr6pb+ab+xa+pX/Yt/KP+Na+jW/rH/Xt/GO+vX/cd/BP+I7+Sd/JP+U7+6d9F/+M7+qfnf9rl30P/4Lv6Xv5JN/b9/Ev+r6+n+/vB/iB/iU/yL/sB/tX/BA/1A/zr/rh/jU/wr/uR/pRfrR/w4/xY/04P95P8BN9sn/TT/Jv+cn+bT/FT/XT/HQ/w8/0s/w7fraf4+f6d/08P98v8Av9Ir/YL/Hv+aX+fZ/iP/DL/Ic+1S/3K/xKv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81/5Lf7HX6n3+V3+z1+r//Y7/Of+P3+U5/mP/MH/F/8Qf+5P+S/8If9l/6I/8of9V/7Y/4bf9x/60/4k/6U/86f9t/7M/6sP+d/8Of9j/6C/8lflL9ZE0IIIYT4p+jL7O/9d/5P/bql6wMA2XbkO/zXc27K/cu4n9rXMQYAT/Tq2uC3rUGDpKSkX49N1RAUXggAsUv5P3//wK/xcmgLj0EHaAOl/259/VTFn+/7/rv54zcDJAJk+S0n/fEoEf56/hv/wfxN3uPLzb8QoGjhSznpJ/otvjR/mX8w/552l5k/y+fJAK3/S05WuBRfmr8UPAJPQoffHSmEEEIIIYQQQvyinzrf7XLPt+nP5/nNpZzMcCm+3PP5ZVT+I9YghBBCCCGEEEKI/97Tz3V//OEOHdp0/k8eZP5zlPEnGCAA/AnKkMGff3ClfzMJIYQQQggh/miXbvqvdCVCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIUTG9e9/Q5j6pw++0msUQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghrrT/EwAA//9r3FT6") r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x18) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @auto="6998f606000000d7"}, 0x21, 0x0, '\x00', @c}) r2 = openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x9c37611dc13d0d83) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) read$FUSE(r2, &(0x7f0000001840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setfsuid(r3) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m9.817036538s ago: executing program 3 (id=433): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) listen(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f00000016c0)={0x40000001}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x40, &(0x7f0000000240), 0x0, 0x19c, &(0x7f0000000000)="$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") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, r6, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @random="37e6fc966e04", {0x0, 0x7}}, 0x4c85, 0x50, @default, @val, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2m5.804238008s ago: executing program 33 (id=433): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) listen(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f00000016c0)={0x40000001}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x40, &(0x7f0000000240), 0x0, 0x19c, &(0x7f0000000000)="$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") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, r6, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @random="37e6fc966e04", {0x0, 0x7}}, 0x4c85, 0x50, @default, @val, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m30.026389222s ago: executing program 6 (id=531): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioperm(0x0, 0x7, 0x7) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x2b, 0xd, 0xffffffffffffffff) signalfd(r0, &(0x7f0000000100)={[0x89]}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m29.416501951s ago: executing program 6 (id=532): landlock_create_ruleset(&(0x7f0000000040)={0x1, 0x3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x7fffffffffffffff, 0x0, 0x1, 0x1d, 0x8, "0f74aaa2f4af11f6ffa35d446b8ef9f0732beeb2239ae850dab40884c1b27a779803e2175893261101ba32e857e8b58f6025f9d864028bead5175d01c938ae88", "d137397b58a2f4892476f32700d61ecfb62c8fb6814ef9f09dbad8d629071742237eac095126a9905cd74607098d80d875f850fdffaf70f8aa755c7842540162", "34c258af26e2b617d4aa8407f13a0f36bb3c671359e53d1c6c0e03d2f9a13c98", [0x4, 0x2]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = syz_io_uring_setup(0x59e4, &(0x7f0000000080)={0x0, 0x5e43, 0x10100, 0x4, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m28.595303456s ago: executing program 6 (id=536): socket(0x40000000015, 0x5, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000340)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000300)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m27.832295621s ago: executing program 6 (id=540): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nouid32}]}, 0x1, 0x461, &(0x7f0000000540)="$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") r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='mode=0']) pipe2$9p(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, &(0x7f0000000100)) 1m26.733397651s ago: executing program 6 (id=545): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="6f9726afdac27f9b5624", 0xa}], 0x1}}], 0x1, 0x20004000) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 1m25.87218827s ago: executing program 6 (id=549): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611080000000000007000000000000009500000000080000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000004340)={0x1a, "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"}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000180)='blkio.bfq.io_service_time\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810620000000000905820220000000000905030208"], 0x0) 1m22.667129512s ago: executing program 34 (id=549): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611080000000000007000000000000009500000000080000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000004340)={0x1a, "71f52a574b41f4d9d33a2108ea592883e692f7a8cce7ccaf9bd0e51f63b07a2b79d355d0bee3f59779942c45cbdb9026f698d5632112edfe68857d9c5d43eaf523a6565cf3c8de824917ee6438f4db8d08744f3699869fc6dc2c59530742ccafdf6aa7f780800b7e68f37ad9325f04c013d4b4042a8dbfb18dcf335a0b68487a8ef725500c2879d45e6930f51c3a4eccdd354ea04cb44772a1099d0882efcaa3c9973e03b8b538f7c1e1a1f8ed0eda7e903c19add9bac88a49cee3eae925307f53337f1084aa2ce1688d9f3e6f45f3a8426718b2644b6c8843336cd5e8f517fae95327a81f4ae1dd005e5edb3357f7d0c873d49d2126fba1eef58245fe2274a6dac298e8fe8352c363f10fd5242fb4b346f3629afce0e680066ecef89562a8ba14a13d7cbb0114c232f28831c1001b9071f02af3ed47bb74dea25b1a6947c188d06e64064dfec0cd17c417399a11b5f121f2472344f508b766c575711eab111c328152b4c40d37f91b17cbed9503204191ca989968f717f8f1db6e9df332aaa8bfe6369d6471bf2f1873a83df9e1c08bfb76ea3de24bcc5da680962bc28ad2accbc020a754487b8787577ba3e10ce96383e1fa981f4c06bdcc5359a27405ac8e1a455086040f29df0bfc6e4e7619e37934fa03a852521ab13d080c6922398ce219c30caadc83bf70220754401b58294b23b47a288eed75b9877ab0115e532a53"}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000180)='blkio.bfq.io_service_time\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810620000000000905820220000000000905030208"], 0x0) 16.286911273s ago: executing program 7 (id=727): r0 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000180)={0x9, 0x0, 0x800000}, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000e41f08000340000001"], 0xd0}}, 0x20050800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x24, 0x1, 0x4, 0x801, 0x0, 0x0, {0xf, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0xd66d6ab7d62c4c4}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x14) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) 11.727752073s ago: executing program 1 (id=731): mount$cgroup(0x0, 0x0, 0x0, 0x2010042, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x1c) epoll_create(0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) read(r3, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 9.469441591s ago: executing program 1 (id=735): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e, 0xe88}, 0x8}], 0x32, 0x10122, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f00000000c0)=@arm64={0xa, 0x4, 0x81, '\x00', 0x8001}) 8.243829297s ago: executing program 0 (id=736): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast2}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl0\x00', r3, 0x8, 0x1, 0x7de, 0xf094, {{0x5, 0x4, 0x3, 0x4, 0x14, 0x68, 0x0, 0x1, 0x29, 0x0, @multicast1, @rand_addr=0x64010100}}}}) r4 = memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01senux\x00', 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b0af8ff00000000bfa000000000000007010000f6ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0xfed, &(0x7f0000001e00)=""/4077, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163760f00700000000900010073797a310000"], 0xe8}, 0x1, 0x0, 0x0, 0x8040}, 0x4008000) 8.243270034s ago: executing program 4 (id=737): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x27, 0x4, 0x80000000) bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1}, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000240)=0x1, &(0x7f0000000400)=0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000540)='GPL\x00', 0x8, 0xff5, &(0x7f0000001e00)=""/4085, 0x61680, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect(r3, &(0x7f0000000280)=@rc={0x1f, @none, 0x3}, 0x80) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x46, 0x2}, @const={0x3, {0x400, 0x5, 0xa, 0x3}}}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e23, 0xa0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, 0x8, 0x8}, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, 0x0, 0x0) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000002, 0x12, 0xffffffffffffffff, 0xf3d5e000) 8.126675928s ago: executing program 7 (id=738): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 7.848546569s ago: executing program 1 (id=739): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r6, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 7.824193361s ago: executing program 5 (id=740): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="00000000000000007abe873318b8d8c37a71a9b862bcf900000000000000000000000092d5549131b78b47483e16daa633aea82e78641d6b44db8882987a629400a6bac13c89064f150aa0", @ANYRES32=0x0, @ANYRES32], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x1e1e, 0x0, 0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r3, 0x0) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000732c355fd36f1bf8366c95327c52c9eb2619"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth1_to_bridge\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r7, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r7, {0x0, 0x7}, {}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 7.398652827s ago: executing program 4 (id=741): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000007c0)='rseq_update\x00', r1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51cd20000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, r4, 0x1, 0x7}, 0x14) 6.575114466s ago: executing program 5 (id=742): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000080)}, 0x10) socket$packet(0x11, 0xa, 0x300) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x0) epoll_create1(0x0) epoll_create1(0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000140)) 6.426606288s ago: executing program 7 (id=743): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000180), 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='}\x00', &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='%*.\x00', &(0x7f0000000400)='^,/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='(!\xef(.(\\-]\x00', &(0x7f0000000080)='\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000680)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000540)='./file0\x00', 0xffffffffffffff9c) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='\x00', &(0x7f0000000500)='^,/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='fuseblk\x00', &(0x7f00000004c0)='\x1c@\\\x00', 0x0) read(r0, 0x0, 0x0) close(r0) 6.338372834s ago: executing program 4 (id=744): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x4000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) listen(r1, 0x9) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 6.11837097s ago: executing program 1 (id=745): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x24fd, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x2, 0x1000000, 0x2c, @mcast2, @private0, 0x7800, 0x80, 0x20003, 0x270}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5.757250551s ago: executing program 5 (id=746): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x20000000000001f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24fa, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x24844}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5.680318562s ago: executing program 7 (id=747): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009900"], 0x50) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) r0 = socket$netlink(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x8, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 5.571391403s ago: executing program 0 (id=748): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 5.496029207s ago: executing program 4 (id=749): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read(r0, &(0x7f00000002c0)=""/246, 0xf6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x100, 0xba}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x1, 0x5, 0x2], 0x0, 0x0}, 0x78) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}, 0x1, 0x2}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 4.925261973s ago: executing program 5 (id=750): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_emit_ethernet(0x3a, &(0x7f0000000d00)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x10, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x4, 0x8, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 3.379344324s ago: executing program 1 (id=751): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_MM(0x23, 0x2, &(0x7f00002d5000/0x2000)=nil) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x100000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.339882566s ago: executing program 0 (id=752): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x4, 0x5, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x4}}}}}}}, 0x0) 3.294809364s ago: executing program 7 (id=753): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) 3.22192968s ago: executing program 4 (id=754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r0) r4 = fcntl$dupfd(r1, 0x406, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x4000}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = socket$kcm(0x2, 0xa, 0x2) read$msr(r3, &(0x7f0000000280)=""/132, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.488750392s ago: executing program 0 (id=755): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x274, &(0x7f0000000000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(0xffffffffffffffff, 0x4002f516, &(0x7f0000000500)={0x98, 0x4}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r3 = open(0x0, 0x64842, 0x86) pwritev2(r3, 0x0, 0x0, 0x7800, 0x0, 0x3) r4 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000340)=""/28) 1.797395325s ago: executing program 5 (id=756): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x10, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) preadv(r3, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000140)=""/117, 0x75}], 0x2, 0xff, 0xb26) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x458, 0xffffffff, 0x0, 0x0, 0xe4, 0xfeffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0x15c, 0x180, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0x1, 0xdd8}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4b4) getpid() 995.597429ms ago: executing program 0 (id=757): socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) 865.48325ms ago: executing program 4 (id=758): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20008145, &(0x7f0000000040)={0xa, 0x4e23, 0x10, @local, 0xf5}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x18002) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x8e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 501.031111ms ago: executing program 7 (id=759): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x80, 0x4}, {0x401, 0x200}}}}, 0x11) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x3b4, r1, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffc, 0x5b}}}}, [@NL80211_ATTR_TESTDATA={0xe7, 0x45, "a1cbda92317377c06b3c2a5adef2d04822321f7b915786ff4ee6c3d2f124370aab5f3b29a45248bd3b665827ccdec08e5fb096831f9598e8ae815c363f4576c392ec890f39584dfc9441420518ec8bb49d36becece430aba4e277dd70b4fb72e08521d1722a84af1ea5c079bfaf30fb6d31464a336e3c926afd2ba017d8803bc2512dfad147a5a79ddc70f3f46483cf2de752ef02a2c668218983c86841ddc32b3ee2e46e8a81e0927478150f2d39e3de2c6f951bf40ebb76337cd46215067c7832247fff7d60b12e0dcbf8536bb022df67593ca1dba214755afd9419f4c5764095098"}, @NL80211_ATTR_TESTDATA={0x5d, 0x45, "5c1d0aaa3cf2d6d34a8f1b68a6c825e5c744593bf94214a407fa3501529aecb534bb5a42e743b2622f0ed88e251c3bd5f94facde03812c4ae29f1eb45087567d7dc15bd37727f865e4b5f2caa81da3bef07efa2e189db54957"}, @NL80211_ATTR_TESTDATA={0xe6, 0x45, "41ec54c6ba43996dd071d28f5ef233baacb0aa3ad29507702c90ea87f54600a11ca2b6da2ddb9d26dd0c0909068dd25129c16437645201e2a730b69c88b4732ec6ae79cc75a50be25e82fda08487f714ff8445336ee0bb886f230044032663d8c02646aa6bb13151165dff7180d512cad7018af339032f1b97dafd407d78443150f7cd1080865f6a4549f5ea131e720ae407457d0f141172179e3614216c6a28103a2cc1a5d7fa391d9973f29d643e3c080f83400828abb16734d3c9302244421f2322bbbf80c26c343b0ab15ea78d688f67d1e34929006650c6d02a5a59255cf4fe"}, @NL80211_ATTR_TESTDATA={0xe9, 0x45, "7d4b7385a92c79001beffc21625372f717807b3c5bc7f717d00258971d72f096dc5309a54cb4bef45261a0c5bb2c263b38aa030303d6b29ff7d70b882ca2dd29a24c0b7bde7b454f87df75a7fe64e548861935ae5b4f4a0db881e9301524e161923db4d532209c22b022e5b811ec689ecee89137f8d2838b5542895d20fa9458bf2ef2ce870ee0b2ff3dfd51f922df3aa334752219cac7fd26df9d85e649ba0230fb7d3324469ff3030bf84b988342847c25f70a656d9750d1f3468bc64c07f0e8468e614188ee83c14dc0b0de820aae284ce05b9bbb6e66838a607613a7658e776086920a"}, @NL80211_ATTR_TESTDATA={0x6e, 0x45, "440b2648468e7c3b02876aba6d444fec089e4b56f7dbe391eee57ca17a0cce40ea4a52f9fb36161e730c0d65d35d38faa65d54294541a79be4e224ecdcdf155c94916086959ed7890af8e6a173290dbbe3adfedf886a468292281f1188994784e98caece280c426bc0cb"}]}, 0x3b4}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3ed, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r6 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2}) r7 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) syz_usb_disconnect(r7) close_range(r6, 0xffffffffffffffff, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg$sock(r3, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x11, 0x20000000) 159.296025ms ago: executing program 0 (id=760): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x1, 0x2, 0x1}, 0x18, 0x0) ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f0000000240)) landlock_restrict_self(r3, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) 54.963811ms ago: executing program 5 (id=761): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x32, 0x1, 0x70bd2a, 0x25dbdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$video4linux(&(0x7f00000042c0), 0x6, 0x242) poll(&(0x7f0000004300)=[{r1, 0x200}], 0x1, 0x7) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x7fff}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8010}, 0xc0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x46) read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020}, 0x2020) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) fcntl$setpipe(r4, 0x407, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) 0s ago: executing program 1 (id=762): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): 0] audit: type=1326 audit(1743231286.504:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 353.445520][ T30] audit: type=1326 audit(1743231286.504:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 353.469623][ T30] audit: type=1326 audit(1743231286.554:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 353.514672][ T30] audit: type=1326 audit(1743231286.654:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 353.540316][ T6483] loop4: detected capacity change from 0 to 2048 [ 353.547420][ T30] audit: type=1326 audit(1743231286.674:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 353.570852][ T30] audit: type=1326 audit(1743231286.674:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 353.593224][ T30] audit: type=1326 audit(1743231286.684:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 353.615758][ T30] audit: type=1326 audit(1743231286.684:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 353.676325][ T6483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.356045][ T5782] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.964358][ T6497] loop3: detected capacity change from 0 to 128 [ 355.267838][ T6501] Zero length message leads to an empty skb [ 355.402083][ T6497] loop3: detected capacity change from 0 to 128 [ 355.487668][ T6497] vfat: Unknown parameter '0xffffffffffffffff' [ 356.187201][ T6297] veth0_vlan: entered promiscuous mode [ 356.355745][ T6297] veth1_vlan: entered promiscuous mode [ 356.726054][ T6297] veth0_macvtap: entered promiscuous mode [ 356.806867][ T6297] veth1_macvtap: entered promiscuous mode [ 357.113129][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.125039][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.139636][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.151794][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.161994][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.172791][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.188939][ T6297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.655300][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.719663][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.731067][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.741317][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.752219][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.762584][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.773397][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.796121][ T6297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.887535][ T6526] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 358.061907][ T6297] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.071422][ T6297] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.080804][ T6297] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.090204][ T6297] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.091650][ T6537] netlink: 'syz.0.171': attribute type 12 has an invalid length. [ 359.538369][ T6539] loop1: detected capacity change from 0 to 1024 [ 359.826493][ T6539] Cannot find map_set index 0 as target [ 360.156120][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.174'. [ 363.127080][ T6615] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.972728][ T6615] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.293213][ T6615] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.470843][ T6615] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.497159][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 364.497235][ T30] audit: type=1326 audit(1743231297.039:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 364.525804][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.671126][ T30] audit: type=1326 audit(1743231297.123:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 364.694402][ T30] audit: type=1326 audit(1743231297.123:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 364.717305][ T30] audit: type=1326 audit(1743231297.123:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 364.739335][ C0] vkms_vblank_simulate: vblank timer overrun [ 364.746112][ T30] audit: type=1326 audit(1743231297.123:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 364.768602][ T30] audit: type=1326 audit(1743231297.123:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 364.794466][ T30] audit: type=1326 audit(1743231297.132:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 364.817320][ T30] audit: type=1326 audit(1743231297.132:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 364.840288][ T30] audit: type=1326 audit(1743231297.132:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 364.863063][ T30] audit: type=1326 audit(1743231297.132:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 365.454346][ T6615] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.485589][ T6615] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.551273][ T6615] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.584258][ T6615] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.613830][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.183'. [ 366.696391][ T6665] loop1: detected capacity change from 0 to 128 [ 366.770571][ T6668] raw_sendmsg: syz.3.186 forgot to set AF_INET. Fix it! [ 366.875878][ T6665] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 366.975485][ T6665] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 367.139189][ T6665] syz.1.185 (pid 6665) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 367.388315][ T6675] bridge_slave_0: left allmulticast mode [ 367.394279][ T6675] bridge_slave_0: left promiscuous mode [ 367.401587][ T6675] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.560232][ T6675] bridge_slave_1: left allmulticast mode [ 367.566203][ T6675] bridge_slave_1: left promiscuous mode [ 367.573647][ T6675] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.787434][ T6675] bond0: (slave bond_slave_0): Releasing backup interface [ 367.880796][ T5787] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 367.893376][ T6675] bond0: (slave bond_slave_1): Releasing backup interface [ 368.119266][ T6675] team0: Port device team_slave_0 removed [ 368.198449][ T6675] team0: Port device team_slave_1 removed [ 368.206782][ T6675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.248432][ T6675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.296883][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 368.528159][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.539889][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.551318][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 368.565848][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 368.575374][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.591431][ T24] usb 5-1: config 0 descriptor?? [ 368.962798][ T6685] loop4: detected capacity change from 0 to 164 [ 369.408910][ T24] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 369.466846][ T24] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 369.609089][ T24] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 369.702986][ T5074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.711428][ T5074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.984620][ T5074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.993836][ T5074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.409635][ T1727] usb 5-1: USB disconnect, device number 3 [ 371.167901][ T6708] loop0: detected capacity change from 0 to 2048 [ 371.239911][ T6708] EXT4-fs: Ignoring removed mblk_io_submit option [ 371.487709][ T6708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.513808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 372.007643][ T6719] tipc: Failed to remove unknown binding: 66,1,1/0:2102737762/2102737764 [ 372.071713][ T6671] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 372.569306][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.325638][ T6727] loop1: detected capacity change from 0 to 1024 [ 373.469116][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 373.469215][ T30] audit: type=1326 audit(1743231305.392:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 373.502375][ T30] audit: type=1326 audit(1743231305.392:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.5.201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 373.530251][ T30] audit: type=1326 audit(1743231305.392:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 373.558698][ T30] audit: type=1326 audit(1743231305.392:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6728 comm="syz.5.201" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 373.583389][ T30] audit: type=1326 audit(1743231305.392:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 373.607573][ T30] audit: type=1326 audit(1743231305.392:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 373.633058][ T30] audit: type=1326 audit(1743231305.392:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 373.658372][ T30] audit: type=1326 audit(1743231305.392:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 373.686261][ T30] audit: type=1326 audit(1743231305.392:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 373.712244][ T30] audit: type=1326 audit(1743231305.392:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.4.198" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 373.921302][ T6730] loop5: detected capacity change from 0 to 1024 [ 374.615275][ T6730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.637116][ T6739] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 374.891877][ T6727] EXT4-fs: Ignoring removed orlov option [ 374.899384][ T6727] EXT4-fs: Ignoring removed i_version option [ 374.956113][ T6727] EXT4-fs (loop1): Test dummy encryption mode enabled [ 374.968975][ T6742] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 374.984338][ T6727] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 374.995429][ T6727] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 375.285462][ T6747] loop3: detected capacity change from 0 to 512 [ 375.397283][ T6747] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 375.413109][ T6747] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 375.694296][ T6747] EXT4-fs (loop3): 1 orphan inode deleted [ 375.700784][ T6747] EXT4-fs (loop3): 1 truncate cleaned up [ 375.709311][ T6747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.833403][ T6297] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.342172][ T6753] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 376.530604][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.667232][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.205'. [ 376.946109][ T6760] loop1: detected capacity change from 0 to 256 [ 377.027074][ T6760] exfat: Unknown parameter '' [ 377.481178][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 380.504025][ T1727] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 380.712638][ T6787] netlink: 'syz.3.212': attribute type 1 has an invalid length. [ 380.721757][ T6787] netlink: 'syz.3.212': attribute type 4 has an invalid length. [ 380.730778][ T6787] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.212'. [ 380.899575][ T1727] usb 6-1: config 0 has no interfaces? [ 381.179334][ T1727] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 381.189092][ T1727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.197515][ T1727] usb 6-1: Product: syz [ 381.202197][ T1727] usb 6-1: Manufacturer: syz [ 381.207851][ T1727] usb 6-1: SerialNumber: syz [ 381.360266][ T1727] usb 6-1: config 0 descriptor?? [ 381.834144][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 381.834222][ T30] audit: type=1326 audit(1743231313.258:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 382.043700][ T30] audit: type=1326 audit(1743231313.305:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 382.071950][ T30] audit: type=1326 audit(1743231313.315:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 382.095615][ T30] audit: type=1326 audit(1743231313.324:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 382.118272][ T30] audit: type=1326 audit(1743231313.343:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 382.140837][ T30] audit: type=1326 audit(1743231313.352:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 382.163520][ T30] audit: type=1326 audit(1743231313.352:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 382.186087][ T30] audit: type=1326 audit(1743231313.361:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 382.209766][ T30] audit: type=1326 audit(1743231313.361:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 382.232400][ T30] audit: type=1326 audit(1743231313.361:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 382.541865][ T6805] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 382.768567][ T1727] usb 6-1: USB disconnect, device number 2 [ 382.921457][ T6806] Falling back ldisc for ttyS3. [ 383.608094][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.222'. [ 385.504132][ T6832] netlink: 36 bytes leftover after parsing attributes in process `syz.5.226'. [ 385.513699][ T6832] netlink: 16 bytes leftover after parsing attributes in process `syz.5.226'. [ 385.523246][ T6832] netlink: 36 bytes leftover after parsing attributes in process `syz.5.226'. [ 385.532627][ T6832] netlink: 36 bytes leftover after parsing attributes in process `syz.5.226'. [ 385.697116][ T6829] loop4: detected capacity change from 0 to 512 [ 386.073886][ T6829] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.227: bg 0: block 248: padding at end of block bitmap is not set [ 386.230059][ T6829] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.227: Failed to acquire dquot type 1 [ 386.500006][ T6829] EXT4-fs (loop4): 1 truncate cleaned up [ 386.508447][ T6829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.522277][ T6829] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 386.846894][ T6829] syz.4.227 (6829) used greatest stack depth: 3728 bytes left [ 387.278827][ T5782] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.042361][ T6856] loop4: detected capacity change from 0 to 512 [ 388.249672][ T6856] EXT4-fs error (device loop4): ext4_iget_extra_inode:4704: inode #15: comm syz.4.234: corrupted in-inode xattr: invalid ea_ino [ 388.318470][ T6856] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.234: couldn't read orphan inode 15 (err -117) [ 388.448719][ T6861] netlink: 24 bytes leftover after parsing attributes in process `syz.3.235'. [ 388.460443][ T6856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.793358][ T6866] netlink: 'syz.0.236': attribute type 16 has an invalid length. [ 388.802436][ T6866] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.236'. [ 389.034698][ T5782] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.793763][ T6881] loop4: detected capacity change from 0 to 128 [ 389.929915][ T6881] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 389.983008][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.240'. [ 390.026893][ T6884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.240'. [ 390.108031][ T6881] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 390.256349][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'. [ 390.589519][ T6891] netlink: 20 bytes leftover after parsing attributes in process `syz.5.243'. [ 392.232209][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 392.232290][ T30] audit: type=1326 audit(1743231322.977:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.0.249" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f67579 code=0x0 [ 392.638064][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 392.698122][ T6922] netlink: 16 bytes leftover after parsing attributes in process `syz.4.250'. [ 392.919916][ T1727] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.007146][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.076319][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.127456][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.172371][ T1727] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.268866][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.376037][ T1727] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.472077][ T1727] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.495730][ T6927] netlink: 24 bytes leftover after parsing attributes in process `syz.1.251'. [ 393.527123][ T1727] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.858282][ T1727] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 395.214570][ T6954] syz.5.257 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 395.610512][ T6956] loop4: detected capacity change from 0 to 512 [ 395.675169][ T6956] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 395.869126][ T6956] EXT4-fs (loop4): 1 truncate cleaned up [ 395.877838][ T6956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.844661][ T5782] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.457277][ T6966] loop0: detected capacity change from 0 to 8192 [ 397.657486][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.263'. [ 398.028752][ T6981] netlink: 'syz.1.264': attribute type 1 has an invalid length. [ 398.133830][ T6981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.193158][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 398.193284][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 398.204273][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 398.429230][ T6981] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 398.448291][ T6981] bond1: (slave batadv1): making interface the new active one [ 398.462613][ T6981] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 398.665636][ T6981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.264'. [ 398.693853][ T6981] vlan2: entered promiscuous mode [ 398.699389][ T6981] bond1: entered promiscuous mode [ 398.704828][ T6981] batadv1: entered promiscuous mode [ 398.867289][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.5.265'. [ 398.947612][ T6988] netlink: 72 bytes leftover after parsing attributes in process `syz.4.266'. [ 399.267340][ T6988] tipc: Failed to obtain node identity [ 399.273147][ T6988] tipc: Enabling of bearer rejected, failed to enable media [ 399.904628][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.270'. [ 399.991681][ T6999] netlink: 'syz.1.269': attribute type 29 has an invalid length. [ 400.080922][ T6999] netlink: 'syz.1.269': attribute type 29 has an invalid length. [ 400.162201][ T6999] netlink: 'syz.1.269': attribute type 29 has an invalid length. [ 400.364363][ T7006] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 400.420862][ T6999] netlink: 'syz.1.269': attribute type 29 has an invalid length. [ 400.563063][ T7007] loop4: detected capacity change from 0 to 256 [ 400.625859][ T7009] syz_tun: entered allmulticast mode [ 400.684921][ T7009] lo: entered allmulticast mode [ 400.753578][ T7008] syz_tun: left allmulticast mode [ 402.604256][ T7029] netlink: 144 bytes leftover after parsing attributes in process `syz.4.278'. [ 403.022309][ T7035] batman_adv: batadv0: Adding interface: dummy0 [ 403.030946][ T7035] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.056957][ T7035] batman_adv: batadv0: Interface activated: dummy0 [ 403.407239][ T7035] batadv0: mtu less than device minimum [ 403.415882][ T7035] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 403.429268][ T7035] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 403.442725][ T7035] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 403.456201][ T7035] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 403.469475][ T7035] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 403.482820][ T7035] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 403.496104][ T7035] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 403.509756][ T7035] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 403.522964][ T7035] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 404.654590][ T30] audit: type=1326 audit(1743231334.595:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 404.784198][ T30] audit: type=1326 audit(1743231334.642:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 404.806747][ T30] audit: type=1326 audit(1743231334.642:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 404.830386][ T30] audit: type=1326 audit(1743231334.660:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 404.853271][ T30] audit: type=1326 audit(1743231334.660:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 404.876094][ T30] audit: type=1326 audit(1743231334.670:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 404.899464][ T30] audit: type=1326 audit(1743231334.670:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 404.922073][ T30] audit: type=1326 audit(1743231334.670:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 404.944555][ T30] audit: type=1326 audit(1743231334.670:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 404.968906][ T30] audit: type=1326 audit(1743231334.679:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7051 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7f67579 code=0x7ffc0000 [ 405.254610][ T7056] capability: warning: `syz.1.287' uses 32-bit capabilities (legacy support in use) [ 405.830017][ T5839] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 405.904827][ T1727] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 405.932474][ T7064] batman_adv: batadv0: Interface deactivated: dummy0 [ 405.939917][ T7064] batman_adv: batadv0: Removing interface: dummy0 [ 406.043176][ T7064] bridge_slave_0: left allmulticast mode [ 406.049199][ T7064] bridge_slave_0: left promiscuous mode [ 406.056355][ T7064] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.140062][ T1727] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.150994][ T1727] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 406.157485][ T5839] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 406.220031][ T1727] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 406.229648][ T1727] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 406.238401][ T1727] usb 6-1: SerialNumber: syz [ 406.260424][ T5839] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 406.270623][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 406.279591][ T5839] usb 5-1: SerialNumber: syz [ 406.311775][ T7064] bridge_slave_1: left allmulticast mode [ 406.317725][ T7064] bridge_slave_1: left promiscuous mode [ 406.328271][ T7064] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.511574][ T7065] netlink: 28 bytes leftover after parsing attributes in process `syz.3.289'. [ 406.601457][ T1727] usb 6-1: 0:2 : does not exist [ 406.632699][ T7064] bond0: (slave bond_slave_0): Releasing backup interface [ 406.844090][ T1727] usb 6-1: USB disconnect, device number 3 [ 406.859629][ T7064] bond0: (slave bond_slave_1): Releasing backup interface [ 407.032269][ T7064] team0: Port device team_slave_0 removed [ 407.111334][ T7064] team0: Port device team_slave_1 removed [ 407.124145][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.131940][ T7064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.318811][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.386298][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.395061][ T7064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.570125][ T7064] batman_adv: batadv0: Removing interface: geneve2 [ 408.596860][ T5839] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 408.626939][ T5839] usb 5-1: USB disconnect, device number 4 [ 410.896402][ T7093] loop0: detected capacity change from 0 to 1024 [ 412.110649][ T7104] loop4: detected capacity change from 0 to 2048 [ 412.230920][ T7093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.436259][ T7104] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 412.953257][ T7104] cifs: Unknown parameter 'anchor' [ 413.101236][ T5792] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.602594][ T7120] syz.5.301(7120): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 415.796109][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 415.796188][ T30] audit: type=1326 audit(1743231345.034:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 415.829030][ T30] audit: type=1326 audit(1743231345.034:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 415.853738][ T30] audit: type=1326 audit(1743231345.034:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 415.876741][ T30] audit: type=1326 audit(1743231345.043:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 415.900320][ T30] audit: type=1326 audit(1743231345.043:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 415.924304][ T30] audit: type=1326 audit(1743231345.062:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=376 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 415.949701][ T30] audit: type=1326 audit(1743231345.062:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 415.972329][ T30] audit: type=1326 audit(1743231345.062:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 415.995090][ T30] audit: type=1326 audit(1743231345.062:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 416.018398][ T30] audit: type=1326 audit(1743231345.062:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7146 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=40000003 syscall=309 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 416.083788][ T7150] netlink: 36 bytes leftover after parsing attributes in process `syz.1.310'. [ 416.093216][ T7150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.310'. [ 416.102384][ T7150] netlink: 36 bytes leftover after parsing attributes in process `syz.1.310'. [ 416.111898][ T7150] netlink: 36 bytes leftover after parsing attributes in process `syz.1.310'. [ 416.709505][ T7157] batadv_slave_1: entered promiscuous mode [ 417.081068][ T7161] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.266200][ T7161] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.512411][ T7161] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.748116][ T7161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.926330][ T7165] batadv_slave_1: left promiscuous mode [ 418.192645][ T7161] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.227487][ T7161] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.261678][ T7161] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.296820][ T7161] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.588869][ T7175] net_ratelimit: 11 callbacks suppressed [ 418.588954][ T7175] sctp: failed to load transform for md5: -2 [ 418.945446][ T7186] Set syz0 is full, maxelem 0 reached [ 421.193366][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 421.256099][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 421.329395][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 421.396007][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 421.652475][ T5839] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 421.854896][ T5839] usb 6-1: Using ep0 maxpacket: 8 [ 421.872644][ T5839] usb 6-1: too many configurations: 245, using maximum allowed: 8 [ 421.947094][ T5839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.009589][ T5839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.097874][ T5839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.149574][ T5839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.196058][ T5839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.288403][ T5839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.358913][ T5839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.445890][ T5839] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.483539][ T5839] usb 6-1: New USB device found, idVendor=20a6, idProduct=1105, bcdDevice=c2.eb [ 422.497205][ T5839] usb 6-1: New USB device strings: Mfr=144, Product=230, SerialNumber=250 [ 422.507707][ T5839] usb 6-1: Product: syz [ 422.512136][ T5839] usb 6-1: Manufacturer: syz [ 422.517116][ T5839] usb 6-1: SerialNumber: syz [ 422.766708][ T5839] usb 6-1: config 0 descriptor?? [ 422.787120][ T5839] usb 6-1: bad CDC descriptors [ 422.800695][ T5839] option 6-1:0.0: GSM modem (1-port) converter detected [ 423.106879][ T7212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.117454][ T7212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.286340][ T5839] usb 6-1: USB disconnect, device number 4 [ 423.295331][ T5839] option 6-1:0.0: device disconnected [ 423.350924][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 423.975527][ T7242] netlink: 156 bytes leftover after parsing attributes in process `syz.3.336'. [ 424.808274][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.338'. [ 424.817722][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.5.338'. [ 425.384933][ T7258] geneve0: entered allmulticast mode [ 425.865903][ T7265] netlink: 60 bytes leftover after parsing attributes in process `syz.1.342'. [ 426.313073][ T1727] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 426.626314][ T1727] usb 4-1: unable to get BOS descriptor or descriptor too short [ 426.655753][ T1727] usb 4-1: not running at top speed; connect to a high speed hub [ 426.710032][ T1727] usb 4-1: config 3 has an invalid interface number: 106 but max is 0 [ 426.719893][ T1727] usb 4-1: config 3 has no interface number 0 [ 426.726284][ T1727] usb 4-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 426.739043][ T1727] usb 4-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 426.750905][ T1727] usb 4-1: config 3 interface 106 has no altsetting 0 [ 427.131353][ T1727] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 427.142100][ T1727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.150810][ T1727] usb 4-1: Product: syz [ 427.155252][ T1727] usb 4-1: Manufacturer: syz [ 427.160381][ T1727] usb 4-1: SerialNumber: syz [ 427.293652][ T7268] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 427.323253][ T7268] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 427.438024][ T7282] vlan3: entered promiscuous mode [ 427.443574][ T7282] bridge0: entered promiscuous mode [ 427.675032][ T7284] netlink: 'syz.1.347': attribute type 10 has an invalid length. [ 427.683878][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.694285][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.725291][ T7284] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.732895][ T7284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.741544][ T7284] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.749258][ T7284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.780893][ T7284] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 427.798835][ T1727] kobil_sct 4-1:3.106: KOBIL USB smart card terminal converter detected [ 427.929837][ T1727] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 427.993521][ T1727] usb 4-1: USB disconnect, device number 2 [ 428.039671][ T1727] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 428.052711][ T1727] kobil_sct 4-1:3.106: device disconnected [ 429.079970][ T7294] lo: entered allmulticast mode [ 429.312172][ T7299] loop3: detected capacity change from 0 to 128 [ 429.393931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 429.559853][ T7300] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 429.695861][ T7299] syz.3.351: attempt to access beyond end of device [ 429.695861][ T7299] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 429.885944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 429.907888][ T7293] lo: left allmulticast mode [ 430.382985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 430.394906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 430.590149][ T5074] kworker/u8:22: attempt to access beyond end of device [ 430.590149][ T5074] loop3: rw=1, sector=177, nr_sectors = 32 limit=128 [ 430.606436][ T5074] kworker/u8:22: attempt to access beyond end of device [ 430.606436][ T5074] loop3: rw=1, sector=209, nr_sectors = 1 limit=128 [ 430.620460][ T5074] Buffer I/O error on dev loop3, logical block 209, lost async page write [ 430.717426][ T1727] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 430.943057][ T1727] usb 6-1: Using ep0 maxpacket: 16 [ 431.011758][ T1727] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.023345][ T1727] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.034216][ T1727] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 431.047760][ T1727] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 431.057298][ T1727] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.134298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 431.330360][ T1727] usb 6-1: config 0 descriptor?? [ 431.448548][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.356'. [ 431.679411][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 431.799770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 431.822193][ T7323] loop3: detected capacity change from 0 to 512 [ 431.889781][ T7323] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 431.901197][ T7323] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 432.047016][ T7323] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 432.086402][ T7323] System zones: 0-2, 18-18, 34-34 [ 432.123337][ T7323] EXT4-fs (loop3): orphan cleanup on readonly fs [ 432.145660][ T7323] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 432.149715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 432.295138][ T7323] EXT4-fs (loop3): 1 truncate cleaned up [ 432.304173][ T7323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 432.687929][ T1727] usbhid 6-1:0.0: can't add hid device: -71 [ 432.695105][ T1727] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 432.766839][ T1727] usb 6-1: USB disconnect, device number 5 [ 433.311406][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.413649][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'. [ 433.427402][ T7328] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.435858][ T7328] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.649154][ T5793] Bluetooth: hci4: command 0x0406 tx timeout [ 438.652271][ T7357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.364'. [ 438.944000][ T53] Bluetooth: hci4: unexpected event 0x03 length: 17 > 11 [ 440.428742][ T53] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 440.648964][ T30] audit: type=1326 audit(1743231368.232:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7372 comm="syz.0.369" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f67579 code=0x0 [ 440.849884][ T7382] evm: overlay not supported [ 441.857446][ T7387] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.867760][ T7387] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.370211][ T7387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.387925][ T7398] loop4: detected capacity change from 0 to 256 [ 442.402017][ T7387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.459648][ T7398] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 442.608586][ T7398] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 442.713183][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'. [ 442.850552][ T7387] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.861140][ T7387] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.870731][ T7387] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.880236][ T7387] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.211748][ T7412] loop5: detected capacity change from 0 to 512 [ 444.303686][ T7412] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 444.313206][ T7412] EXT4-fs (loop5): blocks per group (71) and clusters per group (32768) inconsistent [ 444.701795][ T7420] loop0: detected capacity change from 0 to 128 [ 444.756905][ T7420] udf: Unknown parameter 'gid-û¡‘ÛQcÎ00000000000000000000' [ 445.033947][ T7424] netlink: 9 bytes leftover after parsing attributes in process `syz.4.383'. [ 445.130956][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 445.139219][ T7424] gretap0: entered promiscuous mode [ 445.193997][ T7421] veth0_macvtap: left promiscuous mode [ 445.395624][ T5841] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 445.689821][ T5841] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 445.701701][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.710876][ T5841] usb 1-1: Product: syz [ 445.715341][ T5841] usb 1-1: Manufacturer: syz [ 445.720457][ T5841] usb 1-1: SerialNumber: syz [ 445.890070][ T5841] usb 1-1: config 0 descriptor?? [ 447.002745][ T30] audit: type=1326 audit(1743231374.200:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 447.028594][ T30] audit: type=1326 audit(1743231374.200:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 447.052028][ T30] audit: type=1326 audit(1743231374.237:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=40000003 syscall=276 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 447.075073][ T30] audit: type=1326 audit(1743231374.237:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 447.097923][ T30] audit: type=1326 audit(1743231374.237:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 447.122300][ T30] audit: type=1326 audit(1743231374.237:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 447.145464][ T30] audit: type=1326 audit(1743231374.275:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 447.168691][ T30] audit: type=1326 audit(1743231374.293:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 447.192065][ T30] audit: type=1326 audit(1743231374.303:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 447.214543][ T30] audit: type=1326 audit(1743231374.303:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz.3.387" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 447.824889][ T7426] sctp: failed to load transform for md5: -2 [ 448.776295][ T5841] usb-storage 1-1:0.0: USB Mass Storage device detected [ 449.870138][ T7466] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967293 > 32) [ 449.960907][ T5841] usb 1-1: USB disconnect, device number 2 [ 450.601086][ T7469] loop0: detected capacity change from 0 to 2048 [ 450.826453][ T7469] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 451.803920][ T7480] netlink: 6304 bytes leftover after parsing attributes in process `syz.1.393'. [ 451.813589][ T7480] netlink: 20332 bytes leftover after parsing attributes in process `syz.1.393'. [ 453.304689][ T7491] netlink: 'syz.5.398': attribute type 1 has an invalid length. [ 453.507647][ T7438] Set syz1 is full, maxelem 65536 reached [ 453.656585][ T7494] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 454.282528][ T7491] veth3: entered promiscuous mode [ 454.302252][ T7491] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 454.788562][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 454.788642][ T30] audit: type=1326 audit(1743231381.505:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 455.374482][ T30] audit: type=1326 audit(1743231381.533:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 455.437379][ T7499] netlink: 'syz.4.400': attribute type 4 has an invalid length. [ 455.515048][ T30] audit: type=1326 audit(1743231382.113:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 455.779135][ T30] audit: type=1326 audit(1743231382.385:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7498 comm="syz.4.400" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 458.310988][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.407'. [ 458.491918][ T5836] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 458.695635][ T5836] usb 4-1: Using ep0 maxpacket: 16 [ 458.765172][ T5836] usb 4-1: config 0 has an invalid interface number: 154 but max is 0 [ 458.774348][ T5836] usb 4-1: config 0 has no interface number 0 [ 458.835405][ T5836] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.03 [ 458.845169][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 458.853468][ T5836] usb 4-1: SerialNumber: syz [ 458.933323][ T5836] usb 4-1: config 0 descriptor?? [ 459.290692][ T5836] ftdi_sio 4-1:0.154: FTDI USB Serial Device converter detected [ 459.302729][ T5836] usb 4-1: Detected SIO [ 459.318745][ T7536] overlayfs: failed to clone upperpath [ 459.363810][ T5836] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 459.443826][ T5836] usb 4-1: USB disconnect, device number 3 [ 459.520668][ T5836] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 459.533455][ T5836] ftdi_sio 4-1:0.154: device disconnected [ 460.095781][ T5841] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 460.166000][ T5841] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 460.182325][ T7550] netlink: 32 bytes leftover after parsing attributes in process `syz.5.414'. [ 460.363471][ T24] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 460.385246][ T7550] mkiss: ax0: crc mode is auto. [ 460.459107][ T30] audit: type=1326 audit(1743231386.790:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7553 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 460.482330][ T30] audit: type=1326 audit(1743231386.800:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7553 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 460.506225][ T30] audit: type=1326 audit(1743231386.800:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7553 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 460.531116][ T30] audit: type=1326 audit(1743231386.809:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7553 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=62 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 460.555205][ T30] audit: type=1326 audit(1743231386.809:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7553 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 460.578354][ T30] audit: type=1326 audit(1743231386.809:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7553 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 460.601438][ T30] audit: type=1326 audit(1743231386.809:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7553 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 460.624006][ T30] audit: type=1326 audit(1743231386.856:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7553 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 460.626426][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.646386][ T30] audit: type=1326 audit(1743231386.856:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7553 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 460.646622][ T30] audit: type=1326 audit(1743231386.856:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7553 comm="syz.4.415" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 460.670896][ T7550] capability: warning: `syz.5.414' uses deprecated v2 capabilities in a way that may be insecure [ 460.679665][ T24] usb 1-1: config 0 has no interfaces? [ 460.908148][ T24] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 460.920082][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.929297][ T24] usb 1-1: Product: syz [ 460.933741][ T24] usb 1-1: Manufacturer: syz [ 460.939946][ T24] usb 1-1: SerialNumber: syz [ 460.954942][ T24] usb 1-1: config 0 descriptor?? [ 461.027213][ T7554] loop4: detected capacity change from 0 to 2048 [ 461.177750][ T7554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.225883][ T7559] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 461.410281][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 461.514227][ T5841] usb 1-1: USB disconnect, device number 3 [ 461.656818][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.668758][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 461.680488][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.778190][ T24] usb 4-1: config 0 descriptor?? [ 461.916274][ T5782] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.341556][ T24] logitech-hidpp-device 0003:046D:C086.0003: item fetching failed at offset 0/3 [ 462.431356][ T24] logitech-hidpp-device 0003:046D:C086.0003: hidpp_probe:parse failed [ 462.440404][ T24] logitech-hidpp-device 0003:046D:C086.0003: probe with driver logitech-hidpp-device failed with error -22 [ 462.605466][ T7561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.667749][ T7561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.882871][ T7571] loop4: detected capacity change from 0 to 1024 [ 463.120091][ T7581] ptrace attach of "./syz-executor exec"[5782] was attempted by "./syz-executor exec"[7581] [ 463.315172][ T5836] usb 4-1: USB disconnect, device number 4 [ 464.384189][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 464.449849][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 464.587993][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 464.703553][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'. [ 465.036979][ T7600] loop3: detected capacity change from 0 to 4096 [ 465.167861][ T7600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.251629][ T7600] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 465.505019][ T5800] EXT4-fs error (device loop3): ext4_readdir:264: inode #12: block 80: comm syz-executor: path /91/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 465.634750][ T5800] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 4c8, entries 1, max 4(0), depth 0(0) [ 465.731238][ T5800] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #17: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 4c8, entries 1, max 4(0), depth 0(0) [ 466.084078][ T7615] netlink: 'syz.4.429': attribute type 4 has an invalid length. [ 468.084083][ T7627] loop4: detected capacity change from 0 to 1764 [ 468.094498][ T7627] iso9660: Bad value for 'gid' [ 468.099532][ T7627] iso9660: Bad value for 'gid' [ 470.930686][ T7634] netlink: 24 bytes leftover after parsing attributes in process `syz.5.438'. [ 471.234498][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.438'. [ 471.551124][ T5793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 471.562075][ T5793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 471.574826][ T5793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 471.598064][ T5793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 471.615577][ T5793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 473.684479][ T7640] chnl_net:caif_netlink_parms(): no params data found [ 473.844188][ T53] Bluetooth: hci4: command tx timeout [ 473.927167][ T7665] netlink: 'syz.5.446': attribute type 15 has an invalid length. [ 475.343195][ T7640] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.351192][ T7640] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.359198][ T7640] bridge_slave_0: entered allmulticast mode [ 475.373096][ T7640] bridge_slave_0: entered promiscuous mode [ 475.523167][ T7640] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.531058][ T7640] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.539816][ T7640] bridge_slave_1: entered allmulticast mode [ 475.549930][ T7640] bridge_slave_1: entered promiscuous mode [ 475.747079][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 475.785649][ T7640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.836861][ T7640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.950209][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 475.973388][ T24] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 475.983286][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.009185][ T24] usb 5-1: config 0 descriptor?? [ 476.080940][ T53] Bluetooth: hci4: command tx timeout [ 476.125726][ T7640] team0: Port device team_slave_0 added [ 476.181997][ T7640] team0: Port device team_slave_1 added [ 476.261701][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 476.411594][ T7640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.419053][ T7640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.446256][ T7640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.506508][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 476.518061][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 476.529457][ T24] asix 5-1:0.0: probe with driver asix failed with error -71 [ 476.693597][ T24] usb 5-1: USB disconnect, device number 5 [ 476.758638][ T7640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.767268][ T7640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.797947][ T7640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.358596][ T7640] hsr_slave_0: entered promiscuous mode [ 477.380635][ T7640] hsr_slave_1: entered promiscuous mode [ 477.394492][ T7640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.402350][ T7640] Cannot create hsr debugfs directory [ 478.301131][ T53] Bluetooth: hci4: command tx timeout [ 478.502108][ T7640] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 478.580892][ T7640] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 478.655477][ T7640] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 478.762309][ T7640] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 479.925043][ T7640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.141228][ T7640] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.229250][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.237245][ T6626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.349898][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.357815][ T6626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.514406][ T53] Bluetooth: hci4: command tx timeout [ 480.977337][ T7718] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 480.985720][ T7719] netlink: 'syz.4.464': attribute type 4 has an invalid length. [ 481.018727][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 481.040845][ T7719] netlink: 'syz.4.464': attribute type 4 has an invalid length. [ 481.861785][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 481.861866][ T30] audit: type=1326 audit(1743231406.817:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 482.019282][ T30] audit: type=1326 audit(1743231406.892:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=442 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 482.044580][ T30] audit: type=1326 audit(1743231406.892:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 482.067708][ T30] audit: type=1326 audit(1743231406.920:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 482.090157][ T30] audit: type=1326 audit(1743231406.920:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 482.112733][ T30] audit: type=1326 audit(1743231406.920:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 482.135110][ T30] audit: type=1326 audit(1743231406.920:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 482.162420][ T30] audit: type=1326 audit(1743231406.929:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 482.186415][ T30] audit: type=1326 audit(1743231406.929:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 482.210096][ T30] audit: type=1326 audit(1743231406.929:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=40000003 syscall=339 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 482.284522][ T7729] loop5: detected capacity change from 0 to 8 [ 482.408446][ T7729] SQUASHFS error: zlib decompression failed, data probably corrupt [ 482.417061][ T7729] SQUASHFS error: Failed to read block 0x9b: -5 [ 482.423567][ T7729] SQUASHFS error: Unable to read metadata cache entry [99] [ 482.431374][ T7729] SQUASHFS error: Unable to read inode 0x127 [ 482.719864][ T7640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.783096][ T7732] serio: Serial port ptm0 [ 482.986730][ T7726] loop4: detected capacity change from 0 to 4096 [ 483.019559][ T7726] ntfs3: Unknown parameter '' [ 483.190642][ T7731] loop5: detected capacity change from 0 to 2048 [ 483.330900][ T7731] loop5: p2 p3 < > p4 < p5 > [ 483.337732][ T7731] loop5: partition table partially beyond EOD, truncated [ 483.478809][ T7731] loop5: p3 start 4284289 is beyond EOD, truncated [ 483.500976][ T7726] netlink: 64 bytes leftover after parsing attributes in process `syz.4.467'. [ 483.512596][ T7726] netlink: 64 bytes leftover after parsing attributes in process `syz.4.467'. [ 484.682569][ T5962] udevd[5962]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 484.710562][ T7431] udevd[7431]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 484.761847][ T5948] udevd[5948]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 485.159953][ T7754] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 485.803831][ T7640] veth0_vlan: entered promiscuous mode [ 485.924845][ T7640] veth1_vlan: entered promiscuous mode [ 485.938016][ T3621] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3 [ 486.263725][ T7640] veth0_macvtap: entered promiscuous mode [ 486.386113][ T7640] veth1_macvtap: entered promiscuous mode [ 486.567448][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.579134][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.589446][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 486.600541][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.616914][ T7640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.713536][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.725789][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.736566][ T7640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 486.748184][ T7640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 486.765944][ T7640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.048290][ T7640] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.057760][ T7640] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.066864][ T7640] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.076889][ T7640] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.139061][ T7768] loop5: detected capacity change from 0 to 8 [ 487.225806][ T7768] SQUASHFS error: Unable to read inode 0x11f [ 488.246226][ T7777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 488.400551][ T7778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.482'. [ 488.896729][ T7783] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 488.904015][ T7783] overlayfs: failed to set xattr on upper [ 488.911081][ T7783] overlayfs: ...falling back to redirect_dir=nofollow. [ 488.918543][ T7783] overlayfs: ...falling back to index=off. [ 488.924582][ T7783] overlayfs: ...falling back to uuid=null. [ 489.019293][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 489.958910][ T7796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.486'. [ 490.211246][ T7796] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 490.755936][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 490.756015][ T30] audit: type=1326 audit(1743231415.142:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.5.487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7fc00000 [ 491.302681][ T30] audit: type=1326 audit(1743231415.245:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.5.487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc5579 code=0x7fc00000 [ 491.325556][ T30] audit: type=1326 audit(1743231415.245:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.5.487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7fc00000 [ 491.351569][ T30] audit: type=1326 audit(1743231415.245:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.5.487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7fc00000 [ 491.375315][ T30] audit: type=1326 audit(1743231415.245:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7791 comm="syz.5.487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7fc00000 [ 492.078058][ T7817] loop5: detected capacity change from 0 to 512 [ 492.157167][ T7817] EXT4-fs: Ignoring removed i_version option [ 492.209835][ T7817] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 492.359403][ T7817] EXT4-fs (loop5): 1 truncate cleaned up [ 492.367463][ T7817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.663605][ T6297] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.126160][ T7829] loop4: detected capacity change from 0 to 8192 [ 494.229149][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'. [ 494.633096][ T30] audit: type=1800 audit(1743231418.753:390): pid=7829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.494" name="bus" dev="loop4" ino=5 res=0 errno=0 [ 494.934487][ T3654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.942898][ T3654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.998057][ T30] audit: type=1326 audit(1743231419.108:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.5.499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 495.021572][ T30] audit: type=1326 audit(1743231419.108:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.5.499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 495.044261][ T30] audit: type=1326 audit(1743231419.146:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.5.499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 495.299688][ T30] audit: type=1326 audit(1743231419.193:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7843 comm="syz.5.499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 495.339702][ T6626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.348064][ T6626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.860396][ T7882] loop6: detected capacity change from 0 to 512 [ 498.879458][ T7880] loop5: detected capacity change from 0 to 1024 [ 498.952188][ T7880] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 498.999708][ T7882] EXT4-fs error (device loop6): ext4_orphan_get:1390: inode #15: comm syz.6.512: casefold flag without casefold feature [ 499.100216][ T7880] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e12d, mo2=0002] [ 499.127431][ T7882] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.512: couldn't read orphan inode 15 (err -117) [ 499.213791][ T7880] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 499.240680][ T7880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 499.260483][ T7882] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.356576][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 499.356664][ T30] audit: type=1800 audit(1743231423.177:416): pid=7882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.512" name="file1" dev="loop6" ino=18 res=0 errno=0 [ 499.375656][ T7889] netem: change failed [ 499.384361][ T30] audit: type=1800 audit(1743231423.205:417): pid=7882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.512" name="file1" dev="loop6" ino=18 res=0 errno=0 [ 499.619707][ T6297] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.222291][ T30] audit: type=1800 audit(1743231423.991:418): pid=7892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.512" name="file1" dev="loop6" ino=18 res=0 errno=0 [ 500.378964][ T30] audit: type=1326 audit(1743231424.141:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7fc00000 [ 500.402368][ T30] audit: type=1326 audit(1743231424.150:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc5579 code=0x7fc00000 [ 500.828353][ T5836] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 500.869518][ T7908] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 500.992119][ T30] audit: type=1326 audit(1743231424.721:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7897 comm="syz.5.515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7fc00000 [ 501.072452][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 501.108154][ T5836] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 501.116834][ T5836] usb 5-1: config 0 has no interface number 0 [ 501.172429][ T5836] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 501.185090][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.193712][ T5836] usb 5-1: Product: syz [ 501.199578][ T5836] usb 5-1: Manufacturer: syz [ 501.205093][ T5836] usb 5-1: SerialNumber: syz [ 501.289848][ T5836] usb 5-1: config 0 descriptor?? [ 501.339975][ T5836] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 501.600112][ T5836] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 501.738312][ T5836] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 501.868769][ T7906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.880265][ T7906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.982722][ T30] audit: type=1800 audit(1743231425.637:422): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.512" name="file1" dev="loop6" ino=18 res=0 errno=0 [ 502.163530][ T5793] Bluetooth: hci1: command 0x0401 tx timeout [ 502.564718][ T7640] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.574059][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 504.585325][ T24] usb 5-1: USB disconnect, device number 6 [ 504.662781][ T7927] loop6: detected capacity change from 0 to 8 [ 504.714301][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 504.751950][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 504.767803][ T24] quatech2 5-1:0.51: device disconnected [ 504.782854][ T7927] Filesystem uses "unknown" compression. This is not supported [ 505.053896][ T7929] netlink: 'syz.0.523': attribute type 1 has an invalid length. [ 505.158789][ T7929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 505.263479][ T7929] bond1: (slave gretap1): making interface the new active one [ 505.275893][ T7929] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 505.299114][ T7932] IPv6: NLM_F_CREATE should be specified when creating new route [ 505.352821][ T7932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 505.540582][ T7929] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 506.676048][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.5.528'. [ 506.739633][ T7946] tipc: Started in network mode [ 506.744906][ T7946] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 506.754274][ T7946] tipc: Enabled bearer , priority 0 [ 507.957965][ T5841] tipc: Node number set to 11578026 [ 508.625593][ T7969] netlink: 40 bytes leftover after parsing attributes in process `syz.1.538'. [ 508.685529][ T7970] mmap: syz.0.537 (7970) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 508.990861][ T7974] netlink: 'syz.5.539': attribute type 1 has an invalid length. [ 509.126345][ T7975] loop6: detected capacity change from 0 to 512 [ 509.161872][ T7977] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 509.173079][ T7977] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 509.183741][ T7977] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 509.194621][ T7974] netlink: 28 bytes leftover after parsing attributes in process `syz.5.539'. [ 509.206120][ T7977] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 509.224194][ T7977] bond2: (slave geneve2): making interface the new active one [ 509.235753][ T7977] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 509.265535][ T7974] 8021q: adding VLAN 0 to HW filter on device bond2 [ 509.341026][ T7975] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.747120][ T7640] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz-executor: invalid indirect mapped block 1280 (level 0) [ 509.824378][ T7640] EXT4-fs error (device loop6): ext4_lookup:1789: inode #14: comm syz-executor: unexpected EA_INODE flag [ 509.893073][ T7640] EXT4-fs error (device loop6): ext4_lookup:1789: inode #14: comm syz-executor: unexpected EA_INODE flag [ 509.994507][ T7988] netlink: 'syz.5.544': attribute type 4 has an invalid length. [ 510.042020][ T7988] netlink: 'syz.5.544': attribute type 4 has an invalid length. [ 510.439903][ T7640] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.520126][ T7993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.547'. [ 514.993851][ T5793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 515.006723][ T5793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 515.018466][ T5793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 515.062423][ T5793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 515.086284][ T5793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 515.673990][ T8028] bridge3: entered allmulticast mode [ 515.880357][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.557'. [ 516.743743][ T8021] chnl_net:caif_netlink_parms(): no params data found [ 516.899420][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.560'. [ 517.002214][ T8042] sctp: failed to load transform for md5: -2 [ 517.056421][ T8040] sctp: failed to load transform for md5: -2 [ 517.063619][ T8044] sctp: failed to load transform for md5: -2 [ 517.339176][ T5793] Bluetooth: hci4: command tx timeout [ 517.525435][ T8048] sctp: failed to load transform for md5: -2 [ 517.699624][ T8037] sctp: failed to load transform for md5: -2 [ 517.913539][ T5841] IPVS: starting estimator thread 0... [ 518.049646][ T8065] IPVS: using max 192 ests per chain, 9600 per kthread [ 519.024712][ T8068] veth5: entered allmulticast mode [ 519.031904][ T8068] bridge0: port 3(veth5) entered blocking state [ 519.045515][ T8068] bridge0: port 3(veth5) entered disabled state [ 519.056617][ T8068] veth5: entered promiscuous mode [ 519.514044][ T5793] Bluetooth: hci4: command tx timeout [ 519.661850][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'. [ 519.810242][ T8074] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 519.820553][ T8074] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 519.954529][ T8021] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.962920][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.971075][ T8021] bridge_slave_0: entered allmulticast mode [ 519.983712][ T8021] bridge_slave_0: entered promiscuous mode [ 520.111491][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.119794][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.128002][ T8021] bridge_slave_1: entered allmulticast mode [ 520.141628][ T8021] bridge_slave_1: entered promiscuous mode [ 520.310712][ T8021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.341226][ T8021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.625962][ T8021] team0: Port device team_slave_0 added [ 520.694223][ T8021] team0: Port device team_slave_1 added [ 521.076581][ T30] audit: type=1326 audit(1743231443.504:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 521.099903][ T30] audit: type=1326 audit(1743231443.513:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 521.125556][ T30] audit: type=1326 audit(1743231443.513:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 521.149912][ T30] audit: type=1326 audit(1743231443.513:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 521.172703][ T30] audit: type=1326 audit(1743231443.532:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 521.194738][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.202462][ T30] audit: type=1326 audit(1743231443.532:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 521.225203][ T30] audit: type=1326 audit(1743231443.532:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 521.248748][ T30] audit: type=1326 audit(1743231443.560:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=397 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 521.271353][ T30] audit: type=1326 audit(1743231443.560:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 521.293882][ T30] audit: type=1326 audit(1743231443.560:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.4.568" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 521.386610][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.394018][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.420626][ T8021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.434071][ T5841] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 521.522807][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.530342][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.556913][ T8021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.684029][ T5841] usb 5-1: Using ep0 maxpacket: 32 [ 521.738307][ T5793] Bluetooth: hci4: command tx timeout [ 521.762111][ T5841] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 521.771866][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.783030][ T5841] usb 5-1: Product: syz [ 521.787475][ T5841] usb 5-1: Manufacturer: syz [ 521.793074][ T5841] usb 5-1: SerialNumber: syz [ 521.858274][ T5841] usb 5-1: config 0 descriptor?? [ 521.925798][ T8021] hsr_slave_0: entered promiscuous mode [ 521.940388][ T8021] hsr_slave_1: entered promiscuous mode [ 521.952294][ T8021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 521.960314][ T8021] Cannot create hsr debugfs directory [ 522.479614][ T5841] airspy 5-1:0.0: Board ID: 00 [ 522.484746][ T5841] airspy 5-1:0.0: Firmware version: [ 522.771598][ T5841] airspy 5-1:0.0: usb_control_msg() failed -71 request 11 [ 522.790088][ T5841] airspy 5-1:0.0: Registered as swradio24 [ 522.797326][ T5841] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 522.892072][ T5841] usb 5-1: USB disconnect, device number 7 [ 523.595278][ T8021] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 523.713663][ T8021] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 523.919303][ T8021] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 523.960853][ T5793] Bluetooth: hci4: command tx timeout [ 524.079217][ T8021] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 524.642608][ T8111] netlink: 'syz.1.577': attribute type 4 has an invalid length. [ 525.273862][ T8113] netlink: 36 bytes leftover after parsing attributes in process `syz.5.578'. [ 525.285463][ T8113] netlink: 16 bytes leftover after parsing attributes in process `syz.5.578'. [ 525.294952][ T8113] netlink: 36 bytes leftover after parsing attributes in process `syz.5.578'. [ 525.305021][ T8113] netlink: 36 bytes leftover after parsing attributes in process `syz.5.578'. [ 525.394132][ T8021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.556033][ T8021] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.654063][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.661914][ T6613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.768272][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.776041][ T6613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.897785][ T8021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.352396][ T8155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.588'. [ 530.232976][ T8021] veth0_vlan: entered promiscuous mode [ 530.337217][ T8021] veth1_vlan: entered promiscuous mode [ 530.713206][ T8172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.593'. [ 530.722772][ T8172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.593'. [ 530.761512][ T8021] veth0_macvtap: entered promiscuous mode [ 530.852274][ T8021] veth1_macvtap: entered promiscuous mode [ 531.051832][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.064867][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.075165][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.088995][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.100001][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.110808][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.127415][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.570691][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.582358][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.592632][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.603437][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.613887][ T8021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.624789][ T8021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.644835][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.855761][ T8021] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.865051][ T8021] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.874271][ T8021] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.885342][ T8021] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.324267][ T30] kauditd_printk_skb: 259 callbacks suppressed [ 532.324347][ T30] audit: type=1326 audit(1743231454.008:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.5.598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 532.353871][ T30] audit: type=1326 audit(1743231454.017:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.5.598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 532.376505][ T30] audit: type=1326 audit(1743231454.064:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.5.598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 532.551153][ T30] audit: type=1326 audit(1743231454.102:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.5.598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 532.574130][ T30] audit: type=1326 audit(1743231454.167:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.5.598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 532.596815][ T30] audit: type=1326 audit(1743231454.167:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.5.598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 532.620555][ T30] audit: type=1326 audit(1743231454.167:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.5.598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 532.645159][ T30] audit: type=1326 audit(1743231454.223:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.5.598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 532.667706][ T30] audit: type=1326 audit(1743231454.223:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.5.598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 532.691171][ T30] audit: type=1326 audit(1743231454.242:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8186 comm="syz.5.598" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 535.742902][ T8223] loop4: detected capacity change from 0 to 1024 [ 535.826047][ T8223] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 535.927945][ T8223] JBD2: no valid journal superblock found [ 535.934689][ T8223] EXT4-fs (loop4): Could not load journal inode [ 537.580821][ T8232] veth3: left promiscuous mode [ 537.666283][ T8232] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 537.675801][ T8232] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 537.686812][ T8232] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 537.697498][ T8232] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 538.599816][ T4206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.608660][ T4206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.878478][ T4206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.886784][ T4206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.676738][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.7.551'. [ 542.178896][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.5.613'. [ 543.484340][ T8234] Set syz1 is full, maxelem 65536 reached [ 543.516206][ T8260] netlink: 4 bytes leftover after parsing attributes in process `syz.7.615'. [ 543.550508][ T8260] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.559990][ T8260] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.584244][ T8260] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.594574][ T8260] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.604845][ T8260] vxlan0: entered promiscuous mode [ 544.959549][ T1727] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 545.194797][ T1727] usb 1-1: too many configurations: 253, using maximum allowed: 8 [ 545.374476][ T8268] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 545.596586][ T8268] kvm: pic: non byte read [ 545.605525][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.7.620'. [ 545.676780][ T8268] kvm: pic: level sensitive irq not supported [ 545.677732][ T8268] kvm: pic: non byte read [ 545.843547][ T8268] kvm: pic: level sensitive irq not supported [ 545.846344][ T8268] kvm: pic: non byte read [ 545.988263][ T1727] usb 1-1: string descriptor 0 read error: -71 [ 545.996133][ T1727] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 546.005856][ T1727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.122733][ T1727] usb 1-1: can't set config #1, error -71 [ 546.205590][ T1727] usb 1-1: USB disconnect, device number 4 [ 546.829788][ T8284] bond0: (slave syz_tun): Releasing backup interface [ 546.970659][ T8284] bridge_slave_0: left allmulticast mode [ 546.976737][ T8284] bridge_slave_0: left promiscuous mode [ 546.983912][ T8284] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.087945][ T8284] bridge_slave_1: left allmulticast mode [ 547.094027][ T8284] bridge_slave_1: left promiscuous mode [ 547.101682][ T8284] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.293747][ T8284] bond0: (slave bond_slave_0): Releasing backup interface [ 547.413309][ T8284] bond0: (slave bond_slave_1): Releasing backup interface [ 547.486897][ T8284] team0: Port device team_slave_0 removed [ 547.574499][ T8284] team0: Port device team_slave_1 removed [ 547.587688][ T8284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.595537][ T8284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.665767][ T8284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.673840][ T8284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.116188][ T8298] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 548.191121][ T8297] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 548.231083][ T8229] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 548.231165][ T8229] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 549.043359][ T8302] 9pnet_fd: Insufficient options for proto=fd [ 549.099131][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.7.629'. [ 549.128676][ T8229] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 549.152252][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.7.629'. [ 549.236982][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.7.629'. [ 549.284691][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.630'. [ 549.373630][ T8304] netlink: 48 bytes leftover after parsing attributes in process `syz.4.630'. [ 549.700857][ T8310] netlink: 'syz.0.632': attribute type 9 has an invalid length. [ 550.190976][ T8318] IPVS: Error connecting to the multicast addr [ 550.439572][ T8322] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 551.172902][ T8330] netlink: 24 bytes leftover after parsing attributes in process `syz.7.640'. [ 551.689961][ T8329] loop4: detected capacity change from 0 to 2048 [ 551.845175][ T8329] Alternate GPT is invalid, using primary GPT. [ 551.853994][ T8329] loop4: p1 p2 p3 [ 552.470150][ T8349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 552.477854][ T8349] IPv6: NLM_F_CREATE should be set when creating new route [ 552.528374][ T8347] veth1_macvtap: left promiscuous mode [ 552.534414][ T8347] macsec0: entered promiscuous mode [ 552.654653][ T8349] lo: entered allmulticast mode [ 552.661174][ T8349] tunl0: entered allmulticast mode [ 552.676265][ T8349] gre0: entered allmulticast mode [ 552.836868][ T8349] gretap0: entered allmulticast mode [ 552.944299][ T8349] erspan0: entered allmulticast mode [ 552.960978][ T8349] ip_vti0: entered allmulticast mode [ 552.976919][ T8349] ip6_vti0: entered allmulticast mode [ 552.993811][ T8349] sit0: entered allmulticast mode [ 553.016156][ T8349] ip6tnl0: entered allmulticast mode [ 553.033643][ T8349] ip6gre0: entered allmulticast mode [ 553.184298][ T8349] ip6gretap0: entered allmulticast mode [ 553.205659][ T8349] bridge0: entered allmulticast mode [ 553.213554][ T8349] vcan0: entered allmulticast mode [ 553.372284][ T8349] bond0: entered allmulticast mode [ 553.377759][ T8349] bond_slave_0: entered allmulticast mode [ 553.384167][ T8349] bond_slave_1: entered allmulticast mode [ 553.401202][ T8349] team0: entered allmulticast mode [ 553.406854][ T8349] team_slave_0: entered allmulticast mode [ 553.412882][ T8349] team_slave_1: entered allmulticast mode [ 553.436421][ T8349] dummy0: entered allmulticast mode [ 553.520761][ T8349] nlmon0: entered allmulticast mode [ 553.534824][ T8349] caif0: entered allmulticast mode [ 553.541967][ T8349] batadv0: entered allmulticast mode [ 553.557696][ T8349] vxcan0: entered allmulticast mode [ 553.566800][ T8349] vxcan1: entered allmulticast mode [ 553.576108][ T8349] veth0: entered allmulticast mode [ 553.592039][ T8349] veth1: entered allmulticast mode [ 553.608569][ T8349] veth0_to_bridge: entered allmulticast mode [ 553.635561][ T8349] veth1_to_bridge: entered allmulticast mode [ 553.662914][ T8349] veth0_to_bond: entered allmulticast mode [ 553.684481][ T8349] veth1_to_bond: entered allmulticast mode [ 553.705566][ T8349] veth0_to_team: entered allmulticast mode [ 553.730735][ T8349] veth1_to_team: entered allmulticast mode [ 553.757135][ T8349] veth0_to_batadv: entered allmulticast mode [ 553.772295][ T8349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.780493][ T8349] batadv_slave_0: entered allmulticast mode [ 553.796022][ T8349] veth1_to_batadv: entered allmulticast mode [ 553.811713][ T8349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.819839][ T8349] batadv_slave_1: entered allmulticast mode [ 553.835509][ T8349] xfrm0: entered allmulticast mode [ 553.853929][ T8349] veth0_to_hsr: entered allmulticast mode [ 553.869356][ T8349] hsr_slave_0: entered allmulticast mode [ 553.884143][ T8349] veth1_to_hsr: entered allmulticast mode [ 553.906418][ T8358] loop5: detected capacity change from 0 to 512 [ 553.906621][ T8349] hsr_slave_1: entered allmulticast mode [ 553.927487][ T8349] hsr0: entered allmulticast mode [ 553.941818][ T8349] veth1_virt_wifi: entered allmulticast mode [ 553.956767][ T8349] veth0_virt_wifi: entered allmulticast mode [ 553.978273][ T8349] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 553.994275][ T8349] veth1_vlan: entered allmulticast mode [ 554.008751][ T8349] veth0_vlan: entered allmulticast mode [ 554.045481][ T8349] vlan0: entered allmulticast mode [ 554.051842][ T8349] vlan1: entered allmulticast mode [ 554.217067][ T8358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.261022][ T8349] macvlan0: entered allmulticast mode [ 554.343982][ T8349] macvlan1: entered allmulticast mode [ 554.358825][ T8349] ipvlan0: entered allmulticast mode [ 554.365610][ T8349] ipvlan1: entered allmulticast mode [ 554.372568][ T8349] veth1_macvtap: entered allmulticast mode [ 554.386964][ T8349] veth0_macvtap: entered allmulticast mode [ 554.419653][ T8357] fs-verity: sha512 using implementation "sha512-generic" [ 554.441732][ T8349] macvtap0: entered allmulticast mode [ 554.456342][ T8349] macsec0: entered allmulticast mode [ 554.481088][ T8357] EXT4-fs warning (device loop5): ext4_begin_enable_verity:135: inode #15: comm syz.5.649: verity is only allowed on extent-based files [ 554.498589][ T8349] geneve0: entered allmulticast mode [ 554.546399][ T8349] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.555156][ T8349] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.564824][ T8349] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.573754][ T8349] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.595159][ T8349] geneve1: entered allmulticast mode [ 554.599227][ T8357] netlink: 76 bytes leftover after parsing attributes in process `syz.5.649'. [ 554.626445][ T8349] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 554.639737][ T8349] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 554.648585][ T8349] veth2: entered allmulticast mode [ 554.658533][ T8349] veth3: entered allmulticast mode [ 554.676015][ T8349] bond1: entered allmulticast mode [ 554.681420][ T8349] batadv1: entered allmulticast mode [ 554.698634][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 554.719022][ T8349] vlan2: left promiscuous mode [ 554.724104][ T8349] bond1: left promiscuous mode [ 554.737938][ T8349] batadv1: left promiscuous mode [ 554.746607][ T8349] vlan2: entered allmulticast mode [ 554.754527][ T8349] ip6tnl1: entered allmulticast mode [ 554.761162][ T8349] netdevsim netdevsim1 eth0: entered allmulticast mode [ 554.769238][ T8349] netdevsim netdevsim1 eth1: entered allmulticast mode [ 554.777462][ T8349] netdevsim netdevsim1 eth2: entered allmulticast mode [ 554.785668][ T8349] netdevsim netdevsim1 eth3: entered allmulticast mode [ 554.793950][ T8349] vlan3: left promiscuous mode [ 554.799051][ T8349] bridge0: left promiscuous mode [ 554.805462][ T8349] vlan3: entered allmulticast mode [ 554.863749][ T8349] bridge1: entered allmulticast mode [ 554.902119][ T8349] bridge2: entered allmulticast mode [ 554.920263][ T8349] xfrm1: entered allmulticast mode [ 555.206928][ T6297] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.699118][ T1727] IPVS: starting estimator thread 0... [ 555.828285][ T8369] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.840408][ T8370] IPVS: using max 240 ests per chain, 12000 per kthread [ 556.119024][ T1727] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 556.210986][ T8369] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.350817][ T1727] usb 6-1: Using ep0 maxpacket: 32 [ 556.396770][ T1727] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 556.405346][ T1727] usb 6-1: config 0 has no interface number 0 [ 556.413059][ T1727] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 556.465251][ T1727] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 556.475115][ T1727] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.485034][ T1727] usb 6-1: Product: syz [ 556.489483][ T1727] usb 6-1: Manufacturer: syz [ 556.494652][ T1727] usb 6-1: SerialNumber: syz [ 556.596821][ T8369] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.626689][ T1727] usb 6-1: config 0 descriptor?? [ 556.659456][ T1727] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 556.671444][ T1727] em28xx 6-1:0.132: Video interface 132 found: [ 556.821961][ T8369] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.113615][ T1727] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 557.272900][ T8369] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.304119][ T8369] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.335610][ T8369] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.369576][ T8369] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.426831][ T1727] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 557.436228][ T1727] em28xx 6-1:0.132: board has no eeprom [ 557.553247][ T1727] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 557.561916][ T1727] em28xx 6-1:0.132: analog set to bulk mode. [ 557.570005][ T5836] em28xx 6-1:0.132: Registering V4L2 extension [ 557.691313][ T1727] usb 6-1: USB disconnect, device number 6 [ 557.698833][ T1727] em28xx 6-1:0.132: Disconnecting em28xx [ 558.471705][ T8389] netlink: 'syz.0.658': attribute type 27 has an invalid length. [ 558.481795][ T8389] geneve0: left allmulticast mode [ 558.771891][ T8391] loop4: detected capacity change from 0 to 2048 [ 558.806436][ T8389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.821156][ T8389] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.832079][ T8389] tipc: Resetting bearer [ 558.858191][ T5836] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 558.868222][ T5836] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 558.876522][ T5836] em28xx 6-1:0.132: No AC97 audio processor [ 558.884567][ T8389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 558.888435][ T5836] usb 6-1: Decoder not found [ 558.905273][ T5836] em28xx 6-1:0.132: failed to create media graph [ 558.914242][ T5836] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 558.928187][ T5836] em28xx 6-1:0.132: Remote control support is not available for this card. [ 558.938521][ T1727] em28xx 6-1:0.132: Closing input extension [ 558.961251][ T1727] em28xx 6-1:0.132: Freeing device [ 559.114208][ T8391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.613095][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 560.613175][ T30] audit: type=1326 audit(1743231736.487:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 560.713295][ T30] audit: type=1326 audit(1743231736.543:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 560.736667][ T30] audit: type=1326 audit(1743231736.600:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 560.759108][ T30] audit: type=1326 audit(1743231736.600:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 560.785328][ T30] audit: type=1326 audit(1743231736.600:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 560.808823][ T30] audit: type=1326 audit(1743231736.646:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 560.833419][ T30] audit: type=1326 audit(1743231736.646:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 560.857175][ T30] audit: type=1326 audit(1743231736.674:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 560.883342][ T30] audit: type=1326 audit(1743231736.674:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 560.906943][ T30] audit: type=1326 audit(1743231736.674:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8406 comm="syz.5.664" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc5579 code=0x7ffc0000 [ 561.683640][ T8410] loop5: detected capacity change from 0 to 256 [ 561.785007][ T8410] vfat: Bad value for 'gid' [ 561.789826][ T8410] vfat: Bad value for 'gid' [ 562.075637][ T5782] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.744732][ T30] kauditd_printk_skb: 196 callbacks suppressed [ 566.744819][ T30] audit: type=1326 audit(1743231742.221:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd7598 code=0x7ffc0000 [ 566.778143][ T30] audit: type=1326 audit(1743231742.221:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 566.802042][ T30] audit: type=1326 audit(1743231742.221:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 567.374131][ T30] audit: type=1326 audit(1743231742.334:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd7598 code=0x7ffc0000 [ 567.397208][ T30] audit: type=1326 audit(1743231742.343:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 567.419783][ T30] audit: type=1326 audit(1743231742.343:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd7598 code=0x7ffc0000 [ 567.443435][ T30] audit: type=1326 audit(1743231742.343:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 567.465991][ T30] audit: type=1326 audit(1743231742.390:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd7598 code=0x7ffc0000 [ 567.488584][ T30] audit: type=1326 audit(1743231742.390:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd7579 code=0x7ffc0000 [ 567.511203][ T30] audit: type=1326 audit(1743231742.408:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd7598 code=0x7ffc0000 [ 567.729640][ T8462] netlink: 'syz.5.682': attribute type 10 has an invalid length. [ 568.612182][ T8470] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.622378][ T8470] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.985694][ T8470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.017869][ T8470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.419402][ T8470] macsec0: left promiscuous mode [ 569.463260][ T8478] netlink: 28 bytes leftover after parsing attributes in process `syz.0.688'. [ 569.473085][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 569.511798][ T8470] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.521552][ T8470] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.531085][ T8470] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.540821][ T8470] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.697997][ T8470] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.709033][ T8470] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.719385][ T8470] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.732085][ T8470] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.762479][ T8470] vxlan0: left promiscuous mode [ 569.775917][ T8473] : renamed from bond_slave_0 [ 571.364808][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.7.695'. [ 575.719725][ T8527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.706'. [ 575.729449][ T8527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.706'. [ 577.674030][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.7.714'. [ 578.129429][ T8547] macvlan0: entered promiscuous mode [ 578.155197][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.716'. [ 578.382329][ T8547] macvlan0 (unregistering): left promiscuous mode [ 579.117152][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.7.721'. [ 582.429923][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 582.430006][ T30] audit: type=1326 audit(1743231756.898:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f61598 code=0x7ffc0000 [ 582.610474][ T30] audit: type=1326 audit(1743231757.029:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f61598 code=0x7ffc0000 [ 582.633864][ T30] audit: type=1326 audit(1743231757.029:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f61598 code=0x7ffc0000 [ 582.658525][ T30] audit: type=1326 audit(1743231757.029:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 582.681782][ T30] audit: type=1326 audit(1743231757.029:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 582.704668][ T30] audit: type=1326 audit(1743231757.057:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f61598 code=0x7ffc0000 [ 582.727373][ T30] audit: type=1326 audit(1743231757.057:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f61598 code=0x7ffc0000 [ 582.750747][ T30] audit: type=1326 audit(1743231757.057:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 583.010014][ T30] audit: type=1326 audit(1743231757.440:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f61598 code=0x7ffc0000 [ 583.033161][ T30] audit: type=1326 audit(1743231757.440:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8574 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 583.834066][ T5793] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 583.843122][ T5793] Bluetooth: hci0: Injecting HCI hardware error event [ 583.857004][ T5793] Bluetooth: hci0: hardware error 0x00 [ 585.646842][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.732'. [ 587.089671][ T11] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 587.313228][ T11] usb 6-1: config 0 has no interfaces? [ 587.366899][ T11] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 587.376494][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.385171][ T11] usb 6-1: Product: syz [ 587.390010][ T11] usb 6-1: Manufacturer: syz [ 587.394862][ T11] usb 6-1: SerialNumber: syz [ 587.560179][ T11] usb 6-1: config 0 descriptor?? [ 587.829694][ T1727] usb 6-1: USB disconnect, device number 7 [ 588.678861][ T8609] netlink: 666 bytes leftover after parsing attributes in process `syz.0.736'. [ 588.950028][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 589.288933][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.5.740'. [ 589.289042][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.739'. [ 589.360785][ T8617] bridge_slave_1 (unregistering): left allmulticast mode [ 589.368345][ T8617] bridge_slave_1 (unregistering): left promiscuous mode [ 589.375909][ T8617] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.817415][ T5793] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 591.264419][ T8635] macvlan2: entered promiscuous mode [ 591.270309][ T8635] bridge0: entered promiscuous mode [ 591.279781][ T8635] bridge0: port 3(macvlan2) entered blocking state [ 591.287054][ T8635] bridge0: port 3(macvlan2) entered disabled state [ 591.296199][ T8635] macvlan2: entered allmulticast mode [ 591.302145][ T8635] bridge0: entered allmulticast mode [ 591.372959][ T8640] netlink: 'syz.7.747': attribute type 10 has an invalid length. [ 591.381669][ T8640] netlink: 40 bytes leftover after parsing attributes in process `syz.7.747'. [ 591.415621][ T8635] macvlan2: left allmulticast mode [ 591.421544][ T8635] bridge0: left allmulticast mode [ 591.475786][ T8635] bridge0: left promiscuous mode [ 591.633002][ T8638] gretap0: left promiscuous mode [ 591.849024][ T8638] syz_tun: left promiscuous mode [ 591.975646][ T8638] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 595.319568][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 595.319683][ T30] audit: type=1800 audit(1743231768.955:1021): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.751" name="/newroot/152/bus" dev="tmpfs" ino=880 res=0 errno=0 [ 595.379061][ T8656] Invalid ELF header magic: != ELF [ 596.604926][ T8672] ===================================================== [ 596.612255][ T8672] BUG: KMSAN: uninit-value in do_output_route4+0x42c/0x4d0 [ 596.619932][ T8672] do_output_route4+0x42c/0x4d0 [ 596.625174][ T8672] __ip_vs_get_out_rt+0x403/0x21d0 [ 596.630510][ T8672] ip_vs_tunnel_xmit+0x205/0x2380 [ 596.636006][ T8672] ip_vs_in_hook+0x1aa5/0x35b0 [ 596.640995][ T8672] nf_hook_slow+0xf7/0x400 [ 596.645639][ T8672] __ip_local_out+0x758/0x7e0 [ 596.650823][ T8672] ip_send_skb+0x6a/0x3c0 [ 596.655446][ T8672] udp_send_skb+0xfda/0x1b70 [ 596.660614][ T8672] udp_sendmsg+0x2fe3/0x33c0 [ 596.665442][ T8672] inet_sendmsg+0x1fc/0x280 [ 596.670424][ T8672] __sock_sendmsg+0x267/0x380 [ 596.675375][ T8672] ____sys_sendmsg+0x91b/0xda0 [ 596.680570][ T8672] ___sys_sendmsg+0x28d/0x3c0 [ 596.685493][ T8672] __sys_sendmmsg+0x41d/0x880 [ 596.690560][ T8672] __ia32_compat_sys_sendmmsg+0xc8/0x140 [ 596.696438][ T8672] ia32_sys_call+0x3ffa/0x41f0 [ 596.701597][ T8672] __do_fast_syscall_32+0xb0/0x110 [ 596.707040][ T8672] do_fast_syscall_32+0x38/0x80 [ 596.712303][ T8672] do_SYSENTER_32+0x1f/0x30 [ 596.717069][ T8672] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 596.723843][ T8672] [ 596.726297][ T8672] Uninit was created at: [ 596.730864][ T8672] __kmalloc_cache_noprof+0x8fa/0xe00 [ 596.736834][ T8672] __ip_vs_get_out_rt+0x35d/0x21d0 [ 596.742289][ T8672] ip_vs_tunnel_xmit+0x205/0x2380 [ 596.747623][ T8672] ip_vs_in_hook+0x1aa5/0x35b0 [ 596.752632][ T8672] nf_hook_slow+0xf7/0x400 [ 596.757416][ T8672] __ip_local_out+0x758/0x7e0 [ 596.762322][ T8672] ip_send_skb+0x6a/0x3c0 [ 596.767081][ T8672] udp_send_skb+0xfda/0x1b70 [ 596.771903][ T8672] udp_sendmsg+0x2fe3/0x33c0 [ 596.776886][ T8672] inet_sendmsg+0x1fc/0x280 [ 596.781610][ T8672] __sock_sendmsg+0x267/0x380 [ 596.786731][ T8672] ____sys_sendmsg+0x91b/0xda0 [ 596.791742][ T8672] ___sys_sendmsg+0x28d/0x3c0 [ 596.796920][ T8672] __sys_sendmmsg+0x41d/0x880 [ 596.801840][ T8672] __ia32_compat_sys_sendmmsg+0xc8/0x140 [ 596.807889][ T8672] ia32_sys_call+0x3ffa/0x41f0 [ 596.812874][ T8672] __do_fast_syscall_32+0xb0/0x110 [ 596.818418][ T8672] do_fast_syscall_32+0x38/0x80 [ 596.823510][ T8672] do_SYSENTER_32+0x1f/0x30 [ 596.828410][ T8672] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 596.834997][ T8672] [ 596.837505][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.7.759 Not tainted 6.14.0-syzkaller-07540-geff5f16bfd87 #0 PREEMPT(undef) [ 596.849579][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 596.859975][ T8672] ===================================================== [ 596.867064][ T8672] Disabling lock debugging due to kernel taint [ 596.873555][ T8672] Kernel panic - not syncing: kmsan.panic set ... [ 596.880184][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.7.759 Tainted: G B 6.14.0-syzkaller-07540-geff5f16bfd87 #0 PREEMPT(undef) [ 596.893595][ T8672] Tainted: [B]=BAD_PAGE [ 596.897898][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 596.908161][ T8672] Call Trace: [ 596.911679][ T8672] [ 596.914758][ T8672] dump_stack_lvl+0x216/0x2d0 [ 596.919701][ T8672] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 596.925816][ T8672] dump_stack+0x1e/0x24 [ 596.930227][ T8672] panic+0x4e5/0xcf0 [ 596.934373][ T8672] ? __pfx_kmsan_save_stack_with_flags+0x10/0x10 [ 596.941011][ T8672] kmsan_report+0x2ca/0x2d0 [ 596.945788][ T8672] ? kmsan_get_metadata+0x13e/0x1c0 [ 596.951295][ T8672] ? rt_set_nexthop+0xdbc/0xfc0 [ 596.956433][ T8672] ? __msan_warning+0x95/0x120 [ 596.961466][ T8672] ? do_output_route4+0x42c/0x4d0 [ 596.966721][ T8672] ? __ip_vs_get_out_rt+0x403/0x21d0 [ 596.972471][ T8672] ? ip_vs_tunnel_xmit+0x205/0x2380 [ 596.977911][ T8672] ? ip_vs_in_hook+0x1aa5/0x35b0 [ 596.983090][ T8672] ? nf_hook_slow+0xf7/0x400 [ 596.987901][ T8672] ? __ip_local_out+0x758/0x7e0 [ 596.992992][ T8672] ? ip_send_skb+0x6a/0x3c0 [ 596.997749][ T8672] ? udp_send_skb+0xfda/0x1b70 [ 597.002743][ T8672] ? udp_sendmsg+0x2fe3/0x33c0 [ 597.007737][ T8672] ? inet_sendmsg+0x1fc/0x280 [ 597.012627][ T8672] ? __sock_sendmsg+0x267/0x380 [ 597.017765][ T8672] ? ____sys_sendmsg+0x91b/0xda0 [ 597.022954][ T8672] ? ___sys_sendmsg+0x28d/0x3c0 [ 597.028054][ T8672] ? __sys_sendmmsg+0x41d/0x880 [ 597.033151][ T8672] ? __ia32_compat_sys_sendmmsg+0xc8/0x140 [ 597.039230][ T8672] ? ia32_sys_call+0x3ffa/0x41f0 [ 597.044406][ T8672] ? __do_fast_syscall_32+0xb0/0x110 [ 597.049948][ T8672] ? do_fast_syscall_32+0x38/0x80 [ 597.055219][ T8672] ? do_SYSENTER_32+0x1f/0x30 [ 597.060148][ T8672] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 597.066943][ T8672] ? kmsan_get_metadata+0x13e/0x1c0 [ 597.072445][ T8672] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 597.078544][ T8672] ? kmsan_get_metadata+0x13e/0x1c0 [ 597.084042][ T8672] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 597.090186][ T8672] ? ip_route_output_flow+0x246/0x2b0 [ 597.095833][ T8672] ? kmsan_get_metadata+0x13e/0x1c0 [ 597.101323][ T8672] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 597.107447][ T8672] __msan_warning+0x95/0x120 [ 597.112312][ T8672] do_output_route4+0x42c/0x4d0 [ 597.117443][ T8672] __ip_vs_get_out_rt+0x403/0x21d0 [ 597.122773][ T8672] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 597.128865][ T8672] ? stack_depot_save_flags+0x6db/0x750 [ 597.134695][ T8672] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 597.140806][ T8672] ip_vs_tunnel_xmit+0x205/0x2380 [ 597.146060][ T8672] ? kmsan_get_metadata+0x13e/0x1c0 [ 597.151594][ T8672] ? __pfx_ip_vs_tunnel_xmit+0x10/0x10 [ 597.157287][ T8672] ip_vs_in_hook+0x1aa5/0x35b0 [ 597.162299][ T8672] ? ip_vs_out_hook+0x135a/0x1ab0 [ 597.167583][ T8672] ? ip_vs_in_hook+0x170c/0x35b0 [ 597.172758][ T8672] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 597.178105][ T8672] nf_hook_slow+0xf7/0x400 [ 597.182755][ T8672] __ip_local_out+0x758/0x7e0 [ 597.187677][ T8672] ? __pfx_dst_output+0x10/0x10 [ 597.192795][ T8672] ip_send_skb+0x6a/0x3c0 [ 597.197397][ T8672] udp_send_skb+0xfda/0x1b70 [ 597.202314][ T8672] udp_sendmsg+0x2fe3/0x33c0 [ 597.207162][ T8672] ? aa_label_sk_perm+0x67d/0x7b0 [ 597.212486][ T8672] ? filter_irq_stacks+0x60/0x1b0 [ 597.217802][ T8672] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 597.223697][ T8672] ? __pfx_udp_sendmsg+0x10/0x10 [ 597.228887][ T8672] ? __pfx_udp_sendmsg+0x10/0x10 [ 597.234077][ T8672] inet_sendmsg+0x1fc/0x280 [ 597.238816][ T8672] ? __pfx_inet_sendmsg+0x10/0x10 [ 597.244078][ T8672] __sock_sendmsg+0x267/0x380 [ 597.249024][ T8672] ____sys_sendmsg+0x91b/0xda0 [ 597.254036][ T8672] ___sys_sendmsg+0x28d/0x3c0 [ 597.258941][ T8672] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 597.265015][ T8672] ? __rcu_read_unlock+0x7b/0xe0 [ 597.270147][ T8672] ? __fget_files+0x443/0x520 [ 597.275038][ T8672] ? kmsan_get_metadata+0x13e/0x1c0 [ 597.281011][ T8672] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 597.287085][ T8672] __sys_sendmmsg+0x41d/0x880 [ 597.291993][ T8672] ? schedule+0x17e/0x3c0 [ 597.296566][ T8672] ? do_futex+0x382/0x4a0 [ 597.301096][ T8672] ? kmsan_get_metadata+0x13e/0x1c0 [ 597.306593][ T8672] __ia32_compat_sys_sendmmsg+0xc8/0x140 [ 597.312479][ T8672] ia32_sys_call+0x3ffa/0x41f0 [ 597.317471][ T8672] __do_fast_syscall_32+0xb0/0x110 [ 597.322822][ T8672] ? irqentry_exit+0x16/0x60 [ 597.327644][ T8672] do_fast_syscall_32+0x38/0x80 [ 597.332728][ T8672] do_SYSENTER_32+0x1f/0x30 [ 597.337451][ T8672] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 597.344026][ T8672] RIP: 0023:0xf73ed579 [ 597.348273][ T8672] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 597.368380][ T8672] RSP: 002b:00000000f507655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 597.377013][ T8672] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002680 [ 597.385591][ T8672] RDX: 0000000000000011 RSI: 0000000020000000 RDI: 0000000000000000 [ 597.393733][ T8672] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 597.401865][ T8672] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 597.410006][ T8672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 597.418200][ T8672] [ 597.421719][ T8672] Kernel Offset: disabled [ 597.426148][ T8672] Rebooting in 86400 seconds..