last executing test programs: 10m27.968315139s ago: executing program 32 (id=39): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) 8m46.852341851s ago: executing program 33 (id=330): syz_open_procfs(0x0, &(0x7f0000000680)='net/tcp6\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x800, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7m16.123594776s ago: executing program 5 (id=577): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a"], 0x44}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) 7m13.564255213s ago: executing program 5 (id=580): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={0x0}}, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 7m11.670380715s ago: executing program 5 (id=586): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x7, 0x4e22, 0x0, 0x2, 0x20, 0x190, 0x1d}, {0x9, 0x2a560215, 0x6, 0x3, 0xffff, 0x0, 0xacf5, 0xfffffffffffffffc}, {0x7ef, 0x7fffffff, 0x5, 0x8}, 0x7ffffffe, 0x6e6bb7, 0x3, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d6, 0x32}, 0xa, @in6=@mcast1, 0x0, 0x3, 0x3, 0x9, 0xee8d, 0xffffffff, 0x6}}, 0xe8) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8915, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @loopback}}) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x800000, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80ad}, 0x1c) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2008002) 7m8.290087555s ago: executing program 5 (id=591): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0xc32, 0xffff, 0x4008, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/110, 0x6e, 0x400) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000480)={[{@sysvgroups}, {@i_version}, {@lazytime}, {@grpid}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@bsdgroups}, {@noquota}, {@user_xattr}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x560, &(0x7f0000000bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 7m6.010065944s ago: executing program 5 (id=598): r0 = socket$netlink(0x10, 0x3, 0x0) close(0x3) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}}, 0x4000050) 7m3.964219624s ago: executing program 5 (id=602): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, 0x0, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x2, 0x2, 0x16}]}]}, 0x28}}, 0x0) 6m58.825105368s ago: executing program 34 (id=602): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, 0x0, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x2, 0x2, 0x16}]}]}, 0x28}}, 0x0) 6m29.135772991s ago: executing program 7 (id=701): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 6m28.110429505s ago: executing program 4 (id=703): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x8000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000001280)=""/4089, 0xff9) getdents(r3, 0x0, 0x0) 6m27.853248541s ago: executing program 7 (id=706): openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f6"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 6m27.244468934s ago: executing program 4 (id=707): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x22) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 6m26.604266527s ago: executing program 7 (id=710): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) 6m26.180287914s ago: executing program 4 (id=712): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r1, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a"], 0x44}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r2, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) 6m24.63474189s ago: executing program 7 (id=718): syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000000)='./file0\x00', 0x1208010, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010}, 0x0) dup2(r1, r0) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 6m24.528352636s ago: executing program 4 (id=719): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 6m23.073752196s ago: executing program 7 (id=723): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3) dup3(r0, r2, 0x0) dup3(r1, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="39ac", 0x2}, {&(0x7f0000000340)="a4ce", 0x2}], 0x2, 0xffffffff, 0x4) 6m22.49766019s ago: executing program 4 (id=725): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}}, 0x4004010) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x801, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x4a080}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 6m22.153087464s ago: executing program 7 (id=727): socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) socket$isdn_base(0x22, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x215}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x8, 0x0, @fd, 0x10, 0x0, 0xfffdfff9, 0x5, 0x259792cd96d38d81}) io_uring_enter(r0, 0x2d3e, 0x0, 0x8, 0x0, 0x0) 6m18.737314583s ago: executing program 35 (id=727): socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) socket$isdn_base(0x22, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x215}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x8, 0x0, @fd, 0x10, 0x0, 0xfffdfff9, 0x5, 0x259792cd96d38d81}) io_uring_enter(r0, 0x2d3e, 0x0, 0x8, 0x0, 0x0) 6m18.59842289s ago: executing program 6 (id=730): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m18.54807539s ago: executing program 4 (id=732): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48001) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x6b0240, 0x102) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m18.385573854s ago: executing program 36 (id=732): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40088d0}, 0x48001) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x6b0240, 0x102) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m14.900138915s ago: executing program 6 (id=736): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000001c0)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x100000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000180)=0x5) sendfile(r0, r0, 0x0, 0x40008) 6m12.941581147s ago: executing program 6 (id=740): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e00)={0x44, &(0x7f0000000500)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m10.072618379s ago: executing program 6 (id=744): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)=ANY=[]) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101841, 0x157) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x5, 0xc95a, 0xfffffff3, 0x80000006, 0x9, 0x2, 0x1, 0x7f, 0x6, 0xf, 0xfffffff2, 0x5f, 0xa, 0x7, 0x9, 0x8, 0x6, 0xa, 0x0, 0x80000001, 0xca, 0x7, 0x5, 0x3c5b, 0x6, 0x22, 0x2, 0xfffffffe, 0x1f461e2c, 0x2, 0x727, 0x4, 0x3, 0x0, 0x107fff, 0x4c74, 0x9, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x3, 0x39, 0x2, 0x6, 0x81, 0x3, 0x5, 0x0, 0x8, 0xe1, 0x7f, 0x0, 0x5, 0x5, 0xa, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x10, 0x129432e6, 0xcb, 0x2, 0xd, 0x22d8, 0x1, 0x9, 0xfffffffc, 0x8, 0xfffffffe, 0x7, 0x5, 0x2f, 0xe, 0x8, 0x78, 0xea4, 0x7ffffffc, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x3, 0xfffffffd, 0xff, 0x1005, 0x801, 0x7, 0x4, 0x2009, 0x106, 0x2, 0x1ff, 0x7, 0x9, 0x8, 0x9, 0x8000, 0x5, 0x0, 0x2, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x74ec1f9b, 0x4, 0x2, 0x7, 0xd, 0x9, 0x48c93690, 0x802, 0xff], [0x7, 0x4, 0x0, 0x652, 0xfffffdfe, 0xd, 0x8ce, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xc, 0x4, 0x5, 0x76, 0x0, 0x1ef, 0x5, 0x7, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x1, 0xb7, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x9, 0x3, 0x200, 0x80000000, 0x3, 0x4, 0x2, 0x10000, 0xa2, 0x7, 0x53cf6b7b, 0x5, 0x6, 0x54fe12d5, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x5, 0x5, 0x5, 0x6, 0xffbffffb, 0x4, 0x3, 0x8, 0x9, 0x8, 0x3], [0x10009, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0xfffffffc, 0x9, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8, 0x60a7, 0x6, 0x6, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x4, 0x82ffff, 0x200003, 0xfffffff9, 0x7ffffffd, 0x9602, 0xa, 0x8, 0x4, 0xffffffff, 0x1, 0x10002, 0x5, 0x8, 0x2b95, 0x7, 0x7, 0x9, 0x1, 0x6c1b, 0x3, 0x4, 0x5, 0xb1c, 0x1, 0x99f5, 0xffff3441, 0xfff]}, 0x45c) 6m7.456348432s ago: executing program 6 (id=748): r0 = socket$inet(0x2, 0x2, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote={0xfe, 0x7}, @mcast2, {[], @ndisc_ra}}}}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x8e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) r5 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\m\xdf8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97b`c\xe0\x88?\xda\x8a#t>r\xae\xe8', 0x0) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr, @multicast2}}}], 0x38}, 0x0) 6m5.265048313s ago: executing program 6 (id=750): openat$vcsu(0xffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) shutdown(r0, 0x1) 6m2.775276527s ago: executing program 37 (id=750): openat$vcsu(0xffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) shutdown(r0, 0x1) 4m35.66060322s ago: executing program 0 (id=979): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffc, @local, 0x2}, 0x1c) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000640)={&(0x7f0000000600)={&(0x7f0000000540)="0323cb50ab2568a0957521b35d78b4034fd0fb056c2d0c7de0c132d2db6ca68361c7e14e9c58feffd25efaf7c3dadedcaf27e97006bf37cd9bc0836cb8ecb19292f85d2ec17b21dc5e2efdd2b0faebbaa13dbbc70a8ae9cb6be397a039d7146a20edf706c9d26b9e11aa0a5000f8afd0718b7fe4e2122b7f3f5adbfc3b5f24bc578550337c48a9fdb199e4", 0x8b, 0x1, 0x3f600000, 0x80}}, 0x1) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00000000000000fe8000000000000000000000000000bb000000000a"], 0xe0}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x4d8, 0x324, 0x324, 0x0, 0x258, 0x190, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [0xff], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa4, 0xc8, 0x0, {0x0, 0x3a010000}}, @HL={0x24}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x324}}, {{@ipv6={@mcast1, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x40, 0xff, 0x3}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0xc}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x534) 4m34.61378244s ago: executing program 0 (id=984): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000007060104000000000000000000000000050001000700000005"], 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x24, 0x21, 0x103, 0x0, 0x0, {0xa, 0x0, 0x1f}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 4m33.234729427s ago: executing program 0 (id=986): r0 = socket(0x2, 0x3, 0x67) r1 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000380)='./file1\x00', 0x22000848, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r3, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESHEX=r4, @ANYRESHEX=r2, @ANYRES32=r1, @ANYBLOB="69bf73f92e234554ec87ee5e75fbb975163e06e442e05c723ce6"], 0x81, 0x151a, &(0x7f0000006000)="$eJzs3AuUjlX7MPB97b1vhiY9TXIY9rWvmyeNsQ1JckjIIUmSJMkpIWmSJCEx5JQ0JCHHSXIYQnJqTBrn8yHnpMkrTZKEhCT7W3r7f97+vaf/99Zn/Zvrt9Zes69n33vf136uWfPc973WPF/3GFm3eb1aTYlI/Efgrz9ShBAxQoihQohrhBCBEKJiXMW4S+P5FKT8Zydhv68H0q90BuxK4vrnblz/3I3rn7tx/XM3rn/uxvXP3bj+uRvXn7HcbPvsotdyy72Nn//nZvz5/yeSU3bS5xvLXt/zfzCF65+7cf1zN65/7sb1z924/rkb1//Pr+Y/GeP6525cf8Zysyv9/Pn3b/n+hHv649qV/v1jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPOXaSHEf/WvdF6MMcYYY4wxxhj7/fi8/+6R+f7YRBhjjDHGGGOMMfYHAiGFEloEIo/IK2JEPpFfXCVixdWigLhGRMS1Ik5cJwqK60UhUVgUEUVFvCgmigsjUFhBIhQlREkRFTeIUuJGkSBKi0RRRjhRViSJcqK8uElUEDeLiuIWUUncKiqLKqKqqCZuE9XF7aKGqClqiTtEbVFH1BX1xJ2ivrhLNBB3i4biHtFI3Csai/tEE3G/aCoeEM3Eg6K5eEi0EA+LlqKVaC3aiLb/T/OfF33EC6Kv6CdSRH8xQLwoBopBYrAYIoaKl8Qw8bIYLl4RqWKEGCleFaPEa2K0eF2MEWPFOPGGGC8miIlikpgspog08aaYKt4S08TbYrqYIWaKWSJdzBZzxDtirpgn5ot3xQLxnlgoFonFYolYKt4XGWKZyBQfiOXiQ5ElVoiVYpVYLdaItWKdWC82iI1ik9gstoitYpvYLj4SO8ROsUvsFnvEXrFPfCz2i0/EAfGpyBaf/Q/nn/1v83uCAAESJGjQkAfyQAzEQH7ID7EQCwWgAEQgAnEQBwWhIBSCQlAEikA8xENxKA4ICAQEJaAERCEKpaAUJEACJEIiOHCQBElQHm6CClABKkJFqASVoDJUgSpQDapBdagONaAG1IJaUBtqQ12oC3fCnXAXNIAG0BAaQiNoBI2hMTSBJtAUmkIzaAbNoTm0gBbQElpCa2gNbaEttIN20B7aQ0foCJ2gE3SGzpAMydAFukBX6ArdoBt0h+7QA3pAT+gFveB5eB5egBegH9SW/WEADICBMBAGwxAYAi/BMHgZXoZXIBVGwEh4FV6F12A0nIExMBbGwTioLifARJgEJKdAGqTBVJgK02AaTIcZMANmQTrMhjkwB+bCPJgH78ICeA/eg0WwCJbAUlgKGbAMMiETlsNZyIIVsBJWwWpYA6thHayHdbARNsFG2AJbYBtsg4/gI9gJO2E37Ia9sBc+ho/hE/gEUiEbsuEgHIRDcAgOw2HIgRw4AkfgKByFY3AMjsNxOAEn4RSchNNwGs7AWTgH5+A8nIcL8Gz8l832lt6QKuQlWmqZR+aRMTJG5pf5ZayMlQVkARmRERkn42RBWVAWkoVkEVlExst4WVwWlyhRkgxlCVlCRmVUlpKlZIJMkIkyUTrpZJJMkuVleVlBVpAV5S2ykrxVVpZVZAdXTVaT1WVHV0PWlLVkLVlb1pF1ZT1ZT9aX9WUD2UA2lA1lI9lINpb3ySayPwyGB+SlyjSXI6CFHAktZSvZWraRr8Ejsp0cDe1lB9lRPibHwhjoLNu5ZPmk7CInQlf5tJwEz8jucgr0kM/JnrKX7C2fl31ke9dX9pPTob8cIGfBQDlIDpZD5FyoIy9VrK58RabKEXKkfFUugdfkaPm6HCPHynHyDTleTpAT5SQ5WU6RafJNOVW+JafJt+V0OUPOlLNkupwt58h35Fw5T86X78oF8j25UC6Si+USuVS+LzPkMpkpP5DL5YcyS66QK+UquVqukWvlOrlebpAb5Sa5WW6RW+U2uV1+JHfInXKX3C33yL1yn/xY7pefyAPyU5ktP5MH5V/kIfm5PCy/kDnyS3lEfiWPyq/lMfmNPC6/lSfkSXlKfidPy+/lGXlWnpM/yPPyR3lB/iQvSi+FAiWVUloFKo/Kq2JUPpVfXaVi1dWqgLpGRdS1Kk5dpwqq61UhVVgVUUVVvCqmiiujUFlFKlQlVEkVVTeoUupGlaBKq0RVRjlVViWpcqq8uklVUDeriuoWVUndqiqrKqqqqqZuU9XV7aqGqqlqqTtUbVVH1VX11J2qvrpLNVB3q4bqHtVI3asaq/tUE3W/aqoeUM3Ug6q5eki1UA+rlqqVaq3aqLbqEdVOParaqw6qo3pMdVKPq87qCZWsnlRd1FOqq3padVPPqO7qWdVDPad6ql6qt/pJXVRe9VX9VIrqrwaoF9VANUgNVkPUUPWSGqZeVsPVKypVjVAj1atqlHpNjVavqzFqrBqn3lDj1QQ1UU1Sk9UUlabeVFPVW2qaeltNVzPUTDVLpavZavAvK83/N+a/9XfmD//57NvUdvWR2qF2ql1qt9qj9qp9ap/ar/arA+qAylbZ6qA6qA6pQ+qwOqxyVI46oo6oo+qoOqaOqePquDqhTqof1HfqtPpenVFn1Vn1gzqvzqsLv7wHQoOWWmmtAf56PZBP59dX6Vh9tS6gr9ERfa2O09fpgvp6XUgX1kV0UR2vi+ni2mjUVpMOdQldUkf1DbqUvlEn6NI6UZfRTpfVSbrcfzz/cn6BzqPz6hj96/za6ra6nW6n2+v2uqPuqDvpTrqz7qyTdbLuorvorrqr7qa76e66u+6he+ieuqfurXvrPrqP7qv76hSdogfoF/VAPUgP1kP0UP2SHqaH6eF6uE7VqXqkHqlH6VF6tB6tx+gxepwep8fr8Xqinqgn68k6TafpqXqqnqan6el6up6pZ+p0na7n6Dl6rp6r5+v5eoFeoBfqhXqxXqyX6qU6Q2foTJ2pl+vlOkuv0Cv0Kr1Kr9Fr9Dq9Tm/QG/QmvUlv0Vt0lt6ut+sdeofepXfpPXqP3qf36f16vz6gD+hsna0P6oP6kD6kD+vDOkfn6CP6iD6qj+pj+pg+ro/rE/qEPqVP6dP6tD6jz+hz+pw+r8/rC/qCvqgvXrrsC2QgAx3oIE+QJ4gJYoL8Qf4gNogNCgQFgkgQCeKCuKBgcH1QKCgcFAmKBvFBsaB4YAIMbEBBGJQISgbR4IagVHBjkBCUDhKDMoELygZJQbmgfHBTUCG4OagY3BJUCm4NKgdVgqpBteC2oHpwe1AjqBnUCu4Iagd1grpBveDOoH5wV9AguDtoGNwTNAruDRoH9wVNgvuDpsEDQbPgwaB58FDQIng4aBm0CloHbYK2v+v63p8p/Kjra/qZFNPfDDAvmoFmkBlshpih5iUzzLxshptXTKoZYUaaV80o85oZbV43Y8xYM868YcabCWaimWQmmykmzbxpppq3zDTztpluZpiZZpZJN7PNHPOOmWvmmfnmXbPAvGcWmkVmsVlilpr3TYZZZjLNB2a5+dBkmRVmpVllVps1Zq1ZZ9abDWaj2WQ2my1mq9lmtpuPzA6z0+wyu80es9fsMx+b/eYTc8B8arLNZ+ag+Ys5ZD43h80XJsd8aY6Yr8xR87U5Zr4xx8235oQ5aU6Z78xp8705Y86ac+YHc978aC6Yn8xF4y9d3F/6eEeNGvNgHozBGMyP+TEWY7EAFsAIRjAO47AgFsRCWAiLYBGMx3gsjsXxEkLCElgCoxjFUlgKEzABEzERHTpMwiQsj+WxAlbAilgRK2ElrIyVsSpWxdvwNrwdb8eaWBPvwDuwDtbBelgP62N9bIANsCE2xEbYCBtjY2yCTbApNsVm2AybY3NsgS2wJbbE1tga22JbbIftsD22x47YETthJ+yMnTEZk7ELdsGu2BW7YTfsjt2xB/bAntgTe2Nv7IN9sC/2xRRMwQE4AAfiQByMg3EoDsVhOAyH43BMxVQciSNxFI7C0Tgax+BYHIdv4HicgBNxEk7GKZiGaTgVp+I0nIbTcTrOxJmYjuk4B+fgXJyL83E+LsAFuBAX4mJcjEtxKWZgBmZiJi7H5ZiFWbgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsftuAN34C7chXtwD+7Dfbgf9+MBPIDZmI0H8SAewkN4GA9jDubgETyCR/EoHsNjeByP4wk8gafwFJ7G03gGz+A5PIfn8Ue8gD/hRfQYY6XIb6+ysfZqW8BeY2NsPvu3cRFb1MbbYra4NbaQLfyrGK21Cba0TbRlrLNlbZIt95u4sq1iq9pq9jZb3d5ua/wmrm/vsg3s3bahvcfWs3f+Km5k77WN7UO2iX3YNrWtbDPbxja3D9kW9mHb0rayrW0b28k+bjvbJ2yyfdJ2sU/9Js6wy+x6u8FutJvsfvuJPWd/sEft1/a8/dH2tf3sUPuSHWZftsPtKzbVjvhNPM6+YcfbCXainWQn2ym/iWfaWTbdzrZz7Dt2rp33m3ipfd8usJl2oV1kF9slP8eXcsq0H9jl9kObZVfYlXaVXW3X2LV23f/NdZXdYrfabXaf/djusDvtLrvb7rF7f44v7eOA/dRm28/sEfuVPWQ/t4ftMZtjv/w5vrS/Y/Ybe9x+a0/Yk/aU/c6ett/bM/bsz/u/tPfv7E/2ovVWEJAkRZoCykN5KYbyUX66imLpaipA11CErqU4uo4K0vVUiApTESpK8VSMipMhJEtEIZWgkhSlG6gU3UgJVJoSqQw5KktJVI7K001UgW6minQLVaJbqTJVoapUjW6j6nQ71aCaVIvuoNpUh+pSPbqT6tNd1IDupoZ0DzWie6kx3UdN6H5qSg9QM3qQmtND1IIeppbUilpTG2pLj1A7epTaUwfqSI9RJ3qcOtMTlExPUhd6irrS09SNnqHu9Cz1oOeoJ/Wi3vQ89aEXqC/1oxTqTwPoRRpIg2gwDaGh9BINo5dpOL1CqTSCRtKrNIpeo9H0Oo2hsTSO3qDxNIEm0iSaTFMojd6kqfQWTaO3aTrNoJk0i9JpNs2hd2guzaP59C4toPdoIS2ixbSEltL7lEHLKJM+oOX0IWXRClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttNHtIN20i7aTXtoL+2jj2k/fUIH6FPKps/oIP2FDtHndJi+oBz6ko7QV3SUvqZj9A0dp2/pBJ2kU/Qdnabv6QydpXP0A52nH+kC/UQXyZMIIZShCnUYhHnCvGFMmC/MH14VxoZXhwXCa8JIeG0YF14XFgyvDwuFhcMiYdEwPiwWFg9NiKENKQzDEmHJMBreEJYKbwwTwtJhYlgmdGHZMCksF5YPbworhDeHFcNbwkrhrWHlsEr40D3VwtvC6uHtYY2wZlgrvCOsHdYJ64b1wjvD+uFdYYPw7rBheE9YIbw3bBzeFzYJ7w+bhg+EzcIHw+bhQ2GL8OGwZdgqbB22CduGj4TtwkfD9mGHsGP4WNgpfDzsHD4RJodPhl3Cp/7leErYPxwQvhi+GHp/t1ocXRJdGn0/mhFdFs2MfhBdHv0wmhVdEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vl5e4cBJp5x2gcvj8roYl8/ld1e5WHe1K+CucRF3rYtz17mC7npXyBV2RVxRF++KueLOOHTWkQtdCVfSRd0NrpS70SW40i7RlXHOlXVJro1r69q6du5R1951cB3dY+4x97h73D3hnnBPui7uKdfVPe26uWdcd/ese9Y953q6Xq63e971cS+4vq6fS3EpboAb4Aa6gW6wG+yGuqFumBvmhrvhLtWlupFupBvlRrnRbrQb48a4cW6cG+/Gu4luopvsJrs0l+amuqlumpvmprvpbqab6dJdupvj5ri5bq6b7+a7BQkL3EK30C12i91St9RluAyX6TLdcrfcZbkst9KtdKvdarfWrXXr3Xq30W10m91mt9VtddvddrfD7XC73C63x+1x+9w+t9/tdwfcAZftst1Bd9AdcofcYfeFy3FfuiPuK3fUfe2OuW/ccfetO+FOulPuO3fafe/OuLPunPvBnXc/ugvuJ3fReZcWeTMyNfJWZFrk7cj0yIzIzMisSHpkdmRO5J3I3Mi8yPzIu5EFkfciCyOLIosjSyJLI+9HMiLLIpmRDyLLIx9GsiIrIisjqyKrI2si3hfbEfoSvqSP+ht8KX+jT/ClfaIv450v65N8OV/e3+Qr+Jt9RX+Lr+Rv9ZV9FV/VP+xb+la+tW/j2/pHfDv/qG/vO/iO/jHfyT/uO/snfLJ/0nfxT/mu/mnfzT/ju/tnfQ//nO/pe/ne/nnfx7/g+/p+PsX39wP8i36gH+QH+yF+qH/JD/Mv++H+FZ/qR/iR/lU/yr/mR/vX/Rg/1o/zb/jxfoKf6Cf5yX6KT/Nv+qn+LT/Nv+2n+xl+pp/l0/1sP8e/4+f6eX6+f9cv8O/5hT7PL8+O3/cZfpnP9B/45f5Dn+VX+JV+lV/t1/i1fp1f7zf4jX6T3+y3+K1SCOE/8jv8Tr/L7/Z7/F6/z3/s9/tP/AH/qc/2n/mD/i/+kP/cH/Zf+Bz/pT/iv/JH/df+mP/GH/ff+hP+pD/lv/On/ff+jD/rz/kf/Hn/o7/gf/IX/63/WSv3hz5JZ4wxxhj730D9i/H+f+c1+Uu7ZIAQ4uqdRXP++5qbC/21P0jGd4oIIZ7s1+OB/2q1a6ekpPxybJYSQclFQojI5fk/X13+Eq8QHcXjIll0EOX/bn6DZK/z9Kv19a/GL60fvUWI/H/zWoy4HF9e/6Z/sP4jj43LqBSei/vH+UcXCZFQ8vKcfOJyfHn9Cv9g/cLt6J+/P/k+TxOi/d/MiRWX48vrJ4lHxVMi+VdH/ob8Z4OMMcYYY4wxxv68Bsmq3f7F/efP9+fxf3NbnVdcjv/V/TljjDHGGGOMMcauvGd69X7ikeTkDt24wx3u/O/pJGoh/tBTXOm/TIwxxhhjjLHf2+WL/iudCWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlnv9//jGsiu9R8YYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+xK+z8BAAD//+DHLUI=") lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r8, 0xffffffffffffffff) getgroups(0x8, &(0x7f0000000440)=[0xee01, 0xffffffffffffffff, 0xee00, 0xee00, 0xee00, 0xee00, 0xee01, 0xee01]) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {0x1, 0x3}, [{0x2, 0x2, 0xee00}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x0, r3}, {0x2, 0x1, r5}, {0x2, 0x5, r6}], {}, [{0x8, 0x6, r7}, {0x8, 0x1, r8}, {0x8, 0x6, r9}], {0x10, 0x3}, {0x20, 0x4}}, 0x64, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 4m31.763229255s ago: executing program 0 (id=990): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000001100000000190000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703836352c73686f72746e616d653d77696e39352c636f6465706167653d3836312c73686f72746e616d653d6d697865642c616c6c6f775f7574696d653d30303030303030303030303030303030303137373737372c73686f72746e616d653d6d697865642c757466383d312c636865636b3d7374726963742c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c0074c3d84072de322569bdaf85"], 0x29, 0x34c, &(0x7f0000001740)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x104) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000080)=0x3f) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x100000, 0x80000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x3, 0x0, 0x9, 0x82}}, 0x20) 4m28.861009614s ago: executing program 0 (id=996): capget(0x0, &(0x7f0000000140)={0x9, 0x9, 0x21, 0x7fffffff, 0x32f4, 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x2200c12, &(0x7f0000000840)=ANY=[@ANYBLOB='check=strict,session=0x000000000000004e,map=normal,norock,check=strict,unhide,gid=', @ANYRESDEC, @ANYRES64], 0x5, 0xa0b, &(0x7f0000000dc0)="$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") 4m26.612471033s ago: executing program 0 (id=999): syz_emit_ethernet(0x4a, &(0x7f0000000800)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00e800", 0x14, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)={0x64, 0x0, 0x405, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 4m22.130717204s ago: executing program 38 (id=999): syz_emit_ethernet(0x4a, &(0x7f0000000800)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00e800", 0x14, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)={0x64, 0x0, 0x405, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 4.523889757s ago: executing program 8 (id=1913): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x140f, 0x1, 0x3, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}]}, 0x1c}}, 0x4000880) 3.922617612s ago: executing program 3 (id=1916): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f0000000300)) 3.704781667s ago: executing program 8 (id=1917): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000580)='\xa3\x04\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000180)='\xfa.-\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='t`\x16{\xf9\x8eE5\xf7\xbbE\xc94I\xb4\xbap\xc7\x13\x0f\xa8\x8c.\xc8\xe5\xbc\xbeQ#\v$z\x7f:\xe5J\xad\xf1\xdc\x8dE\x90\xf8\x01\x1f\xdd\xa6!\xf0\x1a\x9b\'\x8a\x83Y\x8d\x01\xf8\xda$\x93\xbb|\x00', &(0x7f0000000a80)='U&~=\xd8G\x93\x14\xc9o\xaf\x8b\xd4-\xc5\x12\x8d\xc8\xf1\'\xcf\x92V\xceKg\x8b\xc3\x9e\xd6H\xad0`\xaf\x06\x00xOq\xb6H\x11', 0x0) close(r0) 3.638274952s ago: executing program 9 (id=1918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 3.634245301s ago: executing program 1 (id=1919): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8040, 0x3a) fanotify_init(0x200, 0x40800) creat(&(0x7f00000001c0)='./file0\x00', 0x100) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x2, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x9, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x797, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xe, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xfffffff7, 0x4, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x5, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x3, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x8, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x401, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x0, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x8, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x7, 0x3ff, 0x40, 0x1, 0x8, 0x10000, 0xe7, 0x1000, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0xc, 0x2, 0x81, 0x9, 0x2, 0x7, 0x100, 0x7, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0x4, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17cb, 0x0, 0xdaca, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x0, 0x56, 0x4, 0x2, 0x5, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x5b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.491970429s ago: executing program 2 (id=1920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x40004}, 0x24000010) 3.152258919s ago: executing program 3 (id=1921): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x200001b0}}, 0x40) 3.024524605s ago: executing program 9 (id=1922): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 2.984180836s ago: executing program 8 (id=1923): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000fed000/0x3000)=nil) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x8000000000000c, &(0x7f0000000080)='@', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$rtc(0x0, 0x1e, 0x400) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) readahead(0xffffffffffffffff, 0x0, 0xfffffffffffffff9) 2.818692157s ago: executing program 2 (id=1924): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0xee020000, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8}]}, 0x40}}, 0x0) 2.790244497s ago: executing program 1 (id=1925): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), r0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x20004004) 2.560659718s ago: executing program 3 (id=1926): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) rt_sigqueueinfo(0x0, 0x40, 0x0) 2.281553235s ago: executing program 9 (id=1927): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x1, @in6={0xa, 0x4e23, 0x200, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8df}}}, 0xa0) 2.18014558s ago: executing program 1 (id=1928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0) 1.98886807s ago: executing program 2 (id=1929): r0 = socket(0x23, 0x80805, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) 1.942463831s ago: executing program 3 (id=1930): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x5b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 999.421236ms ago: executing program 9 (id=1936): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff008}, {0x80000006}]}, 0x8) 952.816498ms ago: executing program 1 (id=1937): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x4000080) 903.038045ms ago: executing program 8 (id=1938): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), r0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x20004004) 660.955093ms ago: executing program 2 (id=1939): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) signalfd(0xffffffffffffffff, 0x0, 0x0) 484.080952ms ago: executing program 3 (id=1940): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mlockall(0x7) shutdown(r2, 0x2) close(r2) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201010200000010f3b1"], 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) 319.557969ms ago: executing program 9 (id=1941): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 277.329969ms ago: executing program 1 (id=1942): socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$inet(0x2, 0xa, 0x1) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) 72.343417ms ago: executing program 8 (id=1943): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003080800418e00000304fcff", 0x58}], 0x1) 0s ago: executing program 2 (id=1944): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x48574653, 0x2, @stepwise={0x8b3c, 0x6, 0x401, 0x8, 0xffff7f6f}}) kernel console output (not intermixed with test programs): 64][ T9892] EXT4-fs: Conflicting test_dummy_encryption options [ 645.946160][ T9907] FAT-fs (loop0): Directory bread(block 64) failed [ 645.953301][ T9907] FAT-fs (loop0): Directory bread(block 65) failed [ 645.960679][ T9907] FAT-fs (loop0): Directory bread(block 66) failed [ 645.967639][ T9907] FAT-fs (loop0): Directory bread(block 67) failed [ 645.974614][ T9907] FAT-fs (loop0): Directory bread(block 68) failed [ 645.981600][ T9907] FAT-fs (loop0): Directory bread(block 69) failed [ 645.988951][ T9907] FAT-fs (loop0): Directory bread(block 70) failed [ 645.996780][ T9907] FAT-fs (loop0): Directory bread(block 71) failed [ 646.003768][ T9907] FAT-fs (loop0): Directory bread(block 72) failed [ 646.011618][ T9907] FAT-fs (loop0): Directory bread(block 73) failed [ 646.147171][ T5871] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 646.392741][ T5871] usb 9-1: not running at top speed; connect to a high speed hub [ 646.482224][ T5871] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 646.493964][ T5871] usb 9-1: config 1 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 646.508048][ T5871] usb 9-1: config 1 interface 0 has no altsetting 0 [ 646.790270][ T5871] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=18.40 [ 646.800915][ T5871] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.809459][ T5871] usb 9-1: Product: syz [ 646.813966][ T5871] usb 9-1: Manufacturer: syz [ 646.819181][ T5871] usb 9-1: SerialNumber: syz [ 647.682775][ T8896] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 647.692459][ T8896] FAT-fs (loop0): Filesystem has been set read-only [ 647.890570][ T5871] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 647.965976][ T5871] usb 9-1: USB disconnect, device number 2 [ 647.996146][ T9406] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 648.621384][ T9406] usb 10-1: Using ep0 maxpacket: 16 [ 648.637551][ T9406] usb 10-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 648.648481][ T9406] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 648.703281][ T9406] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 648.713158][ T9406] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.721908][ T9406] usb 10-1: Product: syz [ 648.726738][ T9406] usb 10-1: Manufacturer: syz [ 648.731813][ T9406] usb 10-1: SerialNumber: syz [ 649.131548][ T9930] bridge3: entered allmulticast mode [ 649.319341][ T9406] usb 10-1: 0:2 : does not exist [ 649.440377][ T8301] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.462101][ T8896] Trying to write to read-only block-device loop0 [ 649.534174][ T9406] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 649.578062][ T9934] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 649.730805][ T8301] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.063076][ T9406] usb 10-1: USB disconnect, device number 2 [ 650.209477][ T8301] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.542496][ T8301] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.883854][ T7228] udevd[7228]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 651.022476][ T9945] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1003'. [ 651.218953][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 651.229839][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.244208][ T9945] dummy0: entered promiscuous mode [ 651.260639][ T9945] dummy0: left promiscuous mode [ 651.300016][ T9953] loop8: detected capacity change from 0 to 512 [ 651.340531][ T9953] EXT4-fs: Ignoring removed i_version option [ 651.406559][ T9953] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 651.594762][ T9953] EXT4-fs (loop8): 1 truncate cleaned up [ 651.603396][ T9953] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.128516][ T8301] bridge_slave_1: left allmulticast mode [ 652.134576][ T8301] bridge_slave_1: left promiscuous mode [ 652.141806][ T8301] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.296340][ T8301] bridge_slave_0: left allmulticast mode [ 652.302448][ T8301] bridge_slave_0: left promiscuous mode [ 652.309476][ T8301] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.452056][ T8797] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.538761][ T8301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.578396][ T8301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.613237][ T8301] bond0 (unregistering): Released all slaves [ 654.151896][ T8301] hsr_slave_0: left promiscuous mode [ 654.185597][ T8301] hsr_slave_1: left promiscuous mode [ 654.194145][ T8301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.203464][ T8301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.268790][ T8301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.277188][ T8301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.368158][ T8301] veth1_macvtap: left promiscuous mode [ 654.374094][ T8301] veth0_macvtap: left promiscuous mode [ 654.380480][ T8301] veth1_vlan: left promiscuous mode [ 654.386901][ T8301] veth0_vlan: left promiscuous mode [ 655.226865][ T5865] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 655.456491][ T5865] usb 9-1: Using ep0 maxpacket: 16 [ 655.520773][ T5865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.532678][ T5865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 655.543152][ T5865] usb 9-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 655.552796][ T5865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.728961][ T5865] usb 9-1: config 0 descriptor?? [ 656.355830][ T5865] hid (null): unknown global tag 0xe [ 656.438371][ T8301] team0 (unregistering): Port device team_slave_1 removed [ 656.465787][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 656.497105][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 656.515851][ T5865] macally 0003:060B:0001.0006: unknown main item tag 0x1 [ 656.523291][ T5865] macally 0003:060B:0001.0006: unknown global tag 0xe [ 656.530829][ T5865] macally 0003:060B:0001.0006: item 0 0 1 14 parsing failed [ 656.540428][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 656.553726][ T5865] macally 0003:060B:0001.0006: probe with driver macally failed with error -22 [ 656.633117][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 656.638449][ T8301] team0 (unregistering): Port device team_slave_0 removed [ 656.698466][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 656.714829][ T5865] usb 9-1: USB disconnect, device number 3 [ 656.991165][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 657.012149][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 657.023495][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 657.039363][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 657.052214][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 658.371297][T10000] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 659.146638][ T52] Bluetooth: hci3: command tx timeout [ 659.653797][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.661590][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 661.196341][ T52] Bluetooth: hci3: command tx timeout [ 661.256718][T10016] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1016'. [ 661.266776][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1016'. [ 661.716632][ T9987] chnl_net:caif_netlink_parms(): no params data found [ 661.832943][T10023] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 661.840851][T10023] IPv6: NLM_F_CREATE should be set when creating new route [ 661.919088][T10024] lo: entered allmulticast mode [ 661.936006][T10024] tunl0: entered allmulticast mode [ 661.949378][T10024] gre0: entered allmulticast mode [ 662.135016][T10024] gretap0: entered allmulticast mode [ 662.227466][T10024] erspan0: entered allmulticast mode [ 662.244156][T10024] ip_vti0: entered allmulticast mode [ 662.257556][T10024] ip6_vti0: entered allmulticast mode [ 662.273790][T10024] sit0: entered allmulticast mode [ 662.294680][T10024] ip6tnl0: entered allmulticast mode [ 662.310436][T10024] ip6gre0: entered allmulticast mode [ 662.381376][T10024] syz_tun: entered allmulticast mode [ 662.445338][T10024] ip6gretap0: entered allmulticast mode [ 662.460815][T10024] bridge0: entered allmulticast mode [ 662.467998][T10024] vcan0: entered allmulticast mode [ 662.477743][T10024] bond0: entered allmulticast mode [ 662.483160][T10024] bond_slave_0: entered allmulticast mode [ 662.490146][T10024] bond_slave_1: entered allmulticast mode [ 662.506913][T10024] team0: entered allmulticast mode [ 662.511707][T10027] loop9: detected capacity change from 0 to 1024 [ 662.512222][T10024] team_slave_0: entered allmulticast mode [ 662.524943][T10024] team_slave_1: entered allmulticast mode [ 662.541296][T10024] dummy0: entered allmulticast mode [ 662.665675][T10027] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 662.744545][T10027] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e12d, mo2=0002] [ 662.780656][T10027] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 662.803573][T10027] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 662.885625][T10024] nlmon0: entered allmulticast mode [ 662.897754][T10024] caif0: entered allmulticast mode [ 662.904365][T10024] batadv0: entered allmulticast mode [ 662.920087][T10024] vxcan0: entered allmulticast mode [ 662.929122][T10024] vxcan1: entered allmulticast mode [ 662.938226][T10024] veth0: entered allmulticast mode [ 662.954496][T10024] veth1: entered allmulticast mode [ 662.970463][T10024] veth0_to_bridge: entered allmulticast mode [ 662.994392][T10024] veth1_to_bridge: entered allmulticast mode [ 663.017279][T10024] veth0_to_bond: entered allmulticast mode [ 663.038928][T10024] veth1_to_bond: entered allmulticast mode [ 663.057640][T10024] veth0_to_team: entered allmulticast mode [ 663.083310][T10024] veth1_to_team: entered allmulticast mode [ 663.111928][T10024] veth0_to_batadv: entered allmulticast mode [ 663.129626][T10024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.137784][T10024] batadv_slave_0: entered allmulticast mode [ 663.152754][T10024] veth1_to_batadv: entered allmulticast mode [ 663.170587][T10024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.178758][T10024] batadv_slave_1: entered allmulticast mode [ 663.193437][T10024] xfrm0: entered allmulticast mode [ 663.209376][T10024] veth0_to_hsr: entered allmulticast mode [ 663.223973][T10024] hsr_slave_0: entered allmulticast mode [ 663.236051][T10024] veth1_to_hsr: entered allmulticast mode [ 663.250479][T10024] hsr_slave_1: entered allmulticast mode [ 663.267011][T10024] hsr0: entered allmulticast mode [ 663.280933][T10024] veth1_virt_wifi: entered allmulticast mode [ 663.296669][T10024] veth0_virt_wifi: entered allmulticast mode [ 663.305969][ T8816] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.337346][ T52] Bluetooth: hci3: command tx timeout [ 663.339160][T10024] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 663.352061][T10024] veth1_vlan: entered allmulticast mode [ 663.366260][T10024] veth0_vlan: entered allmulticast mode [ 663.401042][T10024] vlan0: entered allmulticast mode [ 663.407604][T10024] vlan1: entered allmulticast mode [ 663.722466][T10024] macvlan0: entered allmulticast mode [ 663.786429][T10024] macvlan1: entered allmulticast mode [ 663.803223][T10024] ipvlan0: entered allmulticast mode [ 663.809956][T10024] ipvlan1: entered allmulticast mode [ 663.817115][T10024] veth1_macvtap: entered allmulticast mode [ 663.832172][T10024] veth0_macvtap: entered allmulticast mode [ 663.849323][T10024] macsec0: entered allmulticast mode [ 664.025674][T10024] geneve0: entered allmulticast mode [ 664.096566][T10024] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.106219][T10024] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.118066][T10024] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.129021][T10024] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.227387][T10024] geneve1: entered allmulticast mode [ 664.251481][T10024] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 664.302065][T10024] netdevsim netdevsim8 netdevsim1: entered allmulticast mode [ 664.367685][T10024] netdevsim netdevsim8 netdevsim2: entered allmulticast mode [ 664.393449][T10024] netdevsim netdevsim8 netdevsim3: entered allmulticast mode [ 664.406968][T10024] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 664.415547][T10024] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 664.448495][T10024] bond2: left promiscuous mode [ 664.453574][T10024] geneve2: left promiscuous mode [ 664.459787][T10024] bond2: entered allmulticast mode [ 664.465463][T10024] geneve2: entered allmulticast mode [ 664.476494][T10024] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 664.486576][T10024] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 664.496235][T10024] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 664.505788][T10024] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 664.533462][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 664.533549][ T30] audit: type=1326 audit(1745195389.570:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 664.564110][ T30] audit: type=1326 audit(1745195389.570:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 664.586859][ T30] audit: type=1326 audit(1745195389.630:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 664.609493][ T30] audit: type=1326 audit(1745195389.630:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 664.632295][ T30] audit: type=1326 audit(1745195389.650:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 664.655931][ T30] audit: type=1326 audit(1745195389.650:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 664.678823][ T30] audit: type=1326 audit(1745195389.670:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 664.701463][ T30] audit: type=1326 audit(1745195389.680:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=397 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 664.726151][ T30] audit: type=1326 audit(1745195389.700:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 664.748826][ T30] audit: type=1326 audit(1745195389.700:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 665.366803][ T52] Bluetooth: hci3: command tx timeout [ 666.181114][T10067] netlink: 'syz.1.1028': attribute type 4 has an invalid length. [ 666.268361][T10068] netlink: 'syz.1.1028': attribute type 4 has an invalid length. [ 666.431534][ T9987] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.442421][ T9987] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.450731][ T9987] bridge_slave_0: entered allmulticast mode [ 666.461050][ T9987] bridge_slave_0: entered promiscuous mode [ 666.601686][ T9987] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.609903][ T9987] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.618263][ T9987] bridge_slave_1: entered allmulticast mode [ 666.628675][ T9987] bridge_slave_1: entered promiscuous mode [ 666.877348][T10071] netlink: 'syz.9.1029': attribute type 4 has an invalid length. [ 667.177580][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1030'. [ 667.227529][ T9987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.374380][ T9987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.966697][ T9987] team0: Port device team_slave_0 added [ 668.014780][ T9987] team0: Port device team_slave_1 added [ 668.590535][ T9987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.598114][ T9987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.625565][ T9987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.818537][ T9987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.826304][ T9987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.852846][ T9987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.478306][ T9987] hsr_slave_0: entered promiscuous mode [ 669.489721][ T9987] hsr_slave_1: entered promiscuous mode [ 669.499127][ T9987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 669.507180][ T9987] Cannot create hsr debugfs directory [ 670.277385][ T5871] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 670.505643][ T5871] usb 9-1: Using ep0 maxpacket: 32 [ 670.558136][ T5871] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 670.566993][ T5871] usb 9-1: config 0 has no interface number 0 [ 670.642524][ T5871] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 670.655613][ T5871] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.663936][ T5871] usb 9-1: Product: syz [ 670.669058][ T5871] usb 9-1: Manufacturer: syz [ 670.674080][ T5871] usb 9-1: SerialNumber: syz [ 670.788971][ T5871] usb 9-1: config 0 descriptor?? [ 670.839714][ T5871] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 671.096835][ T5871] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 671.143735][ T5871] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 671.479652][T10110] loop8: detected capacity change from 0 to 256 [ 671.631623][T10120] netlink: 'syz.3.1042': attribute type 39 has an invalid length. [ 671.663124][T10120] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.890590][T10110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.902141][T10110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.991355][T10120] bridge_slave_0 (unregistering): left promiscuous mode [ 671.999265][T10120] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.353491][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 672.360383][ T9638] usb 9-1: USB disconnect, device number 4 [ 672.441936][ T9638] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 672.590952][ T9638] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 672.612375][ T9638] quatech2 9-1:0.51: device disconnected [ 672.815739][T10125] netem: incorrect ge model size [ 672.821157][T10125] netem: change failed [ 674.583644][ T9987] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 674.717231][T10142] bridge2: entered allmulticast mode [ 674.745621][ T9987] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 674.893290][ T9987] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 675.057062][ T9987] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 676.102783][T10158] loop9: detected capacity change from 0 to 8 [ 676.257595][T10158] SQUASHFS error: Failed to read block 0x4de: -5 [ 676.265618][T10158] SQUASHFS error: Failed to read block 0x4de: -5 [ 676.273536][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 676.273611][ T30] audit: type=1800 audit(1745195401.320:313): pid=10158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1054" name="file1" dev="loop9" ino=5 res=0 errno=0 [ 676.379325][T10159] fuse: Bad value for 'fd' [ 676.993623][T10163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1056'. [ 677.191200][T10167] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 677.200568][T10167] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 677.209580][T10167] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 677.218509][T10167] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 677.237199][T10167] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 677.432168][ T9987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.566641][ T9987] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.654187][ T3681] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.662083][ T3681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.843790][ T3681] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.851761][ T3681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.984868][T10179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1060'. [ 680.273418][T10196] loop9: detected capacity change from 0 to 1024 [ 680.546852][T10201] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1066'. [ 680.664425][T10202] ptrace attach of "./syz-executor exec"[8816] was attempted by "./syz-executor exec"[10202] [ 680.876262][ T9987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.722693][ T9987] veth0_vlan: entered promiscuous mode [ 681.884130][ T9987] veth1_vlan: entered promiscuous mode [ 682.551333][ T9987] veth0_macvtap: entered promiscuous mode [ 682.749919][ T9987] veth1_macvtap: entered promiscuous mode [ 683.050038][ T9987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.061694][ T9987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.072445][ T9987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.083301][ T9987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.093525][ T9987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.104439][ T9987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.114668][ T9987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.126326][ T9987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.478665][ T9987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.590166][ T9987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.602135][ T9987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.612569][ T9987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.623667][ T9987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.634108][ T9987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.645216][ T9987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.655556][ T9987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.666421][ T9987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.682484][ T9987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.794963][ T9987] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.805660][ T9987] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.814761][ T9987] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.824249][ T9987] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.689582][T10217] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.821821][T10223] loop9: detected capacity change from 0 to 512 [ 684.893564][T10217] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.929296][T10223] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 685.115783][T10217] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.140435][T10223] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.154313][T10223] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.309746][T10217] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.532970][ T9638] hid-generic 0000:0004:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 685.952300][T10217] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.985362][T10217] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.017833][T10217] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.189119][T10217] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.457971][ T8816] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.062931][T10255] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1083'. [ 688.146070][T10258] netem: incorrect ge model size [ 688.151554][T10258] netem: change failed [ 688.216947][T10260] cgroup: No subsys list or none specified [ 688.413996][T10263] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.426213][T10263] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 688.471634][T10266] netlink: '+}[@': attribute type 10 has an invalid length. [ 688.479614][T10266] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 688.628448][T10263] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.638785][T10263] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 688.848919][T10263] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.859280][T10263] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 689.061237][T10272] loop9: detected capacity change from 0 to 16 [ 689.147580][T10263] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.160158][T10263] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 689.184230][T10272] erofs (device loop9): invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 689.497487][T10272] tipc: Started in network mode [ 689.502788][T10272] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 689.512523][T10272] tipc: Enabling of bearer rejected, failed to enable media [ 689.631887][T10263] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 689.640849][T10263] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 689.673083][T10263] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 689.684480][T10263] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 690.031197][T10263] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 690.040251][T10263] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 690.073103][T10263] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 690.081997][T10263] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 692.002332][T10305] bridge0: port 4(vxlan0) entered blocking state [ 692.009764][T10305] bridge0: port 4(vxlan0) entered disabled state [ 692.017556][T10305] vxlan0: entered allmulticast mode [ 692.027356][T10305] vxlan0: entered promiscuous mode [ 692.690460][ T8299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.699007][ T8299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.909698][ T8299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.918117][ T8299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.186001][ T30] audit: type=1326 audit(1745195418.230:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10317 comm="syz.1.1098" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x0 [ 693.253878][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'. [ 693.301154][T10321] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1099'. [ 694.102253][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'. [ 694.239759][T10332] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.396102][T10335] netlink: 'syz.9.1103': attribute type 1 has an invalid length. [ 694.572732][T10332] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.660603][T10338] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 694.722710][T10332] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.826676][T10332] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.002029][ T8280] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 695.004092][T10335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 695.127238][ T8301] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 695.316625][T10332] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.349052][T10332] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.382820][T10332] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.419197][T10332] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.673287][T10353] loop2: detected capacity change from 0 to 8 [ 695.756930][T10353] SQUASHFS error: zlib decompression failed, data probably corrupt [ 695.765467][T10353] SQUASHFS error: Failed to read block 0x9b: -5 [ 695.771978][T10353] SQUASHFS error: Unable to read metadata cache entry [99] [ 695.779889][T10353] SQUASHFS error: Unable to read inode 0x127 [ 701.157123][T10401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 701.936320][ T9407] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 702.154822][ T9407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 702.169569][ T9407] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 702.180684][ T9407] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 702.194268][ T9407] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 702.203893][ T9407] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.372422][ T9407] usb 3-1: config 0 descriptor?? [ 702.892324][ T9407] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 702.989585][ T9407] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 705.032216][ T9407] usb 3-1: USB disconnect, device number 4 [ 705.177853][T10445] netlink: 'syz.9.1133': attribute type 4 has an invalid length. [ 705.264087][T10445] netlink: 'syz.9.1133': attribute type 4 has an invalid length. [ 705.363021][T10444] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1132'. [ 705.426193][T10444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.486004][T10465] overlayfs: failed to clone upperpath [ 707.161981][T10472] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1141'. [ 707.414137][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1141'. [ 708.603725][T10491] loop9: detected capacity change from 0 to 736 [ 708.731332][T10493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.379737][T10499] netlink: 'syz.1.1149': attribute type 4 has an invalid length. [ 710.396492][ T30] audit: type=1326 audit(1745195435.430:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.1.1153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 710.419886][ T30] audit: type=1326 audit(1745195435.430:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.1.1153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 710.611549][ T30] audit: type=1326 audit(1745195435.550:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.1.1153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 710.634519][ T30] audit: type=1326 audit(1745195435.550:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.1.1153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 710.657379][ T30] audit: type=1326 audit(1745195435.550:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.1.1153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 710.682060][ T30] audit: type=1326 audit(1745195435.580:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.1.1153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=171 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 710.705258][ T30] audit: type=1326 audit(1745195435.580:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.1.1153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 710.728126][ T30] audit: type=1326 audit(1745195435.580:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.1.1153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 710.751192][ T30] audit: type=1326 audit(1745195435.580:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.1.1153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 710.773803][ T30] audit: type=1326 audit(1745195435.580:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.1.1153" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 711.197044][T10522] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 711.204803][T10522] IPv6: NLM_F_CREATE should be set when creating new route [ 711.265630][T10523] lo: entered allmulticast mode [ 711.282724][T10523] tunl0: entered allmulticast mode [ 711.298019][T10523] gre0: entered allmulticast mode [ 711.614396][T10523] gretap0: entered allmulticast mode [ 711.737909][T10523] erspan0: entered allmulticast mode [ 711.758134][T10523] ip_vti0: entered allmulticast mode [ 711.772924][T10523] ip6_vti0: entered allmulticast mode [ 711.792061][T10523] sit0: entered allmulticast mode [ 711.817978][T10523] ip6tnl0: entered allmulticast mode [ 711.837396][T10523] ip6gre0: entered allmulticast mode [ 712.356295][T10523] syz_tun: entered allmulticast mode [ 712.446894][T10523] ip6gretap0: entered allmulticast mode [ 712.469313][T10523] vcan0: entered allmulticast mode [ 712.480478][T10523] bond0: entered allmulticast mode [ 712.486441][T10523] bond_slave_0: entered allmulticast mode [ 712.567664][T10523] team0: entered allmulticast mode [ 712.573105][T10523] team_slave_0: entered allmulticast mode [ 712.579590][T10523] team_slave_1: entered allmulticast mode [ 712.599954][T10523] dummy0: entered allmulticast mode [ 712.689655][T10523] nlmon0: entered allmulticast mode [ 712.703893][T10523] caif0: entered allmulticast mode [ 712.711574][T10523] batadv0: entered allmulticast mode [ 712.733764][T10523] vxcan0: entered allmulticast mode [ 712.743613][T10523] vxcan1: entered allmulticast mode [ 712.753728][T10523] veth0: entered allmulticast mode [ 712.771784][T10523] veth1: entered allmulticast mode [ 712.790007][T10523] veth0_to_bridge: entered allmulticast mode [ 712.809754][T10523] bridge_slave_0: entered allmulticast mode [ 712.828038][T10523] veth0_to_bond: entered allmulticast mode [ 712.850977][T10523] veth1_to_bond: entered allmulticast mode [ 712.873925][T10523] veth0_to_team: entered allmulticast mode [ 712.902369][T10523] veth1_to_team: entered allmulticast mode [ 712.934561][T10523] veth0_to_batadv: entered allmulticast mode [ 712.957786][T10523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.965836][T10523] batadv_slave_0: entered allmulticast mode [ 712.984209][T10523] veth1_to_batadv: entered allmulticast mode [ 713.002719][T10523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.010975][T10523] batadv_slave_1: entered allmulticast mode [ 713.032056][T10523] xfrm0: entered allmulticast mode [ 713.049263][T10523] veth0_to_hsr: entered allmulticast mode [ 713.068280][T10523] hsr_slave_0: entered allmulticast mode [ 713.082666][T10523] veth1_to_hsr: entered allmulticast mode [ 713.110891][T10523] hsr_slave_1: entered allmulticast mode [ 713.131579][T10523] hsr0: entered allmulticast mode [ 713.148413][T10523] veth1_virt_wifi: entered allmulticast mode [ 713.166441][T10523] veth0_virt_wifi: entered allmulticast mode [ 713.186873][T10523] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 713.196249][T10523] veth1_vlan: entered allmulticast mode [ 713.215213][T10523] veth0_vlan: entered allmulticast mode [ 713.272596][T10523] vlan0: entered allmulticast mode [ 713.279278][T10523] vlan1: entered allmulticast mode [ 713.313837][T10523] macvlan0: entered allmulticast mode [ 713.391307][T10523] macvlan1: entered allmulticast mode [ 713.409388][T10523] ipvlan0: entered allmulticast mode [ 713.416721][T10523] ipvlan1: entered allmulticast mode [ 713.423767][T10523] veth1_macvtap: entered allmulticast mode [ 713.444381][T10523] veth0_macvtap: entered allmulticast mode [ 713.475923][T10523] macvtap0: entered allmulticast mode [ 713.492688][T10523] macsec0: entered allmulticast mode [ 713.524791][T10523] geneve0: entered allmulticast mode [ 713.548480][T10523] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.560289][T10523] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.569965][T10523] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.579371][T10523] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.619637][T10523] geneve1: entered allmulticast mode [ 713.662435][T10523] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 713.684629][T10523] netdevsim netdevsim9 netdevsim1: entered allmulticast mode [ 713.703410][T10523] netdevsim netdevsim9 netdevsim2: entered allmulticast mode [ 713.747211][T10523] netdevsim netdevsim9 netdevsim3: entered allmulticast mode [ 713.763686][T10523] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 713.772410][T10523] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 713.780919][T10523] geneve2: entered allmulticast mode [ 713.791121][T10523] vlan2: left promiscuous mode [ 713.796738][T10523] veth1_to_team: left promiscuous mode [ 713.803515][T10523] vlan2: entered allmulticast mode [ 713.813379][T10523] bridge0: entered allmulticast mode [ 713.821363][T10523] bridge1: entered allmulticast mode [ 713.836355][T10523] sit1: entered allmulticast mode [ 713.926472][T10523] bond1: entered allmulticast mode [ 713.931914][T10523] ip6gretap1: entered allmulticast mode [ 714.499731][T10523] sit2: entered allmulticast mode [ 714.534212][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1158'. [ 715.300978][T10532] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.311284][T10532] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.754368][T10532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.785271][T10532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.609681][T10532] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.620413][T10532] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.630044][T10532] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.639465][T10532] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.929114][T10597] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1162'. [ 717.643772][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 717.727028][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 718.601859][T10612] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 718.822628][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1167'. [ 719.320159][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 719.533211][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 719.575821][ T45] usb 3-1: config 0 has no interfaces? [ 719.622802][ T45] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 719.632544][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.641147][ T45] usb 3-1: Product: syz [ 719.645723][ T45] usb 3-1: Manufacturer: syz [ 719.650633][ T45] usb 3-1: SerialNumber: syz [ 719.768604][ T45] usb 3-1: config 0 descriptor?? [ 719.876098][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 719.876182][ T30] audit: type=1326 audit(1745195444.910:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10629 comm="syz.1.1171" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x0 [ 721.099154][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.106137][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 721.553882][ T30] audit: type=1326 audit(1745195446.600:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10651 comm="syz.8.1177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 721.576890][ T30] audit: type=1326 audit(1745195446.600:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10651 comm="syz.8.1177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=161 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 721.599926][ T30] audit: type=1326 audit(1745195446.600:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10651 comm="syz.8.1177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 721.622602][ T30] audit: type=1326 audit(1745195446.600:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10651 comm="syz.8.1177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=101 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 721.645652][ T30] audit: type=1326 audit(1745195446.600:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10651 comm="syz.8.1177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 721.668727][ T30] audit: type=1326 audit(1745195446.600:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10651 comm="syz.8.1177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 721.693586][ T30] audit: type=1326 audit(1745195446.600:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10651 comm="syz.8.1177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 721.716297][ T30] audit: type=1326 audit(1745195446.600:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10651 comm="syz.8.1177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 721.739366][ T30] audit: type=1326 audit(1745195446.630:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10651 comm="syz.8.1177" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 722.164453][ T45] usb 3-1: USB disconnect, device number 5 [ 727.353931][T10711] loop2: detected capacity change from 0 to 2048 [ 727.499940][T10716] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 727.597976][T10711] syz_tun: entered allmulticast mode [ 727.633083][T10710] syz_tun: left allmulticast mode [ 727.746883][T10714] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 728.520300][T10722] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 728.884887][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1194'. [ 731.186235][T10769] netlink: 'syz.2.1203': attribute type 5 has an invalid length. [ 731.332303][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 731.332380][ T30] audit: type=1326 audit(1745195456.350:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10767 comm="syz.2.1203" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x0 [ 732.152354][T10783] loop9: detected capacity change from 0 to 256 [ 732.592429][T10783] FAT-fs (loop9): Directory bread(block 64) failed [ 732.599813][T10783] FAT-fs (loop9): Directory bread(block 65) failed [ 732.606990][T10783] FAT-fs (loop9): Directory bread(block 66) failed [ 732.613843][T10783] FAT-fs (loop9): Directory bread(block 67) failed [ 732.620992][T10783] FAT-fs (loop9): Directory bread(block 68) failed [ 732.628098][T10783] FAT-fs (loop9): Directory bread(block 69) failed [ 732.635503][T10783] FAT-fs (loop9): Directory bread(block 70) failed [ 732.642344][T10783] FAT-fs (loop9): Directory bread(block 71) failed [ 732.649427][T10783] FAT-fs (loop9): Directory bread(block 72) failed [ 732.656443][T10783] FAT-fs (loop9): Directory bread(block 73) failed [ 732.695617][ T30] audit: type=1326 audit(1745195457.740:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10785 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 732.720820][ T30] audit: type=1326 audit(1745195457.740:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10785 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 732.960103][ T30] audit: type=1326 audit(1745195457.840:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10785 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 732.983256][ T30] audit: type=1326 audit(1745195457.840:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10785 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 733.006192][ T30] audit: type=1326 audit(1745195457.840:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10785 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 733.029015][ T30] audit: type=1326 audit(1745195457.870:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10785 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 733.051772][ T30] audit: type=1326 audit(1745195457.870:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10785 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 733.074878][ T30] audit: type=1326 audit(1745195457.880:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10785 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 733.097694][ T30] audit: type=1326 audit(1745195457.880:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10785 comm="syz.2.1208" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 735.391010][T10821] loop9: detected capacity change from 0 to 128 [ 736.391604][T10834] netlink: 'syz.8.1223': attribute type 1 has an invalid length. [ 736.565579][T10836] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 736.927197][T10834] veth3: entered promiscuous mode [ 736.948806][T10834] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 737.184126][T10844] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1224'. [ 737.192005][T10843] geneve2: entered promiscuous mode [ 737.199070][T10843] geneve2: entered allmulticast mode [ 737.423598][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1226'. [ 737.445982][T10846] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.741039][T10846] bridge_slave_1 (unregistering): left allmulticast mode [ 737.749909][T10846] bridge_slave_1 (unregistering): left promiscuous mode [ 737.757673][T10846] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.502729][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 738.502808][ T30] audit: type=1326 audit(1745195463.550:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.8.1228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 738.706818][T10565] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 738.719983][ T30] audit: type=1326 audit(1745195463.650:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.8.1228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704d558 code=0x7ffc0000 [ 738.742725][ T30] audit: type=1326 audit(1745195463.650:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.8.1228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704d558 code=0x7ffc0000 [ 738.765610][ T30] audit: type=1326 audit(1745195463.660:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.8.1228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704d558 code=0x7ffc0000 [ 738.788327][ T30] audit: type=1326 audit(1745195463.680:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.8.1228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704d558 code=0x7ffc0000 [ 738.810977][ T30] audit: type=1326 audit(1745195463.680:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.8.1228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 738.833792][ T30] audit: type=1326 audit(1745195463.680:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.8.1228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 738.856380][ T30] audit: type=1326 audit(1745195463.710:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.8.1228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704d558 code=0x7ffc0000 [ 738.879006][ T30] audit: type=1326 audit(1745195463.710:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.8.1228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 738.901564][ T30] audit: type=1326 audit(1745195463.740:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10852 comm="syz.8.1228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 739.138361][T10565] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.150572][T10565] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.160752][T10565] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 739.174135][T10565] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 739.183595][T10565] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.441044][T10565] usb 3-1: config 0 descriptor?? [ 739.913240][T10565] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd [ 739.921503][T10565] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 739.929675][T10565] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 740.087797][T10565] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 740.174503][T10565] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 740.257441][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1234'. [ 740.267207][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1234'. [ 740.347054][T10565] usb 3-1: USB disconnect, device number 6 [ 743.576172][T10891] netlink: 'syz.2.1238': attribute type 1 has an invalid length. [ 744.375654][T10891] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 746.887927][T10921] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1244'. [ 747.787228][T10899] veth3: entered promiscuous mode [ 747.983301][T10921] bridge_slave_1 (unregistering): left promiscuous mode [ 747.991586][T10921] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.056181][T10544] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 749.206659][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1248'. [ 749.230079][T10938] vlan3: entered promiscuous mode [ 749.235512][T10938] bond0: entered promiscuous mode [ 749.338388][T10544] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.349244][T10544] usb 3-1: config 0 interface 0 has no altsetting 0 [ 749.449052][T10544] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 749.459263][T10544] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.467734][T10544] usb 3-1: Product: syz [ 749.472058][T10544] usb 3-1: Manufacturer: syz [ 749.476996][T10544] usb 3-1: SerialNumber: syz [ 749.647450][T10544] usb 3-1: config 0 descriptor?? [ 749.701852][T10544] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 749.851719][T10544] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 749.989488][T10544] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 749.998837][T10544] usb 3-1: media controller created [ 750.119595][T10544] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 750.147182][T10931] loop2: detected capacity change from 0 to 1024 [ 750.203526][T10931] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 750.214164][T10931] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 750.255439][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 750.255523][ T30] audit: type=1326 audit(1745195475.230:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10944 comm="syz.9.1250" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x0 [ 750.342143][T10931] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: inode #32: comm syz.2.1246: iget: special inode unallocated [ 750.408591][T10931] EXT4-fs (loop2): Remounting filesystem read-only [ 750.415755][T10931] EXT4-fs (loop2): no journal found [ 750.421486][T10931] EXT4-fs (loop2): can't get journal size [ 750.526741][T10931] EXT4-fs (loop2): filesystem is read-only [ 750.536135][T10931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 750.896790][T10544] DVB: Unable to find symbol tda10046_attach() [ 750.903576][T10544] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 750.912748][T10544] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 751.705765][T10544] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 751.817535][T10544] usb 3-1: USB disconnect, device number 7 [ 752.353302][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1254'. [ 752.407248][T10965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.799047][ T9987] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.188608][T10978] netlink: 'syz.1.1256': attribute type 1 has an invalid length. [ 753.361170][T10980] bond2: (slave gretap1): making interface the new active one [ 753.372547][T10980] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 753.792516][T10986] fuse: Unknown parameter 'use' [ 753.825635][T10565] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 754.024306][T10565] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.038444][T10565] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 754.048311][T10565] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.111167][T10991] loop9: detected capacity change from 0 to 1024 [ 754.183507][T10565] usb 3-1: config 0 descriptor?? [ 754.250049][T10565] pwc: Askey VC010 type 2 USB webcam detected. [ 754.330652][T10991] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.669307][T10565] pwc: recv_control_msg error -32 req 02 val 2b00 [ 754.698763][T10565] pwc: recv_control_msg error -32 req 02 val 2700 [ 754.726007][T10565] pwc: recv_control_msg error -32 req 02 val 2c00 [ 754.787167][T10565] pwc: recv_control_msg error -32 req 04 val 1000 [ 754.981540][ T8816] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.999000][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1261'. [ 755.049669][T10565] pwc: recv_control_msg error -32 req 04 val 1400 [ 755.090511][T10565] pwc: recv_control_msg error -32 req 02 val 2000 [ 755.130141][T10565] pwc: recv_control_msg error -32 req 02 val 2100 [ 755.170741][T10565] pwc: recv_control_msg error -32 req 04 val 1500 [ 755.199535][T10565] pwc: recv_control_msg error -32 req 02 val 2500 [ 755.235467][T10565] pwc: recv_control_msg error -32 req 02 val 2400 [ 755.271410][T10565] pwc: recv_control_msg error -32 req 02 val 2600 [ 755.322561][T10565] pwc: recv_control_msg error -32 req 02 val 2900 [ 755.687124][T10565] pwc: recv_control_msg error -71 req 04 val 1100 [ 755.763370][T10565] pwc: recv_control_msg error -71 req 04 val 1200 [ 755.821807][T10565] pwc: Registered as video103. [ 755.831031][T10565] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 755.855743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 755.865707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #212!!! [ 756.092061][T10565] usb 3-1: USB disconnect, device number 8 [ 756.210780][T10968] udevd[10968]: setting owner of /dev/bus/usb/003/008 to uid=0, gid=0 failed: No such file or directory [ 759.013013][T11040] batman_adv: batadv0: Adding interface: dummy0 [ 759.019764][T11040] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.046058][T11040] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 759.072621][T11041] netlink: 'syz.9.1271': attribute type 1 has an invalid length. [ 759.292372][T11048] bond2: (slave gretap1): making interface the new active one [ 759.308135][T11048] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 760.388457][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1277'. [ 762.901167][T11091] loop2: detected capacity change from 0 to 128 [ 764.025372][T11107] netlink: 'syz.2.1290': attribute type 1 has an invalid length. [ 764.272778][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1288'. [ 764.462892][T11112] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 764.485976][T11116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 764.499860][ T3948] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 764.619063][ T3948] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 764.928010][T11117] veth3: entered promiscuous mode [ 764.949090][T11117] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 765.065154][T11120] ip6gretap0: entered promiscuous mode [ 765.071066][T11120] vlan4: entered promiscuous mode [ 765.528048][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1295'. [ 765.738179][T11129] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1295'. [ 769.645742][T11173] vlan2: entered promiscuous mode [ 769.651089][T11173] team0: entered promiscuous mode [ 769.657048][T11173] team_slave_0: entered promiscuous mode [ 769.664075][T11173] team_slave_1: entered promiscuous mode [ 770.206058][ T30] audit: type=1326 audit(1745195495.210:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 770.229512][ T30] audit: type=1326 audit(1745195495.220:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=327 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 770.254390][ T30] audit: type=1326 audit(1745195495.240:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 770.277165][ T30] audit: type=1326 audit(1745195495.240:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 770.300208][ T30] audit: type=1326 audit(1745195495.250:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 770.323043][ T30] audit: type=1326 audit(1745195495.260:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 770.346723][ T30] audit: type=1326 audit(1745195495.260:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 770.369366][ T30] audit: type=1326 audit(1745195495.270:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=339 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 770.392064][ T30] audit: type=1326 audit(1745195495.270:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 770.414922][ T30] audit: type=1326 audit(1745195495.270:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11177 comm="syz.2.1312" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 773.504368][T11219] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1325'. [ 773.681211][T11219] macvtap0: entered promiscuous mode [ 773.687017][T11219] bond0: entered promiscuous mode [ 773.692348][T11219] bond_slave_0: entered promiscuous mode [ 773.699724][T11219] bond_slave_1: entered promiscuous mode [ 773.707903][T11219] macvtap0: entered allmulticast mode [ 773.717911][T11219] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 773.791809][T11220] bond0: left promiscuous mode [ 773.797279][T11220] bond_slave_0: left promiscuous mode [ 773.804075][T11220] bond_slave_1: left promiscuous mode [ 775.858263][T11239] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 777.278991][T11247] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1333'. [ 779.438395][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 780.031828][T11279] loop2: detected capacity change from 0 to 128 [ 780.088103][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'. [ 780.233781][T11279] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 780.384123][T11279] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 780.759601][T11289] batman_adv: batadv0: Adding interface: dummy0 [ 780.766499][T11289] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.792466][T11289] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 781.049057][T11291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 781.260814][ T9987] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 782.516815][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.524335][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 784.090029][T11329] bond2: entered allmulticast mode [ 784.095625][T11329] gretap1: entered allmulticast mode [ 785.427960][T11344] netlink: 'syz.1.1363': attribute type 10 has an invalid length. [ 785.436287][T11344] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1363'. [ 785.750281][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1363'. [ 785.762662][T11344] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 785.772740][T11344] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 786.080213][T11355] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 788.065513][T11387] batadv_slave_0: entered promiscuous mode [ 788.117869][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1376'. [ 788.193729][T11387] batadv_slave_0 (unregistering): left promiscuous mode [ 788.201614][T11387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.867380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 788.899189][T11394] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 791.400231][T11433] batadv_slave_0: entered promiscuous mode [ 791.473593][T11433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1391'. [ 791.618722][T11433] batadv_slave_0 (unregistering): left promiscuous mode [ 791.797730][T11435] loop2: detected capacity change from 0 to 2048 [ 791.853650][T11435] EXT4-fs: Ignoring removed bh option [ 791.957872][T11441] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 792.054123][T11435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 793.124628][T11453] bond1: (slave geneve2): Releasing backup interface [ 793.193988][T11453] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 793.204200][T11453] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 793.213345][T11453] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 793.222380][T11453] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 793.393591][ T8301] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 793.477829][T11453] bond2: (slave gretap1): Releasing active interface [ 793.496737][ T8301] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 42 with error 28 [ 793.509734][ T8301] EXT4-fs (loop2): This should not happen!! Data will be lost [ 793.509734][ T8301] [ 793.520090][ T8301] EXT4-fs (loop2): Total free blocks count 0 [ 793.527275][ T8301] EXT4-fs (loop2): Free/Dirty block details [ 793.533446][ T8301] EXT4-fs (loop2): free_blocks=2415919104 [ 793.539708][ T8301] EXT4-fs (loop2): dirty_blocks=48 [ 793.545273][ T8301] EXT4-fs (loop2): Block reservation details [ 793.551517][ T8301] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 793.742409][ T9987] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.789511][T11474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 796.202964][T11498] netlink: 'syz.9.1405': attribute type 1 has an invalid length. [ 796.562605][T11501] batadv_slave_0: entered promiscuous mode [ 796.618182][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1406'. [ 796.677996][T11501] batadv_slave_0 (unregistering): left promiscuous mode [ 796.685736][T11501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.173911][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1416'. [ 799.183630][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1416'. [ 799.223540][T11537] netlink: 'syz.8.1417': attribute type 1 has an invalid length. [ 799.948372][T11546] batadv_slave_0: entered promiscuous mode [ 799.977281][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1420'. [ 800.011184][T11546] batadv_slave_0 (unregistering): left promiscuous mode [ 800.018921][T11546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.488397][T11553] loop2: detected capacity change from 0 to 128 [ 800.671396][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 800.671475][ T30] audit: type=1326 audit(1745195525.720:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.1.1423" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 800.855845][ T30] audit: type=1326 audit(1745195525.760:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.1.1423" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 800.879404][ T30] audit: type=1326 audit(1745195525.760:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.1.1423" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 800.902251][ T30] audit: type=1326 audit(1745195525.770:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.1.1423" exe="/root/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 800.925249][ T30] audit: type=1326 audit(1745195525.770:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.1.1423" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 800.948099][ T30] audit: type=1326 audit(1745195525.790:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.1.1423" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 800.974055][ T30] audit: type=1326 audit(1745195525.790:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.1.1423" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 800.997704][ T30] audit: type=1326 audit(1745195525.790:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.1.1423" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 801.020337][ T30] audit: type=1326 audit(1745195525.790:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.1.1423" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 801.043470][ T30] audit: type=1326 audit(1745195525.790:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz.1.1423" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 801.485849][T11559] tipc: Started in network mode [ 801.491113][T11559] tipc: Node identity 7f000001, cluster identity 4711 [ 801.500732][T11559] tipc: Enabled bearer , priority 10 [ 802.615467][T10565] tipc: Node number set to 2130706433 [ 803.997531][T11602] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1435'. [ 806.036892][T11626] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1442'. [ 806.479760][ T9638] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 806.685511][ T9638] usb 3-1: Using ep0 maxpacket: 16 [ 807.235975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 807.277170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 807.297002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 807.836655][T11646] lo: entered allmulticast mode [ 807.853972][T11646] tunl0: entered allmulticast mode [ 807.871573][T11646] gre0: entered allmulticast mode [ 808.166348][T11646] gretap0: entered allmulticast mode [ 808.277139][T11646] erspan0: entered allmulticast mode [ 808.298460][T11646] ip_vti0: entered allmulticast mode [ 808.312725][T11646] ip6_vti0: entered allmulticast mode [ 808.330191][T11646] sit0: entered allmulticast mode [ 808.352480][T11646] ip6tnl0: entered allmulticast mode [ 808.368218][T11646] ip6gre0: entered allmulticast mode [ 808.977405][ T9638] usb 3-1: unable to get BOS descriptor or descriptor too short [ 808.985760][ T9638] usb 3-1: no configurations [ 808.990744][ T9638] usb 3-1: can't read configurations, error -22 [ 809.099073][T11646] ip6gretap0: entered allmulticast mode [ 809.206890][T11646] bridge0: entered allmulticast mode [ 809.273656][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 809.297470][T11646] bond0: entered allmulticast mode [ 809.302936][T11646] @ÿ: entered allmulticast mode [ 809.308670][T11646] bond_slave_1: entered allmulticast mode [ 809.314803][T11646] team0: entered allmulticast mode [ 809.320443][T11646] team_slave_0: entered allmulticast mode [ 809.326651][T11646] team_slave_1: entered allmulticast mode [ 809.349232][T11646] dummy0: entered allmulticast mode [ 809.628122][T11646] nlmon0: entered allmulticast mode [ 809.642896][T11646] caif0: entered allmulticast mode [ 809.651147][T11646] batadv0: entered allmulticast mode [ 809.668574][T11646] vxcan0: entered allmulticast mode [ 809.678333][T11646] vxcan1: entered allmulticast mode [ 809.687840][T11646] veth0: entered allmulticast mode [ 809.704044][T11646] veth1: entered allmulticast mode [ 809.722308][T11646] veth0_to_bond: entered allmulticast mode [ 809.743384][T11646] veth1_to_bond: entered allmulticast mode [ 809.766894][T11646] veth0_to_team: entered allmulticast mode [ 809.792862][T11646] veth1_to_team: entered allmulticast mode [ 810.108081][T11646] veth0_to_batadv: entered allmulticast mode [ 810.124443][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.132617][T11646] batadv_slave_0: entered allmulticast mode [ 810.147409][T11646] veth1_to_batadv: entered allmulticast mode [ 810.160847][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.169314][T11646] batadv_slave_1: entered allmulticast mode [ 810.184731][T11646] xfrm0: entered allmulticast mode [ 810.198037][T11646] veth0_to_hsr: entered allmulticast mode [ 810.211470][T11646] hsr_slave_0: entered allmulticast mode [ 810.222463][T11646] veth1_to_hsr: entered allmulticast mode [ 810.238776][T11646] hsr_slave_1: entered allmulticast mode [ 810.254261][T11646] hsr0: entered allmulticast mode [ 810.272947][T11646] veth1_virt_wifi: entered allmulticast mode [ 810.288899][T11646] veth0_virt_wifi: entered allmulticast mode [ 810.312111][T11646] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 810.321436][T11646] veth1_vlan: entered allmulticast mode [ 810.337453][T11646] veth0_vlan: entered allmulticast mode [ 810.377225][T11646] vlan0: entered allmulticast mode [ 810.383583][T11646] vlan1: entered allmulticast mode [ 810.401814][T11646] macvlan0: entered allmulticast mode [ 810.419782][T11646] macvlan1: entered allmulticast mode [ 810.437740][T11646] ipvlan0: entered allmulticast mode [ 810.444298][T11646] ipvlan1: entered allmulticast mode [ 810.451505][T11646] veth1_macvtap: entered allmulticast mode [ 810.467286][T11646] veth0_macvtap: entered allmulticast mode [ 810.490884][T11646] macvtap0: entered allmulticast mode [ 810.506437][T11646] macsec0: entered allmulticast mode [ 810.628321][T11668] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 810.639571][T11668] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 810.677567][T11646] geneve0: entered allmulticast mode [ 810.741618][T11646] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.752149][T11646] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.761210][T11646] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.770327][T11646] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.864098][T11646] geneve1: entered allmulticast mode [ 810.880840][T11646] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 810.889747][T11646] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 810.942502][T11646] bridge1: entered allmulticast mode [ 810.956920][T11646] sit1: left promiscuous mode [ 811.171269][T11646] bridge2: entered allmulticast mode [ 811.183816][T11646] gtp0: left promiscuous mode [ 811.189262][T11646] gtp0: entered allmulticast mode [ 811.200322][T11646] vxlan0: entered allmulticast mode [ 811.206735][T11646] bond1: entered allmulticast mode [ 811.212123][T11646] ip6erspan0: entered allmulticast mode [ 811.309849][T11646] ip6erspan0: left promiscuous mode [ 811.318357][T11646] ip6tnl1: entered allmulticast mode [ 811.333807][T11646] sit2: entered allmulticast mode [ 811.340924][T11646] sit3: entered allmulticast mode [ 811.351716][T11646] netdevsim netdevsim3 eth0: entered allmulticast mode [ 811.360304][T11646] netdevsim netdevsim3 eth1: entered allmulticast mode [ 811.368785][T11646] netdevsim netdevsim3 eth2: entered allmulticast mode [ 811.377130][T11646] netdevsim netdevsim3 eth3: entered allmulticast mode [ 811.385374][T11646] bridge4: entered allmulticast mode [ 811.391811][T11646] xfrm1: entered allmulticast mode [ 811.761697][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 813.836561][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 815.071164][T11704] hsr0: entered promiscuous mode [ 815.287265][T11704] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1459'. [ 815.360402][T11704] hsr_slave_0: left promiscuous mode [ 815.407019][T11704] hsr_slave_1: left promiscuous mode [ 815.455542][T11704] hsr0 (unregistering): left promiscuous mode [ 815.548078][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 815.548155][ T30] audit: type=1326 audit(1745195540.590:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.3.1462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 815.578014][ T30] audit: type=1326 audit(1745195540.600:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.3.1462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=161 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 815.601356][ T30] audit: type=1326 audit(1745195540.600:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.3.1462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 815.847179][ T30] audit: type=1326 audit(1745195540.700:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.3.1462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 815.870888][ T30] audit: type=1326 audit(1745195540.700:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.3.1462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 815.893640][ T30] audit: type=1326 audit(1745195540.700:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.3.1462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 815.916548][ T30] audit: type=1326 audit(1745195540.720:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.3.1462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 815.938939][ T30] audit: type=1326 audit(1745195540.720:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.3.1462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 815.961538][ T30] audit: type=1326 audit(1745195540.760:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.3.1462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 815.983892][ T30] audit: type=1326 audit(1745195540.760:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.3.1462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 817.192446][T11732] loop2: detected capacity change from 0 to 128 [ 817.223836][T11729] vlan4: entered allmulticast mode [ 817.229496][T11729] bond0: entered allmulticast mode [ 817.242593][T11729] bridge0: port 1(vlan4) entered blocking state [ 817.251561][T11729] bridge0: port 1(vlan4) entered disabled state [ 817.523805][T11729] bridge0: port 1(vlan4) entered blocking state [ 817.531038][T11729] bridge0: port 1(vlan4) entered forwarding state [ 818.446854][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1469'. [ 819.228150][T11755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.243356][T11755] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.257173][T11755] batman_adv: batadv0: Interface activated: dummy0 [ 819.264592][T11755] batadv0: mtu less than device minimum [ 819.274923][T11755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 819.288347][T11755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 819.301558][T11755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 819.315260][T11755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 819.328397][T11755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 819.341621][T11755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 819.355082][T11755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 819.368262][T11755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 819.381525][T11755] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 819.419939][T11755] batman_adv: batadv0: Interface deactivated: dummy0 [ 819.427066][T11755] batman_adv: batadv0: Removing interface: dummy0 [ 819.516430][T11757] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 819.795090][T11762] batman_adv: batadv0: Removing interface: dummy0 [ 819.812282][T11762] bond0: (slave bond_slave_0): Releasing backup interface [ 819.842755][T11762] bond0: (slave bond_slave_1): Releasing backup interface [ 819.882199][T11762] team0: Port device team_slave_0 removed [ 819.942210][T11762] team0: Port device team_slave_1 removed [ 819.951616][T11762] batman_adv: batadv0: Removing interface: geneve2 [ 819.969981][T11762] bond1: (slave ip6gretap1): Removing an active aggregator [ 819.981088][T11762] bond1: (slave ip6gretap1): Releasing backup interface [ 820.115081][T11762] bond2: (slave gretap1): Releasing active interface [ 820.588289][T11771] netlink: 'syz.2.1477': attribute type 1 has an invalid length. [ 821.582050][T11790] bond0: (slave team0): Releasing backup interface [ 821.742955][T11790] bond0: (slave 2@ÿ): Releasing backup interface [ 821.784882][T11790] bond0: (slave bond_slave_1): Releasing backup interface [ 822.185656][T11790] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 822.197062][T11790] team0: Port device team_slave_0 removed [ 822.636401][T11790] team0: Port device team_slave_1 removed [ 822.645348][T11790] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.752813][T11790] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.888677][T11790] bond1: (slave ip6erspan0): Releasing active interface [ 823.346505][ T9638] IPVS: starting estimator thread 0... [ 823.472799][T11807] IPVS: using max 240 ests per chain, 12000 per kthread [ 823.936966][T11801] veth3: left promiscuous mode [ 824.079866][T11814] lo: left allmulticast mode [ 824.092509][T11814] tunl0: left allmulticast mode [ 824.105149][T11814] gre0: left allmulticast mode [ 824.122111][T11814] gretap0: left allmulticast mode [ 824.135152][T11814] erspan0: left allmulticast mode [ 824.148386][T11814] ip_vti0: left allmulticast mode [ 824.160685][T11814] ip6_vti0: left allmulticast mode [ 824.174061][T11814] sit0: left allmulticast mode [ 824.200053][T11814] ip6tnl0: left allmulticast mode [ 824.213294][T11814] ip6gre0: left allmulticast mode [ 824.242237][T11814] ip6gretap0: left allmulticast mode [ 824.257464][T11814] bridge0: left allmulticast mode [ 824.268497][T11814] bond0: left allmulticast mode [ 824.277800][T11814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.289806][T11814] team0: left allmulticast mode [ 824.300091][T11814] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.313034][T11814] dummy0: left allmulticast mode [ 824.326952][T11814] nlmon0: left allmulticast mode [ 824.351456][T11814] caif0: left allmulticast mode [ 824.711091][T11814] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 824.957623][T11827] netlink: 'syz.1.1493': attribute type 1 has an invalid length. [ 825.082346][T11831] bridge_slave_0: left allmulticast mode [ 825.089694][T11831] bridge_slave_0: left promiscuous mode [ 825.097091][T11831] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.153333][T11831] bridge_slave_1: left allmulticast mode [ 825.159495][T11831] bridge_slave_1: left promiscuous mode [ 825.167074][T11831] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.300588][T11831] bond0: (slave bond_slave_0): Releasing backup interface [ 825.396009][T11831] bond0: (slave bond_slave_1): Releasing backup interface [ 825.478482][T11831] team0: Failed to send options change via netlink (err -105) [ 825.487628][T11831] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 825.499368][T11831] team0: Port device team_slave_0 removed [ 825.614195][T11831] team0: Failed to send options change via netlink (err -105) [ 825.625060][T11831] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 825.636976][T11831] team0: Port device team_slave_1 removed [ 825.645353][T11831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.778936][T11831] bond1: (slave ip6gretap1): Removing an active aggregator [ 825.791469][T11831] bond1: (slave ip6gretap1): Releasing backup interface [ 825.798776][T11831] bond1: (slave ip6gretap1): the permanent HWaddr of slave - d2:c0:50:06:6a:57 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 825.868533][T11831] bond1: (slave veth3): Releasing backup interface [ 826.255543][T11845] netlink: 9 bytes leftover after parsing attributes in process `syz.9.1497'. [ 826.266818][T11845] gretap0: entered promiscuous mode [ 826.272599][T11845] gretap0: left allmulticast mode [ 826.318537][T11846] netlink: 5 bytes leftover after parsing attributes in process `syz.9.1497'. [ 826.328432][T11846] 0ªX¹¦D: renamed from gretap0 [ 826.396285][T11846] 0ªX¹¦D: left promiscuous mode [ 826.401799][T11846] 0ªX¹¦D: entered allmulticast mode [ 826.421159][T11846] net_ratelimit: 12 callbacks suppressed [ 826.421235][T11846] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 826.513218][T11845] 9pnet_fd: Insufficient options for proto=fd [ 827.150913][T11851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 827.562648][ T52] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 828.370786][T11872] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.396657][T11872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 828.634840][T11878] netlink: 'syz.8.1508': attribute type 1 has an invalid length. [ 828.898987][T11872] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 828.954338][T11872] bridge0: port 1(vlan4) entered disabled state [ 829.376324][ T30] audit: type=1326 audit(1745195553.599:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.2.1510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 829.402369][ T30] audit: type=1326 audit(1745195553.599:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.2.1510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 829.597455][ T30] audit: type=1326 audit(1745195553.701:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.2.1510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 829.620822][ T30] audit: type=1326 audit(1745195553.701:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.2.1510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 829.643680][ T30] audit: type=1326 audit(1745195553.701:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.2.1510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 829.667196][ T30] audit: type=1326 audit(1745195553.710:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.2.1510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 829.689704][ T30] audit: type=1326 audit(1745195553.756:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.2.1510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 829.712440][ T30] audit: type=1326 audit(1745195553.756:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.2.1510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 829.735283][ T30] audit: type=1326 audit(1745195553.802:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.2.1510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=275 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 829.758408][ T30] audit: type=1326 audit(1745195553.802:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.2.1510" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 829.811117][T11885] loop2: detected capacity change from 0 to 512 [ 829.865096][T11885] EXT4-fs: Ignoring removed i_version option [ 829.929491][T11889] bridge_slave_0: left promiscuous mode [ 829.937633][T11889] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.970452][T11889] bond0: (slave bond_slave_0): Releasing backup interface [ 829.988538][T11889] bond0: (slave bond_slave_1): Releasing backup interface [ 830.012225][T11889] team_slave_0: left promiscuous mode [ 830.028666][T11889] team0: Port device team_slave_0 removed [ 830.035829][T11885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 830.037998][T11889] team_slave_1: left promiscuous mode [ 830.064490][T11889] team0: Port device team_slave_1 removed [ 830.074787][T11889] bond1: left promiscuous mode [ 830.081100][T11889] bridge0: port 3(bond1) entered disabled state [ 830.108455][T11889] bond2: (slave geneve2): Releasing active interface [ 830.235891][T11889] vxlan0: left allmulticast mode [ 830.241154][T11889] vxlan0: left promiscuous mode [ 830.247678][T11889] bridge0: port 4(vxlan0) entered disabled state [ 830.405697][T11889] bond3: (slave ip6gretap1): Releasing backup interface [ 830.415065][T11889] bond3: (slave ip6gretap1): the permanent HWaddr of slave - 52:79:10:d3:60:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 830.421748][T11885] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1510'. [ 830.550981][T11896] IPVS: length: 193 != 12792 [ 830.560120][T11889] bond3: (slave veth3): Releasing backup interface [ 830.998650][ T9987] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.674009][T11914] 9pnet: Unknown protocol version 9p200 [ 831.821604][T11914] team0: Mode changed to "loadbalance" [ 831.943039][T11918] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1518'. [ 831.980239][ T52] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 831.989174][ T52] Bluetooth: hci3: Injecting HCI hardware error event [ 832.000392][T11918] macvtap1: entered promiscuous mode [ 832.003228][ T52] Bluetooth: hci3: hardware error 0x00 [ 832.006430][T11918] erspan0: entered promiscuous mode [ 832.018372][T11918] macvtap1: entered allmulticast mode [ 832.038246][T11914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1516'. [ 832.066984][T11922] erspan0: left promiscuous mode [ 832.843802][T11933] lo: left allmulticast mode [ 832.859924][T11933] tunl0: left allmulticast mode [ 832.872153][T11933] gre0: left allmulticast mode [ 832.898625][T11933] gretap0: left allmulticast mode [ 832.912734][T11933] erspan0: left allmulticast mode [ 832.926306][T11933] ip_vti0: left allmulticast mode [ 832.940069][T11933] ip6_vti0: left allmulticast mode [ 832.953458][T11933] sit0: left allmulticast mode [ 832.981197][T11933] ip6tnl0: left allmulticast mode [ 832.994845][T11933] ip6gre0: left allmulticast mode [ 833.030969][T11933] ip6gretap0: left allmulticast mode [ 833.049006][T11933] bridge0: left allmulticast mode [ 833.060375][T11933] vcan0: left allmulticast mode [ 833.070245][T11933] bond0: left allmulticast mode [ 833.078872][T11933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.092621][T11933] team0: left allmulticast mode [ 833.101342][T11933] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.114337][T11933] dummy0: left allmulticast mode [ 833.128974][T11933] nlmon0: left allmulticast mode [ 833.222517][T11937] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1523'. [ 833.254273][T11933] caif0: left allmulticast mode [ 833.260073][T11933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 833.278532][T11936] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 833.353337][T11938] lo speed is unknown, defaulting to 1000 [ 833.360025][T11938] lo speed is unknown, defaulting to 1000 [ 833.369033][T11938] lo speed is unknown, defaulting to 1000 [ 833.390477][T11938] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 833.437742][T11938] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 833.793116][T11938] lo speed is unknown, defaulting to 1000 [ 833.802620][T11938] lo speed is unknown, defaulting to 1000 [ 833.812048][T11938] lo speed is unknown, defaulting to 1000 [ 833.821612][T11938] lo speed is unknown, defaulting to 1000 [ 833.830726][T11938] lo speed is unknown, defaulting to 1000 [ 833.919629][T10544] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 834.034359][T11938] lo speed is unknown, defaulting to 1000 [ 834.044459][T11938] lo speed is unknown, defaulting to 1000 [ 834.192730][T10544] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 834.204671][T10544] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.216069][T10544] usb 3-1: config 0 interface 0 has no altsetting 0 [ 834.224193][T10544] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 834.234245][ T52] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 834.234258][T10544] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.399063][T10544] usb 3-1: config 0 descriptor?? [ 834.906413][T10544] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x0 [ 834.914279][T10544] hid-steam 0003:28DE:1102.000A: unknown main item tag 0x0 [ 835.012921][T10544] hid-steam 0003:28DE:1102.000A: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 835.108649][T10544] hid-steam 0003:28DE:1102.000A: Steam Controller 'XXXXXXXXXX' connected [ 835.123499][T10544] input: Steam Controller as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1102.000A/input/input11 [ 835.242226][T10544] hid-steam 0003:28DE:1102.000B: unknown main item tag 0x0 [ 835.250063][T10544] hid-steam 0003:28DE:1102.000B: unknown main item tag 0x0 [ 835.327954][T10544] hid-steam 0003:28DE:1102.000B: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.2-1/input0 [ 836.061787][T10544] usb 3-1: USB disconnect, device number 11 [ 836.414949][T10544] hid-steam 0003:28DE:1102.000A: Steam Controller 'XXXXXXXXXX' disconnected [ 837.887288][T12001] lo: left allmulticast mode [ 837.902242][T12001] tunl0: left allmulticast mode [ 837.914929][T12001] gre0: left allmulticast mode [ 837.933958][T12001] 0ªX¹¦D: left allmulticast mode [ 837.941518][T12001] erspan0: left allmulticast mode [ 837.956019][T12001] ip_vti0: left allmulticast mode [ 837.968519][T12001] ip6_vti0: left allmulticast mode [ 837.982035][T12001] sit0: left allmulticast mode [ 838.008157][T12001] ip6tnl0: left allmulticast mode [ 838.021442][T12001] ip6gre0: left allmulticast mode [ 838.054624][T12001] syz_tun: left allmulticast mode [ 838.070423][T12001] ip6gretap0: left allmulticast mode [ 838.085025][T12001] vcan0: left allmulticast mode [ 838.095017][T12001] bond0: left allmulticast mode [ 838.103919][T12001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.120050][T12001] team0: left allmulticast mode [ 838.127546][T12001] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.140502][T12001] dummy0: left allmulticast mode [ 838.150980][T12001] nlmon0: left allmulticast mode [ 838.207197][T12001] caif0: left allmulticast mode [ 838.213323][T12001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 838.527136][T12001] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 838.948565][T10565] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 839.174417][T10565] usb 3-1: config 0 has an invalid interface number: 234 but max is 0 [ 839.186668][T10565] usb 3-1: config 0 has no interface number 0 [ 839.193068][T10565] usb 3-1: config 0 interface 234 has no altsetting 0 [ 839.305114][T10565] usb 3-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=b0.31 [ 839.315223][T10565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.323867][T10565] usb 3-1: Product: syz [ 839.328650][T10565] usb 3-1: Manufacturer: syz [ 839.333571][T10565] usb 3-1: SerialNumber: syz [ 839.362962][T10565] usb 3-1: config 0 descriptor?? [ 839.685747][T10565] pegasus 3-1:0.234: probe with driver pegasus failed with error -71 [ 839.748623][T10565] usb 3-1: USB disconnect, device number 12 [ 841.104812][T12041] loop2: detected capacity change from 0 to 128 [ 842.839980][T12067] kernel profiling enabled (shift: 9) [ 845.304885][T12097] loop2: detected capacity change from 0 to 4096 [ 845.371514][T12097] ntfs3(loop2): Failed to load $Volume (-22). [ 846.070114][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 846.077022][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 846.804413][T12121] loop2: detected capacity change from 0 to 4096 [ 846.947113][T12121] NILFS (loop2): invalid segment: Checksum error in segment payload [ 846.955472][T12121] NILFS (loop2): trying rollback from an earlier position [ 847.040031][T12121] NILFS (loop2): invalid segment: Checksum error in segment payload [ 847.048705][T12121] NILFS (loop2): error -22 while searching super root [ 848.066804][T12146] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1592'. [ 849.049290][T12158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1596'. [ 849.149254][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 849.149334][ T30] audit: type=1326 audit(1745198145.846:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.9.1597" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 849.253084][T12162] loop2: detected capacity change from 0 to 128 [ 849.365747][ T30] audit: type=1326 audit(1745198145.883:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.9.1597" exe="/root/syz-executor" sig=0 arch=40000003 syscall=161 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 849.389276][ T30] audit: type=1326 audit(1745198145.883:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.9.1597" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 849.412193][ T30] audit: type=1326 audit(1745198145.883:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12159 comm="syz.9.1597" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 850.464420][T12177] loop2: detected capacity change from 0 to 16 [ 850.547659][T12177] erofs (device loop2): rootino(nid 36) is not a directory(i_mode 66300) [ 852.949384][T12196] infiniband syz!: set down [ 852.954348][T12196] infiniband syz!: added team_slave_0 [ 853.109881][ T30] audit: type=1326 audit(1745198149.500:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.8.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 853.132775][ T30] audit: type=1326 audit(1745198149.500:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.8.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=161 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 853.156161][ T30] audit: type=1326 audit(1745198149.500:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.8.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 853.194045][T12196] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 853.221542][T12196] infiniband syz!: Couldn't open port 1 [ 853.450842][T12196] RDS/IB: syz!: added [ 853.454387][ T30] audit: type=1326 audit(1745198149.593:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.8.1611" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 853.455068][T12196] smc: adding ib device syz! with port count 1 [ 853.484740][T12196] smc: ib device syz! port 1 has pnetid [ 853.580645][T12211] loop2: detected capacity change from 0 to 128 [ 856.506440][T12240] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1621'. [ 857.383390][ T30] audit: type=1326 audit(1745198153.431:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12245 comm="syz.9.1625" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 857.406500][ T30] audit: type=1326 audit(1745198153.440:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12245 comm="syz.9.1625" exe="/root/syz-executor" sig=0 arch=40000003 syscall=161 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 857.429302][ T30] audit: type=1326 audit(1745198153.440:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12245 comm="syz.9.1625" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f21539 code=0x7ffc0000 [ 858.695194][T12253] loop2: detected capacity change from 0 to 4096 [ 858.736693][T12253] ntfs3(loop2): Primary boot: unsupported bytes per index 8192. [ 858.745804][T12253] ntfs3(loop2): try to read out of volume at offset 0x1ffe00 [ 860.503134][ T30] audit: type=1326 audit(1745198156.319:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.3.1641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 860.527057][ T30] audit: type=1326 audit(1745198156.319:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.3.1641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 860.549821][ T30] audit: type=1326 audit(1745198156.319:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.3.1641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=161 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 860.572651][ T30] audit: type=1326 audit(1745198156.319:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12287 comm="syz.3.1641" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 860.985737][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1643'. [ 861.198465][T12294] lo speed is unknown, defaulting to 1000 [ 861.204743][T12294] lo speed is unknown, defaulting to 1000 [ 861.212441][T12294] lo speed is unknown, defaulting to 1000 [ 861.272409][T12294] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 861.345389][T12299] loop2: detected capacity change from 0 to 128 [ 861.618651][T12294] lo speed is unknown, defaulting to 1000 [ 861.697108][T12294] lo speed is unknown, defaulting to 1000 [ 861.706727][T12294] lo speed is unknown, defaulting to 1000 [ 861.716121][T12294] lo speed is unknown, defaulting to 1000 [ 861.725509][T12294] lo speed is unknown, defaulting to 1000 [ 861.735114][T12294] lo speed is unknown, defaulting to 1000 [ 861.744623][T12294] lo speed is unknown, defaulting to 1000 [ 862.207715][T12308] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 862.769781][T10565] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 863.046416][T10565] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 863.057350][T10565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.065992][T10565] usb 3-1: Product: syz [ 863.070451][T10565] usb 3-1: Manufacturer: syz [ 863.075592][T10565] usb 3-1: SerialNumber: syz [ 863.123246][T12323] netlink: 'syz.9.1653': attribute type 1 has an invalid length. [ 863.225685][T10565] usb 3-1: config 0 descriptor?? [ 863.514304][T12325] veth3: entered promiscuous mode [ 863.535834][T12325] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 863.634586][T10544] usb 3-1: USB disconnect, device number 13 [ 863.797524][ T30] audit: type=1326 audit(1745198159.355:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.8.1655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 863.960482][ T30] audit: type=1326 audit(1745198159.401:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.8.1655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=161 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 863.983635][ T30] audit: type=1326 audit(1745198159.401:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.8.1655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 863.993479][T11973] udevd[11973]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 864.006363][ T30] audit: type=1326 audit(1745198159.401:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.8.1655" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 865.367231][T12353] loop2: detected capacity change from 0 to 256 [ 865.805266][T12353] FAT-fs (loop2): Directory bread(block 64) failed [ 865.817134][T12353] FAT-fs (loop2): Directory bread(block 65) failed [ 865.825881][T12353] FAT-fs (loop2): Directory bread(block 66) failed [ 865.832713][T12353] FAT-fs (loop2): Directory bread(block 67) failed [ 865.840014][T12353] FAT-fs (loop2): Directory bread(block 68) failed [ 865.846991][T12353] FAT-fs (loop2): Directory bread(block 69) failed [ 865.854165][T12353] FAT-fs (loop2): Directory bread(block 70) failed [ 865.861154][T12353] FAT-fs (loop2): Directory bread(block 71) failed [ 865.868181][T12353] FAT-fs (loop2): Directory bread(block 72) failed [ 865.875215][T12353] FAT-fs (loop2): Directory bread(block 73) failed [ 866.359093][ T30] audit: type=1326 audit(1745198161.717:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.1.1669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 866.392627][T12366] netlink: 'syz.3.1668': attribute type 1 has an invalid length. [ 866.511897][ T30] audit: type=1326 audit(1745198161.772:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.1.1669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=161 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 866.536203][ T30] audit: type=1326 audit(1745198161.772:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.1.1669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 866.559174][ T30] audit: type=1326 audit(1745198161.782:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.1.1669" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 866.640518][T12370] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 866.861713][T12366] veth3: entered promiscuous mode [ 866.882661][T12366] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 867.400174][T10565] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 867.618594][T10565] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 867.628399][T10565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.637232][T10565] usb 3-1: Product: syz [ 867.641777][T10565] usb 3-1: Manufacturer: syz [ 867.647038][T10565] usb 3-1: SerialNumber: syz [ 867.746339][T10565] usb 3-1: config 0 descriptor?? [ 868.028360][ T9638] usb 3-1: USB disconnect, device number 14 [ 868.421141][T11973] udevd[11973]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 869.342503][ T30] audit: type=1326 audit(1745198164.457:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12406 comm="syz.2.1683" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 869.366338][ T30] audit: type=1326 audit(1745198164.476:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12406 comm="syz.2.1683" exe="/root/syz-executor" sig=0 arch=40000003 syscall=161 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 869.392068][ T30] audit: type=1326 audit(1745198164.476:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12406 comm="syz.2.1683" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 869.856669][T12414] netlink: 'syz.1.1685': attribute type 1 has an invalid length. [ 870.063122][T12419] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 870.166698][T12423] loop2: detected capacity change from 0 to 256 [ 870.340763][T12420] veth9: entered promiscuous mode [ 870.361914][T12420] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 872.703161][T12459] netlink: 'syz.3.1703': attribute type 1 has an invalid length. [ 872.720397][ T30] audit: type=1326 audit(1745198167.576:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12461 comm="syz.2.1700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 872.744366][ T30] audit: type=1326 audit(1745198167.576:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12461 comm="syz.2.1700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 872.767411][ T30] audit: type=1326 audit(1745198167.595:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12461 comm="syz.2.1700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=243 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 872.790004][ T30] audit: type=1326 audit(1745198167.595:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12461 comm="syz.2.1700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 872.812716][ T30] audit: type=1326 audit(1745198167.595:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12461 comm="syz.2.1700" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 872.984254][T12466] veth5: entered promiscuous mode [ 873.006748][T12466] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 874.580390][T12489] loop2: detected capacity change from 0 to 2048 [ 874.762645][T12489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 875.283485][ T9987] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 876.924283][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1723'. [ 878.300313][T12549] loop2: detected capacity change from 0 to 764 [ 878.421935][T12549] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 879.417558][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1739'. [ 879.524510][T12562] macvtap1: entered promiscuous mode [ 879.530225][T12562] dummy0: entered promiscuous mode [ 879.536626][T12562] macvtap1: entered allmulticast mode [ 879.542274][T12562] dummy0: entered allmulticast mode [ 882.459469][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1757'. [ 882.561618][T12610] macvtap1: entered promiscuous mode [ 882.567254][T12610] team0: entered promiscuous mode [ 882.574042][T12610] macvtap1: entered allmulticast mode [ 882.579729][T12610] team0: entered allmulticast mode [ 882.587410][T12610] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 884.329816][T12634] netlink: 'syz.8.1766': attribute type 1 has an invalid length. [ 884.716271][ T9638] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 884.749720][T12634] veth5: entered promiscuous mode [ 884.775377][T12634] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 884.910073][ T9638] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 884.920544][ T9638] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.929304][ T9638] usb 3-1: Product: syz [ 884.934029][ T9638] usb 3-1: Manufacturer: syz [ 884.938908][ T9638] usb 3-1: SerialNumber: syz [ 885.011267][ T9638] usb 3-1: config 0 descriptor?? [ 885.364774][T10565] usb 3-1: USB disconnect, device number 15 [ 885.783883][T12628] udevd[12628]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 887.286377][T12678] netlink: 'syz.1.1780': attribute type 1 has an invalid length. [ 887.398373][T12681] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1779'. [ 887.455015][T12678] 8021q: adding VLAN 0 to HW filter on device bond5 [ 887.831084][T12682] veth11: entered promiscuous mode [ 887.856464][T12682] bond5: (slave veth11): Enslaving as a backup interface with a down link [ 890.222826][T12718] bio_check_eod: 57 callbacks suppressed [ 890.222909][T12718] syz.8.1792: attempt to access beyond end of device [ 890.222909][T12718] loop17: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 890.244530][T12718] EXT4-fs (loop17): unable to read superblock [ 890.750440][T12724] netlink: 'syz.2.1794': attribute type 1 has an invalid length. [ 890.958389][T12727] 8021q: adding VLAN 0 to HW filter on device bond3 [ 891.048854][T12727] veth5: entered promiscuous mode [ 891.073822][T12727] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 891.347948][T12733] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1797'. [ 892.059149][T12744] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 892.544696][T12749] loop2: detected capacity change from 0 to 22 [ 892.603127][T12749] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 893.452857][T12763] netlink: 'syz.9.1809': attribute type 1 has an invalid length. [ 893.592779][T12770] 8021q: adding VLAN 0 to HW filter on device bond4 [ 893.644211][T12772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1811'. [ 894.073722][T12773] veth5: entered promiscuous mode [ 894.097558][T12773] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 894.937989][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1816'. [ 895.146750][T12790] siw: device registration error -23 [ 896.420713][ T30] audit: type=1326 audit(1745198189.463:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12807 comm="syz.2.1823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 896.443811][ T30] audit: type=1326 audit(1745198189.463:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12807 comm="syz.2.1823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 896.466523][ T30] audit: type=1326 audit(1745198189.472:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12807 comm="syz.2.1823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=11 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 896.490595][ T30] audit: type=1326 audit(1745198189.472:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12807 comm="syz.2.1823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 896.513503][ T30] audit: type=1326 audit(1745198189.472:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12807 comm="syz.2.1823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 896.708852][T12811] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1824'. [ 896.744694][T12813] netlink: 'syz.1.1826': attribute type 1 has an invalid length. [ 896.872340][T12816] 8021q: adding VLAN 0 to HW filter on device bond6 [ 897.227996][T12818] veth13: entered promiscuous mode [ 897.252593][T12818] bond6: (slave veth13): Enslaving as a backup interface with a down link [ 898.857594][T12850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1839'. [ 898.884754][T12846] loop2: detected capacity change from 0 to 1764 [ 899.359565][T12859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1841'. [ 899.551161][T12862] siw: device registration error -23 [ 900.052856][T12867] netlink: 'syz.9.1844': attribute type 1 has an invalid length. [ 900.262590][T12871] 8021q: adding VLAN 0 to HW filter on device bond5 [ 900.486460][ T30] audit: type=1326 audit(1745198193.209:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12877 comm="syz.8.1846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 900.509762][ T30] audit: type=1326 audit(1745198193.218:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12877 comm="syz.8.1846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 900.534731][T12874] veth7: entered promiscuous mode [ 900.558587][T12874] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 900.727423][ T30] audit: type=1326 audit(1745198193.282:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12877 comm="syz.8.1846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=324 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 900.751611][ T30] audit: type=1326 audit(1745198193.301:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12877 comm="syz.8.1846" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000 [ 901.462043][T12889] loop2: detected capacity change from 0 to 164 [ 902.567975][T10565] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 902.636935][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'. [ 902.771547][T10565] usb 3-1: Using ep0 maxpacket: 16 [ 902.842868][T10565] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 902.852974][T10565] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.853636][T12911] siw: device registration error -23 [ 902.861570][T10565] usb 3-1: Product: syz [ 902.861686][T10565] usb 3-1: Manufacturer: syz [ 902.876614][T10565] usb 3-1: SerialNumber: syz [ 902.914076][T10565] usb 3-1: config 0 descriptor?? [ 903.166424][T10565] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 903.262445][T10565] usb 3-1: USB disconnect, device number 16 [ 903.719990][T12925] bond3: (slave veth3): Releasing backup interface [ 903.879443][T12925] bond4: (slave veth5): Releasing backup interface [ 903.999891][T12925] bond5: (slave veth7): Releasing backup interface [ 905.930921][T12955] ªªªªªª: renamed from vlan0 (while UP) [ 906.134866][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1876'. [ 906.186889][T12961] overlay: Unknown parameter '\' [ 906.329113][T12963] siw: device registration error -23 [ 906.843829][T12972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1881'. [ 908.966836][T13003] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1892'. [ 912.645747][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 912.652498][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 913.309386][T13072] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1920'. [ 916.200637][ T30] audit: type=1326 audit(1745198207.704:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 916.223656][ T30] audit: type=1326 audit(1745198207.714:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 916.246509][ T30] audit: type=1326 audit(1745198207.723:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 916.269663][ T30] audit: type=1326 audit(1745198207.723:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 916.292419][ T30] audit: type=1326 audit(1745198207.723:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.2.1939" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000 [ 916.621363][T13122] ===================================================== [ 916.629212][T13122] BUG: KMSAN: uninit-value in sctp_inq_pop+0x15c0/0x1930 [ 916.636980][T13122] sctp_inq_pop+0x15c0/0x1930 [ 916.641883][T13122] sctp_assoc_bh_rcv+0x1a7/0xc50 [ 916.649080][T13122] sctp_inq_push+0x2ef/0x380 [ 916.653925][T13122] sctp_backlog_rcv+0x397/0xdb0 [ 916.659258][T13122] sk_backlog_rcv+0x13b/0x420 [ 916.664197][T13122] __release_sock+0x1da/0x330 [ 916.669350][T13122] release_sock+0x6b/0x250 [ 916.674036][T13122] sctp_wait_for_connect+0x487/0x820 [ 916.679960][T13122] sctp_sendmsg_to_asoc+0x203a/0x2070 [ 916.685570][T13122] sctp_sendmsg+0x32b9/0x4a90 [ 916.690895][T13122] inet_sendmsg+0x25a/0x280 [ 916.695676][T13122] __sock_sendmsg+0x267/0x380 [ 916.700877][T13122] __sys_sendto+0x594/0x750 [ 916.705593][T13122] __ia32_sys_sendto+0x123/0x1c0 [ 916.710969][T13122] ia32_sys_call+0xca8/0x41f0 [ 916.715894][T13122] __do_fast_syscall_32+0xb0/0x110 [ 916.721511][T13122] do_fast_syscall_32+0x38/0x80 [ 916.726644][T13122] do_SYSENTER_32+0x1f/0x30 [ 916.731670][T13122] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 916.738274][T13122] [ 916.740694][T13122] Uninit was stored to memory at: [ 916.746574][T13122] sctp_inq_pop+0x1547/0x1930 [ 916.751416][T13122] sctp_assoc_bh_rcv+0x1a7/0xc50 [ 916.756652][T13122] sctp_inq_push+0x2ef/0x380 [ 916.761401][T13122] sctp_backlog_rcv+0x397/0xdb0 [ 916.766549][T13122] sk_backlog_rcv+0x13b/0x420 [ 916.771418][T13122] __release_sock+0x1da/0x330 [ 916.776444][T13122] release_sock+0x6b/0x250 [ 916.781055][T13122] sctp_wait_for_connect+0x487/0x820 [ 916.786643][T13122] sctp_sendmsg_to_asoc+0x203a/0x2070 [ 916.792146][T13122] sctp_sendmsg+0x32b9/0x4a90 [ 916.797156][T13122] inet_sendmsg+0x25a/0x280 [ 916.801935][T13122] __sock_sendmsg+0x267/0x380 [ 916.807009][T13122] __sys_sendto+0x594/0x750 [ 916.811658][T13122] __ia32_sys_sendto+0x123/0x1c0 [ 916.816982][T13122] ia32_sys_call+0xca8/0x41f0 [ 916.821923][T13122] __do_fast_syscall_32+0xb0/0x110 [ 916.827311][T13122] do_fast_syscall_32+0x38/0x80 [ 916.832496][T13122] do_SYSENTER_32+0x1f/0x30 [ 916.837593][T13122] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 916.844399][T13122] [ 916.846831][T13122] Uninit was created at: [ 916.851900][T13122] __kmalloc_node_track_caller_noprof+0x962/0x1260 [ 916.858601][T13122] kmalloc_reserve+0x23e/0x4a0 [ 916.863825][T13122] __alloc_skb+0x366/0x7b0 [ 916.868414][T13122] sctp_packet_transmit+0x1811/0x4470 [ 916.874062][T13122] sctp_outq_flush+0x1b2f/0x6590 [ 916.879173][T13122] sctp_outq_uncork+0x9c/0xb0 [ 916.884207][T13122] sctp_do_sm+0x8c5d/0x93e0 [ 916.888981][T13122] sctp_assoc_bh_rcv+0x8fe/0xc50 [ 916.894265][T13122] sctp_inq_push+0x2ef/0x380 [ 916.899023][T13122] sctp_backlog_rcv+0x397/0xdb0 [ 916.904240][T13122] sk_backlog_rcv+0x13b/0x420 [ 916.909115][T13122] __release_sock+0x1da/0x330 [ 916.913968][T13122] release_sock+0x6b/0x250 [ 916.918883][T13122] sctp_wait_for_connect+0x487/0x820 [ 916.924359][T13122] sctp_sendmsg_to_asoc+0x203a/0x2070 [ 916.930152][T13122] sctp_sendmsg+0x32b9/0x4a90 [ 916.935011][T13122] inet_sendmsg+0x25a/0x280 [ 916.939872][T13122] __sock_sendmsg+0x267/0x380 [ 916.944733][T13122] __sys_sendto+0x594/0x750 [ 916.949742][T13122] __ia32_sys_sendto+0x123/0x1c0 [ 916.954915][T13122] ia32_sys_call+0xca8/0x41f0 [ 916.959913][T13122] __do_fast_syscall_32+0xb0/0x110 [ 916.965184][T13122] do_fast_syscall_32+0x38/0x80 [ 916.970367][T13122] do_SYSENTER_32+0x1f/0x30 [ 916.975007][T13122] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 916.981644][T13122] [ 916.984055][T13122] CPU: 1 UID: 0 PID: 13122 Comm: syz.3.1940 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(undef) [ 916.996743][T13122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 917.007068][T13122] ===================================================== [ 917.014203][T13122] Disabling lock debugging due to kernel taint [ 917.020536][T13122] Kernel panic - not syncing: kmsan.panic set ... [ 917.027689][T13122] CPU: 1 UID: 0 PID: 13122 Comm: syz.3.1940 Tainted: G B 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(undef) [ 917.041605][T13122] Tainted: [B]=BAD_PAGE [ 917.045877][T13122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 917.056052][T13122] Call Trace: [ 917.059424][T13122] [ 917.062441][T13122] dump_stack_lvl+0x216/0x2d0 [ 917.067291][T13122] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 917.073298][T13122] dump_stack+0x1e/0x24 [ 917.077642][T13122] panic+0x4e5/0xcf0 [ 917.081808][T13122] ? __pfx_kmsan_save_stack_with_flags+0x10/0x10 [ 917.088424][T13122] kmsan_report+0x2ca/0x2d0 [ 917.093133][T13122] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 917.099195][T13122] ? __msan_warning+0x95/0x120 [ 917.104185][T13122] ? sctp_inq_pop+0x15c0/0x1930 [ 917.109232][T13122] ? sctp_assoc_bh_rcv+0x1a7/0xc50 [ 917.114566][T13122] ? sctp_inq_push+0x2ef/0x380 [ 917.119526][T13122] ? sctp_backlog_rcv+0x397/0xdb0 [ 917.124749][T13122] ? sk_backlog_rcv+0x13b/0x420 [ 917.129836][T13122] ? __release_sock+0x1da/0x330 [ 917.134906][T13122] ? release_sock+0x6b/0x250 [ 917.139812][T13122] ? sctp_wait_for_connect+0x487/0x820 [ 917.145472][T13122] ? sctp_sendmsg_to_asoc+0x203a/0x2070 [ 917.151214][T13122] ? sctp_sendmsg+0x32b9/0x4a90 [ 917.156280][T13122] ? inet_sendmsg+0x25a/0x280 [ 917.161223][T13122] ? __sock_sendmsg+0x267/0x380 [ 917.166313][T13122] ? __sys_sendto+0x594/0x750 [ 917.171202][T13122] ? __ia32_sys_sendto+0x123/0x1c0 [ 917.176504][T13122] ? ia32_sys_call+0xca8/0x41f0 [ 917.181533][T13122] ? __do_fast_syscall_32+0xb0/0x110 [ 917.187113][T13122] ? do_fast_syscall_32+0x38/0x80 [ 917.192338][T13122] ? do_SYSENTER_32+0x1f/0x30 [ 917.197219][T13122] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 917.203952][T13122] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 917.210903][T13122] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 917.216928][T13122] ? sched_clock_cpu+0x55/0x870 [ 917.221998][T13122] ? kmsan_get_metadata+0x13e/0x1c0 [ 917.227394][T13122] ? kmsan_get_metadata+0x13e/0x1c0 [ 917.232790][T13122] ? kmsan_get_metadata+0x13e/0x1c0 [ 917.238187][T13122] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 917.244217][T13122] ? kmsan_get_metadata+0x13e/0x1c0 [ 917.249728][T13122] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 917.255790][T13122] __msan_warning+0x95/0x120 [ 917.260711][T13122] sctp_inq_pop+0x15c0/0x1930 [ 917.265650][T13122] sctp_assoc_bh_rcv+0x1a7/0xc50 [ 917.270851][T13122] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 917.276868][T13122] ? __pfx_sctp_assoc_bh_rcv+0x10/0x10 [ 917.282570][T13122] ? __pfx_sctp_assoc_bh_rcv+0x10/0x10 [ 917.288284][T13122] sctp_inq_push+0x2ef/0x380 [ 917.293093][T13122] sctp_backlog_rcv+0x397/0xdb0 [ 917.298179][T13122] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 917.303845][T13122] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 917.309205][T13122] sk_backlog_rcv+0x13b/0x420 [ 917.314118][T13122] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 917.320143][T13122] __release_sock+0x1da/0x330 [ 917.325046][T13122] release_sock+0x6b/0x250 [ 917.329699][T13122] sctp_wait_for_connect+0x487/0x820 [ 917.335317][T13122] ? __pfx_autoremove_wake_function+0x10/0x10 [ 917.341718][T13122] sctp_sendmsg_to_asoc+0x203a/0x2070 [ 917.347306][T13122] ? kmsan_get_metadata+0x13e/0x1c0 [ 917.352708][T13122] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 917.358746][T13122] ? sctp_connect_new_asoc+0x72f/0xb30 [ 917.364448][T13122] sctp_sendmsg+0x32b9/0x4a90 [ 917.369327][T13122] ? kmsan_get_metadata+0x13e/0x1c0 [ 917.374802][T13122] ? __pfx_udp_sendmsg+0x10/0x10 [ 917.379935][T13122] ? __pfx_sctp_sendmsg+0x10/0x10 [ 917.385149][T13122] inet_sendmsg+0x25a/0x280 [ 917.389899][T13122] ? __pfx_inet_sendmsg+0x10/0x10 [ 917.395172][T13122] __sock_sendmsg+0x267/0x380 [ 917.400079][T13122] __sys_sendto+0x594/0x750 [ 917.404783][T13122] ? do_futex+0x343/0x4a0 [ 917.409343][T13122] ? kmsan_get_metadata+0x13e/0x1c0 [ 917.414743][T13122] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 917.420798][T13122] __ia32_sys_sendto+0x123/0x1c0 [ 917.425960][T13122] ia32_sys_call+0xca8/0x41f0 [ 917.430923][T13122] __do_fast_syscall_32+0xb0/0x110 [ 917.436241][T13122] ? switch_fpu_return+0x17/0x20 [ 917.441395][T13122] do_fast_syscall_32+0x38/0x80 [ 917.446451][T13122] do_SYSENTER_32+0x1f/0x30 [ 917.451269][T13122] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 917.457991][T13122] RIP: 0023:0xf709d539 [ 917.462264][T13122] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 917.482185][T13122] RSP: 002b:00000000f506c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 917.490847][T13122] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080847fff [ 917.498992][T13122] RDX: 0000000000034000 RSI: 0000000000000000 RDI: 000000008005ffe4 [ 917.507129][T13122] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 917.515350][T13122] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 917.523577][T13122] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 917.531747][T13122] [ 917.535229][T13122] Kernel Offset: disabled [ 917.539676][T13122] Rebooting in 86400 seconds..