last executing test programs: 7m6.44411016s ago: executing program 2 (id=240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r5 = syz_open_pts(r4, 0x141601) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000040)) fcntl$setstatus(r5, 0x4, 0x42000) write(r5, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x1b) close(0x3) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448ca, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 7m1.084981095s ago: executing program 2 (id=252): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884) close_range(r0, 0xffffffffffffffff, 0x0) 7m0.022629051s ago: executing program 2 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x14b042, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) io_setup(0x6, 0x0) 6m59.165387935s ago: executing program 2 (id=263): modify_ldt$write(0x1, &(0x7f0000000280)={0x1001, 0x20001000}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) modify_ldt$write(0x1, &(0x7f0000001700), 0x10) 6m57.080173998s ago: executing program 2 (id=270): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000100001042abd70"], 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x48000) add_key(0x0, 0x0, &(0x7f0000000180)="305c0605e182d1447a", 0x9, 0xfffffffffffffffe) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6m55.751291049s ago: executing program 2 (id=277): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e378667cc767026, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x6) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x8880, 0x0) lseek(r6, 0x300, 0x2) 6m40.591261629s ago: executing program 32 (id=277): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e378667cc767026, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x6) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x8880, 0x0) lseek(r6, 0x300, 0x2) 4m50.928128435s ago: executing program 1 (id=695): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1510, 0x0, 0x0, 0xffffffff, 0x10c8, 0x1288, 0x1478, 0x1478, 0xffffffff, 0x1478, 0x1478, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1570) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r5, 0x1ad72f7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m49.97072061s ago: executing program 1 (id=697): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = io_uring_setup(0x1d7f, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0xd, 0x0, 0x0) 4m49.756331503s ago: executing program 1 (id=699): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) fstatfs(0xffffffffffffffff, &(0x7f0000000740)=""/199) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f00000000c0)={'wg1\x00'}) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0xa1}], 0x1, 0x20, 0x0) 4m47.228738804s ago: executing program 1 (id=705): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)="7cd1f233", 0x4}], 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000240)}) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$tipc(0x1e, 0x5, 0x0) 4m45.872078415s ago: executing program 1 (id=710): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1510, 0x0, 0x0, 0xffffffff, 0x10c8, 0x1288, 0x1478, 0x1478, 0xffffffff, 0x1478, 0x1478, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1570) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r5, 0x1ad72f7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m44.458273997s ago: executing program 1 (id=714): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x880484, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x46, 0x2d1, &(0x7f0000000740)="$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") r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=maccyrillic,discard,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,iocharset=cp936,errors=continue,iocharset=ascii,errors=remount-ro,time_offset=0x0000000000000008,errors=remount-ro,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB='8\x00'], 0x1, 0x1524, &(0x7f0000000780)="$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") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f0000001f40)=[@request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4m28.952211833s ago: executing program 33 (id=714): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x880484, &(0x7f0000000500)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d302c757466383d312c696f636861727365743d69736f383835392d31332c636865636b3d7374726963742c726f6469722c757466383d302c756e695f786c6174653d312c636f6465706167653d3836362c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c646d61736b3d30303030303030303030303030303030303030303030312c646d61736b3d30303030303030303030303030303030303030303030362c756e695f786c6174653d302c696f636861727365743d63703835352c73686f72746e616d653d77696e39352c726f6469722c6e6e6f6e756d7461696c3d312c73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c757466383d312c757466383d302c756e695f786c6174653d302c756e695f786c6174653d312c696f636861727365743d6370313235352c757466383d302c646566636f6e7465010000006e636f6e66696e65645f752c00"], 0x46, 0x2d1, &(0x7f0000000740)="$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") r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=maccyrillic,discard,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,iocharset=cp936,errors=continue,iocharset=ascii,errors=remount-ro,time_offset=0x0000000000000008,errors=remount-ro,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB='8\x00'], 0x1, 0x1524, &(0x7f0000000780)="$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") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x54, 0x0, &(0x7f0000001f40)=[@request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16.695604586s ago: executing program 3 (id=1545): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x500, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) 11.574463136s ago: executing program 5 (id=1559): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000000500"/20, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) syz_clone3(&(0x7f0000002200)={0x12d000400, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, &(0x7f00000021c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 9.928596293s ago: executing program 5 (id=1561): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$dri(0x0, 0x1f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) 8.84002599s ago: executing program 5 (id=1565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000300)={0x6}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) socket(0x2, 0x3, 0x67) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) 8.267193309s ago: executing program 3 (id=1569): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xa950, 0x10, 0x3, 0x40024e}, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) recvmmsg(0xffffffffffffffff, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2004}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 5.437565544s ago: executing program 4 (id=1574): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r0, r0) fanotify_init(0x2972bf0627f51a4a, 0x2) read$FUSE(r3, 0x0, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x80, 0x0, 0x0, 0x2}}, 0x48) 5.430037564s ago: executing program 3 (id=1575): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) 4.740120825s ago: executing program 3 (id=1577): modify_ldt$write(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) 4.39789642s ago: executing program 4 (id=1579): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") syz_open_procfs(0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xb5) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x48880) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 4.319026892s ago: executing program 6 (id=1580): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0xb, 0x4) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x309c01, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x83, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') 3.838361119s ago: executing program 3 (id=1581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x8401) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0}) r7 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f0000000140)='Q', 0x1, 0x200980) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ftruncate(r8, 0xf09) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010329bd7000100000000200000403000007020000001400110069616376746170300000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) 3.396087926s ago: executing program 6 (id=1582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000800)='u', 0x1, 0x801, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x3d3, 0x3, 0x3ff, 0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc885}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.241711219s ago: executing program 0 (id=1583): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1510, 0x0, 0x0, 0xffffffff, 0x10c8, 0x1288, 0x1478, 0x1478, 0xffffffff, 0x1478, 0x1478, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1570) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r5, 0x1ad72f7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.797342786s ago: executing program 5 (id=1584): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r5, 0x0, 0x14) close_range(r4, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000400)={[{@ssd_spread}]}, 0x1, 0x50ed, &(0x7f0000005180)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ftruncate(r6, 0xc17a) lseek(r6, 0x2000, 0x4) 2.739975067s ago: executing program 4 (id=1585): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xa950, 0x10, 0x3, 0x40024e}, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) recvmmsg(0xffffffffffffffff, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2004}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 2.258058034s ago: executing program 0 (id=1586): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414bb00000000180000000000000084000000070000000a01010200000000180000"], 0x48}], 0x1, 0x0) 2.255938524s ago: executing program 3 (id=1587): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.116264987s ago: executing program 5 (id=1588): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, 0x0, 0x0) 2.031607108s ago: executing program 5 (id=1589): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair(0x1, 0x20000000000001, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0xc9, 0x6, &(0x7f0000000040)={0x21, "a8fd4950f88fdde3d44c00000000008000"}}) 1.971483039s ago: executing program 6 (id=1590): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) preadv(r1, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000740)=""/172, 0xac}], 0x3, 0x27, 0x3) 1.89207937s ago: executing program 6 (id=1591): modify_ldt$write(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) 1.439297547s ago: executing program 4 (id=1592): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0xb, 0x4) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x309c01, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x83, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1.330805419s ago: executing program 0 (id=1593): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pipe2(0x0, 0x80000) syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x10, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, 0x0, 0xfffffffffffffe8a) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0x800000000000) 1.064189034s ago: executing program 4 (id=1594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000300)={0x6}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) socket(0x2, 0x3, 0x67) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) 1.054494394s ago: executing program 0 (id=1595): syz_mount_image$udf(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="005adf777d83b5240841b789be04af0f620854fa3b8c828ddfa1c840e3e5ede96bc91e70738f22976b004010cf86949a1577f8020000000000000053b65b93e91f976243c28043ab1ca54a7eed0e3a7e3e2db54d114b8534489d3bd3fb3ea586cdfd6bf0d0392c1a9a8f573c066d592ed4695068ae9c25e71bb85aeed26114f2164fec293436091f2ec05852c70e7839ee081fe0504f4893793ac58b2854f810894546128e8d1317f190a06247226c6d190359f92c23f8af234114a6d5034ab7f2a4cd6a7f5c4baf6e84b2ef16534c8be6c40da1d1444633bec3c88909b7bcb6c32711404895dee5c4c77bf311680b4a4c79a8e814d9cd56806f889f9de5d4261b2ed2cea592919817c70452784991fe237569c6c99813daddb9aed82416ec259baeb13e11c572e2c4"], 0x1, 0x5c6, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 1.003868804s ago: executing program 6 (id=1596): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103, 0x28820}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x48000) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x48}, 0x1, 0x0, 0x0, 0x24004091}, 0xc801) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 942.376175ms ago: executing program 0 (id=1597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x8401) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0}) r7 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f0000000140)='Q', 0x1, 0x200980) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ftruncate(r8, 0xf09) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010329bd7000100000000200000403000007020000001400110069616376746170300000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) 727.958088ms ago: executing program 6 (id=1598): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000080)={0x84, @loopback, 0x4e20, 0x3, 'dh\x00', 0x30, 0x9, 0x3a}, 0x2c) sched_setscheduler(0x0, 0x5, &(0x7f00000007c0)=0x7fff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r2, 0x0, 0xfffffffffffefffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000340)=0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000000)={0x1, 0x0, 0x98, &(0x7f0000000180)={0x0, 0x800, 0x1000000f}}) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) 54.236189ms ago: executing program 4 (id=1599): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) memfd_secret(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a3000000000140000001100"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) r5 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40900, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r6, 0xc0045401, &(0x7f0000000940)=0x25b) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 0 (id=1600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000800)='u', 0x1, 0x801, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x3d3, 0x3, 0x3ff, 0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc885}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): veth0_virt_wifi: link becomes ready [ 208.383775][ T5773] EXT4-fs (loop3): Free/Dirty block details [ 208.416167][ T5773] EXT4-fs (loop3): free_blocks=2415919104 [ 208.463953][ T5773] EXT4-fs (loop3): dirty_blocks=16 [ 208.501298][ T5773] EXT4-fs (loop3): Block reservation details [ 208.508488][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 208.527215][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 208.570768][ T5773] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 208.579319][ T5449] device veth0_vlan entered promiscuous mode [ 208.594989][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 208.635679][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 208.685778][ T5773] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 208.736658][ T5449] device veth1_vlan entered promiscuous mode [ 208.759373][ T5805] syz.0.413[5805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.759473][ T5805] syz.0.413[5805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.774745][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.776730][ T5773] EXT4-fs (loop3): This should not happen!! Data will be lost [ 208.776730][ T5773] [ 208.819466][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.900720][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.915570][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.965709][ T5449] device veth0_macvtap entered promiscuous mode [ 209.026988][ T5449] device veth1_macvtap entered promiscuous mode [ 209.878958][ T5818] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input8 [ 209.947808][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.971370][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 210.066610][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.133920][ T5828] netlink: 256 bytes leftover after parsing attributes in process `syz.0.416'. [ 210.144137][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.185339][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.253930][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.284465][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.327883][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.382815][ T5449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.466146][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.518730][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.563269][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.605220][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.676812][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.705660][ T5849] loop3: detected capacity change from 0 to 256 [ 210.705996][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.741661][ T5449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.762487][ T5449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.774525][ T5449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.802474][ T5449] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.821876][ T5449] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.842239][ T5449] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.864850][ T5449] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.977640][ T5820] syz.4.418 (5820): drop_caches: 2 [ 211.978055][ T5854] syz.3.425[5854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.978152][ T5854] syz.3.425[5854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.994342][ T5854] loop3: detected capacity change from 0 to 256 [ 212.036827][ T5854] exfat: Deprecated parameter 'utf8' [ 212.053106][ T5854] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 212.283903][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.316796][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.376525][ T1233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.424900][ T1233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.505339][ T5877] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input9 [ 213.693224][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 214.547613][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.600296][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.614138][ T5892] futex_wake_op: syz.0.438 tries to shift op by -1; fix this program [ 214.671681][ T5894] loop4: detected capacity change from 0 to 512 [ 214.763316][ T5894] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 214.807648][ T5894] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 214.843309][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.183139][ T5897] lo speed is unknown, defaulting to 1000 [ 215.239617][ T5894] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 215.278878][ T5894] System zones: 1-12 [ 215.362605][ T5894] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.437: corrupted in-inode xattr [ 215.423183][ T5894] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.437: couldn't read orphan inode 15 (err -117) [ 215.448416][ T5894] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,barrier,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000000400,,errors=continue. Quota mode: none. [ 218.252679][ T5954] infiniband syz1: set active [ 218.276044][ T7] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 218.290220][ T5954] infiniband syz1: added veth0_to_team [ 219.139390][ T5954] RDS/IB: syz1: added [ 219.235048][ T5954] smc: adding ib device syz1 with port count 1 [ 219.241686][ T5954] smc: ib device syz1 port 1 has pnetid [ 219.280219][ T26] audit: type=1326 audit(1750323876.185:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 219.349984][ T26] audit: type=1326 audit(1750323876.215:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 219.372145][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.378684][ T26] audit: type=1326 audit(1750323876.215:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 219.402783][ T26] audit: type=1326 audit(1750323876.215:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 219.425102][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.441091][ T26] audit: type=1326 audit(1750323876.215:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 219.476255][ T7] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 219.504627][ T26] audit: type=1326 audit(1750323876.215:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 219.536313][ T7] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 219.557480][ T26] audit: type=1326 audit(1750323876.215:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 219.585397][ T26] audit: type=1326 audit(1750323876.215:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 219.585626][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 219.607619][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.630236][ T26] audit: type=1326 audit(1750323876.215:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 220.150661][ T26] audit: type=1326 audit(1750323876.215:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.4.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 220.415294][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 220.425158][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.458727][ T7] usb 2-1: config 0 descriptor?? [ 220.526924][ T5967] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 221.397113][ T6002] tipc: Started in network mode [ 221.402081][ T6002] tipc: Node identity 4, cluster identity 4711 [ 221.438478][ T7] usbhid 2-1:0.0: can't add hid device: -71 [ 221.444541][ T7] usbhid: probe of 2-1:0.0 failed with error -71 [ 221.453677][ T7] usb 2-1: USB disconnect, device number 3 [ 221.481396][ T6002] tipc: Node number set to 4 [ 221.855996][ T4215] Bluetooth: hci4: command 0x0406 tx timeout [ 225.927233][ T6059] netlink: 24 bytes leftover after parsing attributes in process `syz.3.474'. [ 226.078076][ T6065] netlink: 24 bytes leftover after parsing attributes in process `syz.1.476'. [ 226.257870][ T6074] syz.1.479[6074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.257965][ T6074] syz.1.479[6074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.307622][ T6069] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 226.370725][ T6069] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 226.497188][ T6074] loop1: detected capacity change from 0 to 128 [ 227.201696][ T6074] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 227.259737][ T6074] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.404871][ T26] kauditd_printk_skb: 48 callbacks suppressed [ 227.404888][ T26] audit: type=1326 audit(1750323884.305:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 227.608623][ T26] audit: type=1326 audit(1750323884.305:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 227.632052][ T26] audit: type=1326 audit(1750323884.335:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 227.667637][ T26] audit: type=1326 audit(1750323884.335:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 228.383737][ T26] audit: type=1326 audit(1750323884.335:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 228.490158][ T26] audit: type=1326 audit(1750323884.345:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 228.512361][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.540287][ T6100] usb usb8: usbfs: process 6100 (syz.5.485) did not claim interface 0 before use [ 228.583335][ T26] audit: type=1326 audit(1750323884.345:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 228.699810][ T26] audit: type=1326 audit(1750323884.435:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 228.767523][ T6110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.486'. [ 228.830518][ T26] audit: type=1326 audit(1750323884.735:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 228.854248][ T26] audit: type=1326 audit(1750323884.755:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6087 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 228.907851][ T6118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.490'. [ 229.008769][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.493'. [ 230.964904][ T6146] loop3: detected capacity change from 0 to 512 [ 231.047105][ T6146] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 231.085797][ T6146] EXT4-fs (loop3): invalid journal inode [ 231.102006][ T6146] EXT4-fs (loop3): can't get journal size [ 231.210489][ T6146] EXT4-fs (loop3): 1 truncate cleaned up [ 231.225572][ T6146] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 231.248175][ T6161] netlink: 24 bytes leftover after parsing attributes in process `syz.5.504'. [ 231.433397][ T6172] loop1: detected capacity change from 0 to 128 [ 234.647929][ T6205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.513'. [ 234.761289][ T6217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.518'. [ 235.622826][ T6227] netlink: 24 bytes leftover after parsing attributes in process `syz.5.519'. [ 235.673901][ T26] kauditd_printk_skb: 99 callbacks suppressed [ 235.673916][ T26] audit: type=1326 audit(1750323892.575:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f45ee5929 code=0x7ffc0000 [ 235.805980][ T26] audit: type=1326 audit(1750323892.615:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f45ee5929 code=0x7ffc0000 [ 235.849039][ T26] audit: type=1326 audit(1750323892.635:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f45ee5929 code=0x7ffc0000 [ 235.977165][ T26] audit: type=1326 audit(1750323892.635:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f45ee5929 code=0x7ffc0000 [ 236.070421][ T26] audit: type=1326 audit(1750323892.635:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f45ee5929 code=0x7ffc0000 [ 236.309942][ T26] audit: type=1326 audit(1750323892.635:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f45ee5929 code=0x7ffc0000 [ 236.340350][ T26] audit: type=1326 audit(1750323892.635:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f45ee5929 code=0x7ffc0000 [ 237.736999][ T26] audit: type=1326 audit(1750323892.635:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f45ee5929 code=0x7ffc0000 [ 237.824475][ T26] audit: type=1326 audit(1750323892.635:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0f45ee5929 code=0x7ffc0000 [ 237.847028][ T26] audit: type=1326 audit(1750323892.635:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.1.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f45ee5929 code=0x7ffc0000 [ 237.962538][ T6267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.530'. [ 238.173935][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 238.665000][ T6279] syz.1.531 (6279): drop_caches: 2 [ 238.671001][ T6279] syz.1.531 (6279): drop_caches: 2 [ 238.744195][ T6274] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.860815][ T6285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 238.958120][ T6285] bond1 (unregistering): Released all slaves [ 239.246207][ T6305] can: request_module (can-proto-0) failed. [ 240.813466][ T6322] netlink: 24 bytes leftover after parsing attributes in process `syz.5.542'. [ 241.465833][ T6294] loop3: detected capacity change from 0 to 40427 [ 242.579270][ T6348] loop4: detected capacity change from 0 to 256 [ 243.238849][ T6368] ptrace attach of "./syz-executor exec"[4176] was attempted by ""[6368] [ 244.012514][ T6371] netlink: 24 bytes leftover after parsing attributes in process `syz.5.554'. [ 244.316128][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 244.316145][ T26] audit: type=1326 audit(1750323901.195:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 244.344834][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.141112][ T6380] Cannot find add_set index 0 as target [ 245.186953][ T26] audit: type=1326 audit(1750323901.195:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 245.216464][ T26] audit: type=1326 audit(1750323901.195:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 245.371634][ T26] audit: type=1326 audit(1750323901.195:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 245.471145][ T26] audit: type=1326 audit(1750323901.195:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 245.620031][ T6409] loop1: detected capacity change from 0 to 256 [ 245.638700][ T26] audit: type=1326 audit(1750323901.195:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 245.660958][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.697481][ T26] audit: type=1326 audit(1750323901.195:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 245.736024][ T26] audit: type=1326 audit(1750323901.195:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 245.926064][ T6409] syz.1.565[6409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.926159][ T6409] syz.1.565[6409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.941648][ T6409] loop1: detected capacity change from 0 to 256 [ 245.959875][ T6409] exfat: Deprecated parameter 'utf8' [ 245.974637][ T6409] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 246.194673][ T6419] netlink: 24 bytes leftover after parsing attributes in process `syz.4.567'. [ 247.003117][ T26] audit: type=1326 audit(1750323901.205:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 247.056460][ T26] audit: type=1326 audit(1750323901.205:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6378 comm="syz.4.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 247.850317][ T6433] loop3: detected capacity change from 0 to 1024 [ 248.734559][ T6443] 8021q: VLANs not supported on ip6tnl0 [ 248.786340][ T6433] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 248.797178][ T6433] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.901805][ T6448] loop4: detected capacity change from 0 to 128 [ 249.205309][ T6448] ADFS-fs (loop4): unrecognised mount option "uid=0x00000000000000000x0000000000000000" or missing value [ 251.009922][ T6470] loop1: detected capacity change from 0 to 256 [ 251.253902][ T6470] syz.1.578[6470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.254012][ T6470] syz.1.578[6470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.396959][ T6485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.581'. [ 252.542233][ T6505] loop3: detected capacity change from 0 to 1024 [ 252.975800][ T6505] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 252.988418][ T6505] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.113003][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'. [ 253.129481][ T6504] 8021q: VLANs not supported on ip6tnl0 [ 253.801794][ T6525] loop3: detected capacity change from 0 to 128 [ 253.878515][ T6525] ADFS-fs (loop3): unrecognised mount option "uid=0x00000000000000000x0000000000000000" or missing value [ 254.959998][ T6541] loop4: detected capacity change from 0 to 256 [ 255.316049][ T6541] syz.4.593[6541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.316139][ T6541] syz.4.593[6541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.332059][ T6541] loop4: detected capacity change from 0 to 256 [ 255.352256][ T6541] exfat: Deprecated parameter 'utf8' [ 255.468510][ T6541] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 255.628566][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.925179][ T6558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.596'. [ 255.982912][ T6554] 8021q: VLANs not supported on ip6gre0 [ 256.486261][ T6566] loop5: detected capacity change from 0 to 1024 [ 258.617412][ T6574] loop3: detected capacity change from 0 to 256 [ 259.137770][ T6566] EXT4-fs: error -4 creating inode table initialization thread [ 259.147175][ T6566] EXT4-fs (loop5): mount failed [ 260.487429][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 260.487443][ T26] audit: type=1326 audit(1750323917.395:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 260.554038][ T6603] syz.0.608[6603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.554144][ T6603] syz.0.608[6603] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.597065][ T26] audit: type=1326 audit(1750323917.445:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6599 comm="syz.4.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 260.821363][ T6614] 8021q: VLANs not supported on ip6gre0 [ 260.992635][ T6593] loop5: detected capacity change from 0 to 40427 [ 261.206063][ T6593] F2FS-fs (loop5): inline encryption not supported [ 261.222224][ T6593] F2FS-fs (loop5): invalid crc value [ 261.519413][ T6593] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 262.703715][ T6637] syz.4.617 (6637): drop_caches: 2 [ 262.710600][ T6637] syz.4.617 (6637): drop_caches: 2 [ 263.564071][ T6650] netlink: 16 bytes leftover after parsing attributes in process `syz.4.619'. [ 266.311798][ T6687] ptrace attach of "./syz-executor exec"[4169] was attempted by " [ 267.658960][ T6701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.629'. [ 269.887184][ T6721] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input10 [ 270.085700][ T6726] 8021q: VLANs not supported on ip6gre0 [ 270.239758][ T6735] loop1: detected capacity change from 0 to 256 [ 271.272556][ T6745] loop4: detected capacity change from 0 to 256 [ 271.607155][ T6745] syz.4.640[6745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.607250][ T6745] syz.4.640[6745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.363262][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'. [ 275.167545][ T6786] 8021q: VLANs not supported on ip6gre0 [ 275.324315][ T6793] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input11 [ 275.620825][ T6766] loop4: detected capacity change from 0 to 40427 [ 275.654801][ T6766] F2FS-fs (loop4): inline encryption not supported [ 275.689032][ T6766] F2FS-fs (loop4): invalid crc value [ 275.743511][ T6766] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 276.078455][ T6815] loop3: detected capacity change from 0 to 256 [ 276.092751][ T6818] loop5: detected capacity change from 0 to 256 [ 276.497892][ T6826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'. [ 277.373014][ T6842] xt_nat: multiple ranges no longer supported [ 279.004726][ T6856] 8021q: VLANs not supported on ip6gre0 [ 279.960149][ T6873] bridge0: port 3(gretap0) entered blocking state [ 280.004326][ T6873] bridge0: port 3(gretap0) entered disabled state [ 280.074745][ T6873] device gretap0 entered promiscuous mode [ 280.121681][ T6873] bridge0: port 3(gretap0) entered blocking state [ 280.128329][ T6873] bridge0: port 3(gretap0) entered forwarding state [ 280.235613][ T6877] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input12 [ 280.684702][ T6885] loop3: detected capacity change from 0 to 1024 [ 280.783466][ T6885] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 280.794236][ T6885] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.817462][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.667'. [ 281.862381][ T6894] loop4: detected capacity change from 0 to 256 [ 283.214792][ T6909] 8021q: VLANs not supported on ip6gre0 [ 283.243803][ T6898] syz.4.669[6898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.243896][ T6898] syz.4.669[6898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.616135][ T6925] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input13 [ 284.849390][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.680'. [ 284.955575][ T6933] loop5: detected capacity change from 0 to 256 [ 286.075447][ T6920] loop1: detected capacity change from 0 to 40427 [ 286.241211][ T6920] F2FS-fs (loop1): inline encryption not supported [ 286.812645][ T6920] F2FS-fs (loop1): invalid crc value [ 287.003359][ T6920] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 288.451650][ T6961] bridge0: port 3(gretap0) entered blocking state [ 288.480823][ T6961] bridge0: port 3(gretap0) entered disabled state [ 289.167489][ T6961] device gretap0 entered promiscuous mode [ 289.268664][ T6961] bridge0: port 3(gretap0) entered blocking state [ 289.275179][ T6961] bridge0: port 3(gretap0) entered forwarding state [ 289.376374][ T6965] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input14 [ 289.502857][ T4251] udevd[4251]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 290.496669][ T6980] loop5: detected capacity change from 0 to 1024 [ 290.583286][ T6980] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 290.594105][ T6980] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.610451][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.693'. [ 290.659989][ T6985] loop3: detected capacity change from 0 to 256 [ 291.032922][ T6989] xt_nat: multiple ranges no longer supported [ 294.347152][ T7020] loop4: detected capacity change from 0 to 128 [ 295.087456][ T7020] ADFS-fs (loop4): unrecognised mount option "uid=0x00000000000000000x0000000000000000" or missing value [ 295.428666][ T7033] loop5: detected capacity change from 0 to 1024 [ 295.609673][ T7033] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 295.620587][ T7033] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.650114][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.706'. [ 296.652350][ T7049] xt_nat: multiple ranges no longer supported [ 297.805731][ T7058] loop1: detected capacity change from 0 to 256 [ 298.980928][ T7072] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input15 [ 299.107260][ T7075] syz.1.714[7075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.107357][ T7075] syz.1.714[7075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.157161][ T7075] loop1: detected capacity change from 0 to 256 [ 299.223390][ T7075] exfat: Deprecated parameter 'utf8' [ 300.066170][ T7075] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 301.526497][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'. [ 302.185191][ T7106] 8021q: VLANs not supported on ip6tnl0 [ 302.384937][ T7111] xt_nat: multiple ranges no longer supported [ 302.635076][ T7114] loop3: detected capacity change from 0 to 256 [ 302.980543][ T7088] loop5: detected capacity change from 0 to 40427 [ 304.889299][ T7124] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input16 [ 307.043765][ T7149] loop4: detected capacity change from 0 to 1024 [ 307.306860][ T7149] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 307.317686][ T7149] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.348732][ T7147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 307.843453][ T7161] loop4: detected capacity change from 0 to 256 [ 311.587494][ T7192] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input17 [ 313.123662][ T7213] bridge0: port 3(gretap0) entered blocking state [ 313.130249][ T7213] bridge0: port 3(gretap0) entered disabled state [ 313.138946][ T7213] device gretap0 entered promiscuous mode [ 313.145161][ T7213] bridge0: port 3(gretap0) entered blocking state [ 313.151681][ T7213] bridge0: port 3(gretap0) entered forwarding state [ 313.991567][ T7215] loop5: detected capacity change from 0 to 1024 [ 314.289834][ T7218] loop4: detected capacity change from 0 to 256 [ 314.306859][ T7215] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 314.317614][ T7215] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.346159][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.749'. [ 314.380894][ T7225] xt_nat: multiple ranges no longer supported [ 315.411353][ T7224] lo speed is unknown, defaulting to 1000 [ 315.884542][ T7239] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input18 [ 316.073479][ T7243] loop4: detected capacity change from 0 to 128 [ 316.242485][ T7243] ADFS-fs (loop4): unrecognised mount option "uid=0x00000000000000000x0000000000000000" or missing value [ 316.366029][ T7243] loop4: detected capacity change from 0 to 128 [ 316.474437][ T7243] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 316.497503][ T7243] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.063333][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.135920][ T4247] Bluetooth: hci3: command 0x0409 tx timeout [ 317.228580][ T7224] chnl_net:caif_netlink_parms(): no params data found [ 317.557207][ T7224] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.600165][ T7224] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.317264][ T7224] device bridge_slave_0 entered promiscuous mode [ 318.387970][ T7224] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.395146][ T7224] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.404279][ T7224] device bridge_slave_1 entered promiscuous mode [ 318.650517][ T7224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.178452][ T4214] Bluetooth: hci3: command 0x041b tx timeout [ 320.255437][ T7276] loop4: detected capacity change from 0 to 256 [ 320.344393][ T7224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.608627][ T7224] team0: Port device team_slave_0 added [ 321.248299][ T4283] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.312394][ T7224] team0: Port device team_slave_1 added [ 321.536286][ T4283] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.639677][ T7224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.669333][ T7224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.741344][ T7224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.753976][ T7224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.761193][ T7224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.827706][ T7289] xt_nat: multiple ranges no longer supported [ 322.032254][ T7288] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input19 [ 322.256090][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 322.536587][ T7224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.583794][ T4283] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.717428][ T7224] device hsr_slave_0 entered promiscuous mode [ 322.758524][ T7224] device hsr_slave_1 entered promiscuous mode [ 322.853403][ T4283] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.001038][ T7305] loop5: detected capacity change from 0 to 128 [ 323.077726][ T7305] ADFS-fs (loop5): unrecognised mount option "uid=0x00000000000000000x0000000000000000" or missing value [ 323.540331][ T7224] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 323.974317][ T7314] loop5: detected capacity change from 0 to 1024 [ 324.058489][ T7224] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 324.194395][ T7319] loop4: detected capacity change from 0 to 256 [ 324.253284][ T7314] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 324.264206][ T7314] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.475446][ T7224] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 324.484459][ T4214] Bluetooth: hci3: command 0x0419 tx timeout [ 325.017525][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.5.775'. [ 325.177440][ T7224] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 326.163423][ T7342] xt_nat: multiple ranges no longer supported [ 327.117064][ T7347] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input20 [ 327.177747][ T7224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.236093][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.244837][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.270412][ T7224] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.285298][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.296136][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.385795][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.393012][ T4315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.521141][ T7370] loop3: detected capacity change from 0 to 128 [ 328.536634][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 328.545496][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 328.558960][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 328.578050][ T4315] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.585169][ T4315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.587343][ T7370] ADFS-fs (loop3): unrecognised mount option "uid=0x00000000000000000x0000000000000000" or missing value [ 328.660954][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.697459][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.754033][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.797234][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 328.813554][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 328.824991][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 328.841537][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 328.852104][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.869088][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 328.883451][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.949300][ T7224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 328.961547][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.959006][ T7388] loop5: detected capacity change from 0 to 1024 [ 331.093489][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.104001][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.128956][ T7397] loop3: detected capacity change from 0 to 256 [ 331.137725][ T7388] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 331.148472][ T7388] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.165368][ T7224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.195968][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.790'. [ 333.425704][ T7421] xt_nat: multiple ranges no longer supported [ 334.347239][ T7434] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input21 [ 334.454370][ T4283] device hsr_slave_0 left promiscuous mode [ 334.473559][ T4283] device hsr_slave_1 left promiscuous mode [ 334.720342][ T7443] loop5: detected capacity change from 0 to 128 [ 334.731115][ T4283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.740252][ T4283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.752083][ T4283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.771909][ T4283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.785904][ T7443] ADFS-fs (loop5): unrecognised mount option "uid=0x00000000000000000x0000000000000000" or missing value [ 334.804486][ T4283] device bridge_slave_1 left promiscuous mode [ 334.812763][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.852419][ T4283] device bridge_slave_0 left promiscuous mode [ 334.892481][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.199230][ T4283] device veth1_macvtap left promiscuous mode [ 335.317563][ T4283] device veth0_macvtap left promiscuous mode [ 335.576152][ T4283] device veth1_vlan left promiscuous mode [ 335.583929][ T4283] device veth0_vlan left promiscuous mode [ 336.551918][ T4283] team0 (unregistering): Port device team_slave_1 removed [ 336.572189][ T4283] team0 (unregistering): Port device team_slave_0 removed [ 336.611989][ T4283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.662586][ T4283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.782681][ T4283] bond0 (unregistering): Released all slaves [ 336.801681][ T7457] loop5: detected capacity change from 0 to 1024 [ 336.900853][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 336.921395][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.953367][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.962324][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.991164][ T7457] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 336.991376][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 337.002240][ T7457] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.021736][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 337.071324][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.802'. [ 337.082387][ T7224] device veth0_vlan entered promiscuous mode [ 337.098540][ T7224] device veth1_vlan entered promiscuous mode [ 337.123789][ T7224] device veth0_macvtap entered promiscuous mode [ 337.174247][ T7466] loop3: detected capacity change from 0 to 256 [ 337.198306][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 337.214854][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 337.249004][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 337.263692][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 337.273915][ T7224] device veth1_macvtap entered promiscuous mode [ 337.346418][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.371143][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.404785][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.424261][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.435389][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.446228][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.466150][ T7224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.832734][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.071245][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.081516][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.131786][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.791090][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.963645][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.299810][ T7224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.649566][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 339.659533][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 339.668377][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 339.678261][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.695426][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 339.715465][ T387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 339.851203][ T7224] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.359847][ T7493] xt_nat: multiple ranges no longer supported [ 341.135074][ T7224] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.203831][ T7224] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.394555][ T7496] loop3: detected capacity change from 0 to 128 [ 341.445928][ T7224] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.501978][ T7496] ADFS-fs (loop3): unrecognised mount option "uid=0x00000000000000000x0000000000000000" or missing value [ 341.836274][ T1233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.844660][ T1233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.931703][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 342.148259][ T7511] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input22 [ 343.141054][ T7524] loop3: detected capacity change from 0 to 1024 [ 343.211030][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.236728][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.303129][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 345.949815][ T7524] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 345.961377][ T7524] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.110574][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 346.756410][ T7554] xt_nat: multiple ranges no longer supported [ 347.881516][ T7572] loop6: detected capacity change from 0 to 256 [ 347.940977][ T7573] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input23 [ 351.451738][ T7611] loop6: detected capacity change from 0 to 1024 [ 351.713346][ T7611] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 351.724360][ T7611] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.740998][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.832'. [ 352.195101][ T7624] xt_nat: multiple ranges no longer supported [ 353.947182][ T7638] bridge0: port 3(gretap0) entered blocking state [ 353.953738][ T7638] bridge0: port 3(gretap0) entered disabled state [ 353.961343][ T7638] device gretap0 entered promiscuous mode [ 353.967693][ T7638] bridge0: port 3(gretap0) entered blocking state [ 353.974166][ T7638] bridge0: port 3(gretap0) entered forwarding state [ 354.609699][ T7642] loop6: detected capacity change from 0 to 256 [ 354.751006][ T7643] loop4: detected capacity change from 0 to 128 [ 354.908244][ T7643] ADFS-fs (loop4): unrecognised mount option "uid=0x00000000000000000x0000000000000000" or missing value [ 355.689177][ T7653] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input24 [ 356.734266][ T7683] loop4: detected capacity change from 0 to 1024 [ 356.923043][ T7683] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 356.933907][ T7683] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.963406][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.849'. [ 357.217075][ T7690] xt_nat: multiple ranges no longer supported [ 359.459361][ T7706] loop4: detected capacity change from 0 to 256 [ 359.479475][ T7707] loop3: detected capacity change from 0 to 128 [ 359.607312][ T7707] ADFS-fs (loop3): unrecognised mount option "uid=0x00000000000000000x0000000000000000" or missing value [ 359.626661][ T7710] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input25 [ 361.462876][ T4386] udevd[4386]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 361.726884][ T4386] udevd[4386]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 362.204990][ T7748] loop4: detected capacity change from 0 to 1024 [ 362.354624][ T7748] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 362.446452][ T7748] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.616977][ T7748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.864'. [ 365.778095][ T7785] xt_nat: multiple ranges no longer supported [ 366.727766][ T7753] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 368.139473][ T7809] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input26 [ 370.499401][ T7844] loop3: detected capacity change from 0 to 256 [ 370.703067][ T7847] xt_nat: multiple ranges no longer supported [ 374.785978][ T7883] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input27 [ 375.073839][ T7895] loop3: detected capacity change from 0 to 1024 [ 375.223267][ T7895] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 375.274699][ T7895] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.408192][ T7895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.890'. [ 375.886071][ T7912] xt_nat: multiple ranges no longer supported [ 376.226497][ T7919] loop5: detected capacity change from 0 to 256 [ 378.559472][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.787695][ T7959] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input28 [ 382.464698][ T7992] xt_nat: multiple ranges no longer supported [ 383.451318][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.908'. [ 383.508537][ T7998] loop4: detected capacity change from 0 to 256 [ 387.719348][ T8028] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input29 [ 388.448345][ T8043] loop6: detected capacity change from 0 to 128 [ 388.527949][ T8043] ADFS-fs (loop6): unrecognised mount option "uid=0x0000000000000000ÿ0x0000000000000000" or missing value [ 389.037041][ T8058] xt_nat: multiple ranges no longer supported [ 391.753222][ T8091] loop5: detected capacity change from 0 to 1024 [ 391.807777][ T8091] EXT4-fs (loop5): Ignoring removed oldalloc option [ 391.832803][ T8092] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input30 [ 391.881834][ T8091] EXT4-fs (loop5): Ignoring removed orlov option [ 391.980043][ T8091] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001044,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,nojournal_checksum,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 393.175017][ T26] audit: type=1326 audit(1750324050.075:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.5.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457587a929 code=0x7ffc0000 [ 393.265340][ T26] audit: type=1326 audit(1750324050.075:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.5.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457587a929 code=0x7ffc0000 [ 393.313361][ T26] audit: type=1326 audit(1750324050.075:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.5.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f457587a929 code=0x7ffc0000 [ 393.405762][ T26] audit: type=1326 audit(1750324050.075:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.5.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457587a929 code=0x7ffc0000 [ 393.429113][ T26] audit: type=1326 audit(1750324050.075:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.5.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457587a929 code=0x7ffc0000 [ 393.452816][ T26] audit: type=1326 audit(1750324050.075:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.5.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f457587a929 code=0x7ffc0000 [ 393.501220][ T26] audit: type=1326 audit(1750324050.075:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.5.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457587a929 code=0x7ffc0000 [ 393.595924][ T26] audit: type=1326 audit(1750324050.075:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.5.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457587a929 code=0x7ffc0000 [ 393.655903][ T26] audit: type=1326 audit(1750324050.105:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.5.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f457587a929 code=0x7ffc0000 [ 393.793104][ T26] audit: type=1326 audit(1750324050.105:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8108 comm="syz.5.937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f457587a929 code=0x7ffc0000 [ 394.007980][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'. [ 395.414118][ T8140] syz.4.945 (8140): drop_caches: 2 [ 395.419853][ T8140] syz.4.945 (8140): drop_caches: 2 [ 395.970986][ T8149] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input31 [ 398.192064][ T8176] loop3: detected capacity change from 0 to 1024 [ 399.500071][ T8178] loop5: detected capacity change from 0 to 512 [ 400.292985][ T8176] EXT4-fs: failed to create workqueue [ 400.299806][ T8176] EXT4-fs (loop3): mount failed [ 400.306157][ T8178] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 400.479942][ T8178] EXT4-fs (loop5): Unrecognized mount option "seclabel" or missing value [ 400.522968][ T26] kauditd_printk_skb: 69 callbacks suppressed [ 400.522983][ T26] audit: type=1326 audit(1750324057.425:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 400.693503][ T26] audit: type=1326 audit(1750324057.435:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 400.718908][ T26] audit: type=1326 audit(1750324057.435:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 400.741571][ T26] audit: type=1326 audit(1750324057.435:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 400.770828][ T26] audit: type=1326 audit(1750324057.435:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 400.883520][ T26] audit: type=1326 audit(1750324057.435:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 401.039450][ T26] audit: type=1326 audit(1750324057.435:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 401.165649][ T26] audit: type=1326 audit(1750324057.435:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 402.181551][ T8211] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input32 [ 402.232525][ T26] audit: type=1326 audit(1750324057.435:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 402.297654][ T26] audit: type=1326 audit(1750324057.435:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.0.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 402.415254][ T8213] netlink: 256 bytes leftover after parsing attributes in process `syz.0.964'. [ 403.368839][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'. [ 404.373233][ T8256] syz.0.979 (8256): drop_caches: 2 [ 404.415854][ T8256] syz.0.979 (8256): drop_caches: 2 [ 405.261163][ T8264] loop3: detected capacity change from 0 to 2048 [ 405.404598][ T8264] EXT4-fs (loop3): failed to initialize system zone (-117) [ 405.420546][ T8264] EXT4-fs (loop3): mount failed [ 406.696967][ T8297] xt_nat: multiple ranges no longer supported [ 408.172910][ T8314] syz.4.994 (8314): drop_caches: 2 [ 408.231450][ T8314] syz.4.994 (8314): drop_caches: 2 [ 409.294791][ T8333] lo speed is unknown, defaulting to 1000 [ 410.352754][ T8345] ptrace attach of "./syz-executor exec"[4169] was attempted by " [ 410.374270][ T8344] loop4: detected capacity change from 0 to 256 [ 410.664986][ T8355] xt_nat: multiple ranges no longer supported [ 412.194495][ T8368] syz.0.1009 (8368): drop_caches: 2 [ 412.197220][ T8371] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 412.200444][ T8368] syz.0.1009 (8368): drop_caches: 2 [ 412.206565][ T8371] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 412.213690][ T8371] vhci_hcd vhci_hcd.0: Device attached [ 412.315200][ T8375] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 412.321857][ T8375] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 412.406078][ T4215] vhci_hcd: vhci_device speed not set [ 412.460251][ T8375] vhci_hcd vhci_hcd.0: Device attached [ 412.486135][ T4215] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 412.504232][ T8371] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13) [ 412.510894][ T8371] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 412.577785][ T8371] vhci_hcd vhci_hcd.0: Device attached [ 412.594056][ T8375] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(12) [ 412.600721][ T8375] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 412.635757][ T8375] vhci_hcd vhci_hcd.0: Device attached [ 412.662065][ T8371] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(15) [ 412.668724][ T8371] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 412.703366][ T8375] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 412.719914][ T8371] vhci_hcd vhci_hcd.0: Device attached [ 412.925085][ T8375] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(21) [ 412.931749][ T8375] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 412.939728][ T8371] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(19) [ 412.946361][ T8371] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 412.964484][ T8375] vhci_hcd vhci_hcd.0: Device attached [ 412.966582][ T8393] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(27) [ 412.976604][ T8393] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 412.999744][ T8371] vhci_hcd vhci_hcd.0: Device attached [ 413.076043][ T8393] vhci_hcd vhci_hcd.0: Device attached [ 413.209214][ T8371] vhci_hcd vhci_hcd.0: port 0 already used [ 413.255374][ T8394] vhci_hcd: connection closed [ 413.258491][ T8382] vhci_hcd: connection closed [ 413.264152][ T8379] vhci_hcd: connection closed [ 413.271038][ T8376] vhci_hcd: connection closed [ 413.276777][ T8372] vhci_hcd: connection reset by peer [ 413.310372][ T8384] vhci_hcd: connection closed [ 413.310598][ T8386] vhci_hcd: connection closed [ 413.315504][ T8390] vhci_hcd: connection closed [ 413.345977][ T144] vhci_hcd: stop threads [ 413.386511][ T144] vhci_hcd: release socket [ 413.410346][ T144] vhci_hcd: disconnect device [ 413.436005][ T144] vhci_hcd: stop threads [ 413.444768][ T144] vhci_hcd: release socket [ 413.449586][ T144] vhci_hcd: disconnect device [ 413.500054][ T144] vhci_hcd: stop threads [ 413.517147][ T144] vhci_hcd: release socket [ 413.538184][ T144] vhci_hcd: disconnect device [ 413.574881][ T144] vhci_hcd: stop threads [ 413.586963][ T8417] xt_nat: multiple ranges no longer supported [ 413.608490][ T144] vhci_hcd: release socket [ 413.630709][ T144] vhci_hcd: disconnect device [ 413.639319][ T144] vhci_hcd: stop threads [ 413.652084][ T144] vhci_hcd: release socket [ 413.664934][ T144] vhci_hcd: disconnect device [ 413.681076][ T144] vhci_hcd: stop threads [ 413.685381][ T144] vhci_hcd: release socket [ 413.701961][ T144] vhci_hcd: disconnect device [ 413.709592][ T144] vhci_hcd: stop threads [ 413.713887][ T144] vhci_hcd: release socket [ 413.730260][ T144] vhci_hcd: disconnect device [ 413.741942][ T144] vhci_hcd: stop threads [ 413.754803][ T144] vhci_hcd: release socket [ 413.768992][ T144] vhci_hcd: disconnect device [ 414.203389][ T8431] ptrace attach of "./syz-executor exec"[4169] was attempted by " [ 414.645492][ T8438] loop6: detected capacity change from 0 to 256 [ 414.885042][ T8443] loop3: detected capacity change from 0 to 512 [ 414.937850][ T8444] loop4: detected capacity change from 0 to 512 [ 415.024090][ T8444] EXT4-fs (loop4): Ignoring removed bh option [ 415.035931][ T8444] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 415.082714][ T8443] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 415.111476][ T8444] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 415.120782][ T8444] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 415.130428][ T8443] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.286802][ T8444] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 415.343190][ T8444] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 415.740207][ T8444] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 416.070651][ T26] kauditd_printk_skb: 67 callbacks suppressed [ 416.070667][ T26] audit: type=1326 audit(1750324072.975:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 416.120602][ T8464] xt_connbytes: Forcing CT accounting to be enabled [ 416.145406][ T8464] set match dimension is over the limit! [ 416.175279][ T26] audit: type=1326 audit(1750324073.005:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 416.284539][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1026'. [ 416.342722][ T26] audit: type=1326 audit(1750324073.005:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 416.483445][ T26] audit: type=1326 audit(1750324073.005:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 416.612185][ T26] audit: type=1326 audit(1750324073.005:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 416.740816][ T26] audit: type=1326 audit(1750324073.005:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 416.871710][ T26] audit: type=1326 audit(1750324073.005:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 416.965183][ T26] audit: type=1326 audit(1750324073.025:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 417.035969][ T26] audit: type=1326 audit(1750324073.025:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 417.059762][ T26] audit: type=1326 audit(1750324073.025:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8463 comm="syz.3.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 417.490724][ T8464] device hsr_slave_1 left promiscuous mode [ 418.027365][ T8496] netlink: 'syz.4.1033': attribute type 4 has an invalid length. [ 418.075940][ T4215] vhci_hcd: vhci_device speed not set [ 418.428079][ T8511] netlink: 'syz.4.1033': attribute type 4 has an invalid length. [ 418.478301][ T8515] xt_nat: multiple ranges no longer supported [ 418.484465][ T8505] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1036'. [ 418.716872][ T8521] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input33 [ 419.911852][ T8532] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 419.920288][ T7] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 419.964371][ T8532] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 420.102491][ T8547] loop4: detected capacity change from 0 to 256 [ 420.368816][ T7] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 420.463737][ T7] usb usb40-port1: attempt power cycle [ 421.228610][ T7] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 421.676247][ T7] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 422.026415][ T7] usb usb40-port1: unable to enumerate USB device [ 423.790823][ T26] kauditd_printk_skb: 39 callbacks suppressed [ 423.790838][ T26] audit: type=1326 audit(1750324080.695:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 423.886023][ T26] audit: type=1326 audit(1750324080.735:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 423.925352][ T8588] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input34 [ 423.963443][ T26] audit: type=1326 audit(1750324080.735:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 424.043198][ T26] audit: type=1326 audit(1750324080.735:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 424.075433][ T26] audit: type=1326 audit(1750324080.735:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 424.104459][ T26] audit: type=1326 audit(1750324080.735:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 424.129637][ T8597] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1050'. [ 424.133041][ T26] audit: type=1326 audit(1750324080.735:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 424.281548][ T26] audit: type=1326 audit(1750324080.735:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 424.360481][ T26] audit: type=1326 audit(1750324080.735:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 424.573816][ T26] audit: type=1326 audit(1750324080.735:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8583 comm="syz.4.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 425.514113][ T8613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1056'. [ 426.477068][ T8640] syz.6.1062 (8640): drop_caches: 2 [ 426.486220][ T8640] syz.6.1062 (8640): drop_caches: 2 [ 426.938817][ T8647] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input35 [ 427.093622][ T8651] loop4: detected capacity change from 0 to 512 [ 427.171657][ T8658] loop5: detected capacity change from 0 to 512 [ 427.206359][ T8661] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1065'. [ 427.223193][ T8651] EXT4-fs (loop4): Ignoring removed bh option [ 427.238989][ T8651] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 427.292526][ T8651] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 427.310574][ T8658] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 427.393896][ T8658] EXT4-fs (loop5): 1 truncate cleaned up [ 427.407550][ T8651] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 427.444999][ T8658] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000358,resuid=0x0000000000000000,stripe=0x0000000000000009,,errors=continue. Quota mode: none. [ 427.494413][ T8651] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 427.558576][ T8651] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none. [ 429.256226][ T8688] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 430.152576][ T8722] loop6: detected capacity change from 0 to 512 [ 430.236014][ T8722] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 430.278397][ T8726] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input36 [ 430.388986][ T8722] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 430.433691][ T8722] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 430.438171][ T8727] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1083'. [ 430.466168][ T8722] EXT4-fs (loop6): 1 truncate cleaned up [ 430.476618][ T8722] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,quota,,errors=continue. Quota mode: writeback. [ 430.867806][ T8731] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 430.908050][ T8731] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 433.969796][ T8764] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1092'. [ 434.317935][ T8758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1091'. [ 434.554728][ T8772] loop6: detected capacity change from 0 to 1024 [ 435.085663][ T8772] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 435.539811][ T8772] EXT4-fs error (device loop6): __ext4_new_inode:1076: comm syz.6.1096: reserved inode found cleared - inode=18 [ 437.280091][ T4214] Bluetooth: hci5: command 0x0406 tx timeout [ 439.019868][ T8819] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input37 [ 439.414918][ T8825] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1108'. [ 439.465258][ T8826] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1109'. [ 439.943217][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.825166][ T26] kauditd_printk_skb: 50 callbacks suppressed [ 440.825182][ T26] audit: type=1326 audit(1750324097.725:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.6.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71c840929 code=0x7ffc0000 [ 440.915509][ T8842] loop5: detected capacity change from 0 to 512 [ 441.085666][ T8846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1116'. [ 441.103619][ T26] audit: type=1326 audit(1750324097.725:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.6.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff71c840929 code=0x7ffc0000 [ 441.779561][ T26] audit: type=1326 audit(1750324097.725:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.6.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71c840929 code=0x7ffc0000 [ 441.802811][ T26] audit: type=1326 audit(1750324097.725:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.6.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7ff71c840929 code=0x7ffc0000 [ 441.825215][ T26] audit: type=1326 audit(1750324097.725:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8834 comm="syz.6.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71c840929 code=0x7ffc0000 [ 441.848825][ T26] audit: type=1326 audit(1750324097.765:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 441.882100][ T26] audit: type=1326 audit(1750324097.765:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 441.906302][ T26] audit: type=1326 audit(1750324097.765:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 441.929707][ T26] audit: type=1326 audit(1750324097.765:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 441.953039][ T26] audit: type=1326 audit(1750324097.765:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8833 comm="syz.0.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 442.040219][ T8842] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 442.062698][ T8842] EXT4-fs (loop5): invalid journal inode [ 442.072212][ T8842] EXT4-fs (loop5): can't get journal size [ 442.145619][ T8842] EXT4-fs (loop5): 1 truncate cleaned up [ 442.166263][ T8842] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,max_batch_time=0x0000000000000003,,errors=continue. Quota mode: none. [ 445.163982][ T8890] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input38 [ 445.176757][ T8892] xt_nat: multiple ranges no longer supported [ 445.468278][ T8890] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1128'. [ 447.113570][ T8922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1132'. [ 447.243398][ T8921] netlink: 'syz.5.1133': attribute type 21 has an invalid length. [ 447.362904][ T8921] netlink: 'syz.5.1133': attribute type 1 has an invalid length. [ 447.448048][ T8921] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1133'. [ 448.203990][ T8936] syz.5.1136 (8936): drop_caches: 2 [ 448.211475][ T8936] syz.5.1136 (8936): drop_caches: 2 [ 450.198967][ T8956] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input39 [ 450.415988][ T8956] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1143'. [ 450.747862][ T26] kauditd_printk_skb: 115 callbacks suppressed [ 450.747877][ T26] audit: type=1326 audit(1750324107.655:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 450.852312][ T8965] xt_connbytes: Forcing CT accounting to be enabled [ 450.865911][ T8965] set match dimension is over the limit! [ 450.885992][ T26] audit: type=1326 audit(1750324107.695:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 450.955000][ T26] audit: type=1326 audit(1750324107.695:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 451.014498][ T26] audit: type=1326 audit(1750324107.695:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 451.080482][ T26] audit: type=1326 audit(1750324107.695:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 451.104256][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1145'. [ 451.165888][ T26] audit: type=1326 audit(1750324107.705:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 451.600555][ T26] audit: type=1326 audit(1750324107.705:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 451.965853][ T26] audit: type=1326 audit(1750324107.705:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 452.037035][ T26] audit: type=1326 audit(1750324107.705:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 452.104117][ T26] audit: type=1326 audit(1750324107.705:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8964 comm="syz.0.1145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 452.615457][ T8990] syz.3.1150 (8990): drop_caches: 2 [ 452.625954][ T8990] syz.3.1150 (8990): drop_caches: 2 [ 452.883906][ T8997] xt_nat: multiple ranges no longer supported [ 453.113117][ T8999] loop6: detected capacity change from 0 to 128 [ 453.147225][ T8999] ADFS-fs (loop6): unrecognised mount option "uid=0x00000000000000000x0000000000000000" or missing value [ 453.316029][ T9004] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input40 [ 453.457016][ T9005] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1157'. [ 455.067734][ T9023] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1163'. [ 455.312776][ T9028] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1165'. [ 456.350922][ T26] kauditd_printk_skb: 120 callbacks suppressed [ 456.350937][ T26] audit: type=1326 audit(1750324113.255:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 456.391224][ T9028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 456.406012][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1165'. [ 456.438934][ T9045] netlink: 88 bytes leftover after parsing attributes in process `+}[@'. [ 456.459534][ T9032] bond1 (unregistering): Released all slaves [ 456.477387][ T26] audit: type=1326 audit(1750324113.315:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 456.527059][ T26] audit: type=1326 audit(1750324113.315:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 456.565972][ T26] audit: type=1326 audit(1750324113.315:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 456.660785][ T26] audit: type=1326 audit(1750324113.315:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 456.733592][ T26] audit: type=1326 audit(1750324113.325:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 456.805972][ T26] audit: type=1326 audit(1750324113.325:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 456.901422][ T26] audit: type=1326 audit(1750324113.325:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 456.967081][ T26] audit: type=1326 audit(1750324113.325:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="syz.3.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 456.989571][ T26] audit: type=1326 audit(1750324113.325:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9041 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa588df4929 code=0x7ffc0000 [ 458.232177][ T9065] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1176'. [ 458.314061][ T9071] loop4: detected capacity change from 0 to 128 [ 458.412044][ T9071] ADFS-fs (loop4): unrecognised mount option "uid=0x00000000000000000x0000000000000000" or missing value [ 458.449092][ T9073] loop6: detected capacity change from 0 to 2048 [ 458.489765][ T9073] EXT4-fs (loop6): Ignoring removed bh option [ 458.545142][ T9073] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 458.619801][ T9073] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 458.669446][ T9054] loop4: detected capacity change from 0 to 128 [ 458.707740][ T9082] xt_nat: multiple ranges no longer supported [ 458.761330][ T9073] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 458.811754][ T9054] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 458.912006][ T9054] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 458.922897][ T9073] EXT4-fs (loop6): This should not happen!! Data will be lost [ 458.922897][ T9073] [ 459.040975][ T9073] EXT4-fs (loop6): Total free blocks count 0 [ 459.099793][ T9073] EXT4-fs (loop6): Free/Dirty block details [ 459.155879][ T9073] EXT4-fs (loop6): free_blocks=2415919104 [ 459.225450][ T9073] EXT4-fs (loop6): dirty_blocks=16 [ 459.293627][ T9073] EXT4-fs (loop6): Block reservation details [ 459.329938][ T9073] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 461.110108][ T9112] loop6: detected capacity change from 0 to 1024 [ 461.216111][ T9118] ptrace attach of "./syz-executor exec"[4169] was attempted by " [ 462.183006][ T9127] loop5: detected capacity change from 0 to 32768 [ 462.539655][ T9127] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1188 (9127) [ 462.833882][ T9127] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 462.843246][ T9127] BTRFS info (device loop5): enabling ssd optimizations [ 462.850937][ T9127] BTRFS info (device loop5): using spread ssd allocation scheme [ 462.858677][ T9127] BTRFS info (device loop5): using free space tree [ 462.865219][ T9127] BTRFS info (device loop5): has skinny extents [ 466.424650][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 466.424665][ T26] audit: type=1326 audit(1750324123.325:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9200 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 466.528543][ T26] audit: type=1326 audit(1750324123.365:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9200 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 466.556461][ T26] audit: type=1326 audit(1750324123.365:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9200 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 466.586349][ T26] audit: type=1326 audit(1750324123.365:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9200 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 466.622622][ T26] audit: type=1326 audit(1750324123.365:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9200 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 466.690824][ T26] audit: type=1326 audit(1750324123.365:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9200 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 467.408291][ T26] audit: type=1326 audit(1750324123.365:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9200 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 468.059957][ T26] audit: type=1326 audit(1750324123.365:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9200 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 468.163460][ T26] audit: type=1326 audit(1750324123.365:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9200 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 468.201511][ T26] audit: type=1326 audit(1750324123.365:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9200 comm="syz.4.1202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 468.739769][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1209'. [ 468.759243][ T9226] device gretap0 left promiscuous mode [ 468.826498][ T9226] bridge0: port 3(gretap0) entered disabled state [ 468.844836][ T9228] ptrace attach of "./syz-executor exec"[5449] was attempted by " [ 468.914725][ T9226] device bridge_slave_1 left promiscuous mode [ 469.124658][ T9226] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.157409][ T9226] device bridge_slave_0 left promiscuous mode [ 469.186283][ T9226] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.137713][ T9246] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1215'. [ 471.427515][ T9251] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 471.446832][ T9251] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 471.945993][ T9268] xt_nat: multiple ranges no longer supported [ 472.402868][ T9270] syz.4.1219 (9270): drop_caches: 2 [ 472.427960][ T9270] syz.4.1219 (9270): drop_caches: 2 [ 473.936600][ T9276] loop3: detected capacity change from 0 to 1024 [ 473.950442][ T9280] loop5: detected capacity change from 0 to 256 [ 474.512751][ T9276] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 474.960722][ T9276] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.456027][ T9287] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 476.008356][ T9302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1228'. [ 477.267935][ T9321] loop5: detected capacity change from 0 to 128 [ 477.309285][ T9321] ADFS-fs (loop5): unrecognised mount option "uid=0x00000000000000000x0000000000000000" or missing value [ 477.650810][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1234'. [ 479.513412][ T9349] tmpfs: Unknown parameter 'quota' [ 480.571388][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1245'. [ 480.843380][ T9366] loop4: detected capacity change from 0 to 32768 [ 481.559947][ T9366] XFS (loop4): Mounting V5 Filesystem [ 481.844714][ T9385] loop6: detected capacity change from 0 to 1024 [ 482.040869][ T9366] XFS (loop4): Ending clean mount [ 482.056358][ T9366] XFS (loop4): Quotacheck needed: Please wait. [ 482.179573][ T9366] XFS (loop4): Quotacheck: Done. [ 482.209784][ T9385] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 482.392589][ T9385] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.494572][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1240'. [ 484.303898][ T4174] XFS (loop4): Unmounting Filesystem [ 484.386024][ T9406] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input41 [ 484.562819][ T9406] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1254'. [ 484.874972][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1256'. [ 484.994475][ T9418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1255'. [ 486.640320][ T9176] kernel write not supported for file /zero (pid: 9176 comm: kworker/0:16) [ 488.296835][ T9176] Bluetooth: hci3: command 0x0405 tx timeout [ 488.534975][ T9452] loop6: detected capacity change from 0 to 128 [ 488.666353][ T9452] ADFS-fs (loop6): unrecognised mount option "uid=0x00000000000000000x0000000000000000" or missing value [ 488.746862][ T9457] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input42 [ 489.106184][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1269'. [ 489.517636][ T9475] loop6: detected capacity change from 0 to 2048 [ 489.591511][ T9475] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 489.654113][ T9475] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,block_validity,min_batch_time=0x0000000000000007,nobarrier,noblock_validity,dioread_nolock,. Quota mode: writeback. [ 489.675482][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.755953][ T5400] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 489.810784][ T9475] EXT4-fs (loop6): shut down requested (2) [ 490.026164][ T5400] usb 4-1: Using ep0 maxpacket: 16 [ 490.374428][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 491.066798][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1280'. [ 491.073500][ T5400] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 491.084944][ T5400] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.131086][ T5400] usb 4-1: Product: syz [ 491.135408][ T5400] usb 4-1: Manufacturer: syz [ 491.177645][ T5400] usb 4-1: SerialNumber: syz [ 491.198623][ T5400] r8152-cfgselector 4-1: config 0 descriptor?? [ 492.118988][ T5400] r8152-cfgselector 4-1: Unknown version 0x0000 [ 492.134864][ T5400] r8152-cfgselector 4-1: bad CDC descriptors [ 492.186653][ T5400] r8152-cfgselector 4-1: Unknown version 0x0000 [ 492.271573][ T5400] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 492.362872][ T9519] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1283'. [ 492.520382][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 492.520397][ T26] audit: type=1326 audit(1750324149.425:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 492.595426][ T26] audit: type=1326 audit(1750324149.455:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 492.671584][ T26] audit: type=1326 audit(1750324149.455:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 492.723559][ T26] audit: type=1326 audit(1750324149.455:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 492.770823][ T26] audit: type=1326 audit(1750324149.455:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 492.793206][ C0] vkms_vblank_simulate: vblank timer overrun [ 492.894545][ T26] audit: type=1326 audit(1750324149.455:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 492.917575][ T26] audit: type=1326 audit(1750324149.455:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 492.940404][ T26] audit: type=1326 audit(1750324149.455:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 492.971986][ T26] audit: type=1326 audit(1750324149.455:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 493.519079][ T26] audit: type=1326 audit(1750324149.455:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.4.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd8fd2929 code=0x7ffc0000 [ 494.024453][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 494.785010][ T9555] loop3: detected capacity change from 0 to 1024 [ 494.889275][ T9555] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 494.900019][ T9555] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.919752][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1293'. [ 496.821081][ T9578] loop4: detected capacity change from 0 to 128 [ 496.868648][ T9578] ADFS-fs (loop4): unrecognised mount option "uid=0x00000000000000000x0000000000000000" or missing value [ 498.137842][ T9600] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1307'. [ 498.511132][ T9605] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input43 [ 499.389102][ T9619] ptrace attach of "./syz-executor exec"[4169] was attempted by ""[9619] [ 501.378925][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.704293][ T9645] loop4: detected capacity change from 0 to 1024 [ 502.118499][ T9645] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 502.129535][ T9645] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 502.195562][ T9652] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input44 [ 502.227249][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1316'. [ 502.410388][ T9657] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1322'. [ 504.877957][ T9700] device hsr0 entered promiscuous mode [ 504.888602][ T9701] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input45 [ 504.928327][ T9700] device macvtap1 entered promiscuous mode [ 504.975250][ T9700] device hsr0 left promiscuous mode [ 506.113383][ T9721] loop4: detected capacity change from 0 to 1024 [ 506.223875][ T9721] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 506.234662][ T9721] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.253796][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1336'. [ 506.304546][ T9725] loop3: detected capacity change from 0 to 1024 [ 506.966969][ T9733] xt_nat: multiple ranges no longer supported [ 508.577680][ T9650] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 509.171028][ T26] kauditd_printk_skb: 68 callbacks suppressed [ 509.171045][ T26] audit: type=1326 audit(1750324166.075:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9722 comm="syz.3.1339" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa588df4929 code=0x0 [ 509.320831][ T9745] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input46 [ 509.456885][ T4251] udevd[4251]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 509.486304][ T9748] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1346'. [ 510.233491][ T9773] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1350'. [ 510.706880][ T9788] xt_nat: multiple ranges no longer supported [ 512.549598][ T9797] loop5: detected capacity change from 0 to 40427 [ 512.719835][ T9797] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 512.727728][ T9797] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 512.752953][ T9797] F2FS-fs (loop5): invalid crc value [ 512.777348][ T9797] F2FS-fs (loop5): Found nat_bits in checkpoint [ 512.973661][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1360'. [ 513.149288][ T9797] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 513.157207][ T9797] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 514.323674][ T5449] attempt to access beyond end of device [ 514.323674][ T5449] loop5: rw=2049, want=40968, limit=40427 [ 515.846096][ T9828] device hsr0 entered promiscuous mode [ 515.851769][ T9828] device macvtap1 entered promiscuous mode [ 516.786018][ T9828] device hsr0 left promiscuous mode [ 517.198327][ T9842] xt_nat: multiple ranges no longer supported [ 518.209166][ T9851] loop5: detected capacity change from 0 to 4096 [ 522.320205][ T26] audit: type=1326 audit(1750324179.225:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9871 comm="syz.0.1380" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f973424f929 code=0x0 [ 523.086786][ T9885] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1377'. [ 523.202546][ T9887] xt_nat: multiple ranges no longer supported [ 525.013510][ T9910] loop3: detected capacity change from 0 to 1024 [ 526.656961][ T9910] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 526.667832][ T9910] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.694482][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1387'. [ 528.248441][ T9935] syz.3.1393 (9935): drop_caches: 2 [ 528.255549][ T9935] syz.3.1393 (9935): drop_caches: 2 [ 529.353751][ T26] audit: type=1326 audit(1750324186.255:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.6.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71c840929 code=0x7ffc0000 [ 529.451778][ T26] audit: type=1326 audit(1750324186.255:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.6.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7ff71c840929 code=0x7ffc0000 [ 529.493083][ T26] audit: type=1326 audit(1750324186.255:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.6.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71c840929 code=0x7ffc0000 [ 529.533680][ T26] audit: type=1326 audit(1750324186.255:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.6.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff71c840929 code=0x7ffc0000 [ 529.561489][ T26] audit: type=1326 audit(1750324186.255:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.6.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71c840929 code=0x7ffc0000 [ 529.604625][ T26] audit: type=1326 audit(1750324186.265:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.6.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff71c840929 code=0x7ffc0000 [ 529.695884][ T26] audit: type=1326 audit(1750324186.265:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.6.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71c840929 code=0x7ffc0000 [ 529.719320][ T26] audit: type=1326 audit(1750324186.265:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.6.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff71c840929 code=0x7ffc0000 [ 529.742017][ T26] audit: type=1326 audit(1750324186.265:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.6.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71c840929 code=0x7ffc0000 [ 529.764933][ T26] audit: type=1326 audit(1750324186.265:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.6.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff71c840929 code=0x7ffc0000 [ 532.308235][ T9990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1404'. [ 534.260199][T10014] loop3: detected capacity change from 0 to 32768 [ 534.306557][T10014] XFS: ikeep mount option is deprecated. [ 534.608068][T10032] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1425'. [ 534.638358][T10014] XFS (loop3): Mounting V5 Filesystem [ 537.852586][T10014] XFS (loop3): Ending clean mount [ 537.861683][T10014] XFS (loop3): Quotacheck needed: Please wait. [ 537.923035][ T26] kauditd_printk_skb: 92 callbacks suppressed [ 537.923050][ T26] audit: type=1326 audit(1750324194.825:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 537.988266][ T26] audit: type=1326 audit(1750324194.885:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 538.014287][T10014] XFS (loop3): Quotacheck: Done. [ 538.122874][ T4169] XFS (loop3): Unmounting Filesystem [ 538.189968][ T26] audit: type=1326 audit(1750324194.895:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 538.212996][ T26] audit: type=1326 audit(1750324194.895:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 538.259830][ T26] audit: type=1326 audit(1750324194.895:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 538.344896][ T26] audit: type=1326 audit(1750324194.895:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 538.492557][ T26] audit: type=1326 audit(1750324194.895:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 538.518217][ T26] audit: type=1326 audit(1750324194.895:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 538.543078][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1432'. [ 538.568509][ T26] audit: type=1326 audit(1750324194.895:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 538.600155][ T26] audit: type=1326 audit(1750324194.895:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10055 comm="syz.0.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 539.767684][T10079] loop4: detected capacity change from 0 to 128 [ 539.810816][T10079] ADFS-fs (loop4): unrecognised mount option "uid=0x00000000000000000x0000000000000000" or missing value [ 539.980377][T10079] loop4: detected capacity change from 0 to 128 [ 540.035269][T10079] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 540.057072][T10083] loop3: detected capacity change from 0 to 256 [ 540.075086][T10079] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 541.059503][T10095] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1443'. [ 543.202467][T10113] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1449'. [ 543.882055][T10130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1455'. [ 543.998879][T10133] loop4: detected capacity change from 0 to 1024 [ 544.897722][T10133] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 544.939589][T10133] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.100835][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1454'. [ 545.186040][T10150] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1451'. [ 546.940861][T10160] syz.3.1460 (10160): drop_caches: 2 [ 547.034776][T10160] syz.3.1460 (10160): drop_caches: 2 [ 547.366063][ T26] kauditd_printk_skb: 73 callbacks suppressed [ 547.366080][ T26] audit: type=1326 audit(1750324204.275:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.0.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 547.438173][ T26] audit: type=1326 audit(1750324204.275:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10146 comm="syz.0.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f973424f929 code=0x7ffc0000 [ 547.501432][T10164] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1464'. [ 547.789172][T10171] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1466'. [ 550.474742][T10203] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1477'. [ 550.644952][T10209] loop3: detected capacity change from 0 to 1024 [ 551.273110][T10209] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 551.283893][T10209] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.304354][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1478'. [ 551.497150][T10226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1486'. [ 553.440407][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1495'. [ 554.607224][T10285] syz.0.1500 (10285): drop_caches: 2 [ 554.615858][T10285] syz.0.1500 (10285): drop_caches: 2 [ 555.258649][T10283] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1502'. [ 556.438094][T10303] loop5: detected capacity change from 0 to 1024 [ 556.568446][T10303] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 556.579513][T10303] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.600721][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1506'. [ 558.695837][ T9170] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 559.542644][T10342] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1516'. [ 560.469073][T10353] loop3: detected capacity change from 0 to 1024 [ 560.575402][T10353] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 560.586728][T10353] ext4 filesystem being mounted at /307/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.607886][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1520'. [ 560.801926][T10362] x_tables: duplicate underflow at hook 1 [ 560.871699][ T9170] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 560.885868][ T9170] usb 6-1: can't read configurations, error -71 [ 561.046030][ T9173] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 561.335869][ T9173] usb 1-1: Using ep0 maxpacket: 32 [ 561.469244][ T9173] usb 1-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 561.491816][ T9173] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.204312][ T9173] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 562.317662][ T9173] usb 1-1: config 0 interface 0 has no altsetting 0 [ 562.327657][ T9173] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 562.344782][ T9173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.357642][ T9173] usb 1-1: config 0 descriptor?? [ 562.821116][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.892920][ T9173] zeroplus 0003:0C12:0030.0001: hidraw0: USB HID v0.03 Device [HID 0c12:0030] on usb-dummy_hcd.0-1/input0 [ 562.904831][ T9173] zeroplus 0003:0C12:0030.0001: no inputs found [ 562.925871][ T9170] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 563.087545][T10358] udc-core: couldn't find an available UDC or it's busy [ 563.111839][T10358] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 563.302306][ T5400] usb 1-1: USB disconnect, device number 5 [ 563.375980][ T9170] usb 6-1: Using ep0 maxpacket: 16 [ 563.506087][ T9170] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.706003][ T9170] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 563.735788][ T9170] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.808670][ T9170] usb 6-1: Product: syz [ 563.814188][ T9170] usb 6-1: Manufacturer: syz [ 563.832591][ T9170] usb 6-1: SerialNumber: syz [ 563.839414][ T9170] usb 6-1: config 0 descriptor?? [ 563.878230][ T9170] ims_pcu 6-1:0.0: Zero length descriptor [ 563.884051][ T9170] ims_pcu: probe of 6-1:0.0 failed with error -22 [ 564.141089][ T5400] usb 6-1: USB disconnect, device number 4 [ 566.116003][ T9170] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 566.426164][ T9170] usb 6-1: Using ep0 maxpacket: 32 [ 566.555909][ T9170] usb 6-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 566.571045][ T9170] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.600364][ T9170] usb 6-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 566.634192][ T9170] usb 6-1: config 0 interface 0 has no altsetting 0 [ 566.654429][ T9170] usb 6-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 566.676957][ T9170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.859207][ T9170] usb 6-1: config 0 descriptor?? [ 567.336738][ T9170] zeroplus 0003:0C12:0030.0002: hidraw0: USB HID v0.03 Device [HID 0c12:0030] on usb-dummy_hcd.5-1/input0 [ 567.374833][ T9170] zeroplus 0003:0C12:0030.0002: no inputs found [ 567.563458][ T4218] usb 6-1: USB disconnect, device number 5 [ 568.276027][ T9170] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 568.522299][T10463] loop4: detected capacity change from 0 to 128 [ 568.550980][T10463] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 568.560962][ T9170] usb 1-1: Using ep0 maxpacket: 32 [ 568.798949][ T9170] usb 1-1: config 0 has an invalid interface number: 235 but max is 0 [ 568.813150][ T9170] usb 1-1: config 0 has no interface number 0 [ 570.339848][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1560'. [ 570.350542][ T9170] usb 1-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 571.598846][ T9170] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.624679][ T9170] usb 1-1: Product: syz [ 571.686548][ T9170] usb 1-1: Manufacturer: syz [ 571.699477][ T9170] usb 1-1: SerialNumber: syz [ 571.715224][ T9170] usb 1-1: config 0 descriptor?? [ 571.765969][ T9170] usb 1-1: can't set config #0, error -71 [ 571.803522][ T9170] usb 1-1: USB disconnect, device number 6 [ 573.311413][T10510] loop4: detected capacity change from 0 to 4096 [ 576.125882][ T1108] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 576.177042][T10537] fuse: Bad value for 'rootmode' [ 576.486456][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.498531][ T1108] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 576.508657][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.577498][ T1108] usb 1-1: config 0 descriptor?? [ 576.845893][T10548] netlink: 'syz.6.1576': attribute type 10 has an invalid length. [ 576.965966][ T1108] ath6kl: Failed to submit usb control message: -71 [ 576.972659][ T1108] ath6kl: unable to send the bmi data to the device: -71 [ 576.988223][T10548] team0: Port device wlan1 added [ 576.993217][ T1108] ath6kl: Unable to send get target info: -71 [ 577.067741][ T1108] ath6kl: Failed to init ath6kl core: -71 [ 577.160025][ T1108] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 577.176501][T10552] IPv6: Can't replace route, no match found [ 577.225597][ T1108] usb 1-1: USB disconnect, device number 7 [ 577.404210][T10556] loop4: detected capacity change from 0 to 1024 [ 577.502227][T10556] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 578.475263][T10571] loop3: detected capacity change from 0 to 1024 [ 578.752247][T10572] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1582'. [ 578.762644][T10571] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 578.773720][T10571] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.790915][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1581'. [ 578.851906][T10581] xt_nat: multiple ranges no longer supported [ 579.209920][T10582] loop5: detected capacity change from 0 to 32768 [ 579.301040][T10572] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1582'. [ 579.570163][ T4251] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (4251) [ 579.900231][ T9169] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 579.975862][ T9180] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 580.155867][ T9169] usb 4-1: Using ep0 maxpacket: 16 [ 580.561688][ T9180] usb 6-1: Using ep0 maxpacket: 16 [ 580.769353][ T9169] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 580.783685][ T9169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.812152][ T9169] usb 4-1: config 0 descriptor?? [ 580.866540][ T9180] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.910127][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1597'. [ 580.974473][ T9180] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 581.022200][ T9169] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 581.098015][ T9180] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.319025][ T9180] usb 6-1: config 0 descriptor?? [ 582.052692][ T9180] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 582.183098][ T9180] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 582.209134][ T9180] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 582.265792][ T9180] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 582.305814][ T9180] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 582.313395][ T9180] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 582.486711][T10635] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 582.498495][T10635] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 582.506953][T10635] CPU: 1 PID: 10635 Comm: syz.5.1589 Not tainted 5.15.185-syzkaller #0 [ 582.515250][T10635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 582.525349][T10635] RIP: 0010:mcp_smbus_xfer+0x59/0x1080 [ 582.530859][T10635] Code: c3 a8 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 46 90 67 fa 48 8b 1b 48 89 d8 48 c1 e8 03 48 89 44 24 08 <42> 80 3c 38 00 74 08 48 89 df e8 28 90 67 fa 4c 8b 3b 4d 8d a7 70 [ 582.550509][T10635] RSP: 0018:ffffc90003a979a0 EFLAGS: 00010246 [ 582.556609][T10635] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 582.564611][T10635] RDX: ffffc90016393000 RSI: 0000000000000bdc RDI: 0000000000000bdd [ 582.572722][T10635] RBP: 00000000000000c9 R08: 00000000000000c9 R09: 0000000000000008 [ 582.580721][T10635] R10: fffffbfff1ad157e R11: 1ffffffff1ad157d R12: dffffc0000000000 [ 582.588716][T10635] R13: 0000000000000000 R14: 0000000000000008 R15: dffffc0000000000 [ 582.596711][T10635] FS: 00007f45736c16c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 582.605667][T10635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 582.612279][T10635] CR2: 000000110c40b92e CR3: 000000004e589000 CR4: 00000000003506e0 [ 582.620280][T10635] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 582.628269][T10635] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 582.636256][T10635] Call Trace: [ 582.639559][T10635] [ 582.642516][T10635] __i2c_smbus_xfer+0x733/0x1d50 [ 582.647484][T10635] ? mcp_i2c_xfer+0x420/0x420 [ 582.652197][T10635] ? i2c_smbus_write_i2c_block_data+0x1a0/0x1a0 [ 582.658462][T10635] ? rt_mutex_lock_nested+0x15a/0x1c0 [ 582.663861][T10635] ? i2c_smbus_xfer+0x11d/0x3a0 [ 582.668818][T10635] ? rwsem_down_read_slowpath+0x990/0x990 [ 582.674566][T10635] ? __might_fault+0xb7/0x110 [ 582.679265][T10635] i2c_smbus_xfer+0x263/0x3a0 [ 582.683965][T10635] ? i2c_smbus_read_byte+0x1b0/0x1b0 [ 582.689269][T10635] ? __might_fault+0xb3/0x110 [ 582.693967][T10635] i2cdev_ioctl_smbus+0x3e3/0x650 [ 582.699020][T10635] ? i2cdev_ioctl_rdwr+0x6c0/0x6c0 [ 582.704170][T10635] ? __might_fault+0xb3/0x110 [ 582.708885][T10635] ? _copy_from_user+0x111/0x170 [ 582.713845][T10635] i2cdev_ioctl+0x545/0x750 [ 582.718378][T10635] ? i2cdev_write+0x120/0x120 [ 582.723087][T10635] ? bpf_lsm_file_ioctl+0x5/0x10 [ 582.728044][T10635] ? security_file_ioctl+0x7c/0xa0 [ 582.733178][T10635] ? i2cdev_write+0x120/0x120 [ 582.737875][T10635] __se_sys_ioctl+0xfa/0x170 [ 582.742504][T10635] do_syscall_64+0x4c/0xa0 [ 582.746933][T10635] ? clear_bhb_loop+0x30/0x80 [ 582.751627][T10635] ? clear_bhb_loop+0x30/0x80 [ 582.756329][T10635] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 582.762267][T10635] RIP: 0033:0x7f457587a929 [ 582.766716][T10635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.786337][T10635] RSP: 002b:00007f45736c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 582.794792][T10635] RAX: ffffffffffffffda RBX: 00007f4575aa2080 RCX: 00007f457587a929 [ 582.802797][T10635] RDX: 00002000000000c0 RSI: 0000000000000720 RDI: 0000000000000004 [ 582.810793][T10635] RBP: 00007f45758fcb39 R08: 0000000000000000 R09: 0000000000000000 [ 582.818788][T10635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.826785][T10635] R13: 0000000000000000 R14: 00007f4575aa2080 R15: 00007ffe0a1a2788 [ 582.834797][T10635] [ 582.837846][T10635] Modules linked in: [ 582.866411][ T9169] gspca_sonixj: reg_w1 err -71 [ 582.895362][T10635] ---[ end trace 9069364b1d633c21 ]--- [ 582.906031][ T9169] sonixj: probe of 4-1:0.0 failed with error -71 [ 582.908211][T10635] RIP: 0010:mcp_smbus_xfer+0x59/0x1080 [ 582.918414][T10635] Code: c3 a8 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 46 90 67 fa 48 8b 1b 48 89 d8 48 c1 e8 03 48 89 44 24 08 <42> 80 3c 38 00 74 08 48 89 df e8 28 90 67 fa 4c 8b 3b 4d 8d a7 70 [ 582.931974][ T9169] usb 4-1: USB disconnect, device number 5 [ 582.946872][T10635] RSP: 0018:ffffc90003a979a0 EFLAGS: 00010246 [ 582.969985][T10635] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 582.984851][T10635] RDX: ffffc90016393000 RSI: 0000000000000bdc RDI: 0000000000000bdd [ 582.993201][T10635] RBP: 00000000000000c9 R08: 00000000000000c9 R09: 0000000000000008 [ 583.003231][T10635] R10: fffffbfff1ad157e R11: 1ffffffff1ad157d R12: dffffc0000000000 [ 583.011654][T10635] R13: 0000000000000000 R14: 0000000000000008 R15: dffffc0000000000 [ 583.021710][T10635] FS: 00007f45736c16c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 583.031348][T10635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 583.040090][T10635] CR2: 00007ff71ca33178 CR3: 000000004e589000 CR4: 00000000003506e0 [ 583.048443][T10635] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 583.058366][T10635] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 583.067767][T10635] Kernel panic - not syncing: Fatal exception [ 583.074149][T10635] Kernel Offset: disabled [ 583.078477][T10635] Rebooting in 86400 seconds..