last executing test programs: 6m47.957486165s ago: executing program 3 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 6m46.172289346s ago: executing program 3 (id=392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x65}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000005480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/122, 0x7a}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000001240)=""/4096, 0x1000}], 0x1}, 0x8}], 0x2, 0x40012001, 0x0) 6m44.524648616s ago: executing program 3 (id=399): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x12, 0x3, 0x3c}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) 6m43.513166862s ago: executing program 3 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x11dc, &(0x7f0000001280)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eexBHTNR2l3hYdDewfD6X/OD3vuQ9BgbeMG/23/jq40Gvynr5NNbOnIm1cUR6kCLFWvzt83j19R9/euHWnbs32p3O9s2Urrdvt15LKW28+P17n37z0g/Ti+9+u/Hd+djbfH//161f9i7vXdn//fZH/Sr1qzQcTVOe7o1G0/xeWaSdfjXIUnqnLPKqSP1hVUwO9HvlaDyepXy4s94YT4qqSvlwlgbFLE1HaTqZpfzDvD9MWZal9UbwX3S/flDXdURdPx7noq7r+oloxMV4MtZjI5qxGU/F0/FMXIpn43I8F8/HlfmoVc8bAAAAAAAAAAAAAAAAAAAAThfn/wEAAAAAAAAAAAAAAAAAAGD1bt25e6Pd6WzfTOlCRPnlbne3u/hd9Nu96EcZRVyLZvwW89P/C4v6+lud7WtpbjO+KO//lb+/233sYL41/5zA0nxrkU8H8+ej8Wh+K5pxaXl+a2n+Qrzy8iP5LJrx8wcxijJ24s/sw/xnrZTefLtzKH91Pg4AAABOgyz9Y+n+Pcv+rb/IH+H5wKH99dm4ena1ayeimn0yyMuymBxbcS6O/S8UCsX/XKz6zsRJeHjRVz0TAAAAAAAAAAAAjuIkXidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8xgdSv") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 6m41.980983441s ago: executing program 3 (id=414): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r2 = eventfd2(0x0, 0x0) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f0000000240)={0x73, 0x0, 0x7, 0x3, 0x3, 0x87b1, 0x100, 0x5}, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) io_getevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0) shutdown(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6m38.627697662s ago: executing program 3 (id=423): mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) stat(&(0x7f0000000240)='./bus\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x5]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) lchown(&(0x7f0000000180)='./bus\x00', r0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) 6m38.453714513s ago: executing program 32 (id=423): mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) stat(&(0x7f0000000240)='./bus\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x5]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) lchown(&(0x7f0000000180)='./bus\x00', r0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) 6m36.886917973s ago: executing program 0 (id=434): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000380)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100b, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6m36.587536154s ago: executing program 0 (id=437): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x2000)=nil) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$cramfs(&(0x7f0000000240), &(0x7f00000006c0)='./file1\x00', 0x8080, &(0x7f0000000c40)=ANY=[@ANYRES32=0x0, @ANYBLOB="961335493e171b87c5049661bc7a9dea85b0b96318f3a46c58525ebc3d0eb9ce96ac44b1d9a749f3ab7e759eff20dc0185dafc139ec785c31ae931023ad12b85c435475f8f724c4ee1329bd7bb7bb9e041f690b5cc745f75f91812f706841d08affa58f76342d7042588429261122e77ffb7828fa3d7ff668389ecdf6b9325ad15bc18a8f91df650262caa1ba865c2c41df8ea0ebfa761195cac8427b2bb312c0fa051cda8c0dd0328b36624744332fe1c7211f5565e2068fd28b30a36962cb2dec9ae6c9bed13a01ed3d029661f9550fabf581952c0b5c28f26c0fa94ac0bb7eed7642f514ce5c6b7c71813fd", @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0xfe, 0x14f, &(0x7f0000000ac0)="$eJzszjFLclEcx/Hf4d5HfSqToMCCTGjokph2w5qiNBKE7ELh0lJgNxIUI6Gcwoi2hqDVwQqaxLdgWYulEPYmWpwdi+M1Imhp/32Wy/mec/7nri42NXiBExe6VrKZg0MzlzN3vRtGPLr5Xq2GZbcB6PzYt87fh4F9+VWB9ikg86MT2EulzZlkNi3X7TCgAYj0Y1n2oGxDQJ9sw9bZWVj3tUmgNmI1/Zc212tjKhBxWU3O+7gGpuQ8O4BU2rRbv4d80VcpP6836jH/9N24gvOYb+Jfb++re8wLPTp6O+BWkDCfbhAR8t5boO5/DVTKrWYjvmYsAdD1eQEUgqGW8dKIhQqXULftR8CWAAS+37HB7VETDpwJ4Ko7q/0gnABqpY6RGVwo9d53HCteQOSLyR1Frv8DigYBIiIiIiIiIiIiIiIiIiKiv/oMAAD//2BhXwk=") open(&(0x7f0000000340)='./file3\x00', 0x0, 0xa2) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) mknodat$loop(r1, &(0x7f0000000480)='./file1\x00', 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') 6m36.131802537s ago: executing program 0 (id=439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x2a, 0x2, 0x6e2, &(0x7f0000000240)) 6m34.924935125s ago: executing program 0 (id=441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 6m32.807165448s ago: executing program 0 (id=445): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) setpgid(0x0, r2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 6m32.547300039s ago: executing program 0 (id=447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0xffd, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 6m16.991380805s ago: executing program 33 (id=447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x2, &(0x7f0000000040)=0xffd, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 5m30.886054618s ago: executing program 1 (id=695): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0x25d}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x20000000000002, 0x2) read$eventfd(r1, &(0x7f0000000100), 0x8) read$FUSE(r2, &(0x7f00000048c0)={0x2020}, 0x2020) 5m29.750591005s ago: executing program 1 (id=703): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x9}]}, 0x20}}, 0x0) 5m28.717699742s ago: executing program 1 (id=708): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r1, 0x2000) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_aout(r2, 0x0, 0xffffffdb) 5m26.009622278s ago: executing program 1 (id=725): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f0000000d00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRESHEX, @ANYBLOB="b5aeb8ee41283894d3a92a5f2e938d001e75134a6c84b5af394f7acfd82e32c798c8b845b9669f24699212cd02e80152f05442f604af4273f7da7d6056123abc53d651b4bca585c211a7", @ANYRESDEC], 0x0, 0x2ba, &(0x7f0000000e00)="$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") setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 5m24.355748398s ago: executing program 1 (id=719): ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, 0x0) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c0035742bbd7000fedbdf2502000000", @ANYRES32=r2, @ANYBLOB="1e002606080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000004) r4 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 5m22.675531049s ago: executing program 1 (id=734): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) sendfile(r3, r1, 0x0, 0x10000a007) 5m22.540902189s ago: executing program 34 (id=734): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e) sendfile(r3, r1, 0x0, 0x10000a007) 12.269440465s ago: executing program 6 (id=2134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 11.804076897s ago: executing program 2 (id=2135): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0xacf0165) getrlimit(0x8, &(0x7f0000000040)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x22}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) lseek(r2, 0xff, 0x0) getdents64(r2, 0xffffffffffffffff, 0x18) rt_sigsuspend(&(0x7f0000000040), 0x8) 11.220100391s ago: executing program 6 (id=2139): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, 0x0, 0x0, &(0x7f00000001c0)) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r5, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800026e"], 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 10.660586184s ago: executing program 2 (id=2140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_open_procfs(0xffffffffffffffff, 0x0) rt_sigaction(0x40, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 9.87217247s ago: executing program 6 (id=2143): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendto$inet6(r2, &(0x7f00000003c0)='\x00', 0xffffffffffffffd5, 0x20044010, 0x0, 0x0) 9.270370643s ago: executing program 6 (id=2146): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x85, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x2, 0x0, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xce, 0xf1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x6, 0x3, 0x8, 0x0, "c80a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x7, 0x3, {0x7, 0x25, 0x1, 0x84, 0x7, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6, 0x4, 0x23, 0x3, 'F3'}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x0, 0x67, 0x5, {0x7, 0x25, 0x1, 0x3, 0x7, 0x100}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x18800000000000, 0x4, 0xfffffffffffffffd, 0x669a, 0x1, 0x6, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x2800000000000, 0x6, 0x3, 0x0, 0x7fbfffff}, 0x0, 0x0) 6.671550319s ago: executing program 2 (id=2151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x370, 0x370, 0x0, 0xd0, 0x370, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0xff, 0xff000000], [0x0, 0xff000000], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x8, 0x7}, {}, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3ff}}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0x0, 0xff], [], 'bond_slave_1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4, 0x0, 0x2b}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'geneve1\x00', 'team_slave_1\x00', {0xff}, {}, 0x32, 0x9, 0x1, 0x40}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x24, 0x1}, {0x4, 0x4}, {0x2, 0x5, 0x5}, 0x4, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 6.110673582s ago: executing program 7 (id=2153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xffffffffffffffff, 0xee01, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r3, 0xa3, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.89172753s ago: executing program 4 (id=2154): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 4.82350712s ago: executing program 7 (id=2155): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) mkdir(&(0x7f0000000240)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 4.653807221s ago: executing program 7 (id=2156): epoll_create1(0x0) r0 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc144) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r2) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x96dba90eafc0151d) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(r0, &(0x7f0000000100)='pagemap\x00') syz_read_part_table(0x1062, &(0x7f0000000000)="$eJzsz7FNBDEUBNC503rtDUgIth6agDYgJYJ6KICAapCgCqSVkQ01wAXvBSP90ciSw78qSbYl9/t1r+lr8vg6u9PbyBy997n7vBq5j6hrS2pOs/96LslNknUb51Pej9+Xl6TlfG4lbd41pedhrO7qz+Ijty9//2MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuDzfAQAA//83nRHZ") pread64(r4, 0x0, 0x0, 0x1000000000) syz_usb_disconnect(0xffffffffffffffff) 4.315636134s ago: executing program 2 (id=2157): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x64, 0x0, 0x0, &(0x7f0000000200), 0x100}, 0x40000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x6, 0xb}, 0x50) 4.280250063s ago: executing program 5 (id=2158): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000050c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x1d3c, 0xc, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x98, 0x3, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffffff35}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @nat={{0x8}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x59b7745f}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1ea90000}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x98a}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c48, 0x3, 0x0, 0x1, [{0x388, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x69, 0x6, 0x1, 0x0, "078318ed488210fdbdd4af80728f7865e46834a37df9a8295173b69a0d883499ffb3b23c20bbfca170a240c6dfb782164243a98d116a284d25972d1afc7f182d062e25224895cc301f13400d5e5b1c834b19ca495001a00ac64ffcee471630091843670884"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x168, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb1, 0x1, "39a0b61fa0f9d0df9650362287045d562d2ee70c93996e6715cf7da36ee63f4cf9ccc0a4cdad2ad89571644b0938b0acf8849831f9a9cf9f452d428ec48273ef76ce19b685e0393ddf5cebc869655b29a3d7e2e0a9d105bf4e7244c2fc330c1001a5c3262c2910c403f30eaca14455d297a2318a4ca567d8eac2918476e5ab2c2a06907557182de02c96c768195888f0e25c8c00e2706bb67c631edc36770ee354aa634276f431dade8b5fff54"}, @NFTA_DATA_VALUE={0x65, 0x1, "52539d1edb69ffb853fbe82eed75b37eec416c2ed5e470e56027fc6f4973c599812d36033f55955c73f302e805d694d241626c1932bea1cf11448f026464aba49b3fefcb67f2f54da27c414b4a6d724e249b54c7ccfdc56c4ac95930b8a903268a"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPR={0x19c, 0x7, 0x0, 0x1, @dynset={{0xb}, @val={0x18c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPR={0x1c, 0x7, 0x0, 0x1, {{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}}}, @NFTA_DYNSET_EXPRESSIONS={0x4c, 0xa, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}]}}}]}, @NFTA_DYNSET_EXPR={0x38, 0x7, 0x0, 0x1, {{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DYNSET_EXPRESSIONS={0x3c, 0xa, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_OSF_TTL={0x5, 0x2, 0xdd}, @NFTA_OSF_FLAGS={0x8}]}}}]}, @NFTA_DYNSET_EXPRESSIONS={0x10, 0xa, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_EXPRESSIONS={0x88, 0xa, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x5c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x30}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x34}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xaab3d1f570d0388a}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_MASQ_FLAGS={0x8}]}}}]}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x1834, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1338, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x37, 0x1, "c34f45898ced3577ef72c67b89acd32c6ef47bcab448de345d21da6fcafbf9078fa449cb751fabc9a6139076e9b495a56e8158"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x25, 0x1, "bee8d7593c9b44446c92524b4c78b145ac3367b3a374bc3aa0521cbf2d3c9e7d73"}, @NFTA_DATA_VALUE={0x63, 0x1, "a2b8ff8e12f9e40c4244df5c6d930fff6b7807ce295c940f5a0767fdc79a0d6f70518581997880dce02347cb29702515c80610c6bb019e7bbcef97d4b45f89fa9409eb5febba0888d0eb1c0dcbc6bc27ca42915c1cfd1c1f537417e5826ebf"}, @NFTA_DATA_VALUE={0x7f, 0x1, "49eab0634bc9e0ccdbf977f48c326c5e6b12f91c32cf4453e8a1f86ecbd5d0e5e433eead1f9e1485a93a670afe5e70c9d3118451ac03369cdceab547edb43701db20b8a861a27554dff51d131e456bf7d23f011d7a87ddcd926e76bec5dcdd12b546cbe21040b0ede34c81fe87e561decc24b93d378817b6ef5cc6"}, @NFTA_DATA_VALUE={0xb5, 0x1, "caee64db169136bf339dbdc8b0ed1460e6168b98bee4de6deea74f33e4ba2a09d5dc947874c9dfef7e72205d72f8611fe6371c79572cc42d2e1b3cd38f3a4c19ee4b8dc564aa4177870c75fb56b8ff73bf9df9b250eb1edec8a2787b75a929c568cdb56d9a574dd39e28c3930f3ebc6a2e20671a5966b7e56cbc7a72e269a80469a56320fa62e98c15ebdc714c096a574f015d754aa2a0b114c70b7a6abcb5c2d5752acf6c7a33406cc6cfb7059fccb239"}, @NFTA_DATA_VALUE={0x1001, 0x1, "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"}, @NFTA_DATA_VALUE={0xf2, 0x1, "33cda39af44e7ff91aa28d4a7c2afbb3970c2c3a780317beadfee013b257ca69ca82c33d42b8663689a73064fd4aa11e53a6a742aab537932821bbac7782f4b776ab37fbd98978dfe78c15ab926cb6c8fbf57ed07541652f10c0ba463546b657e7fbb95b059e1c6de673df6a8062f121dac307506cade246e5e8937830c0371fcc26b207bed911c02947ef41c020b016bdc65ebe746593e912dd51d3db232161a07a54fd8d91bddc483474ecdfb08014edc4d639d5a941e2fc30f6bc7a537b1f5c1390c34c41c0d550e21fd2d680b741c01e336b4017809ab9bac44f04f295ec8ccbe094efbf6122adc011679ad7"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x45c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x61, 0x1, "9eee6e40ee64fccfafa7cee0138a513b692cf51e8ea2d2d9a4f9c5ae056c3538fcd3dde50315353deff6e051ae727e8262cdd4351fc4b1b28ec3f51ac7a5ce7ebcbc6b0b057bd3c2384764898551498131b8a7fa32b5c23c522d0dcbe0"}, @NFTA_DATA_VALUE={0x69, 0x1, "082c0d142cc21116534cb203c3f1137a326a930f5dc9ecdeed60a910368d3f8a8d4b39d4e0584a5274cf8fcdade30b42c01ca0aa29c871167964b12d7b5bce82417159f1e77c9b8f28600217926939ffda3154416dbf27694c54ba9ce64b557403451f748f"}, @NFTA_DATA_VALUE={0xbe, 0x1, "cd51f501e583874635049a4adbe3fe5357b0b9dd4f5cfb004a83ab5e151ca92bc1cee5cdcf6610e98b072d34068440478df1ff05707ec38a10a921cd1a1b36393f6684d3e4a695b2d4b8ee51ad9d779df6d5b7683a56b6068a0e086c4924dee53d521a2a1661961a51a0ebc88131f17783029f301fb7e3ce8f609d27238eb5617467d3a25d2bf4afa066d23cb2097f6ceb0e7b35d1f6e54cce698da610e39e99fb36359a432f72f690d86a05c97c89d55a3327ee5e1c50bd39b7"}, @NFTA_DATA_VALUE={0xcd, 0x1, "e304c27e44c2e50cdc31d4cb54b71be2587578f888189628f93db27ca87572e7c2911439985854ab42823aac964675f6fce99cf1fc0c1848bd2bd54c9339a3305e7b16ab2312462797b51f22b4f603bc93b5219599450d94c20eb06fcd1131a984950170bd9b7a9f8139efd3f8f25f36bbc57d4f7bfdad624103dd47673c7883ad7958ec9d1f9ea16d6d0fdaf0861b5e385a549be855d007242e682d373058ba25bc5bd04242d26aa3f72bab478ba64ebab5021b41f1f946dd4793a288eba8d7b7f74bacdb37d4e756"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xad, 0x1, "7d18d796ce141a9d5865afe686b8bcb33cfb0c3828085c0e22cd024cfdadba3b47e400458738ef0a3d5206fa2c7066b72614d5e8d48953a82dbbc56bc435c51d9e79fe975ad3279a4146ad8517bc58d5865f990a670a771c06840b6ae2359c1835f6a4703070e80862e5f8f29e72ea2aeeb181a3e6c8d5763e35446ed505d9871520fb8c8d7806d772c9af83f73b106150d51085c970baa0afa4bd6a6c8aaa5032020422c3d9217d9d"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xc9, 0x1, "7dc8b914d5d709598c1b891b1205cdf9277ae4cbd3ea15dca7dd28750f37ebe1f5b471149208a67a8337baba2575fc7d4c99e250c6da51908e803ef0797a52cdfa34785f8a63552ab1f82a7c3473b650d24e39eda4b47e0fd7582814f1f15c63ea24d049f1a859671829961affecf36dcd69236f3693ffe464095b498e7a8a2ef86a46a8bc387435ccf517570c37d685ef1c86d55f5cb9cd325668936cc4bec20a56d7b299bec170543532674d24ca04cfcf46b57fa6cc64fc5c40cefe56cb6c6712b85530"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x64, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x37, 0x1, "0cb54adb0e32bc4cbc71f16024a71509a4e466fa46bd266dfc2e19e2dc75905d56c6cfa4d4ef29c543bae3809fb005a8bc3d2c"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfc4}]}, {0x88, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x78, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x73, 0x1, "bcbc1e5d3eabcfc2d06b94e1d58e648a616f10bb6fc5921e969a0348a9433f6fba541ff77535876dc9558ea0ed4f046e89c4c190a12d3057ce2f21edb676bace861d5035161e4ffb1c91a1b311f9cf1331a8269e3bc4b195ed88dcd7a5694852b299a2f0ab3175f55198758042413d"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x44, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x1d0, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_USERDATA={0xbd, 0xc, "45b30bdb0abaf82bf812a857802cf3f7e7dfcd3f4197d585d17f3b1a81f79825ed464a641b6687d593a02616bf803b7462c7e4720cf0ab789874774f7b6c3afda3567bbdd3fae0400e83c7f0011c713f5e3e5cadc1ec6098a4be01c939f3a9499993e914f2b9fae8d5ed8f4264eee2cecec6055ca33f519cf4ae58d65fd3097a8c3cd7ef6a31f512764b53aef8300cd7d095777c9e72c0f2e6f59b1dfc71dd820f3c16b428f6d7704a31a222be555f3eaaeed6cce03abcdd16"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xc1, 0xc, "b719dc5ff6d56db46663794083725d25b57a6cdb717b3c5dfde88435872672f02a58116fe243523dec3e0f38232aecca813eb613fd32ef84e75947191cfdba5abfce3e18c62925f727690358e2e068591ebc76fe2bcc5d330a7f4c8a591343e313d89559766e2637417334200297218c58e8f93ab530bba3e636bb20ee516f3a098d540e05d4a6413bded1937f41018dde61e0bf886fad3e492a97a102a7e9646d19f96eaf6ae120f07619ace0556650ed10ab96815e85afd5763e8b82"}, @NFTA_CHAIN_HOOK={0x2c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_macvtap\x00'}]}]}, @NFT_MSG_DELSET={0x104, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_EXPRESSIONS={0x78, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x28, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2f}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFTA_SET_DESC={0x50, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4c, 0x2, 0x0, 0x1, [{0x4}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1d46}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa8b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x418}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x148, 0x9, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_EXPRESSIONS={0x12c, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x118, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x108, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_TO_DATA={0xf4, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "38ab83d4ac4b06607a831d68345b75daadf3913fb2f9f5565ac5b2f3429ae0128db06753944eba310901146bb054c0a79da25dcda8ddb50278e003b9eaee432ea7789823fb3d200bdb7058da01ae77bf221a0cc39a2f5d12c4093de342535a208b9ed22a3139aae7c75619e75bd169a9fec939d48d1c994e42beaeb6fd1c07c096dae6005792bfcdd4fe7affab89fd6daabd1eeff29711256ac48ca00972dcc83e"}, @NFTA_DATA_VALUE={0x29, 0x1, "daa8add5598260036468a5b48b070a45c069004433d975bdd6e41ab630d59f55743ca61f82"}]}]}}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x21f0}, 0x1, 0x0, 0x0, 0x24040040}, 0x8000854) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0xc, 0x7}, 0x31) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae", 0x7) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 4.210110824s ago: executing program 2 (id=2159): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 4.176907104s ago: executing program 4 (id=2160): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb63}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 4.117057435s ago: executing program 6 (id=2161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x34000000}, 0x800) 4.092261525s ago: executing program 5 (id=2162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001dc0), r3) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)={0x14, r4, 0x3, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40040c0) 3.856880676s ago: executing program 4 (id=2163): socket$netlink(0x10, 0x3, 0x10) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) r3 = fcntl$dupfd(r0, 0x0, r1) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x1000}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000005300)={0x0, 0x1, 0x0, 0x0, 0x0, 0x5000}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.730774433s ago: executing program 5 (id=2164): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10) request_key(&(0x7f0000000000)='logon\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)='%\x00', 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0xfffc, r0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x5, r0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x1, r0}]) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1d98, &(0x7f0000000280)={0x0, 0x8216, 0x20, 0x0, 0xe6}, &(0x7f0000000200), &(0x7f0000000300)) 2.631012224s ago: executing program 2 (id=2165): r0 = io_uring_setup(0x178e, &(0x7f00000000c0)={0x0, 0x52c1, 0x1, 0x0, 0x2de}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r3}}, 0x30) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.750106839s ago: executing program 6 (id=2166): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b000000000"], 0xb0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/87, 0x57}], 0x1) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) utime(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x100, 0x6}) 1.333099481s ago: executing program 7 (id=2167): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wrr\x00', 0x23, 0x4, 0x72}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 1.309824512s ago: executing program 5 (id=2168): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000009500000000000000133629fb8c30"], &(0x7f00000005c0)='GPL\x00'}, 0x80) setpriority(0x2, 0x0, 0xd2f4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@remote, @link_local, @val={@val={0x88a8, 0x5, 0x0, 0x1}, {0x8100, 0x3, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 1.217835903s ago: executing program 4 (id=2169): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000d, 0x40010, r0, 0x65c8a000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000000)={'nat\x00', 0x0, [0x2, 0x800, 0x8, 0x101, 0xfffffad7]}, &(0x7f0000000080)=0x54) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfffc}, {0xb, 0xf}}}, 0x24}}, 0x80800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x8, 0x2, 0x2, '\x00', 0x2}) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x8, &(0x7f0000000380), 0x0) 1.091131673s ago: executing program 4 (id=2170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1.038937964s ago: executing program 5 (id=2171): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x8002c}, @fda={0x66646185, 0x0, 0x0, 0x22}, @fda={0x66646185, 0x9, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.019337393s ago: executing program 7 (id=2172): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000440)='&', 0x1}], 0x1}, 0xff03}], 0x1, 0x8000) recvfrom$packet(r1, 0x0, 0x0, 0x42541ae965b631ba, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {0x7}, [@NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2000004) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14}}, 0x5c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000030007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 755.510745ms ago: executing program 5 (id=2173): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003e0000000400000002000000000000110300000000000000000000000100000d000000000000000000000000020000000000000c020000000000610074269aca71d6cb154fef12ad71ef12ad81b965c114ebdd85bf708a5b6b51c2a3922a0f487f814329ad5c5b144b32bcd57759acb49d61bea2d1f1"], 0x0, 0x4c, 0x0, 0x2}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) connect$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x292, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2}, 0x20) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="b70200001000b15cbfa300000000000007030000f8ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b252a37ff7e0d45728fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73bf1bca1cbec7614c8c3c76411e61fef6a93da8914490b50bd837d068e9bf8f3348794a44115d163b5ff85629b0a3ad4023448140770de2e5f262b9a50afcc210b8d8ea24b6dd7d068b356f53afaf89acae30935ec92657e37bf0821cbe612ac2aa7baf4d21ab373ea4fea57d0d9ac418862e791df3d1d85bb780fbfa401e09e3745d70174dd9ab52cdcadfd3454916408810090a19fa1cf0df6aa714fbcffbb7d6c7f45237df3296867725fd2bdbcd2f7ab10fea0fe85ce1137e775e4c01a136aed7f1d0d192a95be64bab53144ff3efd87fcb6421483e6a1690408712913dfb10a88201340c96dfd745a84dc177dd7a598ec015daa56eb0924e01df353a9ad69d0a59e40203018c82e74f39f8c4cb8823f0bfdfe170549e305628625f50"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 36.26504ms ago: executing program 4 (id=2174): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RESEND(r2, &(0x7f00000000c0)={0x14}, 0x14) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0xffffffffffff8373, 0x1ff, 0x8, 0x6, {0x3, 0x82, 0x3eb, 0xcee, 0x5, 0x8, 0x7, 0x2ad8, 0xc, 0x2000, 0x7, 0xffffffffffffffff, 0x0, 0xfffffffe, 0xffffffff}}, {0x0, 0xc}}}, 0xa0) getresuid(&(0x7f0000000440), &(0x7f0000000400), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) 0s ago: executing program 7 (id=2175): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @random="589733b902f1", @broadcast, @device_a, {0x2, 0x500}, "", @void, @value=@ver_80211n={0x0, 0x5f, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.635207][ T7] usb 8-1: config 0 has no interface number 0 [ 243.644780][ T7] usb 8-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 243.659339][ T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.687168][ T7] usb 8-1: config 0 descriptor?? [ 243.752319][ T7] usb 8-1: Found UVC 0.00 device (0bd3:0555) [ 243.770757][ T7] usb 8-1: No valid video chain found. [ 243.980518][ T7] usb 8-1: USB disconnect, device number 2 [ 244.399334][ T7635] bond1: option mode: unable to set because the bond device has slaves [ 244.419395][ T7635] device bond_slave_0 entered promiscuous mode [ 244.426387][ T7635] device bond_slave_1 entered promiscuous mode [ 244.441523][ T7635] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 244.462824][ T7635] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 244.648732][ T7641] loop2: detected capacity change from 0 to 1024 [ 246.414683][ T7677] blk_update_request: I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 246.426918][ T7677] hfsplus: unable to find HFS+ superblock [ 246.828978][ T7667] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 246.867823][ T7667] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 247.323909][ T7684] bond4: option mode: unable to set because the bond device has slaves [ 247.427131][ T7684] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 247.548243][ T7684] bond4: (slave macvlan3): Enslaving as an active interface with an up link [ 248.122794][ T7707] loop4: detected capacity change from 0 to 128 [ 248.427942][ T6036] Process accounting resumed [ 248.443696][ T6036] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512) [ 248.663262][ T6036] FAT-fs (loop4): Filesystem has been set read-only [ 250.665369][ T7742] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 250.709332][ T7742] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 250.729481][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 250.729632][ T26] audit: type=1326 audit(1762346399.285:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.5.927" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x0 [ 253.228978][ T7754] loop7: detected capacity change from 0 to 32768 [ 253.418636][ T26] audit: type=1326 audit(1762346401.959:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.6.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 253.509516][ T7754] XFS (loop7): Mounting V5 Filesystem [ 253.616434][ T26] audit: type=1326 audit(1762346401.959:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.6.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 253.735554][ T7754] XFS (loop7): Ending clean mount [ 253.806592][ T26] audit: type=1326 audit(1762346401.959:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.6.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 253.902100][ T6920] XFS (loop7): Unmounting Filesystem [ 253.947895][ T26] audit: type=1326 audit(1762346402.039:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.6.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 254.076894][ T26] audit: type=1326 audit(1762346402.039:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.6.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 254.154766][ T26] audit: type=1326 audit(1762346402.039:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.6.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 254.207438][ T26] audit: type=1326 audit(1762346402.039:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.6.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 254.250110][ T26] audit: type=1326 audit(1762346402.049:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.6.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 254.335904][ T26] audit: type=1326 audit(1762346402.049:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.6.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 254.687923][ T7833] tipc: Started in network mode [ 254.705956][ T7833] tipc: Node identity ce49551a155b, cluster identity 4711 [ 254.714810][ T7833] tipc: Enabled bearer , priority 0 [ 254.847094][ T7833] device syzkaller0 entered promiscuous mode [ 254.908685][ T7831] tipc: Resetting bearer [ 255.007818][ T7831] tipc: Disabling bearer [ 255.362318][ T7850] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 255.386093][ T7850] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 255.641468][ T7867] kvm: pic: non byte write [ 255.749317][ T7870] kvm: pic: non byte write [ 255.789043][ T7866] loop2: detected capacity change from 0 to 4096 [ 255.881373][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.897196][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.951898][ T7866] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 256.069737][ T7878] netlink: 'syz.6.950': attribute type 10 has an invalid length. [ 256.116505][ T7878] netlink: 40 bytes leftover after parsing attributes in process `syz.6.950'. [ 256.157780][ T4412] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 256.172911][ T4186] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 256.194311][ T4186] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 256.237104][ T4186] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 256.243548][ T1159] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 256.269384][ T7878] team0: Port device geneve0 added [ 256.288207][ T4186] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 256.784110][ T7890] syz.7.952 (7890): drop_caches: 2 [ 256.789953][ T7890] syz.7.952 (7890): drop_caches: 2 [ 257.998478][ T5357] Bluetooth: hci2: command 0x0406 tx timeout [ 258.145969][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.958'. [ 258.170686][ T7906] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 258.289846][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.958'. [ 259.606414][ T7928] netlink: 'syz.6.963': attribute type 1 has an invalid length. [ 259.690747][ T7932] tipc: Failed to remove unknown binding: 66,1,1/0:1122573796/1122573798 [ 259.712549][ T7928] device bond2 entered promiscuous mode [ 259.718829][ T7928] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.787528][ T7941] tipc: Failed to remove unknown binding: 66,1,1/0:1122573796/1122573798 [ 259.802419][ T7941] tipc: Failed to remove unknown binding: 66,1,1/0:1122573796/1122573798 [ 259.817888][ T7935] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.857923][ T7935] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 259.878966][ T7935] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 259.940870][ T7935] bond2: (slave wireguard0): making interface the new active one [ 259.962646][ T7935] device wireguard0 entered promiscuous mode [ 259.996066][ T7935] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 260.008781][ T7937] netlink: 'syz.2.967': attribute type 1 has an invalid length. [ 260.086320][ T7936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.966'. [ 260.132404][ T7928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.139833][ T7928] IPv6: NLM_F_CREATE should be set when creating new route [ 260.147075][ T7928] IPv6: NLM_F_CREATE should be set when creating new route [ 260.226893][ T7942] bond2: (slave gretap2): making interface the new active one [ 260.266639][ T7942] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 260.306586][ T7943] device bond5 entered promiscuous mode [ 260.329233][ T7955] loop7: detected capacity change from 0 to 2048 [ 260.340710][ T7948] device macvlan4 entered promiscuous mode [ 260.381568][ T7948] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 260.424352][ T7955] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.455346][ T7942] syz.2.967 (7942) used greatest stack depth: 20032 bytes left [ 262.169299][ T5246] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 262.571588][ T5246] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.691764][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.699441][ T7949] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.716057][ T5246] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 262.728153][ T5246] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 262.737343][ T5246] usb 3-1: Product: syz [ 262.741848][ T5246] usb 3-1: SerialNumber: syz [ 262.828391][ T7949] device bond_slave_0 left promiscuous mode [ 262.838401][ T7949] device bond_slave_1 left promiscuous mode [ 262.872514][ T7949] batman_adv: batadv0: Interface deactivated: dummy0 [ 263.094742][ T7967] loop7: detected capacity change from 0 to 1024 [ 263.139812][ T7967] EXT4-fs (loop7): Ignoring removed nobh option [ 263.156647][ T7967] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 263.203836][ T7967] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: none. [ 263.492840][ T7949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.544409][ T7967] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3871: comm syz.7.975: Allocating blocks 497-513 which overlap fs metadata [ 263.562513][ T7949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.573947][ T7967] EXT4-fs (loop7): pa ffff888073cffc40: logic 128, phys. 385, len 8 [ 263.582894][ T7967] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 1 [ 263.949001][ T5246] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 263.955537][ T5246] cdc_ncm 3-1:1.0: setting rx_max = 16384 [ 264.044568][ T7949] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.062234][ T7949] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.074992][ T7949] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.088053][ T7949] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.136284][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 264.172667][ T7928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.277596][ T7934] device bond5 left promiscuous mode [ 265.124482][ T5246] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 265.232308][ T5246] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 265.966919][ T5246] usb 3-1: USB disconnect, device number 6 [ 265.973710][ T5246] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 266.927692][ T8016] loop7: detected capacity change from 0 to 512 [ 267.061479][ T8016] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,nodelalloc,,errors=continue. Quota mode: writeback. [ 267.161925][ T8021] netlink: 'syz.4.987': attribute type 12 has an invalid length. [ 267.194521][ T8016] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.406988][ T8034] EXT4-fs warning (device loop7): dx_probe:833: inode #2: comm syz.7.985: Unrecognised inode hash code 20 [ 267.485960][ T4175] udevd[4175]: incorrect ext4 checksum on /dev/loop7 [ 267.505803][ T8034] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.985: Corrupt directory, running e2fsck is recommended [ 267.547412][ T8034] EXT4-fs error (device loop7): ext4_validate_inode_bitmap:106: comm syz.7.985: Corrupt inode bitmap - block_group = 0, inode_bitmap = 18 [ 268.381025][ T8040] netlink: 'syz.4.990': attribute type 1 has an invalid length. [ 268.505870][ T8040] device bond6 entered promiscuous mode [ 268.512531][ T8040] 8021q: adding VLAN 0 to HW filter on device bond6 [ 268.523458][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.989'. [ 268.775309][ T8046] 8021q: adding VLAN 0 to HW filter on device bond6 [ 268.797193][ T8046] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 268.818206][ T8046] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 268.831391][ T8046] bond6: (slave wireguard0): making interface the new active one [ 268.839610][ T8046] device wireguard0 entered promiscuous mode [ 268.847621][ T8046] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 268.924915][ T8048] device bond3 entered promiscuous mode [ 268.931600][ T8049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.939057][ T8049] IPv6: NLM_F_CREATE should be set when creating new route [ 268.946343][ T8049] IPv6: NLM_F_CREATE should be set when creating new route [ 268.973716][ T8049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.981619][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 269.004774][ T8055] device macvlan3 entered promiscuous mode [ 269.475826][ T8055] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 269.893059][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 269.893075][ T26] audit: type=1326 audit(1762346418.343:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.5.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 269.967279][ T26] audit: type=1326 audit(1762346418.343:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.5.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 270.077353][ T26] audit: type=1326 audit(1762346418.343:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.5.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 270.156533][ T8080] overlayfs: failed to clone upperpath [ 270.178404][ T26] audit: type=1326 audit(1762346418.383:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.5.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 270.219837][ T8086] overlayfs: failed to clone upperpath [ 270.238069][ T8042] device bond3 left promiscuous mode [ 270.249759][ T26] audit: type=1326 audit(1762346418.393:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.5.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 270.289042][ T8088] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 270.367068][ T8078] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 270.384124][ T26] audit: type=1326 audit(1762346418.393:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.5.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 270.415414][ T26] audit: type=1326 audit(1762346418.393:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.5.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 270.448965][ T8078] pit: kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 270.490060][ T26] audit: type=1326 audit(1762346418.393:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.5.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 270.631134][ T8078] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 270.692231][ T26] audit: type=1326 audit(1762346418.393:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.5.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 270.734727][ T8078] pit: kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 270.751329][ T26] audit: type=1326 audit(1762346418.393:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8071 comm="syz.5.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 270.782179][ T8078] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 270.794614][ T8078] pit: kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 270.805067][ T8078] pit: kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 270.808557][ T8100] kvm: pic: non byte write [ 270.842211][ T8078] pit: kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 270.842231][ T8100] kvm: pic: non byte write [ 270.842666][ T8100] kvm: pic: single mode not supported [ 270.856057][ T8100] kvm: pic: level sensitive irq not supported [ 270.877580][ T8100] kvm: pic: non byte write [ 270.880113][ T8078] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 270.891827][ T8100] kvm: pic: non byte write [ 270.911307][ T8100] kvm: pic: level sensitive irq not supported [ 270.912526][ T8100] kvm: pic: non byte write [ 270.933702][ T8100] kvm: pic: non byte write [ 271.135160][ T8110] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1016'. [ 271.412062][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'. [ 271.487924][ T8125] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 271.526720][ T8128] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1012'. [ 271.633287][ T8133] device bond1 entered promiscuous mode [ 271.701416][ T8134] device macvlan2 entered promiscuous mode [ 271.733549][ T8134] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 271.803163][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 271.864098][ T8126] device bond1 left promiscuous mode [ 272.139846][ T8154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1019'. [ 273.242704][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 273.279718][ T8178] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 273.348343][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'. [ 274.835473][ T8190] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.842882][ T8190] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.011997][ T8190] batman_adv: batadv0: Interface deactivated: dummy0 [ 275.692906][ T8190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.760158][ T8190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.466923][ T8190] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.488506][ T8190] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.498787][ T8190] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.507875][ T8190] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.881714][ T8224] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 276.975197][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 276.975214][ T26] audit: type=1326 audit(1762346425.402:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 277.016109][ T26] audit: type=1326 audit(1762346425.442:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 277.046271][ T26] audit: type=1326 audit(1762346425.442:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 277.056586][ T8226] device syzkaller0 entered promiscuous mode [ 277.075502][ T26] audit: type=1326 audit(1762346425.442:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 277.099483][ T26] audit: type=1326 audit(1762346425.442:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 277.147172][ T26] audit: type=1326 audit(1762346425.442:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 277.179199][ T26] audit: type=1326 audit(1762346425.442:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 277.250865][ T26] audit: type=1326 audit(1762346425.442:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 277.334111][ T26] audit: type=1326 audit(1762346425.442:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 277.449000][ T26] audit: type=1326 audit(1762346425.442:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.6.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 279.320953][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1061'. [ 279.466447][ T8336] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.473784][ T8336] IPv6: NLM_F_CREATE should be set when creating new route [ 279.521652][ T8337] tipc: Started in network mode [ 279.526631][ T8337] tipc: Node identity 6, cluster identity 4711 [ 279.555086][ T8337] tipc: Node number set to 6 [ 279.581895][ T8339] netlink: 'syz.2.1063': attribute type 13 has an invalid length. [ 279.645369][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 279.715502][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.739132][ T8339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 280.113702][ T8351] loop6: detected capacity change from 0 to 512 [ 280.228312][ T8351] EXT4-fs (loop6): Test dummy encryption mode enabled [ 280.282038][ T8351] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 280.316008][ T8355] loop2: detected capacity change from 0 to 128 [ 280.334429][ T8351] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 280.379092][ T8351] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,delalloc,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000fffffffc,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 280.915344][ T8351] fscrypt (loop6): Error allocating 'cts(cbc(aes))' transform: -4 [ 280.976252][ T8359] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 281.035094][ T8359] EXT4-fs error (device loop6): ext4_add_entry:2486: inode #2: comm syz.6.1067: Directory hole found for htree leaf block 0 [ 281.263066][ T8389] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 281.417080][ T8396] loop6: detected capacity change from 0 to 512 [ 281.429112][ T8372] loop2: detected capacity change from 0 to 2048 [ 281.655720][ T8396] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1073: inode has both inline data and extents flags [ 281.817549][ T8372] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 281.862044][ T8396] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1073: couldn't read orphan inode 15 (err -117) [ 281.991882][ T8396] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 282.345223][ T8441] overlayfs: filesystem on './file0' not supported as upperdir [ 283.789626][ T1336] Bluetooth: hci0: command 0x0406 tx timeout [ 284.389747][ T8492] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1084'. [ 285.591622][ T8504] bridge0: port 3(wlan1) entered blocking state [ 285.620510][ T8504] bridge0: port 3(wlan1) entered disabled state [ 285.654294][ T8504] device wlan1 entered promiscuous mode [ 285.670863][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 285.670879][ T26] audit: type=1326 audit(1762346690.096:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 285.825545][ T26] audit: type=1326 audit(1762346690.136:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 285.869469][ T8511] loop7: detected capacity change from 0 to 512 [ 285.904193][ T26] audit: type=1326 audit(1762346690.136:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 286.298599][ T8511] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.1092: inode has both inline data and extents flags [ 286.494754][ T26] audit: type=1326 audit(1762346690.136:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 286.579882][ T8511] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.1092: couldn't read orphan inode 15 (err -117) [ 286.722315][ T26] audit: type=1326 audit(1762346690.136:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 286.745732][ T26] audit: type=1326 audit(1762346690.136:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 286.779346][ T8511] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 286.809628][ T26] audit: type=1326 audit(1762346690.136:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 286.946471][ T26] audit: type=1326 audit(1762346690.136:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 287.001417][ T26] audit: type=1326 audit(1762346690.136:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 287.087743][ T26] audit: type=1326 audit(1762346690.136:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.2.1090" exe="/root/syz-executor" sig=0 arch=40000003 syscall=191 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 287.198441][ T8531] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 288.077957][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1102'. [ 288.554946][ T8550] SET target dimension over the limit! [ 291.080601][ T8586] kvm: emulating exchange as write [ 291.493129][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1119'. [ 294.399091][ T8639] netlink: 'syz.7.1131': attribute type 1 has an invalid length. [ 294.505412][ T8638] bridge0: port 3(wlan1) entered blocking state [ 294.541204][ T8638] bridge0: port 3(wlan1) entered disabled state [ 294.583602][ T8638] device wlan1 entered promiscuous mode [ 294.630662][ T8641] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 294.745253][ T8645] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 294.948872][ T8645] bond2 (unregistering): Released all slaves [ 295.786519][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 295.786535][ T26] audit: type=1326 audit(1762346700.206:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.4.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67d3096c9 code=0x7ffc0000 [ 295.901365][ T26] audit: type=1326 audit(1762346700.256:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.4.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe67d3096c9 code=0x7ffc0000 [ 295.942649][ T26] audit: type=1326 audit(1762346700.256:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.4.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67d3096c9 code=0x7ffc0000 [ 296.016628][ T26] audit: type=1326 audit(1762346700.256:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.4.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67d3096c9 code=0x7ffc0000 [ 296.146804][ T26] audit: type=1326 audit(1762346700.266:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.4.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe67d3096c9 code=0x7ffc0000 [ 296.257502][ T26] audit: type=1326 audit(1762346700.266:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.4.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67d3096c9 code=0x7ffc0000 [ 296.280828][ T8685] device netdevsim0 left promiscuous mode [ 296.327314][ T8685] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.333538][ T26] audit: type=1326 audit(1762346700.266:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.4.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe67d3096c9 code=0x7ffc0000 [ 296.364709][ T8685] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.398719][ T26] audit: type=1326 audit(1762346700.276:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.4.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67d3096c9 code=0x7ffc0000 [ 296.406425][ T8685] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.455374][ T8685] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.457035][ T26] audit: type=1326 audit(1762346700.276:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.4.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67d3096c9 code=0x7ffc0000 [ 296.523837][ T26] audit: type=1326 audit(1762346700.276:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.4.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fe67d3096c9 code=0x7ffc0000 [ 296.788089][ T8685] device bond6 left promiscuous mode [ 296.796166][ T8685] device wireguard0 left promiscuous mode [ 297.988533][ T8729] netlink: 'syz.4.1160': attribute type 4 has an invalid length. [ 298.132922][ T8734] loop6: detected capacity change from 0 to 512 [ 298.352376][ T8733] loop2: detected capacity change from 0 to 4096 [ 298.368963][ T8733] ntfs3: Unknown parameter 'windows_names' [ 298.893400][ T5363] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 299.213598][ T8734] EXT4-fs (loop6): orphan cleanup on readonly fs [ 299.256091][ T8734] EXT4-fs error (device loop6): ext4_map_blocks:629: inode #11: block 1728053262: comm syz.6.1161: lblock 0 mapped to illegal pblock 1728053262 (length 1) [ 299.281235][ T8734] EXT4-fs error (device loop6): ext4_do_update_inode:5218: inode #15: comm syz.6.1161: corrupted inode contents [ 299.345366][ T8734] EXT4-fs error (device loop6): ext4_dirty_inode:6054: inode #15: comm syz.6.1161: mark_inode_dirty error [ 299.398706][ T5363] usb 3-1: Using ep0 maxpacket: 16 [ 299.412899][ T8734] EXT4-fs error (device loop6): ext4_do_update_inode:5218: inode #15: comm syz.6.1161: corrupted inode contents [ 299.478939][ T8734] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2971: inode #15: comm syz.6.1161: mark_inode_dirty error [ 299.508035][ T8734] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2974: inode #15: comm syz.6.1161: mark inode dirty (error -117) [ 299.521342][ T5363] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.551821][ T8734] EXT4-fs warning (device loop6): ext4_evict_inode:302: xattr delete (err -117) [ 299.598880][ T8734] EXT4-fs (loop6): 1 orphan inode deleted [ 299.604981][ T8734] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,mb_optimize_scan=0x0000000000000001,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 299.709223][ T5363] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 299.740018][ T5363] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.793246][ T5363] usb 3-1: Product: syz [ 299.797918][ T5363] usb 3-1: Manufacturer: syz [ 299.877277][ T5363] usb 3-1: SerialNumber: syz [ 301.019031][ T5363] usb 3-1: 0:2 : does not exist [ 301.169699][ T5363] usb 3-1: USB disconnect, device number 7 [ 302.321155][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.059173][ T8799] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 304.440666][ T8824] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 305.420933][ T8829] loop7: detected capacity change from 0 to 128 [ 308.732157][ T8829] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 53) [ 308.803259][ T8829] FAT-fs (loop7): Filesystem has been set read-only [ 308.827236][ T8843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1196'. [ 309.081134][ T8848] netlink: 'syz.6.1200': attribute type 4 has an invalid length. [ 309.496675][ T8864] loop6: detected capacity change from 0 to 512 [ 309.519596][ T8863] sch_fq: defrate 53322 ignored. [ 309.542700][ T8864] EXT4-fs (loop6): inline encryption not supported [ 309.555615][ T8864] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 309.617168][ T8864] EXT4-fs (loop6): 1 truncate cleaned up [ 309.635663][ T8864] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,inlinecrypt,. Quota mode: none. [ 309.832110][ T8864] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1207: bg 0: block 255: padding at end of block bitmap is not set [ 309.888176][ T8864] EXT4-fs (loop6): Remounting filesystem read-only [ 311.419798][ T8891] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 312.725876][ T8903] lo: Caught tx_queue_len zero misconfig [ 312.746283][ T8903] sch_fq: defrate 53322 ignored. [ 312.932649][ T8910] loop7: detected capacity change from 0 to 512 [ 313.425878][ T8916] overlayfs: failed to clone upperpath [ 313.463252][ T8910] EXT4-fs (loop7): inline encryption not supported [ 313.500277][ T8910] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 313.606958][ T8910] EXT4-fs (loop7): 1 truncate cleaned up [ 313.618826][ T8910] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,inlinecrypt,. Quota mode: none. [ 313.790250][ T8910] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1224: bg 0: block 255: padding at end of block bitmap is not set [ 313.850332][ T8910] EXT4-fs (loop7): Remounting filesystem read-only [ 314.044394][ T8928] loop6: detected capacity change from 0 to 64 [ 314.158952][ T8928] hfs: invalid btree extent records [ 314.218177][ T8928] hfs: unable to open extent tree [ 314.240751][ T8928] hfs: can't find a HFS filesystem on dev loop6 [ 314.351626][ T8911] loop2: detected capacity change from 0 to 32768 [ 314.416259][ T8911] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1225 (8911) [ 314.496063][ T8911] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 314.515834][ T8911] BTRFS info (device loop2): using free space tree [ 314.533004][ T8911] BTRFS info (device loop2): has skinny extents [ 314.748824][ T8911] BTRFS info (device loop2): enabling ssd optimizations [ 314.787958][ T26] kauditd_printk_skb: 61 callbacks suppressed [ 314.787973][ T26] audit: type=1800 audit(1762346719.206:418): pid=8911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1225" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 314.902317][ T26] audit: type=1800 audit(1762346719.246:419): pid=8911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1225" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 314.923595][ T26] audit: type=1800 audit(1762346719.266:420): pid=8911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1225" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 315.134450][ T8963] sch_fq: defrate 53322 ignored. [ 317.539145][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.578708][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.732349][ T8999] loop2: detected capacity change from 0 to 1024 [ 318.917895][ T8999] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 318.933273][ T8999] ext4 filesystem being mounted at /257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 321.420259][ T9050] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 321.432394][ T9050] SET target dimension over the limit! [ 324.593246][ T9080] loop6: detected capacity change from 0 to 32768 [ 324.668518][ T9080] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1274 (9080) [ 324.713286][ T9080] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 324.722069][ T9080] BTRFS info (device loop6): using free space tree [ 324.728682][ T9080] BTRFS info (device loop6): has skinny extents [ 324.927537][ T9086] loop7: detected capacity change from 0 to 4096 [ 324.956202][ T9086] ntfs3: Unknown parameter 'windows_names' [ 325.173017][ T26] audit: type=1326 audit(1762346729.596:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9110 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67d3096c9 code=0x7ffc0000 [ 325.360587][ T9080] BTRFS info (device loop6): enabling ssd optimizations [ 325.665006][ T26] audit: type=1326 audit(1762346729.626:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9110 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67d3096c9 code=0x7ffc0000 [ 326.134239][ T5363] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 326.143420][ T26] audit: type=1326 audit(1762346729.696:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9110 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe67d3096c9 code=0x7ffc0000 [ 326.166236][ T26] audit: type=1326 audit(1762346729.706:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9110 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67d3096c9 code=0x7ffc0000 [ 326.304273][ T26] audit: type=1326 audit(1762346729.716:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9110 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67d3096c9 code=0x7ffc0000 [ 326.326931][ T26] audit: type=1326 audit(1762346729.736:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9110 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe67d3096c9 code=0x7ffc0000 [ 326.349903][ T26] audit: type=1326 audit(1762346729.746:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9110 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67d3096c9 code=0x7ffc0000 [ 327.749802][ T26] audit: type=1326 audit(1762346729.756:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9110 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67d3096c9 code=0x7ffc0000 [ 327.778707][ T5363] usb 8-1: Using ep0 maxpacket: 16 [ 327.878852][ T5363] usb 8-1: device descriptor read/all, error -71 [ 327.928853][ T26] audit: type=1326 audit(1762346729.816:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9110 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fe67d3096c9 code=0x7ffc0000 [ 328.016984][ T26] audit: type=1326 audit(1762346729.836:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9110 comm="syz.4.1279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67d3096c9 code=0x7ffc0000 [ 329.705033][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1292'. [ 329.752901][ T9148] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.762420][ T9148] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.771564][ T9148] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.780332][ T9148] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 330.073689][ T9148] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.082972][ T9148] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.092370][ T9148] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.101361][ T9148] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.515697][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 331.515713][ T26] audit: type=1326 audit(1762346735.936:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9167 comm="syz.2.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 331.635117][ T26] audit: type=1326 audit(1762346735.966:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9167 comm="syz.2.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 331.758446][ T26] audit: type=1326 audit(1762346735.966:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9167 comm="syz.2.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 331.799040][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1292'. [ 331.822354][ T26] audit: type=1326 audit(1762346735.976:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9167 comm="syz.2.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 331.833621][ T9148] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.854092][ T9148] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.854844][ T26] audit: type=1326 audit(1762346735.976:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9167 comm="syz.2.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 331.863196][ T9148] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.863234][ T9148] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.114704][ T9148] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.123906][ T9148] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.133067][ T9148] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.142363][ T9148] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.153739][ T26] audit: type=1326 audit(1762346735.976:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9167 comm="syz.2.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 332.692730][ T26] audit: type=1326 audit(1762346735.986:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9167 comm="syz.2.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 332.842329][ T26] audit: type=1326 audit(1762346735.986:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9167 comm="syz.2.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 332.874648][ T26] audit: type=1326 audit(1762346735.986:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9167 comm="syz.2.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 332.927681][ T26] audit: type=1326 audit(1762346735.986:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9167 comm="syz.2.1297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 332.974674][ T9184] loop6: detected capacity change from 0 to 764 [ 333.239675][ T9195] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 333.500032][ T9195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.589361][ T9195] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.645803][ T9195] batman_adv: batadv0: Interface activated: dummy0 [ 333.678822][ T9195] net_ratelimit: 10 callbacks suppressed [ 333.678841][ T9195] batadv0: mtu less than device minimum [ 333.716910][ T9195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.729647][ T9195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.742280][ T9195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.754958][ T9195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.767529][ T9195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.780133][ T9195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.792840][ T9195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.809046][ T9195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.811292][ T9195] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.876687][ T9195] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 336.989719][ T9244] fuse: Bad value for 'fd' [ 342.248611][ C0] hrtimer: interrupt took 50812 ns [ 342.920698][ T9328] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1348'. [ 342.971729][ T9328] bridge2: port 1(veth11) entered blocking state [ 343.017402][ T9328] bridge2: port 1(veth11) entered disabled state [ 343.031570][ T9328] device veth11 entered promiscuous mode [ 343.156244][ T9335] bridge2: port 2(veth13) entered blocking state [ 343.167853][ T9335] bridge2: port 2(veth13) entered disabled state [ 343.184809][ T9335] device veth13 entered promiscuous mode [ 343.465358][ T9345] tipc: Failed to remove unknown binding: 66,1,1/6:200781828/200781830 [ 343.562197][ T9348] tipc: Failed to remove unknown binding: 66,1,1/6:200781828/200781830 [ 343.580960][ T9348] tipc: Failed to remove unknown binding: 66,1,1/6:200781828/200781830 [ 346.592506][ T9383] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1370'. [ 348.012073][ T9416] netlink: 'syz.2.1380': attribute type 16 has an invalid length. [ 348.012098][ T9416] netlink: 'syz.2.1380': attribute type 17 has an invalid length. [ 348.037318][ T9416] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 348.037468][ T9416] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 348.056976][ T9416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 348.057202][ T9416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 348.057347][ T9416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 348.057499][ T9416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 348.117838][ T9423] comedi: valid board names for 8255 driver are: [ 348.117975][ T9423] 8255 [ 348.117984][ T9423] comedi: valid board names for vmk80xx driver are: [ 348.117995][ T9423] vmk80xx [ 348.118004][ T9423] comedi: valid board names for usbduxsigma driver are: [ 348.118014][ T9423] usbduxsigma [ 348.118023][ T9423] comedi: valid board names for usbduxfast driver are: [ 348.118033][ T9423] usbduxfast [ 348.118041][ T9423] comedi: valid board names for usbdux driver are: [ 348.118051][ T9423] usbdux [ 348.118059][ T9423] comedi: valid board names for ni6501 driver are: [ 348.118069][ T9423] ni6501 [ 348.118077][ T9423] comedi: valid board names for dt9812 driver are: [ 348.118086][ T9423] dt9812 [ 348.118093][ T9423] comedi: valid board names for ni_labpc_cs driver are: [ 348.118120][ T9423] ni_labpc_cs [ 348.118129][ T9423] comedi: valid board names for ni_daq_700 driver are: [ 348.118139][ T9423] ni_daq_700 [ 348.118147][ T9423] comedi: valid board names for labpc_pci driver are: [ 348.118157][ T9423] labpc_pci [ 348.118164][ T9423] comedi: valid board names for adl_pci9118 driver are: [ 348.118175][ T9423] pci9118dg [ 348.118182][ T9423] pci9118hg [ 348.118190][ T9423] pci9118hr [ 348.118198][ T9423] comedi: valid board names for 8255_pci driver are: [ 348.118208][ T9423] 8255_pci [ 348.118215][ T9423] comedi: valid board names for s526 driver are: [ 348.118225][ T9423] s526 [ 348.118233][ T9423] comedi: valid board names for multiq3 driver are: [ 348.118243][ T9423] multiq3 [ 348.118250][ T9423] comedi: valid board names for pcmuio driver are: [ 348.118261][ T9423] pcmuio48 [ 348.118268][ T9423] pcmuio96 [ 348.118276][ T9423] comedi: valid board names for pcmmio driver are: [ 348.118286][ T9423] pcmmio [ 348.118293][ T9423] comedi: valid board names for pcmda12 driver are: [ 348.118303][ T9423] pcmda12 [ 348.118311][ T9423] comedi: valid board names for pcmad driver are: [ 348.118320][ T9423] pcmad12 [ 348.118328][ T9423] pcmad16 [ 348.118335][ T9423] comedi: valid board names for ni_labpc driver are: [ 348.118345][ T9423] lab-pc-1200 [ 348.118353][ T9423] lab-pc-1200ai [ 348.118361][ T9423] lab-pc+ [ 348.118368][ T9423] comedi: valid board names for atmio16 driver are: [ 348.118378][ T9423] atmio16 [ 348.118385][ T9423] atmio16d [ 348.118393][ T9423] comedi: valid board names for ni_at_ao driver are: [ 348.118403][ T9423] at-ao-6 [ 348.118411][ T9423] at-ao-10 [ 348.118419][ T9423] comedi: valid board names for ni_at_a2150 driver are: [ 348.118429][ T9423] ni_at_a2150 [ 348.118436][ T9423] comedi: valid board names for adq12b driver are: [ 348.118446][ T9423] adq12b [ 348.118454][ T9423] comedi: valid board names for mpc624 driver are: [ 348.118463][ T9423] mpc624 [ 348.118471][ T9423] comedi: valid board names for c6xdigio driver are: [ 348.118480][ T9423] c6xdigio [ 348.118488][ T9423] comedi: valid board names for aio_iiro_16 driver are: [ 348.118498][ T9423] aio_iiro_16 [ 348.118506][ T9423] comedi: valid board names for aio_aio12_8 driver are: [ 348.118516][ T9423] aio_aio12_8 [ 348.118524][ T9423] aio_ai12_8 [ 348.118531][ T9423] aio_ao12_4 [ 348.118539][ T9423] comedi: valid board names for fl512 driver are: [ 348.118548][ T9423] fl512 [ 348.118556][ T9423] comedi: valid board names for dmm32at driver are: [ 348.118566][ T9423] dmm32at [ 348.118574][ T9423] comedi: valid board names for dt282x driver are: [ 348.637831][ T9437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1385'. [ 348.834817][ T9423] dt2821 [ 348.858303][ T9423] dt2821-f [ 348.903351][ T9423] dt2821-g [ 348.906545][ T9423] dt2823 [ 348.954810][ T9423] dt2824-pgh [ 348.958171][ T9423] dt2824-pgl [ 349.038704][ T9423] dt2825 [ 349.106837][ T9423] dt2827 [ 349.125623][ T9423] dt2828 [ 349.130871][ T9444] loop7: detected capacity change from 0 to 8192 [ 349.144068][ T9423] dt2829 [ 349.157188][ T9423] dt21-ez [ 349.189210][ T9444] REISERFS warning (device loop7): super-6502 reiserfs_getopt: unknown mount option "subj_user=(" [ 349.240794][ T9423] dt23-ez [ 349.568540][ T9457] loop7: detected capacity change from 0 to 32768 [ 349.579357][ T9423] dt24-ez [ 349.623963][ T9423] dt24-ez-pgl [ 349.623982][ T9423] comedi: valid board names for dt2817 driver are: [ 349.623995][ T9423] dt2817 [ 349.624005][ T9423] comedi: valid board names for dt2815 driver are: [ 349.624015][ T9423] dt2815 [ 349.624024][ T9423] comedi: valid board names for dt2814 driver are: [ 349.624034][ T9423] dt2814 [ 349.624042][ T9423] comedi: valid board names for dt2811 driver are: [ 349.624052][ T9423] dt2811-pgh [ 349.624060][ T9423] dt2811-pgl [ 349.624068][ T9423] comedi: valid board names for dt2801 driver are: [ 349.624078][ T9423] dt2801 [ 349.624087][ T9423] comedi: valid board names for das6402 driver are: [ 349.624096][ T9423] das6402-12 [ 349.624107][ T9423] das6402-16 [ 349.624115][ T9423] comedi: valid board names for das1800 driver are: [ 349.624126][ T9423] das-1701st [ 349.624134][ T9423] das-1701st-da [ 349.624142][ T9423] das-1702st [ 349.624150][ T9423] das-1702st-da [ 349.624158][ T9423] das-1702hr [ 349.624166][ T9423] das-1702hr-da [ 349.624173][ T9423] das-1701ao [ 349.624181][ T9423] das-1702ao [ 349.624189][ T9423] das-1801st [ 349.624197][ T9423] das-1801st-da [ 349.624205][ T9423] das-1802st [ 349.624212][ T9423] das-1802st-da [ 349.624220][ T9423] das-1802hr [ 349.624228][ T9423] das-1802hr-da [ 349.624236][ T9423] das-1801hc [ 349.624243][ T9423] das-1802hc [ 349.624251][ T9423] das-1801ao [ 349.624259][ T9423] das-1802ao [ 349.624267][ T9423] comedi: valid board names for das800 driver are: [ 349.624284][ T9423] das-800 [ 349.624291][ T9423] cio-das800 [ 349.624299][ T9423] das-801 [ 349.624307][ T9423] cio-das801 [ 349.624315][ T9423] das-802 [ 349.624322][ T9423] cio-das802 [ 349.624330][ T9423] cio-das802/16 [ 349.624338][ T9423] comedi: valid board names for isa-das08 driver are: [ 349.624348][ T9423] isa-das08 [ 349.624356][ T9423] das08-pgm [ 349.624364][ T9423] das08-pgh [ 349.624371][ T9423] das08-pgl [ 349.624379][ T9423] das08-aoh [ 349.624387][ T9423] das08-aol [ 349.624395][ T9423] das08-aom [ 349.624402][ T9423] das08/jr-ao [ 349.624410][ T9423] das08jr-16-ao [ 349.624418][ T9423] pc104-das08 [ 349.624426][ T9423] das08jr/16 [ 349.624434][ T9423] comedi: valid board names for das16m1 driver are: [ 349.624444][ T9423] das16m1 [ 349.624452][ T9423] comedi: valid board names for dac02 driver are: [ 349.624462][ T9423] dac02 [ 349.624469][ T9423] comedi: valid board names for rti802 driver are: [ 349.624479][ T9423] rti802 [ 349.624487][ T9423] comedi: valid board names for rti800 driver are: [ 349.624497][ T9423] rti800 [ 349.624504][ T9423] rti815 [ 349.624512][ T9423] comedi: valid board names for pcm3724 driver are: [ 349.624522][ T9423] pcm3724 [ 349.624530][ T9423] comedi: valid board names for pcl818 driver are: [ 349.624540][ T9423] pcl818l [ 349.624547][ T9423] pcl818h [ 349.624555][ T9423] pcl818hd [ 349.624563][ T9423] pcl818hg [ 349.624570][ T9423] pcl818 [ 349.624578][ T9423] pcl718 [ 349.624585][ T9423] pcm3718 [ 349.624592][ T9423] comedi: valid board names for pcl816 driver are: [ 349.624602][ T9423] pcl816 [ 349.624610][ T9423] pcl814b [ 349.624617][ T9423] comedi: valid board names for pcl812 driver are: [ 349.624627][ T9423] pcl812 [ 349.624634][ T9423] pcl812pg [ 349.624642][ T9423] acl8112pg [ 349.624650][ T9423] acl8112dg [ 349.624657][ T9423] acl8112hg [ 349.624665][ T9423] a821pgl [ 349.624673][ T9423] a821pglnda [ 349.624681][ T9423] a821pgh [ 349.624688][ T9423] a822pgl [ 349.624695][ T9423] a822pgh [ 349.624703][ T9423] a823pgl [ 349.624711][ T9423] a823pgh [ 349.624718][ T9423] pcl813 [ 349.624726][ T9423] pcl813b [ 349.624734][ T9423] acl8113 [ 349.624741][ T9423] iso813 [ 349.624749][ T9423] acl8216 [ 349.624756][ T9423] a826pg [ 349.624764][ T9423] comedi: valid board names for pcl730 driver are: [ 349.624774][ T9423] pcl730 [ 349.624781][ T9423] iso730 [ 349.624789][ T9423] acl7130 [ 349.624797][ T9423] pcm3730 [ 349.624804][ T9423] pcl725 [ 349.624813][ T9423] p8r8dio [ 349.624821][ T9423] acl7225b [ 349.624828][ T9423] p16r16dio [ 349.624836][ T9423] pcl733 [ 349.624844][ T9423] pcl734 [ 349.624851][ T9423] opmm-1616-xt [ 349.624860][ T9423] pearl-mm-p [ 349.624868][ T9423] ir104-pbf [ 349.624877][ T9423] comedi: valid board names for pcl726 driver are: [ 349.624887][ T9423] pcl726 [ 349.624894][ T9423] pcl727 [ 349.624902][ T9423] pcl728 [ 349.624910][ T9423] acl6126 [ 349.624918][ T9423] acl6128 [ 349.624926][ T9423] comedi: valid board names for pcl724 driver are: [ 349.624936][ T9423] pcl724 [ 349.624944][ T9423] pcl722 [ 349.624951][ T9423] pcl731 [ 349.624960][ T9423] acl7122 [ 349.624967][ T9423] acl7124 [ 349.624975][ T9423] pet48dio [ 349.624984][ T9423] pcmio48 [ 349.624991][ T9423] onyx-mm-dio [ 349.625000][ T9423] comedi: valid board names for pcl711 driver are: [ 349.625010][ T9423] pcl711 [ 349.625018][ T9423] pcl711b [ 349.625025][ T9423] acl8112hg [ 349.625034][ T9423] acl8112dg [ 349.625041][ T9423] comedi: valid board names for amplc_pc263 driver are: [ 349.625052][ T9423] pc263 [ 349.625060][ T9423] comedi: valid board names for amplc_pc236 driver are: [ 349.625071][ T9423] pc36at [ 349.625079][ T9423] comedi: valid board names for amplc_dio200 driver are: [ 349.625089][ T9423] pc212e [ 349.625097][ T9423] pc214e [ 349.625104][ T9423] pc215e [ 349.625112][ T9423] pc218e [ 349.625120][ T9423] pc272e [ 349.625128][ T9423] comedi: valid board names for comedi_parport driver are: [ 349.625151][ T9423] comedi_parport [ 349.625159][ T9423] comedi: valid board names for comedi_test driver are: [ 349.625169][ T9423] comedi_test [ 349.625177][ T9423] comedi: valid board names for comedi_bond driver are: [ 349.625187][ T9423] comedi_bond [ 349.650425][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1392'. [ 349.663653][ T9457] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1389 (9457) [ 349.718909][ T9457] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 349.718973][ T9457] BTRFS info (device loop7): using free space tree [ 349.718990][ T9457] BTRFS info (device loop7): has skinny extents [ 349.786893][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1393'. [ 349.872520][ T9464] netlink: 'syz.2.1393': attribute type 5 has an invalid length. [ 349.872544][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1393'. [ 350.019991][ T9457] BTRFS info (device loop7): enabling ssd optimizations [ 356.592191][ T9581] device bridge1 entered promiscuous mode [ 356.655800][ T9576] loop6: detected capacity change from 0 to 8192 [ 356.784514][ T9581] team0: Port device bridge1 added [ 357.222138][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'. [ 357.347727][ T9581] device wlan1 left promiscuous mode [ 357.431487][ T9581] bridge0: port 3(wlan1) entered disabled state [ 357.651250][ T9581] device bridge_slave_1 left promiscuous mode [ 357.657854][ T9581] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.689881][ T9581] device bridge_slave_0 left promiscuous mode [ 357.721290][ T9581] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.732685][ T9623] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.741710][ T9623] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.750677][ T9623] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.759531][ T9623] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.812462][ T9623] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.821740][ T9623] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.830975][ T9623] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.840027][ T9623] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.661725][ T9665] Illegal XDP return value 4294967282, expect packet loss! [ 366.805898][ T9674] syz.7.1452 (9674): drop_caches: 2 [ 366.813850][ T9674] syz.7.1452 (9674): drop_caches: 2 [ 367.111094][ T9687] device syzkaller0 entered promiscuous mode [ 367.788734][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 367.788751][ T26] audit: type=1326 audit(1762346772.176:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9697 comm="syz.2.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 368.377040][ T26] audit: type=1326 audit(1762346772.286:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9697 comm="syz.2.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9949939567 code=0x7ffc0000 [ 368.400276][ T26] audit: type=1326 audit(1762346772.286:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9697 comm="syz.2.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f99498de779 code=0x7ffc0000 [ 368.448682][ T26] audit: type=1326 audit(1762346772.286:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9697 comm="syz.2.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 368.554282][ T26] audit: type=1326 audit(1762346772.286:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9697 comm="syz.2.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 369.461362][ T26] audit: type=1326 audit(1762346772.286:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9697 comm="syz.2.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 369.553947][ T26] audit: type=1326 audit(1762346773.826:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9720 comm="syz.6.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 369.598338][ T9733] sctp: [Deprecated]: syz.4.1467 (pid 9733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 369.598338][ T9733] Use struct sctp_sack_info instead [ 369.621979][ T9726] team0: Port device ip6gretap2 added [ 369.647765][ T26] audit: type=1326 audit(1762346773.826:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9720 comm="syz.6.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 369.755904][ T26] audit: type=1326 audit(1762346773.826:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9720 comm="syz.6.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 369.806896][ T26] audit: type=1326 audit(1762346773.826:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9720 comm="syz.6.1466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 371.479380][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1477'. [ 371.493453][ T9755] overlayfs: failed to clone upperpath [ 372.816012][ T5364] libceph: connect (1)[c::]:6789 error -101 [ 372.822400][ T5364] libceph: mon0 (1)[c::]:6789 connect error [ 372.826385][ T9779] tipc: Enabled bearer , priority 10 [ 372.990908][ T9779] tipc: Enabling of bearer rejected, failed to enable media [ 373.088981][ T5364] libceph: connect (1)[c::]:6789 error -101 [ 373.095064][ T5364] libceph: mon0 (1)[c::]:6789 connect error [ 373.197186][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1492'. [ 373.427177][ T9800] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 373.515633][ T9802] loop6: detected capacity change from 0 to 128 [ 373.659312][ T9774] ceph: No mds server is up or the cluster is laggy [ 373.704432][ T9802] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 373.712197][ T4233] libceph: connect (1)[c::]:6789 error -101 [ 373.720997][ T4233] libceph: mon0 (1)[c::]:6789 connect error [ 374.685547][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 374.685564][ T26] audit: type=1326 audit(1762346779.106:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.6.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 374.727224][ T9822] loop7: detected capacity change from 0 to 2048 [ 374.757491][ T26] audit: type=1326 audit(1762346779.106:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.6.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 374.788680][ T26] audit: type=1326 audit(1762346779.136:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.6.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 374.802662][ T9822] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=2362, location=2362 [ 374.865009][ T9828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1506'. [ 374.875566][ T26] audit: type=1326 audit(1762346779.136:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.6.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 374.875668][ T9822] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 374.944096][ T26] audit: type=1326 audit(1762346779.136:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.6.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 375.010084][ T9822] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 375.026104][ T26] audit: type=1326 audit(1762346779.136:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.6.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 375.060722][ T26] audit: type=1326 audit(1762346779.136:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.6.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 375.084914][ T9822] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 375.111171][ T26] audit: type=1326 audit(1762346779.136:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.6.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 375.352860][ T26] audit: type=1326 audit(1762346779.146:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.6.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 375.386069][ T26] audit: type=1326 audit(1762346779.146:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.6.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6adf5756c9 code=0x7ffc0000 [ 375.464624][ T9846] ptrace attach of "./syz-executor exec"[4192] was attempted by "./syz-executor exec"[9846] [ 377.131238][ T9869] netlink: 'syz.2.1514': attribute type 4 has an invalid length. [ 377.297990][ T9880] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1515'. [ 378.870985][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.877319][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.120181][ T9917] tipc: Enabling of bearer rejected, failed to enable media [ 380.297425][ T9917] tipc: Enabling of bearer rejected, failed to enable media [ 380.801228][ T9929] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 380.827814][ T9929] CIFS mount error: No usable UNC path provided in device string! [ 380.827814][ T9929] [ 380.838543][ T9929] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 380.953070][ T5363] Bluetooth: hci4: command 0x0406 tx timeout [ 381.464406][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1536'. [ 381.584872][ T9949] loop6: detected capacity change from 0 to 2048 [ 382.224725][ T9949] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 382.481406][ T9949] UDF-fs: error (device loop6): udf_read_inode: (ino 1347) failed !bh [ 384.538182][ T9976] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1549'. [ 386.793304][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 386.793320][ T26] audit: type=1326 audit(1762346791.216:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 386.824922][ T26] audit: type=1326 audit(1762346791.246:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 387.618958][ T26] audit: type=1326 audit(1762346791.246:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 387.734150][T10039] device bridge3 entered promiscuous mode [ 387.781767][ T26] audit: type=1326 audit(1762346791.246:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 387.848521][ T26] audit: type=1326 audit(1762346791.246:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 387.935710][T10039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'. [ 387.945647][ T26] audit: type=1326 audit(1762346791.246:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 387.969718][ T26] audit: type=1326 audit(1762346791.246:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 387.992413][ T26] audit: type=1326 audit(1762346791.246:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 388.027117][ T26] audit: type=1326 audit(1762346791.246:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 388.069760][ T26] audit: type=1326 audit(1762346791.266:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 388.119718][T10047] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1573'. [ 395.389563][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 395.389579][ T26] audit: type=1326 audit(1762346799.816:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.2.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 395.394420][T10089] loop7: detected capacity change from 0 to 2048 [ 395.400409][ T26] audit: type=1326 audit(1762346799.816:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.2.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 395.628786][ T26] audit: type=1326 audit(1762346799.866:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.2.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 395.783640][ T26] audit: type=1326 audit(1762346799.866:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.2.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 395.898778][ T26] audit: type=1326 audit(1762346799.866:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.2.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 397.012063][T10089] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 397.087369][T10089] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.122384][ T26] audit: type=1326 audit(1762346799.876:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.2.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 397.309101][ T26] audit: type=1326 audit(1762346799.876:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.2.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 397.518756][ T26] audit: type=1326 audit(1762346799.876:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.2.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 398.597690][ T26] audit: type=1326 audit(1762346799.876:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.2.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 398.692600][ T26] audit: type=1326 audit(1762346799.876:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10091 comm="syz.2.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 399.881533][T10141] loop7: detected capacity change from 0 to 128 [ 401.003461][T10156] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.012916][T10156] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.375762][T10164] loop7: detected capacity change from 0 to 512 [ 402.499970][T10164] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 402.574329][T10164] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 406.152988][T10200] loop7: detected capacity change from 0 to 8192 [ 412.158405][T10265] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1639'. [ 412.377589][T10275] bridge0: port 4(netdevsim0) entered blocking state [ 412.403988][T10275] bridge0: port 4(netdevsim0) entered disabled state [ 412.414786][T10275] device netdevsim0 entered promiscuous mode [ 413.564911][T10298] bond0: Caught tx_queue_len zero misconfig [ 417.564038][T10357] comedi: valid board names for 8255 driver are: [ 417.564055][T10357] 8255 [ 417.564064][T10357] comedi: valid board names for vmk80xx driver are: [ 417.564075][T10357] vmk80xx [ 417.564084][T10357] comedi: valid board names for usbduxsigma driver are: [ 417.564094][T10357] usbduxsigma [ 417.564102][T10357] comedi: valid board names for usbduxfast driver are: [ 417.564112][T10357] usbduxfast [ 417.564120][T10357] comedi: valid board names for usbdux driver are: [ 417.564130][T10357] usbdux [ 417.564138][T10357] comedi: valid board names for ni6501 driver are: [ 417.564148][T10357] ni6501 [ 417.564155][T10357] comedi: valid board names for dt9812 driver are: [ 417.564172][T10357] dt9812 [ 417.564179][T10357] comedi: valid board names for ni_labpc_cs driver are: [ 417.564190][T10357] ni_labpc_cs [ 417.564198][T10357] comedi: valid board names for ni_daq_700 driver are: [ 417.564208][T10357] ni_daq_700 [ 417.564216][T10357] comedi: valid board names for labpc_pci driver are: [ 417.564225][T10357] labpc_pci [ 417.564233][T10357] comedi: valid board names for adl_pci9118 driver are: [ 417.564243][T10357] pci9118dg [ 417.564251][T10357] pci9118hg [ 417.564259][T10357] pci9118hr [ 417.564267][T10357] comedi: valid board names for 8255_pci driver are: [ 417.564276][T10357] 8255_pci [ 417.564284][T10357] comedi: valid board names for s526 driver are: [ 417.564294][T10357] s526 [ 417.564302][T10357] comedi: valid board names for multiq3 driver are: [ 417.564312][T10357] multiq3 [ 417.564320][T10357] comedi: valid board names for pcmuio driver are: [ 417.564330][T10357] pcmuio48 [ 417.564338][T10357] pcmuio96 [ 417.564346][T10357] comedi: valid board names for pcmmio driver are: [ 417.564355][T10357] pcmmio [ 417.564364][T10357] comedi: valid board names for pcmda12 driver are: [ 417.564374][T10357] pcmda12 [ 417.564381][T10357] comedi: valid board names for pcmad driver are: [ 417.564391][T10357] pcmad12 [ 417.564398][T10357] pcmad16 [ 417.564406][T10357] comedi: valid board names for ni_labpc driver are: [ 417.564417][T10357] lab-pc-1200 [ 417.564424][T10357] lab-pc-1200ai [ 417.564432][T10357] lab-pc+ [ 417.564440][T10357] comedi: valid board names for atmio16 driver are: [ 417.564450][T10357] atmio16 [ 417.564457][T10357] atmio16d [ 417.564465][T10357] comedi: valid board names for ni_at_ao driver are: [ 417.564475][T10357] at-ao-6 [ 417.564483][T10357] at-ao-10 [ 417.564491][T10357] comedi: valid board names for ni_at_a2150 driver are: [ 417.564501][T10357] ni_at_a2150 [ 417.564509][T10357] comedi: valid board names for adq12b driver are: [ 417.564519][T10357] adq12b [ 417.564527][T10357] comedi: valid board names for mpc624 driver are: [ 417.564536][T10357] mpc624 [ 417.564544][T10357] comedi: valid board names for c6xdigio driver are: [ 417.564555][T10357] c6xdigio [ 417.564562][T10357] comedi: valid board names for aio_iiro_16 driver are: [ 417.564572][T10357] aio_iiro_16 [ 417.564580][T10357] comedi: valid board names for aio_aio12_8 driver are: [ 417.564590][T10357] aio_aio12_8 [ 417.564598][T10357] aio_ai12_8 [ 417.564606][T10357] aio_ao12_4 [ 417.564614][T10357] comedi: valid board names for fl512 driver are: [ 417.564624][T10357] fl512 [ 417.564631][T10357] comedi: valid board names for dmm32at driver are: [ 417.564641][T10357] dmm32at [ 417.564649][T10357] comedi: valid board names for dt282x driver are: [ 417.564658][T10357] dt2821 [ 417.564666][T10357] dt2821-f [ 417.564673][T10357] dt2821-g [ 417.564681][T10357] dt2823 [ 417.564688][T10357] dt2824-pgh [ 417.564696][T10357] dt2824-pgl [ 417.564703][T10357] dt2825 [ 417.564711][T10357] dt2827 [ 417.564719][T10357] dt2828 [ 417.564726][T10357] dt2829 [ 417.564734][T10357] dt21-ez [ 417.564741][T10357] dt23-ez [ 417.564748][T10357] dt24-ez [ 417.564756][T10357] dt24-ez-pgl [ 417.564764][T10357] comedi: valid board names for dt2817 driver are: [ 417.564774][T10357] dt2817 [ 417.564781][T10357] comedi: valid board names for dt2815 driver are: [ 417.564791][T10357] dt2815 [ 417.564798][T10357] comedi: valid board names for dt2814 driver are: [ 417.564808][T10357] dt2814 [ 417.564822][T10357] comedi: valid board names for dt2811 driver are: [ 417.564832][T10357] dt2811-pgh [ 417.564839][T10357] dt2811-pgl [ 417.564847][T10357] comedi: valid board names for dt2801 driver are: [ 417.564857][T10357] dt2801 [ 417.564865][T10357] comedi: valid board names for das6402 driver are: [ 417.564874][T10357] das6402-12 [ 417.564882][T10357] das6402-16 [ 417.564890][T10357] comedi: valid board names for das1800 driver are: [ 417.564899][T10357] das-1701st [ 417.564908][T10357] das-1701st-da [ 417.564915][T10357] das-1702st [ 417.564923][T10357] das-1702st-da [ 417.564932][T10357] das-1702hr [ 417.564939][T10357] das-1702hr-da [ 417.564948][T10357] das-1701ao [ 417.564955][T10357] das-1702ao [ 417.564963][T10357] das-1801st [ 417.564971][T10357] das-1801st-da [ 417.564979][T10357] das-1802st [ 417.564986][T10357] das-1802st-da [ 417.564995][T10357] das-1802hr [ 417.565002][T10357] das-1802hr-da [ 417.565011][T10357] das-1801hc [ 417.565018][T10357] das-1802hc [ 417.565026][T10357] das-1801ao [ 417.565034][T10357] das-1802ao [ 417.565042][T10357] comedi: valid board names for das800 driver are: [ 417.565052][T10357] das-800 [ 417.565060][T10357] cio-das800 [ 417.565068][T10357] das-801 [ 417.565075][T10357] cio-das801 [ 417.565083][T10357] das-802 [ 417.565091][T10357] cio-das802 [ 417.565099][T10357] cio-das802/16 [ 417.565107][T10357] comedi: valid board names for isa-das08 driver are: [ 417.565118][T10357] isa-das08 [ 417.565125][T10357] das08-pgm [ 417.565133][T10357] das08-pgh [ 417.565140][T10357] das08-pgl [ 417.565148][T10357] das08-aoh [ 417.565156][T10357] das08-aol [ 417.565170][T10357] das08-aom [ 417.565177][T10357] das08/jr-ao [ 417.565186][T10357] das08jr-16-ao [ 417.565193][T10357] pc104-das08 [ 417.565201][T10357] das08jr/16 [ 417.565210][T10357] comedi: valid board names for das16m1 driver are: [ 417.565220][T10357] das16m1 [ 417.565227][T10357] comedi: valid board names for dac02 driver are: [ 417.565237][T10357] dac02 [ 417.565245][T10357] comedi: valid board names for rti802 driver are: [ 417.565254][T10357] rti802 [ 417.565262][T10357] comedi: valid board names for rti800 driver are: [ 417.565271][T10357] rti800 [ 417.565279][T10357] rti815 [ 417.565287][T10357] comedi: valid board names for pcm3724 driver are: [ 417.565297][T10357] pcm3724 [ 417.565304][T10357] comedi: valid board names for pcl818 driver are: [ 417.565314][T10357] pcl818l [ 417.565321][T10357] pcl818h [ 417.565329][T10357] pcl818hd [ 417.565337][T10357] pcl818hg [ 417.565344][T10357] pcl818 [ 417.565352][T10357] pcl718 [ 417.565360][T10357] pcm3718 [ 417.565367][T10357] comedi: valid board names for pcl816 driver are: [ 417.565377][T10357] pcl816 [ 417.565384][T10357] pcl814b [ 417.565392][T10357] comedi: valid board names for pcl812 driver are: [ 417.565402][T10357] pcl812 [ 417.565410][T10357] pcl812pg [ 417.565417][T10357] acl8112pg [ 417.565425][T10357] acl8112dg [ 417.565433][T10357] acl8112hg [ 417.565440][T10357] a821pgl [ 417.565448][T10357] a821pglnda [ 417.565456][T10357] a821pgh [ 417.565464][T10357] a822pgl [ 417.565471][T10357] a822pgh [ 417.565479][T10357] a823pgl [ 417.565487][T10357] a823pgh [ 417.565494][T10357] pcl813 [ 417.565502][T10357] pcl813b [ 417.565510][T10357] acl8113 [ 417.565517][T10357] iso813 [ 417.565525][T10357] acl8216 [ 417.565533][T10357] a826pg [ 417.565540][T10357] comedi: valid board names for pcl730 driver are: [ 417.565550][T10357] pcl730 [ 417.565558][T10357] iso730 [ 417.565565][T10357] acl7130 [ 417.565572][T10357] pcm3730 [ 417.565580][T10357] pcl725 [ 417.565588][T10357] p8r8dio [ 417.565595][T10357] acl7225b [ 417.565603][T10357] p16r16dio [ 417.565610][T10357] pcl733 [ 417.565618][T10357] pcl734 [ 417.565625][T10357] opmm-1616-xt [ 417.565633][T10357] pearl-mm-p [ 417.565641][T10357] ir104-pbf [ 417.565649][T10357] comedi: valid board names for pcl726 driver are: [ 417.565658][T10357] pcl726 [ 417.565666][T10357] pcl727 [ 417.565673][T10357] pcl728 [ 417.565680][T10357] acl6126 [ 417.565688][T10357] acl6128 [ 417.565696][T10357] comedi: valid board names for pcl724 driver are: [ 417.565705][T10357] pcl724 [ 417.565713][T10357] pcl722 [ 417.565720][T10357] pcl731 [ 417.565728][T10357] acl7122 [ 417.565735][T10357] acl7124 [ 417.565743][T10357] pet48dio [ 417.565751][T10357] pcmio48 [ 417.565758][T10357] onyx-mm-dio [ 417.565766][T10357] comedi: valid board names for pcl711 driver are: [ 417.565776][T10357] pcl711 [ 417.565783][T10357] pcl711b [ 417.565791][T10357] acl8112hg [ 417.565799][T10357] acl8112dg [ 417.565806][T10357] comedi: valid board names for amplc_pc263 driver are: [ 417.565817][T10357] pc263 [ 417.565824][T10357] comedi: valid board names for amplc_pc236 driver are: [ 417.565834][T10357] pc36at [ 417.565842][T10357] comedi: valid board names for amplc_dio200 driver are: [ 417.565852][T10357] pc212e [ 417.565860][T10357] pc214e [ 417.565867][T10357] pc215e [ 417.565875][T10357] pc218e [ 417.565882][T10357] pc272e [ 417.565890][T10357] comedi: valid board names for comedi_parport driver are: [ 417.565900][T10357] comedi_parport [ 417.565908][T10357] comedi: valid board names for comedi_test driver are: [ 417.565919][T10357] comedi_test [ 417.565927][T10357] comedi: valid board names for comedi_bond driver are: [ 417.565937][T10357] comedi_bond [ 420.349463][T10376] loop6: detected capacity change from 0 to 128 [ 420.351071][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 420.351274][ T26] audit: type=1326 audit(1762346824.526:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.5.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 420.351954][ T26] audit: type=1326 audit(1762346824.526:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.5.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 420.435830][T10376] VFS: Found a Xenix FS (block size = 512) on device loop6 [ 420.446865][T10376] sysv_free_block: trying to free block not in datazone [ 420.451656][T10376] sysv_free_block: trying to free block not in datazone [ 420.455684][T10376] sysv_free_block: getblk() failed [ 420.456079][T10376] sysv_free_block: getblk() failed [ 420.457075][T10376] sysv_free_block: getblk() failed [ 420.457250][T10376] sysv_free_block: getblk() failed [ 420.457388][T10376] sysv_free_block: getblk() failed [ 420.457526][T10376] sysv_free_block: getblk() failed [ 420.457665][T10376] sysv_free_block: getblk() failed [ 420.457809][T10376] sysv_free_block: getblk() failed [ 420.457925][T10376] sysv_free_block: getblk() failed [ 420.458039][T10376] sysv_free_block: getblk() failed [ 420.458651][T10376] sysv_free_block: getblk() failed [ 420.458790][T10376] sysv_free_block: getblk() failed [ 420.458928][T10376] sysv_free_block: getblk() failed [ 420.459804][T10376] sysv_free_block: getblk() failed [ 420.459946][T10376] sysv_free_block: getblk() failed [ 420.460086][T10376] sysv_free_block: getblk() failed [ 420.460202][T10376] sysv_free_block: getblk() failed [ 420.460337][T10376] sysv_free_block: getblk() failed [ 420.461950][T10376] sysv_free_block: getblk() failed [ 420.462149][T10376] sysv_free_block: getblk() failed [ 420.462293][T10376] sysv_free_block: getblk() failed [ 420.462408][T10376] sysv_free_block: getblk() failed [ 420.462544][T10376] sysv_free_block: getblk() failed [ 420.462705][T10376] sysv_free_block: getblk() failed [ 420.462827][T10376] sysv_free_block: getblk() failed [ 420.462943][T10376] sysv_free_block: getblk() failed [ 420.463828][T10376] sysv_free_block: getblk() failed [ 420.464001][T10376] sysv_free_block: getblk() failed [ 420.464139][T10376] sysv_free_block: getblk() failed [ 420.464276][T10376] sysv_free_block: getblk() failed [ 420.464412][T10376] sysv_free_block: getblk() failed [ 420.464527][T10376] sysv_free_block: getblk() failed [ 420.464663][T10376] sysv_free_block: getblk() failed [ 420.464807][T10376] sysv_free_block: getblk() failed [ 420.465761][T10376] sysv_free_block: getblk() failed [ 420.465930][T10376] sysv_free_block: getblk() failed [ 420.466075][T10376] sysv_free_block: getblk() failed [ 420.466980][T10376] sysv_free_block: getblk() failed [ 420.467011][T10376] sysv_free_block: trying to free block not in datazone [ 420.467021][T10376] sysv_free_block: trying to free block not in datazone [ 420.467907][T10376] sysv_free_block: trying to free block not in datazone [ 420.468032][T10376] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 420.755457][ T26] audit: type=1326 audit(1762346825.076:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.5.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 420.764355][ T26] audit: type=1326 audit(1762346825.186:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.5.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 420.764545][ T26] audit: type=1326 audit(1762346825.186:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.5.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 420.765959][ T26] audit: type=1326 audit(1762346825.186:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.5.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 420.774315][ T26] audit: type=1326 audit(1762346825.196:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.5.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 420.775418][ T26] audit: type=1326 audit(1762346825.196:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.5.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 420.775960][ T26] audit: type=1326 audit(1762346825.196:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.5.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 420.779312][T10371] netlink: 'syz.5.1670': attribute type 4 has an invalid length. [ 420.779331][T10371] netlink: 'syz.5.1670': attribute type 3 has an invalid length. [ 420.779347][T10371] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1670'. [ 420.779549][ T26] audit: type=1326 audit(1762346825.206:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10368 comm="syz.5.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 421.023013][T10381] netlink: 'syz.5.1675': attribute type 16 has an invalid length. [ 421.023036][T10381] netlink: 'syz.5.1675': attribute type 17 has an invalid length. [ 421.069527][T10384] tipc: Failed to remove unknown binding: 66,1,1/0:2554421666/2554421668 [ 421.070856][T10384] tipc: Failed to remove unknown binding: 66,1,1/0:2554421666/2554421668 [ 421.070956][T10384] tipc: Failed to remove unknown binding: 66,1,1/0:2554421666/2554421668 [ 422.857590][T10420] loop6: detected capacity change from 0 to 64 [ 422.918271][T10420] hfs: unable to locate alternate MDB [ 422.918323][T10420] hfs: continuing without an alternate MDB [ 424.403554][T10434] loop6: detected capacity change from 0 to 512 [ 424.824379][T10434] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 424.825191][T10434] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 425.259643][T10434] EXT4-fs error (device loop6): ext4_do_update_inode:5218: inode #2: comm syz.6.1692: corrupted inode contents [ 425.260721][T10434] EXT4-fs error (device loop6): ext4_dirty_inode:6054: inode #2: comm syz.6.1692: mark_inode_dirty error [ 425.725540][T10434] EXT4-fs error (device loop6): ext4_do_update_inode:5218: inode #2: comm syz.6.1692: corrupted inode contents [ 425.739166][T10434] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.1692: mark_inode_dirty error [ 430.741655][T10499] device vlan2 entered promiscuous mode [ 430.747555][T10499] device bond0 entered promiscuous mode [ 430.754222][T10499] device bond_slave_0 entered promiscuous mode [ 430.767125][T10499] device bond_slave_1 entered promiscuous mode [ 430.775414][T10499] device team0 entered promiscuous mode [ 430.781449][T10499] device team_slave_0 entered promiscuous mode [ 430.789060][T10499] device team_slave_1 entered promiscuous mode [ 430.795469][T10499] device geneve0 entered promiscuous mode [ 430.852380][T10503] xt_bpf: check failed: parse error [ 430.997548][T10505] syz.7.1710 (10505): drop_caches: 2 [ 434.946499][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 434.946517][ T26] audit: type=1326 audit(1762346839.366:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.5.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 435.047871][ T26] audit: type=1326 audit(1762346839.366:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.5.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 435.124075][T10568] bond1: option fail_over_mac: unable to set because the bond device has slaves [ 435.136071][ T26] audit: type=1326 audit(1762346839.406:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.5.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 436.003358][ T26] audit: type=1326 audit(1762346839.406:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.5.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 436.026304][ T26] audit: type=1326 audit(1762346839.406:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.5.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 436.064209][T10574] netlink: 'syz.7.1733': attribute type 12 has an invalid length. [ 436.106857][ T26] audit: type=1326 audit(1762346839.406:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.5.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 436.179455][ T26] audit: type=1326 audit(1762346839.406:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.5.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 436.248656][ T26] audit: type=1326 audit(1762346839.406:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.5.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 436.282615][ T26] audit: type=1326 audit(1762346839.426:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.5.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 436.333536][ T26] audit: type=1326 audit(1762346839.426:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10559 comm="syz.5.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 437.680795][T10613] loop7: detected capacity change from 0 to 128 [ 437.775395][T10613] hpfs: Bad version 183,140. Mount readonly to go around [ 437.800956][T10613] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz [ 438.602526][T10620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1748'. [ 440.016854][T10636] loop6: detected capacity change from 0 to 64 [ 440.834247][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.851922][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.307127][T10656] netlink: 'syz.7.1756': attribute type 10 has an invalid length. [ 441.315363][T10656] device hsr0 entered promiscuous mode [ 441.321260][T10656] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 441.333667][T10656] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 441.344645][T10656] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 441.357432][T10656] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 442.284716][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1773'. [ 442.353127][T10671] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1762'. [ 445.550027][T10723] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 447.610360][T10768] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1796'. [ 449.349118][T10788] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1804'. [ 449.366164][T10788] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1804'. [ 449.380689][T10788] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1804'. [ 449.924146][T10799] futex_wake_op: syz.4.1803 tries to shift op by 32; fix this program [ 450.847104][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 450.847121][ T26] audit: type=1326 audit(1762346855.266:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.2.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 451.107130][ T26] audit: type=1326 audit(1762346855.306:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.2.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 451.700092][ T26] audit: type=1326 audit(1762346855.306:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.2.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 451.859556][ T26] audit: type=1326 audit(1762346855.306:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.2.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 452.040374][T10835] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 452.772799][ T26] audit: type=1326 audit(1762346855.306:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.2.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 453.520002][ T26] audit: type=1326 audit(1762346855.306:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.2.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 454.252836][ T26] audit: type=1326 audit(1762346855.306:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.2.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 454.517577][ T26] audit: type=1326 audit(1762346855.306:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.2.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 454.574712][ T26] audit: type=1326 audit(1762346855.306:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.2.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 454.604855][ T26] audit: type=1326 audit(1762346855.306:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10815 comm="syz.2.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 454.768871][T10835] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 454.813911][T10835] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 454.849108][T10835] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 454.868938][T10835] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 454.889132][T10835] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 454.928719][T10835] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 455.101791][T10835] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 455.118344][T10835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.161125][T10835] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.179845][T10835] batman_adv: batadv0: Interface activated: dummy0 [ 455.186859][T10835] net_ratelimit: 11 callbacks suppressed [ 455.186876][T10835] batadv0: mtu less than device minimum [ 455.221195][T10835] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 455.233931][T10835] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 455.245790][T10835] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 455.257744][T10835] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 455.270111][T10835] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 455.282058][T10835] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 455.294599][T10835] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 455.306459][T10835] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 455.318483][T10835] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 455.393731][T10835] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 455.418483][T10856] tipc: Enabling of bearer rejected, failed to enable media [ 455.773101][T10883] netlink: 'syz.4.1833': attribute type 10 has an invalid length. [ 455.781264][T10883] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1833'. [ 455.803279][T10883] batman_adv: batadv0: Adding interface: virt_wifi0 [ 455.810085][T10883] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.836009][T10883] batman_adv: batadv0: Interface activated: virt_wifi0 [ 456.673926][T10904] device vlan3 entered promiscuous mode [ 456.727299][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1843'. [ 458.807105][T10962] 9pnet: p9_errstr2errno: server reported unknown error [ 461.374806][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 461.374823][ T26] audit: type=1326 audit(1762346865.796:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.5.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 461.412267][ T26] audit: type=1326 audit(1762346865.796:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.5.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 461.457490][ T26] audit: type=1326 audit(1762346865.796:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.5.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 461.506098][ T26] audit: type=1326 audit(1762346865.796:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.5.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 461.736152][ T26] audit: type=1326 audit(1762346865.796:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.5.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 463.019431][ T26] audit: type=1326 audit(1762346865.796:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.5.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 463.046676][ T26] audit: type=1326 audit(1762346865.796:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.5.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 463.120323][ T26] audit: type=1326 audit(1762346865.796:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.5.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 463.214361][ T26] audit: type=1326 audit(1762346865.836:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.5.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 463.328873][T11018] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1877'. [ 463.350674][ T26] audit: type=1326 audit(1762346865.836:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10986 comm="syz.5.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 463.455435][T11025] lo: Caught tx_queue_len zero misconfig [ 463.913602][T11040] hugetlbfs: syz.5.1891 (11040): Using mlock ulimits for SHM_HUGETLB is deprecated [ 467.036294][T11067] net_ratelimit: 31 callbacks suppressed [ 467.036314][T11067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.139952][T11074] loop7: detected capacity change from 0 to 512 [ 467.293211][T11074] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodiscard,max_dir_size_kb=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 467.325225][T11074] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.087088][T11121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 473.104347][T11164] bond0: Caught tx_queue_len zero misconfig [ 474.125087][T11182] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 474.252147][T11182] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 474.475827][T11187] sock: sock_set_timeout: `syz.7.1937' (pid 11187) tries to set negative timeout [ 474.587370][T11182] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 475.960590][T11203] device syzkaller0 entered promiscuous mode [ 476.106628][T11205] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 476.234038][T11207] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 476.341588][T11207] sch_tbf: burst 2 is lower than device lo mtu (18) ! [ 477.003946][T11221] mmap: syz.4.1951 (11221) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 477.128411][T11227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1953'. [ 478.629361][T11239] netlink: 'syz.6.1956': attribute type 21 has an invalid length. [ 478.665771][T11239] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1956'. [ 478.711353][T11239] netlink: 'syz.6.1956': attribute type 1 has an invalid length. [ 478.738062][T11239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1956'. [ 478.770714][T11239] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 479.754752][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 479.754769][ T26] audit: type=1326 audit(1762346884.176:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.7.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d83f8c6c9 code=0x7ffc0000 [ 479.870742][ T26] audit: type=1326 audit(1762346884.226:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.7.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d83f8c6c9 code=0x7ffc0000 [ 479.923087][ T26] audit: type=1326 audit(1762346884.226:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.7.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d83f8c6c9 code=0x7ffc0000 [ 480.004650][ T26] audit: type=1326 audit(1762346884.226:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.7.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d83f8c6c9 code=0x7ffc0000 [ 480.051914][T11269] loop7: detected capacity change from 0 to 2048 [ 480.061985][ T26] audit: type=1326 audit(1762346884.226:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.7.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d83f8c6c9 code=0x7ffc0000 [ 480.105032][ T26] audit: type=1326 audit(1762346884.226:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.7.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d83f8c6c9 code=0x7ffc0000 [ 480.145938][T11269] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 480.189920][T11269] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 480.201040][ T26] audit: type=1326 audit(1762346884.226:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.7.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d83f8c6c9 code=0x7ffc0000 [ 480.268981][T11269] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 480.276805][T11269] UDF-fs: Scanning with blocksize 512 failed [ 480.300566][ T26] audit: type=1326 audit(1762346884.226:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.7.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d83f8c6c9 code=0x7ffc0000 [ 480.380994][T11269] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.387029][ T26] audit: type=1326 audit(1762346884.226:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.7.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d83f8c6c9 code=0x7ffc0000 [ 480.438306][ T26] audit: type=1326 audit(1762346884.226:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11259 comm="syz.7.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d83f8c6c9 code=0x7ffc0000 [ 484.833193][T11316] binder_alloc: 11315: pid 11315 spamming oneway? 1 buffers allocated for a total size of 4096 [ 485.170935][ T26] kauditd_printk_skb: 50 callbacks suppressed [ 485.170952][ T26] audit: type=1326 audit(1762346889.596:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11323 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 485.577037][ T26] audit: type=1326 audit(1762346889.626:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11323 comm="syz.5.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 486.208329][ T26] audit: type=1326 audit(1762346890.626:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 486.434027][T11344] sg_write: data in/out 16514940/1 bytes for SCSI command 0x1c-- guessing data in; [ 486.434027][T11344] program syz.6.1997 not setting count and/or reply_len properly [ 487.315327][ T26] audit: type=1326 audit(1762346890.666:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 487.372133][ T26] audit: type=1326 audit(1762346890.666:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 487.402415][T11341] netlink: 'syz.7.1989': attribute type 12 has an invalid length. [ 487.405794][ T26] audit: type=1326 audit(1762346890.666:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 487.435714][ T26] audit: type=1326 audit(1762346890.666:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 487.477135][ T26] audit: type=1326 audit(1762346890.666:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 487.544469][ T26] audit: type=1326 audit(1762346890.756:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 487.651584][ T26] audit: type=1326 audit(1762346890.756:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11333 comm="syz.2.1988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99499426c9 code=0x7ffc0000 [ 487.728372][T11355] loop7: detected capacity change from 0 to 2048 [ 489.429642][T11355] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 489.817692][T11379] Cannot find set identified by id 3 to match [ 490.687781][T11393] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 490.725770][T11393] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 144 with error 28 [ 490.762614][T11393] EXT4-fs (loop7): This should not happen!! Data will be lost [ 490.762614][T11393] [ 490.807545][T11393] EXT4-fs (loop7): Total free blocks count 0 [ 490.821972][T11393] EXT4-fs (loop7): Free/Dirty block details [ 490.837998][T11393] EXT4-fs (loop7): free_blocks=2415919504 [ 490.869254][T11393] EXT4-fs (loop7): dirty_blocks=160 [ 490.890013][T11393] EXT4-fs (loop7): Block reservation details [ 490.910720][T11393] EXT4-fs (loop7): i_reserved_data_blocks=10 [ 491.074244][ T4412] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 491.110579][ T4412] EXT4-fs (loop7): This should not happen!! Data will be lost [ 491.110579][ T4412] [ 492.022032][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2012'. [ 494.424685][T11433] loop7: detected capacity change from 0 to 512 [ 494.570222][T11433] FAT-fs (loop7): Unrecognized mount option "func=CREDS_CHECK" or missing value [ 500.278878][T11485] device geneve2 entered promiscuous mode [ 500.319007][T11489] netlink: 'syz.2.2035': attribute type 10 has an invalid length. [ 500.337936][T11489] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2035'. [ 500.359073][T11489] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 500.646654][T11497] netlink: 'syz.2.2038': attribute type 3 has an invalid length. [ 500.681157][T11497] netlink: 'syz.2.2038': attribute type 3 has an invalid length. [ 501.751194][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.765799][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.131450][T11554] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2057'. [ 505.648330][T11554] tipc: Enabling of bearer rejected, failed to enable media [ 506.115151][T11571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2062'. [ 506.466498][T11571] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2062'. [ 507.731598][ T26] kauditd_printk_skb: 39 callbacks suppressed [ 507.731615][ T26] audit: type=1326 audit(1762346912.156:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11598 comm="syz.5.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 507.815508][ T26] audit: type=1326 audit(1762346912.156:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11598 comm="syz.5.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 507.895381][ T26] audit: type=1326 audit(1762346912.156:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11598 comm="syz.5.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 507.938350][ T26] audit: type=1326 audit(1762346912.156:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11598 comm="syz.5.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 507.992036][ T26] audit: type=1326 audit(1762346912.156:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11598 comm="syz.5.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 508.040804][ T26] audit: type=1326 audit(1762346912.156:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11598 comm="syz.5.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 508.118593][ T26] audit: type=1326 audit(1762346912.156:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11598 comm="syz.5.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 508.191488][ T26] audit: type=1326 audit(1762346912.156:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11598 comm="syz.5.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 508.214430][ T26] audit: type=1326 audit(1762346912.156:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11598 comm="syz.5.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 508.237486][ T26] audit: type=1326 audit(1762346912.156:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11598 comm="syz.5.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f5946a4a6c9 code=0x7ffc0000 [ 510.040157][T11611] block nbd7: shutting down sockets [ 510.245015][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2082'. [ 510.314751][T11637] batman_adv: batadv0: Removing interface: dummy0 [ 512.258304][T11657] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2091'. [ 512.601518][T11667] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2095'. [ 513.565325][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 513.565343][ T26] audit: type=1804 audit(1762346917.986:860): pid=11681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2109" name="bus" dev="ramfs" ino=57222 res=1 errno=0 [ 513.569015][T11681] Invalid ELF header magic: != ELF [ 514.938179][T11707] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 517.064802][T11750] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2124'. [ 519.228090][T11762] overlayfs: failed to clone upperpath [ 522.934090][T11814] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.924577][T11814] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.025285][T11814] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.098902][ T9154] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 525.472787][T11814] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.648915][ T9154] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 525.687899][ T9154] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.744596][ T9154] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.778965][ T9154] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 525.905925][ T9154] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 525.926959][ T9154] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 525.950243][T11814] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.961037][ T9154] usb 7-1: Manufacturer: syz [ 525.975139][ T9154] usb 7-1: config 0 descriptor?? [ 525.987549][T11814] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.011728][T11814] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.034112][T11814] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.269374][T11846] netlink: 'syz.5.2152': attribute type 27 has an invalid length. [ 526.430717][T11844] set match dimension is over the limit! [ 526.510041][T11831] udc-core: couldn't find an available UDC or it's busy [ 526.527393][T11831] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 526.766150][ T9154] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 526.776782][ T9154] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 526.830101][ T9154] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 528.184904][T11846] batman_adv: batadv0: Interface deactivated: dummy0 [ 528.272945][T11865] loop7: detected capacity change from 0 to 8192 [ 528.304555][T11860] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.313474][T11860] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.322295][T11860] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.331086][T11860] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.450561][T11860] device vxlan0 entered promiscuous mode [ 528.466020][T11860] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 529.781860][ T21] usb 7-1: USB disconnect, device number 2 [ 530.231777][T11865] loop7: p1 < > p2 p3 < p5 p6 > p4 [ 530.237079][T11865] loop7: partition table partially beyond EOD, truncated [ 530.287496][T11865] loop7: p1 start 100663296 is beyond EOD, truncated [ 530.362908][T11865] loop7: p2 size 134217732 extends beyond EOD, truncated [ 530.666627][T11865] loop7: p4 size 14876672 extends beyond EOD, truncated [ 530.816736][T11865] loop7: p5 size 134217732 extends beyond EOD, truncated [ 530.981218][T11865] loop7: p6 size 14876672 extends beyond EOD, truncated [ 531.304612][T11890] infiniband syz1: set active [ 531.323163][T11890] infiniband syz1: added syz_tun [ 531.496989][T11890] RDS/IB: syz1: added [ 531.504954][T11890] smc: adding ib device syz1 with port count 1 [ 531.512538][T11890] smc: ib device syz1 port 1 has pnetid [ 531.536629][T11902] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 531.613351][T11907] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 531.802947][T10147] udevd[10147]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 531.816649][T11892] udevd[11892]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 531.850499][T10081] udevd[10081]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 531.874025][T11257] udevd[11257]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 531.962878][T11912] udevd[11912]: inotify_add_watch(7, /dev/loop7p6, 10) failed: No such file or directory [ 532.270882][T11893] rdma_rxe: ignoring netdev event = 10 for syz_tun [ 532.293501][T11919] xt_l2tp: missing protocol rule (udp|l2tpip) [ 532.627214][T11893] infiniband syz1: set down [ 532.704054][T11921] 9pnet_virtio: no channels available for device syz [ 532.827348][T11925] ------------[ cut here ]------------ [ 532.847890][T11925] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 532.856076][T11925] WARNING: CPU: 1 PID: 11925 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 532.874011][T11925] Modules linked in: [ 532.878000][T11925] CPU: 1 PID: 11925 Comm: syz.7.2175 Not tainted syzkaller #0 [ 532.899563][T11925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 532.932481][T11925] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 532.956012][ T1159] smc: removing ib device syz1 [ 532.960745][T11925] Code: 7d 8d f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 40 14 19 8b 4c 89 e6 89 ea e8 95 f1 6f 00 <0f> 0b e9 07 fd ff ff e8 a9 15 49 f8 0f 0b e9 b1 fe ff ff e8 9d 15 [ 532.982208][T11925] RSP: 0018:ffffc90002dff248 EFLAGS: 00010246 [ 532.996418][T11925] RAX: bdbda824cc963000 RBX: 0000000000400000 RCX: 0000000000080000 [ 533.022961][T11925] RDX: ffffc9000e879000 RSI: 000000000000523a RDI: 000000000000523b [ 533.053752][T11925] RBP: 0000000000000004 R08: dffffc0000000000 R09: fffff520005bfdad [ 533.072113][T11925] R10: fffff520005bfdad R11: 1ffff920005bfdac R12: ffff88805fd18000 [ 533.082765][T11925] R13: ffff88805fd19290 R14: ffff888060ab8da0 R15: ffff88805fd1a298 [ 533.091442][T11925] FS: 00007f3d821f36c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 533.101166][T11925] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 533.107996][T11925] CR2: 00007fe67d52b2f8 CR3: 000000001fd72000 CR4: 00000000003506f0 [ 533.117203][T11925] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 533.125738][T11925] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 533.134413][T11925] Call Trace: [ 533.138141][T11925] [ 533.146754][T11925] ? netif_carrier_off+0x1/0xc0 [ 533.164992][T11925] ieee80211_ocb_leave+0x26f/0x320 [ 533.172101][T11925] __cfg80211_leave_ocb+0x219/0x3f0 [ 533.177585][T11925] cfg80211_leave_ocb+0x53/0x70 [ 533.193002][T11925] cfg80211_change_iface+0x4f1/0xeb0 [ 533.202338][T11925] nl80211_set_interface+0x598/0x7d0 [ 533.207820][T11925] ? nl80211_dump_interface+0x5c0/0x5c0 [ 533.218457][T11925] ? mutex_lock_nested+0x17/0x20 [ 533.226334][T11925] genl_rcv_msg+0xbc6/0xf40 [ 533.235919][T11925] ? genl_bind+0x370/0x370 [ 533.243099][T11925] ? verify_lock_unused+0x140/0x140 [ 533.248490][T11925] ? verify_lock_unused+0x140/0x140 [ 533.262446][T11925] ? nl80211_dump_interface+0x5c0/0x5c0 [ 533.268324][T11925] netlink_rcv_skb+0x1e0/0x430 [ 533.277978][T11925] ? genl_bind+0x370/0x370 [ 533.285155][T11925] ? netlink_ack+0xb60/0xb60 [ 533.294880][T11925] ? __lock_acquire+0x7c60/0x7c60 [ 533.302642][T11890] rdma_rxe: rxe_register_device failed with error -19 [ 533.303484][T11925] ? preempt_count_add+0x8d/0x190 [ 533.313261][T11890] rdma_rxe: failed to add syz_tun [ 533.323637][T11925] ? down_read+0x1aa/0x2e0 [ 533.328267][T11925] genl_rcv+0x24/0x40 [ 533.333697][T11925] netlink_unicast+0x774/0x920 [ 533.338642][T11925] netlink_sendmsg+0x8ab/0xbc0 [ 533.343491][T11925] ? netlink_getsockopt+0x560/0x560 [ 533.353697][T11925] ? aa_sock_msg_perm+0x94/0x150 [ 533.358991][T11925] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 533.364349][T11925] ? security_socket_sendmsg+0x7c/0xa0 [ 533.374867][T11925] ? netlink_getsockopt+0x560/0x560 [ 533.380269][T11925] ____sys_sendmsg+0x5a2/0x8c0 [ 533.385076][T11925] ? memset+0x1e/0x40 [ 533.394227][T11925] ? __sys_sendmsg_sock+0x30/0x30 [ 533.399369][T11925] ? import_iovec+0x6f/0xa0 [ 533.403936][T11925] ___sys_sendmsg+0x1f0/0x260 [ 533.413494][T11925] ? __sys_sendmsg+0x250/0x250 [ 533.418299][T11925] ? sock_do_ioctl+0x27c/0x2f0 [ 533.425464][T11925] ? __fdget+0x18b/0x210 [ 533.430013][T11925] __se_sys_sendmsg+0x190/0x250 [ 533.434907][T11925] ? __x64_sys_sendmsg+0x80/0x80 [ 533.440019][T11925] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 533.446047][T11925] ? lockdep_hardirqs_on+0x94/0x140 [ 533.451596][T11925] do_syscall_64+0x4c/0xa0 [ 533.456060][T11925] ? clear_bhb_loop+0x30/0x80 [ 533.460908][T11925] ? clear_bhb_loop+0x30/0x80 [ 533.465615][T11925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 533.471674][T11925] RIP: 0033:0x7f3d83f8c6c9 [ 533.476123][T11925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.496136][T11925] RSP: 002b:00007f3d821f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.504747][T11925] RAX: ffffffffffffffda RBX: 00007f3d841e2fa0 RCX: 00007f3d83f8c6c9 [ 533.512818][T11925] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 533.521177][T11925] RBP: 00007f3d8400ef91 R08: 0000000000000000 R09: 0000000000000000 [ 533.531374][T11925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.539571][T11925] R13: 00007f3d841e3038 R14: 00007f3d841e2fa0 R15: 00007ffc961797a8 [ 533.547581][T11925] [ 533.551088][T11925] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 533.558392][T11925] CPU: 1 PID: 11925 Comm: syz.7.2175 Not tainted syzkaller #0 [ 533.565857][T11925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 533.575916][T11925] Call Trace: [ 533.579209][T11925] [ 533.582159][T11925] dump_stack_lvl+0x168/0x230 [ 533.586872][T11925] ? show_regs_print_info+0x20/0x20 [ 533.592077][T11925] ? load_image+0x3b0/0x3b0 [ 533.596604][T11925] panic+0x2c9/0x7f0 [ 533.600540][T11925] ? bpf_jit_dump+0xd0/0xd0 [ 533.605085][T11925] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 533.611515][T11925] __warn+0x248/0x2b0 [ 533.615502][T11925] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 533.621924][T11925] report_bug+0x1b7/0x2e0 [ 533.626311][T11925] handle_bug+0x3a/0x70 [ 533.630470][T11925] exc_invalid_op+0x16/0x40 [ 533.634972][T11925] asm_exc_invalid_op+0x16/0x20 [ 533.639839][T11925] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 533.646882][T11925] Code: 7d 8d f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 40 14 19 8b 4c 89 e6 89 ea e8 95 f1 6f 00 <0f> 0b e9 07 fd ff ff e8 a9 15 49 f8 0f 0b e9 b1 fe ff ff e8 9d 15 [ 533.666502][T11925] RSP: 0018:ffffc90002dff248 EFLAGS: 00010246 [ 533.672602][T11925] RAX: bdbda824cc963000 RBX: 0000000000400000 RCX: 0000000000080000 [ 533.680606][T11925] RDX: ffffc9000e879000 RSI: 000000000000523a RDI: 000000000000523b [ 533.688604][T11925] RBP: 0000000000000004 R08: dffffc0000000000 R09: fffff520005bfdad [ 533.696604][T11925] R10: fffff520005bfdad R11: 1ffff920005bfdac R12: ffff88805fd18000 [ 533.704608][T11925] R13: ffff88805fd19290 R14: ffff888060ab8da0 R15: ffff88805fd1a298 [ 533.712619][T11925] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 533.719043][T11925] ? netif_carrier_off+0x1/0xc0 [ 533.723925][T11925] ieee80211_ocb_leave+0x26f/0x320 [ 533.729065][T11925] __cfg80211_leave_ocb+0x219/0x3f0 [ 533.734269][T11925] cfg80211_leave_ocb+0x53/0x70 [ 533.739129][T11925] cfg80211_change_iface+0x4f1/0xeb0 [ 533.744459][T11925] nl80211_set_interface+0x598/0x7d0 [ 533.749773][T11925] ? nl80211_dump_interface+0x5c0/0x5c0 [ 533.755325][T11925] ? mutex_lock_nested+0x17/0x20 [ 533.760279][T11925] genl_rcv_msg+0xbc6/0xf40 [ 533.764818][T11925] ? genl_bind+0x370/0x370 [ 533.769265][T11925] ? verify_lock_unused+0x140/0x140 [ 533.774486][T11925] ? verify_lock_unused+0x140/0x140 [ 533.779709][T11925] ? nl80211_dump_interface+0x5c0/0x5c0 [ 533.785559][T11925] netlink_rcv_skb+0x1e0/0x430 [ 533.790337][T11925] ? genl_bind+0x370/0x370 [ 533.794755][T11925] ? netlink_ack+0xb60/0xb60 [ 533.799351][T11925] ? __lock_acquire+0x7c60/0x7c60 [ 533.804410][T11925] ? preempt_count_add+0x8d/0x190 [ 533.809461][T11925] ? down_read+0x1aa/0x2e0 [ 533.813901][T11925] genl_rcv+0x24/0x40 [ 533.817881][T11925] netlink_unicast+0x774/0x920 [ 533.822681][T11925] netlink_sendmsg+0x8ab/0xbc0 [ 533.827483][T11925] ? netlink_getsockopt+0x560/0x560 [ 533.832680][T11925] ? aa_sock_msg_perm+0x94/0x150 [ 533.837614][T11925] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 533.842993][T11925] ? security_socket_sendmsg+0x7c/0xa0 [ 533.848467][T11925] ? netlink_getsockopt+0x560/0x560 [ 533.853690][T11925] ____sys_sendmsg+0x5a2/0x8c0 [ 533.858484][T11925] ? memset+0x1e/0x40 [ 533.862658][T11925] ? __sys_sendmsg_sock+0x30/0x30 [ 533.867748][T11925] ? import_iovec+0x6f/0xa0 [ 533.872260][T11925] ___sys_sendmsg+0x1f0/0x260 [ 533.876964][T11925] ? __sys_sendmsg+0x250/0x250 [ 533.881757][T11925] ? sock_do_ioctl+0x27c/0x2f0 [ 533.886640][T11925] ? __fdget+0x18b/0x210 [ 533.890905][T11925] __se_sys_sendmsg+0x190/0x250 [ 533.895762][T11925] ? __x64_sys_sendmsg+0x80/0x80 [ 533.900704][T11925] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 533.906714][T11925] ? lockdep_hardirqs_on+0x94/0x140 [ 533.911923][T11925] do_syscall_64+0x4c/0xa0 [ 533.916347][T11925] ? clear_bhb_loop+0x30/0x80 [ 533.921029][T11925] ? clear_bhb_loop+0x30/0x80 [ 533.925733][T11925] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 533.931639][T11925] RIP: 0033:0x7f3d83f8c6c9 [ 533.936055][T11925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.955657][T11925] RSP: 002b:00007f3d821f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.964077][T11925] RAX: ffffffffffffffda RBX: 00007f3d841e2fa0 RCX: 00007f3d83f8c6c9 [ 533.972066][T11925] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 533.980045][T11925] RBP: 00007f3d8400ef91 R08: 0000000000000000 R09: 0000000000000000 [ 533.988060][T11925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.996035][T11925] R13: 00007f3d841e3038 R14: 00007f3d841e2fa0 R15: 00007ffc961797a8 [ 534.004039][T11925] [ 534.007435][T11925] Kernel Offset: disabled [ 534.012388][T11925] Rebooting in 86400 seconds..