last executing test programs: 10m6.950019451s ago: executing program 32 (id=251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r1}, &(0x7f00000007c0), &(0x7f0000000800)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) socket$packet(0x11, 0x2, 0x300) 9m50.950931835s ago: executing program 0 (id=353): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="3503000001000200140012800b0001006d616373656300000400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) 9m49.721059319s ago: executing program 0 (id=357): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r3, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x20004) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) 9m49.570515245s ago: executing program 0 (id=360): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x400, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9m49.45244079s ago: executing program 0 (id=361): io_setup(0x205, &(0x7f0000002500)) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000280)='./file0\x00', 0x3a10400, &(0x7f0000000000)=ANY=[], 0xfd, 0x2c3, &(0x7f0000000440)="$eJzs3NFLU2EYx/Ent9yc6RZEUFA91E3dHHT9ATVCIRoU5qS6CI55VmOnTc4ZxiJyN9Ftf4d02V1Q/QPeRDfddyeB0I0X0QnP2dFNp26m29LvB/S8O8/7833VozxH8Kw8ePe8mHeNvFmRgbjKgEhN1kRS66O6E/XjgD8elEY1uTb86/uF+w8f3clksxNTqpOZ6etpVR299OnFq/eXv1SGZz6MfozJcurxymr6x/LZ5XMrf6afFVwtuFoqV9TU2XK5Ys7als4V3KKhes+2TNfSQsm1nLAeqy84P19VszQ3kph3LNdVs1TVolXVSlkrTlXNp2ahpIZh6EhCjrdoG3NyS1NTZmbHshfZ6wPEOt0VDtVQq5OOk6m1LuaWurAnAADQZ3bv/4Nef+f+PzsTHA+4/xfZ3v/79bxdbr//b6cBPnZqTa/26P9xJDhOxkzUf35FGu/p6P8BAAAAAAAAAAAAAAAAAAAAAPgfrHle0vO8ZHgM32IiEheR8HWv94nD0fH331pdf3+jl3vGwWn4x724iP12IbeQC45BPZOXgthiyZgk5bd/PdQF48nb2Ykx9aXks71Yzy8u5CL+wyH8fCjVKn/x9HiQ1+b8SUk0rp+WpJxpvX66ZX5Qrl5pyBuSlK9PpCy2zPnX9Wb+9bjqrbvZLfkhfx4AAAAAAEeBoRu23b/7dX9CXLbXg3wHfx/Ycn8dlfM8oQcAAAAAgK5wqy+Lpm1bzj4GMRH5h7g9eyrYwz7j/TqISPMZifbDxm6KSB9so1uDuIgEZ3Q/8Z8b8bZSXhtzoutXeq+/LB0Mev2bCQAAAMBB22z6Owh9e3OIOwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Php93lg4fymUlzcaljYJd6wXKTrnyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQR/4GAAD///fUGeI=") truncate(0x0, 0xefa) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x1000, 0x0, 0x0, 0x5, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 9m48.488511922s ago: executing program 0 (id=366): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000dc0)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e23, 0x3, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000001800)="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", 0x587, 0x4048000, &(0x7f0000000000)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x22}, 0x4}, 0x1c) 9m47.206135658s ago: executing program 0 (id=371): set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) 9m47.016930486s ago: executing program 33 (id=371): set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) 9m22.139210265s ago: executing program 4 (id=501): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0xb00, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 9m21.166335747s ago: executing program 4 (id=505): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7cc, &(0x7f0000001300)="$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") r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x80) 9m19.962533959s ago: executing program 4 (id=512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) socket$inet(0x2, 0x3, 0x8) socket$igmp(0x2, 0x3, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0xaaaabbc, 0x74, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m18.654366466s ago: executing program 4 (id=516): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x500, 0x40) open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x800000, 0x0) 9m18.350595069s ago: executing program 4 (id=520): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0500"], 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 9m14.958069006s ago: executing program 4 (id=530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x200000a, 0x0) 9m13.817042645s ago: executing program 34 (id=530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='hfsplus\x00', 0x200000a, 0x0) 6m41.552417018s ago: executing program 7 (id=1340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_macvtap\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e24}}, @FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'wg0\x00'}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000091f75d64ac5259b4d1646e1105e0fb000000006400010000060202020202fadfec1c7a4dff7e46d2f20789c59d02010882848b960c12"], 0x36) 6m40.281688873s ago: executing program 7 (id=1343): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x81, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0xfd, 0x0, 0x0, 0x0, 0x42}, {0x200003, 0xa, 0x20, 0x80, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r1 = socket$key(0xf, 0x3, 0x2) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r2) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x64, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x53f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7b}]]}, 0x64}, 0x1, 0x0, 0x0, 0x20040804}, 0x4000080) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 6m40.162138819s ago: executing program 7 (id=1345): syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x101301) r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9, {0x40, 0x7, 0xff}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000180)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x1ff, &(0x7f00001a6000/0x3000)=nil, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000f40)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x2d, 0x0, "43454aaffb47c1dfdb641478600c76da8eaa4a4664404b8d1e9732f885e6c6ca9c3e416e20694831073c979cfc242672dc2689ad8e2243b6805a5d9b021a6431208ce130fba79482151714901bfd1768"}, 0xd8) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) 6m38.363881606s ago: executing program 7 (id=1356): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000680)={[{@fat=@quiet}, {@shortname_winnt}, {@rodir}, {@fat=@discard}, {@rodir}, {@shortname_winnt}, {@numtail}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@tz_utc}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@utf8}]}, 0x0, 0x274, &(0x7f0000000a00)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) 6m38.185086404s ago: executing program 7 (id=1357): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 6m37.560751201s ago: executing program 7 (id=1363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b8, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e8, 0x3d8, 0x3d8, 0x3e8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@remote, @private0, [0x0, 0x0, 0x0, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x11, 0x98, 0x3, 0x69}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@ipv6header={{0x28}, {0x4, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x3, 0x5}, {0x0, 0x2, 0x4}, {0x4, 0x6, 0x2}, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 6m37.315496662s ago: executing program 35 (id=1363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b8, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e8, 0x3d8, 0x3d8, 0x3e8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@remote, @private0, [0x0, 0x0, 0x0, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x11, 0x98, 0x3, 0x69}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@ipv6header={{0x28}, {0x4, 0x40}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x3, 0x5}, {0x0, 0x2, 0x4}, {0x4, 0x6, 0x2}, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 5m1.531575785s ago: executing program 5 (id=1769): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 5m0.486507201s ago: executing program 5 (id=1774): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@var={0x9, 0x0, 0x0, 0xe, 0x3, 0x1}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x6, 0x1}, {}, {}, {0x9}, {0x1, 0x100003}]}]}}, 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x69, 0x10, 0x89}}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 5m0.26509851s ago: executing program 5 (id=1777): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r2}}, 0x30) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0xa0) 4m51.820543076s ago: executing program 5 (id=1815): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, 0x0) r2 = getpgid(r1) setpgid(0x0, r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 4m51.662120543s ago: executing program 5 (id=1816): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) 4m50.490929634s ago: executing program 5 (id=1826): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0xc, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x3, 0x3, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0x8, 0x5, 0x10005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x28, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3ff, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x2ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x6, 0x3, 0xb, 0xfffffbff, 0x934, 0x6, 0x6, 0x0, 0xbdfe, 0xce7, 0x1ff, 0xfffffffe, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x7, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m49.722223308s ago: executing program 36 (id=1826): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0xc, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x3, 0x3, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0x8, 0x5, 0x10005, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x28, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3ff, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x2ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x6, 0x3, 0xb, 0xfffffbff, 0x934, 0x6, 0x6, 0x0, 0xbdfe, 0xce7, 0x1ff, 0xfffffffe, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x7, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m36.182084055s ago: executing program 6 (id=1863): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) mlockall(0x7) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m33.97109412s ago: executing program 6 (id=1867): mkdir(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080)=0x0) read$FUSE(r2, &(0x7f0000000e00)={0x2020}, 0xffd0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)) timer_settime(r4, 0x0, &(0x7f0000000000), 0x0) 4m33.603217376s ago: executing program 6 (id=1871): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='reno', 0x4) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) 4m32.638039638s ago: executing program 6 (id=1878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[], 0x24}}, 0x0) 4m31.001008849s ago: executing program 6 (id=1888): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 4m30.821274257s ago: executing program 6 (id=1893): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe539, 0x800, 0x400001, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) setrlimit(0xf, 0x0) 4m15.30191056s ago: executing program 37 (id=1893): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe539, 0x800, 0x400001, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) setrlimit(0xf, 0x0) 10.347665292s ago: executing program 3 (id=2859): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 9.640756642s ago: executing program 9 (id=2865): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x40005) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90, 0xeeee8000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000780)=0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) 9.580776335s ago: executing program 9 (id=2867): prctl$PR_MCE_KILL(0x23, 0xa, 0x7fffffffeffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x14) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000540)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@mblk_io_submit}, {@bh}, {@auto_da_alloc}, {@barrier}, {@test_dummy_encryption}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x81ff) utime(0x0, 0x0) 9.297810157s ago: executing program 3 (id=2870): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{r3, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.341673519s ago: executing program 3 (id=2872): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x2006}, 0x1c) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') preadv(r3, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x80, 0x8) 8.341347409s ago: executing program 9 (id=2873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x6, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) 5.664052415s ago: executing program 9 (id=2880): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 5.490676603s ago: executing program 8 (id=2882): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10681}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x309}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 5.262743412s ago: executing program 3 (id=2883): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x54, r4, 0x111, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xd5, 0xb, 0x9}, {0x6, 0x16, 0xfffa}, {0x5, 0x12, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x20000) 5.261907373s ago: executing program 1 (id=2884): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x47, 0xc11, &(0x7f0000000d00)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, 0x1, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%pi6 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r2}, &(0x7f00000008c0), &(0x7f0000000980)='%pB \x00', 0x1000000}, 0x20) unshare(0x20040600) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.245205403s ago: executing program 9 (id=2885): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 4.769196374s ago: executing program 1 (id=2886): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000019140)={0x54, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xffff}, {0x8, 0x15, 0x10}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004809}, 0x20008000) 3.568788916s ago: executing program 9 (id=2888): r0 = io_uring_setup(0x410d, &(0x7f0000000380)={0x0, 0x60a4, 0x8, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}], 0x0}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011801000000405804155000000000000109022d00010000000909040004010300000009210400040122070009058103200003"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000004a00030000000006000000000a008000", @ANYBLOB="d2", @ANYBLOB="7321ce1c9ddc42973c542b2d1aa5a820ac7a2096ec7e61272c2230fec82ae53f8431ffdd70af14ea80e55ea35c4553b99d916db6f44ff3755dc19af3cca25df528ff764741cb2f4a78ebd283cd916e9471f93fa5b107f525c74c833144531e6d3e7bbff557c08f8ef8df025c6046a6217968a6460b4b42d11428586fa5b0e52f3df20383c86f251d2614fdf8516fa288640f4ed2ae19c2f49f27d81e01713301f050f6f44b0f76bb07f506358c"], 0x1c}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x8, {[@global=@item_012={0x1, 0x1, 0x3, "e2"}, @main=@item_4={0x3, 0x0, 0x9, "13cdc2f2"}, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) r3 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_clone(0x20828000, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/65, 0x41}, {0x0, 0xfffffe29}], &(0x7f0000000240)=[0x6, 0xfff], 0x2}, 0x20) 3.562508486s ago: executing program 8 (id=2889): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r4], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r5}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 3.558636966s ago: executing program 3 (id=2890): bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0xed6, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3.522081818s ago: executing program 2 (id=2891): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 2.233247484s ago: executing program 3 (id=2892): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, 0x0, &(0x7f0000002a00)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804df0000000000000109022400010000100009040008020300000009210000ff0122070009058103ff03"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x1, 'j'}, @main=@item_4={0x3, 0x0, 0x9, "5f72be78"}]}}, 0x0}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 2.233052104s ago: executing program 8 (id=2893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="280000000306010800000000000000000200000305000100070000000900020073797a32"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) 2.232693804s ago: executing program 1 (id=2894): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 2.230030254s ago: executing program 2 (id=2895): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d4", 0xd4, 0x8012, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.200164945s ago: executing program 1 (id=2896): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) 1.555384543s ago: executing program 2 (id=2897): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x3, 0x15f}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r1, 0x245}], 0x1, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f00000028c0)={0x0, 0x0, 0x0}, 0xc85405757c582a58) 1.463109887s ago: executing program 8 (id=2898): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[], 0x40}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x8, &(0x7f0000003280)=ANY=[@ANYRESOCT], 0x1, 0xd99, &(0x7f0000019580)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='nilfs2_transaction_transition\x00', r1, 0x0, 0xc0b}, 0x18) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 1.418761629s ago: executing program 2 (id=2899): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbb"], 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000ac0)=0x8) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000400)={r5, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}}}, &(0x7f00000002c0)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2, 0xffffffff}, 0x8) 1.39034806s ago: executing program 2 (id=2900): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, r4, 0x301, 0xc00e, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x40006) 1.288406384s ago: executing program 8 (id=2901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 1.287739774s ago: executing program 1 (id=2911): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) open(0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x9) 7.55112ms ago: executing program 2 (id=2902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xffffffffffffffff, 0xee01, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r3, 0xa3, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 6.80432ms ago: executing program 1 (id=2913): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 0s ago: executing program 8 (id=2914): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x18, r4, 0x301, 0xc00e, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}}, 0x40006) kernel console output (not intermixed with test programs): "syz.6.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed2ef7749 code=0x7ffc0000 [ 329.568454][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.636458][ T26] audit: type=1326 audit(1764003764.375:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.6.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed2ef7749 code=0x7ffc0000 [ 329.645791][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.677487][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.698802][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.709042][ T26] audit: type=1326 audit(1764003764.375:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.6.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ed2ef7749 code=0x7ffc0000 [ 329.725391][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.750582][ T26] audit: type=1326 audit(1764003764.375:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9613 comm="syz.6.1433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed2ef7749 code=0x7ffc0000 [ 329.796180][ T154] device hsr_slave_0 left promiscuous mode [ 329.844183][ T154] device hsr_slave_1 left promiscuous mode [ 329.868455][ T154] device veth1_macvtap left promiscuous mode [ 329.884754][ T154] device veth0_macvtap left promiscuous mode [ 329.913203][ T154] device veth1_vlan left promiscuous mode [ 329.940790][ T154] device veth0_vlan left promiscuous mode [ 330.324654][ T154] bond2 (unregistering): Released all slaves [ 330.420581][ T9646] befs: (nullb0): invalid magic header [ 330.679373][ T154] bond1 (unregistering): Released all slaves [ 331.218158][ T9654] binder_alloc: 9653: binder_alloc_buf, no vma [ 331.388822][ T154] bond0 (unregistering): Released all slaves [ 331.491962][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.525945][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.539579][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.549373][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.583228][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1446'. [ 331.600842][ T9657] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1446'. [ 331.690377][ T9318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 334.579517][ T9318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.592253][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 334.599831][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.987870][ T9708] device syzkaller0 entered promiscuous mode [ 336.105734][ T9723] overlayfs: failed to clone upperpath [ 337.260686][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 337.294081][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 337.398530][ T9749] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 337.770310][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 337.908571][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 338.095557][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 338.104014][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 338.116314][ T9318] device veth0_vlan entered promiscuous mode [ 338.252121][ T9318] device veth1_vlan entered promiscuous mode [ 338.304084][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 338.384841][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1471'. [ 338.509940][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 338.529221][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 338.552158][ T9318] device veth0_macvtap entered promiscuous mode [ 338.585314][ T9318] device veth1_macvtap entered promiscuous mode [ 338.623429][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.641256][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.659079][ T9318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.669899][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 338.686077][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 338.698921][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 338.716233][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 338.735611][ T9781] xt_CT: You must specify a L4 protocol and not use inversions on it [ 338.753602][ T9318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.778593][ T9318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.819408][ T9318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.846529][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 338.859479][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 338.889886][ T9318] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.903574][ T9318] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.913308][ T9318] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.924766][ T9318] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.030925][ T3013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.049778][ T3013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.079620][ T4521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.105370][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 339.119936][ T4521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.179992][ T527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 339.295088][ T9802] netlink: 3672 bytes leftover after parsing attributes in process `syz.2.1476'. [ 339.592402][ T9813] loop8: detected capacity change from 0 to 8 [ 341.027546][ T9813] SQUASHFS error: zlib decompression failed, data probably corrupt [ 341.283287][ T9813] SQUASHFS error: Failed to read block 0x13e: -5 [ 341.505702][ T9813] SQUASHFS error: Unable to read metadata cache entry [13c] [ 341.738377][ T9813] SQUASHFS error: Unable to read directory block [13c:26] [ 341.920950][ T9822] loop6: detected capacity change from 0 to 4096 [ 342.008806][ T9822] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 342.783540][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 342.783555][ T26] audit: type=1800 audit(1764003778.125:238): pid=9822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1480" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 343.013429][ T26] audit: type=1804 audit(1764003778.195:239): pid=9842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1484" name="bus" dev="ramfs" ino=55527 res=1 errno=0 [ 343.164153][ T26] audit: type=1804 audit(1764003778.205:240): pid=9842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1484" name="bus" dev="ramfs" ino=55527 res=1 errno=0 [ 343.994782][ T9875] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 344.009874][ T9872] loop5: detected capacity change from 0 to 2048 [ 344.083519][ T9872] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 344.316571][ T9872] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 344.684985][ T9872] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 344.817077][ T9872] UDF-fs: Scanning with blocksize 512 failed [ 345.233833][ T9872] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 346.436749][ T9909] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1501'. [ 346.646077][ T26] audit: type=1326 audit(1764003781.985:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c9a92749 code=0x7ffc0000 [ 346.808219][ T26] audit: type=1326 audit(1764003781.985:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f48c9a92749 code=0x7ffc0000 [ 346.867377][ T26] audit: type=1326 audit(1764003781.985:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c9a92749 code=0x7ffc0000 [ 346.890431][ T26] audit: type=1326 audit(1764003781.985:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f48c9a92749 code=0x7ffc0000 [ 347.679390][ T26] audit: type=1326 audit(1764003781.985:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c9a92749 code=0x7ffc0000 [ 348.610115][ T26] audit: type=1326 audit(1764003781.985:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f48c9a92749 code=0x7ffc0000 [ 348.742563][ T26] audit: type=1326 audit(1764003781.985:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c9a92749 code=0x7ffc0000 [ 348.863445][ T26] audit: type=1326 audit(1764003781.985:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48c9a92749 code=0x7ffc0000 [ 350.239627][ T26] audit: type=1326 audit(1764003781.985:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c9a92749 code=0x7ffc0000 [ 350.303487][ T9975] loop6: detected capacity change from 0 to 8 [ 350.346051][ T26] audit: type=1326 audit(1764003781.985:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f48c9a92749 code=0x7ffc0000 [ 350.459912][ T9971] SQUASHFS error: zlib decompression failed, data probably corrupt [ 350.570041][ T9971] SQUASHFS error: Failed to read block 0x13e: -5 [ 350.693251][ T9971] SQUASHFS error: Unable to read metadata cache entry [13c] [ 350.823540][ T9971] SQUASHFS error: Unable to read directory block [13c:26] [ 351.181249][ T26] audit: type=1326 audit(1764003782.015:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c9a92749 code=0x7ffc0000 [ 351.210932][ T9971] SQUASHFS error: Unable to read metadata cache entry [13c] [ 351.265878][ T9971] SQUASHFS error: Unable to read directory block [13c:26] [ 351.308455][ T26] audit: type=1326 audit(1764003782.015:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f48c9a92749 code=0x7ffc0000 [ 351.347392][ T26] audit: type=1326 audit(1764003782.015:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c9a92749 code=0x7ffc0000 [ 351.495911][ T26] audit: type=1326 audit(1764003782.025:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f48c9a92749 code=0x7ffc0000 [ 351.529559][ T26] audit: type=1326 audit(1764003782.025:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9913 comm="syz.5.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c9a92749 code=0x7ffc0000 [ 357.158243][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1548'. [ 361.819784][T10153] loop8: detected capacity change from 0 to 2048 [ 361.938518][T10153] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.901692][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 363.901708][ T26] audit: type=1326 audit(1764003799.235:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8d983749 code=0x7fc00000 [ 367.824195][T10232] overlayfs: failed to resolve './file1': -2 [ 368.826483][T10241] netlink: 'syz.8.1580': attribute type 4 has an invalid length. [ 369.893542][T10271] loop2: detected capacity change from 0 to 7 [ 369.931992][T10271] Dev loop2: unable to read RDB block 7 [ 369.946641][T10271] loop2: unable to read partition table [ 369.964938][T10271] loop2: partition table beyond EOD, truncated [ 369.972159][T10269] loop5: detected capacity change from 0 to 4096 [ 369.985208][T10271] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 370.216545][T10269] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 370.992251][T10292] device team0 left promiscuous mode [ 371.002505][T10292] device team_slave_0 left promiscuous mode [ 371.023187][T10292] device team_slave_1 left promiscuous mode [ 371.030413][T10292] bridge0: port 3(team0) entered disabled state [ 371.044965][ T26] audit: type=1800 audit(1764003806.385:267): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1586" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 371.086329][T10295] loop6: detected capacity change from 0 to 512 [ 371.104770][T10292] device bridge_slave_0 left promiscuous mode [ 371.124347][T10292] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.186900][T10292] device bridge_slave_1 left promiscuous mode [ 371.196587][T10292] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.230336][T10295] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 371.252026][T10292] bond0: (slave bond_slave_0): Releasing backup interface [ 371.267996][T10295] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 371.268170][T10292] bond0: (slave bond_slave_1): Releasing backup interface [ 371.331742][T10292] team0: Port device team_slave_0 removed [ 371.365751][T10292] team0: Port device team_slave_1 removed [ 371.377528][T10292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.385848][T10292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.397828][T10292] bond1: (slave wireguard0): Releasing backup interface [ 371.406838][T10292] device wireguard0 left promiscuous mode [ 371.426491][T10292] bond2: (slave vlan2): Releasing active interface [ 371.446262][T10292] team0: Port device bridge2 removed [ 371.458872][T10292] bond4: (slave macvlan2): Releasing active interface [ 373.442095][T10347] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 374.386730][T10359] loop8: detected capacity change from 0 to 4096 [ 374.408958][T10359] ntfs3: loop8: Different NTFS' sector size (1024) and media sector size (512) [ 375.229143][ T26] audit: type=1800 audit(1764003810.565:268): pid=10359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1608" name="file1" dev="loop8" ino=30 res=0 errno=0 [ 375.460953][T10376] loop6: detected capacity change from 0 to 2048 [ 375.555089][T10376] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 375.607536][T10376] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 377.471064][ T26] audit: type=1326 audit(1764003812.805:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 377.513739][ T26] audit: type=1326 audit(1764003812.815:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 377.537928][ T26] audit: type=1326 audit(1764003812.815:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 377.568477][ T26] audit: type=1326 audit(1764003812.815:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 378.136887][ T26] audit: type=1326 audit(1764003812.815:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 378.172722][ T26] audit: type=1326 audit(1764003812.815:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 378.216835][ T26] audit: type=1326 audit(1764003812.815:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 378.339307][ T26] audit: type=1326 audit(1764003812.815:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 378.354028][T10439] netlink: 'syz.5.1628': attribute type 10 has an invalid length. [ 378.420849][ T26] audit: type=1326 audit(1764003812.815:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 378.441606][T10439] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1628'. [ 378.474128][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.480452][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.482597][ T26] audit: type=1326 audit(1764003812.815:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10425 comm="syz.2.1626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 378.556071][T10439] team0: Port device geneve0 added [ 378.568081][T10442] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1629'. [ 378.931443][T10457] netlink: 'syz.8.1635': attribute type 12 has an invalid length. [ 379.845459][T10469] loop8: detected capacity change from 0 to 128 [ 380.427995][T10469] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 380.563845][T10469] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 382.985651][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 382.985664][ T26] audit: type=1326 audit(1764003818.325:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.6.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed2ef7749 code=0x7ffc0000 [ 383.109569][ T26] audit: type=1326 audit(1764003818.355:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.6.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed2ef7749 code=0x7ffc0000 [ 383.162892][ T26] audit: type=1326 audit(1764003818.355:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.6.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f0ed2ef7749 code=0x7ffc0000 [ 383.226338][ T26] audit: type=1326 audit(1764003818.355:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.6.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed2ef7749 code=0x7ffc0000 [ 383.289283][ T26] audit: type=1326 audit(1764003818.355:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.6.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed2ef7749 code=0x7ffc0000 [ 383.361550][ T26] audit: type=1326 audit(1764003818.355:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.6.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ed2ef5f90 code=0x7ffc0000 [ 383.456355][ T26] audit: type=1326 audit(1764003818.355:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.6.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ed2ef5f90 code=0x7ffc0000 [ 383.528932][T10538] loop2: detected capacity change from 0 to 7 [ 383.544826][T10539] device syzkaller0 entered promiscuous mode [ 383.572577][ T4327] Dev loop2: unable to read RDB block 7 [ 383.578286][ T4327] loop2: unable to read partition table [ 383.594148][T10539] syzkaller0: tun_net_xmit 14 [ 383.607669][ T26] audit: type=1326 audit(1764003818.355:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.6.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed2ef7749 code=0x7ffc0000 [ 383.642997][ T4327] loop2: partition table beyond EOD, truncated [ 383.691228][ T26] audit: type=1326 audit(1764003818.355:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.6.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ed2ef7749 code=0x7ffc0000 [ 383.719984][T10538] Dev loop2: unable to read RDB block 7 [ 383.736008][ T26] audit: type=1326 audit(1764003818.355:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10521 comm="syz.6.1652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0ed2ef7749 code=0x7ffc0000 [ 383.751182][T10538] loop2: unable to read partition table [ 384.036246][T10538] loop2: partition table beyond EOD, truncated [ 384.093313][T10538] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 384.490931][ T3561] Dev loop2: unable to read RDB block 7 [ 384.496998][ T3561] loop2: unable to read partition table [ 384.549957][ T3561] loop2: partition table beyond EOD, truncated [ 385.539758][T10555] device vlan2 entered promiscuous mode [ 385.548930][T10555] device bond0 entered promiscuous mode [ 385.677006][T10562] binder: BINDER_SET_CONTEXT_MGR already set [ 385.701207][T10562] binder: 10561:10562 ioctl 4018620d 200000000040 returned -16 [ 385.833447][T10568] loop6: detected capacity change from 0 to 1024 [ 386.562543][T10568] EXT4-fs (loop6): blocks per group (0) and clusters per group (8192) inconsistent [ 387.898579][T10616] netlink: 'syz.2.1672': attribute type 12 has an invalid length. [ 390.083676][T10654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1680'. [ 390.429816][T10672] device syzkaller0 entered promiscuous mode [ 392.510449][T10714] device veth0 entered promiscuous mode [ 392.529766][T10714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1694'. [ 392.563287][T10714] device veth0 left promiscuous mode [ 392.582016][T10710] D\Q [ 392.728513][T10723] device syzkaller0 entered promiscuous mode [ 394.346241][T10753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1704'. [ 394.357875][T10753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1704'. [ 394.385918][T10753] device ip6gretap0 entered promiscuous mode [ 394.404648][T10758] loop6: detected capacity change from 0 to 1024 [ 394.419979][T10753] device syz_tun entered promiscuous mode [ 394.430545][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 394.462199][T10760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1705'. [ 394.493144][T10764] futex_wake_op: syz.2.1705 tries to shift op by 144; fix this program [ 394.694187][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 394.694202][ T26] audit: type=1800 audit(1764003830.035:312): pid=10774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1701" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 394.960045][T10787] loop5: detected capacity change from 0 to 1024 [ 396.667016][T10787] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 396.673903][T10798] tipc: Started in network mode [ 396.695588][T10798] tipc: Node identity 7f000001, cluster identity 4711 [ 396.703899][T10798] tipc: Enabling of bearer rejected, failed to enable media [ 396.745478][T10798] tipc: Enabling of bearer rejected, failed to enable media [ 397.787801][T10824] device vlan2 entered promiscuous mode [ 398.579347][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1724'. [ 398.772090][T10834] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 398.817064][T10837] sock: sock_set_timeout: `syz.1.1726' (pid 10837) tries to set negative timeout [ 398.826737][T10834] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 398.833677][ T7] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 398.961711][T10834] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 399.182059][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 399.301827][ T7] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 399.319670][ T7] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 399.380352][ T7] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 399.480457][ T7] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 399.526429][ T7] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 399.590735][ T7] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 399.659436][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.762373][ T6179] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 399.938849][T10876] netlink: 'syz.2.1734': attribute type 1 has an invalid length. [ 399.972778][T10818] udc-core: couldn't find an available UDC or it's busy [ 399.979931][T10818] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 400.022245][ T7] usb 7-1: GET_CAPABILITIES returned 0 [ 400.028306][ T7] usbtmc 7-1:16.0: can't read capabilities [ 400.335218][T10876] 8021q: adding VLAN 0 to HW filter on device bond6 [ 400.569031][T10876] bond5: (slave bond6): making interface the new active one [ 400.577291][T10876] bond5: (slave bond6): Enslaving as an active interface with an up link [ 400.601245][ T6179] usb 9-1: Using ep0 maxpacket: 16 [ 400.704976][ T7] usb 7-1: USB disconnect, device number 6 [ 400.782111][ T6179] usb 9-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 400.811380][ T6179] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.041493][ T6179] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 401.059674][ T6179] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.068541][ T6179] usb 9-1: Product: syz [ 401.095983][ T6179] usb 9-1: Manufacturer: syz [ 401.100632][ T6179] usb 9-1: SerialNumber: syz [ 402.171566][ T6179] usb 9-1: 0:2 : does not exist [ 402.513048][ T6179] usb 9-1: USB disconnect, device number 2 [ 403.686170][T10953] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 403.912512][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.821736][T10996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1759'. [ 406.848981][T10993] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1756'. [ 407.232338][ T7] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 407.614450][ T7] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.790996][ T7] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 407.830625][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.886250][ T7] usb 7-1: config 0 descriptor?? [ 407.927711][ T144] bond1: (slave ip6gretap2): Releasing active interface [ 407.967908][ T7] pwc: Askey VC010 type 2 USB webcam detected. [ 408.836537][ T7] pwc: recv_control_msg error -32 req 02 val 2b00 [ 408.881730][ T7] pwc: recv_control_msg error -32 req 02 val 2700 [ 408.922652][ T7] pwc: recv_control_msg error -32 req 02 val 2c00 [ 408.961628][ T7] pwc: recv_control_msg error -32 req 04 val 1000 [ 409.138420][ T7] pwc: recv_control_msg error -32 req 04 val 1300 [ 409.182800][ T7] pwc: recv_control_msg error -32 req 04 val 1400 [ 409.242040][ T7] pwc: recv_control_msg error -32 req 02 val 2000 [ 409.331772][ T7] pwc: recv_control_msg error -32 req 02 val 2100 [ 409.382012][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1771'. [ 409.430768][ T7] pwc: recv_control_msg error -32 req 04 val 1500 [ 410.111656][ T7] pwc: recv_control_msg error -71 req 02 val 2400 [ 410.132956][ T7] pwc: recv_control_msg error -71 req 02 val 2600 [ 410.151632][ T7] pwc: recv_control_msg error -71 req 02 val 2900 [ 410.171712][ T7] pwc: recv_control_msg error -71 req 02 val 2800 [ 410.191879][ T7] pwc: recv_control_msg error -71 req 04 val 1100 [ 410.213859][ T7] pwc: recv_control_msg error -71 req 04 val 1200 [ 410.219107][T11056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1773'. [ 410.266142][ T7] pwc: Registered as video103. [ 410.281061][ T7] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input6 [ 410.317435][ T7] usb 7-1: USB disconnect, device number 7 [ 410.533477][ T144] bond2: (slave gretap2): Releasing active interface [ 410.601368][T11077] infiniband syz1: set active [ 410.617145][T11077] infiniband syz1: added syz_tun [ 410.660095][T11077] RDS/IB: syz1: added [ 410.685132][T11077] smc: adding ib device syz1 with port count 1 [ 410.685307][T11090] loop6: detected capacity change from 0 to 512 [ 410.766583][T11077] smc: ib device syz1 port 1 has pnetid [ 410.835648][T11090] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 410.872622][T11090] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.066138][T11079] rdma_rxe: ignoring netdev event = 10 for syz_tun [ 411.079574][T11079] infiniband syz1: set down [ 411.152171][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1782'. [ 411.313360][T11107] loop8: detected capacity change from 0 to 16 [ 411.336513][T10985] smc: removing ib device syz1 [ 411.548034][T11107] erofs: (device loop8): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 25144) [ 413.793779][T11143] loop8: detected capacity change from 0 to 2048 [ 413.916628][T11151] loop6: detected capacity change from 0 to 764 [ 414.076797][T11077] rdma_rxe: rxe_register_device failed with error -19 [ 414.092011][ T144] device hsr_slave_0 left promiscuous mode [ 414.110142][T11077] rdma_rxe: failed to add syz_tun [ 414.123209][ T144] device hsr_slave_1 left promiscuous mode [ 414.202563][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.226404][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.247020][T11151] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 414.264341][T11143] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 414.292273][ T144] device bridge_slave_1 left promiscuous mode [ 414.298514][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.351162][T11143] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 414.372545][ T144] device bridge_slave_0 left promiscuous mode [ 414.378809][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.637037][ T144] bond2 (unregistering): Released all slaves [ 415.566383][ T144] bond1 (unregistering): Released all slaves [ 416.891837][ T144] team0 (unregistering): Port device team_slave_1 removed [ 416.980679][ T144] team0 (unregistering): Port device team_slave_0 removed [ 417.037238][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.115878][ T144] rdma_rxe: ignoring netdev event = 27 for bond_slave_0 [ 417.315725][ T144] rdma_rxe: ignoring netdev event = 26 for bond_slave_0 [ 417.459211][ T144] rdma_rxe: ignoring netdev event = 21 for bond_slave_0 [ 417.569699][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.780730][T11216] loop6: detected capacity change from 0 to 32768 [ 417.841815][ T144] rdma_rxe: ignoring netdev event = 9 for bond_slave_0 [ 417.861550][ T144] rdma_rxe: ignoring netdev event = 8 for bond_slave_0 [ 417.879162][T11156] smc: removing ib device sy [ 417.952528][ T144] bond0 (unregistering): Released all slaves [ 418.104085][T11207] device veth0 entered promiscuous mode [ 418.109968][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1803'. [ 419.833328][T11302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.738679][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 421.796914][T11325] lo speed is unknown, defaulting to 1000 [ 422.101757][T11340] lo speed is unknown, defaulting to 1000 [ 422.183031][T11350] lo speed is unknown, defaulting to 1000 [ 423.127126][ T6177] Bluetooth: hci1: command 0x0409 tx timeout [ 426.099584][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 426.209661][T11325] chnl_net:caif_netlink_parms(): no params data found [ 426.629041][T11325] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.658364][T11325] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.700770][T11325] device bridge_slave_0 entered promiscuous mode [ 426.730711][T11325] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.760732][T11325] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.789284][T11325] device bridge_slave_1 entered promiscuous mode [ 426.873794][T11325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.917616][T11325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.040113][T11325] team0: Port device team_slave_0 added [ 427.063773][T11325] team0: Port device team_slave_1 added [ 427.130588][T11325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.157986][T11325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.567772][T11325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.160320][ T4893] Bluetooth: hci1: command 0x040f tx timeout [ 428.185122][T11325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.317355][T11325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.511913][T11325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.325593][T11325] device hsr_slave_0 entered promiscuous mode [ 430.264575][ T4893] Bluetooth: hci1: command 0x0419 tx timeout [ 430.316633][T11325] device hsr_slave_1 entered promiscuous mode [ 430.327174][T11325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.453708][T11406] infiniband syz1: set active [ 430.458893][T11406] infiniband syz1: added syz_tun [ 430.472194][T11325] Cannot create hsr debugfs directory [ 430.541896][T11406] RDS/IB: syz1: added [ 430.545971][T11406] smc: adding ib device syz1 with port count 1 [ 430.553163][T11406] smc: ib device syz1 port 1 has pnetid [ 430.845156][T11455] loop6: detected capacity change from 0 to 512 [ 431.374086][T11455] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 431.876552][T11455] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.1855: bad orphan inode 15 [ 431.901499][T11455] ext4_test_bit(bit=14, block=18) = 1 [ 431.961203][T11455] is_bad_inode(inode)=0 [ 431.965438][T11455] NEXT_ORPHAN(inode)=1023 [ 431.992570][T11455] max_ino=32 [ 431.995815][T11455] i_nlink=0 [ 431.999663][T11455] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 432.018056][T11439] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.025525][T11439] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.078982][T11455] ext2 filesystem being mounted at /95/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 433.233195][ T26] audit: type=1326 audit(1764003868.575:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11470 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 433.288219][ T26] audit: type=1326 audit(1764003868.575:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11470 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 433.349834][ T26] audit: type=1326 audit(1764003868.575:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11470 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 433.419650][ T26] audit: type=1326 audit(1764003868.575:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11470 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 433.444777][ T26] audit: type=1326 audit(1764003868.575:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11470 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 433.467819][ T26] audit: type=1326 audit(1764003868.575:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11470 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 433.490644][ T26] audit: type=1326 audit(1764003868.575:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11470 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 433.515601][ T26] audit: type=1326 audit(1764003868.575:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11470 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 433.538635][ T26] audit: type=1326 audit(1764003868.575:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11470 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 433.568410][ T26] audit: type=1326 audit(1764003868.575:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11470 comm="syz.2.1859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 433.663857][T11439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.702179][T11439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.958745][T11439] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.967786][T11439] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.977152][T11439] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.986145][T11439] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.069235][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1855'. [ 434.118334][T11455] device hsr_slave_0 left promiscuous mode [ 434.135795][T11455] device hsr_slave_1 left promiscuous mode [ 434.197453][T11477] netlink: 'syz.8.1862': attribute type 4 has an invalid length. [ 434.212914][T11477] netlink: 'syz.8.1862': attribute type 3 has an invalid length. [ 434.223341][T11477] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1862'. [ 435.394045][T11325] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 435.415393][T11325] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 435.456600][T11325] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 435.483433][T11325] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 435.863057][T11325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.001563][T11325] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.247334][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 436.262496][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 436.300886][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 436.346115][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 436.363169][T11504] overlayfs: failed to resolve './file0': -2 [ 436.391435][T11436] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.398537][T11436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.423070][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 436.442400][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 436.450970][T11436] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.458088][T11436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.488809][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 436.513243][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 436.531842][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 436.564501][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 436.577246][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 436.595565][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 436.606397][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 436.617561][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 436.626841][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 436.636302][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 436.658706][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 436.667069][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 437.062162][T11180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 437.076664][T11180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 437.123934][T11325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.341889][ T4895] Bluetooth: hci3: command 0x0406 tx timeout [ 437.670289][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 437.704074][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 437.819174][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 437.842086][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 437.868131][T11325] device veth0_vlan entered promiscuous mode [ 437.882533][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 437.911881][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 437.927317][T11325] device veth1_vlan entered promiscuous mode [ 437.980604][T11567] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 438.059466][T11567] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 438.068639][T11567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.077411][T11567] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.088884][T11567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.484238][T11184] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 438.564284][T11184] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 438.739052][T11184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 438.782031][T11184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 438.847039][T11325] device veth0_macvtap entered promiscuous mode [ 438.868015][T11325] device veth1_macvtap entered promiscuous mode [ 438.904354][T11325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.931619][T11325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.952957][T11325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.961707][T11444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 438.970591][T11444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 438.995098][T11325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 439.022422][T11325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.055916][T11325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.066717][T11180] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 439.076342][T11180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 439.088530][T11325] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.100408][T11325] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.110995][T11325] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.128623][T11325] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.258726][T11180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.275897][T11180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.333854][T11444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 439.357909][T11180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.369717][T11180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.390188][T11184] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 439.573375][T11598] netlink: 'syz.1.1889': attribute type 3 has an invalid length. [ 439.616082][T11598] netlink: 'syz.1.1889': attribute type 3 has an invalid length. [ 440.691575][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.698237][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.088915][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1887'. [ 442.137207][T11662] rdma_rxe: ignoring netdev event = 10 for syz_tun [ 442.193970][T11662] infiniband syz1: set down [ 442.246025][T11662] device syz_tun left promiscuous mode [ 442.291553][T11662] rdma_rxe: ignoring netdev event = 26 for syz_tun [ 442.298406][T11662] rdma_rxe: ignoring netdev event = 21 for syz_tun [ 442.347315][T11643] smc: removing ib device syz1 [ 443.609602][T11689] netlink: 'syz.9.1901': attribute type 6 has an invalid length. [ 444.851875][T11715] device syzkaller0 entered promiscuous mode [ 445.107733][T11723] netlink: 'syz.9.1911': attribute type 12 has an invalid length. [ 447.713306][T11748] overlayfs: failed to clone upperpath [ 447.782949][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1915'. [ 447.983281][T11753] tipc: Cannot configure node identity twice [ 449.167147][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 449.167161][ T26] audit: type=1326 audit(1764003884.505:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11807 comm="syz.2.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 449.238336][T11811] netlink: 'syz.1.1924': attribute type 11 has an invalid length. [ 449.344698][ T26] audit: type=1326 audit(1764003884.545:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11807 comm="syz.2.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 449.458584][ T26] audit: type=1326 audit(1764003884.545:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11807 comm="syz.2.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 450.076461][ T26] audit: type=1326 audit(1764003884.545:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11807 comm="syz.2.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 450.108172][ T26] audit: type=1326 audit(1764003884.545:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11807 comm="syz.2.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 450.178805][ T26] audit: type=1326 audit(1764003884.555:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11807 comm="syz.2.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 450.256233][T11836] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1929'. [ 450.267717][ T26] audit: type=1326 audit(1764003884.555:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11807 comm="syz.2.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 450.331670][ T26] audit: type=1326 audit(1764003884.555:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11807 comm="syz.2.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 450.411883][ T26] audit: type=1326 audit(1764003884.565:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11807 comm="syz.2.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 450.439953][ T26] audit: type=1326 audit(1764003884.565:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11807 comm="syz.2.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 450.470928][T11843] loop8: detected capacity change from 0 to 512 [ 450.509498][T11843] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 450.555290][T11843] EXT4-fs error (device loop8): ext4_orphan_get:1427: comm syz.8.1932: bad orphan inode 15 [ 450.566430][T11843] ext4_test_bit(bit=14, block=18) = 1 [ 450.572636][T11843] is_bad_inode(inode)=0 [ 450.576867][T11843] NEXT_ORPHAN(inode)=1023 [ 450.582140][T11843] max_ino=32 [ 450.585344][T11843] i_nlink=0 [ 450.588648][T11843] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 450.600253][T11843] ext2 filesystem being mounted at /83/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 450.636368][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1932'. [ 450.645918][T11843] device hsr_slave_0 left promiscuous mode [ 450.847261][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1934'. [ 451.749922][T11865] loop9: detected capacity change from 0 to 512 [ 451.816479][T11865] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 451.881590][T11865] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 451.951028][T11865] EXT4-fs error (device loop9): ext4_orphan_get:1401: inode #15: comm syz.9.1937: inode has both inline data and extents flags [ 452.001344][T11865] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.1937: couldn't read orphan inode 15 (err -117) [ 452.027622][T11865] EXT4-fs (loop9): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nombcache,debug_want_extra_isize=0x0000000000000004,mblk_io_submit,resuid=0x0000000000000000,norecovery,,errors=continue. Quota mode: none. [ 453.817178][T11896] device batadv_slave_0 entered promiscuous mode [ 459.243225][T11992] loop9: detected capacity change from 0 to 256 [ 459.424138][T11992] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 459.487272][T11998] lo speed is unknown, defaulting to 1000 [ 460.244897][T11992] exFAT-fs (loop9): invalid start cluster (12296) [ 460.505933][T11992] exFAT-fs (loop9): hint_cluster is invalid (17) [ 460.629137][T11992] exFAT-fs (loop9): error, invalid access to FAT (entry 0xffffffff) [ 460.781702][T11992] exFAT-fs (loop9): Filesystem has been set read-only [ 460.891047][T12014] loop8: detected capacity change from 0 to 32768 [ 461.579944][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 461.664123][T11998] chnl_net:caif_netlink_parms(): no params data found [ 461.697806][T12014] XFS (loop8): Mounting V5 Filesystem [ 461.795294][T12014] XFS (loop8): Ending clean mount [ 461.854045][T12014] XFS (loop8): Quotacheck needed: Please wait. [ 462.816516][T12014] XFS (loop8): Quotacheck: Done. [ 462.854949][T11998] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.886922][T11998] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.906076][T11998] device bridge_slave_0 entered promiscuous mode [ 462.935908][T11998] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.155408][T11998] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.270377][T11998] device bridge_slave_1 entered promiscuous mode [ 463.472437][ T9318] XFS (loop8): Unmounting Filesystem [ 463.803602][ T4237] Bluetooth: hci2: command 0x041b tx timeout [ 464.414730][T11998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.509411][T11998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.688154][T11998] team0: Port device team_slave_0 added [ 464.729614][T12074] lo speed is unknown, defaulting to 1000 [ 464.740020][T11998] team0: Port device team_slave_1 added [ 464.857285][T11998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.866604][T11998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.900322][T11998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.952511][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1976'. [ 464.963258][T11998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.970374][T11998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.011464][T11998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.281052][T11998] device hsr_slave_0 entered promiscuous mode [ 465.302573][T11998] device hsr_slave_1 entered promiscuous mode [ 466.396946][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 466.816862][T12112] loop8: detected capacity change from 0 to 256 [ 466.958064][T12112] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 467.736833][T12112] exFAT-fs (loop8): invalid start cluster (12296) [ 467.793567][T12112] exFAT-fs (loop8): hint_cluster is invalid (17) [ 467.819824][T12112] exFAT-fs (loop8): error, invalid access to FAT (entry 0xffffffff) [ 467.846568][T12112] exFAT-fs (loop8): Filesystem has been set read-only [ 468.537040][ T4892] Bluetooth: hci2: command 0x0419 tx timeout [ 468.669016][T12135] syz.9.1983 uses old SIOCAX25GETINFO [ 468.995051][T11998] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 469.009056][T11998] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 469.290790][T11998] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 469.483886][T11998] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 470.200474][T11998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.513396][T10980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 470.579270][T10980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 470.957714][T11998] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.135916][T11643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 471.196522][T11643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 471.322111][T11643] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.329251][T11643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.403417][T11643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 471.442788][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1991'. [ 471.479133][T12225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1994'. [ 471.548713][T11643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 471.585769][T11643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 471.617300][T11643] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.624448][T11643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.659674][T11643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 471.693034][T12232] netlink: 'syz.2.2005': attribute type 39 has an invalid length. [ 471.715788][T11643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 472.081278][T11643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 472.347977][T11643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 472.435057][T11643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 472.447598][T11643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 472.469988][T11643] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 472.532718][T11643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 472.541898][T11643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 472.551700][T11643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 472.622602][T11643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 472.858493][T12251] netlink: 'syz.9.1999': attribute type 10 has an invalid length. [ 473.080747][T12251] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 475.702728][T12288] loop9: detected capacity change from 0 to 2048 [ 475.968363][T12288] loop9: p1 < > p4 [ 476.092109][T12288] loop9: p4 size 722688 extends beyond EOD, truncated [ 476.509965][T12302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2013'. [ 476.705176][ T3561] loop9: p1 < > p4 [ 476.845346][ T3561] loop9: p4 size 722688 extends beyond EOD, truncated [ 477.018239][T11646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 477.157019][T11646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 477.226921][T11998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.310571][T11167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 477.321906][T11167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 477.387276][T12315] xt_CT: You must specify a L4 protocol and not use inversions on it [ 477.525170][ T4327] udevd[4327]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 477.620617][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 478.076491][T11167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 478.138820][T11167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 478.173264][T11998] device veth0_vlan entered promiscuous mode [ 478.198090][T11167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 478.227871][T11167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 478.722656][T11998] device veth1_vlan entered promiscuous mode [ 479.163195][T11167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 479.209713][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 479.251991][T11167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 479.278242][ T4327] udevd[4327]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 479.298599][T11998] device veth0_macvtap entered promiscuous mode [ 479.432351][T11998] device veth1_macvtap entered promiscuous mode [ 480.108598][T11998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.208389][T11998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.208434][T11998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.208450][T11998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.209944][T11998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.210096][T11167] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 480.210757][T11167] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 480.211546][T11167] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 480.212112][T11167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 480.215308][T11998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.215326][T11998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.215338][T11998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.215348][T11998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.216423][T11998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.218923][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 480.219615][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 480.222927][T11998] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.222956][T11998] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.222994][T11998] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.223017][T11998] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.562222][T11436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.562295][T11436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.566516][T11167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 481.676852][T11436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.685779][T11436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.697868][T11646] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 481.964519][T12378] netlink: 'syz.2.2030': attribute type 12 has an invalid length. [ 482.749938][T12394] Cannot find add_set index 4 as target [ 483.880061][T12403] device syzkaller0 entered promiscuous mode [ 483.920695][T12406] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1948'. [ 489.502075][T12497] kvm: pic: non byte write [ 489.533370][T12497] kvm: pic: non byte write [ 489.550828][T12497] kvm: pic: non byte write [ 489.690776][T12497] kvm: pic: non byte write [ 489.696416][T12497] kvm: pic: non byte write [ 490.814713][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2057'. [ 490.835579][T12522] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.844760][T12522] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.853514][T12522] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.862259][T12522] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.118107][T11646] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.249135][T11646] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.331575][T11646] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.530152][T12550] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 491.549068][T12554] fuse: Bad value for 'fd' [ 491.556426][T11646] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.648842][ T150] block nbd8: Attempted send on invalid socket [ 491.658462][ T150] blk_update_request: I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 492.852760][T12573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.177162][T11646] tipc: Disabling bearer [ 493.212681][T11646] tipc: Left network mode [ 494.147733][T12607] loop8: detected capacity change from 0 to 256 [ 495.937206][T12637] netlink: 'syz.1.2080': attribute type 1 has an invalid length. [ 496.759579][T12637] bond3: (slave gretap2): making interface the new active one [ 496.775513][T12637] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 496.942136][T12656] netlink: 'syz.9.2086': attribute type 10 has an invalid length. [ 496.971355][T12656] device veth1_macvtap left promiscuous mode [ 499.051561][T12692] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 499.266805][T12692] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 499.276933][T12692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.289990][T12692] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.577347][T12692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 499.815030][ T6175] lo speed is unknown, defaulting to 1000 [ 500.280602][T11646] device hsr_slave_0 left promiscuous mode [ 500.699586][T11646] device hsr_slave_1 left promiscuous mode [ 500.722951][T11646] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 500.759514][T11646] batman_adv: batadv0: Removing interface: virt_wifi0 [ 500.861133][T11646] device veth1_macvtap left promiscuous mode [ 500.881530][T11646] device veth0_macvtap left promiscuous mode [ 500.887635][T11646] device veth1_vlan left promiscuous mode [ 500.926659][T11646] device veth0_vlan left promiscuous mode [ 501.219220][T11646] bond2 (unregistering): Released all slaves [ 501.299199][T11646] bond1 (unregistering): Released all slaves [ 501.344647][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.351008][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.400286][T11646] team0 (unregistering): Port device geneve0 removed [ 502.565977][T11646] team0 (unregistering): Port device bond0 removed [ 502.598057][T11646] bond0 (unregistering): Released all slaves [ 502.834384][T12772] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2110'. [ 502.904272][T12779] comedi comedi0: Minor 47 could not be opened [ 504.110517][T12789] loop3: detected capacity change from 0 to 764 [ 506.331210][ T4895] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 506.364571][T12831] loop3: detected capacity change from 0 to 256 [ 506.450336][T12831] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 506.610155][T12831] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 506.721333][ T4895] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.729063][T12831] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 506.867278][T12831] UDF-fs: Scanning with blocksize 512 failed [ 506.992477][T12831] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 507.155570][T12831] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 507.269138][ T4895] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 507.278566][ T4895] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.300557][ T4895] usb 10-1: config 0 descriptor?? [ 507.343519][ T4895] pwc: Askey VC010 type 2 USB webcam detected. [ 507.363254][T12847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2140'. [ 507.507020][T12848] lo speed is unknown, defaulting to 1000 [ 507.801332][ T4895] pwc: recv_control_msg error -32 req 02 val 2b00 [ 507.851259][ T4895] pwc: recv_control_msg error -32 req 02 val 2700 [ 507.901232][ T4895] pwc: recv_control_msg error -32 req 02 val 2c00 [ 507.942605][ T4895] pwc: recv_control_msg error -32 req 04 val 1000 [ 508.141401][ T4895] pwc: recv_control_msg error -32 req 04 val 1300 [ 508.192126][ T4895] pwc: recv_control_msg error -32 req 04 val 1400 [ 508.402372][ T4895] pwc: recv_control_msg error -32 req 02 val 2000 [ 508.461349][ T4895] pwc: recv_control_msg error -32 req 02 val 2100 [ 508.506894][ T4895] pwc: recv_control_msg error -32 req 04 val 1500 [ 508.541965][T12873] binder: BINDER_SET_CONTEXT_MGR already set [ 508.548008][T12873] binder: 12870:12873 ioctl 4018620d 2000000002c0 returned -16 [ 508.581252][ T4895] pwc: recv_control_msg error -32 req 02 val 2500 [ 508.601684][T12876] binder: 12870:12876 ioctl c0306201 200000000580 returned -14 [ 508.630616][T12873] binder: 12870:12873 ioctl c0306201 0 returned -14 [ 508.637682][T12873] binder: 12870:12873 ioctl c0306201 0 returned -14 [ 508.865989][ T4895] pwc: recv_control_msg error -71 req 02 val 2600 [ 508.881412][ T4895] pwc: recv_control_msg error -71 req 02 val 2900 [ 508.901254][ T4895] pwc: recv_control_msg error -71 req 02 val 2800 [ 508.931270][ T4895] pwc: recv_control_msg error -71 req 04 val 1100 [ 508.965707][ T4895] pwc: recv_control_msg error -71 req 04 val 1200 [ 509.149556][ T4895] pwc: Registered as video103. [ 509.464471][ T4895] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input7 [ 509.716187][ T4895] usb 10-1: USB disconnect, device number 2 [ 509.955414][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2138'. [ 510.085092][T12899] device syzkaller0 entered promiscuous mode [ 510.417832][T12915] lo speed is unknown, defaulting to 1000 [ 511.766050][T12946] netlink: 'syz.8.2153': attribute type 12 has an invalid length. [ 511.965926][T12951] loop3: detected capacity change from 0 to 16 [ 512.566103][T12951] erofs: (device loop3): mounted with root inode @ nid 36. [ 512.718432][T12961] netlink: zone id is out of range [ 512.774258][T12961] netlink: zone id is out of range [ 512.912081][T12961] netlink: zone id is out of range [ 512.940013][T12961] netlink: zone id is out of range [ 512.945431][T12961] netlink: zone id is out of range [ 512.952893][T12961] netlink: zone id is out of range [ 512.958131][T12961] netlink: zone id is out of range [ 512.972796][T12961] netlink: zone id is out of range [ 513.175922][T12961] netlink: zone id is out of range [ 513.227714][T12961] netlink: zone id is out of range [ 513.479040][T12983] overlayfs: failed to clone upperpath [ 513.495196][T12978] lo speed is unknown, defaulting to 1000 [ 513.653687][T12990] loop9: detected capacity change from 0 to 256 [ 514.601915][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 514.601930][ T26] audit: type=1326 audit(1764003954.943:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.2.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 514.707664][T13002] loop8: detected capacity change from 0 to 4096 [ 514.801938][T13014] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2170'. [ 514.811293][ T26] audit: type=1326 audit(1764003954.943:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.2.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 514.833709][ C0] vkms_vblank_simulate: vblank timer overrun [ 514.848457][T13016] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2172'. [ 514.971327][T13014] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2170'. [ 515.055263][T13016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2172'. [ 515.560143][T13020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2172'. [ 515.642441][T13023] bridge: RTM_NEWNEIGH with invalid ether address [ 515.688264][ T26] audit: type=1326 audit(1764003954.973:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.2.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 515.699926][T13002] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 515.710834][ T26] audit: type=1326 audit(1764003954.973:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.2.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 515.745540][ T26] audit: type=1326 audit(1764003954.973:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.2.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 515.767709][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.782296][ T26] audit: type=1326 audit(1764003954.973:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.2.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 515.872357][T13002] fs-verity: sha256 using implementation "sha256-avx2" [ 515.949679][ T26] audit: type=1326 audit(1764003954.973:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.2.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 516.021195][ T26] audit: type=1326 audit(1764003954.973:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.2.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 516.719446][ T26] audit: type=1326 audit(1764003954.973:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.2.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 516.906685][ T26] audit: type=1326 audit(1764003954.973:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13004 comm="syz.2.2168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 517.832544][T13060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2182'. [ 518.338321][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802aeab800: rx timeout, send abort [ 518.616837][T13065] lo speed is unknown, defaulting to 1000 [ 522.769946][T13127] device geneve2 entered promiscuous mode [ 524.336046][T13157] loop3: detected capacity change from 0 to 8192 [ 524.436982][T13157] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 524.449095][T13157] REISERFS (device loop3): using ordered data mode [ 524.455760][T13157] reiserfs: using flush barriers [ 524.473349][T13157] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 524.491884][T13157] REISERFS (device loop3): checking transaction log (loop3) [ 525.038767][T13157] REISERFS (device loop3): Using tea hash to sort names [ 525.061171][T13157] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 526.049298][T13176] overlayfs: failed to clone upperpath [ 526.073228][T13169] lo speed is unknown, defaulting to 1000 [ 526.105255][T13176] overlayfs: failed to clone lowerpath [ 526.295055][ T21] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 526.309079][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 526.309093][ T26] audit: type=1326 audit(1764003966.643:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13185 comm="syz.1.2212" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe8d983749 code=0x0 [ 527.491296][ T21] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.502638][ T21] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.512971][ T21] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 527.535882][ T21] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.498726][ T21] usb 10-1: config 0 descriptor?? [ 528.540275][T13204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2216'. [ 528.558004][T13215] netlink: 296 bytes leftover after parsing attributes in process `syz.8.2217'. [ 528.611308][ T21] usb 10-1: can't set config #0, error -71 [ 528.632167][ T21] usb 10-1: USB disconnect, device number 3 [ 528.672100][ T26] audit: type=1326 audit(1764003969.013:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.9.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5492249749 code=0x7ffc0000 [ 528.711925][T13221] IPv6: Can't replace route, no match found [ 528.829345][ T26] audit: type=1326 audit(1764003969.033:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.9.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5492249749 code=0x7ffc0000 [ 529.082420][ T26] audit: type=1326 audit(1764003969.043:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.9.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f5492249749 code=0x7ffc0000 [ 529.726814][ T26] audit: type=1326 audit(1764003969.043:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.9.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5492249749 code=0x7ffc0000 [ 529.750682][ T26] audit: type=1326 audit(1764003969.043:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.9.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5492249749 code=0x7ffc0000 [ 529.829813][ T26] audit: type=1326 audit(1764003969.043:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.9.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5492249749 code=0x7ffc0000 [ 529.923310][ T26] audit: type=1326 audit(1764003969.043:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.9.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5492249749 code=0x7ffc0000 [ 530.319608][T13250] libceph: resolve '4..' (ret=-3): failed [ 530.420431][ T26] audit: type=1326 audit(1764003969.043:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.9.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5492249749 code=0x7ffc0000 [ 530.513040][T13246] lo speed is unknown, defaulting to 1000 [ 530.826869][ T26] audit: type=1326 audit(1764003969.053:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13220 comm="syz.9.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5492249749 code=0x7ffc0000 [ 535.471228][T13296] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 536.781434][T13296] usb 4-1: config 0 has no interfaces? [ 536.787398][T13296] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 536.827790][T13296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.863400][T13296] usb 4-1: config 0 descriptor?? [ 537.118390][ T6175] usb 4-1: USB disconnect, device number 6 [ 537.171656][T13328] lo speed is unknown, defaulting to 1000 [ 538.387859][T13352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2249'. [ 538.774939][T13352] device hsr_slave_0 left promiscuous mode [ 540.705669][T13389] device ip6gre2 entered promiscuous mode [ 540.749049][ T6175] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 540.754495][ T4894] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 540.786654][T13390] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 540.801495][ T4894] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 540.858954][T13296] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 541.141336][ T6175] usb 4-1: config 0 has no interfaces? [ 541.301549][ T6175] usb 4-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 541.341680][ T6175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 541.349807][ T6175] usb 4-1: SerialNumber: syz [ 541.352490][T13296] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 541.428337][ T6175] usb 4-1: config 0 descriptor?? [ 542.086181][ T21] usb 4-1: USB disconnect, device number 7 [ 542.126595][ T4228] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 542.135893][ T4894] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 542.448511][T13422] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 542.474867][T13422] CIFS mount error: No usable UNC path provided in device string! [ 542.474867][T13422] [ 542.485629][T13422] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 543.111611][T13296] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 543.145302][T13296] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 543.271443][T13296] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 543.308793][T13296] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 543.337688][T13296] usb 10-1: SerialNumber: syz [ 543.687093][ T21] usb 10-1: USB disconnect, device number 4 [ 544.265014][T13452] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2271'. [ 544.819417][ T6174] Bluetooth: hci1: command 0x0406 tx timeout [ 545.191229][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 546.751347][T13474] device ip6_vti0 entered promiscuous mode [ 547.292004][T13485] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2279'. [ 549.044559][T13512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2287'. [ 549.077966][T13512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2287'. [ 549.356543][T13516] kvm: MWAIT instruction emulated as NOP! [ 551.071583][T13545] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 551.101718][T13546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.194412][T13546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.117404][T13560] device syzkaller0 entered promiscuous mode [ 553.247357][T13576] xt_CT: You must specify a L4 protocol and not use inversions on it [ 554.471229][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 556.692890][T13616] Cannot find del_set index 16384 as target [ 557.471491][T13629] xt_policy: output policy not valid in PREROUTING and INPUT [ 558.202993][T11646] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.307403][T11646] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.625161][T11646] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.120099][T11646] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.331706][T13651] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 559.360826][T13651] net_ratelimit: 23 callbacks suppressed [ 559.360841][T13651] IPVS: sh: FWM 3 0x00000003 - no destination available [ 559.393124][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 559.718685][T13626] loop9: detected capacity change from 0 to 32768 [ 559.921908][T13626] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.2314 (13626) [ 560.192128][T13626] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 560.261663][T13626] BTRFS info (device loop9): force clearing of disk cache [ 560.268938][T13626] BTRFS info (device loop9): force zlib compression, level 3 [ 560.321253][T13626] BTRFS info (device loop9): setting nodatacow [ 560.327477][T13626] BTRFS info (device loop9): enabling auto defrag [ 560.401582][T13626] BTRFS info (device loop9): max_inline at 0 [ 560.431546][T13626] BTRFS info (device loop9): enabling disk space caching [ 560.438653][T13626] BTRFS info (device loop9): disk space caching is enabled [ 560.533597][T13626] BTRFS info (device loop9): has skinny extents [ 560.651072][T13626] BTRFS error (device loop9): open_ctree failed: -12 [ 562.106545][T13670] loop8: detected capacity change from 0 to 32768 [ 562.339950][T13670] XFS (loop8): Mounting V5 Filesystem [ 563.453948][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.460279][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.685056][T13670] XFS (loop8): log mount failed [ 563.691642][T13745] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 563.766467][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2331'. [ 564.554987][T13757] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2336'. [ 564.664831][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.729058][T11646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.748179][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.768039][T11646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.803514][T11646] device bridge_slave_1 left promiscuous mode [ 564.829732][T13767] ptrace attach of "./syz-executor exec"[4191] was attempted by ""[13767] [ 564.869075][T11646] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.993946][T11646] device bridge_slave_0 left promiscuous mode [ 565.144121][T11646] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.463298][T11646] device veth1_macvtap left promiscuous mode [ 565.469533][T11646] device veth0_macvtap left promiscuous mode [ 565.479767][T11646] device veth1_vlan left promiscuous mode [ 565.487921][T11646] device veth0_vlan left promiscuous mode [ 566.584270][T13781] loop8: detected capacity change from 0 to 2048 [ 566.600752][T11646] team0 (unregistering): Port device team_slave_1 removed [ 566.615930][T11646] team0 (unregistering): Port device team_slave_0 removed [ 566.629415][T11646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.658785][T11646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.726548][T13781] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 566.813646][T11646] bond0 (unregistering): Released all slaves [ 568.145390][T13812] loop9: detected capacity change from 0 to 1024 [ 568.391612][T13812] EXT4-fs (loop9): Ignoring removed bh option [ 568.429159][T13812] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 569.333108][T13812] EXT4-fs (loop9): mounted filesystem without journal. Opts: noload,data_err=abort,barrier=0x0000000000000002,dioread_lock,errors=remount-ro,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,resuid=0x0000000000000000,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 570.106053][T13830] overlayfs: unrecognized mount option "?Zug=2Dt.ٵn 1GE-"fhǏ!%Tɠΰ8YP9)-N5\\ϰx=mjYp1kW'<m{ѥ{wгQKSm@YQK8?rjj 1\{>1Q!@dRN ;+!sׂ3~&R~5tfG MY!K0Xll~" or missing value [ 571.741243][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 572.059072][T13851] loop9: detected capacity change from 0 to 512 [ 572.219660][T13851] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 572.451873][T13851] EXT4-fs (loop9): orphan cleanup on readonly fs [ 572.519305][T13851] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 572.690248][T13851] __quota_error: 2 callbacks suppressed [ 572.690276][T13851] Quota error (device loop9): write_blk: dquota write failed [ 572.747423][T13851] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 572.775553][T13851] EXT4-fs error (device loop9): ext4_acquire_dquot:6209: comm syz.9.2359: Failed to acquire dquot type 0 [ 572.811747][T13868] loop8: detected capacity change from 0 to 16 [ 572.895447][T13851] EXT4-fs (loop9): 1 truncate cleaned up [ 572.996229][T13871] netlink: 'syz.1.2364': attribute type 2 has an invalid length. [ 573.046856][T13868] erofs: (device loop8): mounted with root inode @ nid 36. [ 573.118054][T13851] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000000,nogrpid,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback. [ 575.179947][T13893] device syzkaller0 entered promiscuous mode [ 576.428231][T13914] xt_TCPMSS: Only works on TCP SYN packets [ 576.812629][T13924] tipc: Started in network mode [ 576.818332][T13924] tipc: Node identity 461ab18bb46b, cluster identity 4711 [ 576.829828][T13924] tipc: Enabled bearer , priority 0 [ 576.896089][T13924] device syzkaller0 entered promiscuous mode [ 576.943270][T13920] tipc: Resetting bearer [ 577.029063][T13920] tipc: Disabling bearer [ 577.041331][T13710] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 577.061173][T13296] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 577.087232][T13938] netlink: 'syz.2.2381': attribute type 13 has an invalid length. [ 577.114750][T13938] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 577.154400][T13938] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 577.241390][ T6178] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 577.270733][ T4894] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 577.287984][T13948] loop9: detected capacity change from 0 to 1024 [ 577.291197][T13710] usb 9-1: Using ep0 maxpacket: 32 [ 577.313433][ T4894] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 577.411380][T13948] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled [ 577.420800][T13948] EXT4-fs (loop9): Ignoring removed nomblk_io_submit option [ 577.421461][T13710] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 577.461547][T13296] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.492019][T13296] usb 4-1: config 0 interface 0 has no altsetting 0 [ 577.498778][T13296] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 577.513466][T13948] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 577.538419][T13296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.589981][T13296] usb 4-1: config 0 descriptor?? [ 577.596141][T13948] EXT4-fs (loop9): mounted filesystem without journal. Opts: nodioread_nolock,nolazytime,abort,errors=continue,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,nobarrier,,errors=continue. Quota mode: writeback. [ 577.631381][T13710] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 577.661316][T13710] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 577.669526][T13710] usb 9-1: Product: syz [ 577.681158][T13710] usb 9-1: Manufacturer: syz [ 577.686200][T13710] usb 9-1: SerialNumber: syz [ 577.697041][T13710] usb 9-1: config 0 descriptor?? [ 577.721469][T13926] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 577.742035][T13710] hub 9-1:0.0: bad descriptor, ignoring hub [ 577.758429][T13710] hub: probe of 9-1:0.0 failed with error -5 [ 578.256913][T13296] kye 0003:0458:5015.0006: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.3-1/input0 [ 578.320858][ T26] audit: type=1800 audit(1764004018.653:421): pid=13927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2377" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 578.377662][ T6175] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 578.418904][T13296] kye 0003:0458:5015.0006: tablet-enabling feature report not found [ 578.451796][T13966] loop9: detected capacity change from 0 to 8192 [ 578.508248][T13296] kye 0003:0458:5015.0006: tablet enabling failed [ 578.928493][ T4894] usb 9-1: USB disconnect, device number 3 [ 579.822766][T13296] usb 4-1: USB disconnect, device number 8 [ 580.120175][T13966] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 580.129952][T13966] REISERFS (device loop9): using ordered data mode [ 580.136734][T13966] reiserfs: using flush barriers [ 580.157281][T13966] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 580.175431][T13966] REISERFS (device loop9): checking transaction log (loop9) [ 580.655596][T13966] REISERFS (device loop9): Using tea hash to sort names [ 580.666316][T13966] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 581.134120][T13996] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2389'. [ 581.458611][T13988] fido_id[13988]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 582.389645][T14015] ieee802154 phy0 wpan0: encryption failed: -22 [ 582.446436][T14015] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 584.738032][ T4894] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 584.798542][T14064] netlink: 27 bytes leftover after parsing attributes in process `syz.9.2404'. [ 585.001248][ T4894] usb 9-1: Using ep0 maxpacket: 16 [ 585.122615][ T4894] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.152321][ T4894] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 585.181342][ T4894] usb 9-1: config 0 interface 0 has no altsetting 0 [ 585.194942][ T4894] usb 9-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 585.215957][ T4894] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.237203][ T4894] usb 9-1: config 0 descriptor?? [ 585.351245][ T6178] Bluetooth: hci2: command 0x0406 tx timeout [ 585.484560][ T4894] usbhid 9-1:0.0: can't add hid device: -71 [ 585.491813][ T4894] usbhid: probe of 9-1:0.0 failed with error -71 [ 585.514593][ T4894] usb 9-1: USB disconnect, device number 4 [ 586.271959][ T26] audit: type=1326 audit(1764004026.603:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14098 comm="syz.8.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6c9d3749 code=0x7fc00000 [ 586.471209][ T26] audit: type=1326 audit(1764004026.643:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14098 comm="syz.8.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d6c9d3749 code=0x7fc00000 [ 586.534411][ T26] audit: type=1326 audit(1764004026.643:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14098 comm="syz.8.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6c9d3749 code=0x7fc00000 [ 586.559099][ T26] audit: type=1326 audit(1764004026.643:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14098 comm="syz.8.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6c9d3749 code=0x7fc00000 [ 586.663184][ T26] audit: type=1326 audit(1764004026.643:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14098 comm="syz.8.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6c9d3749 code=0x7fc00000 [ 586.737144][ T26] audit: type=1326 audit(1764004026.643:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14098 comm="syz.8.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6c9d3749 code=0x7fc00000 [ 586.830642][ T26] audit: type=1326 audit(1764004026.643:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14098 comm="syz.8.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6c9d3749 code=0x7fc00000 [ 587.005482][ T26] audit: type=1326 audit(1764004026.643:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14098 comm="syz.8.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6c9d3749 code=0x7fc00000 [ 587.126116][ T26] audit: type=1326 audit(1764004026.643:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14098 comm="syz.8.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6c9d3749 code=0x7fc00000 [ 587.537681][ T26] audit: type=1326 audit(1764004026.643:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14098 comm="syz.8.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d6c9d3749 code=0x7fc00000 [ 588.570580][T14167] loop3: detected capacity change from 0 to 4096 [ 588.603699][T14167] NILFS (loop3): unrecognized mount option "01777777777777777777777" [ 588.783639][T14173] binder: BINDER_SET_CONTEXT_MGR already set [ 588.805227][T14173] binder: 14171:14173 ioctl 4018620d 200000004a80 returned -16 [ 589.211989][T14184] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.602257][T14193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2431'. [ 589.722797][T14184] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.970200][T14184] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.153267][T14184] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.895069][T14184] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.914061][T14184] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.933121][T14184] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.951796][T14184] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.495239][T14226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2440'. [ 592.721224][T13710] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 592.971234][T13710] usb 4-1: Using ep0 maxpacket: 16 [ 593.091327][T13710] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 593.130391][T13710] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 593.331422][T13710] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 593.366667][T13710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.391220][T13710] usb 4-1: Product: syz [ 593.395470][T13710] usb 4-1: Manufacturer: syz [ 593.410387][T13710] usb 4-1: SerialNumber: syz [ 593.585144][T14257] loop9: detected capacity change from 0 to 32768 [ 593.708246][T14257] XFS (loop9): Mounting V5 Filesystem [ 593.761417][T13710] usb 4-1: 0:2 : does not exist [ 593.791330][T13710] usb 4-1: USB disconnect, device number 9 [ 593.807238][T14257] XFS (loop9): Ending clean mount [ 593.891477][T14257] XFS (loop9): Quotacheck needed: Please wait. [ 594.011853][T13994] udevd[13994]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 594.090004][T14257] XFS (loop9): Quotacheck: Done. [ 595.614941][T11325] XFS (loop9): Unmounting Filesystem [ 597.601032][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 597.601046][ T26] audit: type=1326 audit(1764004037.933:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14359 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 597.991764][ T26] audit: type=1326 audit(1764004038.273:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14359 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff994a295e7 code=0x7ffc0000 [ 598.015269][ T26] audit: type=1326 audit(1764004038.273:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14359 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9949ce829 code=0x7ffc0000 [ 598.057694][ T26] audit: type=1326 audit(1764004038.273:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14359 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 598.137063][ T26] audit: type=1326 audit(1764004038.283:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14359 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff994a295e7 code=0x7ffc0000 [ 598.199571][ T26] audit: type=1326 audit(1764004038.283:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14359 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9949ce829 code=0x7ffc0000 [ 598.344533][ T26] audit: type=1326 audit(1764004038.283:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14359 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 598.426496][ T26] audit: type=1326 audit(1764004038.293:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14359 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff994a295e7 code=0x7ffc0000 [ 598.708791][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2471'. [ 598.890853][ T26] audit: type=1326 audit(1764004038.293:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14359 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff9949ce829 code=0x7ffc0000 [ 598.918671][ T26] audit: type=1326 audit(1764004038.293:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14359 comm="syz.2.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x7ffc0000 [ 601.269171][T14413] binder: BINDER_SET_CONTEXT_MGR already set [ 601.284973][T14414] syz.2.2477[14414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 601.285066][T14414] syz.2.2477[14414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 601.298888][T14414] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2477'. [ 601.349745][T14413] binder: 14410:14413 ioctl 4018620d 200000004a80 returned -16 [ 602.339168][T14428] loop9: detected capacity change from 0 to 2048 [ 602.398610][T14420] loop8: detected capacity change from 0 to 4096 [ 602.486436][T14428] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 602.535924][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2485'. [ 602.666092][T14444] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 602.779571][T14446] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 602.844779][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 602.844802][ T26] audit: type=1800 audit(1764004043.183:493): pid=14420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2480" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 603.121519][T14470] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2490'. [ 604.285594][T14487] sctp: [Deprecated]: syz.9.2495 (pid 14487) Use of struct sctp_assoc_value in delayed_ack socket option. [ 604.285594][T14487] Use struct sctp_sack_info instead [ 605.377548][T14503] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 605.417775][T14503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 605.471437][T14503] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 605.529550][T14515] loop3: detected capacity change from 0 to 1024 [ 605.532817][T10980] bond0: (slave bond_slave_0): interface is now down [ 605.555468][T14509] netlink: 'syz.9.2500': attribute type 10 has an invalid length. [ 605.586286][T10980] bond0: (slave bond_slave_1): interface is now down [ 605.607557][T10980] bond0: (slave wlan1): interface is now down [ 605.661432][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 605.668378][T14515] EXT4-fs (loop3): Ignoring removed oldalloc option [ 605.752458][T14515] EXT4-fs (loop3): Ignoring removed bh option [ 605.777231][T14515] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 605.880551][T10980] bond0: now running without any active interface! [ 605.904604][T14515] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 606.635928][T14515] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 614.626268][T14643] netlink: 'syz.8.2528': attribute type 39 has an invalid length. [ 622.187857][T14739] loop8: detected capacity change from 0 to 2048 [ 622.212271][T14739] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 623.327787][T14766] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 624.888405][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.894770][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.441283][T14775] loop8: detected capacity change from 0 to 32768 [ 625.508263][T14775] XFS (loop8): Mounting V5 Filesystem [ 625.569136][T14775] XFS (loop8): Ending clean mount [ 625.583255][T14775] XFS (loop8): Quotacheck needed: Please wait. [ 625.659463][T14775] XFS (loop8): Quotacheck: Done. [ 625.890682][T14772] netlink: 'syz.3.2557': attribute type 10 has an invalid length. [ 625.927042][T14772] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 626.268559][T14803] xt_CT: You must specify a L4 protocol and not use inversions on it [ 627.090608][T14819] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2568'. [ 627.117408][T14819] device bridge_slave_1 left promiscuous mode [ 627.139978][T14820] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 627.147580][T14820] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 627.148682][T14819] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.160706][T14820] vhci_hcd vhci_hcd.0: Device attached [ 627.196052][T14819] device bridge_slave_0 left promiscuous mode [ 627.207919][T14819] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.282948][T14828] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2570'. [ 627.308847][T14828] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2570'. [ 627.354986][T14828] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2570'. [ 627.471402][ T6178] usb 40-1: SetAddress Request (2) to port 0 [ 627.483793][ T6178] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 628.536929][ T9318] XFS (loop8): Unmounting Filesystem [ 628.565721][T14820] syz.3.2569 (14820): drop_caches: 2 [ 629.467072][T14844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.477984][T14822] vhci_hcd: connection reset by peer [ 629.524986][T11180] vhci_hcd: stop threads [ 629.549312][T11180] vhci_hcd: release socket [ 629.577070][T11180] vhci_hcd: disconnect device [ 630.627945][T14820] syz.3.2569 (14820): drop_caches: 2 [ 632.191927][T14890] tipc: Enabled bearer , priority 0 [ 633.880379][ T4894] tipc: Node number set to 4067537291 [ 634.111041][ T6178] usb 40-1: device descriptor read/8, error -110 [ 634.438065][T14914] loop3: detected capacity change from 0 to 512 [ 635.155709][ T6178] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 635.169383][ T6178] usb usb40-port1: attempt power cycle [ 635.175563][T14914] EXT4-fs (loop3): Ignoring removed bh option [ 635.371997][T14914] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,usrquota,bh,,errors=continue. Quota mode: writeback. [ 635.389243][T14914] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 635.631617][ T6178] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 635.832806][T14956] netlink: 'syz.3.2598': attribute type 12 has an invalid length. [ 635.952419][ T6178] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 635.985003][ T6178] usb usb40-port1: unable to enumerate USB device [ 637.168067][T14989] loop9: detected capacity change from 0 to 764 [ 641.766156][T15062] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000000 [ 642.633700][T15078] tipc: Enabling of bearer rejected, failed to enable media [ 642.682875][T15080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.702696][T15080] team0: Device bond0 failed to register rx_handler [ 642.810883][T15088] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2633'. [ 643.528831][T15096] netlink: zone id is out of range [ 643.694392][T15096] netlink: zone id is out of range [ 643.699631][T15096] netlink: zone id is out of range [ 643.704875][T15096] netlink: zone id is out of range [ 643.710179][T15096] netlink: zone id is out of range [ 643.715526][T15096] netlink: zone id is out of range [ 643.720748][T15096] netlink: zone id is out of range [ 643.731368][T15096] netlink: zone id is out of range [ 643.818608][T15096] netlink: zone id is out of range [ 643.830256][T15096] netlink: zone id is out of range [ 644.462945][T15075] loop8: detected capacity change from 0 to 32768 [ 644.509297][T15075] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.2627 (15075) [ 644.559044][T15075] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 644.574258][T15075] BTRFS info (device loop8): force clearing of disk cache [ 644.588935][T15075] BTRFS info (device loop8): enabling auto defrag [ 644.603055][T15075] BTRFS info (device loop8): enabling ssd optimizations [ 644.687916][T15075] BTRFS info (device loop8): max_inline at 0 [ 644.694267][T15075] BTRFS info (device loop8): enabling disk space caching [ 644.706915][T15075] BTRFS info (device loop8): disk space caching is enabled [ 644.714473][T15075] BTRFS info (device loop8): has skinny extents [ 648.115857][T15075] BTRFS error (device loop8): open_ctree failed: -12 [ 648.185222][T15157] loop9: detected capacity change from 0 to 512 [ 648.291336][T15157] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 648.552866][T15157] EXT4-fs (loop9): 1 truncate cleaned up [ 648.568757][T15157] EXT4-fs (loop9): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,bsddf,noblock_validity,,errors=continue. Quota mode: none. [ 648.573407][T15189] overlayfs: failed to clone upperpath [ 648.832737][T15190] overlayfs: failed to clone lowerpath [ 649.353735][T15157] syz.9.2643 (pid 15157) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 652.711290][ T26] audit: type=1326 audit(1764004093.033:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15239 comm="syz.8.2662" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d6c9d3749 code=0x0 [ 654.696031][T15293] device ip6gre1 entered promiscuous mode [ 655.980817][T15297] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 656.122449][ T6174] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 656.260238][ T6174] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 656.268524][ T6179] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 657.569875][ T6179] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 657.584904][T13713] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 657.743266][T15326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2680'. [ 657.776905][T15326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2680'. [ 658.560787][T15343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2693'. [ 659.852561][T15345] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 659.860515][T15345] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 660.338818][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 661.576830][T15393] CIFS mount error: No usable UNC path provided in device string! [ 661.576830][T15393] [ 661.587083][T15393] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 662.773532][T15406] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2696'. [ 665.386817][T15458] loop7: detected capacity change from 0 to 7 [ 665.511042][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 665.522344][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 665.532983][T15460] syz.8.2711 sent an empty control message without MSG_MORE. [ 665.551694][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 665.562665][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 666.190900][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 666.201880][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 666.268107][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 666.279081][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 666.322706][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 666.333678][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 666.489346][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 666.500308][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 666.561412][T15483] Cannot find del_set index 16384 as target [ 666.657391][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 666.668371][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 666.676830][T13994] ldm_validate_partition_table(): Disk read failed. [ 667.161223][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 667.172256][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 667.267841][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 667.278801][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 667.329083][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 667.340017][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 667.358991][T13994] Dev loop7: unable to read RDB block 0 [ 667.418747][T13994] loop7: unable to read partition table [ 667.432435][T13994] loop7: partition table beyond EOD, truncated [ 667.459556][T15458] ldm_validate_partition_table(): Disk read failed. [ 667.474118][T15458] Dev loop7: unable to read RDB block 0 [ 667.488410][T15458] loop7: unable to read partition table [ 667.521057][T15458] loop7: partition table beyond EOD, truncated [ 667.562443][T15458] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 667.741249][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 668.722877][T15542] overlayfs: unrecognized mount option "?Zug=2Dt.ٵn 1GE-"fhǏ!%Tɠΰ8YP9)-N5\\ϰx=mjYp1kW'<m{ѥ{wгQKSm@YQK8?rjj 1\{>1Q!@dRN ;+!sׂ3~&R~5tfG MY!K0Xll~" or missing value [ 670.276531][T15557] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 671.400579][T15573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2735'. [ 672.382203][T15586] loop3: detected capacity change from 0 to 16 [ 672.405817][T15586] erofs: (device loop3): mounted with root inode @ nid 36. [ 674.566772][T15614] loop3: detected capacity change from 0 to 16 [ 674.701715][T15614] erofs: (device loop3): mounted with root inode @ nid 36. [ 675.046696][T15625] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 675.068485][T15625] erofs: (device loop3): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 675.075632][T15622] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2749'. [ 675.089832][T15625] erofs: (device loop3): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 675.106638][T15625] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36 [ 675.116264][T15625] erofs: (device loop3): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 675.125503][T15625] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 675.135812][T15625] erofs: (device loop3): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 675.147580][T15625] attempt to access beyond end of device [ 675.147580][T15625] loop3: rw=524288, want=32, limit=16 [ 675.528934][T15635] loop8: detected capacity change from 0 to 512 [ 675.603152][T15635] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 675.761579][T15635] EXT4-fs (loop8): orphan cleanup on readonly fs [ 675.796060][T15635] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 675.857847][T15635] Quota error (device loop8): write_blk: dquota write failed [ 675.868586][T15635] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 675.879128][T15635] EXT4-fs error (device loop8): ext4_acquire_dquot:6209: comm syz.8.2752: Failed to acquire dquot type 0 [ 675.905743][T15635] EXT4-fs (loop8): 1 truncate cleaned up [ 675.915770][T15635] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000000,nogrpid,resgid=0x000000000000ee01,noinit_itable,noinit_itable,journal_dev=0x00000000000000072,errors=continue. Quota mode: writeback. [ 677.220903][T15680] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2762'. [ 677.815322][T15686] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2760'. [ 678.777199][T15699] kvm: pic: non byte write [ 679.844042][T15722] lo speed is unknown, defaulting to 1000 [ 680.028684][ T26] audit: type=1326 audit(1764004120.353:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15721 comm="syz.2.2771" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff994a32749 code=0x0 [ 680.541300][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 681.317603][T15742] device syzkaller0 entered promiscuous mode [ 681.831243][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 683.617889][T15785] netlink: 196 bytes leftover after parsing attributes in process `syz.8.2785'. [ 684.423817][T15789] device veth16 entered promiscuous mode [ 685.665699][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.672994][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.716202][T15877] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2808'. [ 689.317300][T15890] xt_l2tp: missing protocol rule (udp|l2tpip) [ 689.687601][T15909] device syzkaller0 entered promiscuous mode [ 691.657215][T15930] device bridge6 entered promiscuous mode [ 693.007702][T15960] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2827'. [ 693.077816][T15960] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2827'. [ 694.464465][T15985] netlink: 'syz.8.2833': attribute type 1 has an invalid length. [ 694.639158][T15990] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 694.760839][T15994] device veth5 entered promiscuous mode [ 694.789236][T15994] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 695.856230][T16015] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2840'. [ 697.721087][ T26] audit: type=1326 audit(1764004394.051:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16064 comm="syz.8.2854" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d6c9d3749 code=0x0 [ 697.932744][T16076] xt_socket: unknown flags 0x4c [ 700.960617][T16123] loop9: detected capacity change from 0 to 512 [ 700.999250][T16123] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 701.016124][T16123] EXT4-fs (loop9): Ignoring removed bh option [ 701.075698][T16123] EXT4-fs (loop9): Test dummy encryption mode enabled [ 701.121443][T16123] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 701.179016][T16123] EXT4-fs (loop9): 1 truncate cleaned up [ 701.215977][T16123] EXT4-fs (loop9): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue. Quota mode: none. [ 701.259844][ T26] audit: type=1800 audit(1764004397.591:497): pid=16130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2868" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 701.841194][T16123] fscrypt (loop9): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 704.899924][T16185] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2880'. [ 706.411144][T16216] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2883'. [ 707.463441][T16231] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 708.411366][T13713] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 708.882201][T13713] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.967289][T13713] usb 10-1: config 0 interface 0 has no altsetting 0 [ 708.974506][T13713] usb 10-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 708.984058][T13713] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.995078][T13713] usb 10-1: config 0 descriptor?? [ 709.025224][ T4238] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 709.145946][T16253] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 709.274340][ T4238] usb 4-1: Using ep0 maxpacket: 16 [ 709.391296][ T4238] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.402270][ T4238] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 709.415188][ T4238] usb 4-1: config 0 interface 0 has no altsetting 0 [ 709.421896][ T4238] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 709.430939][ T4238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.532425][ T4238] usb 4-1: config 0 descriptor?? [ 709.737734][ T26] audit: type=1800 audit(1764004406.071:498): pid=16227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.2888" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 710.093803][ T4238] hid-generic 0003:04D8:00DF.0007: item 0 4 0 9 parsing failed [ 710.116560][ T4238] hid-generic: probe of 0003:04D8:00DF.0007 failed with error -22 [ 710.165080][T13713] kye 0003:0458:5015.0008: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.9-1/input0 [ 710.176104][T13713] kye 0003:0458:5015.0008: tablet-enabling feature report not found [ 710.184173][T13713] kye 0003:0458:5015.0008: tablet enabling failed [ 710.248190][ T4238] usb 10-1: USB disconnect, device number 5 [ 710.337985][T13713] usb 4-1: USB disconnect, device number 10 [ 710.360655][T16270] fido_id[16270]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 710.599619][T16276] ------------[ cut here ]------------ [ 710.618744][T16276] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 710.631242][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 710.637747][T16276] WARNING: CPU: 0 PID: 16276 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 710.704218][T16276] Modules linked in: [ 710.708159][T16276] CPU: 1 PID: 16276 Comm: syz.1.2913 Not tainted syzkaller #0 [ 710.718004][T16276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 711.141996][T16276] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 711.293841][T16276] Code: 7d 8d f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 40 14 19 8b 4c 89 e6 89 ea e8 95 f1 6f 00 <0f> 0b e9 07 fd ff ff e8 a9 15 49 f8 0f 0b e9 b1 fe ff ff e8 9d 15 [ 711.402688][T16276] RSP: 0018:ffffc9000354f248 EFLAGS: 00010246 [ 711.408830][T16276] RAX: fc5c48d98ce6d000 RBX: 0000000000400000 RCX: 0000000000080000 [ 711.427754][T16276] RDX: ffffc90004f69000 RSI: 0000000000006a10 RDI: 0000000000006a11 [ 711.453686][T16276] RBP: 0000000000000004 R08: dffffc0000000000 R09: ffffed10172067b0 [ 711.461922][T16276] R10: ffffed10172067b0 R11: 1ffff110172067af R12: ffff88807ed98000 [ 711.469916][T16276] R13: ffff88807ed99290 R14: ffff88802ae48da0 R15: ffff88807ed9a298 [ 711.488265][T16276] FS: 00007efe8bbea6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 711.523495][T16276] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 711.530252][T16276] CR2: 00007ff992c98f98 CR3: 000000007885d000 CR4: 00000000003506e0 [ 711.538851][T16276] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 711.547201][T16276] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 711.558403][T16276] Call Trace: [ 711.561766][T16276] [ 711.564721][T16276] ? netif_carrier_off+0x1/0xc0 [ 711.569577][T16276] ieee80211_ocb_leave+0x26f/0x320 [ 711.574778][T16276] __cfg80211_leave_ocb+0x219/0x3f0 [ 711.579997][T16276] cfg80211_leave_ocb+0x53/0x70 [ 711.584949][T16276] cfg80211_change_iface+0x4f1/0xeb0 [ 711.590295][T16276] nl80211_set_interface+0x598/0x7d0 [ 711.595734][T16276] ? nl80211_dump_interface+0x5c0/0x5c0 [ 711.601369][T16276] ? mutex_lock_nested+0x17/0x20 [ 711.606421][T16276] genl_rcv_msg+0xbc6/0xf40 [ 711.610968][T16276] ? genl_bind+0x370/0x370 [ 711.615516][T16276] ? verify_lock_unused+0x140/0x140 [ 711.620781][T16276] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 711.626111][T16276] ? dev_queue_xmit+0x20/0x20 [ 711.630891][T16276] ? nl80211_dump_interface+0x5c0/0x5c0 [ 711.636547][T16276] netlink_rcv_skb+0x1e0/0x430 [ 711.641363][T16276] ? genl_bind+0x370/0x370 [ 711.645824][T16276] ? netlink_ack+0xb60/0xb60 [ 711.650664][T16276] ? __lock_acquire+0x7c60/0x7c60 [ 711.658367][T16276] ? preempt_count_add+0x8d/0x190 [ 711.665733][T16276] ? down_read+0x1aa/0x2e0 [ 711.670197][T16276] genl_rcv+0x24/0x40 [ 711.674272][T16276] netlink_unicast+0x774/0x920 [ 711.679068][T16276] netlink_sendmsg+0x8ab/0xbc0 [ 711.683962][T16276] ? netlink_getsockopt+0x560/0x560 [ 711.689215][T16276] ? aa_sock_msg_perm+0x94/0x150 [ 711.694281][T16276] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 711.699617][T16276] ? security_socket_sendmsg+0x7c/0xa0 [ 711.705273][T16276] ? netlink_getsockopt+0x560/0x560 [ 711.710587][T16276] ____sys_sendmsg+0x5a2/0x8c0 [ 711.715589][T16276] ? memset+0x1e/0x40 [ 711.719689][T16276] ? __sys_sendmsg_sock+0x30/0x30 [ 711.724969][T16276] ? import_iovec+0x6f/0xa0 [ 711.729598][T16276] ___sys_sendmsg+0x1f0/0x260 [ 711.734433][T16276] ? __sys_sendmsg+0x250/0x250 [ 711.741928][T16276] ? sock_do_ioctl+0x27c/0x2f0 [ 711.746925][T16276] ? __fdget+0x18b/0x210 [ 711.751478][T16276] __se_sys_sendmsg+0x190/0x250 [ 711.756461][T16276] ? __x64_sys_sendmsg+0x80/0x80 [ 711.761516][T16276] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 711.767701][T16276] ? lockdep_hardirqs_on+0x94/0x140 [ 711.775300][T16276] do_syscall_64+0x4c/0xa0 [ 711.779871][T16276] ? clear_bhb_loop+0x30/0x80 [ 711.784693][T16276] ? clear_bhb_loop+0x30/0x80 [ 711.789479][T16276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 711.795509][T16276] RIP: 0033:0x7efe8d983749 [ 711.800005][T16276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.831174][T16276] RSP: 002b:00007efe8bbea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 711.839653][T16276] RAX: ffffffffffffffda RBX: 00007efe8dbd9fa0 RCX: 00007efe8d983749 [ 711.861175][T16276] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000006 [ 711.869198][T16276] RBP: 00007efe8da07f91 R08: 0000000000000000 R09: 0000000000000000 [ 711.894207][T16276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 711.902299][T16276] R13: 00007efe8dbda038 R14: 00007efe8dbd9fa0 R15: 00007ffee242e7a8 [ 711.910312][T16276] [ 711.913409][T16276] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 711.920691][T16276] CPU: 1 PID: 16276 Comm: syz.1.2913 Not tainted syzkaller #0 [ 711.928157][T16276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 711.938242][T16276] Call Trace: [ 711.941535][T16276] [ 711.944472][T16276] dump_stack_lvl+0x168/0x230 [ 711.949165][T16276] ? show_regs_print_info+0x20/0x20 [ 711.954381][T16276] ? load_image+0x3b0/0x3b0 [ 711.958906][T16276] panic+0x2c9/0x7f0 [ 711.962816][T16276] ? bpf_jit_dump+0xd0/0xd0 [ 711.967345][T16276] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 711.973772][T16276] __warn+0x248/0x2b0 [ 711.977776][T16276] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 711.984203][T16276] report_bug+0x1b7/0x2e0 [ 711.988561][T16276] handle_bug+0x3a/0x70 [ 711.992719][T16276] exc_invalid_op+0x16/0x40 [ 711.997227][T16276] asm_exc_invalid_op+0x16/0x20 [ 712.002082][T16276] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 712.009117][T16276] Code: 7d 8d f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 40 14 19 8b 4c 89 e6 89 ea e8 95 f1 6f 00 <0f> 0b e9 07 fd ff ff e8 a9 15 49 f8 0f 0b e9 b1 fe ff ff e8 9d 15 [ 712.028731][T16276] RSP: 0018:ffffc9000354f248 EFLAGS: 00010246 [ 712.034823][T16276] RAX: fc5c48d98ce6d000 RBX: 0000000000400000 RCX: 0000000000080000 [ 712.042825][T16276] RDX: ffffc90004f69000 RSI: 0000000000006a10 RDI: 0000000000006a11 [ 712.050806][T16276] RBP: 0000000000000004 R08: dffffc0000000000 R09: ffffed10172067b0 [ 712.058789][T16276] R10: ffffed10172067b0 R11: 1ffff110172067af R12: ffff88807ed98000 [ 712.066770][T16276] R13: ffff88807ed99290 R14: ffff88802ae48da0 R15: ffff88807ed9a298 [ 712.074769][T16276] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 712.081203][T16276] ? netif_carrier_off+0x1/0xc0 [ 712.086065][T16276] ieee80211_ocb_leave+0x26f/0x320 [ 712.091187][T16276] __cfg80211_leave_ocb+0x219/0x3f0 [ 712.096397][T16276] cfg80211_leave_ocb+0x53/0x70 [ 712.101257][T16276] cfg80211_change_iface+0x4f1/0xeb0 [ 712.106564][T16276] nl80211_set_interface+0x598/0x7d0 [ 712.111867][T16276] ? nl80211_dump_interface+0x5c0/0x5c0 [ 712.117426][T16276] ? mutex_lock_nested+0x17/0x20 [ 712.122373][T16276] genl_rcv_msg+0xbc6/0xf40 [ 712.126887][T16276] ? genl_bind+0x370/0x370 [ 712.131309][T16276] ? verify_lock_unused+0x140/0x140 [ 712.136514][T16276] ? __dev_queue_xmit+0x1bc5/0x2ed0 [ 712.141734][T16276] ? dev_queue_xmit+0x20/0x20 [ 712.146415][T16276] ? nl80211_dump_interface+0x5c0/0x5c0 [ 712.151973][T16276] netlink_rcv_skb+0x1e0/0x430 [ 712.156762][T16276] ? genl_bind+0x370/0x370 [ 712.161176][T16276] ? netlink_ack+0xb60/0xb60 [ 712.165768][T16276] ? __lock_acquire+0x7c60/0x7c60 [ 712.170783][T16276] ? preempt_count_add+0x8d/0x190 [ 712.175796][T16276] ? down_read+0x1aa/0x2e0 [ 712.180199][T16276] genl_rcv+0x24/0x40 [ 712.184166][T16276] netlink_unicast+0x774/0x920 [ 712.188929][T16276] netlink_sendmsg+0x8ab/0xbc0 [ 712.193696][T16276] ? netlink_getsockopt+0x560/0x560 [ 712.198902][T16276] ? aa_sock_msg_perm+0x94/0x150 [ 712.203826][T16276] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 712.209094][T16276] ? security_socket_sendmsg+0x7c/0xa0 [ 712.214665][T16276] ? netlink_getsockopt+0x560/0x560 [ 712.219851][T16276] ____sys_sendmsg+0x5a2/0x8c0 [ 712.224611][T16276] ? memset+0x1e/0x40 [ 712.228590][T16276] ? __sys_sendmsg_sock+0x30/0x30 [ 712.233616][T16276] ? import_iovec+0x6f/0xa0 [ 712.238131][T16276] ___sys_sendmsg+0x1f0/0x260 [ 712.242801][T16276] ? __sys_sendmsg+0x250/0x250 [ 712.247570][T16276] ? sock_do_ioctl+0x27c/0x2f0 [ 712.252347][T16276] ? __fdget+0x18b/0x210 [ 712.256594][T16276] __se_sys_sendmsg+0x190/0x250 [ 712.261440][T16276] ? __x64_sys_sendmsg+0x80/0x80 [ 712.266379][T16276] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 712.272367][T16276] ? lockdep_hardirqs_on+0x94/0x140 [ 712.277579][T16276] do_syscall_64+0x4c/0xa0 [ 712.281985][T16276] ? clear_bhb_loop+0x30/0x80 [ 712.286654][T16276] ? clear_bhb_loop+0x30/0x80 [ 712.291326][T16276] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 712.297229][T16276] RIP: 0033:0x7efe8d983749 [ 712.301634][T16276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 712.321232][T16276] RSP: 002b:00007efe8bbea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 712.329640][T16276] RAX: ffffffffffffffda RBX: 00007efe8dbd9fa0 RCX: 00007efe8d983749 [ 712.337611][T16276] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000006 [ 712.345576][T16276] RBP: 00007efe8da07f91 R08: 0000000000000000 R09: 0000000000000000 [ 712.353543][T16276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 712.361519][T16276] R13: 00007efe8dbda038 R14: 00007efe8dbd9fa0 R15: 00007ffee242e7a8 [ 712.369489][T16276] [ 712.372716][T16276] Kernel Offset: disabled [ 712.378186][T16276] Rebooting in 86400 seconds..