last executing test programs: 21m5.662307427s ago: executing program 0 (id=87): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c6300008b6f07d442bf2fcbac0b6c6d75ce4e2fe0a1e795feaa062d04bda4c7e23285ae93e08fb19b939517dc25d7ddbeda2ba522058b2734547271c3842f8034181f3314e01eb0425b3a98bfac7b0321da15089bdd", @ANYRES16=r0, @ANYBLOB="01002cbd7000000000008900000008000300", @ANYRES32, @ANYBLOB="20001d801c00008006000500e700000005000c000100000005000b0001000000"], 0x3c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @empty}, &(0x7f00000000c0)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000048040)=""/102392, 0x18ff8) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 21m1.88509636s ago: executing program 0 (id=95): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0xff, 0x7, 0xfffffffffffffffd, 0x9}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'wlan0\x00', {0x2, 0x4e22, @empty=0x7f000000}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@local, 0x80, r6}) 20m57.282411852s ago: executing program 0 (id=100): removexattr(&(0x7f00000004c0)='./file0\x00', 0x0) set_mempolicy(0x2002, 0x0, 0x4) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x7, &(0x7f0000000140)=[{0x7, 0x9, 0x81, 0xd}, {0x80, 0xb, 0x3, 0x2}, {0x7, 0x3a, 0x2, 0x192}, {0x381, 0x9, 0x2, 0xfffeffff}, {0x1, 0x6, 0x80, 0x1}, {0xfe2a, 0x9, 0x14, 0xffffe44b}, {0xea, 0x2, 0x50, 0x603}]}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x40) dup3(r2, r0, 0x80000) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYBLOB=',fsmagic=0x0000000000000002,smackfsf^oor=smackfstrans-ute,fowner>', @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYBLOB="10af9b9320e74f2badb1d4f1bf657d6e613c701d8c5846d8803fc0d4f31e0c79e44ce9044721ca748ec42f07aea4364f36ff75c213c05cfcae7d9a22289f08efffb486ace97445aaf1541ba1fc8a8f20a31dfd675975db1599d3b57a2c97d8598d7729eddf33ea3504f1779e77a3ac0655cd593e710b8f5b076c38a60ee40c06bb60956c6bd72b80348f70ccb438f549f555d0567cbbf840569f1102d47be18af8b21f48c88dcc9ad10e24f851a3642197ab2acbb330d969d01a7bc3977faf2c369f47a693654742ab"], 0xa, 0xc35, &(0x7f0000001000)="$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") 20m52.127135072s ago: executing program 0 (id=103): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0xff, 0x7, 0xfffffffffffffffd, 0x9}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'wlan0\x00', {0x2, 0x4e22, @empty=0x7f000000}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000440)={@local, 0x80, r6}) 20m49.72282593s ago: executing program 0 (id=109): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000100)="f533548e414be4ec7a5dae3421fdb7a73c2f6ed0256107bf82b247c41aabc5011e5aadf1c82cf935360638e071e64a04dc0415ec5f1aeb3d1048ac332924d3310a29c44847d1e44f", 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20m46.177439151s ago: executing program 0 (id=115): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2009, 0x0, 0x6, 0xffffffffffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000580040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0xff, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x4, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xfc}}}}}}}}, 0x36) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140), 0x0) accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="140000000000000001000000010000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) 20m40.822924443s ago: executing program 32 (id=99): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000000)=@ethtool_link_settings={0x8}}) socket$inet_udplite(0x2, 0x2, 0x88) syslog(0x3, &(0x7f00000004c0)=""/164, 0xa4) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x4402, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x1522, &(0x7f0000001240)="$eJzs3AucT1XXOPC19t5njEn8muQy7L3X4ZdctkmSXJLkkiRJkuSWkDTJIwmJIbekIQnJZUjuIblMTHK/30IISdIkSW65Jfv/mfD39NTz1vO+vY/388z6fj6/j73mnLXPOmfNcS7DfNdpcPWGNarUJyL4H8GLfyQDQCwA9AeAXAAQAECZ+DLxmcuzS0z+n22E/bUennq1K2BXE/c/a+P+Z23c/6yN+5+1cf+zNu5/1sb9z9q4/4xlZZun5b+OP1n3w+//szK+/v9nuHTywVdrS97QGSDmz+Zx/7M27v9/rODPrMT9z9q4/1lV7NUugP0fwOd/VpDtny7h/mdt3H/GsrKr/f75an8gkrWPwdX+/mOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxljWc8VcoALg8vtp1McYYY4wxxhhj7K/js13tChhjjDHGGGOMMfa/D0GABAUBxEA2iIXsEAcCAK6FnJALInAdxMP1kBtugDyQF/JBfkiAAlAQNBiIAYIQCkFhiMKNUARugqJQDIpDCXBQEhLhZigFt0BpuBXKwG1QFm6HclAeKkBFuAMqwZ1QGe6CKnA3VIVqUB1qwD1QE+6FWnAf1Ib7oQ48AHXhQagHD0F9eBgawCPQEB6FRvAYNIYm0BSaQfP/Vv6L0A1egu7QA5KhJ/SCl6E39IG+0A/6wyswAF6FgfAapMAgGAyvwxB4A4bCmzAMhsMIeAtGwtswCkbDGBgLqTAOxsM7MAHehYkwCSbDFJgK02A6vAczYCbMgvdhNnwAc2AuzIP5kAYfwgJYCOnwESyCj2ExLIGlsAyWwwpYCatgNayBtbAO1sMG2AibYDN8AltgK2yDT2E77ICd8Bnsgt2wBz6HvfDFv5h/+h/yOyMgoECBChXGYAzGYizGYRzmwByYE3NiBCMYj/GYG3NjHsyD+TAfJmACFsSCaNAgIWEhLIRRjGIRLIJFsSgWx+Lo0GEiJmIpvAVLY2ksg2WwLJbFclgey2NFrIiVsBJWxspYBatgVayK1bE63oP3YE+shbWwNtbGOljn8usprI/1sQE2wIbYEBthI2yMjbEpNsXm2BxbYAtsiS2xNbbGNtgG22JbTMIkbIftsD22xw7YATtiR+yEnbAzdsEuGS9mA3wJX8IeWFX0xF7YC3tjSra+2A/74Ss4AF/FV/E1TMFBOBhfx9fxDRyKp3AYDscROAIribdxFI5GEmMxFVNxPI7HCTgBJ+IknIRTcCpOw+k4HWfgTJyJ7+Ns/AA/wLk4F+djGqbhAlyI6ZiOi/A0LsYluBSX4XJcgctxFa7GVbgW1+Fa3IAxl87QT3ArbsVP8VPcgQoAP8PduBtTcC/uxX24D/fjfjyABzADM/AgHsRDeAgP42E8gkfwKB7D43gMT+JJPIWn8QyewXN4Ds/j8wnfNNhRbE0KiExKKBEjYkSsiBVxIk7kEDlETpFTRERExIt4kVvkFnlEHpFP5BMJIkEUFAWFEUaQCDPLFFERFUVEEVFUFBXFRXHhhBOJIlGUEqVEaVFalBG3ibLidlFOlBetXEVRUVQSrV1lcZeoIqqIqqKaqC5qiBqipqgpaolaoraoLeqIOqKueFDUEz2xLz4sMjvTUAzCRmIwNhZNhLx0fFqIodhStBKtxZNiOA7DtqKFSxLPiHZiFLYXfxOj8TnRUYzFTuIF0Vl0EV3Fi6KbaOm6ix5iIvYUvcQU7C36iL6in5iB1cT7ODt7dfGaSBGDxGDxupiPb4ih4k0xTAwXI8RbYqR4W4wSo8UYMVakinFivHhHTBDviolikpgspoipYpqYLt4TM8RMMUu8L2aLD8QcMVfME/NFmvhQLBALRbr4SCwSH4vFYolYKpaJ5WKFWClWidVijVgr1on1YoPYKDaJzeITsUVsFdvEp2K72CF2is/ELrFb7BGfi73iC7FPfCn2i6/EAfG1yBDfiIPiW3FIfCcOi+/FEfGDOCqOiePihDgpfhSnxGlxRpwV58RP4rz4WVwQXoBEKaSUSgYyRmaTsTK7jJPXyBwyuHR0r5Px8nqZW94g88i8Mp/MLxNkAVlQammklSRDWUgWllF5oywib5JFZTFZXJaQTpaUifJmWUreIkvLW2UZeZssK2+X5WR5WUFWlHfISvJOCZGL26gqq8nqsoa8RybDvbKWvE/WlvfLOvIBWVc+KOvJh2R9+bBsIB+RDeWjspF8TDaWTWRT2Uw2l4/LFvIJ2VK2kq3lk7KNfEq2lU/LJPmMbCf9pW+R52RH+bzsJF+QnWUX2VX+LC9IL7vLHhJ6guwlX5a9ZR/ZV/aT/eUrcoB8VQ6Ur8kUOUgOlq/LIfINOVS+KYfJ4XKEfEuOlG/LUXK0HCPHylQ5To6X78gJ8l05UU6Sk+UUOVVOk31lfxnIAXKWlH+Y/87v5A/8Zeub5Gb5idyCl1ohd8idcqfcJXfJPXKP3Cv3yn1yn9wv98sD8oDMkBnyoDwoD8lD8rA8LI/II/KoPCbPyhPypPxRnpKn5Wl5Vp6T5+T5S8cAFCqhpFIqUDEqm4pV2VWcukblUNeqnCqXiqjrVLy6XuVWN6g8Kq/Kp/KrBFVAFVRaGWUVqVAVUoVVVN14uUpVXJVQTpVUiermfyVfFVE3qaKq2K/yL9eX/E/qa66aqxaqhWqpWqrWqrVqo9qotqqtSlJJqp1qp9qr9qqD6qA6qo6qk+qkOqvOqqvqqrqpbqq76q6SVbLqpV5WvVUf1Vf1U/3VK2qAGqAGqoEqRaWowWqwGqKGqKFqqBqmhqkRaoQaqUaqUWqUGqPGqFSVqsar8WqCmqAmqolqspqspqqparqarmaoGWqWmqVmq9lqjpqj5ql5Kk2lqQVqgUpX6WqRWqQWqyVqiVqmlqkVaoVapVapNWqNWqfWqQ1qg1qsNqvNaovaorapbWq72q52qp1ql9ql9qg9aq/aq/apfWq/2q8OqAMqQ2Wog+qgOqQOqcPqsDqijqij6qg6ro6rk+qkOqVOqTPqjDqnzqnz6ry6oC5k3vYFIhCBCjKvtDFBbBAbxAVxQY4gR5AzyBlEgkgQH8QHuYMbgjxB3iBfkD9ICAoEBQMdmMAG4lLTo8GNQZHgpqBoUCwoHpQIXFAySAxuDkoFtwSlg1uDMsFtQdng9qBcUD6oEFQM7ggqBXcGlYO7girB3UHVoFpQPagR3BPUDO4NagX3BbWD+4M6wQNB3eDBoF7wUFA/eDhoEDwSNAweDRoFjwWNgyZB06BZ0Pwvnd/7U3mfcJt0D52se+pe+mXdW/fRfXU/3V+/ogfoV/VA/ZpO0YP0YP26HqLf0EP1m3qYHq5H6Lf0SP22HqVH6zF6rE7V4/R4/Y6eoN/VE/UkPVlP0VP1ND1dv6dn6Jl6ln5fz9Yf6Dl6rp6n5+s0/aFeoBfqdP2RXqQ/1ov1Er1UL9PL9Qq9Uq/Sq/UavVav0+v1Br1Rb9Kb9Sd6i96qt+lP9Xa9Q+/Un+lderfeoz/Xe/UXep/+Uu/XX+kD+mudob/RB/W3+pD+Th/W3+sj+gd9VB/Tx/UJfVL/qE/p0/qMPqvP6Z/0ef2zvqB95s195uXdKKNMjIkxsSbWxJk4k8PkMDlNThMxERNv4k1uk9vkMXlMPpPPJJgEU9AUNJnIkClkCpmoiZoipogpaoqa4qa4ccaZRJNoSplSprQpbcqYMqasKWvKmXKmgqlg7jB3mDvNneYuc5e529xtqplqpoapYWqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpqlpapqb5qaFaWFampamtWlt2pg2pq1pa5JMkmln2pn2pr3pYDqYjqaj6WQ6mc6ms+lquppuppvpbrqbZJNsepleprfpbfqavqa/6W8GmAFmoBloUkyKGWwGmyFmiBlqhpphZrgZkXn6mLfNKDPajDFjTapJNePNeDPBTDATzUQz2Uw2U81UM91MNzPMDDPLzDKzzWwzx8wx88w8k2bSzAKzwKSbdLPILDKLzWKz1Cw1y81ys9KsNKvNarPWrDXrYb3ZaDaazWaz2WK2mG1mm9lutpudZqfZZXaZPWaP2Wv2mn1mn9lv9psD5oDJMBnmoDloDplD5rA5bI6YI+aoOWqOm+PmpDlpTplT5ow5Y86ZvJeul97E2uw2zl5jc9hrbU6by/5jnM/mtwm2gC1otc1j8/4qNtbaoraYLW5LWGdL2kR782/icra8rWAr2jtsJXunrfybuKa919ay99na9n5bw97zq7iOfcDWtY/aeogAtoltYJvZhvZR28g+ZhvbJrapbWbb2KdsW/u0TbLP2Hb22d/EC+xCu9qusWvtOrvL7rZn7Fl7yH5nz9mfbHfbw/a3r9gB9lU70L5mU+yg38Qj7Ft2pH3bjrKj7Rg79jfxZDvFTrXT7HT7np1hZ/4mTrMf2tk23c6xc+08O/+XOLOmdPuRXWQ/tottAEvtMrvcrrAr7ar/X+syu8FutJvsTvuZ3WK32m32U7v98o2w3W332M/tXvuFPWi/tfvtV/aAPWwz7De/xJn7d9h+b4/YH+xRe8wetyfsSfujupydue8n7M/2gvUWCAlIkqKAYigbxVJ2iqNrKAddSzkpF0XoOoqn6yk33UB5KC/lo/yUQAWoIGkyZIkopEJUmKJ0I10urziVIEclKZFuplJ0C5WmW6kM3UZl6XYqR+WpAlWkO6gS3UmV6S6qQndTVapG1akG3UM16V6qRfdRbbif6tADVJcepHr0ENWnh6kBPUIN6VFqRI9RY2pCTakZNafHqQU9QS2pFbWmJ6kNPUVt6WlKomeoHT1L7elv1IGeo470PHWiF6gzdaGu9CJ1o5eoO/WgZOpJvehl6k19qC/1o/70Cg2gV2kgvUYpNIgG0+s0hN6gofQmDaPhNILeopH0No2i0TSGxlIqjaPx9A5NoHdpIk2iyTSFptI0mk7v0QyaSbPofZpNH9AcmkvzaD6l0Ye0gBZSOn1Ei+hjWkxLaCkto+W0glbSKlpNa2gtraP1tIE20ibaTJ/QFtpK2+hT2k47aCd9RrtoN+2hz2kvfUH76EvaT1/RAfqaMugbOkjf0iH6jg7T974H/UBH6RgdpxN0kn6kU3SaztBZOkc/0Xn6mS6QJwgxFKEMVRiEMWG2MDbMHsaF14Q5wmvDnGGuMBJeF8aH14e5wxvCPGHeMF+YP0wIC4QFQx2a0IYUhmGhsHAYDW8Mi4Q3hUXDYmHxsETowpJhYnhzWCq8JSwd3hqWCW8Ly4a3h+XC8uGj91cM7wgrhXeGlcO7wirh3WHVsFpYPawR3hPWDO8Na4X3hbXD+8PS4QNh3fDBsF74UFg/fDhsED4SNgwfDRuFj4WNwyZh07BZ2Dx8PGwRPhG2DFuFrcMnwzbhU2Hb8OkwKXwmbBc++8vyBxb+8+XJYc+wV/hy+HLo/X1yXnR+NC36YXRBdGE0PfpRdFH04+ji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66IboxuimqPc1soFDJ5x0ygUuxmVzsS67i3PXuBzuWpfT5XIRd52Ld9e73O4Gl8fldflcfpfgCriCTjvjrCMXukKusIu6G10Rd5Mr6oq54q6Ec66kS3TNXHPX3LVwT7iWrpVr7Z50T7qn3FPuafe0e8a1c8+69u5vroN7znV0z7vn3Quus+viuroXXTc3LufFczLZ9XK9XG/X2/V1fV1/198NcAPcQDfQpbgUN9gNdkPcEDfUDXXD3DA3wo1wI91IN8qNcmPcGJfqUt14N95NcBPcRDfRTXaT3VQ31U13090MN8NVmnlxK3PcHDfPzXNpLs0tcJn3jOlukVvkFrvFbqlb6pa75W6lW+lWu9VurVvr1rv1bqPb6Da7zW6L2+K2uW1uu9vudrqdbpfPdXFSt9ftc/vcfrffHXBfuwz3jTvovnWH3HfusPveHXE/uKPumDvuTriT7kd3yp12Z9xZd8795M67n90F511qZFxkfOSdyITIu5GJkUmRyZkPjJFpkemR9yIzIjMjsyLvR2ZHPojMicyNzIvMj6RFPowsiCyMpEc+iiyKfBxZcRxgaWRZZHlkRcT7AltCX8gX9lF/oy/ib/JFfTFf3Jfwzpf0if5mX8rf4kv7W30Zf5sv62/35Xx5X8E/5hv7Jr6pb+ab+8d9C/+Eb+lb+db+Sd/GP+Xb+qd9kn/Gt/PP+vb+b76Df8539M/7Tv4F39l38V39i76bf8l39z18su/pe/mXfW/fx/f1/Xx//4of4F/1A/1rPsUP8oP9636If8MP9W/6YX64HxHzlh95+REZxvpUP86P9+/4Cf5duMtP8pP9FD/VT/PT/Xt+hp/pZ/n3/Wz/gZ/j5/p5fr5P8x/6BX6hT/cf+UX+Y7/YL7n8Utmv9Kv8ar/Gr/Xr/Hq/wW/0m/xm/4nf4rf6bf5Tv93v8Dv9Z36X3+33+M/9Xv+F3+e/9Pv9V/6A/9pn+G/8Qf+tP+S/84f99/6I/8Ef9cf8cX/Cn/Q/+lP+tD/jz/pz/id/3v/sL/D/WWOMMcYY+1PGXRmKXy+5+Dq/5+/kiL9buRcAXLs1f8bfL8+8o1yf5+K4j0hoEwGAZ3p0evjyp2rV5OTkS+sulhAUngtw+SdBmX75ueeleAm0hqcgCVpBqd+tv4/oco7+YP7obYB/nxMLAHHwj/N/CYDJvzP/40+OWFA2PBP/X8w/F6Bo4Ss52eFKvARa//J+pRWU/if1523xB/Vn/yoVoOXf5eSAK/GV+hPhCXgWkn61JmOMMcYYY4wxdlEfUaHD5efPy//i8/eezxPUlZxscCX+o+dzxhhjjDHGGGOMXX3Pden69ONJSa06/OuDyv+trD89aAT/WzPz4HcH3gNc/ooCgN9dJ9eVdf5gQoDMgfx37sUn/5ZtpVw6df5x0fKzPoD/G638KwZX+S8mxhhjjDHG2F/uyk3/r7+urlZBjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZYFvTv+HViV3sfGWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsavt/wUAAP//QcD38Q==") 20m30.906406447s ago: executing program 33 (id=115): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x2009, 0x0, 0x6, 0xffffffffffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000580040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000100)={@val={0x2000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0xff, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x4, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xfc}}}}}}}}, 0x36) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140), 0x0) accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="140000000000000001000000010000", @ANYRES32=r0, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x810) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) close_range(r8, 0xffffffffffffffff, 0x0) 7m50.359729411s ago: executing program 6 (id=1083): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0xc0}}) 7m48.458142059s ago: executing program 6 (id=1089): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000380), 0x10, 0x0}, 0x0) 7m47.282027739s ago: executing program 6 (id=1093): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x0, 0x0}, 0x5) 7m47.015213926s ago: executing program 6 (id=1097): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m41.618108257s ago: executing program 6 (id=1105): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088a84803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 7m41.29984359s ago: executing program 6 (id=1109): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHg\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x92[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r0) pipe(0x0) io_setup(0x3ff, &(0x7f0000000500)) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x2, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001140)={'gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x7800, 0xbc00, 0xf0b, 0x5, {{0x28, 0x4, 0x0, 0x16, 0xa0, 0x65, 0x0, 0x1, 0x2d, 0x0, @rand_addr=0x64010102, @remote, {[@ssrr={0x89, 0xf, 0xa0, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @ssrr={0x89, 0x23, 0x7d, [@local, @multicast1, @loopback, @loopback, @multicast2, @empty, @rand_addr=0x64010100, @empty]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x19, 0x1, 0x5, [{@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x100}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x800}]}, @end, @noop, @lsrr={0x83, 0x1b, 0xa6, [@broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_prespec={0x44, 0x1c, 0xa2, 0x3, 0x6, [{@private=0xa010101, 0x101}, {@multicast2}, {@broadcast, 0x80}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001200)={'syztnl1\x00', &(0x7f0000001180)={'ip6tnl0\x00', r3, 0x2f, 0x79, 0x7, 0x2, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7800, 0x109a}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x4d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x3fe, 0x100000) 7m26.129259921s ago: executing program 34 (id=1109): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHg\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x92[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r0) pipe(0x0) io_setup(0x3ff, &(0x7f0000000500)) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x2, 0x8) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001140)={'gre0\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x7800, 0xbc00, 0xf0b, 0x5, {{0x28, 0x4, 0x0, 0x16, 0xa0, 0x65, 0x0, 0x1, 0x2d, 0x0, @rand_addr=0x64010102, @remote, {[@ssrr={0x89, 0xf, 0xa0, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @ssrr={0x89, 0x23, 0x7d, [@local, @multicast1, @loopback, @loopback, @multicast2, @empty, @rand_addr=0x64010100, @empty]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x19, 0x1, 0x5, [{@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x100}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x800}]}, @end, @noop, @lsrr={0x83, 0x1b, 0xa6, [@broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp_prespec={0x44, 0x1c, 0xa2, 0x3, 0x6, [{@private=0xa010101, 0x101}, {@multicast2}, {@broadcast, 0x80}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001200)={'syztnl1\x00', &(0x7f0000001180)={'ip6tnl0\x00', r3, 0x2f, 0x79, 0x7, 0x2, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7800, 0x109a}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x4d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x3fe, 0x100000) 6m34.801566691s ago: executing program 3 (id=1281): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) select(0x406f205456671cf9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5000000}, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0) 6m33.835901592s ago: executing program 3 (id=1286): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendmsg$inet6(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)="2f6c62fdf406a1a0175bd356c35c10e4d1be87033978d275293527325d1cd47e250c", 0x22}], 0x1}, 0x0) 6m33.586803077s ago: executing program 3 (id=1290): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, 0x0) 6m33.412273328s ago: executing program 3 (id=1291): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, 0x0, 0x0}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f00000000c0), 0x0}, 0x20) 6m33.373749208s ago: executing program 3 (id=1292): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) 6m33.301666243s ago: executing program 3 (id=1293): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 6m18.161017306s ago: executing program 35 (id=1293): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r3, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 5m30.081428577s ago: executing program 8 (id=1332): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) 5m25.231022097s ago: executing program 8 (id=1496): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x34) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, 0x0, 0x810) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50) sigaltstack(0x0, &(0x7f0000000080)={0x0}) 5m23.186546804s ago: executing program 8 (id=1502): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\a'], 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 5m22.079461071s ago: executing program 8 (id=1504): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x2040) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0x8, 0xa, 0xfffffffc}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) unshare(0x40000080) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) 5m6.796837058s ago: executing program 36 (id=1504): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x2040) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0x8, 0xa, 0xfffffffc}) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) unshare(0x40000080) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) 2m7.24864137s ago: executing program 1 (id=2440): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000366, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180)={[{@oldalloc}, {@errors_remount}, {@init_itable}, {@block_validity}, {@block_validity}, {@quota}]}, 0x1, 0x451, &(0x7f0000000780)="$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") r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000400)={0x10002000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120020000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000300)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x61, 0x2e]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 1m57.446849027s ago: executing program 1 (id=2475): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000300)={0x0, 0x7}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r6, 0x0, 0x2b) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000024c0)={0x68, r8, 0x1, 0x70bd2e, 0x259fdbff, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4c880}, 0x8894) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1m56.201300459s ago: executing program 1 (id=2480): r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}, 0x4048015) 1m56.090854834s ago: executing program 1 (id=2481): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x7, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000ac0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x800, {{@in=@private=0xa010100, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x1fff, 0x0, 0x0, 0x0, 0xa0, 0x5c, 0x0, 0xee01}, {@in6=@remote, 0x14, 0x6c}, @in6=@loopback, {0x0, 0x800000000, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x1, 0x804, 0x1000, 0xffffffffffffffff}, {}, 0x80000000, 0x3502, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 1m55.073114088s ago: executing program 1 (id=2482): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x441, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 1m54.820818636s ago: executing program 1 (id=2485): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000366, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180)={[{@oldalloc}, {@errors_remount}, {@init_itable}, {@block_validity}, {@block_validity}, {@quota}]}, 0x1, 0x451, &(0x7f0000000780)="$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") r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000400)={0x10002000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120020000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000300)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x61, 0x2e]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 1m38.714329157s ago: executing program 37 (id=2485): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000366, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180)={[{@oldalloc}, {@errors_remount}, {@init_itable}, {@block_validity}, {@block_validity}, {@quota}]}, 0x1, 0x451, &(0x7f0000000780)="$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") r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000400)={0x10002000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120020000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000300)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x61, 0x2e]}}, &(0x7f00000005c0)=""/240, 0x40, 0xf0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 19.869477347s ago: executing program 5 (id=2829): mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140), 0x58, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 19.651884925s ago: executing program 5 (id=2831): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) pipe2$9p(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) 16.298624737s ago: executing program 5 (id=2846): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000003c0)={0x40, 0xa, 0x2, ')4'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="6c141d000000a8f12cbf40154c5667df837af67b"], 0x0, 0x0}) 15.864369308s ago: executing program 7 (id=2848): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = dup3(r1, r0, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0xef70, @private0}, 0x1c) 15.242306826s ago: executing program 7 (id=2850): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010003080800418e224e0004fcff", 0x58}], 0x1) 13.696209908s ago: executing program 5 (id=2852): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 12.674632399s ago: executing program 7 (id=2855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x1, 0xfd, 0x5ae9}, {0x6, 0x40, 0x7, 0x2002}]}, 0x10) sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 12.605309602s ago: executing program 5 (id=2856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) pipe2$9p(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) 12.4522213s ago: executing program 4 (id=2857): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1e1, &(0x7f0000000640)="$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") 11.301871464s ago: executing program 7 (id=2861): syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0xffffffff, 0x200000}) getsockopt$sock_cred(r3, 0x1, 0x1c, 0xfffffffffffffffd, &(0x7f0000000000)) keyctl$join(0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20002044}, 0x44080) 9.703698817s ago: executing program 2 (id=2865): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000080), 0x1, 0x1d0, &(0x7f0000000500)="$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") 7.894983072s ago: executing program 7 (id=2867): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x8, 0x0, 0x101, 0x8c}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, 0x0) 7.36954264s ago: executing program 2 (id=2869): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x11, 0x0, 0x0, &(0x7f0000000d00)) 7.359554833s ago: executing program 7 (id=2870): mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x1c4, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x178, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x128, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0xe0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 7.261787016s ago: executing program 5 (id=2871): r0 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 7.084823886s ago: executing program 4 (id=2872): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000080)=0x6, 0x8) 6.764359195s ago: executing program 2 (id=2873): keyctl$get_keyring_id(0x0, 0x0, 0x9) 6.691450207s ago: executing program 4 (id=2874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x2, 0x4, {@in6_addr=@mcast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000805}, 0x24048040) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0xffe3}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 6.449620767s ago: executing program 2 (id=2875): socket(0x28, 0x5, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, 0x0, 0x0) listen(r0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000250001"], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x4008040) 4.730748125s ago: executing program 4 (id=2877): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001200050927bd7000fddbdf250a0940004e224e23fbffffff20090000060000000600"], 0x4c}, 0x1, 0x0, 0x0, 0x2000010}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001e000126bd7000fedbdf250700000000", @ANYRES32=0x0, @ANYBLOB="0000040008000f"], 0x54}, 0x1, 0x0, 0x0, 0x4040840}, 0x20000800) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x20e26}], 0x1, 0x40, 0x0) 4.17950415s ago: executing program 2 (id=2878): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) r0 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xb, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800ffb97880cdae05e700000000000095f5980000c68d000094"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.084219527s ago: executing program 9 (id=2879): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback={0xfeffffffffffffff, 0xac141414}, 0x5}, 0x1c, 0x0}}], 0x1, 0x80) 3.908049029s ago: executing program 4 (id=2880): socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0xc}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}}, 0x20040054) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.877919478s ago: executing program 4 (id=2881): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) pipe2$9p(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) 2.74010624s ago: executing program 9 (id=2882): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1e1, &(0x7f0000000640)="$eJzslr1u01AUx//XtpwEBSExsjAQCRhwbAcQC4gsTAxIQCIGhoiYKGCIlGQgkVDgCViYkBgY2HkBJFj7EFXaqUu6deni6vpe27eRnaT56tDzk3r6t318fD6s44AgiAvL/t7ROEA+1EWUkJPnD/TER1P8d/OHn/8/fVL/9vr3Tm5sFdJiBsHizzcA/Kvq6Mf3nr67JP+/gBbrl9BwW+o6GCypeTI1qT0wvJL6naI73N+y3rZ9z3rT8Ztc2Nw43LjcVKbzm3xlaCr5MeV6bzB83/B9r7tBMa9/k6qGh0p+6rwsiGxtpX8ONDhSV8DwXOoHyEW9ES1R6r9mJPH1mfWbWGP9tWLKJZ7KGeJcvZw5KhPAcokBLA74EytVii/yld3kO5QhdIQimuh6In/Xt1QFf9Hn+MDYelfZas1cZhZ/H4t7ojPBSByHPlcyAgajBR9hYpluJPsp+MVwU9lPYpX8CD81fITl3mB4p/2h0fJa3kfXrdy379r2PbccLiJhZ+y/QrifLiXxU79JHJOZ+NTo97uOsPGxK2zaxtXC/afh1g1xzIdrTsXNK5rJPwNGPMg/qvOjzFIIgiC2ynWw40BiREJ+TaD81n12jjkSBEEQBEEQBEEQBLEaJwEAAP//63FC3Q==") 747.970436ms ago: executing program 9 (id=2883): syz_open_procfs(0x0, &(0x7f00000005c0)='mountinfo\x00') select(0x40, &(0x7f0000000000)={0x9, 0x7, 0xffff, 0x0, 0x0, 0x1000}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) 590.135979ms ago: executing program 9 (id=2884): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000080)=0x6, 0x8) 345.536295ms ago: executing program 9 (id=2885): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xa0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x74, 0x2, [@TCA_U32_ACT={0x4c, 0x7, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x6, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0xa0}}, 0x24040084) 85.21223ms ago: executing program 9 (id=2886): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) 0s ago: executing program 2 (id=2887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x2, 0x4, {@in6_addr=@mcast2, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000805}, 0x24048040) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0xffe3}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): 0] bridge_slave_0: entered promiscuous mode [ 981.041935][T11599] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.1182: invalid indirect mapped block 4294967295 (level 0) [ 981.845735][T11599] EXT4-fs (loop3): Remounting filesystem read-only [ 981.870727][ T2982] bridge_slave_1: left allmulticast mode [ 981.917402][ T2982] bridge_slave_1: left promiscuous mode [ 981.922617][T11599] EXT4-fs (loop3): 1 orphan inode deleted [ 981.928931][T11599] EXT4-fs (loop3): 1 truncate cleaned up [ 981.971686][ T2982] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.985158][T11599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.037640][ T2982] bridge_slave_0: left allmulticast mode [ 982.046449][ T2982] bridge_slave_0: left promiscuous mode [ 982.063346][ T2982] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.123427][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.137655][T11616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1185'. [ 985.931204][ T2982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.944077][ T2982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.954932][ T2982] bond0 (unregistering): Released all slaves [ 985.998777][T11510] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.006441][T11510] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.019736][T11510] bridge_slave_1: entered allmulticast mode [ 986.032881][T11510] bridge_slave_1: entered promiscuous mode [ 986.605020][T11654] loop5: detected capacity change from 0 to 2048 [ 987.282005][T11654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 987.293833][T11510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.424126][T11654] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 987.487646][T11510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 987.625479][T10242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.823439][T11673] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 988.754445][T11510] team0: Port device team_slave_0 added [ 988.795051][T11510] team0: Port device team_slave_1 added [ 990.253424][ T2982] hsr_slave_0: left promiscuous mode [ 990.279302][ T2982] hsr_slave_1: left promiscuous mode [ 990.305150][ T2982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 990.334183][ T2982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.344892][ T2982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 990.374522][ T2982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.449034][ T2982] veth1_macvtap: left promiscuous mode [ 990.452078][T11702] loop3: detected capacity change from 0 to 512 [ 990.464877][ T2982] veth0_macvtap: left promiscuous mode [ 990.480617][ T2982] veth1_vlan: left promiscuous mode [ 990.488447][ T2982] veth0_vlan: left promiscuous mode [ 990.525037][T11702] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1210: invalid indirect mapped block 4294967295 (level 1) [ 990.622060][T11702] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1210: invalid indirect mapped block 4294967295 (level 1) [ 990.721853][T11702] EXT4-fs (loop3): 2 truncates cleaned up [ 990.729425][T11702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 990.872951][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 991.829692][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 991.829715][ T30] audit: type=1326 audit(1763578189.588:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ded8f749 code=0x7ffc0000 [ 991.860099][ T30] audit: type=1326 audit(1763578189.588:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ded8f749 code=0x7ffc0000 [ 991.884741][ T30] audit: type=1326 audit(1763578189.588:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92ded8f749 code=0x7ffc0000 [ 991.918030][ T30] audit: type=1326 audit(1763578189.588:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ded8f749 code=0x7ffc0000 [ 991.949709][ T30] audit: type=1326 audit(1763578189.588:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ded8f749 code=0x7ffc0000 [ 992.036094][ T30] audit: type=1326 audit(1763578189.598:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92ded8f749 code=0x7ffc0000 [ 992.066838][ T30] audit: type=1326 audit(1763578189.598:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ded8f749 code=0x7ffc0000 [ 992.093425][ T30] audit: type=1326 audit(1763578189.598:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ded8f749 code=0x7ffc0000 [ 992.121250][ T30] audit: type=1326 audit(1763578189.598:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92ded8f749 code=0x7ffc0000 [ 992.145224][ T30] audit: type=1326 audit(1763578189.598:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11715 comm="syz.3.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ded8f749 code=0x7ffc0000 [ 992.180111][ T5921] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 992.342918][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 992.354859][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.407741][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.419285][ T5921] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 992.431862][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.036278][ T5921] usb 5-1: config 0 descriptor?? [ 993.164657][ T2982] team0 (unregistering): Port device team_slave_1 removed [ 993.257818][ T2982] team0 (unregistering): Port device team_slave_0 removed [ 994.160149][ T5921] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 994.202310][ T5921] usb 5-1: USB disconnect, device number 2 [ 994.402504][T11733] fido_id[11733]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 994.805660][T11510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.822698][T11510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.855181][T11510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.902822][T11740] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1218'. [ 994.933739][T11510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.968740][T11510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.071299][T11510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.354275][T11510] hsr_slave_0: entered promiscuous mode [ 995.370329][T11510] hsr_slave_1: entered promiscuous mode [ 995.378859][T11510] debugfs: 'hsr0' already exists in 'hsr' [ 995.387419][T11510] Cannot create hsr debugfs directory [ 997.880418][T11510] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 998.052159][T11510] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 998.357611][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.384365][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.749709][T11510] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 999.407844][T11510] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1000.634980][T11510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.793919][T11510] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.867467][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.874973][ T6090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1001.016911][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.024490][ T6090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.181191][T11828] loop1: detected capacity change from 0 to 512 [ 1001.564793][T11828] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1239: invalid block [ 1001.586390][T11828] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1239: invalid indirect mapped block 4294967295 (level 1) [ 1001.620430][T11828] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1239: invalid indirect mapped block 4294967295 (level 1) [ 1001.640235][T11828] EXT4-fs (loop1): 2 truncates cleaned up [ 1001.665314][T11829] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1001.740451][T11828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1003.026142][T11831] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1003.066450][T11510] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1003.107178][T11510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1003.803581][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.928766][T11844] loop5: detected capacity change from 0 to 16 [ 1004.026389][T11844] erofs (device loop5): mounted with root inode @ nid 36. [ 1006.730385][T11861] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1006.739802][T11861] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1007.401646][T11510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1008.478524][ T5924] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1008.705396][ T5924] usb 6-1: Using ep0 maxpacket: 16 [ 1008.737344][ T5924] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1008.788797][ T5924] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1008.810051][ T5924] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1008.848076][ T5924] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1008.888119][ T5924] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1008.917920][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.940636][ T5924] usb 6-1: Product: syz [ 1008.948072][ T5924] usb 6-1: Manufacturer: syz [ 1008.952820][ T5924] usb 6-1: SerialNumber: syz [ 1008.988530][T11895] netlink: 'syz.3.1255': attribute type 15 has an invalid length. [ 1010.172998][ T5924] usb 6-1: USB disconnect, device number 4 [ 1010.236943][T11122] udevd[11122]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1011.107883][T11919] loop3: detected capacity change from 0 to 1024 [ 1011.490276][T11510] veth0_vlan: entered promiscuous mode [ 1014.025575][T11919] EXT4-fs warning (device loop3): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop3. [ 1014.169489][T11510] veth1_vlan: entered promiscuous mode [ 1014.219938][T11510] veth0_macvtap: entered promiscuous mode [ 1014.467358][ T30] kauditd_printk_skb: 169 callbacks suppressed [ 1014.467378][ T30] audit: type=1326 audit(1763578212.751:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11923 comm="syz.5.1263" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde97b8f749 code=0x0 [ 1015.139363][T11931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'. [ 1015.160087][T11931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'. [ 1015.245173][T11510] veth1_macvtap: entered promiscuous mode [ 1015.961498][T11510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.030544][T11510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.228233][ T7000] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.533404][ T4542] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.792596][ T4542] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.993379][ T4542] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.358599][ T6149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.390238][ T6149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.571172][ T6149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.595010][ T6149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.749783][T11962] loop1: detected capacity change from 0 to 1024 [ 1020.091433][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1275'. [ 1020.462084][T11962] EXT4-fs: error -4 creating inode table initialization thread [ 1020.471424][T11962] EXT4-fs (loop1): mount failed [ 1020.979096][T11981] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1279'. [ 1021.081611][ T30] audit: type=1326 audit(1763578219.422:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11982 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ded8f749 code=0x7ffc0000 [ 1021.495660][ T30] audit: type=1326 audit(1763578219.422:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11982 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ded8f749 code=0x7ffc0000 [ 1021.810694][ T30] audit: type=1326 audit(1763578219.422:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11982 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f92ded8f749 code=0x7ffc0000 [ 1021.933283][ T30] audit: type=1326 audit(1763578219.422:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11982 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ded8f749 code=0x7ffc0000 [ 1022.006909][ T30] audit: type=1326 audit(1763578219.422:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11982 comm="syz.3.1281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ded8f749 code=0x7ffc0000 [ 1023.240900][T12022] loop1: detected capacity change from 0 to 1024 [ 1023.456433][T12022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1023.507989][T12022] netlink: 'syz.1.1288': attribute type 12 has an invalid length. [ 1025.250268][T12043] loop7: detected capacity change from 0 to 512 [ 1025.382602][T12043] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1025.512262][T12043] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1025.533959][T12043] EXT4-fs (loop7): 1 truncate cleaned up [ 1025.548840][T12043] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1025.993407][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.127324][T11510] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.333683][T12072] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1029.798303][ T30] audit: type=1326 audit(1763578228.143:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95bf8f749 code=0x7ffc0000 [ 1029.889386][ T30] audit: type=1326 audit(1763578228.173:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7ff95bf8f749 code=0x7ffc0000 [ 1029.970312][ T30] audit: type=1326 audit(1763578228.173:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95bf8f749 code=0x7ffc0000 [ 1030.227057][ T30] audit: type=1326 audit(1763578228.173:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7ff95bf8f749 code=0x7ffc0000 [ 1030.918857][ T30] audit: type=1326 audit(1763578228.173:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95bf8f749 code=0x7ffc0000 [ 1031.099588][ T30] audit: type=1326 audit(1763578228.173:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff95bf8f749 code=0x7ffc0000 [ 1031.151431][ T30] audit: type=1326 audit(1763578228.173:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95bf8f749 code=0x7ffc0000 [ 1031.216555][ T30] audit: type=1326 audit(1763578228.173:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff95bf8f749 code=0x7ffc0000 [ 1031.424547][ T30] audit: type=1326 audit(1763578228.173:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95bf8f749 code=0x7ffc0000 [ 1031.504069][ T30] audit: type=1326 audit(1763578228.173:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12088 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff95bf8f749 code=0x7ffc0000 [ 1033.395581][T12136] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1035.367500][T12144] loop4: detected capacity change from 0 to 128 [ 1035.482259][T12144] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1035.527180][T12144] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1036.606355][T12165] x_tables: duplicate underflow at hook 1 [ 1036.655903][T12165] loop7: detected capacity change from 0 to 512 [ 1036.817599][T12165] FAT-fs (loop7): bogus number of FAT sectors [ 1036.823943][T12165] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1037.490710][ T5842] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1037.933336][T12174] kvm: apic: phys broadcast and lowest prio [ 1038.206043][T11074] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1038.219243][T11074] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1038.229026][T11074] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1038.245453][T11074] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1038.258528][T11074] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1038.321611][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1327'. [ 1038.333736][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1327'. [ 1039.892588][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 1039.892606][ T30] audit: type=1326 audit(1763578238.234:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12200 comm="syz.4.1340" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fd6b8f749 code=0x0 [ 1040.024400][T12204] loop7: detected capacity change from 0 to 1024 [ 1040.078895][T12204] EXT4-fs: inline encryption not supported [ 1040.151571][T12204] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1040.215450][T12204] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.318068][T12213] x_tables: duplicate underflow at hook 1 [ 1040.363149][T12213] loop4: detected capacity change from 0 to 512 [ 1040.439374][T12213] FAT-fs (loop4): bogus number of FAT sectors [ 1040.445696][T12213] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1040.505097][T11074] Bluetooth: hci2: command tx timeout [ 1041.564889][T12224] netlink: 'syz.5.1344': attribute type 27 has an invalid length. [ 1041.631405][T12224] lo: left promiscuous mode [ 1041.644228][T12224] lo: left allmulticast mode [ 1041.693060][T12224] tunl0: left promiscuous mode [ 1041.737900][T12224] tunl0: left allmulticast mode [ 1041.758647][T12224] gre0: left promiscuous mode [ 1041.763663][T12224] gre0: left allmulticast mode [ 1041.848818][T12224] gretap0: left promiscuous mode [ 1041.868248][T12224] gretap0: left allmulticast mode [ 1041.931860][T12224] erspan0: left promiscuous mode [ 1041.960381][T12224] erspan0: left allmulticast mode [ 1041.993855][T12224] ip_vti0: left promiscuous mode [ 1042.030710][T12224] ip_vti0: left allmulticast mode [ 1042.064174][T12224] ip6_vti0: left promiscuous mode [ 1042.069290][T12224] ip6_vti0: left allmulticast mode [ 1042.110814][T12224] sit0: left promiscuous mode [ 1042.157631][T12224] sit0: left allmulticast mode [ 1042.190542][T12224] ip6tnl0: left promiscuous mode [ 1042.218027][T12224] ip6tnl0: left allmulticast mode [ 1042.252427][T12224] ip6gre0: left promiscuous mode [ 1042.266894][T12224] ip6gre0: left allmulticast mode [ 1042.348602][T12224] syz_tun: left promiscuous mode [ 1042.366761][T12224] syz_tun: left allmulticast mode [ 1042.388161][T12224] ip6gretap0: left promiscuous mode [ 1042.407863][T12224] ip6gretap0: left allmulticast mode [ 1042.434577][T12224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.442846][T12224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.465274][T12224] bridge0: left promiscuous mode [ 1042.480625][T12224] bridge0: left allmulticast mode [ 1042.504313][ T6535] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1042.522305][T12224] vcan0: left promiscuous mode [ 1042.528971][T12224] vcan0: left allmulticast mode [ 1042.557122][T12224] bond0: left promiscuous mode [ 1042.572713][T12224] bond_slave_0: left promiscuous mode [ 1042.580868][T12224] bond_slave_1: left promiscuous mode [ 1042.586914][T11074] Bluetooth: hci2: command tx timeout [ 1042.593715][T12224] bond0: left allmulticast mode [ 1042.599202][T12224] bond_slave_0: left allmulticast mode [ 1042.605250][T12224] bond_slave_1: left allmulticast mode [ 1042.634661][T12224] team0: left promiscuous mode [ 1042.649978][T12224] team_slave_0: left promiscuous mode [ 1042.663195][T12224] team_slave_1: left promiscuous mode [ 1042.670174][ T6535] usb 2-1: Using ep0 maxpacket: 16 [ 1042.677592][T12224] team0: left allmulticast mode [ 1042.683225][T12224] team_slave_0: left allmulticast mode [ 1042.689590][ T6535] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1042.697640][T12224] team_slave_1: left allmulticast mode [ 1042.705821][ T6535] usb 2-1: config 1 has an invalid interface number: 206 but max is 0 [ 1042.718541][T12224] dummy0: left promiscuous mode [ 1042.723474][T12224] dummy0: left allmulticast mode [ 1042.730224][ T6535] usb 2-1: config 1 has no interface number 0 [ 1042.753467][ T6535] usb 2-1: string descriptor 0 read error: -22 [ 1042.770468][ T6535] usb 2-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 1042.784945][T12224] nlmon0: left promiscuous mode [ 1042.790323][ T6535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.809984][ T6535] uvcvideo 2-1:1.206: probe with driver uvcvideo failed with error -22 [ 1042.813939][T12224] nlmon0: left allmulticast mode [ 1042.849738][T12224] caif0: left promiscuous mode [ 1042.866893][T12224] caif0: left allmulticast mode [ 1043.031585][T12224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1043.101568][T12224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1043.257914][ T30] audit: type=1326 audit(1763578241.604:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12240 comm="syz.7.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fc38f749 code=0x7ffc0000 [ 1043.286325][ T30] audit: type=1326 audit(1763578241.634:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12240 comm="syz.7.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fc38f749 code=0x7ffc0000 [ 1043.311090][ T30] audit: type=1326 audit(1763578241.634:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12240 comm="syz.7.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f09fc38f749 code=0x7ffc0000 [ 1043.333699][T12238] usb 2-1: USB disconnect, device number 4 [ 1043.342663][ T30] audit: type=1326 audit(1763578241.634:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12240 comm="syz.7.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fc38f749 code=0x7ffc0000 [ 1043.368910][ T30] audit: type=1326 audit(1763578241.634:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12240 comm="syz.7.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fc38f749 code=0x7ffc0000 [ 1043.403543][ T30] audit: type=1326 audit(1763578241.634:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12240 comm="syz.7.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f09fc38f749 code=0x7ffc0000 [ 1043.429459][ T30] audit: type=1326 audit(1763578241.634:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12240 comm="syz.7.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fc38f749 code=0x7ffc0000 [ 1043.455634][ T30] audit: type=1326 audit(1763578241.634:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12240 comm="syz.7.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f09fc38f749 code=0x7ffc0000 [ 1043.479849][ T30] audit: type=1326 audit(1763578241.634:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12240 comm="syz.7.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fc38f749 code=0x7ffc0000 [ 1043.697983][T12226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.721066][T12226] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.744160][T12226] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1043.994705][ T3446] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.010055][T12249] loop5: detected capacity change from 0 to 512 [ 1044.112263][T12249] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1044.127196][ T2982] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.367568][ T2982] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.664922][T11074] Bluetooth: hci2: command tx timeout [ 1044.702344][T12249] EXT4-fs (loop5): 1 truncate cleaned up [ 1044.751669][T12249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1044.858727][T12184] chnl_net:caif_netlink_parms(): no params data found [ 1044.878489][T12249] fscrypt (loop5, inode 18): Can't use IV_INO_LBLK_32 policy on filesystem 'loop5' because it doesn't have stable inode numbers [ 1045.315693][T10242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1045.724094][ T2982] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.193065][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.215130][ T30] kauditd_printk_skb: 176 callbacks suppressed [ 1046.215150][ T30] audit: type=1326 audit(1763578244.565:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz.5.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1046.266176][T12277] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1360'. [ 1046.287279][ T30] audit: type=1326 audit(1763578244.565:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz.5.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1046.368619][ T30] audit: type=1326 audit(1763578244.565:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz.5.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1046.391489][ T30] audit: type=1326 audit(1763578244.565:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz.5.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1046.415389][ T30] audit: type=1326 audit(1763578244.565:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz.5.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1046.442355][ T30] audit: type=1326 audit(1763578244.565:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz.5.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1046.465945][ T30] audit: type=1326 audit(1763578244.565:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz.5.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1046.572273][ T30] audit: type=1326 audit(1763578244.565:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz.5.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1046.596730][ T30] audit: type=1326 audit(1763578244.565:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz.5.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1046.628787][ T30] audit: type=1326 audit(1763578244.565:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz.5.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1046.656203][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.753490][T11074] Bluetooth: hci2: command tx timeout [ 1046.885940][T12184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.899827][T12184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.916715][T12184] bridge_slave_0: entered allmulticast mode [ 1046.935754][T12184] bridge_slave_0: entered promiscuous mode [ 1048.435322][T12314] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1048.546440][T12314] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1049.527182][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.645163][T12184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.652452][T12184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.682105][T12184] bridge_slave_1: entered allmulticast mode [ 1049.748969][T12333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1375'. [ 1049.769567][T12334] netlink: 'syz.1.1376': attribute type 2 has an invalid length. [ 1049.779249][T12334] netlink: 'syz.1.1376': attribute type 1 has an invalid length. [ 1049.791600][T12334] netlink: 'syz.1.1376': attribute type 1 has an invalid length. [ 1049.797595][T12335] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1375'. [ 1049.802787][T12184] bridge_slave_1: entered promiscuous mode [ 1049.956274][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.555764][T12184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.630468][T12184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.757445][T12347] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1380'. [ 1050.822448][T12184] team0: Port device team_slave_0 added [ 1050.845796][T12184] team0: Port device team_slave_1 added [ 1050.922810][T12184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.930605][T12184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.038689][T12184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1051.077038][T12184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1051.085961][T12184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.114002][T12184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.247214][T12355] loop1: detected capacity change from 0 to 512 [ 1051.413478][T12355] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1383: invalid block [ 1051.430652][T12355] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1383: invalid indirect mapped block 4294967295 (level 1) [ 1051.461738][T12355] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1383: invalid indirect mapped block 4294967295 (level 1) [ 1051.503770][T12355] EXT4-fs (loop1): 2 truncates cleaned up [ 1051.527251][T12355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.885414][T12364] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1052.909183][T12364] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1054.659190][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.783775][T12184] hsr_slave_0: entered promiscuous mode [ 1054.808309][T12184] hsr_slave_1: entered promiscuous mode [ 1054.815331][T12373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1389'. [ 1054.842763][T12184] debugfs: 'hsr0' already exists in 'hsr' [ 1054.848555][T12184] Cannot create hsr debugfs directory [ 1054.854847][T12374] process 'syz.1.1388' launched './file0' with NULL argv: empty string added [ 1054.866955][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1389'. [ 1054.898961][ T13] bridge_slave_1: left allmulticast mode [ 1054.927024][ T13] bridge_slave_1: left promiscuous mode [ 1054.946967][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.986184][ T13] bridge_slave_0: left allmulticast mode [ 1055.005180][ T13] bridge_slave_0: left promiscuous mode [ 1055.014007][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.077698][T12386] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1393'. [ 1055.517116][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1055.526192][ T13] bond_slave_0: left promiscuous mode [ 1055.531940][ T13] bond_slave_0: left allmulticast mode [ 1055.540206][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.551073][ T13] bond_slave_1: left promiscuous mode [ 1055.557464][ T13] bond_slave_1: left allmulticast mode [ 1055.564757][ T13] bond0 (unregistering): Released all slaves [ 1057.167814][T12409] geneve1: entered allmulticast mode [ 1057.258842][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1405'. [ 1057.322895][T12425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1405'. [ 1058.597902][T12442] netlink: 'syz.4.1409': attribute type 1 has an invalid length. [ 1058.685965][T12442] netlink: 'syz.4.1409': attribute type 1 has an invalid length. [ 1059.129783][ T13] hsr_slave_0: left promiscuous mode [ 1059.151326][ T13] hsr_slave_1: left promiscuous mode [ 1059.171499][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1059.197174][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1059.307854][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1059.323098][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1059.374099][ T13] veth1_vlan: left promiscuous mode [ 1059.790410][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.810376][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.155714][ T13] team_slave_1 (unregistering): left promiscuous mode [ 1061.170069][ T13] team_slave_1 (unregistering): left allmulticast mode [ 1061.188732][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1061.353073][T12470] loop1: detected capacity change from 0 to 512 [ 1061.370444][T12470] EXT4-fs: Ignoring removed orlov option [ 1061.384809][ T13] team_slave_0 (unregistering): left promiscuous mode [ 1061.389465][T12470] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1061.394133][ T13] team_slave_0 (unregistering): left allmulticast mode [ 1061.411137][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1061.421102][T12470] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 1061.447262][T12470] EXT4-fs error (device loop1): ext4_iget_extra_inode:5079: inode #15: comm syz.1.1418: corrupted in-inode xattr: e_value size too large [ 1061.491356][T12470] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1418: couldn't read orphan inode 15 (err -117) [ 1061.509857][T12470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1062.282765][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1420'. [ 1062.295158][T12479] loop6: detected capacity change from 0 to 524288000 [ 1062.360789][T12184] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1062.420998][T12184] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1062.468020][T12184] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1062.732296][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.203488][T12184] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1063.392165][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1063.604199][ T9] usb 6-1: config 0 has no interfaces? [ 1063.619721][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1063.701511][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1063.730542][ T9] usb 6-1: Product: syz [ 1063.740086][ T9] usb 6-1: Manufacturer: syz [ 1063.772459][ T9] usb 6-1: config 0 descriptor?? [ 1063.788739][T12507] netlink: 'syz.1.1426': attribute type 4 has an invalid length. [ 1063.864540][T12508] netlink: 'syz.1.1426': attribute type 4 has an invalid length. [ 1064.177269][ T9] usb 6-1: USB disconnect, device number 5 [ 1064.620263][T12524] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1066.264029][T12527] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1431'. [ 1066.276384][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 1066.276404][ T30] audit: type=1326 audit(1763578264.627:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1066.346866][T12530] loop5: detected capacity change from 0 to 2048 [ 1066.365574][ T30] audit: type=1326 audit(1763578264.657:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1066.457400][ T30] audit: type=1326 audit(1763578264.667:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1066.504154][ T30] audit: type=1326 audit(1763578264.667:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1066.518209][T12530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1066.528378][ T30] audit: type=1326 audit(1763578264.667:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1066.557296][T12534] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1431'. [ 1066.563279][ T30] audit: type=1326 audit(1763578264.677:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1066.594259][ T30] audit: type=1326 audit(1763578264.677:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1066.622140][ T30] audit: type=1326 audit(1763578264.677:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1066.654318][ T30] audit: type=1326 audit(1763578264.677:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1066.679479][ T30] audit: type=1326 audit(1763578264.677:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12529 comm="syz.5.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1066.720638][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1430'. [ 1066.783315][T12536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1430'. [ 1068.990055][T10242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.087023][T12184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1069.186853][T12184] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.218683][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.226028][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.279953][T11351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.287264][T11351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.812374][T12562] loop4: detected capacity change from 0 to 512 [ 1069.853547][T12562] EXT4-fs: Ignoring removed oldalloc option [ 1070.331354][T12562] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1072.344453][T12562] EXT4-fs: error -4 creating inode table initialization thread [ 1072.352493][T12562] EXT4-fs (loop4): mount failed [ 1073.385982][T12569] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1439'. [ 1073.769991][T12574] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1440'. [ 1075.918500][T12184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1076.171604][T12609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1447'. [ 1076.931178][T12614] loop7: detected capacity change from 0 to 512 [ 1076.944949][T12614] EXT4-fs: Ignoring removed oldalloc option [ 1077.782713][T12614] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1077.810167][T12603] 9pnet_fd: p9_fd_create_tcp (12603): problem connecting socket to 127.0.0.1 [ 1078.868117][T12614] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1449: invalid indirect mapped block 4294967295 (level 0) [ 1078.887096][T12614] EXT4-fs (loop7): Remounting filesystem read-only [ 1078.895216][T12614] EXT4-fs (loop7): 1 orphan inode deleted [ 1078.901748][T12614] EXT4-fs (loop7): 1 truncate cleaned up [ 1079.029003][T12614] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1079.488478][T12624] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1451'. [ 1080.156172][T11510] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.782886][T12184] veth0_vlan: entered promiscuous mode [ 1080.861750][T12184] veth1_vlan: entered promiscuous mode [ 1081.000237][T12184] veth0_macvtap: entered promiscuous mode [ 1081.061695][T12184] veth1_macvtap: entered promiscuous mode [ 1081.337380][T12184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.421640][T12673] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1462'. [ 1082.058395][T12184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1082.313945][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.333695][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.043801][ T6149] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.126377][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.021043][T12693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.028351][T12693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.096529][T12693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1084.110323][T12693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.222710][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.259467][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.339099][T12239] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1084.431097][ T9202] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.992870][T12239] usb 5-1: device descriptor read/64, error -71 [ 1085.029586][ T9202] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.178099][ T9202] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.247595][ T9202] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.259206][T12239] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1085.318060][ T6018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.344582][ T6018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.429185][T12239] usb 5-1: device descriptor read/64, error -71 [ 1085.580849][T12239] usb usb5-port1: attempt power cycle [ 1085.722876][T12726] tipc: Started in network mode [ 1085.728053][T12726] tipc: Node identity ac14141b, cluster identity 4711 [ 1085.737609][T12726] tipc: New replicast peer: 172.20.20.187 [ 1085.745760][T12726] tipc: Enabled bearer , priority 10 [ 1086.449351][T12708] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1478'. [ 1087.337903][ T44] tipc: Node number set to 2886997019 [ 1087.341648][T12239] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1087.437340][T12239] usb 5-1: device descriptor read/8, error -71 [ 1090.903895][T10411] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1091.038904][T10411] usb 2-1: device descriptor read/64, error -71 [ 1091.301093][T10411] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1091.478123][T10411] usb 2-1: device descriptor read/64, error -71 [ 1091.649635][T10411] usb usb2-port1: attempt power cycle [ 1091.947724][T12788] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1500'. [ 1091.998087][T10411] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1092.028649][T10411] usb 2-1: device descriptor read/8, error -71 [ 1092.288038][T10411] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1092.329855][T10411] usb 2-1: device descriptor read/8, error -71 [ 1092.449643][T10411] usb usb2-port1: unable to enumerate USB device [ 1094.548148][T10768] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1095.871121][T10768] usb 9-1: config index 0 descriptor too short (expected 28277, got 36) [ 1095.890938][T10768] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.085685][T10768] usb 9-1: config 0 has no interfaces? [ 1096.099047][T10768] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1096.266750][T10768] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.877600][T10768] usb 9-1: config 0 descriptor?? [ 1097.429382][T12838] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1513'. [ 1097.702196][T11074] Bluetooth: hci3: command 0x0406 tx timeout [ 1097.807761][T10398] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1097.947459][T10398] usb 6-1: device descriptor read/64, error -71 [ 1098.545054][T12861] loop1: detected capacity change from 0 to 512 [ 1098.561437][T12861] EXT4-fs: Ignoring removed oldalloc option [ 1098.574967][T10398] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1098.715989][T12861] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1098.801612][T12861] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.1519: invalid indirect mapped block 4294967295 (level 0) [ 1098.829620][T12861] EXT4-fs (loop1): Remounting filesystem read-only [ 1098.838794][T12861] EXT4-fs (loop1): 1 orphan inode deleted [ 1098.845844][T12861] EXT4-fs (loop1): 1 truncate cleaned up [ 1098.866680][T12861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1099.777813][T10398] usb 6-1: device descriptor read/64, error -71 [ 1100.228443][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1100.337807][T10398] usb usb6-port1: attempt power cycle [ 1101.971490][T10768] usb 9-1: can't set config #0, error -110 [ 1110.423917][ T5952] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1110.604873][ T5952] usb 2-1: config 0 has an invalid interface number: 187 but max is 0 [ 1110.666641][ T5952] usb 2-1: config 0 has no interface number 0 [ 1110.672954][ T5952] usb 2-1: config 0 interface 187 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1110.704087][ T5952] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 1110.736054][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.744215][ T5952] usb 2-1: Product: syz [ 1111.122578][ T5952] usb 2-1: Manufacturer: syz [ 1111.124469][T11074] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1111.127626][ T5952] usb 2-1: SerialNumber: syz [ 1111.143571][T11074] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1111.158989][T11074] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1111.176196][ T5952] usb 2-1: config 0 descriptor?? [ 1111.183174][T12945] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1111.191534][T11074] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1111.203464][T11074] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1111.495259][ T5952] usb 2-1: USB disconnect, device number 9 [ 1113.301756][T11074] Bluetooth: hci0: command tx timeout [ 1113.368049][T10768] usb 9-1: USB disconnect, device number 2 [ 1113.655736][ T6535] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1113.921872][T10925] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.948784][ T6535] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.059133][ T6535] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1114.080487][ T6535] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.167055][ T6535] usb 6-1: config 0 descriptor?? [ 1114.583585][T10925] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.731558][ T6535] logitech-djreceiver 0003:046D:C71F.0003: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.5-1/input0 [ 1114.828405][T13008] siw: device registration error -23 [ 1114.849066][T13008] smc: removing ib device syz2 [ 1114.897443][T10925] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.951247][T13011] netlink: 'syz.7.1552': attribute type 4 has an invalid length. [ 1114.979975][ T6535] usb 6-1: USB disconnect, device number 9 [ 1115.006106][T13014] netlink: 'syz.7.1552': attribute type 4 has an invalid length. [ 1115.149029][T10925] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.221109][T13012] fido_id[13012]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1115.329496][T13021] x_tables: duplicate underflow at hook 1 [ 1115.394555][T11074] Bluetooth: hci0: command tx timeout [ 1116.168312][T12963] chnl_net:caif_netlink_parms(): no params data found [ 1117.455131][T11074] Bluetooth: hci0: command tx timeout [ 1118.351150][T10925] bridge_slave_1: left allmulticast mode [ 1119.315503][T10925] bridge_slave_1: left promiscuous mode [ 1119.321382][T10925] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.584871][T11074] Bluetooth: hci0: command tx timeout [ 1120.069966][T10925] bridge_slave_0: left allmulticast mode [ 1120.105028][T10925] bridge_slave_0: left promiscuous mode [ 1120.112476][T10925] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.489762][T13057] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1565'. [ 1120.730966][T13064] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1568'. [ 1121.235488][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.243301][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.200822][ T9] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1122.310033][T10925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.327760][T10925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.340918][T10925] bond0 (unregistering): Released all slaves [ 1122.364705][ T9] usb 8-1: device descriptor read/64, error -71 [ 1122.624497][ T9] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1122.746129][T12963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.760983][T12963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.784712][T12963] bridge_slave_0: entered allmulticast mode [ 1122.793846][T12963] bridge_slave_0: entered promiscuous mode [ 1122.795701][ T9] usb 8-1: device descriptor read/64, error -71 [ 1122.804293][T12963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.814271][T12963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.825432][T12963] bridge_slave_1: entered allmulticast mode [ 1122.835864][T12963] bridge_slave_1: entered promiscuous mode [ 1122.903239][T13099] netlink: 'syz.5.1579': attribute type 4 has an invalid length. [ 1122.965058][T13100] netlink: 'syz.5.1579': attribute type 4 has an invalid length. [ 1122.974875][ T9] usb usb8-port1: attempt power cycle [ 1122.980929][T12963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.008715][T12963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1123.348489][ T9] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1123.385452][ T9] usb 8-1: device descriptor read/8, error -71 [ 1123.569371][T10925] hsr_slave_0: left promiscuous mode [ 1123.703010][T10925] hsr_slave_1: left promiscuous mode [ 1123.711474][T10925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1123.724768][ T9] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1123.732601][T10925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1123.750834][T10925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1123.772548][T10925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1123.786850][ T9] usb 8-1: device descriptor read/8, error -71 [ 1123.817213][T13116] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1586'. [ 1123.861116][T10925] veth1_macvtap: left promiscuous mode [ 1123.896801][T10925] veth0_macvtap: left promiscuous mode [ 1123.902618][T10925] veth1_vlan: left promiscuous mode [ 1123.919328][ T9] usb usb8-port1: unable to enumerate USB device [ 1123.926149][T10925] veth0_vlan: left promiscuous mode [ 1125.635912][T13142] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1590'. [ 1126.110977][T10925] team0 (unregistering): Port device team_slave_1 removed [ 1126.156569][T10925] team0 (unregistering): Port device team_slave_0 removed [ 1126.707184][T12963] team0: Port device team_slave_0 added [ 1126.741460][T12963] team0: Port device team_slave_1 added [ 1126.969056][T12963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1126.994116][T12963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.084016][T12963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1127.129901][T12963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1127.987407][T12963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.174664][ T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1128.204807][T12963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1128.615504][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1128.628843][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 1128.658215][ T9] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1128.669679][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1128.685301][T12963] hsr_slave_0: entered promiscuous mode [ 1128.701028][T12963] hsr_slave_1: entered promiscuous mode [ 1128.707022][ T9] usb 2-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 1128.719328][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.737930][ T9] usb 2-1: Product: syz [ 1128.742271][ T9] usb 2-1: Manufacturer: syz [ 1128.760567][ T9] usb 2-1: SerialNumber: syz [ 1128.880928][T13186] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1603'. [ 1128.990449][ T9] usb 2-1: USB disconnect, device number 10 [ 1129.334450][T13189] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1605'. [ 1130.949360][T12963] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1130.978819][T12963] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1131.017551][T12963] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1131.044645][T12963] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1131.670929][T12963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.756083][T12963] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.798165][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.805465][ T6040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1131.840070][T13253] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1618'. [ 1131.898809][ T6040] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.906416][ T6040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1134.405130][T12963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1136.193423][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1636'. [ 1136.260297][T13322] xfrm1: entered promiscuous mode [ 1136.272979][T13322] xfrm1: entered allmulticast mode [ 1136.315036][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1636'. [ 1136.418915][T12963] veth0_vlan: entered promiscuous mode [ 1136.482849][T13330] x_tables: duplicate underflow at hook 1 [ 1136.507569][T12963] veth1_vlan: entered promiscuous mode [ 1136.744113][T12963] veth0_macvtap: entered promiscuous mode [ 1136.795059][T12963] veth1_macvtap: entered promiscuous mode [ 1136.880910][T12963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.986428][T12963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1137.047517][ T36] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.101917][ T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.123369][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 1137.123389][ T30] audit: type=1326 audit(1763578335.475:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.5.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1137.164300][ T36] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.186312][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.259650][ T30] audit: type=1326 audit(1763578335.475:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.5.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1137.322797][ T30] audit: type=1326 audit(1763578335.475:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.5.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1137.434651][ T30] audit: type=1326 audit(1763578335.475:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.5.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1137.474839][T13360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1650'. [ 1137.518114][ T30] audit: type=1326 audit(1763578335.475:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.5.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1137.567200][T13360] xfrm1: entered promiscuous mode [ 1137.580315][T13360] xfrm1: entered allmulticast mode [ 1137.587367][ T30] audit: type=1326 audit(1763578335.475:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.5.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1137.599321][T13360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1650'. [ 1137.640566][ T9202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.648431][ T30] audit: type=1326 audit(1763578335.475:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.5.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1137.648483][ T30] audit: type=1326 audit(1763578335.475:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.5.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1137.765203][ T6460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1137.776986][ T9202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.792615][ T6460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1137.844209][ T30] audit: type=1326 audit(1763578335.475:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.5.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1137.934163][ T30] audit: type=1326 audit(1763578335.475:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13348 comm="syz.5.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fde97b8f749 code=0x7ffc0000 [ 1138.723968][T13393] loop5: detected capacity change from 0 to 512 [ 1138.787592][T13393] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1657: invalid indirect mapped block 4294967295 (level 1) [ 1138.806166][T13393] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1657: invalid indirect mapped block 4294967295 (level 1) [ 1138.825209][T13393] EXT4-fs (loop5): 2 truncates cleaned up [ 1138.850745][T13393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1139.025072][T13386] warning: `syz.1.1658' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1139.135949][T13404] loop7: detected capacity change from 0 to 512 [ 1139.143636][T13404] EXT4-fs: Ignoring removed oldalloc option [ 1139.153702][T13404] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1140.053443][T13397] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1140.081686][T13404] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1662: invalid indirect mapped block 4294967295 (level 0) [ 1140.104010][T13404] EXT4-fs (loop7): Remounting filesystem read-only [ 1140.111067][T13404] EXT4-fs (loop7): 1 orphan inode deleted [ 1140.116920][T13404] EXT4-fs (loop7): 1 truncate cleaned up [ 1140.124845][T13404] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1140.175039][T10242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1140.475365][T11510] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1140.509901][T13415] loop9: detected capacity change from 0 to 256 [ 1141.613070][T13433] netlink: 'syz.1.1672': attribute type 12 has an invalid length. [ 1142.958907][T13455] loop7: detected capacity change from 0 to 1024 [ 1143.033269][T13455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1143.158088][T13455] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1144.722938][ T5837] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1144.974149][ T5837] usb 10-1: config 0 has an invalid interface number: 120 but max is 0 [ 1145.022994][ T5837] usb 10-1: config 0 has no interface number 0 [ 1145.062245][ T5837] usb 10-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1145.126725][ T5837] usb 10-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1145.173678][ T5837] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.213851][T11510] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1145.245042][ T5837] usb 10-1: config 0 descriptor?? [ 1145.298221][ T5837] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.120/input/input11 [ 1145.488380][ T6010] usb 10-1: USB disconnect, device number 2 [ 1145.609861][T13502] netlink: 'syz.7.1697': attribute type 4 has an invalid length. [ 1145.618420][T13502] netlink: 'syz.7.1697': attribute type 4 has an invalid length. [ 1147.502943][T13514] netlink: 'syz.1.1702': attribute type 11 has an invalid length. [ 1151.701112][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 1151.701134][ T30] audit: type=1326 audit(1763578350.027:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13577 comm="syz.1.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95bf8f749 code=0x7fc00000 [ 1156.436426][T13693] bridge2: entered allmulticast mode [ 1159.375672][T13760] netlink: 'syz.9.1785': attribute type 30 has an invalid length. [ 1159.576502][T13768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1789'. [ 1161.334684][T13795] loop9: detected capacity change from 0 to 2048 [ 1161.377955][T13795] EXT4-fs: Ignoring removed nobh option [ 1161.410756][T13795] EXT4-fs: Ignoring removed mblk_io_submit option [ 1161.419890][T13803] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1799'. [ 1162.241958][T13795] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1162.326143][T13814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1805'. [ 1162.361295][T13795] EXT4-fs error (device loop9): ext4_ext_precache:632: inode #2: comm syz.9.1798: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1163.609298][T12963] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.644165][T13823] tipc: Started in network mode [ 1163.649108][T13823] tipc: Node identity ac14141b, cluster identity 4711 [ 1163.656317][T13823] tipc: New replicast peer: 172.20.20.187 [ 1163.664200][T13823] tipc: Enabled bearer , priority 10 [ 1164.236763][T13843] lo speed is unknown, defaulting to 1000 [ 1164.253613][T13843] lo speed is unknown, defaulting to 1000 [ 1164.302504][T13843] lo speed is unknown, defaulting to 1000 [ 1164.349363][T13843] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1164.432613][T13843] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1164.540671][T13843] lo speed is unknown, defaulting to 1000 [ 1164.591188][T13843] lo speed is unknown, defaulting to 1000 [ 1164.640761][T13843] lo speed is unknown, defaulting to 1000 [ 1164.703765][T13843] lo speed is unknown, defaulting to 1000 [ 1164.733214][T13843] lo speed is unknown, defaulting to 1000 [ 1164.867358][ T6072] tipc: Node number set to 2886997019 [ 1165.247206][T13874] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1819'. [ 1165.278438][T13874] xfrm1: entered promiscuous mode [ 1165.286307][T13874] xfrm1: entered allmulticast mode [ 1165.298838][T13874] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1819'. [ 1167.189489][T13885] tipc: Started in network mode [ 1167.194574][T13885] tipc: Node identity ac14141b, cluster identity 4711 [ 1167.202115][T13885] tipc: New replicast peer: 172.20.20.187 [ 1167.208846][T13885] tipc: Enabled bearer , priority 10 [ 1168.082737][ T30] audit: type=1326 audit(1763578366.439:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13887 comm="syz.7.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fc38f749 code=0x7ffc0000 [ 1168.145317][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1823'. [ 1168.203502][T13888] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1823'. [ 1168.248324][ T30] audit: type=1326 audit(1763578366.469:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13887 comm="syz.7.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09fc38f749 code=0x7ffc0000 [ 1168.329723][ T30] audit: type=1326 audit(1763578366.469:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13887 comm="syz.7.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fc38f749 code=0x7ffc0000 [ 1168.449978][ T30] audit: type=1326 audit(1763578366.469:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13887 comm="syz.7.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fc38f749 code=0x7ffc0000 [ 1168.473263][ T30] audit: type=1326 audit(1763578366.489:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13887 comm="syz.7.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09fc38f749 code=0x7ffc0000 [ 1168.512329][ T30] audit: type=1326 audit(1763578366.489:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13887 comm="syz.7.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fc38f749 code=0x7ffc0000 [ 1168.535277][T10398] tipc: Node number set to 2886997019 [ 1168.549950][ T30] audit: type=1326 audit(1763578366.489:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13887 comm="syz.7.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09fc38f749 code=0x7ffc0000 [ 1168.584485][ T30] audit: type=1326 audit(1763578366.489:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13887 comm="syz.7.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fc38f749 code=0x7ffc0000 [ 1168.660406][T13901] loop5: detected capacity change from 0 to 512 [ 1168.664906][ T30] audit: type=1326 audit(1763578366.499:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13887 comm="syz.7.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09fc38f749 code=0x7ffc0000 [ 1168.743797][ T30] audit: type=1326 audit(1763578366.499:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13887 comm="syz.7.1823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09fc38f749 code=0x7ffc0000 [ 1168.786263][T13901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1168.827517][T13901] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1168.830711][T13910] IPv6: NLM_F_CREATE should be specified when creating new route [ 1168.859387][T13910] IPv6: Can't replace route, no match found [ 1169.204408][T10242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1169.262318][T13919] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1834'. [ 1169.607118][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1839'. [ 1169.907267][T13939] netlink: 51 bytes leftover after parsing attributes in process `syz.9.1843'. [ 1169.995986][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1842'. [ 1170.150702][T10411] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1170.332320][T10411] usb 6-1: Using ep0 maxpacket: 32 [ 1170.346140][T10411] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.365016][T10411] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.382752][T10411] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1170.404764][T10411] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.432531][T10411] usb 6-1: config 0 descriptor?? [ 1170.919991][T10411] usbhid 6-1:0.0: can't add hid device: -71 [ 1170.945544][T10411] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1170.964825][T10411] usb 6-1: USB disconnect, device number 10 [ 1172.793587][T13986] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1858'. [ 1173.477137][T14003] siw: device registration error -23 [ 1173.667379][T14008] loop9: detected capacity change from 0 to 1024 [ 1178.099548][T14044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1879'. [ 1178.800071][T14058] bridge2: entered allmulticast mode [ 1178.874581][T14061] netlink: 'syz.5.1886': attribute type 4 has an invalid length. [ 1178.915812][T14061] netlink: 'syz.5.1886': attribute type 4 has an invalid length. [ 1178.982059][T14063] lo speed is unknown, defaulting to 1000 [ 1180.040859][T14076] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1890'. [ 1182.296589][T14111] xt_hashlimit: invalid interval [ 1182.664905][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.676038][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.746689][T14118] loop9: detected capacity change from 0 to 1024 [ 1182.807172][T14118] hfsplus: Bad value for 'session' [ 1183.062466][T14124] loop9: detected capacity change from 0 to 1024 [ 1187.929885][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1922'. [ 1187.965391][T14197] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1922'. [ 1189.649467][T14221] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1931'. [ 1193.163780][T14252] netlink: 'syz.4.1939': attribute type 12 has an invalid length. [ 1195.497856][T14302] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1957'. [ 1196.921968][T14310] netlink: 'syz.1.1956': attribute type 12 has an invalid length. [ 1197.526720][T14316] input: syz1 as /devices/virtual/input/input12 [ 1201.162837][T14375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1983'. [ 1202.511441][T14401] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1991'. [ 1202.642358][T14390] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1987'. [ 1203.980358][T14454] bridge3: entered allmulticast mode [ 1204.595642][T14477] x_tables: duplicate underflow at hook 1 [ 1207.395413][T14505] loop5: detected capacity change from 0 to 2048 [ 1207.402923][T14505] udf: Bad value for 'mode' [ 1210.041635][T14530] bridge5: entered allmulticast mode [ 1213.020188][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1213.020207][ T30] audit: type=1326 audit(1763578411.384:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14554 comm="syz.1.2052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95bf8f749 code=0x7fc00000 [ 1213.567642][T14570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2057'. [ 1213.981019][T14586] bridge1: entered allmulticast mode [ 1214.008181][T14588] x_tables: duplicate underflow at hook 1 [ 1214.760026][T14605] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2070'. [ 1214.862375][T14609] siw: device registration error -23 [ 1215.385571][T14619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2076'. [ 1216.707679][T14638] siw: device registration error -23 [ 1220.072259][T14706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2107'. [ 1221.385621][T14739] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2123'. [ 1225.095762][T14796] xt_SECMARK: invalid mode: 2 [ 1228.618694][T14848] lo speed is unknown, defaulting to 1000 [ 1230.525175][T14875] tipc: Enabling of bearer rejected, already enabled [ 1231.043893][T14880] siw: device registration error -23 [ 1231.349454][T14890] bridge2: entered allmulticast mode [ 1231.963224][T14907] siw: device registration error -23 [ 1235.034738][T14961] siw: device registration error -23 [ 1236.040750][ T8832] Bluetooth: hci0: command 0x0405 tx timeout [ 1236.897438][T14985] lo speed is unknown, defaulting to 1000 [ 1239.589756][T15015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2227'. [ 1240.568032][T15028] lo speed is unknown, defaulting to 1000 [ 1242.741052][T15050] mmap: syz.9.2240 (15050) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1243.039279][T15058] mac80211_hwsim hwsim3 brid: renamed from wlan0 (while UP) [ 1244.090521][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.096994][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.172852][ T8832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1244.183505][ T8832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1244.193566][ T8832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1244.203313][ T8832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1244.211367][ T8832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1244.358310][T15078] lo speed is unknown, defaulting to 1000 [ 1244.701577][ T3521] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.844012][T15078] chnl_net:caif_netlink_parms(): no params data found [ 1245.016886][ T3521] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.052394][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2255'. [ 1245.259425][ T3521] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.455673][ T3521] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.524444][T15078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.536257][T15078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.544289][T15078] bridge_slave_0: entered allmulticast mode [ 1245.554303][T15078] bridge_slave_0: entered promiscuous mode [ 1245.564245][T15078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.578969][T15078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.603125][T15078] bridge_slave_1: entered allmulticast mode [ 1245.626882][T15078] bridge_slave_1: entered promiscuous mode [ 1245.793354][T15117] netlink: 'syz.9.2262': attribute type 30 has an invalid length. [ 1245.845179][T15078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.992395][T15078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.182589][T15078] team0: Port device team_slave_0 added [ 1246.238799][T15078] team0: Port device team_slave_1 added [ 1246.245337][T15132] loop5: detected capacity change from 0 to 1024 [ 1246.255061][ T3521] bridge_slave_1: left allmulticast mode [ 1246.268266][ T3521] bridge_slave_1: left promiscuous mode [ 1246.281317][T15132] EXT4-fs: inline encryption not supported [ 1246.290304][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.305099][T15132] EXT4-fs: Ignoring removed i_version option [ 1246.320684][T11074] Bluetooth: hci2: command tx timeout [ 1246.331329][ T3521] bridge_slave_0: left allmulticast mode [ 1246.352092][ T3521] bridge_slave_0: left promiscuous mode [ 1246.377629][T15132] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1246.396554][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.414912][T15132] EXT4-fs (loop5): shut down requested (2) [ 1246.530506][T10242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.578104][T15143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2269'. [ 1246.777667][T15146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2271'. [ 1246.853446][T15148] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2271'. [ 1247.372858][ T3521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1247.383330][ T3521] bond_slave_0: left promiscuous mode [ 1247.388971][ T3521] bond_slave_0: left allmulticast mode [ 1247.397720][ T3521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1247.407922][ T3521] bond_slave_1: left promiscuous mode [ 1247.413603][ T3521] bond_slave_1: left allmulticast mode [ 1247.421113][ T3521] bond0 (unregistering): Released all slaves [ 1247.845932][T15162] x_tables: duplicate underflow at hook 1 [ 1247.876160][T15162] loop5: detected capacity change from 0 to 512 [ 1247.884884][T15162] FAT-fs (loop5): bogus number of FAT sectors [ 1247.891578][T15162] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1248.165874][T15078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1248.230725][T15078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1248.366225][T15078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1248.430922][T11074] Bluetooth: hci2: command tx timeout [ 1248.950154][T15078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1248.957234][T15078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1249.039962][T15078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1249.446799][T15186] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2283'. [ 1249.485668][ T30] audit: type=1326 audit(1763578447.858:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15185 comm="syz.9.2283" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43e7b8f749 code=0x0 [ 1249.486186][T15078] hsr_slave_0: entered promiscuous mode [ 1249.566389][T15078] hsr_slave_1: entered promiscuous mode [ 1249.590828][T15196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2285'. [ 1249.605934][T15078] debugfs: 'hsr0' already exists in 'hsr' [ 1249.618308][T15078] Cannot create hsr debugfs directory [ 1249.637237][ T3521] hsr_slave_0: left promiscuous mode [ 1249.648728][ T3521] hsr_slave_1: left promiscuous mode [ 1249.665901][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1249.687497][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1249.708492][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1249.726025][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1249.781052][ T3521] veth1_vlan: left promiscuous mode [ 1250.006988][T15207] x_tables: duplicate underflow at hook 1 [ 1250.491749][T11074] Bluetooth: hci2: command tx timeout [ 1251.023654][T15223] fuse: Bad value for 'fd' [ 1251.460232][ T3521] team_slave_1 (unregistering): left promiscuous mode [ 1251.477628][ T3521] team_slave_1 (unregistering): left allmulticast mode [ 1251.510269][ T3521] team0 (unregistering): Port device team_slave_1 removed [ 1251.692411][ T3521] team_slave_0 (unregistering): left promiscuous mode [ 1251.709522][ T3521] team_slave_0 (unregistering): left allmulticast mode [ 1251.723914][ T3521] team0 (unregistering): Port device team_slave_0 removed [ 1252.559504][T11074] Bluetooth: hci2: command tx timeout [ 1253.969848][T15254] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2304'. [ 1256.104736][T15294] netlink: 'syz.1.2317': attribute type 12 has an invalid length. [ 1257.189703][T15312] netlink: 'syz.1.2322': attribute type 4 has an invalid length. [ 1257.236606][T15312] netlink: 'syz.1.2322': attribute type 4 has an invalid length. [ 1257.304231][ T5952] lo speed is unknown, defaulting to 1000 [ 1257.311204][ T5952] syz2: Port: 1 Link ACTIVE [ 1258.806629][T15078] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1258.879959][T15078] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1258.926731][T15078] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1259.021080][T15078] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1259.410572][T15078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1259.552188][T15353] x_tables: duplicate underflow at hook 1 [ 1259.620548][T15078] 8021q: adding VLAN 0 to HW filter on device team0 [ 1259.789691][ T4542] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.797036][ T4542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1260.157286][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.164579][ T6613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1260.314761][T15366] loop5: detected capacity change from 0 to 1024 [ 1262.330204][T15366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1262.385364][T15366] netlink: 'syz.5.2331': attribute type 12 has an invalid length. [ 1262.749528][T15078] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1262.795375][T15078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1263.171349][T10242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.626208][T15392] netlink: 'syz.9.2337': attribute type 1 has an invalid length. [ 1263.710896][T15392] netlink: 'syz.9.2337': attribute type 1 has an invalid length. [ 1264.083874][T15078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.874957][T15419] xt_SECMARK: invalid mode: 2 [ 1265.976459][T15078] veth0_vlan: entered promiscuous mode [ 1266.060952][T15078] veth1_vlan: entered promiscuous mode [ 1266.997179][T15078] veth0_macvtap: entered promiscuous mode [ 1267.030781][T15078] veth1_macvtap: entered promiscuous mode [ 1267.096934][T15078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1267.135109][T15078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1267.164546][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.210350][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.252215][T15453] x_tables: duplicate underflow at hook 1 [ 1267.277289][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1267.367234][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1268.290615][T15470] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2358'. [ 1268.316943][T15464] lo speed is unknown, defaulting to 1000 [ 1268.447626][T11351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.455508][T11351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.672083][ T6149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.690898][ T6149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.738975][T15517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2367'. [ 1270.850267][T15518] tipc: Enabling of bearer rejected, already enabled [ 1271.018925][T15517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2367'. [ 1274.515289][T15555] xt_time: unknown flags 0xc [ 1276.331458][T15565] x_tables: duplicate underflow at hook 1 [ 1276.388089][T15565] loop5: detected capacity change from 0 to 512 [ 1276.433540][T15566] xt_SECMARK: invalid mode: 2 [ 1276.481220][T15565] FAT-fs (loop5): bogus number of FAT sectors [ 1276.487563][T15565] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1277.575161][T15585] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2388'. [ 1278.180853][T15594] loop5: detected capacity change from 0 to 16 [ 1278.695702][T15594] erofs (device loop5): mounted with root inode @ nid 36. [ 1279.273442][T15609] x_tables: duplicate underflow at hook 1 [ 1279.563782][T15614] loop4: detected capacity change from 0 to 512 [ 1279.582212][T15614] EXT4-fs: Ignoring removed mblk_io_submit option [ 1279.630132][T15614] EXT4-fs error (device loop4): __ext4_iget:5446: inode #11: block 1: comm syz.4.2399: invalid block [ 1279.660263][T15614] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2399: couldn't read orphan inode 11 (err -117) [ 1279.715833][T15614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1279.855026][T15619] EXT4-fs error (device loop4): ext4_add_entry:2417: inode #2: comm syz.4.2399: Directory hole found for htree leaf block 0 [ 1279.898142][T15621] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2401'. [ 1279.909609][T15621] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2401'. [ 1280.118300][T15623] loop5: detected capacity change from 0 to 512 [ 1280.134333][T15623] ext4: Unknown parameter 'nouser_xattr' [ 1280.546732][T15634] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2405'. [ 1280.821736][T15078] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1280.969964][T15640] Bluetooth: MGMT ver 1.23 [ 1282.845675][T15663] netlink: 'syz.9.2412': attribute type 12 has an invalid length. [ 1284.331836][T15679] tipc: Started in network mode [ 1284.337149][T15679] tipc: Node identity ac14141b, cluster identity 4711 [ 1284.345835][T15679] tipc: New replicast peer: 172.20.20.187 [ 1284.353166][T15679] tipc: Enabled bearer , priority 10 [ 1285.465804][ T44] tipc: Node number set to 2886997019 [ 1286.209124][T15701] loop4: detected capacity change from 0 to 1024 [ 1286.478543][T15704] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.2430'. [ 1286.571593][T15706] loop5: detected capacity change from 0 to 512 [ 1286.591275][T15706] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 1286.612501][T15706] EXT4-fs (loop5): external journal has bad superblock [ 1286.665213][T14184] hfsplus: bad catalog file entry [ 1286.688375][T14184] hfsplus: b-tree write err: -5, ino 3 [ 1288.674780][T15724] loop4: detected capacity change from 0 to 8192 [ 1288.757093][T14064] loop4: p1 p2 p4 < > [ 1288.761341][T14064] loop4: partition table partially beyond EOD, truncated [ 1288.775836][T14064] loop4: p1 start 16777216 is beyond EOD, truncated [ 1288.788715][T14064] loop4: p2 size 515840 extends beyond EOD, truncated [ 1288.825817][T14064] loop4: p4 start 16777216 is beyond EOD, truncated [ 1288.847811][T15724] loop4: p1 p2 p4 < > [ 1288.863605][T15724] loop4: partition table partially beyond EOD, truncated [ 1288.881357][T15724] loop4: p1 start 16777216 is beyond EOD, truncated [ 1288.907070][T15724] loop4: p2 size 515840 extends beyond EOD, truncated [ 1288.927009][T15724] loop4: p4 start 16777216 is beyond EOD, truncated [ 1289.166907][T15732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2441'. [ 1289.353500][T14064] udevd[14064]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1289.466901][T14064] udevd[14064]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 1290.285047][T10398] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1290.465221][T10398] usb 5-1: Using ep0 maxpacket: 32 [ 1290.472247][T10398] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.514970][T10398] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.546302][T10398] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1290.565010][T10398] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1290.573417][T10398] usb 5-1: Product: syz [ 1290.614975][T10398] usb 5-1: Manufacturer: syz [ 1290.625726][T10398] hub 5-1:4.0: USB hub found [ 1290.835029][T10398] hub 5-1:4.0: 2 ports detected [ 1292.157266][T10398] hub 5-1:4.0: set hub depth failed [ 1292.205462][T10398] usb 5-1: USB disconnect, device number 7 [ 1292.339569][T15760] loop5: detected capacity change from 0 to 2048 [ 1292.468754][T15760] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1293.897926][T15772] lo speed is unknown, defaulting to 1000 [ 1295.958224][T15795] loop4: detected capacity change from 0 to 256 [ 1296.031533][T15795] vfat: Bad value for 'fmask' [ 1296.317406][T15799] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2465'. [ 1297.598176][T15811] loop5: detected capacity change from 0 to 164 [ 1297.605736][T15811] iso9660: Unknown parameter 'defcontext' [ 1298.314436][T15825] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2474'. [ 1300.035715][T15846] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2479'. [ 1303.675665][T15872] loop5: detected capacity change from 0 to 512 [ 1303.929974][T15872] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1303.943867][T15872] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 1303.996520][T15872] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.2488: Corrupt directory, running e2fsck is recommended [ 1304.077003][T15883] netlink: 'syz.7.2491': attribute type 5 has an invalid length. [ 1304.159201][T15872] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 1304.222073][T15872] EXT4-fs error (device loop5): ext4_iget_extra_inode:5079: inode #15: comm syz.5.2488: corrupted in-inode xattr: invalid ea_ino [ 1304.285558][T15872] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2488: couldn't read orphan inode 15 (err -117) [ 1304.326036][T15872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1304.386855][T15872] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1305.012778][T15897] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2498'. [ 1305.563999][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.570581][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.356135][T15920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2507'. [ 1307.518958][T15924] loop5: detected capacity change from 0 to 512 [ 1307.549264][T15924] EXT4-fs: Ignoring removed orlov option [ 1307.611964][T15924] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.2508: Attempting to read directory block (0) that is past i_size (256) [ 1307.699294][T15924] EXT4-fs (loop5): Remounting filesystem read-only [ 1307.736142][T15924] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 1307.779710][T15924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1308.047730][T10242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1308.087097][T15932] bridge1: entered allmulticast mode [ 1308.109510][T15934] netlink: 'syz.7.2512': attribute type 13 has an invalid length. [ 1308.143591][T15934] netlink: 'syz.7.2512': attribute type 27 has an invalid length. [ 1309.634886][T15949] loop4: detected capacity change from 0 to 256 [ 1312.162964][T15953] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2519'. [ 1313.071845][T15966] x_tables: duplicate underflow at hook 1 [ 1313.090131][T15966] loop5: detected capacity change from 0 to 512 [ 1313.265535][T15966] FAT-fs (loop5): bogus number of FAT sectors [ 1313.271779][T15966] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1314.208594][T15981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.217613][T15981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.321128][T15981] syzkaller0: entered allmulticast mode [ 1314.540863][T15980] syzkaller0: left allmulticast mode [ 1314.737797][T15988] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2532'. [ 1316.012533][T16005] netlink: 'syz.4.2538': attribute type 1 has an invalid length. [ 1316.187177][T16008] loop5: detected capacity change from 0 to 2048 [ 1316.209735][T16009] x_tables: duplicate underflow at hook 1 [ 1316.337180][T16005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2538'. [ 1316.524453][T16008] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1317.557224][T16021] loop4: detected capacity change from 0 to 512 [ 1317.988803][T16021] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 1318.036462][T10242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1318.169157][ T8832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1318.179047][ T8832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1318.193514][ T8832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1318.233572][ T8832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1318.241384][ T8832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1318.323681][T16024] lo speed is unknown, defaulting to 1000 [ 1319.019094][T16033] loop4: detected capacity change from 0 to 512 [ 1319.078384][T16033] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1319.089651][T16033] EXT4-fs (loop4): external journal has bad superblock [ 1320.325258][T11074] Bluetooth: hci4: command tx timeout [ 1321.709745][T16024] chnl_net:caif_netlink_parms(): no params data found [ 1322.179464][T16052] kvm: pic: non byte read [ 1322.206120][T16052] kvm: pic: level sensitive irq not supported [ 1322.206212][T16052] kvm: pic: non byte read [ 1322.241816][T16052] kvm: pic: level sensitive irq not supported [ 1322.241876][T16052] kvm: pic: non byte read [ 1322.286493][T16052] kvm: pic: level sensitive irq not supported [ 1322.286576][T16052] kvm: pic: non byte read [ 1322.364309][T16024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.391951][T11074] Bluetooth: hci4: command tx timeout [ 1322.409089][T16024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.442257][T16024] bridge_slave_0: entered allmulticast mode [ 1322.501638][T16024] bridge_slave_0: entered promiscuous mode [ 1322.551774][T16024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.559153][T16024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.588827][T16024] bridge_slave_1: entered allmulticast mode [ 1322.610974][T16024] bridge_slave_1: entered promiscuous mode [ 1323.030028][T16024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.110234][T16024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1324.708055][T11074] Bluetooth: hci4: command tx timeout [ 1325.150539][T16024] team0: Port device team_slave_0 added [ 1325.279294][T16024] team0: Port device team_slave_1 added [ 1325.366598][T16097] x_tables: duplicate underflow at hook 1 [ 1326.002885][T16024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1326.040462][T16024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.118316][T16024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1326.376907][T16024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1326.403465][T16024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1326.430187][T16024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1326.841566][T11074] Bluetooth: hci4: command tx timeout [ 1327.379833][T16024] hsr_slave_0: entered promiscuous mode [ 1327.396231][T16024] hsr_slave_1: entered promiscuous mode [ 1327.413770][T16024] debugfs: 'hsr0' already exists in 'hsr' [ 1327.419718][T16024] Cannot create hsr debugfs directory [ 1329.055508][ T7000] bridge_slave_1: left allmulticast mode [ 1329.074544][ T7000] bridge_slave_1: left promiscuous mode [ 1329.080620][ T7000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.109090][ T7000] bridge_slave_0: left allmulticast mode [ 1329.118547][ T7000] bridge_slave_0: left promiscuous mode [ 1329.133717][ T7000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.715800][ T7000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1330.725313][ T7000] bond_slave_0: left promiscuous mode [ 1330.730988][ T7000] bond_slave_0: left allmulticast mode [ 1330.738046][ T7000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1330.747619][ T7000] bond_slave_1: left promiscuous mode [ 1330.753271][ T7000] bond_slave_1: left allmulticast mode [ 1330.759261][ T7000] bond0 (unregistering): Released all slaves [ 1330.777155][T16168] netlink: 'syz.9.2596': attribute type 3 has an invalid length. [ 1330.805921][T16168] netlink: 'syz.9.2596': attribute type 3 has an invalid length. [ 1331.157630][ T7000] tipc: Disabling bearer [ 1331.184344][ T7000] tipc: Left network mode [ 1331.255372][T16186] siw: device registration error -23 [ 1331.412770][T16189] loop5: detected capacity change from 0 to 512 [ 1331.444809][T16189] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 1331.488284][T16189] EXT4-fs (loop5): external journal has bad superblock [ 1334.155347][ T7000] hsr_slave_0: left promiscuous mode [ 1334.196081][ T7000] hsr_slave_1: left promiscuous mode [ 1334.213169][ T7000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1334.271819][ T7000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1334.755638][T16244] loop4: detected capacity change from 0 to 1024 [ 1335.005891][ T30] audit: type=1326 audit(1763578533.358:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.9.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e7b8f749 code=0x7ffc0000 [ 1335.123369][ T30] audit: type=1326 audit(1763578533.358:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.9.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e7b8f749 code=0x7ffc0000 [ 1335.236878][ T30] audit: type=1326 audit(1763578533.468:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.9.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f43e7b8f749 code=0x7ffc0000 [ 1335.370365][ T30] audit: type=1326 audit(1763578533.468:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.9.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e7b8f749 code=0x7ffc0000 [ 1335.424375][T16244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1335.470003][ T30] audit: type=1326 audit(1763578533.468:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.9.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e7b8f749 code=0x7ffc0000 [ 1335.494421][T16253] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2621'. [ 1335.556343][ T30] audit: type=1326 audit(1763578533.468:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.9.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f43e7b8f749 code=0x7ffc0000 [ 1335.600420][ T30] audit: type=1326 audit(1763578533.468:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.9.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e7b8f749 code=0x7ffc0000 [ 1335.623837][ T30] audit: type=1326 audit(1763578533.468:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.9.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e7b8f749 code=0x7ffc0000 [ 1336.030655][ T7000] team_slave_1 (unregistering): left promiscuous mode [ 1336.037532][ T7000] team_slave_1 (unregistering): left allmulticast mode [ 1336.061093][ T7000] team0 (unregistering): Port device team_slave_1 removed [ 1336.200645][ T7000] team_slave_0 (unregistering): left promiscuous mode [ 1336.217801][ T7000] team_slave_0 (unregistering): left allmulticast mode [ 1336.229141][ T7000] team0 (unregistering): Port device team_slave_0 removed [ 1337.329963][ T5983] lo speed is unknown, defaulting to 1000 [ 1337.335809][ T5983] syz2: Port: 1 Link DOWN [ 1337.343989][T16244] netlink: 'syz.4.2612': attribute type 12 has an invalid length. [ 1337.678123][T16024] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1337.735402][T16024] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1337.803862][T16024] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1337.855659][T16024] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1337.907959][T15078] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1338.033906][T16285] xt_SECMARK: invalid mode: 2 [ 1339.087046][T16024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1339.153025][T16024] 8021q: adding VLAN 0 to HW filter on device team0 [ 1339.218415][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.225731][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1339.290882][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.298214][ T6149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1339.481525][T16024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1339.662337][T16313] loop5: detected capacity change from 0 to 512 [ 1339.832545][T16313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1339.934725][T16313] ext4 filesystem being mounted at /385/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1340.015806][ T30] audit: type=1800 audit(1763578538.389:1543): pid=16313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2637" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 1340.226817][T10242] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1340.524788][T16332] loop4: detected capacity change from 0 to 512 [ 1340.580243][T16332] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1340.597592][T16024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1340.668009][T16332] EXT4-fs warning (device loop4): ext4_multi_mount_protect:314: fsck is running on the filesystem [ 1340.685403][T16335] overlayfs: failed to clone upperpath [ 1340.723455][T16332] EXT4-fs warning (device loop4): ext4_multi_mount_protect:314: MMP failure info: last update time: 1669132786, last update node: dvyukov-desk.muc.corp.google.com, last update device: loop4 [ 1340.857314][T16024] veth0_vlan: entered promiscuous mode [ 1340.977474][T16024] veth1_vlan: entered promiscuous mode [ 1341.881661][T16024] veth0_macvtap: entered promiscuous mode [ 1341.897671][T16024] veth1_macvtap: entered promiscuous mode [ 1341.931269][T16024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1341.944231][T16024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1342.178693][T16346] netlink: 'syz.9.2638': attribute type 12 has an invalid length. [ 1342.237666][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.307069][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.322017][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.353893][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1342.506938][ T6460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1342.538038][ T6460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1342.622614][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1342.650531][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1344.249895][ T6010] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1344.459572][ T6010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1344.499076][ T6010] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1344.525556][ T6010] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1344.545936][ T6010] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.587259][ T6010] usb 3-1: config 0 descriptor?? [ 1344.610633][ T6010] hub 3-1:0.0: USB hub found [ 1344.815514][ T6010] hub 3-1:0.0: 1 port detected [ 1345.017256][ T6010] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1345.062134][ T6010] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1345.143181][ T6010] usbhid 3-1:0.0: can't add hid device: -71 [ 1345.195474][ T6010] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1345.294244][ T6010] usb 3-1: USB disconnect, device number 2 [ 1345.503906][T16412] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2659'. [ 1345.869350][T16421] netlink: 1276 bytes leftover after parsing attributes in process `syz.7.2662'. [ 1349.040598][T16461] xt_SECMARK: invalid mode: 2 [ 1349.372077][T16465] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2675'. [ 1349.418864][T16465] unsupported nlmsg_type 40 [ 1349.682853][T16473] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2678'. [ 1349.748868][T16480] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2681'. [ 1349.768557][T16480] 0ªX¹¦D: renamed from gretap0 (while UP) [ 1349.780754][T16480] 0ªX¹¦D: entered allmulticast mode [ 1349.786625][T16480] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 1354.400878][T16499] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2687'. [ 1357.690683][T16540] xt_SECMARK: invalid mode: 2 [ 1358.292130][T16542] overlayfs: failed to clone upperpath [ 1361.554841][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2701'. [ 1362.541434][T16590] xt_SECMARK: invalid mode: 2 [ 1363.389114][T16596] loop4: detected capacity change from 0 to 512 [ 1363.399595][T16596] EXT4-fs: Ignoring removed nobh option [ 1363.597954][T16596] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1363.938047][T16596] EXT4-fs (loop4): 1 truncate cleaned up [ 1364.257982][T16596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1364.771620][T15078] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1364.786057][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2717'. [ 1365.664642][T16624] lo speed is unknown, defaulting to 1000 [ 1365.719862][T16626] netlink: 'syz.4.2719': attribute type 7 has an invalid length. [ 1365.754129][T16626] netlink: 'syz.4.2719': attribute type 8 has an invalid length. [ 1365.792468][T16624] lo speed is unknown, defaulting to 1000 [ 1365.827764][T16624] lo speed is unknown, defaulting to 1000 [ 1366.045380][T16624] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1366.899861][T16624] lo speed is unknown, defaulting to 1000 [ 1366.994821][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.001350][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.034506][T16624] lo speed is unknown, defaulting to 1000 [ 1367.074514][T16624] lo speed is unknown, defaulting to 1000 [ 1367.115587][T16624] lo speed is unknown, defaulting to 1000 [ 1367.124489][T16624] lo speed is unknown, defaulting to 1000 [ 1369.034213][T11074] Bluetooth: hci2: command 0x0406 tx timeout [ 1372.405662][T16724] xt_SECMARK: invalid mode: 2 [ 1376.666599][T16757] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2756'. [ 1379.789562][T16792] loop4: detected capacity change from 0 to 1024 [ 1379.993145][T16792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1381.934367][T16767] netlink: 'syz.2.2760': attribute type 49 has an invalid length. [ 1381.953297][T16797] netlink: 'syz.4.2763': attribute type 12 has an invalid length. [ 1382.073426][T15078] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1382.954871][T16826] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1386.516869][ T30] audit: type=1800 audit(1763578584.904:1544): pid=16855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2779" name="bus" dev="tmpfs" ino=1329 res=0 errno=0 [ 1386.739767][T16859] 9p: Could not find request transport: Kd [ 1387.401057][T16885] xt_SECMARK: invalid mode: 2 [ 1388.222836][T16895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2787'. [ 1388.637782][T16897] lo speed is unknown, defaulting to 1000 [ 1388.813406][T16911] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2791'. [ 1388.837493][T16911] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1389.649688][T16929] bridge1: entered allmulticast mode [ 1389.931509][T16937] xt_SECMARK: invalid mode: 2 [ 1393.213351][T16990] xt_SECMARK: invalid mode: 2 [ 1394.953541][T17035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2823'. [ 1395.829653][T17051] xt_SECMARK: invalid mode: 2 [ 1395.927808][T17053] fuse: Bad value for 'fd' [ 1396.024380][T17025] loop4: detected capacity change from 0 to 512 [ 1396.072067][T17025] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 1396.132207][T17025] EXT4-fs (loop4): external journal has bad superblock [ 1397.468155][T17068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1398.878691][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2840'. [ 1399.203968][T17106] xt_SECMARK: invalid mode: 2 [ 1402.157013][T17138] bridge4: entered allmulticast mode [ 1406.133991][T17157] loop4: detected capacity change from 0 to 16 [ 1406.811730][T17157] erofs (device loop4): mounted with root inode @ nid 36. [ 1407.885650][T17189] loop2: detected capacity change from 0 to 8 [ 1408.005337][T17191] fuse: Bad value for 'fd' [ 1408.039397][T17189] unable to read xattr id index table [ 1408.642054][T17204] vmg ffffc9000dce7c00 dumped because: VM_WARN_ON_VMG(prev && start <= prev->vm_start) [ 1408.822109][T17204] vmg ffffc9000dce7c00 state: mm ffff88813fe5b5c0 pgoff 2 [ 1408.822109][T17204] vmi ffffc9000dce7dc0 [200000ffe000,200001000000) [ 1408.822109][T17204] prev ffff88808d74e140 middle ffff88808d74e140 next 0000000000000000 target 0000000000000000 [ 1408.822109][T17204] start 200000ffe000 end 200001000000 flags 80000d1 [ 1408.822109][T17204] file ffff8880329f6fc0 anon_vma 0000000000000000 policy 0000000000000000 [ 1408.822109][T17204] uffd_ctx 0000000000000000 [ 1408.822109][T17204] anon_name 0000000000000000 [ 1408.822109][T17204] state 0 [ 1408.822109][T17204] just_expand 0 [ 1408.822109][T17204] __adjust_middle_start 0 __adjust_next_start 0 [ 1408.822109][T17204] __remove_middle 0 __remove_next 0 [ 1409.011833][T17204] vmg ffffc9000dce7c00 mm: [ 1409.033255][T17204] mm ffff88813fe5b5c0 task_size 140737488351232 [ 1409.033255][T17204] mmap_base 140594019205120 mmap_legacy_base 47038775963648 [ 1409.033255][T17204] pgd ffff888078918000 mm_users 2 mm_count 1 pgtables_bytes 135168 map_count 33 [ 1409.033255][T17204] hiwater_rss 1708 hiwater_vm 63a4 total_vm 63a4 locked_vm 2 [ 1409.033255][T17204] pinned_vm 0 data_vm 24ce exec_vm 1a7 stack_vm 21 [ 1409.033255][T17204] start_code 7fde97a49000 end_code 7fde97bed079 start_data 7fde97dc0000 end_data 7fde97dc0000 [ 1409.033255][T17204] start_brk 55557f7a7000 brk 55557f7db000 start_stack 7ffc252004b0 [ 1409.033255][T17204] arg_start 7ffc25201f6d arg_end 7ffc25201f81 env_start 7ffc25201f81 env_end 7ffc25201fe9 [ 1409.033255][T17204] binfmt ffffffff8e0b7880 flags 00000000,800007fd [ 1409.033255][T17204] ioctx_table 0000000000000000 [ 1409.033255][T17204] owner ffff888032973d00 exe_file ffff8880298e0700 [ 1409.033255][T17204] notifier_subscriptions 0000000000000000 [ 1409.033255][T17204] numa_next_scan 4295078059 numa_scan_offset 0 numa_scan_seq 0 [ 1409.033255][T17204] tlb_flush_pending 0 [ 1409.033255][T17204] def_flags: 0x0() [ 1409.182456][T17204] vmg ffffc9000dce7c00 prev: [ 1409.192067][T17204] vma ffff88808d74e140 start 0000200000ffe000 end 0000200001000000 mm ffff88813fe5b5c0 [ 1409.192067][T17204] prot 8000000000000025 anon_vma 0000000000000000 vm_ops ffffffff8bb79860 [ 1409.192067][T17204] pgoff 2 file ffff8880329f6fc0 private_data 0000000000000000 [ 1409.192067][T17204] refcnt 1 [ 1409.192067][T17204] flags: 0x80020d1(read|mayread|mayexec|mayshare|locked|softdirty) [ 1409.241289][T17204] vmg ffffc9000dce7c00 middle: [ 1409.251164][T17204] vma ffff88808d74e140 start 0000200000ffe000 end 0000200001000000 mm ffff88813fe5b5c0 [ 1409.251164][T17204] prot 8000000000000025 anon_vma 0000000000000000 vm_ops ffffffff8bb79860 [ 1409.251164][T17204] pgoff 2 file ffff8880329f6fc0 private_data 0000000000000000 [ 1409.251164][T17204] refcnt 1 [ 1409.251164][T17204] flags: 0x80020d1(read|mayread|mayexec|mayshare|locked|softdirty) [ 1409.417346][T17204] vmg ffffc9000dce7c00 next: (NULL) [ 1409.436251][T17204] vmg ffffc9000dce7c00 vmi: [ 1410.977124][T17204] MAS: tree=ffff88813fe5b600 enode=ffff88807c316c0c [ 1410.977155][T17204] (ma_active) [ 1411.251334][T17204] Store Type: [ 1411.314493][T17204] invalid store type [ 1411.378703][T17204] [10/13] index=200000ffe000 last=200000ffffff [ 1411.531581][T17204] min=0 max=55557f7c8fff sheaf=0000000000000000, request 0 depth=0, flags=0 [ 1411.574909][T17204] maple_tree(ffff88813fe5b600) flags 30B, height 2 root ffff88802802221e [ 1411.622343][T17204] 0-ffffffffffffffff: node ffff888028022200 depth 0 type 3 parent ffff88813fe5b601 contents: 35557e7a6000 2a89165fb000 ffff8003dadfe000 0 0 0 0 0 0 0 | 02 02| ffff88807c316c0c 55557F7C8FFF ffff88802802260c 7FDE979FFFFF ffff88806498980c FFFFFFFFFFFFFFFF 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 0 0000000000000000 [ 1411.791544][T17204] 0-55557f7c8fff: node ffff88807c316c00 depth 1 type 1 parent ffff888028022206 contents: 0000000000000000 110C22FFFF ffff88807dd05140 110E22FFFF 0000000000000000 1B3301FFFF ffff88807dd05640 1B3341FFFF 0000000000000000 1B34023FFF ffff88807dd053c0 1B34423FFF 0000000000000000 1FFFFFFFEFFF ffff88807dd05dc0 1FFFFFFFFFFF ffff88808d74e780 200000FFBFFF ffff88808d74e640 200000FFDFFF ffff88808d74e140 200000FFFFFF ffff88807dd05780 200001000FFF 0000000000000000 55557F7A6FFF ffff888048725a00 55557F7C8FFF 0000000000000000 0 000000000000000d [ 1411.930627][T17204] 0-110c22ffff: 0000000000000000 [ 1411.936093][T17204] 110c230000-110e22ffff: ffff88807dd05140 [ 1411.956944][T17204] 110e230000-1b3301ffff: 0000000000000000 [ 1412.151388][T17204] 1b33020000-1b3341ffff: ffff88807dd05640 [ 1412.185448][T17204] 1b33420000-1b34023fff: 0000000000000000 [ 1412.325899][T17204] 1b34024000-1b34423fff: ffff88807dd053c0 [ 1412.869689][T17204] 1b34424000-1fffffffefff: 0000000000000000 [ 1412.903624][T17204] 1ffffffff000-1fffffffffff: ffff88807dd05dc0 [ 1412.940541][T17204] 200000000000-200000ffbfff: ffff88808d74e780 [ 1412.979155][T17204] 200000ffc000-200000ffdfff: ffff88808d74e640 [ 1413.015036][T17204] 200000ffe000-200000ffffff: ffff88808d74e140 [ 1413.056443][T17204] 200001000000-200001000fff: ffff88807dd05780 [ 1413.100906][T17204] 200001001000-55557f7a6fff: 0000000000000000 [ 1413.153260][T17204] 55557f7a7000-55557f7c8fff: ffff888048725a00 [ 1413.341238][T17204] 55557f7c9000-7fde979fffff: node ffff888028022600 depth 1 type 1 parent ffff88802802220e contents: ffff888048725780 55557F7DAFFF 0000000000000000 7FDE95DD5FFF ffff88805c269c80 7FDE95DD6FFF ffff888048725500 7FDE95DF6FFF ffff88805c269b40 7FDE95DF7FFF ffff888048725140 7FDE965F7FFF ffff888048725000 7FDE965F8FFF ffff8880487258c0 7FDE96DF8FFF ffff888048725640 7FDE96DFAFFF ffff88804606fc80 7FDE971FAFFF ffff88805b3f5a00 7FDE971FCFFF ffff88805b3f5c80 7FDE975FCFFF ffff8880909ba640 7FDE975FEFFF ffff8880909ba3c0 7FDE979FEFFF ffff888048364640 7FDE979FFFFF 000000000000000e [ 1414.481421][T17204] 55557f7c9000-55557f7dafff: ffff888048725780 [ 1414.492147][T17204] 55557f7db000-7fde95dd5fff: 0000000000000000 [ 1414.498647][T17204] 7fde95dd6000-7fde95dd6fff: ffff88805c269c80 [ 1414.521184][T17204] 7fde95dd7000-7fde95df6fff: ffff888048725500 [ 1414.527727][T17204] 7fde95df7000-7fde95df7fff: ffff88805c269b40 [ 1414.543761][T17204] 7fde95df8000-7fde965f7fff: ffff888048725140 [ 1414.550357][T17204] 7fde965f8000-7fde965f8fff: ffff888048725000 [ 1414.971190][T17204] 7fde965f9000-7fde96df8fff: ffff8880487258c0 [ 1414.984731][T17204] 7fde96df9000-7fde96dfafff: ffff888048725640 [ 1414.997617][T17204] 7fde96dfb000-7fde971fafff: ffff88804606fc80 [ 1415.029794][T17204] 7fde971fb000-7fde971fcfff: ffff88805b3f5a00 [ 1415.051140][T17204] 7fde971fd000-7fde975fcfff: ffff88805b3f5c80 [ 1415.068485][T17204] 7fde975fd000-7fde975fefff: ffff8880909ba640 [ 1415.081051][T17204] 7fde975ff000-7fde979fefff: ffff8880909ba3c0 [ 1415.109169][T17204] 7fde979ff000-7fde979fffff: ffff888048364640 [ 1415.119345][T17204] 7fde97a00000-ffffffffffffffff: node ffff888064989800 depth 1 type 1 parent ffff888028022216 contents: ffff888048364b40 7FDE97A48FFF ffff888048364a00 7FDE97BEDFFF ffff8880852013c0 7FDE97C9CFFF ffff888085201dc0 7FDE97DB3FFF ffff888085201c80 7FDE97DBCFFF 0000000000000000 7FDE97DBFFFF ffff88804606f3c0 7FDE9891DFFF 0000000000000000 7FDE9891FFFF ffff88804606f000 7FDE98923FFF ffff88804606f280 7FDE98925FFF ffff88801c311dc0 7FDE98927FFF 0000000000000000 7FFC251E0FFF ffff88801c311c80 7FFC25201FFF 0000000000000000 FFFFFFFFFFFFFFFF 0000000000000000 0 000000000000000d [ 1415.260675][T17204] 7fde97a00000-7fde97a48fff: ffff888048364b40 [ 1415.288196][T17204] 7fde97a49000-7fde97bedfff: ffff888048364a00 [ 1415.311811][T17204] 7fde97bee000-7fde97c9cfff: ffff8880852013c0 [ 1415.318406][T17204] 7fde97c9d000-7fde97db3fff: ffff888085201dc0 [ 1415.356064][T17204] 7fde97db4000-7fde97dbcfff: ffff888085201c80 [ 1415.376429][T17204] 7fde97dbd000-7fde97dbffff: 0000000000000000 [ 1415.396736][T17204] 7fde97dc0000-7fde9891dfff: ffff88804606f3c0 [ 1415.437455][T17204] 7fde9891e000-7fde9891ffff: 0000000000000000 [ 1415.468861][T17204] 7fde98920000-7fde98923fff: ffff88804606f000 [ 1415.519219][T17204] 7fde98924000-7fde98925fff: ffff88804606f280 [ 1415.539112][T17204] 7fde98926000-7fde98927fff: ffff88801c311dc0 [ 1415.567674][T17204] 7fde98928000-7ffc251e0fff: 0000000000000000 [ 1415.594766][T17204] 7ffc251e1000-7ffc25201fff: ffff88801c311c80 [ 1415.641142][T17204] 7ffc25202000-ffffffffffffffff: 0000000000000000 [ 1415.671261][T17204] ------------[ cut here ]------------ [ 1415.676818][T17204] WARNING: mm/vma.c:818 at vma_modify+0x1614/0x1a70, CPU#0: syz.5.2871/17204 [ 1415.686381][T17204] Modules linked in: [ 1415.690727][T17204] CPU: 0 UID: 0 PID: 17204 Comm: syz.5.2871 Not tainted syzkaller #0 PREEMPT(full) [ 1415.700209][T17204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1415.710393][T17204] RIP: 0010:vma_modify+0x1614/0x1a70 [ 1415.715823][T17204] Code: 0b 90 e9 c4 ec ff ff e8 ea e5 a8 ff 90 0f 0b 90 e9 04 ec ff ff e8 dc e5 a8 ff 4c 89 f7 48 c7 c6 e0 e5 76 8b e8 5d 85 f2 ff 90 <0f> 0b 90 e9 6a ec ff ff e8 bf e5 a8 ff e9 59 ed ff ff e8 b5 e5 a8 [ 1415.735564][T17204] RSP: 0018:ffffc9000dce7ae8 EFLAGS: 00010282 [ 1415.741759][T17204] RAX: ffffffff8b54046d RBX: 0000200000ffe000 RCX: 0000000000080000 [ 1415.749781][T17204] RDX: ffffc9000cd6a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1415.757960][T17204] RBP: ffffc9000dce7c20 R08: ffffc9000dce7667 R09: 1ffff92001b9cecc [ 1415.766154][T17204] R10: dffffc0000000000 R11: fffff52001b9cecd R12: 0000200000ffe000 [ 1415.774870][T17204] R13: dffffc0000000000 R14: ffffc9000dce7c00 R15: 1ffff92001b9cf84 [ 1415.783485][T17204] FS: 00007fde95df66c0(0000) GS:ffff888125ebc000(0000) knlGS:0000000000000000 [ 1415.792560][T17204] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1415.799246][T17204] CR2: 0000556a2d61be38 CR3: 0000000078918000 CR4: 00000000003526f0 [ 1415.807440][T17204] Call Trace: [ 1415.810779][T17204] [ 1415.813840][T17204] vma_modify_flags+0x1e8/0x230 [ 1415.818757][T17204] ? __pfx_vma_modify_flags+0x10/0x10 [ 1415.824352][T17204] mlock_fixup+0x24b/0x3b0 [ 1415.828843][T17204] apply_vma_lock_flags+0x285/0x390 [ 1415.834182][T17204] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 1415.839982][T17204] __se_sys_munlock+0x150/0x270 [ 1415.844964][T17204] do_syscall_64+0xfa/0xfa0 [ 1415.849521][T17204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.855715][T17204] ? clear_bhb_loop+0x60/0xb0 [ 1415.860470][T17204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.866483][T17204] RIP: 0033:0x7fde97b8f749 [ 1415.871004][T17204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1415.891530][T17204] RSP: 002b:00007fde95df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000096 [ 1415.900016][T17204] RAX: ffffffffffffffda RBX: 00007fde97de5fa0 RCX: 00007fde97b8f749 [ 1415.908552][T17204] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000ffd000 [ 1415.916621][T17204] RBP: 00007fde97c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1415.924705][T17204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1415.932955][T17204] R13: 00007fde97de6038 R14: 00007fde97de5fa0 R15: 00007ffc251ffc68 [ 1415.940987][T17204] [ 1415.944032][T17204] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1415.951331][T17204] CPU: 0 UID: 0 PID: 17204 Comm: syz.5.2871 Not tainted syzkaller #0 PREEMPT(full) [ 1415.960788][T17204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1415.970955][T17204] Call Trace: [ 1415.974264][T17204] [ 1415.977219][T17204] dump_stack_lvl+0x99/0x250 [ 1415.981945][T17204] ? __asan_memcpy+0x40/0x70 [ 1415.986555][T17204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1415.991778][T17204] ? __pfx__printk+0x10/0x10 [ 1415.996422][T17204] vpanic+0x237/0x6d0 [ 1416.000408][T17204] ? __pfx_vpanic+0x10/0x10 [ 1416.004909][T17204] ? is_bpf_text_address+0x292/0x2b0 [ 1416.010307][T17204] ? is_bpf_text_address+0x26/0x2b0 [ 1416.015516][T17204] panic+0xb9/0xc0 [ 1416.019257][T17204] ? __pfx_panic+0x10/0x10 [ 1416.023712][T17204] __warn+0x318/0x4d0 [ 1416.027712][T17204] ? vma_modify+0x1614/0x1a70 [ 1416.032512][T17204] ? vma_modify+0x1614/0x1a70 [ 1416.037217][T17204] report_bug+0x2be/0x4f0 [ 1416.041656][T17204] ? vma_modify+0x1614/0x1a70 [ 1416.046350][T17204] ? vma_modify+0x1614/0x1a70 [ 1416.051038][T17204] ? vma_modify+0x1616/0x1a70 [ 1416.055726][T17204] handle_bug+0x84/0x160 [ 1416.059973][T17204] exc_invalid_op+0x1a/0x50 [ 1416.064480][T17204] asm_exc_invalid_op+0x1a/0x20 [ 1416.069363][T17204] RIP: 0010:vma_modify+0x1614/0x1a70 [ 1416.074657][T17204] Code: 0b 90 e9 c4 ec ff ff e8 ea e5 a8 ff 90 0f 0b 90 e9 04 ec ff ff e8 dc e5 a8 ff 4c 89 f7 48 c7 c6 e0 e5 76 8b e8 5d 85 f2 ff 90 <0f> 0b 90 e9 6a ec ff ff e8 bf e5 a8 ff e9 59 ed ff ff e8 b5 e5 a8 [ 1416.094644][T17204] RSP: 0018:ffffc9000dce7ae8 EFLAGS: 00010282 [ 1416.100719][T17204] RAX: ffffffff8b54046d RBX: 0000200000ffe000 RCX: 0000000000080000 [ 1416.108699][T17204] RDX: ffffc9000cd6a000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1416.116678][T17204] RBP: ffffc9000dce7c20 R08: ffffc9000dce7667 R09: 1ffff92001b9cecc [ 1416.124841][T17204] R10: dffffc0000000000 R11: fffff52001b9cecd R12: 0000200000ffe000 [ 1416.132971][T17204] R13: dffffc0000000000 R14: ffffc9000dce7c00 R15: 1ffff92001b9cf84 [ 1416.140980][T17204] ? mt_dump_node+0x18cd/0x26b0 [ 1416.145881][T17204] ? vma_modify+0x1613/0x1a70 [ 1416.150609][T17204] vma_modify_flags+0x1e8/0x230 [ 1416.155683][T17204] ? __pfx_vma_modify_flags+0x10/0x10 [ 1416.161112][T17204] mlock_fixup+0x24b/0x3b0 [ 1416.165570][T17204] apply_vma_lock_flags+0x285/0x390 [ 1416.170809][T17204] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 1416.176593][T17204] __se_sys_munlock+0x150/0x270 [ 1416.181479][T17204] do_syscall_64+0xfa/0xfa0 [ 1416.186456][T17204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.192572][T17204] ? clear_bhb_loop+0x60/0xb0 [ 1416.197329][T17204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.203413][T17204] RIP: 0033:0x7fde97b8f749 [ 1416.207841][T17204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1416.227746][T17204] RSP: 002b:00007fde95df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000096 [ 1416.236523][T17204] RAX: ffffffffffffffda RBX: 00007fde97de5fa0 RCX: 00007fde97b8f749 [ 1416.244563][T17204] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000ffd000 [ 1416.252565][T17204] RBP: 00007fde97c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1416.260550][T17204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1416.268643][T17204] R13: 00007fde97de6038 R14: 00007fde97de5fa0 R15: 00007ffc251ffc68 [ 1416.276773][T17204] [ 1416.280145][T17204] Kernel Offset: disabled [ 1416.284475][T17204] Rebooting in 86400 seconds..