last executing test programs: 48.218790947s ago: executing program 1 (id=2697): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) bpf$ENABLE_STATS(0x20, &(0x7f0000000280), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000040)={&(0x7f00000002c0)=""/159, 0x9f}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0x100a, 0x0, 0x0}, 0x0) 47.274726121s ago: executing program 1 (id=2704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000800000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newtfilter={0x30, 0x2c, 0xd2b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040084) 36.102538623s ago: executing program 2 (id=2708): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0xfe, 0x7ffc1ffb}]}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) pread64(r1, &(0x7f00000002c0)=""/181, 0xb5, 0x5) 36.056810314s ago: executing program 3 (id=2710): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000020c0)=@newtaction={0x88c, 0x30, 0xffff, 0x4, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x8, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x22, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400, 0x8, 0x0, 0x0, 0x0, 0x81b, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0xffffffff, 0x0, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xf853, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x2, 0x0, 0x100, 0xfffffffc, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x55, 0xfff, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffff9c, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x100000]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x7, 0xfffeffff, 0x100, 0x8, {0x4, 0x0, 0x400, 0x3200, 0x7fff, 0x7}, {0x7, 0x2, 0x5, 0x8, 0xd3, 0x766}, 0xfeea, 0x4, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0xc, 0x7ff, 0x9, 0x3, 0x80000000, 0x6, 0x3, 0x2, 0x1, 0x80000000, 0x0, 0x4, 0x80, 0x5, 0x3, 0x5, 0x9d, 0xfffffffe, 0x2, 0x8c, 0x80000001, 0x6, 0x7f, 0x2, 0x0, 0x5, 0x76, 0x3, 0x2, 0x7, 0x800, 0x0, 0x10000, 0xf0, 0x8, 0xb8, 0x151, 0xfff, 0x6, 0x9, 0x401, 0xfffffff8, 0x5, 0x8, 0xfffffffa, 0x4, 0x7, 0x8000, 0xf9, 0xfff, 0x7fff, 0x1, 0x0, 0xff, 0x5c0078f0, 0x7f, 0x0, 0x2, 0xfffffffa, 0x8, 0x7, 0x7, 0x7, 0x6, 0x80000000, 0x5, 0x4, 0x3, 0x6, 0xffffffff, 0x10000, 0x5, 0x6, 0x3, 0x2, 0x1, 0x8, 0x3, 0x74, 0x4, 0xfee, 0x401, 0x5, 0x5, 0xfff, 0x8f4, 0x3, 0x8000, 0x2, 0x6, 0x1, 0x1ff, 0x9, 0x1, 0x6, 0x9, 0xc, 0x0, 0x80, 0xe, 0xd, 0x6, 0x8, 0xfffffffe, 0xef, 0x2, 0x3, 0x1f, 0x7, 0x9, 0x1ec0, 0x2, 0xfffff001, 0x2, 0x0, 0x10001, 0xd5b, 0x5, 0x0, 0x1, 0x7, 0x3, 0x7, 0x8, 0x1, 0x4, 0x8, 0x101, 0x200, 0x6, 0x80000000, 0x5, 0x2, 0x2, 0x7fff, 0x7, 0x6, 0x3ff, 0x7, 0xffff935a, 0x8, 0xf64, 0x8, 0x4, 0x80000001, 0x3, 0xfe000000, 0x3, 0x2, 0x8, 0xba, 0x400000, 0x3, 0x8, 0x7, 0x5, 0x2, 0x400, 0x7, 0x1ff, 0x1, 0x746, 0x2, 0x6, 0x0, 0x1, 0x6, 0x53a, 0x5, 0x8, 0x6, 0x8, 0x3, 0x7ff, 0x6, 0xf, 0xa, 0x3, 0xfffff000, 0xdae4, 0x5, 0xa, 0x5, 0x7, 0x2, 0x1000, 0xe, 0x4, 0x0, 0x6, 0x1, 0x0, 0x9, 0x5, 0x10000, 0x3, 0x2, 0x7ff, 0x4, 0x5, 0x4, 0x4, 0x0, 0x80000000, 0x80, 0x5a78, 0xf96, 0x7, 0x6, 0x80, 0xc, 0xfffffff9, 0x7, 0x4, 0x5, 0x4, 0x9, 0x2, 0xffff4fba, 0x5, 0x3, 0x800, 0x93, 0x3, 0x3000000, 0x8, 0x80000001, 0x6, 0x6, 0xde4a, 0x9, 0xd, 0x10001, 0x4c, 0x8, 0xf0, 0x0, 0x5, 0x9, 0x4, 0x2, 0x8, 0x3, 0x2, 0x5, 0x9, 0x2, 0x4, 0x9, 0x7, 0x5, 0x10001, 0x8, 0x9]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 35.990234955s ago: executing program 2 (id=2711): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001140)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0x90, 0x2, [@TCA_U32_SEL={0x84, 0x5, {0x0, 0x3, 0x7, 0x4, 0x7, 0x81, 0x7, 0xec8, [{0x213, 0x1000, 0x2, 0xfff}, {0x5, 0x7ff, 0x6, 0xdc1}, {0x7, 0x8000, 0x3, 0x5948}, {0x2, 0x5, 0xbc7, 0x5}, {0xb5b6, 0xe4, 0x5, 0x4}, {0x4, 0xfffffff8, 0x8, 0x2a51b18c}, {0x8, 0x20d, 0xc, 0x10000}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x3}}]}}]}, 0xbc}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 35.913292386s ago: executing program 3 (id=2713): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r3], 0x4c}}, 0x0) 35.869540647s ago: executing program 1 (id=2714): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) 35.814400208s ago: executing program 0 (id=2715): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) 35.142225688s ago: executing program 2 (id=2716): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 35.090088409s ago: executing program 0 (id=2718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 35.02182776s ago: executing program 3 (id=2719): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xa, 0xffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x3, 0x0, 0x0, 0x8000002, 0x6, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x10000000, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x401, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x562e, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0xfffffffd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0xb2e, 0x1, 0xfffffffe, 0x6, 0x0, 0x2, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x4006, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x20000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x7, 0x400000b2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0xffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x800, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x800001, 0x2, 0x5aa, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x3, 0x0, 0x0, 0x2, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 34.991493251s ago: executing program 0 (id=2720): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x9}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x6, 0xfff1}, {0x0, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 34.946347362s ago: executing program 2 (id=2721): socket$tipc(0x1e, 0x5, 0x0) epoll_create1(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x1000080002, 0x100000000000088) socket$inet6(0xa, 0x802, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x40000000015, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000c50900001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 34.890389972s ago: executing program 1 (id=2722): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) 34.889746362s ago: executing program 0 (id=2723): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 34.883514732s ago: executing program 3 (id=2724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000800000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newtfilter={0x30, 0x2c, 0xd2b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040084) 34.830303133s ago: executing program 2 (id=2725): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r4, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 34.810672924s ago: executing program 0 (id=2726): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001140)=@newtfilter={0xbc, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0x90, 0x2, [@TCA_U32_SEL={0x84, 0x5, {0x0, 0x3, 0x7, 0x4, 0x7, 0x81, 0x7, 0xec8, [{0x213, 0x1000, 0x2, 0xfff}, {0x5, 0x7ff, 0x6, 0xdc1}, {0x7, 0x8000, 0x3, 0x5948}, {0x2, 0x5, 0xbc7, 0x5}, {0xb5b6, 0xe4, 0x5, 0x4}, {0x4, 0xfffffff8, 0x8, 0x2a51b18c}, {0x8, 0x20d, 0xc, 0x10000}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xffff, 0x3}}]}}]}, 0xbc}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23.789497333s ago: executing program 0 (id=2737): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034024000007080004400000000f08000140130000002c0005800c0001007061796c6f6164001c000280080004400000001c08000340000000b908000240000000000900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000006000000000084e27fc70000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x10) r6 = io_uring_setup(0x7c41, &(0x7f0000000300)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, &(0x7f0000000080)={0x0}, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a1ab000000000000000032"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) socketpair$unix(0x1, 0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './bus\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x73, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000400)='veth0_vlan\x00') r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12, 0x0, 0x3}, 0x18) 23.738555374s ago: executing program 3 (id=2728): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r1, r1, 0x21) wait4(r1, 0x0, 0x40000000, 0x0) 23.728502414s ago: executing program 1 (id=2729): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) 23.718747304s ago: executing program 2 (id=2730): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500840354c119979093000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 23.561733856s ago: executing program 3 (id=2731): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x800}]}}]}, 0x38}}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x5, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000081}, 0x24000804) 23.560586386s ago: executing program 1 (id=2732): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 12.436023708s ago: executing program 4 (id=2733): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0xe5, 0xe0, 0xfe, 0x0}) 12.32236874s ago: executing program 4 (id=2734): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x9}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x6, 0xfff1}, {0x0, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 8.298323482s ago: executing program 32 (id=2737): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034024000007080004400000000f08000140130000002c0005800c0001007061796c6f6164001c000280080004400000001c08000340000000b908000240000000000900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000006000000000084e27fc70000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r5}, 0x10) r6 = io_uring_setup(0x7c41, &(0x7f0000000300)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, &(0x7f0000000080)={0x0}, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a1ab000000000000000032"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) socketpair$unix(0x1, 0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './bus\x00'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x73, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000400)='veth0_vlan\x00') r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12, 0x0, 0x3}, 0x18) 8.265029172s ago: executing program 33 (id=2732): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 8.198794593s ago: executing program 34 (id=2730): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500840354c119979093000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 8.118267085s ago: executing program 35 (id=2731): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x800}]}}]}, 0x38}}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x5, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000081}, 0x24000804) 1.138172242s ago: executing program 4 (id=2740): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1}}}}}}}, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x36) 698.227359ms ago: executing program 4 (id=2741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000800000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newtfilter={0x30, 0x2c, 0xd2b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040084) 308.487415ms ago: executing program 4 (id=2742): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r4, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 0s ago: executing program 4 (id=2743): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x48) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) kernel console output (not intermixed with test programs): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.3.1193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35a9a8 code=0x7ffc0000 [ 192.983898][ T27] audit: type=1326 audit(192.830:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.3.1193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35a9a8 code=0x7ffc0000 [ 193.010629][ T27] audit: type=1326 audit(192.830:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.3.1193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=273 compat=0 ip=0xffff9a35a9a8 code=0x7ffc0000 [ 193.040360][ T27] audit: type=1326 audit(192.830:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.3.1193" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35a9a8 code=0x7ffc0000 [ 193.155288][ T7660] sch_fq: defrate 4294967295 ignored. [ 193.448289][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop0p151, 10) failed: No such file or directory [ 193.487027][ T4289] udevd[4289]: inotify_add_watch(7, /dev/loop0p156, 10) failed: No such file or directory [ 193.510415][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop0p157, 10) failed: No such file or directory [ 193.526062][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop0p152, 10) failed: No such file or directory [ 193.546462][ T4459] udevd[4459]: inotify_add_watch(7, /dev/loop0p154, 10) failed: No such file or directory [ 193.558732][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop0p155, 10) failed: No such file or directory [ 193.578457][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop0p158, 10) failed: No such file or directory [ 193.606823][ T7692] sch_fq: defrate 4294967295 ignored. [ 193.672197][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop0p160, 10) failed: No such file or directory [ 193.719116][ T4458] udevd[4458]: inotify_add_watch(7, /dev/loop0p162, 10) failed: No such file or directory [ 193.753321][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop0p161, 10) failed: No such file or directory [ 193.890248][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1217'. [ 193.892747][ T7706] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1217'. [ 193.905565][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1217'. [ 194.553008][ T7724] sch_fq: defrate 4294967295 ignored. [ 194.824594][ T7728] loop4: detected capacity change from 0 to 512 [ 194.826844][ T7728] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.828655][ T7728] EXT4-fs: Ignoring removed mblk_io_submit option [ 194.883003][ T7728] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 194.885434][ T7728] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 194.914021][ T7728] EXT4-fs (loop4): 1 truncate cleaned up [ 194.915650][ T7728] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 194.948555][ T7728] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 195.027372][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 195.248905][ T7753] sch_fq: defrate 4294967295 ignored. [ 195.424317][ T7767] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1241'. [ 195.427018][ T7764] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1241'. [ 195.993291][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'. [ 196.007293][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'. [ 197.051415][ T7791] sch_fq: defrate 4294967295 ignored. [ 197.200951][ T7805] loop3: detected capacity change from 0 to 512 [ 197.263456][ T7804] __nla_validate_parse: 1 callbacks suppressed [ 197.263469][ T7804] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1254'. [ 197.460691][ T7805] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 197.667317][ T7832] sch_fq: defrate 4294967295 ignored. [ 197.763419][ T7835] Falling back ldisc for ttyS3. [ 197.898900][ T7840] loop3: detected capacity change from 0 to 2048 [ 197.984745][ T7840] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 198.054066][ T4296] EXT4-fs (loop3): unmounting filesystem. [ 198.458550][ T4459] udevd[4459]: inotify_add_watch(7, /dev/loop3p19, 10) failed: No such file or directory [ 198.463068][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop3p22, 10) failed: No such file or directory [ 198.466862][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop3p20, 10) failed: No such file or directory [ 198.490883][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop3p25, 10) failed: No such file or directory [ 198.506889][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop3p24, 10) failed: No such file or directory [ 198.509702][ T7868] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1271'. [ 198.534040][ T7862] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1271'. [ 198.538464][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop3p26, 10) failed: No such file or directory [ 198.559121][ T7862] loop3: detected capacity change from 0 to 164 [ 198.574551][ T7871] sch_fq: defrate 4294967295 ignored. [ 198.583867][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop3p27, 10) failed: No such file or directory [ 198.595518][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop3p28, 10) failed: No such file or directory [ 198.603557][ T7862] bio_check_eod: 2269 callbacks suppressed [ 198.603570][ T7862] syz.3.1271: attempt to access beyond end of device [ 198.603570][ T7862] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 198.608779][ T7862] syz.3.1271: attempt to access beyond end of device [ 198.608779][ T7862] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 198.623877][ T4458] udevd[4458]: inotify_add_watch(7, /dev/loop3p23, 10) failed: No such file or directory [ 198.643315][ T4466] udevd[4466]: inotify_add_watch(7, /dev/loop3p29, 10) failed: No such file or directory [ 199.293441][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1280'. [ 199.299365][ T7885] device hsr_slave_0 left promiscuous mode [ 199.363944][ T7885] device hsr_slave_1 left promiscuous mode [ 199.542847][ T7895] binfmt_misc: register: failed to install interpreter file ./file0 [ 199.677724][ T7900] sch_fq: defrate 4294967295 ignored. [ 199.868491][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 199.868503][ T27] audit: type=1326 audit(199.850:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7905 comm="syz.4.1288" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa095a9a8 code=0x7ffc0000 [ 201.161879][ T7936] ALSA: seq fatal error: cannot create timer (-22) [ 201.334024][ T7938] loop3: detected capacity change from 0 to 2048 [ 201.370893][ T7938] loop3: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 201.496038][ T7945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1306'. [ 201.567598][ T7945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1306'. [ 201.570266][ T7945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1306'. [ 201.575101][ T7945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1306'. [ 201.578554][ T7945] netlink: 'syz.0.1306': attribute type 6 has an invalid length. [ 202.304317][ T7974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1318'. [ 202.306823][ T7974] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1318'. [ 203.132246][ T7981] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1320'. [ 203.460267][ T7989] loop4: detected capacity change from 0 to 2048 [ 203.508718][ T7989] loop4: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 203.842016][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop3p170, 10) failed: No such file or directory [ 203.860773][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop3p167, 10) failed: No such file or directory [ 203.866905][ T4458] udevd[4458]: inotify_add_watch(7, /dev/loop3p165, 10) failed: No such file or directory [ 203.891065][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop3p163, 10) failed: No such file or directory [ 203.911095][ T4459] udevd[4459]: inotify_add_watch(7, /dev/loop3p169, 10) failed: No such file or directory [ 203.919979][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1332'. [ 203.920637][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop3p166, 10) failed: No such file or directory [ 203.929922][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop3p164, 10) failed: No such file or directory [ 203.937523][ T8009] netlink: 13 bytes leftover after parsing attributes in process `syz.3.1317'. [ 203.941440][ T8008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1332'. [ 203.948006][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop3p168, 10) failed: No such file or directory [ 203.950360][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1332'. [ 203.959730][ T8008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1332'. [ 203.966623][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop3p173, 10) failed: No such file or directory [ 203.969802][ T8008] netlink: 'syz.2.1332': attribute type 6 has an invalid length. [ 203.991046][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop3p172, 10) failed: No such file or directory [ 204.327468][ T27] audit: type=1326 audit(204.310:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 204.333836][ T27] audit: type=1326 audit(204.310:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=26 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 204.339630][ T27] audit: type=1326 audit(204.310:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.0.1340" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 204.578433][ T3912] loop4: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 204.894777][ T8042] loop2: detected capacity change from 0 to 2048 [ 204.979260][ T8042] loop2: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 205.139897][ T8047] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 208.105941][ T8102] loop4: detected capacity change from 0 to 1024 [ 208.108251][ T8102] EXT4-fs: Ignoring removed nobh option [ 208.109802][ T8102] EXT4-fs: Ignoring removed bh option [ 208.993597][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop3p219, 10) failed: No such file or directory [ 208.997862][ T8102] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 209.023578][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop3p223, 10) failed: No such file or directory [ 209.065532][ T4289] udevd[4289]: inotify_add_watch(7, /dev/loop3p224, 10) failed: No such file or directory [ 209.107521][ T4466] udevd[4466]: inotify_add_watch(7, /dev/loop3p227, 10) failed: No such file or directory [ 209.110930][ T4459] udevd[4459]: inotify_add_watch(7, /dev/loop3p222, 10) failed: No such file or directory [ 209.123327][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop3p225, 10) failed: No such file or directory [ 209.129909][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop3p221, 10) failed: No such file or directory [ 209.147173][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop3p232, 10) failed: No such file or directory [ 209.150971][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop3p233, 10) failed: No such file or directory [ 209.156231][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop3p231, 10) failed: No such file or directory [ 209.188189][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 209.327295][ T8134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1380'. [ 209.331970][ T8135] netlink: 'syz.4.1382': attribute type 1 has an invalid length. [ 209.351870][ T8135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.380142][ T8135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.392289][ T8135] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 209.396520][ T8135] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 209.546319][ T27] audit: type=1326 audit(209.530:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.2.1385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 209.554276][ T27] audit: type=1326 audit(209.540:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.2.1385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 209.582423][ T27] audit: type=1326 audit(209.540:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.2.1385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 209.588568][ T27] audit: type=1326 audit(209.540:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.2.1385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 209.636527][ T27] audit: type=1326 audit(209.540:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.2.1385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 209.663854][ T27] audit: type=1326 audit(209.550:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.2.1385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 209.669869][ T27] audit: type=1326 audit(209.550:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.2.1385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 209.692035][ T27] audit: type=1326 audit(209.550:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.2.1385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 209.707158][ T27] audit: type=1326 audit(209.550:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.2.1385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 209.724118][ T27] audit: type=1326 audit(209.550:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.2.1385" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 210.977904][ T8178] netlink: 'syz.1.1396': attribute type 21 has an invalid length. [ 210.980185][ T8178] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1396'. [ 211.007313][ T8182] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1397'. [ 211.099975][ T8186] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1400'. [ 211.200054][ T8191] sch_fq: defrate 4294967295 ignored. [ 211.625176][ T8217] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1412'. [ 211.651530][ T8219] sch_fq: defrate 4294967295 ignored. [ 211.786973][ T8225] loop4: detected capacity change from 0 to 164 [ 211.797821][ T8225] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 211.813465][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1419'. [ 211.918325][ T8237] netlink: 'syz.0.1422': attribute type 1 has an invalid length. [ 211.961184][ T8235] loop2: detected capacity change from 0 to 512 [ 211.991952][ T8235] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 212.057756][ T8235] EXT4-fs (loop2): 1 truncate cleaned up [ 212.057794][ T8235] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 212.177834][ T8248] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1428'. [ 212.197015][ T4301] EXT4-fs (loop2): unmounting filesystem. [ 212.280367][ T8253] sch_fq: defrate 4294967295 ignored. [ 212.306629][ T8254] 9pnet: p9_errstr2errno: server reported unknown error Çpî‘AçÁ›¬ž; [ 212.469678][ T8267] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1436'. [ 212.571041][ T8270] loop2: detected capacity change from 0 to 512 [ 212.581461][ T8270] EXT4-fs: Ignoring removed orlov option [ 212.599894][ T8270] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 212.786794][ T8270] EXT4-fs (loop2): 1 orphan inode deleted [ 212.788443][ T8270] EXT4-fs (loop2): 1 truncate cleaned up [ 212.789907][ T8270] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 212.932317][ T8275] loop4: detected capacity change from 0 to 2048 [ 212.983655][ T8275] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 212.988213][ T8275] EXT4-fs error (device loop4): ext4_find_extent:936: inode #2: comm syz.4.1439: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 213.008278][ T8275] EXT4-fs (loop4): Remounting filesystem read-only [ 213.079874][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 213.201033][ T8290] sch_fq: defrate 4294967295 ignored. [ 213.809499][ T8315] sch_fq: defrate 4294967295 ignored. [ 213.967536][ T8322] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1457'. [ 214.837360][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 214.853808][ T8307] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1450'. [ 214.859213][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop3p249, 10) failed: No such file or directory [ 214.873211][ T8325] loop4: detected capacity change from 0 to 512 [ 214.880487][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 214.900612][ T8325] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1458: invalid indirect mapped block 256 (level 2) [ 214.903238][ T4289] udevd[4289]: inotify_add_watch(7, /dev/loop3p253, 10) failed: No such file or directory [ 214.915345][ T4466] udevd[4466]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 214.932743][ T8325] EXT4-fs (loop4): 2 truncates cleaned up [ 214.934290][ T8325] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 214.958079][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop3p254, 10) failed: No such file or directory [ 214.995816][ T4458] udevd[4458]: inotify_add_watch(7, /dev/loop3p255, 10) failed: No such file or directory [ 215.018237][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop3p252, 10) failed: No such file or directory [ 215.038301][ T4459] udevd[4459]: inotify_add_watch(7, /dev/loop3p251, 10) failed: No such file or directory [ 215.052372][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop3p250, 10) failed: No such file or directory [ 215.094291][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 215.398762][ T27] kauditd_printk_skb: 54 callbacks suppressed [ 215.398774][ T27] audit: type=1326 audit(215.380:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.0.1466" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 215.414438][ T27] audit: type=1326 audit(215.390:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.0.1466" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 215.431610][ T8350] sch_fq: defrate 4294967295 ignored. [ 215.434125][ T27] audit: type=1326 audit(215.390:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.0.1466" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 215.439920][ T27] audit: type=1326 audit(215.400:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.0.1466" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 215.462993][ T27] audit: type=1326 audit(215.400:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.0.1466" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 215.489181][ T27] audit: type=1326 audit(215.400:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.0.1466" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 215.507898][ T27] audit: type=1326 audit(215.400:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.0.1466" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 215.520863][ T27] audit: type=1326 audit(215.400:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.0.1466" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 215.535186][ T8352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1469'. [ 215.550066][ T27] audit: type=1326 audit(215.400:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.0.1466" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 215.568039][ T27] audit: type=1326 audit(215.400:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8347 comm="syz.0.1466" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 216.574708][ T8366] loop4: detected capacity change from 0 to 1024 [ 216.611512][ T8366] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.685683][ T8366] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 216.774060][ T8377] rdma_op 00000000ec5db408 conn xmit_rdma 0000000000000000 [ 216.796165][ T8379] netlink: 'syz.3.1477': attribute type 10 has an invalid length. [ 216.805794][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 216.863701][ T8379] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 216.893329][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1479'. [ 216.895961][ T8381] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1479'. [ 216.898253][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1479'. [ 216.923101][ T8381] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1479'. [ 216.927397][ T8381] netlink: 'syz.4.1479': attribute type 6 has an invalid length. [ 217.120179][ T8389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1483'. [ 217.156805][ T8389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1483'. [ 217.164675][ T8389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1483'. [ 218.438982][ T8397] Invalid ELF header magic: != ELF [ 220.800858][ T8431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1499'. [ 220.817483][ T8433] sch_fq: defrate 4294967295 ignored. [ 221.487830][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 221.503828][ T4458] udevd[4458]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 221.508955][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 221.520530][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 221.531614][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 221.586535][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop2p18, 10) failed: No such file or directory [ 221.656599][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 221.760848][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop2p12, 10) failed: No such file or directory [ 221.783405][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop2p11, 10) failed: No such file or directory [ 221.813767][ T4466] udevd[4466]: inotify_add_watch(7, /dev/loop2p13, 10) failed: No such file or directory [ 223.195497][ T8470] sch_fq: defrate 4294967295 ignored. [ 223.289874][ T8472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1512'. [ 223.940363][ T8500] sch_fq: defrate 4294967295 ignored. [ 224.907948][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1524'. [ 224.930884][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1525'. [ 225.334988][ T4301] EXT4-fs (loop2): unmounting filesystem. [ 225.499501][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 225.499515][ T27] audit: type=1326 audit(225.480:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 225.531964][ T8525] sch_fq: defrate 4294967295 ignored. [ 225.533666][ T27] audit: type=1326 audit(225.480:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 225.539350][ T27] audit: type=1326 audit(225.480:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 225.616918][ T8534] loop3: detected capacity change from 0 to 128 [ 225.619574][ T27] audit: type=1326 audit(225.480:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 225.638403][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1533'. [ 225.694680][ T27] audit: type=1326 audit(225.480:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 225.700347][ T27] audit: type=1326 audit(225.480:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 225.910420][ T27] audit: type=1326 audit(225.480:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.1.1532" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 225.910895][ T8534] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 226.593806][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop2p204, 10) failed: No such file or directory [ 226.634888][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop2p178, 10) failed: No such file or directory [ 226.651058][ T4458] udevd[4458]: inotify_add_watch(7, /dev/loop2p173, 10) failed: No such file or directory [ 226.663187][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop2p176, 10) failed: No such file or directory [ 226.666860][ T4466] udevd[4466]: inotify_add_watch(7, /dev/loop2p182, 10) failed: No such file or directory [ 226.681515][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop2p184, 10) failed: No such file or directory [ 226.699835][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop2p183, 10) failed: No such file or directory [ 226.722565][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop2p203, 10) failed: No such file or directory [ 226.729275][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop2p189, 10) failed: No such file or directory [ 226.741577][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop2p205, 10) failed: No such file or directory [ 226.756645][ T4296] EXT4-fs (loop3): unmounting filesystem. [ 226.819939][ T8557] sch_fq: defrate 4294967295 ignored. [ 227.910753][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1551'. [ 229.206084][ T8604] sch_fq: defrate 4294967295 ignored. [ 229.210701][ T27] audit: type=1326 audit(229.190:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.2.1558" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 229.227505][ T27] audit: type=1326 audit(229.210:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.2.1558" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=430 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 229.234423][ T27] audit: type=1326 audit(229.220:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8601 comm="syz.2.1558" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 229.268715][ T8600] loop4: detected capacity change from 0 to 128 [ 229.513285][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 229.576448][ T8625] device syzkaller1 entered promiscuous mode [ 230.516059][ T8636] sch_fq: defrate 4294967295 ignored. [ 231.498492][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 231.498506][ T27] audit: type=1326 audit(231.480:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.4.1584" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa095a9a8 code=0x7ffc0000 [ 231.526400][ T27] audit: type=1326 audit(231.500:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.4.1584" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=148 compat=0 ip=0xffffa095a9a8 code=0x7ffc0000 [ 231.562717][ T27] audit: type=1326 audit(231.500:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.4.1584" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa095a9a8 code=0x7ffc0000 [ 231.618660][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop2p105, 10) failed: No such file or directory [ 231.660977][ T8679] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 231.674660][ T4466] udevd[4466]: inotify_add_watch(7, /dev/loop2p117, 10) failed: No such file or directory [ 231.690362][ T4289] udevd[4289]: inotify_add_watch(7, /dev/loop2p107, 10) failed: No such file or directory [ 231.693728][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop2p108, 10) failed: No such file or directory [ 231.697281][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop2p109, 10) failed: No such file or directory [ 231.707160][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop2p110, 10) failed: No such file or directory [ 231.744163][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop2p113, 10) failed: No such file or directory [ 231.763745][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop2p112, 10) failed: No such file or directory [ 231.774107][ T8682] sch_fq: defrate 4294967295 ignored. [ 232.497424][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop2p116, 10) failed: No such file or directory [ 232.510815][ T4459] udevd[4459]: inotify_add_watch(7, /dev/loop2p114, 10) failed: No such file or directory [ 232.892324][ T8709] loop4: detected capacity change from 0 to 256 [ 233.021836][ T8717] sch_fq: defrate 4294967295 ignored. [ 234.421586][ T8752] loop4: detected capacity change from 0 to 512 [ 234.427208][ T8751] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 234.429856][ T8753] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 234.461159][ T8752] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 234.490431][ T8752] EXT4-fs (loop4): 1 truncate cleaned up [ 234.501828][ T8752] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 234.646996][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 237.103315][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop1p53, 10) failed: No such file or directory [ 237.117533][ T4458] udevd[4458]: inotify_add_watch(7, /dev/loop1p54, 10) failed: No such file or directory [ 237.133216][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop1p55, 10) failed: No such file or directory [ 237.146946][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop1p56, 10) failed: No such file or directory [ 237.151597][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop1p57, 10) failed: No such file or directory [ 237.157040][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop1p59, 10) failed: No such file or directory [ 237.161591][ T4289] udevd[4289]: inotify_add_watch(7, /dev/loop1p60, 10) failed: No such file or directory [ 237.166449][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop1p61, 10) failed: No such file or directory [ 237.170751][ T4459] udevd[4459]: inotify_add_watch(7, /dev/loop1p58, 10) failed: No such file or directory [ 237.172818][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop1p62, 10) failed: No such file or directory [ 237.781151][ T8835] netlink: 'syz.1.1647': attribute type 1 has an invalid length. [ 237.798702][ T8835] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1647'. [ 241.288354][ T8924] binder: 8914:8924 ioctl c0306201 0 returned -14 [ 241.346544][ T8934] sch_fq: defrate 4294967295 ignored. [ 241.826749][ T8943] hub 2-0:1.0: USB hub found [ 241.828874][ T8943] hub 2-0:1.0: 8 ports detected [ 243.598536][ T27] audit: type=1326 audit(243.580:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.4.1689" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa095a9a8 code=0x0 [ 244.343664][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 244.412283][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 244.451764][ T4459] udevd[4459]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 244.478284][ T4458] udevd[4458]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 244.525387][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop1p8, 10) failed: No such file or directory [ 244.528428][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 244.544497][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 244.559663][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 244.559929][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 244.602115][ T4289] udevd[4289]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 244.618386][ T8962] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1691'. [ 244.718256][ T8966] netlink: 'syz.1.1697': attribute type 3 has an invalid length. [ 244.907500][ T8948] fido_id[8948]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 245.524862][ T8992] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.587797][ T27] audit: type=1326 audit(245.570:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 245.597112][ T27] audit: type=1326 audit(245.580:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 245.947560][ T27] audit: type=1326 audit(245.580:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.1.1708" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 246.186746][ T9003] hub 2-0:1.0: USB hub found [ 246.189012][ T9003] hub 2-0:1.0: 8 ports detected [ 248.661625][ T9021] loop4: detected capacity change from 0 to 512 [ 248.720406][ T9021] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 248.802456][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.846013][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 248.908481][ T9040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1725'. [ 248.916264][ T9040] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1725'. [ 248.966536][ T9039] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1723'. [ 249.503706][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop1p225, 10) failed: No such file or directory [ 249.902153][ T9056] hub 2-0:1.0: USB hub found [ 249.904114][ T9056] hub 2-0:1.0: 8 ports detected [ 250.594913][ T4459] udevd[4459]: inotify_add_watch(7, /dev/loop1p226, 10) failed: No such file or directory [ 251.597087][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop1p230, 10) failed: No such file or directory [ 251.605819][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop1p233, 10) failed: No such file or directory [ 251.612930][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop1p227, 10) failed: No such file or directory [ 251.624643][ T4466] udevd[4466]: inotify_add_watch(7, /dev/loop1p231, 10) failed: No such file or directory [ 251.901011][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop1p232, 10) failed: No such file or directory [ 252.114623][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop1p238, 10) failed: No such file or directory [ 252.128455][ T4459] udevd[4459]: inotify_add_watch(7, /dev/loop1p237, 10) failed: No such file or directory [ 252.138639][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop1p240, 10) failed: No such file or directory [ 252.647805][ T9087] netlink: 'syz.2.1742': attribute type 4 has an invalid length. [ 252.671190][ T9087] netlink: 'syz.2.1742': attribute type 4 has an invalid length. [ 252.676424][ T9090] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 253.562741][ T9119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1754'. [ 253.565124][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1754'. [ 253.777198][ T9123] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1756'. [ 253.784211][ T9128] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 253.965474][ T27] audit: type=1326 audit(253.950:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.0.1759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 253.986105][ T27] audit: type=1326 audit(253.970:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.0.1759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 254.002436][ T27] audit: type=1326 audit(253.980:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.0.1759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 254.029957][ T27] audit: type=1326 audit(253.980:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.0.1759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 254.050813][ T9135] netlink: 'syz.4.1760': attribute type 1 has an invalid length. [ 254.060337][ T27] audit: type=1326 audit(253.980:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.0.1759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 254.080571][ T27] audit: type=1326 audit(253.980:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.0.1759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 254.099419][ T27] audit: type=1326 audit(253.990:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.0.1759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 254.121867][ T27] audit: type=1326 audit(253.990:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.0.1759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=428 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 254.140695][ T27] audit: type=1326 audit(253.990:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.0.1759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 254.182625][ T27] audit: type=1326 audit(253.990:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9132 comm="syz.0.1759" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=429 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 254.527761][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop1p25, 10) failed: No such file or directory [ 254.555959][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop1p27, 10) failed: No such file or directory [ 254.587596][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop1p24, 10) failed: No such file or directory [ 254.608732][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop1p29, 10) failed: No such file or directory [ 254.614226][ T4289] udevd[4289]: inotify_add_watch(7, /dev/loop1p28, 10) failed: No such file or directory [ 254.615576][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop1p35, 10) failed: No such file or directory [ 254.616711][ T4466] udevd[4466]: inotify_add_watch(7, /dev/loop1p31, 10) failed: No such file or directory [ 254.626006][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 254.628514][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop1p34, 10) failed: No such file or directory [ 254.663424][ T4459] udevd[4459]: inotify_add_watch(7, /dev/loop1p26, 10) failed: No such file or directory [ 255.593220][ T4343] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 255.773705][ T4343] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 255.775903][ T4343] usb 1-1: config 0 has no interface number 0 [ 255.777475][ T4343] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 255.779782][ T4343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.809654][ T4343] usb 1-1: config 0 descriptor?? [ 255.837421][ T4343] gspca_main: spca561-2.14.0 probing abcd:cdee [ 256.019697][ T9181] batman_adv: batadv0: Adding interface: vxlan0 [ 256.021487][ T9181] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.059071][ T9181] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 256.133828][ T4343] spca561: probe of 1-1:0.156 failed with error -22 [ 256.138172][ T4343] usb 1-1: MIDIStreaming interface descriptor not found [ 256.192006][ T4343] usb 1-1: USB disconnect, device number 4 [ 256.445027][ T9200] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1788'. [ 257.204469][ T9221] xt_hashlimit: max too large, truncated to 1048576 [ 257.206662][ T9221] No such timeout policy "syz1" [ 258.346024][ T9237] loop4: detected capacity change from 0 to 1024 [ 258.348201][ T9237] EXT4-fs: Ignoring removed orlov option [ 258.888984][ T9237] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 259.023197][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 259.536923][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop1p186, 10) failed: No such file or directory [ 259.538569][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop1p184, 10) failed: No such file or directory [ 259.552279][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop1p189, 10) failed: No such file or directory [ 259.561376][ T4459] udevd[4459]: inotify_add_watch(7, /dev/loop1p187, 10) failed: No such file or directory [ 259.574732][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop1p182, 10) failed: No such file or directory [ 259.576319][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop1p188, 10) failed: No such file or directory [ 259.591226][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop1p190, 10) failed: No such file or directory [ 259.609878][ T4458] udevd[4458]: inotify_add_watch(7, /dev/loop1p194, 10) failed: No such file or directory [ 259.619784][ T4466] udevd[4466]: inotify_add_watch(7, /dev/loop1p191, 10) failed: No such file or directory [ 259.639298][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop1p196, 10) failed: No such file or directory [ 259.729663][ T9274] device bond2 entered promiscuous mode [ 259.731378][ T9274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.792832][ T9279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1821'. [ 260.814835][ T9286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.817313][ T9286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.837913][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 260.837924][ T27] audit: type=1326 audit(261.814:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.1822" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 260.845692][ T9286] batman_adv: batadv0: Adding interface: vxlan0 [ 260.847466][ T9286] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 260.867101][ T27] audit: type=1326 audit(261.824:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.1822" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 260.881837][ T9286] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 260.898420][ T27] audit: type=1326 audit(261.824:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.1822" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 260.916787][ T27] audit: type=1326 audit(261.824:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.1822" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 260.946689][ T27] audit: type=1326 audit(261.824:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.1822" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 260.976463][ T27] audit: type=1326 audit(261.824:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.1822" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 261.001948][ T27] audit: type=1326 audit(261.824:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.1822" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 261.037233][ T27] audit: type=1326 audit(261.834:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.1822" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 261.056965][ T27] audit: type=1326 audit(261.834:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.1822" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 261.081922][ T27] audit: type=1326 audit(261.834:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.1822" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 261.105888][ T9303] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1829'. [ 262.689441][ T9324] loop4: detected capacity change from 0 to 2048 [ 262.891510][ T9324] loop4: p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p2 [ 263.449076][ T9342] hub 9-0:1.0: USB hub found [ 263.517867][ T9342] hub 9-0:1.0: 8 ports detected [ 263.570206][ T4456] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 263.691456][ T9344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.701966][ T9344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.721089][ T9344] batman_adv: batadv0: Adding interface: vxlan0 [ 263.726463][ T9344] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 263.742303][ T9344] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 263.880155][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1850'. [ 263.888913][ T9348] IPVS: Error joining to the multicast group [ 263.981461][ T9350] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1847'. [ 264.237170][ T9370] Invalid ELF header magic: != ELF [ 264.450802][ T9379] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1863'. [ 264.460176][ T9375] hub 9-0:1.0: USB hub found [ 264.467755][ T9375] hub 9-0:1.0: 8 ports detected [ 264.546119][ T4466] udevd[4466]: inotify_add_watch(7, /dev/loop4p71, 10) failed: No such file or directory [ 264.590174][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop4p72, 10) failed: No such file or directory [ 264.611385][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop4p73, 10) failed: No such file or directory [ 264.620651][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop4p79, 10) failed: No such file or directory [ 264.624059][ T4459] udevd[4459]: inotify_add_watch(7, /dev/loop4p78, 10) failed: No such file or directory [ 264.688639][ T4289] udevd[4289]: inotify_add_watch(7, /dev/loop4p80, 10) failed: No such file or directory [ 264.692914][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop4p81, 10) failed: No such file or directory [ 264.712493][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop4p75, 10) failed: No such file or directory [ 264.723836][ T4459] udevd[4459]: inotify_add_watch(7, /dev/loop4p84, 10) failed: No such file or directory [ 264.736215][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop4p82, 10) failed: No such file or directory [ 264.876807][ T9397] device syzkaller0 entered promiscuous mode [ 265.320210][ T9417] hub 9-0:1.0: USB hub found [ 265.321722][ T9417] hub 9-0:1.0: 8 ports detected [ 265.458148][ T9421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1881'. [ 269.553690][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop1p193, 10) failed: No such file or directory [ 269.558178][ T4289] udevd[4289]: inotify_add_watch(7, /dev/loop1p189, 10) failed: No such file or directory [ 269.565803][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop1p191, 10) failed: No such file or directory [ 269.570214][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop1p192, 10) failed: No such file or directory [ 269.574422][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop1p198, 10) failed: No such file or directory [ 269.578933][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop1p194, 10) failed: No such file or directory [ 269.584751][ T4458] udevd[4458]: inotify_add_watch(7, /dev/loop1p182, 10) failed: No such file or directory [ 269.590895][ T4289] udevd[4289]: inotify_add_watch(7, /dev/loop1p199, 10) failed: No such file or directory [ 269.593151][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop1p195, 10) failed: No such file or directory [ 269.594971][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop1p187, 10) failed: No such file or directory [ 269.807385][ T9423] fido_id[9423]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 273.652895][ T9364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.654920][ T9364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.661282][ T9364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.663435][ T9364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.668814][ T9364] batman_adv: batadv0: Removing interface: vxlan0 [ 273.761152][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1878'. [ 273.837614][ T9421] IPVS: Error joining to the multicast group [ 274.024854][ T9414] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.096155][ T9432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1884'. [ 274.208565][ T9437] loop4: detected capacity change from 0 to 8192 [ 274.263436][ T9414] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.384421][ T9414] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.603356][ T9414] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.766393][ T9414] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.803209][ T9414] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.811419][ T9414] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.837461][ T9414] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.987556][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 275.014574][ T4458] udevd[4458]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 275.014685][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop3p8, 10) failed: No such file or directory [ 275.035647][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 275.049077][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 275.058432][ T4289] udevd[4289]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory [ 275.061326][ T9468] sch_fq: defrate 4294967295 ignored. [ 275.064267][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 275.076576][ T4459] udevd[4459]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 275.092766][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 275.105865][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop3p10, 10) failed: No such file or directory [ 275.168796][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1902'. [ 275.193065][ T9473] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 275.196324][ T9473] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 275.218126][ T9473] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 275.883161][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1911'. [ 276.137606][ T9499] bond0: (slave bond_slave_0): Releasing backup interface [ 276.305700][ T9507] device pim6reg1 entered promiscuous mode [ 276.396371][ T9515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.404080][ T9515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.741928][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1923'. [ 276.765252][ T27] kauditd_printk_skb: 95 callbacks suppressed [ 276.765265][ T27] audit: type=1326 audit(277.744:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 276.781832][ T27] audit: type=1326 audit(277.744:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 276.792433][ T4403] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 276.792773][ T27] audit: type=1326 audit(277.744:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 276.811936][ T4403] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 276.820867][ T27] audit: type=1326 audit(277.744:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 276.845987][ T27] audit: type=1326 audit(277.744:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 276.858900][ T27] audit: type=1326 audit(277.744:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 276.874667][ T27] audit: type=1326 audit(277.744:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 276.890678][ T27] audit: type=1326 audit(277.744:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=20 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 276.921047][ T27] audit: type=1326 audit(277.744:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 276.936360][ T27] audit: type=1326 audit(277.744:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.0.1924" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=21 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 277.356333][ T9554] syz.1.1935 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 277.807400][ T9576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.809963][ T9576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.645969][ T9605] xt_policy: too many policy elements [ 279.619375][ T9627] can0: slcan on ttyS3. [ 279.704489][ T9627] can0 (unregistered): slcan off ttyS3. [ 279.709178][ T9633] can0: slcan on ttyS3. [ 279.994667][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 280.011987][ T4403] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 280.032820][ T4466] udevd[4466]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 280.039702][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 280.051181][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 280.067892][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 280.080925][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 280.107924][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 280.113209][ T4458] udevd[4458]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 280.118345][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 280.124594][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 280.198098][ T4403] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 280.200594][ T4403] usb 1-1: config 0 has no interface number 0 [ 280.202617][ T4403] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 280.207360][ T4403] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.224535][ T4403] usb 1-1: config 0 descriptor?? [ 280.228065][ T9654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1978'. [ 280.243522][ T4403] gspca_main: spca561-2.14.0 probing abcd:cdee [ 280.412588][ T9632] can0 (unregistered): slcan off ttyS3. [ 281.222453][ T4403] spca561: probe of 1-1:0.156 failed with error -22 [ 281.225001][ T4403] usb 1-1: MIDIStreaming interface descriptor not found [ 281.240274][ T4403] usb 1-1: USB disconnect, device number 5 [ 281.607990][ T9679] device pim6reg1 entered promiscuous mode [ 281.660496][ T9682] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1988'. [ 281.686982][ T9684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1989'. [ 282.963238][ T9709] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2000'. [ 283.071940][ T9714] syz.0.2002 (9714): /proc/9713/oom_adj is deprecated, please use /proc/9713/oom_score_adj instead. [ 283.156651][ T9719] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2003'. [ 283.159510][ T9716] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2003'. [ 283.203628][ T9716] loop4: detected capacity change from 0 to 164 [ 283.209774][ T9716] syz.4.2003: attempt to access beyond end of device [ 283.209774][ T9716] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 283.252273][ T9716] syz.4.2003: attempt to access beyond end of device [ 283.252273][ T9716] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 283.430078][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2008'. [ 283.459255][ T9732] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2008'. [ 283.473962][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2008'. [ 283.486670][ T9732] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2008'. [ 283.494879][ T9732] netlink: 'syz.4.2008': attribute type 6 has an invalid length. [ 283.501868][ T4343] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 283.770593][ T4343] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 283.773488][ T4343] usb 1-1: config 0 has no interface number 0 [ 283.823385][ T4343] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 283.876896][ T4343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.182725][ T4343] usb 1-1: config 0 descriptor?? [ 284.207508][ T4343] gspca_main: spca561-2.14.0 probing abcd:cdee [ 284.347809][ T9741] ALSA: seq fatal error: cannot create timer (-22) [ 284.433667][ T4343] spca561: probe of 1-1:0.156 failed with error -22 [ 284.436048][ T4343] usb 1-1: MIDIStreaming interface descriptor not found [ 284.479127][ T4343] usb 1-1: USB disconnect, device number 6 [ 285.006922][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop2p176, 10) failed: No such file or directory [ 285.026118][ T4466] udevd[4466]: inotify_add_watch(7, /dev/loop2p174, 10) failed: No such file or directory [ 285.041483][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop2p172, 10) failed: No such file or directory [ 285.070966][ T4287] udevd[4287]: inotify_add_watch(7, /dev/loop2p183, 10) failed: No such file or directory [ 285.098900][ T4458] udevd[4458]: inotify_add_watch(7, /dev/loop2p177, 10) failed: No such file or directory [ 285.129586][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop2p179, 10) failed: No such file or directory [ 285.149369][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop2p180, 10) failed: No such file or directory [ 285.159696][ T4459] udevd[4459]: inotify_add_watch(7, /dev/loop2p181, 10) failed: No such file or directory [ 285.178088][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop2p178, 10) failed: No such file or directory [ 285.203318][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop2p182, 10) failed: No such file or directory [ 285.237673][ T27] kauditd_printk_skb: 101 callbacks suppressed [ 285.237687][ T27] audit: type=1326 audit(286.214:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9750 comm="syz.1.2016" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 285.306417][ T9767] tipc: New replicast peer: 255.255.255.83 [ 285.308206][ T9767] tipc: Enabled bearer , priority 10 [ 285.659577][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2029'. [ 285.754032][ T9786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.756471][ T9786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.855505][ T9792] mmap: syz.0.2035 (9792) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 285.977266][ T9795] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 286.135558][ T9804] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2040'. [ 286.426816][ T4403] tipc: Node number set to 1078875150 [ 286.805299][ T9825] can0: slcan on ttyS3. [ 286.873888][ T9825] can0 (unregistered): slcan off ttyS3. [ 287.228679][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2053'. [ 287.245432][ T9837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2053'. [ 287.778788][ T9853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.792348][ T9853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.052650][ T27] audit: type=1326 audit(289.034:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9864 comm="syz.0.2067" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 288.061695][ T27] audit: type=1326 audit(289.034:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9864 comm="syz.0.2067" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 288.076451][ T27] audit: type=1326 audit(289.054:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9864 comm="syz.0.2067" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 288.096506][ T27] audit: type=1326 audit(289.054:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9864 comm="syz.0.2067" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 288.116553][ T27] audit: type=1326 audit(289.054:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9864 comm="syz.0.2067" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 288.131893][ T27] audit: type=1326 audit(289.054:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9864 comm="syz.0.2067" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 288.148091][ T27] audit: type=1326 audit(289.054:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9864 comm="syz.0.2067" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 288.170843][ T27] audit: type=1326 audit(289.054:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9864 comm="syz.0.2067" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=235 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 288.201858][ T27] audit: type=1326 audit(289.054:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9864 comm="syz.0.2067" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 288.306082][ T9874] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2071'. [ 288.321071][ T9876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.344490][ T9876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.056751][ T9901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.059558][ T9901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.170327][ T9907] netlink: 'syz.1.2087': attribute type 4 has an invalid length. [ 289.716490][ T9926] 9pnet_fd: Insufficient options for proto=fd [ 289.941665][ T9934] can0: slcan on ttyS3. [ 290.002021][ T9934] can0 (unregistered): slcan off ttyS3. [ 290.006890][ T9936] can0: slcan on ttyS3. [ 290.029734][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 290.069118][ T9933] can0 (unregistered): slcan off ttyS3. [ 290.099911][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 290.178663][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 290.214694][ T9945] ucma_write: process 1092 (syz.0.2102) changed security contexts after opening file descriptor, this is not allowed. [ 290.221716][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 290.249219][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 290.316480][ T9948] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 290.318049][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 290.391466][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 290.440775][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 290.455058][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 290.491383][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 290.531525][ T9955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.534409][ T9955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.040708][ T9966] can0: slcan on ttyS3. [ 291.069584][ T9969] can0 (unregistered): slcan off ttyS3. [ 291.080046][ T9970] can0: slcan on ttyS3. [ 291.142687][ T9965] can0 (unregistered): slcan off ttyS3. [ 291.211741][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 291.211754][ T27] audit: type=1326 audit(292.184:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9979 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 291.235372][ T27] audit: type=1326 audit(292.214:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9979 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 291.246180][ T27] audit: type=1326 audit(292.224:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9979 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 291.271979][ T27] audit: type=1326 audit(292.224:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9979 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 291.298354][ T27] audit: type=1326 audit(292.224:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9979 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 291.316702][ T27] audit: type=1326 audit(292.224:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9979 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 291.334392][ T27] audit: type=1326 audit(292.224:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9979 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 291.351639][ T27] audit: type=1326 audit(292.224:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9979 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=104 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 291.548465][ T27] audit: type=1326 audit(292.524:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9979 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 291.566561][ T27] audit: type=1326 audit(292.524:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9979 comm="syz.0.2119" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 291.899074][T10003] can0: slcan on ttyS3. [ 291.991942][T10003] can0 (unregistered): slcan off ttyS3. [ 291.996032][T10004] can0: slcan on ttyS3. [ 292.052397][T10002] can0 (unregistered): slcan off ttyS3. [ 292.493237][T10019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.495755][T10019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.703201][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2140'. [ 292.819312][T10038] can0: slcan on ttyS3. [ 292.855465][T10037] can0 (unregistered): slcan off ttyS3. [ 293.379485][T10053] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.544055][T10053] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.720587][T10053] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.936322][T10053] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.947710][T10065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2151'. [ 294.108034][T10073] can0: slcan on ttyS3. [ 294.148505][T10053] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.162891][T10071] can0 (unregistered): slcan off ttyS3. [ 294.175390][T10053] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.181006][T10053] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.197693][T10053] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.250682][T10081] serio: Serial port ptm0 [ 294.551909][ T112] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 294.737360][ T112] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 294.739506][ T112] usb 1-1: config 0 has no interface number 0 [ 294.741069][ T112] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 294.745679][ T112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.750500][ T112] usb 1-1: config 0 descriptor?? [ 294.770578][ T112] gspca_main: spca561-2.14.0 probing abcd:cdee [ 295.153044][T10105] can0: slcan on ttyS3. [ 295.373615][ T112] spca561: probe of 1-1:0.156 failed with error -22 [ 295.376047][ T112] usb 1-1: MIDIStreaming interface descriptor not found [ 295.412013][ T4461] usb 1-1: USB disconnect, device number 7 [ 295.437689][T10102] can0 (unregistered): slcan off ttyS3. [ 295.547526][ T4456] udevd[4456]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 295.557614][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 295.563376][ T4458] udevd[4458]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 295.568331][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 295.573595][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 295.573910][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 295.583521][ T4459] udevd[4459]: inotify_add_watch(7, /dev/loop4p8, 10) failed: No such file or directory [ 295.590630][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop4p14, 10) failed: No such file or directory [ 295.596450][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop4p9, 10) failed: No such file or directory [ 295.596540][ T4458] udevd[4458]: inotify_add_watch(7, /dev/loop4p15, 10) failed: No such file or directory [ 295.637411][T10107] smc: net device bond0 applied user defined pnetid SYZ2 [ 295.639450][T10112] smc: net device bond0 erased user defined pnetid SYZ2 [ 296.129521][T10135] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 296.149780][T10135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 296.166532][T10135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.169646][T10135] device bridge_slave_0 left promiscuous mode [ 296.172758][T10135] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.255894][T10135] device bridge_slave_1 left promiscuous mode [ 296.257783][T10135] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.307265][T10135] bond0: (slave bond_slave_0): Releasing backup interface [ 296.365188][T10135] bond0: (slave bond_slave_1): Releasing backup interface [ 296.477497][T10135] team0: Port device team_slave_0 removed [ 296.511595][T10135] team0: Port device team_slave_1 removed [ 296.517080][T10135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.529094][T10135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.555949][T10135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.558049][T10135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.609964][T10135] batman_adv: batadv0: Removing interface: vxlan0 [ 296.917211][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 296.917223][ T27] audit: type=1326 audit(297.894:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.2.2185" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 296.935164][ T27] audit: type=1326 audit(297.904:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.2.2185" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=88 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 296.940594][ T27] audit: type=1326 audit(297.904:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10147 comm="syz.2.2185" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 297.041296][T10154] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2188'. [ 297.191611][T10157] device syzkaller0 entered promiscuous mode [ 297.256034][T10167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.268767][T10167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.867474][T10193] fido_id[10193]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 300.646158][ T4458] udevd[4458]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 300.647131][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 300.651902][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 300.654974][ T4459] udevd[4459]: inotify_add_watch(7, /dev/loop4p8, 10) failed: No such file or directory [ 300.660213][ T4449] udevd[4449]: inotify_add_watch(7, /dev/loop4p9, 10) failed: No such file or directory [ 300.664261][ T4467] udevd[4467]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 300.666914][ T4450] udevd[4450]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 300.673692][ T4453] udevd[4453]: inotify_add_watch(7, /dev/loop4p15, 10) failed: No such file or directory [ 300.674643][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop4p11, 10) failed: No such file or directory [ 300.678772][ T4458] udevd[4458]: inotify_add_watch(7, /dev/loop4p14, 10) failed: No such file or directory [ 308.313547][T10182] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2198'. [ 308.424818][T10196] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2203'. [ 308.433830][T10202] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2205'. [ 309.074351][T10226] serio: Serial port ptm0 [ 309.488289][T10234] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2218'. [ 309.638983][T10237] device syzkaller0 entered promiscuous mode [ 309.648158][T10240] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2220'. [ 309.871882][ T4343] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 310.133762][ T4343] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 310.135990][ T4343] usb 1-1: config 0 has no interface number 0 [ 310.137575][ T4343] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 310.139891][ T4343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.187370][ T4343] usb 1-1: config 0 descriptor?? [ 310.343317][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.667487][ T4343] gspca_main: spca561-2.14.0 probing abcd:cdee [ 311.242649][ T4343] spca561: probe of 1-1:0.156 failed with error -22 [ 311.245083][ T4343] usb 1-1: MIDIStreaming interface descriptor not found [ 321.888525][ T22] usb 1-1: USB disconnect, device number 8 [ 322.069887][T10279] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2233'. [ 322.079194][T10281] netlink: 'syz.1.2234': attribute type 1 has an invalid length. [ 322.461034][T10303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2244'. [ 322.465366][T10301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.473350][T10301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.739077][T10317] can0: slcan on ttyS3. [ 322.822351][T10317] can0 (unregistered): slcan off ttyS3. [ 322.957571][T10327] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2250'. [ 323.219041][T10345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2256'. [ 323.221711][ T27] audit: type=1326 audit(2000000024.130:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10339 comm="syz.4.2254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa095a9a8 code=0x7ffc0000 [ 323.239580][ T27] audit: type=1326 audit(2000000024.130:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10339 comm="syz.4.2254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=145 compat=0 ip=0xffffa095a9a8 code=0x7ffc0000 [ 323.249817][ T27] audit: type=1326 audit(2000000024.130:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10339 comm="syz.4.2254" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa095a9a8 code=0x7ffc0000 [ 323.324804][T10352] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2258'. [ 323.437080][T10358] can0: slcan on ttyS3. [ 323.502793][T10358] can0 (unregistered): slcan off ttyS3. [ 323.613981][T10372] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2266'. [ 323.639775][T10374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.652418][T10374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.898974][T10387] loop4: detected capacity change from 0 to 1024 [ 323.970350][T10387] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 324.006630][T10398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2272'. [ 324.037639][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 324.190640][T10409] can0: slcan on ttyS3. [ 324.234787][T10413] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2278'. [ 324.242284][T10409] can0 (unregistered): slcan off ttyS3. [ 324.488470][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2284'. [ 324.512818][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2284'. [ 325.501459][T10443] team0: No ports can be present during mode change [ 325.676175][T10452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.683525][T10452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.895145][ T27] audit: type=1326 audit(2000000026.780:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 325.911411][ T27] audit: type=1326 audit(2000000026.780:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 325.939191][ T27] audit: type=1326 audit(2000000026.780:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=17 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 325.950777][ T27] audit: type=1326 audit(2000000026.780:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 325.969173][ T27] audit: type=1326 audit(2000000026.780:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.2.2298" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 327.152547][T10506] __nla_validate_parse: 4 callbacks suppressed [ 327.152561][T10506] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2309'. [ 328.043271][T10519] hub 9-0:1.0: USB hub found [ 328.062013][T10519] hub 9-0:1.0: 8 ports detected [ 328.180211][T10523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.183569][T10527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2317'. [ 328.199590][T10523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.953943][T10548] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2327'. [ 329.236753][T10559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2329'. [ 329.658387][T10587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2343'. [ 329.682068][T10585] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2342'. [ 330.247815][T10616] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2356'. [ 330.450370][T10621] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2358'. [ 330.488882][ T27] audit: type=1326 audit(2000000031.400:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.2.2360" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 330.496090][ T27] audit: type=1326 audit(2000000031.400:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.2.2360" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 330.502653][ T27] audit: type=1326 audit(2000000031.400:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.2.2360" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 330.509057][ T27] audit: type=1326 audit(2000000031.400:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.2.2360" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 330.528688][ T27] audit: type=1326 audit(2000000031.400:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.2.2360" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 330.546924][ T27] audit: type=1326 audit(2000000031.400:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.2.2360" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 330.559816][ T27] audit: type=1326 audit(2000000031.400:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.2.2360" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 330.573790][ T27] audit: type=1326 audit(2000000031.400:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.2.2360" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 330.588217][ T27] audit: type=1326 audit(2000000031.400:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.2.2360" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 330.600977][ T27] audit: type=1326 audit(2000000031.400:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10624 comm="syz.2.2360" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 330.775871][T10640] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 331.001823][T10650] can0: slcan on ttyS3. [ 331.042115][T10650] can0 (unregistered): slcan off ttyS3. [ 331.048284][T10650] can0: slcan on ttyS3. [ 331.111992][T10649] can0 (unregistered): slcan off ttyS3. [ 331.123336][T10657] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2375'. [ 331.466443][T10675] device syzkaller1 entered promiscuous mode [ 331.681626][T10687] IPv6: Can't replace route, no match found [ 331.725174][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2385'. [ 331.808305][T10695] can0: slcan on ttyS3. [ 331.862963][T10695] can0 (unregistered): slcan off ttyS3. [ 331.930538][T10695] can0: slcan on ttyS3. [ 332.012104][T10694] can0 (unregistered): slcan off ttyS3. [ 332.998483][T10741] __nla_validate_parse: 2 callbacks suppressed [ 332.998498][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2397'. [ 333.079712][T10740] device syzkaller0 entered promiscuous mode [ 333.090549][T10746] can0: slcan on ttyS3. [ 333.146311][T10746] can0 (unregistered): slcan off ttyS3. [ 336.072404][T10749] slcan: can't register candev [ 336.154548][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2416'. [ 336.157867][T10790] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2416'. [ 336.289800][T10796] loop4: detected capacity change from 0 to 512 [ 336.337744][T10796] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 336.340391][T10796] ext4 filesystem being mounted at /474/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 336.421393][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 345.031311][T10748] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2398'. [ 345.140028][T10820] can0: slcan on ttyS3. [ 345.192126][T10820] can0 (unregistered): slcan off ttyS3. [ 345.196989][T10820] can0: slcan on ttyS3. [ 345.222883][T10828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2428'. [ 345.265024][T10819] can0 (unregistered): slcan off ttyS3. [ 345.358387][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 345.358400][ T27] audit: type=1326 audit(2000000046.270:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7fc00000 [ 345.429972][T10842] netlink: 'syz.4.2435': attribute type 1 has an invalid length. [ 345.449617][T10842] device bond3 entered promiscuous mode [ 345.451429][T10842] 8021q: adding VLAN 0 to HW filter on device bond3 [ 345.488025][T10842] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2435'. [ 345.496168][T10842] device batadv0 entered promiscuous mode [ 345.499495][T10842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.518038][T10842] bond3: (slave batadv0): making interface the new active one [ 345.521215][T10842] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 345.541566][ T1635] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 346.069612][ T27] audit: type=1326 audit(2000000046.980:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff9a55a9a8 code=0x7fc00000 [ 346.079211][T10855] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2438'. [ 346.082356][ T27] audit: type=1326 audit(2000000046.980:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7fc00000 [ 346.094021][ T27] audit: type=1326 audit(2000000046.980:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7fc00000 [ 346.100199][ T27] audit: type=1326 audit(2000000046.980:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7fc00000 [ 346.112531][ T27] audit: type=1326 audit(2000000046.980:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7fc00000 [ 346.116767][T10857] device syzkaller0 entered promiscuous mode [ 346.118770][ T27] audit: type=1326 audit(2000000046.980:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7fc00000 [ 346.147998][ T27] audit: type=1326 audit(2000000046.980:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7fc00000 [ 346.162569][ T27] audit: type=1326 audit(2000000046.980:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7fc00000 [ 346.179123][ T27] audit: type=1326 audit(2000000046.980:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7fc00000 [ 347.277257][T10871] slcan: can't register candev [ 347.494760][T10881] xt_CT: No such helper "netbios-ns" [ 357.257097][T10886] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2450'. [ 357.328227][T10899] netlink: 'syz.2.2451': attribute type 1 has an invalid length. [ 357.379447][T10899] device bond1 entered promiscuous mode [ 357.391953][T10899] 8021q: adding VLAN 0 to HW filter on device bond1 [ 357.394541][T10892] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2451'. [ 357.409291][T10892] device batadv1 entered promiscuous mode [ 357.412526][T10892] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 357.415233][T10892] bond1: (slave batadv1): making interface the new active one [ 357.423478][T10892] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 357.425924][ T178] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 357.628400][T10913] can0: slcan on ttyS3. [ 357.703898][T10913] can0 (unregistered): slcan off ttyS3. [ 357.708422][T10919] can0: slcan on ttyS3. [ 357.773678][T10911] can0 (unregistered): slcan off ttyS3. [ 357.839977][T10926] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 357.883126][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 357.883137][ T27] audit: type=1326 audit(2000000058.800:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10927 comm="syz.0.2462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 357.897341][ T27] audit: type=1326 audit(2000000058.800:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10927 comm="syz.0.2462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=53 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 357.927024][ T27] audit: type=1326 audit(2000000058.800:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10927 comm="syz.0.2462" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 358.027738][T10935] device syzkaller0 entered promiscuous mode [ 358.412868][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2471'. [ 359.705742][T10983] slcan: can't register candev [ 359.740560][T10990] netlink: 'syz.3.2476': attribute type 3 has an invalid length. [ 369.828179][T10949] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2465'. [ 369.831326][T10959] netlink: 'syz.0.2470': attribute type 1 has an invalid length. [ 369.834175][T10963] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2470'. [ 369.840885][T10963] device batadv1 entered promiscuous mode [ 369.900517][T10999] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 369.965665][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2482'. [ 370.116221][T11015] can0: slcan on ttyS3. [ 370.242166][T11015] can0 (unregistered): slcan off ttyS3. [ 370.993983][ T27] audit: type=1326 audit(2000000071.910:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35a9a8 code=0x7ffc0000 [ 371.018741][ T27] audit: type=1326 audit(2000000071.930:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35a9a8 code=0x7ffc0000 [ 371.049415][ T27] audit: type=1326 audit(2000000071.940:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff9a35a9a8 code=0x7ffc0000 [ 371.102503][ T27] audit: type=1326 audit(2000000071.940:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff9a35a9dc code=0x7ffc0000 [ 371.122111][ T27] audit: type=1326 audit(2000000071.950:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff9a359070 code=0x7ffc0000 [ 371.139888][ T27] audit: type=1326 audit(2000000072.010:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffff9a35aa4c code=0x7ffc0000 [ 371.151265][ T27] audit: type=1326 audit(2000000072.010:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9a358ed4 code=0x7ffc0000 [ 371.160587][ T27] audit: type=1326 audit(2000000072.010:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff9a3592ac code=0x7ffc0000 [ 371.171882][ T27] audit: type=1326 audit(2000000072.010:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35a9a8 code=0x7ffc0000 [ 371.177960][ T27] audit: type=1326 audit(2000000072.030:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11023 comm="syz.3.2488" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a35a9a8 code=0x7ffc0000 [ 371.247602][T11034] netlink: 'syz.2.2490': attribute type 4 has an invalid length. [ 371.270951][T11039] netlink: 'syz.2.2490': attribute type 4 has an invalid length. [ 371.317513][T11038] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2492'. [ 371.415496][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2495'. [ 371.451489][T11050] netlink: 'syz.0.2497': attribute type 1 has an invalid length. [ 371.453955][T11051] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 371.479742][T11050] device bond1 entered promiscuous mode [ 371.490494][T11050] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.535308][T11050] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2497'. [ 371.539915][T11050] device batadv1 entered promiscuous mode [ 371.552877][T11050] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 371.555573][T11050] bond1: (slave batadv1): making interface the new active one [ 371.558402][T11050] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 371.560759][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 371.682381][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.715302][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2506'. [ 371.734826][T11072] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 371.735464][T11068] netlink: 'syz.0.2505': attribute type 4 has an invalid length. [ 371.737500][T11072] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 371.845565][T11074] netlink: 'syz.0.2505': attribute type 4 has an invalid length. [ 371.945526][T11070] netlink: 332 bytes leftover after parsing attributes in process `syz.3.2501'. [ 372.050618][T11079] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2508'. [ 372.254650][ T112] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 372.433445][ T112] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 372.442208][ T112] usb 1-1: config 0 has no interface number 0 [ 372.445030][ T112] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 372.453294][ T112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.466870][ T112] usb 1-1: config 0 descriptor?? [ 372.481107][ T112] gspca_main: spca561-2.14.0 probing abcd:cdee [ 372.640316][T11093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2511'. [ 372.777246][ T112] spca561: probe of 1-1:0.156 failed with error -22 [ 372.779596][ T112] usb 1-1: MIDIStreaming interface descriptor not found [ 372.821386][ T112] usb 1-1: USB disconnect, device number 9 [ 373.053261][T11108] udevd[11108]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.108893][T11123] netlink: 'syz.3.2522': attribute type 4 has an invalid length. [ 373.156170][T11123] netlink: 'syz.3.2522': attribute type 4 has an invalid length. [ 374.381647][T11178] random: crng reseeded on system resumption [ 374.422414][T11176] netlink: 'syz.4.2541': attribute type 1 has an invalid length. [ 374.440772][T11176] device bond4 entered promiscuous mode [ 374.452414][T11187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.456086][T11187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.456509][T11176] 8021q: adding VLAN 0 to HW filter on device bond4 [ 374.532560][ T4343] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 374.713419][ T4343] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 374.715741][ T4343] usb 1-1: config 0 has no interface number 0 [ 374.717370][ T4343] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 374.719780][ T4343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.744155][ T4343] usb 1-1: config 0 descriptor?? [ 374.762723][ T4343] gspca_main: spca561-2.14.0 probing abcd:cdee [ 375.250149][ T4343] spca561: probe of 1-1:0.156 failed with error -22 [ 375.260197][ T4343] usb 1-1: MIDIStreaming interface descriptor not found [ 375.273283][ T4343] usb 1-1: USB disconnect, device number 10 [ 375.357552][T11229] __nla_validate_parse: 5 callbacks suppressed [ 375.357589][T11229] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2558'. [ 375.381355][T11229] device batadv1 entered promiscuous mode [ 375.486377][T11226] udevd[11226]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 375.572825][T11241] netlink: 'syz.1.2564': attribute type 1 has an invalid length. [ 375.913198][T11270] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2577'. [ 375.917806][T11270] device batadv1 entered promiscuous mode [ 376.088906][ T27] kauditd_printk_skb: 90 callbacks suppressed [ 376.088917][ T27] audit: type=1326 audit(2000000077.000:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.1.2582" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 376.111946][ T27] audit: type=1326 audit(2000000077.020:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.1.2582" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 376.117967][ T27] audit: type=1326 audit(2000000077.020:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.1.2582" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 376.157375][ T27] audit: type=1326 audit(2000000077.040:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.1.2582" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 376.177932][ T27] audit: type=1326 audit(2000000077.040:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.1.2582" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 376.190539][ T27] audit: type=1326 audit(2000000077.050:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.1.2582" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 376.201677][ T27] audit: type=1326 audit(2000000077.050:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.1.2582" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 376.215448][ T27] audit: type=1326 audit(2000000077.050:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.1.2582" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=92 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 376.221320][ T27] audit: type=1326 audit(2000000077.050:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.1.2582" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c15a9a8 code=0x7ffc0000 [ 376.269712][ T27] audit: type=1326 audit(2000000077.050:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.1.2582" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8c158ed4 code=0x7ffc0000 [ 376.312801][T11273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.320312][T11273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.352903][T11273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2576'. [ 376.525286][T11291] device syzkaller0 entered promiscuous mode [ 376.766069][T11309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.770599][T11309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.147673][T11317] random: crng reseeded on system resumption [ 387.747693][T11333] netlink: 'syz.2.2595': attribute type 4 has an invalid length. [ 388.111698][T11349] vhci_hcd: invalid port number 96 [ 388.121063][T11349] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 388.459670][T11368] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2608'. [ 388.614664][T11369] hub 6-0:1.0: USB hub found [ 388.621390][T11369] hub 6-0:1.0: 8 ports detected [ 388.812977][T11371] device syzkaller0 entered promiscuous mode [ 388.884467][T11380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.891056][T11380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.401378][T11387] 9pnet_fd: Insufficient options for proto=fd [ 391.504664][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 391.504675][ T27] audit: type=1326 audit(2000000092.420:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11388 comm="syz.0.2617" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 391.513591][ T27] audit: type=1326 audit(2000000092.420:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11388 comm="syz.0.2617" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 391.519777][ T27] audit: type=1326 audit(2000000092.420:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11388 comm="syz.0.2617" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=102 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 391.526568][ T27] audit: type=1326 audit(2000000092.420:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11388 comm="syz.0.2617" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 391.533839][ T27] audit: type=1326 audit(2000000092.420:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11388 comm="syz.0.2617" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9dd5a9a8 code=0x7ffc0000 [ 400.082281][T11398] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2620'. [ 400.530608][T11421] hub 6-0:1.0: USB hub found [ 400.533363][T11421] hub 6-0:1.0: 8 ports detected [ 401.010650][T11430] tipc: Enabled bearer , priority 0 [ 401.038341][T11429] tipc: Resetting bearer [ 401.731891][ T4347] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 401.918301][ T4347] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 401.920756][ T4347] usb 1-1: config 0 has no interface number 0 [ 401.922601][ T4347] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 401.925020][ T4347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.929487][ T4347] usb 1-1: config 0 descriptor?? [ 401.933486][ T4347] gspca_main: spca561-2.14.0 probing abcd:cdee [ 402.453468][ T4347] spca561: probe of 1-1:0.156 failed with error -22 [ 402.455855][ T4347] usb 1-1: MIDIStreaming interface descriptor not found [ 412.281571][T11429] tipc: Disabling bearer [ 412.286299][T11444] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2634'. [ 412.291002][T11487] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2636'. [ 412.366182][ T22] usb 1-1: USB disconnect, device number 11 [ 412.760945][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2648'. [ 412.780896][T11527] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 412.872933][T11533] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2650'. [ 412.875506][T11534] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2649'. [ 412.881551][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2648'. [ 413.649722][T11554] tipc: Started in network mode [ 413.653117][T11554] tipc: Node identity c2b7fd998a72, cluster identity 4711 [ 413.655242][T11554] tipc: Enabled bearer , priority 0 [ 413.673528][T11551] tipc: Resetting bearer [ 413.848537][T11571] hub 6-0:1.0: USB hub found [ 413.851057][T11571] hub 6-0:1.0: 8 ports detected [ 414.652516][ T22] tipc: Node number set to 1220935065 [ 415.140958][ T27] audit: type=1326 audit(2000000116.050:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.4.2668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa095a9a8 code=0x7ffc0000 [ 415.150356][ T27] audit: type=1326 audit(2000000116.060:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.4.2668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=264 compat=0 ip=0xffffa095a9a8 code=0x7ffc0000 [ 415.167718][ T27] audit: type=1326 audit(2000000116.060:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.4.2668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa095a9a8 code=0x7ffc0000 [ 415.187205][ T27] audit: type=1326 audit(2000000116.080:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11593 comm="syz.4.2668" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa095a9a8 code=0x7ffc0000 [ 424.901382][T11551] tipc: Disabling bearer [ 424.917212][T11569] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2662'. [ 424.921412][T11570] smc: net device bond0 applied user defined pnetid SYZ2 [ 424.931984][T11577] smc: net device bond0 erased user defined pnetid SYZ2 [ 425.030993][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2673'. [ 425.060060][T11607] loop4: detected capacity change from 0 to 2048 [ 425.098702][T11607] EXT4-fs: Ignoring removed mblk_io_submit option [ 425.149871][T11607] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 425.227563][T11619] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2672: bg 0: block 234: padding at end of block bitmap is not set [ 425.244546][T11619] EXT4-fs (loop4): Remounting filesystem read-only [ 425.385433][ T4303] EXT4-fs (loop4): unmounting filesystem. [ 425.495293][T11628] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2680'. [ 425.551116][T11630] device syzkaller0 entered promiscuous mode [ 425.611473][T11631] hub 6-0:1.0: USB hub found [ 425.623813][T11631] hub 6-0:1.0: 8 ports detected [ 433.122443][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 437.015994][T11637] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 437.113570][T11655] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2690'. [ 437.118299][T11655] device batadv2 entered promiscuous mode [ 437.190836][T11664] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2692'. [ 437.417071][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2699'. [ 437.434703][T11678] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 437.503424][T11678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2699'. [ 437.708018][T11684] device syzkaller0 entered promiscuous mode [ 437.711247][T11672] smc: net device bond0 applied user defined pnetid SYZ2 [ 437.719601][T11672] smc: net device bond0 erased user defined pnetid SYZ2 [ 449.423892][T11714] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2706'. [ 449.512985][ T27] audit: type=1326 audit(2000000150.390:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 449.519105][ T27] audit: type=1326 audit(2000000150.400:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 449.546564][ T27] audit: type=1326 audit(2000000150.400:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 449.567298][ T27] audit: type=1326 audit(2000000150.400:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 449.581255][ T27] audit: type=1326 audit(2000000150.400:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 449.618177][ T27] audit: type=1326 audit(2000000150.400:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 449.625168][ T27] audit: type=1326 audit(2000000150.400:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 449.631529][ T27] audit: type=1326 audit(2000000150.400:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 449.638531][ T27] audit: type=1326 audit(2000000150.400:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 449.644565][ T27] audit: type=1326 audit(2000000150.400:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11720 comm="syz.2.2708" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=67 compat=0 ip=0xffff9a55a9a8 code=0x7ffc0000 [ 450.405319][T11735] netlink: 'syz.0.2715': attribute type 7 has an invalid length. [ 450.418774][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2714'. [ 450.446501][T11736] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 450.494591][T11741] netlink: 'syz.2.2716': attribute type 5 has an invalid length. [ 450.560316][T11744] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 450.638692][T11742] device syzkaller0 entered promiscuous mode [ 461.710863][T11763] smc: net device bond0 applied user defined pnetid SYZ2 [ 461.856942][T11782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2737'. [ 461.872539][T11778] device syzkaller0 entered promiscuous mode [ 461.902924][T11786] netlink: 'syz.1.2729': attribute type 7 has an invalid length. [ 462.037539][T11782] infiniband syz!: set active [ 462.039326][T11782] infiniband syz!: added team_slave_0 [ 462.076712][T11782] RDS/IB: syz!: added [ 462.078604][T11782] smc: adding ib device syz! with port count 1 [ 462.081235][T11782] smc: ib device syz! port 1 has pnetid [ 477.480366][T11821] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 477.484886][T11821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 477.489797][T11821] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 477.493047][T11821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 477.495667][T11821] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 477.497674][T11821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 477.500547][T11824] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 477.500604][T11821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 477.505641][T11821] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 477.507701][T11821] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 477.509908][T11821] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 477.512232][T11821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 477.590709][ T4312] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 477.594627][ T4312] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 477.597310][ T4312] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 477.600561][ T4312] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 477.609641][ T4312] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 477.611762][ T4312] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 477.679173][ T47] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 477.688233][ T47] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 477.690935][ T47] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 477.693702][ T47] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 477.695949][ T47] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 477.698676][ T47] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 479.601968][ T47] Bluetooth: hci5: command 0x0409 tx timeout [ 479.603173][ T4312] Bluetooth: hci6: command 0x0409 tx timeout [ 479.682448][ T4312] Bluetooth: hci7: command 0x0409 tx timeout [ 479.762032][T11821] Bluetooth: hci8: command 0x0409 tx timeout [ 481.681959][T11821] Bluetooth: hci5: command 0x041b tx timeout [ 481.682907][ T4312] Bluetooth: hci6: command 0x041b tx timeout [ 481.761993][ T4312] Bluetooth: hci7: command 0x041b tx timeout [ 481.851897][ T4312] Bluetooth: hci8: command 0x041b tx timeout [ 483.761929][T11821] Bluetooth: hci5: command 0x040f tx timeout [ 483.772079][T11821] Bluetooth: hci6: command 0x040f tx timeout [ 483.851920][T11821] Bluetooth: hci7: command 0x040f tx timeout [ 483.922001][T11821] Bluetooth: hci8: command 0x040f tx timeout [ 484.175633][T11795] netlink: 'syz.1.2732': attribute type 5 has an invalid length. [ 485.092675][ T178] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.179688][ T178] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.205111][T11816] chnl_net:caif_netlink_parms(): no params data found [ 485.285252][ T178] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.371870][ T178] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.403853][T11816] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.406022][T11816] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.409119][T11816] device bridge_slave_0 entered promiscuous mode [ 485.417215][T11827] chnl_net:caif_netlink_parms(): no params data found [ 485.423393][T11816] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.425634][T11816] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.428218][T11816] device bridge_slave_1 entered promiscuous mode [ 485.509512][T11866] smc: net device bond0 erased user defined pnetid SYZ2 [ 485.553833][T11816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.582652][T11816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.601941][ C0] ------------[ cut here ]------------ [ 485.603730][ C0] refcount_t: addition on 0; use-after-free. [ 485.605594][ C0] WARNING: CPU: 0 PID: 11827 at lib/refcount.c:25 refcount_warn_saturate+0x134/0x1f8 [ 485.608138][ C0] Modules linked in: [ 485.609176][ C0] CPU: 0 PID: 11827 Comm: syz-executor Not tainted 6.1.141-syzkaller #0 [ 485.611398][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 485.614174][ C0] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 485.616308][ C0] pc : refcount_warn_saturate+0x134/0x1f8 [ 485.617945][ C0] lr : refcount_warn_saturate+0x134/0x1f8 [ 485.619489][ C0] sp : ffff8000080078c0 [ 485.620595][ C0] x29: ffff8000080078c0 x28: ffff0000f3a84400 x27: ffff0000f20f4408 [ 485.622833][ C0] x26: ffff0000cd02c870 x25: dfff800000000000 x24: 1fffe0001e41e881 [ 485.625028][ C0] x23: ffff0000d6234800 x22: ffff0000d5490154 x21: ffff0000d7cce080 [ 485.627283][ C0] x20: ffff0000d5490154 x19: ffff800017a32000 x18: 00000000dcd36c5e [ 485.629485][ C0] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 485.631625][ C0] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 485.633835][ C0] x11: ff0080000819149c x10: 0000000000000000 x9 : 05034216d88a9f00 [ 485.636043][ C0] x8 : 05034216d88a9f00 x7 : 0000000000000001 x6 : 0000000000000001 [ 485.638415][ C0] x5 : ffff800008007358 x4 : ffff800015154700 x3 : ffff80000852da40 [ 485.640621][ C0] x2 : 0000000000000001 x1 : 0000000000000100 x0 : 0000000000000000 [ 485.642961][ C0] Call trace: [ 485.643884][ C0] refcount_warn_saturate+0x134/0x1f8 [ 485.645406][ C0] tipc_crypto_xmit+0x1518/0x2014 [ 485.646822][ C0] tipc_bearer_xmit_skb+0x1f0/0x384 [ 485.648272][ C0] tipc_disc_timeout+0x4c8/0x608 [ 485.649627][ C0] call_timer_fn+0x1b8/0x964 [ 485.650872][ C0] __run_timers+0x460/0x6bc [ 485.652254][ C0] run_timer_softirq+0x7c/0x114 [ 485.653639][ C0] handle_softirqs+0x318/0xc6c [ 485.655055][ C0] __do_softirq+0x14/0x20 [ 485.656270][ C0] ____do_softirq+0x14/0x20 [ 485.657479][ C0] call_on_irq_stack+0x24/0x4c [ 485.658882][ C0] do_softirq_own_stack+0x20/0x2c [ 485.660295][ C0] __irq_exit_rcu+0x23c/0x43c [ 485.661637][ C0] irq_exit_rcu+0x14/0x84 [ 485.662855][ C0] el1_interrupt+0x38/0x54 [ 485.664107][ C0] el1h_64_irq_handler+0x18/0x24 [ 485.665529][ C0] el1h_64_irq+0x64/0x68 [ 485.666721][ C0] lock_acquire+0x24c/0x644 [ 485.667938][ C0] down_write+0x5c/0x88 [ 485.669091][ C0] kernfs_add_one+0x330/0x6cc [ 485.670452][ C0] __kernfs_create_file+0x218/0x2d4 [ 485.671971][ C0] sysfs_add_file_mode_ns+0x1d8/0x294 [ 485.673526][ C0] internal_create_group+0x3d4/0xac8 [ 485.675023][ C0] sysfs_create_groups+0x60/0x134 [ 485.676406][ C0] kobject_add_internal+0x5e4/0xb30 [ 485.677867][ C0] kobject_init_and_add+0x118/0x17c [ 485.679399][ C0] net_rx_queue_update_kobjects+0x18c/0x424 [ 485.681125][ C0] netdev_register_kobject+0x1e4/0x2d4 [ 485.682698][ C0] register_netdevice+0xef8/0x15cc [ 485.684209][ C0] veth_newlink+0x62c/0xa24 [ 485.685496][ C0] rtnl_newlink+0x102c/0x1a1c [ 485.686844][ C0] rtnetlink_rcv_msg+0x734/0xce4 [ 485.688249][ C0] netlink_rcv_skb+0x208/0x3c4 [ 485.689628][ C0] rtnetlink_rcv+0x28/0x38 [ 485.690909][ C0] netlink_unicast+0x600/0x818 [ 485.692224][ C0] netlink_sendmsg+0x6e8/0x9b0 [ 485.693635][ C0] __sys_sendto+0x304/0x3fc [ 485.694859][ C0] __arm64_sys_sendto+0xd8/0xf8 [ 485.696237][ C0] invoke_syscall+0x98/0x2bc [ 485.697464][ C0] el0_svc_common+0x138/0x258 [ 485.698727][ C0] do_el0_svc+0x58/0x13c [ 485.699933][ C0] el0_svc+0x58/0x138 [ 485.701010][ C0] el0t_64_sync_handler+0x84/0xf0 [ 485.702430][ C0] el0t_64_sync+0x18c/0x190 [ 485.703712][ C0] irq event stamp: 29003 [ 485.704898][ C0] hardirqs last enabled at (29002): [] __up_console_sem+0xb4/0x100 [ 485.707644][ C0] hardirqs last disabled at (29003): [] el1_dbg+0x24/0x80 [ 485.710139][ C0] softirqs last enabled at (28876): [] clusterip_netdev_event+0x384/0x3ac [ 485.713016][ C0] softirqs last disabled at (28953): [] __do_softirq+0x14/0x20 [ 485.715644][ C0] ---[ end trace 0000000000000000 ]--- [ 485.717242][ C0] ------------[ cut here ]------------ [ 485.718732][ C0] refcount_t: underflow; use-after-free. [ 485.720571][ C0] WARNING: CPU: 0 PID: 11827 at lib/refcount.c:28 refcount_warn_saturate+0x154/0x1f8 [ 485.723219][ C0] Modules linked in: [ 485.724252][ C0] CPU: 0 PID: 11827 Comm: syz-executor Tainted: G W 6.1.141-syzkaller #0 [ 485.726977][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 485.729790][ C0] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 485.731962][ C0] pc : refcount_warn_saturate+0x154/0x1f8 [ 485.733508][ C0] lr : refcount_warn_saturate+0x154/0x1f8 [ 485.735105][ C0] sp : ffff8000080078c0 [ 485.736222][ C0] x29: ffff8000080078c0 x28: ffff0000f3a84400 x27: 0000000000000000 [ 485.738423][ C0] x26: ffff0000cd02c870 x25: dfff800000000000 x24: 1fffe00019a05918 [ 485.740646][ C0] x23: 1fffe0001b303a69 x22: ffff0000f20f4400 x21: 00000000c0000000 [ 485.742765][ C0] x20: ffff0000d5490154 x19: ffff800017a32000 x18: 00000000dcd36c5e [ 485.744947][ C0] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 485.747108][ C0] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 485.749308][ C0] x11: ff0080000819149c x10: 0000000000000000 x9 : 05034216d88a9f00 [ 485.751501][ C0] x8 : 05034216d88a9f00 x7 : 0000000000000001 x6 : 0000000000000001 [ 485.753793][ C0] x5 : ffff800008007358 x4 : ffff800015154700 x3 : ffff8000083115f4 [ 485.755979][ C0] x2 : 0000000000000001 x1 : 0000000000000100 x0 : 0000000000000000 [ 485.758281][ C0] Call trace: [ 485.759134][ C0] refcount_warn_saturate+0x154/0x1f8 [ 485.760653][ C0] tipc_crypto_xmit+0x1664/0x2014 [ 485.762068][ C0] tipc_bearer_xmit_skb+0x1f0/0x384 [ 485.763546][ C0] tipc_disc_timeout+0x4c8/0x608 [ 485.764938][ C0] call_timer_fn+0x1b8/0x964 [ 485.766187][ C0] __run_timers+0x460/0x6bc [ 485.767468][ C0] run_timer_softirq+0x7c/0x114 [ 485.768752][ C0] handle_softirqs+0x318/0xc6c [ 485.770077][ C0] __do_softirq+0x14/0x20 [ 485.771347][ C0] ____do_softirq+0x14/0x20 [ 485.772563][ C0] call_on_irq_stack+0x24/0x4c [ 485.773846][ C0] do_softirq_own_stack+0x20/0x2c [ 485.775255][ C0] __irq_exit_rcu+0x23c/0x43c [ 485.776558][ C0] irq_exit_rcu+0x14/0x84 [ 485.777770][ C0] el1_interrupt+0x38/0x54 [ 485.778966][ C0] el1h_64_irq_handler+0x18/0x24 [ 485.780307][ C0] el1h_64_irq+0x64/0x68 [ 485.781480][ C0] lock_acquire+0x24c/0x644 [ 485.782713][ C0] down_write+0x5c/0x88 [ 485.783819][ C0] kernfs_add_one+0x330/0x6cc [ 485.785145][ C0] __kernfs_create_file+0x218/0x2d4 [ 485.786608][ C0] sysfs_add_file_mode_ns+0x1d8/0x294 [ 485.788065][ C0] internal_create_group+0x3d4/0xac8 [ 485.789580][ C0] sysfs_create_groups+0x60/0x134 [ 485.791012][ C0] kobject_add_internal+0x5e4/0xb30 [ 485.792439][ C0] kobject_init_and_add+0x118/0x17c [ 485.793860][ C0] net_rx_queue_update_kobjects+0x18c/0x424 [ 485.795504][ C0] netdev_register_kobject+0x1e4/0x2d4 [ 485.796958][ C0] register_netdevice+0xef8/0x15cc [ 485.798385][ C0] veth_newlink+0x62c/0xa24 [ 485.799755][ C0] rtnl_newlink+0x102c/0x1a1c [ 485.801090][ C0] rtnetlink_rcv_msg+0x734/0xce4 [ 485.802455][ C0] netlink_rcv_skb+0x208/0x3c4 [ 485.803814][ C0] rtnetlink_rcv+0x28/0x38 [ 485.805052][ C0] netlink_unicast+0x600/0x818 [ 485.806377][ C0] netlink_sendmsg+0x6e8/0x9b0 [ 485.807643][ C0] __sys_sendto+0x304/0x3fc [ 485.808890][ C0] __arm64_sys_sendto+0xd8/0xf8 [ 485.810237][ C0] invoke_syscall+0x98/0x2bc [ 485.811470][ C0] el0_svc_common+0x138/0x258 [ 485.812757][ C0] do_el0_svc+0x58/0x13c [ 485.813925][ C0] el0_svc+0x58/0x138 [ 485.815077][ C0] el0t_64_sync_handler+0x84/0xf0 [ 485.816461][ C0] el0t_64_sync+0x18c/0x190 [ 485.817700][ C0] irq event stamp: 29037 [ 485.818940][ C0] hardirqs last enabled at (29036): [] __up_console_sem+0xb4/0x100 [ 485.821600][ C0] hardirqs last disabled at (29037): [] el1_dbg+0x24/0x80 [ 485.823962][ C0] softirqs last enabled at (28876): [] clusterip_netdev_event+0x384/0x3ac [ 485.826884][ C0] softirqs last disabled at (28953): [] __do_softirq+0x14/0x20 [ 485.829411][ C0] ---[ end trace 0000000000000000 ]--- [ 485.831095][ C0] ------------[ cut here ]------------ [ 485.832640][ C0] refcount_t: saturated; leaking memory. [ 485.834436][ C0] WARNING: CPU: 0 PID: 11827 at lib/refcount.c:22 refcount_warn_saturate+0x1b4/0x1f8 [ 485.837030][ C0] Modules linked in: [ 485.838118][ C0] CPU: 0 PID: 11827 Comm: syz-executor Tainted: G W 6.1.141-syzkaller #0 [ 485.840753][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 485.843436][ C0] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 485.845594][ C0] pc : refcount_warn_saturate+0x1b4/0x1f8 [ 485.847130][ C0] lr : refcount_warn_saturate+0x1b4/0x1f8 [ 485.848641][ C0] sp : ffff8000080078c0 [ 485.849756][ C0] x29: ffff8000080078c0 x28: ffff0000f3a86c00 x27: ffff0000f20f4408 [ 485.851919][ C0] x26: ffff0000cd02caf0 x25: dfff800000000000 x24: 1fffe0001e41e881 [ 485.854129][ C0] x23: ffff0000cfc37000 x22: ffff0000d5490154 x21: 000000007ffffffe [ 485.856347][ C0] x20: ffff0000d5490154 x19: ffff800017a32000 x18: 00000000dcd36c5e [ 485.858588][ C0] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 485.860774][ C0] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 485.863016][ C0] x11: ff0080000819149c x10: 0000000000000000 x9 : 05034216d88a9f00 [ 485.865212][ C0] x8 : 05034216d88a9f00 x7 : 0000000000000001 x6 : 0000000000000001 [ 485.867385][ C0] x5 : ffff800008007358 x4 : ffff800015154700 x3 : ffff8000083115f4 [ 485.869533][ C0] x2 : 0000000000000001 x1 : 0000000000000100 x0 : 0000000000000000 [ 485.871606][ C0] Call trace: [ 485.872501][ C0] refcount_warn_saturate+0x1b4/0x1f8 [ 485.873986][ C0] tipc_crypto_xmit+0x1518/0x2014 [ 485.875363][ C0] tipc_bearer_xmit_skb+0x1f0/0x384 [ 485.876797][ C0] tipc_disc_timeout+0x4c8/0x608 [ 485.878133][ C0] call_timer_fn+0x1b8/0x964 [ 485.879421][ C0] __run_timers+0x460/0x6bc [ 485.880655][ C0] run_timer_softirq+0x7c/0x114 [ 485.881990][ C0] handle_softirqs+0x318/0xc6c [ 485.883349][ C0] __do_softirq+0x14/0x20 [ 485.884556][ C0] ____do_softirq+0x14/0x20 [ 485.885756][ C0] call_on_irq_stack+0x24/0x4c [ 485.887025][ C0] do_softirq_own_stack+0x20/0x2c [ 485.888461][ C0] __irq_exit_rcu+0x23c/0x43c [ 485.889741][ C0] irq_exit_rcu+0x14/0x84 [ 485.890881][ C0] el1_interrupt+0x38/0x54 [ 485.892086][ C0] el1h_64_irq_handler+0x18/0x24 [ 485.893408][ C0] el1h_64_irq+0x64/0x68 [ 485.894565][ C0] lock_acquire+0x24c/0x644 [ 485.895791][ C0] down_write+0x5c/0x88 [ 485.896890][ C0] kernfs_add_one+0x330/0x6cc [ 485.898184][ C0] __kernfs_create_file+0x218/0x2d4 [ 485.899652][ C0] sysfs_add_file_mode_ns+0x1d8/0x294 [ 485.901106][ C0] internal_create_group+0x3d4/0xac8 [ 485.902520][ C0] sysfs_create_groups+0x60/0x134 [ 485.903869][ C0] kobject_add_internal+0x5e4/0xb30 [ 485.905321][ C0] kobject_init_and_add+0x118/0x17c [ 485.906734][ C0] net_rx_queue_update_kobjects+0x18c/0x424 [ 485.908250][ C0] netdev_register_kobject+0x1e4/0x2d4 [ 485.909692][ C0] register_netdevice+0xef8/0x15cc [ 485.911047][ C0] veth_newlink+0x62c/0xa24 [ 485.912281][ C0] rtnl_newlink+0x102c/0x1a1c [ 485.913535][ C0] rtnetlink_rcv_msg+0x734/0xce4 [ 485.914864][ C0] netlink_rcv_skb+0x208/0x3c4 [ 485.916298][ C0] rtnetlink_rcv+0x28/0x38 [ 485.917543][ C0] netlink_unicast+0x600/0x818 [ 485.918833][ C0] netlink_sendmsg+0x6e8/0x9b0 [ 485.920184][ C0] __sys_sendto+0x304/0x3fc [ 485.921473][ C0] __arm64_sys_sendto+0xd8/0xf8 [ 485.922786][ C0] invoke_syscall+0x98/0x2bc [ 485.924041][ C0] el0_svc_common+0x138/0x258 [ 485.925365][ C0] do_el0_svc+0x58/0x13c [ 485.926540][ C0] el0_svc+0x58/0x138 [ 485.927594][ C0] el0t_64_sync_handler+0x84/0xf0 [ 485.929025][ C0] el0t_64_sync+0x18c/0x190 [ 485.930348][ C0] irq event stamp: 29091 [ 485.931523][ C0] hardirqs last enabled at (29090): [] __up_console_sem+0xb4/0x100 [ 485.934268][ C0] hardirqs last disabled at (29091): [] el1_dbg+0x24/0x80 [ 485.936663][ C0] softirqs last enabled at (28876): [] clusterip_netdev_event+0x384/0x3ac [ 485.939454][ C0] softirqs last disabled at (28953): [] __do_softirq+0x14/0x20 [ 485.942009][ C0] ---[ end trace 0000000000000000 ]--- [ 485.944570][T11821] Bluetooth: hci6: command 0x0419 tx timeout [ 485.944597][ T4312] Bluetooth: hci5: command 0x0419 tx timeout [ 485.946232][T11821] Bluetooth: hci7: command 0x0419 tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 486.002107][ T47] Bluetooth: hci8: command 0x0419 tx timeout [ 486.171106][T11877] smc: net device bond0 applied user defined pnetid SYZ2 [ 486.175829][ T178] tipc: Disabling bearer [ 486.178388][ T178] tipc: Disabling bearer [ 486.202323][ T178] tipc: Left network mode [ 486.561170][ T178] ------------[ cut here ]------------ [ 486.562931][ T178] refcount_t: saturated; leaking memory. [ 486.565731][ T178] WARNING: CPU: 1 PID: 178 at lib/refcount.c:19 refcount_warn_saturate+0x174/0x1f8 [ 486.568176][ T178] Modules linked in: [ 486.569207][ T178] CPU: 1 PID: 178 Comm: kworker/u4:3 Tainted: G W 6.1.141-syzkaller #0 [ 486.571723][ T178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 486.574428][ T178] Workqueue: netns cleanup_net [ 486.575786][ T178] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 486.577867][ T178] pc : refcount_warn_saturate+0x174/0x1f8 [ 486.579404][ T178] lr : refcount_warn_saturate+0x174/0x1f8 [ 486.580952][ T178] sp : ffff8000207e7560 [ 486.582068][ T178] x29: ffff8000207e7560 x28: 1ffff000040fceb4 x27: dfff800000000000 [ 486.584231][ T178] x26: 00000000c0000000 x25: 00000000c0000000 x24: ffff0000d5490154 [ 486.586330][ T178] x23: 000000000000000a x22: 0000000000000cc0 x21: 000000007ffffffe [ 486.588516][ T178] x20: ffff0000d5490154 x19: ffff800017a32000 x18: ffff800011a7bce0 [ 486.590660][ T178] x17: 1fffe00033ee7176 x16: ffff8000082d1c00 x15: ffff80001506d000 [ 486.592818][ T178] x14: 0000000000000100 x13: 1ffff00002a0e0b1 x12: 0000000000ff0100 [ 486.594938][ T178] x11: ff0080000a88a3b4 x10: 0000000000000003 x9 : 3415c036db65a700 [ 486.597134][ T178] x8 : 3415c036db65a700 x7 : ffff8000082516dc x6 : 0000000000000000 [ 486.599344][ T178] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 486.601481][ T178] x2 : 0000000000000006 x1 : ffff800011a7d7e0 x0 : ffff80018a773000 [ 486.603650][ T178] Call trace: [ 486.604518][ T178] refcount_warn_saturate+0x174/0x1f8 [ 486.605964][ T178] nf_nat_masq_schedule+0x478/0x54c [ 486.607365][ T178] masq_device_event+0x9c/0xe0 [ 486.608714][ T178] raw_notifier_call_chain+0xd4/0x164 [ 486.610192][ T178] dev_close_many+0x2cc/0x440 [ 486.611468][ T178] unregister_netdevice_many+0x3c4/0x1740 [ 486.613021][ T178] ip6gre_exit_batch_net+0x418/0x468 [ 486.614519][ T178] cleanup_net+0x644/0xa74 [ 486.615696][ T178] process_one_work+0x7f4/0x13a8 [ 486.617012][ T178] worker_thread+0x8c8/0xfbc [ 486.618224][ T178] kthread+0x250/0x2d8 [ 486.619277][ T178] ret_from_fork+0x10/0x20 [ 486.620447][ T178] irq event stamp: 15925862 [ 486.621661][ T178] hardirqs last enabled at (15925861): [] finish_lock_switch+0xb0/0x1c4 [ 486.624381][ T178] hardirqs last disabled at (15925862): [] el1_dbg+0x24/0x80 [ 486.626760][ T178] softirqs last enabled at (15925844): [] handle_softirqs+0xaf8/0xc6c [ 486.629428][ T178] softirqs last disabled at (15925681): [] __do_softirq+0x14/0x20 [ 486.631943][ T178] ---[ end trace 0000000000000000 ]--- [ 486.637204][ T178] ------------[ cut here ]------------ [ 486.638740][ T178] WARNING: CPU: 1 PID: 178 at lib/ref_tracker.c:77 ref_tracker_alloc+0x230/0x3cc [ 486.641105][ T178] Modules linked in: [ 486.642223][ T178] CPU: 1 PID: 178 Comm: kworker/u4:3 Tainted: G W 6.1.141-syzkaller #0 [ 486.644883][ T178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 486.647624][ T178] Workqueue: netns cleanup_net [ 486.648976][ T178] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 486.651073][ T178] pc : ref_tracker_alloc+0x230/0x3cc [ 486.652507][ T178] lr : ref_tracker_alloc+0x230/0x3cc [ 486.653898][ T178] sp : ffff8000207e7440 [ 486.654972][ T178] x29: ffff8000207e7520 x28: 1ffff000040fceb4 x27: dfff800000000000 [ 486.657275][ T178] x26: dfff800000000000 x25: ffff7000040fce88 x24: ffff0000da168908 [ 486.659475][ T178] x23: ffff8000207e7440 x22: ffff0000d54901a4 x21: ffff0000da168950 [ 486.661594][ T178] x20: 0000000000000cc0 x19: ffff0000d5490158 x18: ffff800011a7bce0 [ 486.663799][ T178] x17: ffff80000fcf5310 x16: ffff8000082d1c00 x15: ffff800010102754 [ 486.665967][ T178] x14: ffff8000101029ac x13: 1ffff00002a0e0b1 x12: 0000000000ff0100 [ 486.668170][ T178] x11: ff0080000aa23d44 x10: 0000000000000000 x9 : ffff80000aa23d44 [ 486.670405][ T178] x8 : ffff0000c93bb780 x7 : 0000000000000000 x6 : 000000000000003f [ 486.672558][ T178] x5 : 0000000000000040 x4 : ffffffffffffffe0 x3 : 0000000000000020 [ 486.674774][ T178] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff8000207e7460 [ 486.676978][ T178] Call trace: [ 486.677919][ T178] ref_tracker_alloc+0x230/0x3cc [ 486.679251][ T178] nf_nat_masq_schedule+0x328/0x54c [ 486.680702][ T178] masq_device_event+0x9c/0xe0 [ 486.681992][ T178] raw_notifier_call_chain+0xd4/0x164 [ 486.683446][ T178] dev_close_many+0x2cc/0x440 [ 486.684699][ T178] unregister_netdevice_many+0x3c4/0x1740 [ 486.686299][ T178] ip6gre_exit_batch_net+0x418/0x468 [ 486.687707][ T178] cleanup_net+0x644/0xa74 [ 486.688978][ T178] process_one_work+0x7f4/0x13a8 [ 486.690357][ T178] worker_thread+0x8c8/0xfbc [ 486.691611][ T178] kthread+0x250/0x2d8 [ 486.692762][ T178] ret_from_fork+0x10/0x20 [ 486.693981][ T178] irq event stamp: 15926000 [ 486.695257][ T178] hardirqs last enabled at (15925999): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 486.698091][ T178] hardirqs last disabled at (15926000): [] el1_dbg+0x24/0x80 [ 486.700518][ T178] softirqs last enabled at (15925990): [] handle_softirqs+0xaf8/0xc6c [ 486.703259][ T178] softirqs last disabled at (15925865): [] __do_softirq+0x14/0x20 [ 486.705884][ T178] ---[ end trace 0000000000000000 ]--- [ 486.714684][ T4461] ------------[ cut here ]------------ [ 486.716310][ T4461] WARNING: CPU: 1 PID: 4461 at lib/ref_tracker.c:110 ref_tracker_free+0x484/0x694 [ 486.718713][ T4461] Modules linked in: [ 486.719820][ T4461] CPU: 1 PID: 4461 Comm: kworker/1:8 Tainted: G W 6.1.141-syzkaller #0 [ 486.722502][ T4461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 486.725261][ T4461] Workqueue: events iterate_cleanup_work [ 486.726893][ T4461] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 486.729080][ T4461] pc : ref_tracker_free+0x484/0x694 [ 486.730511][ T4461] lr : ref_tracker_free+0x484/0x694 [ 486.731991][ T4461] sp : ffff800020e17940 [ 486.733165][ T4461] x29: ffff800020e17a40 x28: ffff00019f750800 x27: ffff0000da168900 [ 486.735368][ T4461] x26: dfff800000000000 x25: ffff7000041c2f2c x24: ffff800020e17aa0 [ 486.737551][ T4461] x23: ffff7000041c2f54 x22: ffff800020e17960 x21: ffff0000d54901a4 [ 486.739821][ T4461] x20: ffff0000da168950 x19: ffff0000d5490158 x18: ffff800011a7bce0 [ 486.742036][ T4461] x17: ffff8000181a1000 x16: ffff8000082d0750 x15: ffff800017c81fc0 [ 486.744289][ T4461] x14: 0000000000000100 x13: 1ffff00002a0e0b1 x12: 0000000000ff0100 [ 486.746435][ T4461] x11: ff0080000aa2441c x10: 0000000000000000 x9 : ffff80000aa2441c [ 486.748610][ T4461] x8 : ffff0000cf088000 x7 : 0000000000000000 x6 : 000000000000003f [ 486.750882][ T4461] x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000004 [ 486.753089][ T4461] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff800020e17980 [ 486.755334][ T4461] Call trace: [ 486.756251][ T4461] ref_tracker_free+0x484/0x694 [ 486.757639][ T4461] iterate_cleanup_work+0xe8/0x230 [ 486.759051][ T4461] process_one_work+0x7f4/0x13a8 [ 486.760501][ T4461] worker_thread+0x8c8/0xfbc [ 486.761714][ T4461] kthread+0x250/0x2d8 [ 486.762885][ T4461] ret_from_fork+0x10/0x20 [ 486.764037][ T4461] irq event stamp: 246592 [ 486.765314][ T4461] hardirqs last enabled at (246591): [] __local_bh_enable_ip+0x1f8/0x380 [ 486.768129][ T4461] hardirqs last disabled at (246592): [] el1_dbg+0x24/0x80 [ 486.770491][ T4461] softirqs last enabled at (246590): [] local_bh_enable+0x10/0x34 [ 486.773208][ T4461] softirqs last disabled at (246588): [] local_bh_disable+0x10/0x34 [ 486.775845][ T4461] ---[ end trace 0000000000000000 ]--- [ 488.871481][ T178] device hsr_slave_0 left promiscuous mode [ 488.902323][ T178] device hsr_slave_1 left promiscuous mode [ 488.972474][ T178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.974729][ T178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.977693][ T178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.979787][ T178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.982824][ T178] device bridge_slave_1 left promiscuous mode [ 488.985941][ T178] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.023017][ T178] device bridge_slave_0 left promiscuous mode [ 489.025636][ T178] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.092821][ T178] device veth1_macvtap left promiscuous mode [ 489.094926][ T178] device veth0_macvtap left promiscuous mode [ 490.835799][ T178] team0 (unregistering): Port device team_slave_1 removed [ 491.024857][ T178] team0 (unregistering): Port device team_slave_0 removed [ 494.572516][ T2060] ieee802154 phy0 wpan0: encryption failed: -22