last executing test programs: 19m56.510704521s ago: executing program 32 (id=80): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0802, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0xffffffffffffff01, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r1}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 18m19.174939902s ago: executing program 33 (id=314): openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) socket$inet_tcp(0x2, 0x1, 0x0) ptrace(0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r6, 0x0) 17m14.05461399s ago: executing program 34 (id=683): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, 0x0, 0x0, 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x400000, 0xfffffffe, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) 15m57.047818841s ago: executing program 35 (id=1238): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r3, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f00000004c0)=ANY=[], 0x0) 15m53.174143392s ago: executing program 36 (id=1250): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32=r0, @ANYBLOB='\b\x00'], 0x44}}, 0x0) 15m46.40620572s ago: executing program 37 (id=1217): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 14m59.001715724s ago: executing program 38 (id=1383): socket$tipc(0x1e, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000016, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0xf) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r7 = syz_open_pts(r6, 0x141601) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r5, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) 14m56.448092125s ago: executing program 39 (id=1399): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000004280)=ANY=[], 0x0, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14m52.088449362s ago: executing program 40 (id=1413): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) mlock2(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000019080)={0x2, 0x4e22, @empty}, 0x10) r2 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) writev(r2, &(0x7f0000002880)=[{0x0}], 0x1) 14m43.779760561s ago: executing program 41 (id=1500): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 13m56.545655231s ago: executing program 42 (id=1619): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) mlock2(&(0x7f00005e2000/0x4000)=nil, 0x4000, 0x1) r1 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) writev(r1, &(0x7f0000002880)=[{0x0}], 0x1) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13m53.846413956s ago: executing program 3 (id=1707): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xff}, 0x1c) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) faccessat2(r2, &(0x7f0000000000)='\x00', 0x2, 0x1100) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x5ed6d) syz_init_net_socket$x25(0x9, 0x5, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x2) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 13m52.577220589s ago: executing program 3 (id=1716): socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x10001, 0x1}, 0x0, 0x0, 0x0) 13m52.312038879s ago: executing program 3 (id=1718): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="070000000400000008"], 0x50) socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='kfree\x00', r0, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prlimit64(0x0, 0x7, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x4000000) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 13m51.838887741s ago: executing program 3 (id=1720): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x4000) 13m50.548743096s ago: executing program 3 (id=1722): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002a00)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESHEX=0x0, @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRESDEC], 0x8, 0x2eb, &(0x7f0000000880)="$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") r2 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000000201090000000000000000000a000000180001801400018008000100ac1e000108000200640101010c001980"], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x404c084) 13m50.195214001s ago: executing program 3 (id=1723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f000033e000/0x1000)=nil, 0x1000, 0x3000008, 0x50032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, 0x0, 0x205, 0xffffffec, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd67001b011d00"], 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002080)=@newtaction={0x14, 0x30, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x9}}, 0x4c) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r8}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x5, r8, 0x10, 0x0, @in={0x2, 0x4e23, @private=0xa010100}}}, 0xa0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd37, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0xa}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x31, 0xb, 0xffffffff}]}}]}, 0x3c}}, 0x4000) socket$netlink(0x10, 0x3, 0x0) 13m35.030863457s ago: executing program 43 (id=1723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f000033e000/0x1000)=nil, 0x1000, 0x3000008, 0x50032, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, 0x0, 0x205, 0xffffffec, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd67001b011d00"], 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002080)=@newtaction={0x14, 0x30, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x9}}, 0x4c) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r8}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x5, r8, 0x10, 0x0, @in={0x2, 0x4e23, @private=0xa010100}}}, 0xa0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd37, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0xa}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x31, 0xb, 0xffffffff}]}}]}, 0x3c}}, 0x4000) socket$netlink(0x10, 0x3, 0x0) 13m12.583551898s ago: executing program 7 (id=1934): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x103) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) gettid() r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) close(r2) 13m12.117385727s ago: executing program 7 (id=1938): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1a4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f00000008c0)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file7\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000800)={{}, {0x1, 0x7}, [], {0x4, 0x1}, [], {}, {0x20, 0x7}}, 0x24, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) 13m10.777770417s ago: executing program 7 (id=1942): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x0, 0x1, 0x0, 0x0, {{0x1ff, 0x0, 0x2}, "8db3af46be106144c27c79e392398ca0fecbca49d62777fb6c2924f797313bd2eeddd46a1136da88dda189fcb761ab9208cfab8a13374c376c716229a402271bc595c4df0289f1e1353e00a501182384e54e1a4bf38b68100c2416d28062e6ec2b3379a8fe2d59a64eb190c21c3cb0ef5b2438662400c25cf2d36cd742429c190df4883ded1a824601643a652250f3896a4a"}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0xbd}, {0x3, 0x0, 0x7ab, 0x5, 0x7, 0x2, 0x2}}}]}]}]}}]}, 0x6c}}, 0x0) 13m10.197465184s ago: executing program 7 (id=1947): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB='\b\x00'], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13m9.873105732s ago: executing program 7 (id=1951): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0xdd3) close(r2) 13m9.430193102s ago: executing program 7 (id=1954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@fallback, 0xffffffffffffffff, 0x25, 0x2000}, 0x20) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, 0x0, 0x24040000) 12m54.227575221s ago: executing program 44 (id=1954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@fallback, 0xffffffffffffffff, 0x25, 0x2000}, 0x20) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, 0x0, 0x24040000) 5m24.920851142s ago: executing program 1 (id=5240): unshare(0x26020480) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x16b001, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x10847ba, 0x95c, 0xe, 0x0, 0x2e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="000086dd000011000000000000006e711fbe0f982f0100000000000000120000000000000001ff020000000000000000000000000001", @ANYBLOB="b9"], 0xfce) 5m23.253817523s ago: executing program 1 (id=5249): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r0, 0x1) 5m22.744682757s ago: executing program 1 (id=5250): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) syz_io_uring_setup(0x186, 0x0, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 5m22.196271507s ago: executing program 1 (id=5251): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x8, 0x4, 0xff, 0x6}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000010, 0x3800000, 0x0, 0xfffff30b, 0x800, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0xa, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x10008e, 0x1, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0xb53, 0x5, 0x800, 0x4, 0x81, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x6, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x4, 0xd1, 0x8, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0xff, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0x1ffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x9, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) 5m19.061495657s ago: executing program 1 (id=5257): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800850, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x0, 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000200)=0xe9, 0x4) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c89f, 0x1c881, 0x8, 0xd1}) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x4}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m18.628405326s ago: executing program 1 (id=5261): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dffbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) 5m3.501401886s ago: executing program 45 (id=5261): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dffbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) 2m56.421604198s ago: executing program 8 (id=5950): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') 2m56.06363397s ago: executing program 8 (id=5954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x1}, {&(0x7f0000000440)="588addb04cdce4", 0x7}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 2m55.29479138s ago: executing program 8 (id=5961): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r1, 0x0, 0x0, 0xf0, 0xa) 2m55.02220318s ago: executing program 8 (id=5964): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) listen(r2, 0x0) 2m54.795176859s ago: executing program 8 (id=5967): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r4, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) shutdown(r4, 0x1) 2m53.550636169s ago: executing program 8 (id=5970): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/102387, 0x18ff3}, {0x0}], 0x2, 0x0, 0x400) recvmsg$qrtr(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)=""/95, 0x5f}, {&(0x7f0000000640)=""/89, 0x59}, {&(0x7f0000000780)=""/26, 0x1a}, {&(0x7f0000000800)=""/22, 0x16}, {&(0x7f0000000840)=""/7, 0x7}, {&(0x7f0000000a00)=""/229, 0xe5}, {&(0x7f0000000940)}], 0x7, 0x0, 0x0, 0x40000000}, 0x38, 0x1) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) sendto$packet(r2, 0x0, 0x0, 0x20000044, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaeaaaabb8864"], 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x458081, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_read_part_table(0x1042, &(0x7f0000002080)="$eJzsz9EJwjAYBOBLfyvWJycQl3IjXcYlI9VadAAR4fuewuXIkfBTQ3LIJpWpP9UjnZbr3pPs125L0uZWjuNSOY2X2s2HWt9s09vA9nMsw7VeUcv59s2/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC/uAcAAP//8c8Ptw==") socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) pwrite64(r2, &(0x7f00000004c0)="82806d2a20ca6b7731fc6c1216fdf30024c4d02ceaf87af17888c3f0467b3c544cd1ce4c9b3e9de999bb5f68a75c67f0d20a14299a14cdf5dc1313b27f47b66b5a7dd180961c20c7112aa5b54e1a61345f453c291dad2ed96813cabfdeacd546e2c4d0e496300d9d4ff60fb5beed4c0f52c3b89d3f8ea63f5e325a921fa7ebec747f81185bb5ee7fcd2dcf0eb44e53c1195d042feafda91ee8846835e6bb1803200bfc128b9ff0278385d0faf09a6004757caf03a21394cefe204f", 0xbb, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 2m37.814571397s ago: executing program 46 (id=5970): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/102387, 0x18ff3}, {0x0}], 0x2, 0x0, 0x400) recvmsg$qrtr(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)=""/95, 0x5f}, {&(0x7f0000000640)=""/89, 0x59}, {&(0x7f0000000780)=""/26, 0x1a}, {&(0x7f0000000800)=""/22, 0x16}, {&(0x7f0000000840)=""/7, 0x7}, {&(0x7f0000000a00)=""/229, 0xe5}, {&(0x7f0000000940)}], 0x7, 0x0, 0x0, 0x40000000}, 0x38, 0x1) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) sendto$packet(r2, 0x0, 0x0, 0x20000044, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaeaaaabb8864"], 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x458081, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_read_part_table(0x1042, &(0x7f0000002080)="$eJzsz9EJwjAYBOBLfyvWJycQl3IjXcYlI9VadAAR4fuewuXIkfBTQ3LIJpWpP9UjnZbr3pPs125L0uZWjuNSOY2X2s2HWt9s09vA9nMsw7VeUcv59s2/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC/uAcAAP//8c8Ptw==") socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) pwrite64(r2, &(0x7f00000004c0)="82806d2a20ca6b7731fc6c1216fdf30024c4d02ceaf87af17888c3f0467b3c544cd1ce4c9b3e9de999bb5f68a75c67f0d20a14299a14cdf5dc1313b27f47b66b5a7dd180961c20c7112aa5b54e1a61345f453c291dad2ed96813cabfdeacd546e2c4d0e496300d9d4ff60fb5beed4c0f52c3b89d3f8ea63f5e325a921fa7ebec747f81185bb5ee7fcd2dcf0eb44e53c1195d042feafda91ee8846835e6bb1803200bfc128b9ff0278385d0faf09a6004757caf03a21394cefe204f", 0xbb, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 6.904210995s ago: executing program 2 (id=7167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffe0, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3}}}]}, 0x3c}}, 0x24004800) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.64092037s ago: executing program 4 (id=7173): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r3, 0x7bfe, 0x3ffb, 0x4f, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffd000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x1, 0x6) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x200448c0) r4 = memfd_secret(0x80000) fcntl$setlease(r4, 0x400, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 5.440952525s ago: executing program 2 (id=7175): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03fe6044238cb89e14f080350de0ffff00184000632f77fbac14140ee000000d62079f4b4d0f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x51, 0x0, &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x50) 5.410748865s ago: executing program 5 (id=7176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 5.227025066s ago: executing program 4 (id=7178): socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000014000/0xa000)=nil, 0xa000, 0x65) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) ppoll(0x0, 0xfffffffffffffd8e, 0x0, 0x0, 0x4e) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x101, 0x0) 4.824152429s ago: executing program 2 (id=7181): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180900000000000000000000030000001ca100000000000085100000fcffff"], &(0x7f0000000080)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) 4.798951481s ago: executing program 5 (id=7182): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff01000000000000020013"], 0x98}, 0x1, 0x7}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x30, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a"], 0xfc}}, 0x0) 4.507685909s ago: executing program 5 (id=7185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000007000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b706000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r2, 0x0, 0x80000001}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 4.496399843s ago: executing program 2 (id=7186): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) lsm_set_self_attr(0x66, 0x0, 0x43, 0x0) 4.254879797s ago: executing program 2 (id=7188): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r1}, 0x18) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 4.189099966s ago: executing program 5 (id=7189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) 4.096240677s ago: executing program 0 (id=7190): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf", @ANYRES32=0x0, @ANYBLOB="100804000000000008001b00000000001e22c5536ab2181ca1fb11d4d67ff8a7b21f59ba686422af"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) close(0x3) 4.041104826s ago: executing program 2 (id=7191): socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, 0x0, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x204000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x800007fff}, 0x18) 3.921683785s ago: executing program 4 (id=7192): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d48751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c79afc0d444e6c78b0216", 0x4d}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x62040200) 2.57337509s ago: executing program 9 (id=7195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x28, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.393291908s ago: executing program 6 (id=7196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000800000000a20000000000a01020000000000000000010000000900010073797a300000000040000000020a01000000000000000000010000000900010073797a"], 0xec}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 2.314468827s ago: executing program 0 (id=7197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "7cff0000080094cf", "c11d9a1e03550000000000000fd7aab9", ']G\x00', "5e33931677e0f2d7"}, 0x28) sendto$inet6(r0, &(0x7f0000000740)='S', 0x1, 0x8000, 0x0, 0x0) close(r0) 1.93766025s ago: executing program 9 (id=7198): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x290) 1.898007823s ago: executing program 0 (id=7199): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180900000000000000000000030000001ca100000000000085100000fcffff"], &(0x7f0000000080)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) 1.774262454s ago: executing program 6 (id=7200): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) lsm_set_self_attr(0x66, 0x0, 0x43, 0x0) 1.645754792s ago: executing program 9 (id=7201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x24, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) 1.618963661s ago: executing program 0 (id=7202): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 'lo\x00'}}, 0x1e) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @random="91eb7207d7cb", 'ip_vti0\x00'}}, 0x1e) close(r1) 1.504558269s ago: executing program 6 (id=7203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.493018749s ago: executing program 5 (id=7204): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x700000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x2) 1.395564547s ago: executing program 4 (id=7205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}, 0x1, 0x0, 0x0, 0x4088d}, 0x44004) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 1.32221117s ago: executing program 0 (id=7206): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xfc}}, 0x0) 1.321545853s ago: executing program 9 (id=7207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03fe6044238cb89e14f080350de0ffff00184000632f77fbac14140ee000000d62079f4b4d0f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x51, 0x0, &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x50) 1.119542122s ago: executing program 6 (id=7208): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @multicast}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048080}, 0x0) 1.061453626s ago: executing program 0 (id=7209): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf", @ANYRES32=0x0, @ANYBLOB="100804000000000008001b00000000001e22c5536ab2181ca1fb11d4d67ff8a7b21f59ba686422af"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) close(0x3) 961.534907ms ago: executing program 4 (id=7210): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 233.753026ms ago: executing program 9 (id=7211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a0001007770616e33000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) 205.073158ms ago: executing program 5 (id=7212): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x82) close_range(r1, 0xffffffffffffffff, 0x0) 178.88065ms ago: executing program 6 (id=7213): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 101.496467ms ago: executing program 4 (id=7214): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x49) 26.714308ms ago: executing program 9 (id=7215): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r1}, 0x18) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=7216): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) kernel console output (not intermixed with test programs): .5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1121.445091][ T31] audit: type=1326 audit(1120.821:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23450 comm="syz.2.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1121.498153][T23374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1121.543367][T23374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.573928][ T31] audit: type=1326 audit(1120.841:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23450 comm="syz.2.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1121.623462][ T5843] Bluetooth: hci4: command tx timeout [ 1121.636051][ T31] audit: type=1326 audit(1121.301:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23450 comm="syz.2.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1121.659157][T23374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1121.735638][ T31] audit: type=1326 audit(1121.301:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23450 comm="syz.2.5698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1121.763690][T23467] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5701'. [ 1122.084888][T23463] syzkaller0: entered promiscuous mode [ 1122.100603][T23463] syzkaller0: entered allmulticast mode [ 1122.213081][T23374] hsr_slave_0: entered promiscuous mode [ 1122.251359][T23374] hsr_slave_1: entered promiscuous mode [ 1122.267217][T23374] debugfs: 'hsr0' already exists in 'hsr' [ 1122.277966][T23374] Cannot create hsr debugfs directory [ 1122.918198][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 1123.064743][T23480] loop8: detected capacity change from 0 to 1024 [ 1123.084218][T23480] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1123.184410][T23480] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1123.205241][T23480] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1123.229648][T23480] EXT4-fs error (device loop8): ext4_free_blocks:6727: comm syz.8.5705: Freeing blocks not in datazone - block = 0, count = 4096 [ 1123.254250][T23480] EXT4-fs (loop8): 1 orphan inode deleted [ 1123.262049][T23480] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1123.425426][T22187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.724500][T21060] Bluetooth: hci4: command tx timeout [ 1125.713637][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.590747][T23469] lo speed is unknown, defaulting to 1000 [ 1126.906678][T23495] xt_hashlimit: size too large, truncated to 1048576 [ 1128.585829][T23514] loop5: detected capacity change from 0 to 1024 [ 1128.657318][T23514] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1128.843467][T23514] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1128.891072][T23514] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1128.933808][T23514] EXT4-fs error (device loop5): ext4_free_blocks:6727: comm syz.5.5717: Freeing blocks not in datazone - block = 0, count = 4096 [ 1129.005362][T23514] EXT4-fs (loop5): 1 orphan inode deleted [ 1129.039965][T23514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1129.059246][T23520] : renamed from wg2 [ 1129.209028][T21841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1129.219041][T23374] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1129.316988][T23374] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1129.352668][T23374] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1129.397632][T23374] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1129.701524][T23540] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5727'. [ 1129.711619][T23374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1129.768672][T23374] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.845385][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.852589][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.938377][T16978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.945606][T16978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1130.109257][T23546] xt_hashlimit: size too large, truncated to 1048576 [ 1131.169452][T23562] loop5: detected capacity change from 0 to 1024 [ 1131.199800][T23562] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1131.249431][T23562] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1131.283476][T23562] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1131.313759][T23562] EXT4-fs error (device loop5): ext4_free_blocks:6727: comm syz.5.5736: Freeing blocks not in datazone - block = 0, count = 4096 [ 1131.330253][T23562] EXT4-fs (loop5): 1 orphan inode deleted [ 1131.338106][T23562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1131.424437][T23571] netlink: 'syz.9.5738': attribute type 10 has an invalid length. [ 1131.460606][T23565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.468342][T23565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.506389][T21841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1131.852113][T23565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1131.893800][T23565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1132.244814][T23571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1132.284127][T23571] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1132.314692][ T6240] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.364010][ T6240] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.417961][ T6240] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.459483][ T6240] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.528798][T23374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.628748][T23598] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1133.692107][T23598] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1133.748679][T23598] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1133.776079][T23598] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1133.788470][T23374] veth0_vlan: entered promiscuous mode [ 1133.810731][T23598] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1133.818143][T23610] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5750'. [ 1133.826628][T23609] loop5: detected capacity change from 0 to 1024 [ 1133.836821][T23374] veth1_vlan: entered promiscuous mode [ 1133.844398][T23610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.864058][T23598] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1133.876075][T23609] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1133.879735][T23610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.895998][T23598] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1133.901991][T23598] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1133.936724][T23598] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1133.937049][T23609] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1133.951747][T23609] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1133.962300][T23609] EXT4-fs error (device loop5): ext4_free_blocks:6727: comm syz.5.5752: Freeing blocks not in datazone - block = 0, count = 4096 [ 1133.976965][T23610] bond0: (slave batadv0): Releasing backup interface [ 1133.977273][T23609] EXT4-fs (loop5): 1 orphan inode deleted [ 1133.995856][T23609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1133.999838][T23598] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1134.021922][T23598] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1134.070975][T23612] tipc: Started in network mode [ 1134.084367][T23598] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1134.094335][T23612] tipc: Node identity ac14140f, cluster identity 4711 [ 1134.136803][T21841] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.137804][T23612] tipc: New replicast peer: 255.255.255.255 [ 1134.155937][T23612] tipc: Enabled bearer , priority 10 [ 1134.163130][T23598] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1134.193523][T23598] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1134.200183][T23615] netlink: 'syz.8.5754': attribute type 4 has an invalid length. [ 1134.217149][T23598] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1134.285843][T23374] veth0_macvtap: entered promiscuous mode [ 1134.385185][T23374] veth1_macvtap: entered promiscuous mode [ 1134.450462][T23374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.549716][T23374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.664205][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.723426][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.765650][T15149] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.846217][T15149] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.165369][T15176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.189952][T15176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.288694][ T9] tipc: Node number set to 2886997007 [ 1135.316528][T16968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.353249][T16968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.623736][T21060] Bluetooth: hci1: command 0x0406 tx timeout [ 1135.786772][T21060] Bluetooth: hci5: command 0x0406 tx timeout [ 1135.829082][T23656] loop5: detected capacity change from 0 to 512 [ 1135.863368][T21060] Bluetooth: hci2: command 0x0406 tx timeout [ 1135.885988][T23656] journal_path: Lookup failure for './file0' [ 1135.943153][T23656] EXT4-fs: error: could not find journal device path [ 1135.943793][ T5843] Bluetooth: hci6: command 0x0c1a tx timeout [ 1136.021158][ T31] audit: type=1326 audit(1135.981:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23662 comm="syz.8.5776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dc78f749 code=0x7ffc0000 [ 1136.033286][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 1136.189836][ T31] audit: type=1326 audit(1136.011:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23662 comm="syz.8.5776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f41dc78f749 code=0x7ffc0000 [ 1136.222661][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 1136.268159][ T31] audit: type=1326 audit(1136.011:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23662 comm="syz.8.5776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dc78f749 code=0x7ffc0000 [ 1136.290486][T23667] xt_hashlimit: size too large, truncated to 1048576 [ 1136.314125][ T31] audit: type=1326 audit(1136.011:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23662 comm="syz.8.5776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f41dc78f749 code=0x7ffc0000 [ 1136.346676][ T31] audit: type=1326 audit(1136.011:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23662 comm="syz.8.5776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41dc78f749 code=0x7ffc0000 [ 1137.195964][T23695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.203862][T23695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.488260][T23695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1137.534619][T23695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1137.592545][ T31] audit: type=1326 audit(1137.551:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23706 comm="syz.5.5794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ef8f749 code=0x7ffc0000 [ 1137.650935][ T31] audit: type=1326 audit(1137.551:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23706 comm="syz.5.5794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ef8f749 code=0x7ffc0000 [ 1137.708178][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 1137.736923][ T31] audit: type=1326 audit(1137.551:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23706 comm="syz.5.5794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ef8f749 code=0x7ffc0000 [ 1137.866252][T21060] Bluetooth: hci5: command 0x0406 tx timeout [ 1137.913786][ T31] audit: type=1326 audit(1137.551:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23706 comm="syz.5.5794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fac9ef8f749 code=0x7ffc0000 [ 1137.942560][ T31] audit: type=1326 audit(1137.551:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23706 comm="syz.5.5794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ef8f749 code=0x7ffc0000 [ 1137.974388][T21060] Bluetooth: hci2: command 0x0406 tx timeout [ 1138.023533][T21060] Bluetooth: hci6: command 0x0c1a tx timeout [ 1138.103284][T21060] Bluetooth: hci0: command 0x0c1a tx timeout [ 1138.145514][T23714] loop8: detected capacity change from 0 to 128 [ 1138.263572][T21060] Bluetooth: hci4: command 0x0c1a tx timeout [ 1138.370846][T23704] : renamed from vlan0 [ 1138.390063][T16968] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.445932][T16968] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.489620][T16968] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.522400][T16968] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.686063][T23723] loop8: detected capacity change from 0 to 1024 [ 1138.706960][T23723] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1138.742588][T23723] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1138.753958][T23730] xt_hashlimit: size too large, truncated to 1048576 [ 1138.766529][T23723] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1138.782504][T23723] EXT4-fs error (device loop8): ext4_free_blocks:6727: comm syz.8.5800: Freeing blocks not in datazone - block = 0, count = 4096 [ 1138.808122][T23723] EXT4-fs (loop8): 1 orphan inode deleted [ 1138.840039][T23723] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1139.047800][T22187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1140.103161][T21060] Bluetooth: hci6: command 0x0c1a tx timeout [ 1140.184809][T21060] Bluetooth: hci0: command 0x0c1a tx timeout [ 1140.220218][T23775] loop8: detected capacity change from 0 to 1024 [ 1140.256540][T23775] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1140.305351][T23775] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1140.320021][T23775] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1140.363278][T21060] Bluetooth: hci4: command 0x0c1a tx timeout [ 1140.372018][T23775] EXT4-fs error (device loop8): ext4_free_blocks:6727: comm syz.8.5820: Freeing blocks not in datazone - block = 0, count = 4096 [ 1140.585212][T23775] EXT4-fs (loop8): 1 orphan inode deleted [ 1140.678656][T23775] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1141.141047][T23791] tmpfs: Bad value for 'mpol' [ 1141.188072][T22187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.316450][T23794] xt_hashlimit: size too large, truncated to 1048576 [ 1141.379013][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 1141.379038][ T31] audit: type=1326 audit(1141.341:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23795 comm="syz.9.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1141.408133][ T31] audit: type=1326 audit(1141.371:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23795 comm="syz.9.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1142.295576][ T31] audit: type=1326 audit(1141.371:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23795 comm="syz.9.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1142.318068][ T31] audit: type=1326 audit(1141.371:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23795 comm="syz.9.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1142.340496][ T31] audit: type=1326 audit(1141.371:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23795 comm="syz.9.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1142.406367][ T31] audit: type=1326 audit(1141.371:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23795 comm="syz.9.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1142.463066][ T31] audit: type=1326 audit(1141.371:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23795 comm="syz.9.5828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1144.248723][T23850] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5849'. [ 1144.307450][T23850] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5849'. [ 1144.507972][T23856] xt_hashlimit: size too large, truncated to 1048576 [ 1144.967514][T23869] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5854'. [ 1145.010599][T23869] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5854'. [ 1145.363770][T23875] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1145.571884][T23877] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5859'. [ 1146.127446][T23890] atomic_op ffff888077d51198 conn xmit_atomic 0000000000000000 [ 1146.826462][T23907] lo speed is unknown, defaulting to 1000 [ 1148.485351][ T31] audit: type=1326 audit(1148.451:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23928 comm="syz.2.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1148.613235][ T31] audit: type=1326 audit(1148.451:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23928 comm="syz.2.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1148.700973][ T31] audit: type=1326 audit(1148.471:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23928 comm="syz.2.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1148.768582][T23941] loop8: detected capacity change from 0 to 1024 [ 1148.776848][ T31] audit: type=1326 audit(1148.471:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23928 comm="syz.2.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1148.793789][T23935] lo speed is unknown, defaulting to 1000 [ 1148.805103][T23941] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1148.834459][T23941] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1148.849276][ T31] audit: type=1326 audit(1148.471:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23928 comm="syz.2.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1148.863396][T23941] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1148.878808][T23941] EXT4-fs error (device loop8): ext4_free_blocks:6727: comm syz.8.5881: Freeing blocks not in datazone - block = 0, count = 4096 [ 1148.893749][ T31] audit: type=1326 audit(1148.471:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23928 comm="syz.2.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1148.916452][ T31] audit: type=1326 audit(1148.471:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23928 comm="syz.2.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1148.923756][T23941] EXT4-fs (loop8): 1 orphan inode deleted [ 1148.939804][ T31] audit: type=1326 audit(1148.471:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23928 comm="syz.2.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1148.967530][ T31] audit: type=1326 audit(1148.471:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23928 comm="syz.2.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1149.042200][T23941] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1149.058426][ T31] audit: type=1326 audit(1148.471:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23928 comm="syz.2.5876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1149.325404][T22187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1149.602289][T23956] lo speed is unknown, defaulting to 1000 [ 1149.815207][T23965] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5890'. [ 1151.187688][T23985] netlink: 'syz.2.5894': attribute type 4 has an invalid length. [ 1151.225418][T23985] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5894'. [ 1151.238590][T23985] .`: renamed from bond0 [ 1152.467507][T24015] syzkaller0: entered promiscuous mode [ 1152.494353][T24015] syzkaller0: entered allmulticast mode [ 1152.630243][T24015] tipc: Started in network mode [ 1152.635789][T24015] tipc: Node identity dee418f8bbce, cluster identity 4711 [ 1152.668867][T24015] tipc: Enabled bearer , priority 0 [ 1152.686162][T24018] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5905'. [ 1152.777667][T24014] tipc: Resetting bearer [ 1152.929734][T24014] tipc: Disabling bearer [ 1153.627885][ T31] kauditd_printk_skb: 36 callbacks suppressed [ 1153.627911][ T31] audit: type=1326 audit(1153.591:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24035 comm="syz.0.5911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1153.705414][ T31] audit: type=1326 audit(1153.631:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24035 comm="syz.0.5911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1153.785409][ T31] audit: type=1326 audit(1153.631:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24035 comm="syz.0.5911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1153.854481][ T31] audit: type=1326 audit(1153.631:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24035 comm="syz.0.5911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1153.932508][ T31] audit: type=1326 audit(1153.631:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24035 comm="syz.0.5911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1153.995384][ T31] audit: type=1326 audit(1153.631:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24035 comm="syz.0.5911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1154.053208][ T31] audit: type=1326 audit(1153.631:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24035 comm="syz.0.5911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1154.140028][ T31] audit: type=1326 audit(1153.631:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24035 comm="syz.0.5911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1154.213308][ T31] audit: type=1326 audit(1153.631:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24035 comm="syz.0.5911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1154.293543][ T31] audit: type=1326 audit(1153.631:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24035 comm="syz.0.5911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1157.210248][T24099] loop8: detected capacity change from 0 to 128 [ 1157.455668][T24074] syz.8.5925: attempt to access beyond end of device [ 1157.455668][T24074] loop8: rw=2049, sector=145, nr_sectors = 816 limit=128 [ 1157.514479][T24098] lo speed is unknown, defaulting to 1000 [ 1157.722435][T24103] syz.8.5925: attempt to access beyond end of device [ 1157.722435][T24103] loop8: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 1157.834979][T24103] syz.8.5925: attempt to access beyond end of device [ 1157.834979][T24103] loop8: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 1158.833918][T24119] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5943'. [ 1159.439416][T24139] syz_tun: refused to change device tx_queue_len [ 1159.459083][T24140] netlink: 'syz.2.5951': attribute type 13 has an invalid length. [ 1160.893547][T24170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5965'. [ 1160.893581][T24170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.898548][T24170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.229260][T24176] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1162.583308][ T5843] Bluetooth: hci3: command 0x1003 tx timeout [ 1162.583657][T21060] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1162.942872][T24201] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5976'. [ 1163.196641][T24207] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5970'. [ 1163.327793][T24207] bridge_slave_1: left allmulticast mode [ 1163.423237][T24207] bridge_slave_1: left promiscuous mode [ 1163.465308][T24199] loop8: detected capacity change from 0 to 8192 [ 1163.603320][T24207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.819473][T24207] bridge_slave_0: left allmulticast mode [ 1163.907657][T24207] bridge_slave_0: left promiscuous mode [ 1163.913731][T24207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.528251][T24240] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5992'. [ 1167.496434][T24266] random: crng reseeded on system resumption [ 1168.706114][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 1168.706137][ T31] audit: type=1326 audit(1168.671:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24280 comm="syz.0.6010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1168.846595][ T31] audit: type=1326 audit(1168.701:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24280 comm="syz.0.6010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1168.953195][ T31] audit: type=1326 audit(1168.701:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24280 comm="syz.0.6010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1169.023256][ T31] audit: type=1326 audit(1168.701:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24280 comm="syz.0.6010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1169.058029][ T31] audit: type=1326 audit(1168.701:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24280 comm="syz.0.6010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1169.098010][ T31] audit: type=1326 audit(1168.701:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24280 comm="syz.0.6010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1169.213151][ T31] audit: type=1326 audit(1168.701:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24280 comm="syz.0.6010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1169.328000][ T31] audit: type=1326 audit(1168.721:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24280 comm="syz.0.6010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1169.365201][ T31] audit: type=1326 audit(1168.721:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24280 comm="syz.0.6010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1169.471900][ T31] audit: type=1326 audit(1168.721:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24280 comm="syz.0.6010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1169.512384][T24301] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 1169.512384][T24301] program syz.2.6018 not setting count and/or reply_len properly [ 1169.576286][T24302] netlink: 'syz.0.6017': attribute type 30 has an invalid length. [ 1169.817224][T24306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6020'. [ 1170.114665][T24315] netlink: 304 bytes leftover after parsing attributes in process `syz.0.6024'. [ 1171.928703][T24342] netlink: 'syz.0.6034': attribute type 298 has an invalid length. [ 1171.998279][T24344] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 1172.445762][T24354] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1177.019017][T24419] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6064'. [ 1178.312632][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1178.326531][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1178.340603][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1178.349715][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1178.357523][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1178.527755][T24433] lo speed is unknown, defaulting to 1000 [ 1178.558656][ T31] kauditd_printk_skb: 79 callbacks suppressed [ 1178.558682][ T31] audit: type=1326 audit(1178.521:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24438 comm="syz.9.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1178.657755][ T31] audit: type=1326 audit(1178.561:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24438 comm="syz.9.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1178.735898][ T31] audit: type=1326 audit(1178.561:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24438 comm="syz.9.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1178.753213][T24441] atomic_op ffff8880525fd198 conn xmit_atomic 0000000000000000 [ 1178.810856][ T31] audit: type=1326 audit(1178.651:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24438 comm="syz.9.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1178.909673][ T31] audit: type=1326 audit(1178.651:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24438 comm="syz.9.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1179.142621][ T31] audit: type=1326 audit(1179.101:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24444 comm="syz.9.6075" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x0 [ 1180.138311][T24470] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6085'. [ 1180.423196][T21060] Bluetooth: hci3: command tx timeout [ 1180.809528][T24480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6087'. [ 1180.860960][T24480] netlink: 324 bytes leftover after parsing attributes in process `syz.5.6087'. [ 1181.140018][T24433] chnl_net:caif_netlink_parms(): no params data found [ 1181.538648][ T31] audit: type=1326 audit(1181.501:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24491 comm="syz.5.6093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ef8f749 code=0x7ffc0000 [ 1181.642146][ T31] audit: type=1326 audit(1181.501:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24491 comm="syz.5.6093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ef8f749 code=0x7ffc0000 [ 1181.700496][ T31] audit: type=1326 audit(1181.501:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24491 comm="syz.5.6093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ef8f749 code=0x7ffc0000 [ 1181.773315][ T31] audit: type=1326 audit(1181.501:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24491 comm="syz.5.6093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fac9ef8f749 code=0x7ffc0000 [ 1182.503110][T21060] Bluetooth: hci3: command tx timeout [ 1182.949286][ T152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1183.014922][ T152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1183.040304][ T152] bond0 (unregistering): Released all slaves [ 1183.214907][T24511] tipc: Enabling of bearer rejected, failed to enable media [ 1183.567400][T24433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.598859][T24433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.614272][T24433] bridge_slave_0: entered allmulticast mode [ 1183.630671][T24433] bridge_slave_0: entered promiscuous mode [ 1183.642772][ T31] kauditd_printk_skb: 80 callbacks suppressed [ 1183.642795][ T31] audit: type=1326 audit(1183.611:3729): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=24509 comm="syz.4.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1183.682495][ T31] audit: type=1326 audit(1183.621:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24509 comm="syz.4.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f55ac38f807 code=0x7ffc0000 [ 1183.706159][T24433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.729171][T24433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.737268][T24433] bridge_slave_1: entered allmulticast mode [ 1183.749469][T24433] bridge_slave_1: entered promiscuous mode [ 1183.755452][ T31] audit: type=1326 audit(1183.621:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24509 comm="syz.4.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f55ac346bdd code=0x7ffc0000 [ 1183.781061][ T31] audit: type=1326 audit(1183.621:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24509 comm="syz.4.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f55ac3c3e89 code=0x7ffc0000 [ 1183.851115][ T31] audit: type=1326 audit(1183.621:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24509 comm="syz.4.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f55ac346c47 code=0x7ffc0000 [ 1183.915386][ T31] audit: type=1326 audit(1183.621:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24509 comm="syz.4.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1183.993124][ T31] audit: type=1326 audit(1183.621:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24509 comm="syz.4.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1184.039458][T24433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.083873][ T31] audit: type=1326 audit(1183.641:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24509 comm="syz.4.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f55ac346357 code=0x7ffc0000 [ 1184.120205][T24433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.196952][ T31] audit: type=1326 audit(1183.641:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24509 comm="syz.4.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f55ac3463b6 code=0x7ffc0000 [ 1184.283326][ T31] audit: type=1326 audit(1183.641:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24509 comm="syz.4.6099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55ac38f34b code=0x7ffc0000 [ 1184.523092][T24433] team0: Port device team_slave_0 added [ 1184.560948][T24433] team0: Port device team_slave_1 added [ 1184.593047][T21060] Bluetooth: hci3: command tx timeout [ 1184.747206][ T152] hsr_slave_0: left promiscuous mode [ 1184.783153][ T152] hsr_slave_1: left promiscuous mode [ 1184.808515][ T152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1184.884053][ T152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1186.448213][T24580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6124'. [ 1186.663128][T21060] Bluetooth: hci3: command tx timeout [ 1186.806841][ T152] team0 (unregistering): Port device team_slave_1 removed [ 1186.925769][ T152] team0 (unregistering): Port device team_slave_0 removed [ 1187.159980][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1188.043628][T24568] vlan2: entered allmulticast mode [ 1188.059423][T24568] dummy0: entered allmulticast mode [ 1188.127491][T24433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.141583][T24433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.231540][T24433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.300824][T24433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1188.317865][T24433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.400684][T24433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1188.652663][T24611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6138'. [ 1188.692924][T24615] netlink: 724 bytes leftover after parsing attributes in process `syz.5.6140'. [ 1188.766290][T24433] hsr_slave_0: entered promiscuous mode [ 1188.774345][T24433] hsr_slave_1: entered promiscuous mode [ 1188.791239][T24433] debugfs: 'hsr0' already exists in 'hsr' [ 1188.803135][T24433] Cannot create hsr debugfs directory [ 1189.017420][T24621] netlink: 'syz.0.6144': attribute type 1 has an invalid length. [ 1189.434065][T24635] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6149'. [ 1190.542546][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 1190.542578][ T31] audit: type=1326 audit(1190.491:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24649 comm="syz.0.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1190.603633][T24652] netlink: 'syz.9.6156': attribute type 13 has an invalid length. [ 1190.631690][T24653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6155'. [ 1190.673376][ T31] audit: type=1326 audit(1190.501:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24649 comm="syz.0.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1190.763151][T24652] gretap0: refused to change device tx_queue_len [ 1190.779635][ T31] audit: type=1326 audit(1190.501:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24649 comm="syz.0.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1190.815961][T24652] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1190.876262][ T31] audit: type=1326 audit(1190.501:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24649 comm="syz.0.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1191.033608][ T31] audit: type=1326 audit(1190.501:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24649 comm="syz.0.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3a078df90 code=0x7ffc0000 [ 1191.150387][ T31] audit: type=1326 audit(1190.501:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24649 comm="syz.0.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3a078df90 code=0x7ffc0000 [ 1191.208954][ T31] audit: type=1326 audit(1190.501:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24649 comm="syz.0.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1191.287666][ T31] audit: type=1326 audit(1190.541:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24649 comm="syz.0.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1191.369048][ T31] audit: type=1326 audit(1190.541:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24649 comm="syz.0.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1191.444425][ T31] audit: type=1326 audit(1190.541:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24649 comm="syz.0.6157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1191.558086][T24667] lo speed is unknown, defaulting to 1000 [ 1191.561311][T24433] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1191.597869][T24433] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1191.638662][T24667] lo speed is unknown, defaulting to 1000 [ 1191.645382][T24433] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1191.661714][T24667] lo speed is unknown, defaulting to 1000 [ 1191.673875][T24433] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1191.698914][T24667] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1191.735125][T24667] lo speed is unknown, defaulting to 1000 [ 1191.743486][T24667] lo speed is unknown, defaulting to 1000 [ 1191.783633][T24667] lo speed is unknown, defaulting to 1000 [ 1191.839702][T24667] lo speed is unknown, defaulting to 1000 [ 1191.875759][T24667] lo speed is unknown, defaulting to 1000 [ 1191.906844][T24667] lo speed is unknown, defaulting to 1000 [ 1191.926040][T24667] lo speed is unknown, defaulting to 1000 [ 1191.965175][T24667] lo speed is unknown, defaulting to 1000 [ 1191.976256][T24667] lo speed is unknown, defaulting to 1000 [ 1191.995951][T24667] lo speed is unknown, defaulting to 1000 [ 1192.004910][T24667] lo speed is unknown, defaulting to 1000 [ 1192.016903][T24686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6169'. [ 1192.023454][T24433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.086065][T24433] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.116847][ T6240] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.124072][ T6240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.139055][T24689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6170'. [ 1192.153927][T24689] netlink: 324 bytes leftover after parsing attributes in process `syz.4.6170'. [ 1192.168972][ T6240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.176203][ T6240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1193.019500][T24433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1193.034529][T24722] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6179'. [ 1193.234951][T24735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6185'. [ 1193.910440][T24433] veth0_vlan: entered promiscuous mode [ 1193.920309][T24754] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6191'. [ 1193.938014][T24433] veth1_vlan: entered promiscuous mode [ 1194.269372][T24433] veth0_macvtap: entered promiscuous mode [ 1194.317371][T24433] veth1_macvtap: entered promiscuous mode [ 1194.404204][T24433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1194.456613][T24433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1194.568852][T15152] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.610333][T15152] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.678607][T15152] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.695089][T24769] xt_hashlimit: size too large, truncated to 1048576 [ 1194.707335][T15152] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.975493][T15147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.012441][T15147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.208501][T15147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1195.241198][T24780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6199'. [ 1195.243158][T15147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1195.595909][T24784] lo speed is unknown, defaulting to 1000 [ 1195.633505][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 1195.633532][ T31] audit: type=1326 audit(1195.601:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24786 comm="syz.9.6204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1195.770317][ T31] audit: type=1326 audit(1195.631:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24786 comm="syz.9.6204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1195.856512][ T31] audit: type=1326 audit(1195.631:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24786 comm="syz.9.6204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1195.908676][ T31] audit: type=1326 audit(1195.631:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24786 comm="syz.9.6204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1196.002662][ T31] audit: type=1326 audit(1195.631:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24786 comm="syz.9.6204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1196.064557][T24784] lo speed is unknown, defaulting to 1000 [ 1196.093822][ T31] audit: type=1326 audit(1195.631:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24786 comm="syz.9.6204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1196.176117][ T31] audit: type=1326 audit(1195.631:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24786 comm="syz.9.6204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1196.219302][ T31] audit: type=1326 audit(1195.631:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24786 comm="syz.9.6204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1196.266065][ T31] audit: type=1326 audit(1195.631:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24786 comm="syz.9.6204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1196.322638][ T31] audit: type=1326 audit(1195.631:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24786 comm="syz.9.6204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1197.669069][T24822] xt_hashlimit: size too large, truncated to 1048576 [ 1198.821465][T24839] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6215'. [ 1198.861014][T24838] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6218'. [ 1199.819329][T24856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6225'. [ 1200.228856][T24863] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 1201.117191][T24873] lo speed is unknown, defaulting to 1000 [ 1202.905243][T24886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6235'. [ 1202.963751][T24886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1203.273124][T24886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.076135][T24873] lo speed is unknown, defaulting to 1000 [ 1204.227216][T24904] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6242'. [ 1204.917920][T24923] loop6: detected capacity change from 0 to 512 [ 1204.962164][T24923] journal_path: Lookup failure for './file0' [ 1204.983685][T24923] EXT4-fs: error: could not find journal device path [ 1205.614963][T24936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6252'. [ 1205.659048][ T31] kauditd_printk_skb: 72 callbacks suppressed [ 1205.659075][ T31] audit: type=1326 audit(1205.621:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24937 comm="syz.6.6253" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59db18f749 code=0x0 [ 1206.236206][T24950] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6257'. [ 1207.330557][T24970] loop6: detected capacity change from 0 to 128 [ 1207.453519][T24970] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1207.508395][T24970] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1207.558403][T24970] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6263'. [ 1207.713056][ T31] audit: type=1326 audit(1207.671:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24979 comm="syz.2.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1207.809550][ T31] audit: type=1326 audit(1207.671:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24979 comm="syz.2.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1207.898247][ T31] audit: type=1326 audit(1207.671:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24979 comm="syz.2.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1207.961162][T24985] $H: renamed from bond0 [ 1207.988060][ T31] audit: type=1326 audit(1207.681:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24979 comm="syz.2.6266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1208.003381][T24985] $H: entered promiscuous mode [ 1208.093814][T16959] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1208.103213][T24985] bond_slave_0: entered promiscuous mode [ 1208.109117][T24985] bond_slave_1: entered promiscuous mode [ 1210.216195][T25006] 9pnet_fd: p9_fd_create_tcp (25006): problem connecting socket to 127.0.0.1 [ 1210.822166][ T31] audit: type=1326 audit(1210.781:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25017 comm="syz.2.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1210.875064][ T31] audit: type=1326 audit(1210.821:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25017 comm="syz.2.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1210.926286][ T31] audit: type=1326 audit(1210.821:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25017 comm="syz.2.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1210.971992][ T31] audit: type=1326 audit(1210.821:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25017 comm="syz.2.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1211.047308][ T31] audit: type=1326 audit(1210.821:3903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25017 comm="syz.2.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1211.123160][ T31] audit: type=1326 audit(1210.841:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25017 comm="syz.2.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1211.194587][ T31] audit: type=1326 audit(1210.841:3905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25017 comm="syz.2.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1211.263395][ T31] audit: type=1326 audit(1210.841:3906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25017 comm="syz.2.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1211.363083][ T31] audit: type=1326 audit(1210.931:3907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25017 comm="syz.2.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1211.445272][ T31] audit: type=1326 audit(1210.931:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25017 comm="syz.2.6281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1212.047782][T25038] loop6: detected capacity change from 0 to 1024 [ 1212.085321][T25038] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1212.133876][T25038] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1212.164366][T25038] EXT4-fs error (device loop6): ext4_get_journal_inode:5849: inode #32: comm syz.6.6290: iget: special inode unallocated [ 1212.205283][T25038] EXT4-fs (loop6): Remounting filesystem read-only [ 1212.226317][T25038] EXT4-fs (loop6): no journal found [ 1212.233101][T25043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6293'. [ 1212.241797][T25038] EXT4-fs (loop6): can't get journal size [ 1212.267178][T25038] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1213.799733][T24433] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.933393][T25069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6303'. [ 1213.942420][T25069] netlink: 312 bytes leftover after parsing attributes in process `syz.2.6303'. [ 1214.106155][T25073] loop6: detected capacity change from 0 to 512 [ 1214.156026][T25073] EXT4-fs error (device loop6): ext4_acquire_dquot:6984: comm syz.6.6304: Failed to acquire dquot type 1 [ 1214.217474][T25073] EXT4-fs error (device loop6): ext4_acquire_dquot:6984: comm syz.6.6304: Failed to acquire dquot type 1 [ 1214.244117][T25073] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.6304: bg 0: block 248: padding at end of block bitmap is not set [ 1214.260702][T25073] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1214.272401][T25073] EXT4-fs error (device loop6): ext4_acquire_dquot:6984: comm syz.6.6304: Failed to acquire dquot type 1 [ 1214.295686][T25073] EXT4-fs (loop6): 1 orphan inode deleted [ 1214.338515][T25073] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1214.399648][T25073] EXT4-fs (loop6): shut down requested (1) [ 1214.424433][T25083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6307'. [ 1214.513477][T24433] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.702661][T25088] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6310'. [ 1215.423902][T25103] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1216.032182][T25117] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6323'. [ 1216.148190][T25122] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6326'. [ 1216.910853][T25138] lo speed is unknown, defaulting to 1000 [ 1217.673309][T25138] lo speed is unknown, defaulting to 1000 [ 1217.894892][T25165] loop6: detected capacity change from 0 to 512 [ 1217.983213][T25165] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1218.233565][T25169] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1303: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1218.338199][T25175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6347'. [ 1218.348335][T25175] netlink: 312 bytes leftover after parsing attributes in process `syz.2.6347'. [ 1218.370838][T24433] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1218.743704][T25181] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1219.187343][T25196] loop6: detected capacity change from 0 to 512 [ 1219.210464][T25199] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6360'. [ 1219.229321][T25196] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.6358: inode has both inline data and extents flags [ 1219.243623][T25196] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.6358: couldn't read orphan inode 15 (err -117) [ 1219.269882][T25196] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1219.350412][T25196] ptrace attach of "./syz-executor exec"[25204] was attempted by "./syz-executor exec"[25196] [ 1219.391633][T25196] lo speed is unknown, defaulting to 1000 [ 1219.678010][T25219] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6364'. [ 1219.703837][T25219] netlink: 312 bytes leftover after parsing attributes in process `syz.5.6364'. [ 1219.958618][T25196] lo speed is unknown, defaulting to 1000 [ 1220.205783][ T31] kauditd_printk_skb: 55 callbacks suppressed [ 1220.205810][ T31] audit: type=1326 audit(1220.171:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25231 comm="syz.9.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1220.286551][ T31] audit: type=1326 audit(1220.171:3959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25231 comm="syz.9.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1220.323087][ T31] audit: type=1326 audit(1220.211:3960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25231 comm="syz.9.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1220.364029][ T31] audit: type=1326 audit(1220.211:3961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25231 comm="syz.9.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1220.460413][ T31] audit: type=1326 audit(1220.211:3962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25231 comm="syz.9.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1220.516973][ T31] audit: type=1326 audit(1220.221:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25231 comm="syz.9.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1220.560177][ T31] audit: type=1326 audit(1220.221:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25231 comm="syz.9.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1220.578799][T25237] lo speed is unknown, defaulting to 1000 [ 1220.612412][ T31] audit: type=1326 audit(1220.221:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25231 comm="syz.9.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1220.680437][ T31] audit: type=1326 audit(1220.221:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25231 comm="syz.9.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1220.723899][ T31] audit: type=1326 audit(1220.221:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25231 comm="syz.9.6368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1221.452136][T25256] kernel read not supported for file / (pid: 25256 comm: syz.5.6378) [ 1221.580398][T25242] lo speed is unknown, defaulting to 1000 [ 1222.049293][T25237] lo speed is unknown, defaulting to 1000 [ 1222.086464][T25242] lo speed is unknown, defaulting to 1000 [ 1223.015656][T24433] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1224.301667][T25301] pimreg: entered allmulticast mode [ 1224.371679][T25298] lo speed is unknown, defaulting to 1000 [ 1224.379300][T25311] pimreg: left allmulticast mode [ 1225.073097][T23128] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1225.153396][T25335] veth0: entered promiscuous mode [ 1225.159227][T25335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6411'. [ 1225.233103][T23128] usb 7-1: device descriptor read/64, error -71 [ 1225.260042][T25338] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1225.374063][T25340] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6413'. [ 1225.487770][T23128] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1225.526237][T25335] veth0 (unregistering): left promiscuous mode [ 1225.585380][T25298] lo speed is unknown, defaulting to 1000 [ 1225.591225][T25329] lo speed is unknown, defaulting to 1000 [ 1225.655433][T23128] usb 7-1: device descriptor read/64, error -71 [ 1225.665669][T25342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6414'. [ 1225.763529][T23128] usb usb7-port1: attempt power cycle [ 1226.133143][T23128] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1226.152315][T25350] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1226.163494][T25329] lo speed is unknown, defaulting to 1000 [ 1226.176888][T23128] usb 7-1: device descriptor read/8, error -71 [ 1226.424661][T23128] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1226.453879][T23128] usb 7-1: device descriptor read/8, error -71 [ 1226.572396][T23128] usb usb7-port1: unable to enumerate USB device [ 1226.634391][ T31] kauditd_printk_skb: 66 callbacks suppressed [ 1226.637729][ T31] audit: type=1326 audit(1226.601:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25360 comm="syz.0.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1226.743068][ T31] audit: type=1326 audit(1226.601:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25360 comm="syz.0.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1226.803733][T25366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6423'. [ 1226.824238][ T31] audit: type=1326 audit(1226.661:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25360 comm="syz.0.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1226.878770][ T31] audit: type=1326 audit(1226.661:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25360 comm="syz.0.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1226.943052][ T31] audit: type=1326 audit(1226.671:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25360 comm="syz.0.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1227.004363][ T31] audit: type=1326 audit(1226.671:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25360 comm="syz.0.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1227.037030][T25369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6426'. [ 1227.103921][ T31] audit: type=1326 audit(1226.671:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25360 comm="syz.0.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1227.169736][ T31] audit: type=1326 audit(1226.671:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25360 comm="syz.0.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1227.250670][ T31] audit: type=1326 audit(1226.671:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25360 comm="syz.0.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1227.279443][ T31] audit: type=1326 audit(1226.681:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25360 comm="syz.0.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1227.316251][T25380] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6429'. [ 1227.487409][T25384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6431'. [ 1227.518457][T25384] netlink: 312 bytes leftover after parsing attributes in process `syz.4.6431'. [ 1227.730932][T25388] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1228.337805][T25390] lo speed is unknown, defaulting to 1000 [ 1228.378072][T25404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6441'. [ 1228.655219][T25390] lo speed is unknown, defaulting to 1000 [ 1230.669479][T25431] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6448'. [ 1230.716686][T25431] netlink: 312 bytes leftover after parsing attributes in process `syz.9.6448'. [ 1231.262415][T25446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6456'. [ 1231.935422][T25467] tipc: Enabled bearer , priority 0 [ 1231.956031][T25467] syzkaller0: entered promiscuous mode [ 1231.961553][T25467] syzkaller0: entered allmulticast mode [ 1232.003750][ T31] kauditd_printk_skb: 51 callbacks suppressed [ 1232.003777][ T31] audit: type=1107 audit(1231.961:4095): pid=25470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1232.091286][T25467] tipc: Resetting bearer [ 1232.173543][T25466] tipc: Resetting bearer [ 1232.288140][T25466] tipc: Disabling bearer [ 1232.396609][T25476] lo speed is unknown, defaulting to 1000 [ 1232.695678][T25476] lo speed is unknown, defaulting to 1000 [ 1233.051423][T25501] usb usb8: usbfs: process 25501 (syz.4.6475) did not claim interface 0 before use [ 1234.208843][T25524] xt_hashlimit: size too large, truncated to 1048576 [ 1236.020870][T25548] lo speed is unknown, defaulting to 1000 [ 1236.068589][ T31] audit: type=1326 audit(1236.031:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.0.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1236.134727][ T31] audit: type=1326 audit(1236.031:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.0.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1236.208782][ T31] audit: type=1326 audit(1236.031:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.0.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1236.280902][ T31] audit: type=1326 audit(1236.031:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.0.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1236.326577][ T31] audit: type=1326 audit(1236.031:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.0.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1236.445563][T25548] lo speed is unknown, defaulting to 1000 [ 1236.531321][ T31] audit: type=1326 audit(1236.061:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.0.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1236.554118][ T31] audit: type=1326 audit(1236.061:4102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.0.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1236.577853][ T31] audit: type=1326 audit(1236.061:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.0.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1236.606162][ T31] audit: type=1326 audit(1236.061:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25554 comm="syz.0.6497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1236.696137][T25567] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6500'. [ 1236.987176][T25573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6503'. [ 1237.477032][T25583] xt_hashlimit: size too large, truncated to 1048576 [ 1238.170811][T25600] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6514'. [ 1239.393985][T25603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6515'. [ 1242.039612][T25617] netlink: 'syz.5.6519': attribute type 13 has an invalid length. [ 1242.125977][T25619] program syz.0.6520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1242.842481][T25642] loop6: detected capacity change from 0 to 128 [ 1243.001445][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 1243.001471][ T31] audit: type=1326 audit(1242.961:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25640 comm="syz.6.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59db18f749 code=0x7ffc0000 [ 1243.143725][T25645] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6529'. [ 1243.179829][ T31] audit: type=1326 audit(1243.011:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25640 comm="syz.6.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59db18f749 code=0x7ffc0000 [ 1243.278682][ T31] audit: type=1326 audit(1243.011:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25640 comm="syz.6.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59db18f749 code=0x7ffc0000 [ 1243.333677][T25651] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6533'. [ 1243.363045][ T31] audit: type=1326 audit(1243.011:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25640 comm="syz.6.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59db18f749 code=0x7ffc0000 [ 1243.441186][ T31] audit: type=1326 audit(1243.011:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25640 comm="syz.6.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59db18f749 code=0x7ffc0000 [ 1243.527091][ T31] audit: type=1326 audit(1243.031:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25640 comm="syz.6.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f59db18f749 code=0x7ffc0000 [ 1243.602044][ T31] audit: type=1326 audit(1243.031:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25640 comm="syz.6.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59db18f749 code=0x7ffc0000 [ 1243.676635][ T31] audit: type=1326 audit(1243.041:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25640 comm="syz.6.6528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59db18f749 code=0x7ffc0000 [ 1243.705258][T25664] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6537'. [ 1243.716775][T25664] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6537'. [ 1243.743128][ T31] audit: type=1326 audit(1243.701:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25660 comm="syz.5.6536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ef8f749 code=0x7ffc0000 [ 1243.820874][ T31] audit: type=1326 audit(1243.701:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25660 comm="syz.5.6536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ef8f749 code=0x7ffc0000 [ 1243.912479][T25675] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6543'. [ 1244.058313][T25679] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6545'. [ 1244.077595][T25679] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6545'. [ 1244.093253][T25682] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6546'. [ 1246.214738][T25701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6550'. [ 1246.278530][T25696] xt_hashlimit: size too large, truncated to 1048576 [ 1246.501473][T25706] loop6: detected capacity change from 0 to 512 [ 1246.583738][T25706] EXT4-fs: Ignoring removed i_version option [ 1246.623100][T25706] EXT4-fs: Ignoring removed bh option [ 1246.856155][T25716] bridge_slave_0: left allmulticast mode [ 1246.886034][T25716] bridge_slave_0: left promiscuous mode [ 1246.918306][T25716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.015968][T25716] bridge_slave_1: left allmulticast mode [ 1247.042215][T25716] bridge_slave_1: left promiscuous mode [ 1247.066230][T25716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.122823][T25706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1247.166038][T25716] .`: (slave bond_slave_0): Releasing backup interface [ 1247.208144][T25716] .`: (slave bond_slave_1): Releasing backup interface [ 1247.275790][T25716] team0: Port device team_slave_0 removed [ 1247.314749][T25716] team0: Port device team_slave_1 removed [ 1247.351572][T25716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1247.371954][T25706] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 1247.382151][T25716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1247.422035][T25716] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1247.557564][T24433] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.587384][T25736] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6562'. [ 1247.632307][T25738] tipc: Started in network mode [ 1247.656387][T25738] tipc: Node identity 5e676e1550d5, cluster identity 4711 [ 1247.683404][T25738] tipc: Enabled bearer , priority 0 [ 1247.701613][T25738] syzkaller0: entered promiscuous mode [ 1247.723622][T25738] syzkaller0: entered allmulticast mode [ 1247.855666][T25746] tipc: Resetting bearer [ 1248.853596][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.261304][T25737] tipc: Resetting bearer [ 1249.703934][T25737] tipc: Disabling bearer [ 1249.726396][T23128] tipc: Node number set to 246574613 [ 1249.762562][T25762] __nla_validate_parse: 1 callbacks suppressed [ 1249.762602][T25762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6572'. [ 1250.165762][T25760] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6571'. [ 1251.720023][T25787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6582'. [ 1253.049620][T25796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6586'. [ 1253.216095][T25802] tipc: Enabled bearer , priority 0 [ 1253.236066][T25802] syzkaller0: entered promiscuous mode [ 1253.241583][T25802] syzkaller0: entered allmulticast mode [ 1253.334671][T25806] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6591'. [ 1253.359021][T25811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6592'. [ 1253.370891][T25812] tipc: Resetting bearer [ 1253.410237][T25799] tipc: Resetting bearer [ 1253.474067][T25799] tipc: Disabling bearer [ 1253.838390][T25827] usb usb8: usbfs: process 25827 (syz.4.6600) did not claim interface 0 before use [ 1254.464531][T25850] tipc: Enabled bearer , priority 0 [ 1254.503303][T25850] syzkaller0: entered promiscuous mode [ 1254.527152][T25850] syzkaller0: entered allmulticast mode [ 1254.622280][T25855] tipc: Resetting bearer [ 1254.662676][T25849] tipc: Resetting bearer [ 1254.735487][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 1254.735513][ T31] audit: type=1326 audit(1254.701:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25860 comm="syz.6.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59db18f749 code=0x7ffc0000 [ 1254.803823][T25849] tipc: Disabling bearer [ 1254.874837][ T31] audit: type=1326 audit(1254.731:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25860 comm="syz.6.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f59db18f749 code=0x7ffc0000 [ 1254.907095][T25865] usb usb8: usbfs: process 25865 (syz.2.6618) did not claim interface 0 before use [ 1254.965439][ T31] audit: type=1326 audit(1254.731:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25860 comm="syz.6.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59db18f749 code=0x7ffc0000 [ 1255.053052][ T31] audit: type=1326 audit(1254.731:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25860 comm="syz.6.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f59db18f749 code=0x7ffc0000 [ 1255.110771][ T31] audit: type=1326 audit(1254.731:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25860 comm="syz.6.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59db18f749 code=0x7ffc0000 [ 1255.170448][ T31] audit: type=1326 audit(1254.731:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25860 comm="syz.6.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59db18f749 code=0x7ffc0000 [ 1255.241146][ T31] audit: type=1326 audit(1254.811:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25862 comm="syz.0.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1255.241228][ T31] audit: type=1326 audit(1254.821:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25862 comm="syz.0.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1255.241300][ T31] audit: type=1326 audit(1254.821:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25862 comm="syz.0.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1255.241371][ T31] audit: type=1326 audit(1254.821:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25862 comm="syz.0.6617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1255.250155][T25877] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6624'. [ 1255.316563][T25878] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6621'. [ 1256.607510][T25910] tipc: Started in network mode [ 1256.612449][T25910] tipc: Node identity de8482f062c1, cluster identity 4711 [ 1256.620026][T25910] tipc: Enabled bearer , priority 0 [ 1256.644362][T25910] syzkaller0: entered promiscuous mode [ 1256.649895][T25910] syzkaller0: entered allmulticast mode [ 1256.750901][T25910] tipc: Resetting bearer [ 1256.782171][T25909] tipc: Resetting bearer [ 1256.913918][T25909] tipc: Disabling bearer [ 1257.269121][T25935] xt_hashlimit: size too large, truncated to 1048576 [ 1258.138610][T25964] tipc: Enabling of bearer rejected, failed to enable media [ 1258.208489][T25967] netlink: '+}[@': attribute type 4 has an invalid length. [ 1258.539234][T25980] xt_hashlimit: size too large, truncated to 1048576 [ 1258.594338][T25983] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6665'. [ 1259.475200][T26003] tipc: Enabled bearer , priority 0 [ 1259.499673][T26003] syzkaller0: entered promiscuous mode [ 1259.524861][T26003] syzkaller0: entered allmulticast mode [ 1259.561786][T26003] tipc: Resetting bearer [ 1259.589006][T26001] tipc: Resetting bearer [ 1259.688324][T26001] tipc: Disabling bearer [ 1260.457751][T26036] xt_hashlimit: size too large, truncated to 1048576 [ 1260.511277][T26038] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6687'. [ 1261.004903][T26052] usb usb8: usbfs: process 26052 (syz.4.6694) did not claim interface 0 before use [ 1261.302705][T26065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6699'. [ 1261.736287][T26072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6702'. [ 1261.767635][T26067] lo speed is unknown, defaulting to 1000 [ 1262.770610][T26088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6709'. [ 1262.790226][T26067] lo speed is unknown, defaulting to 1000 [ 1263.588046][T26110] siw: device registration error -23 [ 1263.931731][T26115] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6718'. [ 1264.581641][T26143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6729'. [ 1265.152779][T26152] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6733'. [ 1265.178489][T26152] hsr_slave_0: left promiscuous mode [ 1265.194696][T26152] hsr_slave_1: left promiscuous mode [ 1265.232718][T26157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6735'. [ 1265.251245][T26154] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6734'. [ 1265.731980][T26165] lo speed is unknown, defaulting to 1000 [ 1265.770746][T26175] veth0: entered promiscuous mode [ 1265.801287][T26173] veth0: left promiscuous mode [ 1266.070217][T26180] $H: left promiscuous mode [ 1266.080079][T26180] bond_slave_0: left promiscuous mode [ 1266.110158][T26180] bond_slave_1: left promiscuous mode [ 1266.502223][T26165] lo speed is unknown, defaulting to 1000 [ 1266.739849][T26191] lo speed is unknown, defaulting to 1000 [ 1267.535018][T26191] lo speed is unknown, defaulting to 1000 [ 1267.716296][T26199] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6752'. [ 1267.878723][T26201] tipc: Enabled bearer , priority 0 [ 1268.041061][T26209] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6755'. [ 1268.054191][T26204] syzkaller0: entered promiscuous mode [ 1268.059694][T26204] syzkaller0: entered allmulticast mode [ 1268.134687][T26201] tipc: Resetting bearer [ 1268.183453][T26193] tipc: Resetting bearer [ 1268.348142][T26193] tipc: Disabling bearer [ 1268.554408][T26216] veth0: entered promiscuous mode [ 1268.562387][T26215] veth0: left promiscuous mode [ 1268.908538][T23133] lo speed is unknown, defaulting to 1000 [ 1268.921833][T23133] syz2: Port: 1 Link DOWN [ 1269.444164][T26240] sch_tbf: burst 28 is lower than device lo mtu (65550) ! [ 1269.494540][T26244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6768'. [ 1269.740595][T26252] tipc: Enabled bearer , priority 0 [ 1269.758382][T26252] syzkaller0: entered promiscuous mode [ 1269.774712][T26252] syzkaller0: entered allmulticast mode [ 1269.801935][T26252] tipc: Resetting bearer [ 1269.844359][T26248] tipc: Resetting bearer [ 1269.900101][ T31] kauditd_printk_skb: 54 callbacks suppressed [ 1269.900129][ T31] audit: type=1326 audit(1269.861:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26254 comm="syz.4.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1269.943891][T26248] tipc: Disabling bearer [ 1269.990682][ T31] audit: type=1326 audit(1269.901:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26254 comm="syz.4.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1270.074881][ T31] audit: type=1326 audit(1269.901:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26254 comm="syz.4.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1270.157763][T26262] loop6: detected capacity change from 0 to 512 [ 1270.158446][ T31] audit: type=1326 audit(1269.901:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26254 comm="syz.4.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1270.229737][ T31] audit: type=1326 audit(1269.901:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26254 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1270.237708][T26262] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1270.252121][ T31] audit: type=1326 audit(1269.901:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26254 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1270.288189][ T31] audit: type=1326 audit(1269.901:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26254 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1270.309706][ T31] audit: type=1326 audit(1269.901:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26254 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1270.331149][ T31] audit: type=1326 audit(1269.901:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26254 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1270.352549][ T31] audit: type=1326 audit(1269.901:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26254 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1270.676097][T24433] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1270.746080][T26272] lo speed is unknown, defaulting to 1000 [ 1271.914238][T26291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6790'. [ 1272.620040][T26272] lo speed is unknown, defaulting to 1000 [ 1273.140132][T26299] ALSA: seq fatal error: cannot create timer (-19) [ 1273.809943][T26314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6796'. [ 1273.914464][T23573] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1274.151899][T23573] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1274.173340][T23573] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.182831][T23573] usb 7-1: Product: syz [ 1274.212976][T23573] usb 7-1: Manufacturer: syz [ 1274.217637][T23573] usb 7-1: SerialNumber: syz [ 1274.586742][T23573] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1274.635555][T23092] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1275.657686][T23573] usb 7-1: USB disconnect, device number 6 [ 1275.987883][T26351] usb usb8: usbfs: process 26351 (syz.2.6814) did not claim interface 0 before use [ 1276.426514][T23092] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1276.578564][T23092] ath9k_htc: Failed to initialize the device [ 1276.886347][T23573] usb 7-1: ath9k_htc: USB layer deinitialized [ 1277.264588][T26365] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6819'. [ 1278.172430][T23573] Process accounting resumed [ 1278.205723][T26381] tipc: Enabled bearer , priority 0 [ 1278.239138][T26381] syzkaller0: entered promiscuous mode [ 1278.279347][T26381] syzkaller0: entered allmulticast mode [ 1278.349818][T26385] tipc: Resetting bearer [ 1278.410216][T26379] tipc: Resetting bearer [ 1278.542755][T26379] tipc: Disabling bearer [ 1279.654584][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 1279.654610][ T31] audit: type=1326 audit(1279.621:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26411 comm="syz.0.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1279.760395][ T31] audit: type=1326 audit(1279.621:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26411 comm="syz.0.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1279.843048][ T31] audit: type=1326 audit(1279.621:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26411 comm="syz.0.6836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1280.058655][T26422] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6841'. [ 1280.240311][T26427] tipc: Enabling of bearer rejected, failed to enable media [ 1281.544822][T26433] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6843'. [ 1281.594946][T26433] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6843'. [ 1281.664173][T26436] tipc: Enabled bearer , priority 10 [ 1282.153873][T23092] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1282.341970][T23092] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1282.389772][T23092] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.505655][T23092] usb 1-1: Product: syz [ 1282.509876][T23092] usb 1-1: Manufacturer: syz [ 1282.524143][ T31] audit: type=1326 audit(1282.471:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26442 comm="syz.5.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ef8f749 code=0x7ffc0000 [ 1282.586439][T23092] usb 1-1: SerialNumber: syz [ 1282.667961][ T31] audit: type=1326 audit(1282.471:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26442 comm="syz.5.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac9ef8f749 code=0x7ffc0000 [ 1282.740629][ T31] audit: type=1326 audit(1282.471:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26442 comm="syz.5.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ef8f749 code=0x7ffc0000 [ 1282.784347][T23128] tipc: Node number set to 1697257720 [ 1282.804748][ T31] audit: type=1326 audit(1282.481:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26442 comm="syz.5.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac9ef8f749 code=0x7ffc0000 [ 1282.833391][T23092] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1282.859661][T23092] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1282.883251][ T31] audit: type=1326 audit(1282.481:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26442 comm="syz.5.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ef8f749 code=0x7ffc0000 [ 1282.907810][T23092] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1282.939189][T23092] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1282.953255][ T31] audit: type=1326 audit(1282.481:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26442 comm="syz.5.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac9ef8f749 code=0x7ffc0000 [ 1283.004031][T23092] usb 1-1: USB disconnect, device number 7 [ 1283.047164][ T31] audit: type=1326 audit(1282.481:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26442 comm="syz.5.6848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9ef8f749 code=0x7ffc0000 [ 1283.369825][T26458] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6855'. [ 1283.679233][T26462] tipc: Enabled bearer , priority 0 [ 1283.717448][T26462] syzkaller0: entered promiscuous mode [ 1283.773441][T26462] syzkaller0: entered allmulticast mode [ 1283.794029][T26462] tipc: Resetting bearer [ 1283.832217][T26469] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6858'. [ 1283.871376][T26471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6859'. [ 1283.880498][T26471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6859'. [ 1283.903512][T26459] tipc: Resetting bearer [ 1283.931795][T26459] tipc: Disabling bearer [ 1283.977349][T26471] bridge1: entered promiscuous mode [ 1283.983039][T26471] bridge1: entered allmulticast mode [ 1284.449015][T26482] usb usb8: usbfs: process 26482 (syz.0.6865) did not claim interface 0 before use [ 1284.463082][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1284.622970][ T9] usb 6-1: device descriptor read/64, error -71 [ 1284.933092][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1284.973075][ T31] kauditd_printk_skb: 24 callbacks suppressed [ 1284.973166][ T31] audit: type=1326 audit(1284.891:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26487 comm="syz.4.6869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1285.064182][ T31] audit: type=1326 audit(1284.891:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26487 comm="syz.4.6869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1285.087031][ T31] audit: type=1326 audit(1284.891:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26487 comm="syz.4.6869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1285.093122][ T9] usb 6-1: device descriptor read/64, error -71 [ 1285.109127][ T31] audit: type=1326 audit(1284.891:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26487 comm="syz.4.6869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1285.138245][ T31] audit: type=1326 audit(1284.891:4268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26487 comm="syz.4.6869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1285.189985][ T31] audit: type=1326 audit(1284.891:4269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26487 comm="syz.4.6869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1285.265693][ T9] usb usb6-port1: attempt power cycle [ 1285.282487][ T31] audit: type=1326 audit(1284.891:4270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26487 comm="syz.4.6869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1285.335117][ T31] audit: type=1326 audit(1284.891:4271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26487 comm="syz.4.6869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1285.383284][ T31] audit: type=1326 audit(1284.891:4272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26487 comm="syz.4.6869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1285.434168][ T31] audit: type=1326 audit(1284.891:4273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26487 comm="syz.4.6869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1285.645065][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1285.673801][ T9] usb 6-1: device descriptor read/8, error -71 [ 1285.717825][T26493] lo speed is unknown, defaulting to 1000 [ 1285.754383][T26497] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6871'. [ 1285.975387][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1286.024031][ T9] usb 6-1: device descriptor read/8, error -71 [ 1286.166428][ T9] usb usb6-port1: unable to enumerate USB device [ 1286.831210][T26513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6875'. [ 1286.948746][T26515] tipc: Enabled bearer , priority 0 [ 1287.022130][T26515] syzkaller0: entered promiscuous mode [ 1287.027780][T26515] syzkaller0: entered allmulticast mode [ 1287.081491][T26515] tipc: Resetting bearer [ 1287.119841][T26514] tipc: Resetting bearer [ 1287.229984][T26514] tipc: Disabling bearer [ 1287.381080][T26493] lo speed is unknown, defaulting to 1000 [ 1287.410137][T26519] netlink: 'syz.5.6878': attribute type 4 has an invalid length. [ 1287.438450][T26519] netlink: 'syz.5.6878': attribute type 4 has an invalid length. [ 1289.399182][T26533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6883'. [ 1289.685482][T16979] Bluetooth: hci6: Frame reassembly failed (-84) [ 1290.000219][T26538] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6885'. [ 1290.738767][T26393] Set syz1 is full, maxelem 65536 reached [ 1291.342317][T26568] tipc: Enabled bearer , priority 0 [ 1291.361508][T26568] syzkaller0: entered promiscuous mode [ 1291.376133][T26568] syzkaller0: entered allmulticast mode [ 1291.436789][T26568] tipc: Resetting bearer [ 1291.464026][T26567] tipc: Resetting bearer [ 1291.524934][T26567] tipc: Disabling bearer [ 1291.634712][T26572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6899'. [ 1291.705066][ T5843] Bluetooth: hci6: command 0x1003 tx timeout [ 1291.711749][T21060] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1292.061950][T26583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6903'. [ 1292.403247][T26595] Set syz1 is full, maxelem 65536 reached [ 1292.613031][ T31] kauditd_printk_skb: 13 callbacks suppressed [ 1292.613057][ T31] audit: type=1326 audit(1292.571:4287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26598 comm="syz.0.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1292.703770][T26603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6911'. [ 1292.735881][ T31] audit: type=1326 audit(1292.571:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26598 comm="syz.0.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1292.823123][ T31] audit: type=1326 audit(1292.611:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26598 comm="syz.0.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1292.905666][ T31] audit: type=1326 audit(1292.611:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26598 comm="syz.0.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1292.928820][T26610] bridge1: left promiscuous mode [ 1292.934090][T26610] bridge1: left allmulticast mode [ 1292.993077][ T31] audit: type=1326 audit(1292.611:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26598 comm="syz.0.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1293.073028][ T31] audit: type=1326 audit(1292.611:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26598 comm="syz.0.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1293.153218][ T31] audit: type=1326 audit(1292.611:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26598 comm="syz.0.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1293.233892][ T31] audit: type=1326 audit(1292.611:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26598 comm="syz.0.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1293.296762][ T31] audit: type=1326 audit(1292.631:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26598 comm="syz.0.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1293.370873][ T31] audit: type=1326 audit(1292.641:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26598 comm="syz.0.6910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1293.440378][T26619] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6919'. [ 1293.691506][T26621] smc: net device bond0 applied user defined pnetid SYZ0 [ 1293.714004][T26621] smc: net device bond0 erased user defined pnetid SYZ0 [ 1294.336507][T26630] lo speed is unknown, defaulting to 1000 [ 1294.934791][T26630] lo speed is unknown, defaulting to 1000 [ 1295.763522][T26647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6928'. [ 1295.999191][T26656] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6945'. [ 1296.066387][T26654] xt_hashlimit: max too large, truncated to 1048576 [ 1296.159737][T26658] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6933'. [ 1297.493923][T26683] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6946'. [ 1297.728367][T26688] xt_hashlimit: size too large, truncated to 1048576 [ 1297.825664][T26691] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6947'. [ 1297.856060][T26691] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6947'. [ 1298.773662][T26714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6955'. [ 1298.952774][T26719] tipc: Enabled bearer , priority 0 [ 1298.980937][T26719] syzkaller0: entered promiscuous mode [ 1298.999994][T26719] syzkaller0: entered allmulticast mode [ 1299.021672][T26721] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6959'. [ 1299.103087][T26718] tipc: Resetting bearer [ 1299.178893][T26718] tipc: Disabling bearer [ 1299.466563][T26739] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6963'. [ 1299.733851][T26745] xt_hashlimit: size too large, truncated to 1048576 [ 1299.796822][T26748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6966'. [ 1300.980984][T26769] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6976'. [ 1300.999248][T26769] ksmbd: Unknown IPC event: 4, ignore. [ 1301.143424][T21060] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1301.876479][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 1302.058937][T26793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6981'. [ 1303.073486][T26813] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6990'. [ 1303.525338][T26813] team0: Port device team_slave_1 removed [ 1303.683159][ T31] kauditd_printk_skb: 184 callbacks suppressed [ 1303.683185][ T31] audit: type=1326 audit(1303.631:4481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26828 comm="syz.2.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1303.719873][ T31] audit: type=1326 audit(1303.641:4482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26828 comm="syz.2.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1303.832029][T26831] xt_hashlimit: max too large, truncated to 1048576 [ 1303.858321][ T31] audit: type=1326 audit(1303.641:4483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26828 comm="syz.2.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1304.446541][ T31] audit: type=1326 audit(1304.401:4484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26828 comm="syz.2.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1304.524040][T26841] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6999'. [ 1304.600568][ T31] audit: type=1326 audit(1304.401:4485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26828 comm="syz.2.6995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0164d8f749 code=0x7ffc0000 [ 1304.932828][T26851] xt_hashlimit: size too large, truncated to 1048576 [ 1305.004190][T26856] usb usb8: usbfs: process 26856 (syz.5.7007) did not claim interface 0 before use [ 1305.017947][T26858] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7004'. [ 1305.086782][T26859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7006'. [ 1305.697563][ T31] audit: type=1326 audit(1305.661:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26869 comm="syz.6.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59db18f749 code=0x7ffc0000 [ 1305.756100][T26870] loop6: detected capacity change from 0 to 512 [ 1305.777029][ T31] audit: type=1326 audit(1305.691:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26869 comm="syz.6.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59db18f749 code=0x7ffc0000 [ 1305.803147][ T31] audit: type=1326 audit(1305.691:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26869 comm="syz.6.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59db18f749 code=0x7ffc0000 [ 1305.888756][ T31] audit: type=1326 audit(1305.691:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26869 comm="syz.6.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59db18f749 code=0x7ffc0000 [ 1305.913860][T26870] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 1305.921967][T26870] System zones: 0-2, 18-18, 34-34 [ 1305.965230][T26870] EXT4-fs (loop6): too many log groups per flexible block group [ 1306.003234][T26870] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 1306.053400][T26870] EXT4-fs (loop6): mount failed [ 1306.070612][ T31] audit: type=1326 audit(1305.691:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26869 comm="syz.6.7012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59db18f749 code=0x7ffc0000 [ 1306.864063][T26883] netlink: 96 bytes leftover after parsing attributes in process `syz.9.7016'. [ 1307.959917][T26907] lo speed is unknown, defaulting to 1000 [ 1308.541418][T26913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7028'. [ 1308.601870][T26913] netlink: 312 bytes leftover after parsing attributes in process `syz.5.7028'. [ 1308.620169][T26907] lo speed is unknown, defaulting to 1000 [ 1308.627434][T26913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7028'. [ 1309.039906][T26923] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7031'. [ 1309.264002][T26926] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7033'. [ 1309.336215][T26921] lo speed is unknown, defaulting to 1000 [ 1309.402587][T26928] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7034'. [ 1309.773759][ T31] kauditd_printk_skb: 17 callbacks suppressed [ 1309.773785][ T31] audit: type=1326 audit(1309.741:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26936 comm="syz.0.7038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1309.878843][ T31] audit: type=1326 audit(1309.771:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26936 comm="syz.0.7038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1309.910322][T26943] loop6: detected capacity change from 0 to 7 [ 1309.949778][ T31] audit: type=1326 audit(1309.771:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26936 comm="syz.0.7038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1309.961762][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1309.981346][ C1] buffer_io_error: 4 callbacks suppressed [ 1309.981376][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1309.995856][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1310.005497][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1310.028152][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1310.029524][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.037817][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1310.052292][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1310.061964][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1310.072960][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1310.082573][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1310.093056][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1310.102666][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1310.111073][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1310.120868][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1310.128772][T26943] ldm_validate_partition_table(): Disk read failed. [ 1310.130551][ T31] audit: type=1326 audit(1309.771:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26936 comm="syz.0.7038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1310.158943][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1310.168644][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1310.176848][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1310.186496][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1310.200221][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1310.209779][ T31] audit: type=1326 audit(1309.771:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26936 comm="syz.0.7038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1310.209854][ T31] audit: type=1326 audit(1309.771:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26936 comm="syz.0.7038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1310.231738][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1310.234503][T26943] Dev loop6: unable to read RDB block 0 [ 1310.276788][T26943] loop6: unable to read partition table [ 1310.282667][T26943] loop6: partition table beyond EOD, truncated [ 1310.339336][ T31] audit: type=1326 audit(1309.771:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26936 comm="syz.0.7038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1310.374071][T26943] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1310.430932][ T31] audit: type=1326 audit(1309.771:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26936 comm="syz.0.7038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1310.512266][ T31] audit: type=1326 audit(1309.771:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26936 comm="syz.0.7038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1310.561067][ T31] audit: type=1326 audit(1309.771:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26936 comm="syz.0.7038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fa3a078f749 code=0x7ffc0000 [ 1310.584447][T26921] lo speed is unknown, defaulting to 1000 [ 1310.963536][T26958] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7048'. [ 1311.664531][T26973] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7052'. [ 1311.826475][T26970] lo speed is unknown, defaulting to 1000 [ 1312.325774][T26982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7056'. [ 1312.598682][T26970] lo speed is unknown, defaulting to 1000 [ 1312.877958][T26993] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7061'. [ 1313.127602][T26993] tipc: New replicast peer: 255.255.255.83 [ 1313.142266][T26993] tipc: Enabled bearer , priority 10 [ 1313.428225][T26999] netlink: 'syz.2.7063': attribute type 3 has an invalid length. [ 1314.053530][T27009] __nla_validate_parse: 2 callbacks suppressed [ 1314.053557][T27009] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7068'. [ 1314.630839][T27022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7073'. [ 1314.685058][T27025] xt_hashlimit: size too large, truncated to 1048576 [ 1314.697295][T27026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7073'. [ 1314.799692][T27022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7073'. [ 1314.810255][T27028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7074'. [ 1315.045860][T27026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7073'. [ 1315.302168][T27022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7073'. [ 1315.420586][T27026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7073'. [ 1315.570885][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 1315.570912][ T31] audit: type=1326 audit(1315.531:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27042 comm="syz.4.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1315.683016][ T31] audit: type=1326 audit(1315.571:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27042 comm="syz.4.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1315.764800][ T31] audit: type=1326 audit(1315.571:4538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27042 comm="syz.4.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1315.859504][ T31] audit: type=1326 audit(1315.571:4539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27042 comm="syz.4.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1315.882523][ T31] audit: type=1326 audit(1315.571:4540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27042 comm="syz.4.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1315.943791][ T31] audit: type=1326 audit(1315.571:4541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27042 comm="syz.4.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1315.980422][T27051] lo speed is unknown, defaulting to 1000 [ 1316.013214][ T31] audit: type=1326 audit(1315.581:4542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27042 comm="syz.4.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1316.085250][ T31] audit: type=1326 audit(1315.601:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27042 comm="syz.4.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1316.164591][ T31] audit: type=1326 audit(1315.601:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27042 comm="syz.4.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1316.244996][ T31] audit: type=1326 audit(1315.601:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27042 comm="syz.4.7079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55ac38f749 code=0x7ffc0000 [ 1316.590129][T27067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7088'. [ 1316.920659][T27051] lo speed is unknown, defaulting to 1000 [ 1317.613628][T27072] syzkaller0: entered promiscuous mode [ 1317.619148][T27072] syzkaller0: entered allmulticast mode [ 1318.094651][T27077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7092'. [ 1319.265149][T27108] xt_hashlimit: size too large, truncated to 1048576 [ 1319.644639][T27122] __nla_validate_parse: 2 callbacks suppressed [ 1319.644665][T27122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7112'. [ 1319.722448][T26965] Set syz1 is full, maxelem 65536 reached [ 1320.137589][T27139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7118'. [ 1320.309759][T27144] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7121'. [ 1320.608488][T27143] pimreg: entered allmulticast mode [ 1320.827846][T27128] pimreg: left allmulticast mode [ 1322.010133][T27169] : renamed from bond_slave_0 [ 1322.053161][T27134] lo speed is unknown, defaulting to 1000 [ 1322.301239][T27171] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7130'. [ 1322.387249][T27133] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1322.472194][T27133] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1322.535806][T27173] xt_hashlimit: size too large, truncated to 1048576 [ 1322.593613][T27133] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1322.672840][T27133] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1322.762406][T27133] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1322.845559][T27133] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1322.972336][T27133] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1323.066200][T27133] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1323.177680][T27133] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1323.223019][T27133] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1323.232094][T27133] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1323.239247][T27133] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1323.687333][T27134] lo speed is unknown, defaulting to 1000 [ 1325.970205][T27210] lo speed is unknown, defaulting to 1000 [ 1326.301897][T27229] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7151'. [ 1326.349297][T27227] xt_hashlimit: size too large, truncated to 1048576 [ 1327.120013][T27232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7152'. [ 1327.398606][T27210] lo speed is unknown, defaulting to 1000 [ 1327.938951][T27248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7157'. [ 1327.958559][T27248] netlink: 348 bytes leftover after parsing attributes in process `syz.4.7157'. [ 1327.995093][T27248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7157'. [ 1328.013271][T27248] netlink: 348 bytes leftover after parsing attributes in process `syz.4.7157'. [ 1328.028976][T27248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7157'. [ 1328.320199][T27253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7159'. [ 1328.840985][T27261] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7164'. [ 1328.995477][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 1328.995503][ T31] audit: type=1326 audit(1328.961:4573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27262 comm="syz.9.7166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1329.193938][T27270] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7163'. [ 1329.531956][ T31] audit: type=1326 audit(1328.961:4574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27262 comm="syz.9.7166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1329.662147][ T31] audit: type=1326 audit(1329.071:4575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27262 comm="syz.9.7166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1329.693015][ T31] audit: type=1326 audit(1329.081:4576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27262 comm="syz.9.7166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1329.734290][T27265] netlink: 'syz.9.7166': attribute type 13 has an invalid length. [ 1329.747321][T27273] tipc: Enabled bearer , priority 0 [ 1329.779672][ T31] audit: type=1326 audit(1329.091:4577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27262 comm="syz.9.7166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1329.878409][T27267] tipc: Resetting bearer [ 1329.914031][ T31] audit: type=1326 audit(1329.451:4578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27262 comm="syz.9.7166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1330.003579][ T31] audit: type=1326 audit(1329.611:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27262 comm="syz.9.7166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1330.051203][T27264] tipc: Disabling bearer [ 1330.067789][ T31] audit: type=1326 audit(1329.611:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27262 comm="syz.9.7166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1330.152218][ T31] audit: type=1326 audit(1329.701:4581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27262 comm="syz.9.7166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1330.212111][ T31] audit: type=1326 audit(1329.701:4582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27262 comm="syz.9.7166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47438f749 code=0x7ffc0000 [ 1330.289805][T27285] loop6: detected capacity change from 0 to 512 [ 1330.357931][T27282] lo speed is unknown, defaulting to 1000 [ 1330.404427][T27285] journal_path: Non-blockdev passed as './bus' [ 1330.410671][T27285] EXT4-fs: error: could not find journal device path [ 1331.193042][T27282] lo speed is unknown, defaulting to 1000 [ 1331.346320][T27322] __nla_validate_parse: 8 callbacks suppressed [ 1331.346346][T27322] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7184'. [ 1331.542659][T27328] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7188'. [ 1331.699370][T27332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7190'. [ 1332.415137][T27347] lo speed is unknown, defaulting to 1000 [ 1332.929206][T27347] lo speed is unknown, defaulting to 1000 [ 1333.603609][T27354] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7196'. [ 1334.311825][T27368] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7203'. [ 1334.443281][T27374] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7206'. [ 1335.422035][T27385] veth0: entered promiscuous mode [ 1335.438990][T27386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7209'. [ 1335.454240][T27384] veth0: left promiscuous mode [ 1335.639590][T27393] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7213'. [ 1335.738350][T27396] ------------[ cut here ]------------ [ 1335.746220][T27396] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 1335.771313][T27396] WARNING: kernel/bpf/verifier.c:2742 at reg_bounds_sanity_check+0x321/0x1360, CPU#1: syz.4.7214/27396 [ 1335.783156][T27396] Modules linked in: [ 1335.787083][T27396] CPU: 1 UID: 0 PID: 27396 Comm: syz.4.7214 Not tainted syzkaller #0 PREEMPT(full) [ 1335.797049][T27396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1335.807648][T27396] RIP: 0010:reg_bounds_sanity_check+0x361/0x1360 [ 1335.807718][T27398] netlink: 96 bytes leftover after parsing attributes in process `syz.9.7215'. [ 1335.814484][T27396] Code: ff ff 50 8b 85 6c ff ff ff 50 8b 85 7c ff ff ff 50 8b 85 78 ff ff ff 50 ff 75 b8 4c 8b 4d c0 48 8b 95 70 ff ff ff 48 8b 75 80 <67> 48 0f b9 3a 48 8b 95 48 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 [ 1335.843698][T27396] RSP: 0018:ffffc9000430f2a0 EFLAGS: 00010287 [ 1335.849798][T27396] RAX: 00000000ffffdfcd RBX: ffff88807a3f427c RCX: 00000000ffffdfcd [ 1335.858320][T27396] RDX: ffffffff8b95e320 RSI: ffffffff8b962fc0 RDI: ffffffff908cd4e0 [ 1335.866876][T27396] RBP: ffffc9000430f390 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 1335.874929][T27396] R10: 00000000ffffdfcc R11: 0000000000000000 R12: 00000000ffffdfcd [ 1335.883250][T27396] R13: ffffffffffffdfcc R14: ffff88807a3f4284 R15: ffff88807a3f4230 [ 1335.891245][T27396] FS: 00007f55ad2bc6c0(0000) GS:ffff8881249f6000(0000) knlGS:0000000000000000 [ 1335.900626][T27396] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1335.907296][T27396] CR2: 0000200000001000 CR3: 000000009a356000 CR4: 0000000000350ef0 [ 1335.915353][T27396] Call Trace: [ 1335.918652][T27396] [ 1335.921626][T27396] reg_set_min_max+0x18d/0x2d0 [ 1335.926489][T27396] check_cond_jmp_op+0x277c/0x7890 [ 1335.931684][T27396] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 1335.937275][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1335.943287][T27396] ? check_alu_op+0x80d/0x38f0 [ 1335.948220][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1335.953964][T27396] ? commit_stack_write_marks.isra.0+0x2fb/0x450 [ 1335.960333][T27396] do_check_common+0xa4d3/0xc640 [ 1335.965395][T27396] ? kvfree+0xd/0x20 [ 1335.969335][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1335.975073][T27396] ? __pfx_do_check_common+0x10/0x10 [ 1335.980377][T27396] ? compute_scc+0x8d5/0xa50 [ 1335.985060][T27396] ? get_call_summary+0x710/0x780 [ 1335.990152][T27396] bpf_check+0x82aa/0xc820 [ 1335.994685][T27396] ? __pfx_bpf_check+0x10/0x10 [ 1335.999472][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.005214][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.010906][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.016660][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.022326][T27396] ? lsm_blob_alloc+0x2b/0x90 [ 1336.027301][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.033055][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.038731][T27396] bpf_prog_load+0x114e/0x2cc0 [ 1336.043619][T27396] ? __pfx_bpf_prog_load+0x10/0x10 [ 1336.048782][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.054501][T27396] ? __lock_acquire+0x436/0x2890 [ 1336.059479][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.065267][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.070940][T27396] __sys_bpf+0x3e72/0x4980 [ 1336.075460][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.081131][T27396] ? futex_private_hash_put+0x160/0x1b0 [ 1336.086777][T27396] ? __pfx___sys_bpf+0x10/0x10 [ 1336.091574][T27396] ? __pfx_futex_wait+0x10/0x10 [ 1336.096585][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.102265][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.107971][T27396] ? do_futex+0x122/0x350 [ 1336.112364][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.118068][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.123785][T27396] ? xfd_validate_state+0x61/0x180 [ 1336.128934][T27396] __x64_sys_bpf+0x78/0xc0 [ 1336.133420][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.139087][T27396] ? lockdep_hardirqs_on+0x7c/0x110 [ 1336.144401][T27396] do_syscall_64+0xcd/0xf80 [ 1336.148957][T27396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.154954][T27396] RIP: 0033:0x7f55ac38f749 [ 1336.159385][T27396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1336.179081][T27396] RSP: 002b:00007f55ad2bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1336.187605][T27396] RAX: ffffffffffffffda RBX: 00007f55ac5e5fa0 RCX: 00007f55ac38f749 [ 1336.195682][T27396] RDX: 0000000000000049 RSI: 0000200000000140 RDI: 0000000000000005 [ 1336.203744][T27396] RBP: 00007f55ac413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1336.211737][T27396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1336.219806][T27396] R13: 00007f55ac5e6038 R14: 00007f55ac5e5fa0 R15: 00007ffe474effa8 [ 1336.227872][T27396] [ 1336.230916][T27396] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1336.238320][T27396] CPU: 1 UID: 0 PID: 27396 Comm: syz.4.7214 Not tainted syzkaller #0 PREEMPT(full) [ 1336.247705][T27396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1336.257765][T27396] Call Trace: [ 1336.261045][T27396] [ 1336.263976][T27396] dump_stack_lvl+0x3d/0x1f0 [ 1336.268601][T27396] vpanic+0x640/0x6f0 [ 1336.272599][T27396] ? reg_bounds_sanity_check+0x321/0x1360 [ 1336.278351][T27396] panic+0xca/0xd0 [ 1336.282091][T27396] ? __pfx_panic+0x10/0x10 [ 1336.286541][T27396] check_panic_on_warn+0xab/0xb0 [ 1336.291499][T27396] __warn+0x108/0x3c0 [ 1336.295502][T27396] __report_bug+0x2a0/0x520 [ 1336.300027][T27396] ? reg_bounds_sanity_check+0x321/0x1360 [ 1336.305783][T27396] ? __pfx___report_bug+0x10/0x10 [ 1336.310842][T27396] ? __kasan_kmalloc+0xaa/0xb0 [ 1336.315615][T27396] ? copy_verifier_state+0xc1b/0x1030 [ 1336.321001][T27396] ? push_stack+0x1ca/0x380 [ 1336.325514][T27396] ? check_cond_jmp_op+0xb06/0x7890 [ 1336.330740][T27396] ? do_check_common+0xa4d3/0xc640 [ 1336.335859][T27396] ? bpf_check+0x82aa/0xc820 [ 1336.340462][T27396] ? bpf_prog_load+0x114e/0x2cc0 [ 1336.345411][T27396] ? __sys_bpf+0x3e72/0x4980 [ 1336.350028][T27396] report_bug_entry+0xe1/0x290 [ 1336.354816][T27396] ? reg_bounds_sanity_check+0x361/0x1360 [ 1336.360571][T27396] handle_bug+0x18a/0x260 [ 1336.364914][T27396] exc_invalid_op+0x17/0x50 [ 1336.369430][T27396] asm_exc_invalid_op+0x1a/0x20 [ 1336.374289][T27396] RIP: 0010:reg_bounds_sanity_check+0x361/0x1360 [ 1336.380734][T27396] Code: ff ff 50 8b 85 6c ff ff ff 50 8b 85 7c ff ff ff 50 8b 85 78 ff ff ff 50 ff 75 b8 4c 8b 4d c0 48 8b 95 70 ff ff ff 48 8b 75 80 <67> 48 0f b9 3a 48 8b 95 48 ff ff ff 48 83 c4 38 48 b8 00 00 00 00 [ 1336.400353][T27396] RSP: 0018:ffffc9000430f2a0 EFLAGS: 00010287 [ 1336.406435][T27396] RAX: 00000000ffffdfcd RBX: ffff88807a3f427c RCX: 00000000ffffdfcd [ 1336.414414][T27396] RDX: ffffffff8b95e320 RSI: ffffffff8b962fc0 RDI: ffffffff908cd4e0 [ 1336.422393][T27396] RBP: ffffc9000430f390 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 1336.430370][T27396] R10: 00000000ffffdfcc R11: 0000000000000000 R12: 00000000ffffdfcd [ 1336.438345][T27396] R13: ffffffffffffdfcc R14: ffff88807a3f4284 R15: ffff88807a3f4230 [ 1336.446378][T27396] reg_set_min_max+0x18d/0x2d0 [ 1336.451178][T27396] check_cond_jmp_op+0x277c/0x7890 [ 1336.456345][T27396] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 1336.461838][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.467492][T27396] ? check_alu_op+0x80d/0x38f0 [ 1336.472279][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.477925][T27396] ? commit_stack_write_marks.isra.0+0x2fb/0x450 [ 1336.484280][T27396] do_check_common+0xa4d3/0xc640 [ 1336.489261][T27396] ? kvfree+0xd/0x20 [ 1336.493182][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.498854][T27396] ? __pfx_do_check_common+0x10/0x10 [ 1336.504151][T27396] ? compute_scc+0x8d5/0xa50 [ 1336.508768][T27396] ? get_call_summary+0x710/0x780 [ 1336.513837][T27396] bpf_check+0x82aa/0xc820 [ 1336.518293][T27396] ? __pfx_bpf_check+0x10/0x10 [ 1336.523064][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.528718][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.534378][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.540029][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.545678][T27396] ? lsm_blob_alloc+0x2b/0x90 [ 1336.550381][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.556028][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.561682][T27396] bpf_prog_load+0x114e/0x2cc0 [ 1336.566478][T27396] ? __pfx_bpf_prog_load+0x10/0x10 [ 1336.571604][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.577254][T27396] ? __lock_acquire+0x436/0x2890 [ 1336.582217][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.587902][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.593558][T27396] __sys_bpf+0x3e72/0x4980 [ 1336.597993][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.603656][T27396] ? futex_private_hash_put+0x160/0x1b0 [ 1336.609228][T27396] ? __pfx___sys_bpf+0x10/0x10 [ 1336.614010][T27396] ? __pfx_futex_wait+0x10/0x10 [ 1336.618884][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.624543][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.630192][T27396] ? do_futex+0x122/0x350 [ 1336.634565][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.640218][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.645866][T27396] ? xfd_validate_state+0x61/0x180 [ 1336.651003][T27396] __x64_sys_bpf+0x78/0xc0 [ 1336.655435][T27396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1336.661084][T27396] ? lockdep_hardirqs_on+0x7c/0x110 [ 1336.666313][T27396] do_syscall_64+0xcd/0xf80 [ 1336.670855][T27396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.676763][T27396] RIP: 0033:0x7f55ac38f749 [ 1336.681180][T27396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1336.700800][T27396] RSP: 002b:00007f55ad2bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1336.709232][T27396] RAX: ffffffffffffffda RBX: 00007f55ac5e5fa0 RCX: 00007f55ac38f749 [ 1336.717205][T27396] RDX: 0000000000000049 RSI: 0000200000000140 RDI: 0000000000000005 [ 1336.725177][T27396] RBP: 00007f55ac413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1336.733148][T27396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1336.741120][T27396] R13: 00007f55ac5e6038 R14: 00007f55ac5e5fa0 R15: 00007ffe474effa8 [ 1336.749117][T27396] [ 1336.752622][T27396] Kernel Offset: disabled [ 1336.756945][T27396] Rebooting in 86400 seconds..