last executing test programs: 1m34.961971288s ago: executing program 4 (id=2252): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000980), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, r0, 0x0, 0x46) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="1f12ac", 0x3}]) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000580)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x8031) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x10) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r5}) 1m33.558044501s ago: executing program 4 (id=2259): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x208}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}]}, 0x54}}, 0x0) 1m33.438021112s ago: executing program 4 (id=2262): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) 1m33.309187704s ago: executing program 4 (id=2264): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, 0x1c) epoll_create1(0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x0) 1m32.33169843s ago: executing program 4 (id=2267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000000400000000"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r3, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) listen(r3, 0xda8c) accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m31.086357109s ago: executing program 4 (id=2270): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0x0, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x7, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0xa, 0x2, 0x81, 0x4b, 0x80, 0x6, 0x9, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0x102, 0xff, 0x3, 0x80000000, 0x2, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m24.818413309s ago: executing program 3 (id=2296): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x44000000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4, 0x0, 0x9}, 0x18) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="003531d0081634a844cb7924d87a8dce5d1a6c9ae88dce733292494dc2900e6759d69221ec8f827bc438bf6a983de5286b648195a809a18b941c6b3d090092180d1746e9c5eae6b9c2992b32ec95bffe226d2ad16124944e105e9d268dfafd74ca934a7dbef224c2293a4798904f162d126d1819febf57d3758306dadf1057fdf9ee584e"], 0x1, 0x55a, &(0x7f0000000b80)="$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") r5 = open(0x0, 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1m23.883904583s ago: executing program 3 (id=2299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 1m22.362813338s ago: executing program 3 (id=2303): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSBRK(r0, 0x5427) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000500)=[@ioring_restriction_sqe_op={0x1, 0x31a1ac19ea15b29b}], 0x1) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000680)={0x2ae, 0x7d, 0x40, {{0x500, 0x16d, 0x0, 0xb000000, {0x2, 0x2, 0x3}, 0x0, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x92, '\xcf\xc2m\xd7\xc5\x00\xf0\xdc4l)Vne\nA\x8aVK\x98\xa8BBJ\x97\x83\x7f[\x85Q\xee\xcb\x06\\\xf7\x1d\xe15\xf0s\xa2GAat\xe2\xa8\x04\x9bX\xd9]{\x99\xa9\xac\x9f;3\x82\x84Io\x9d\xcaf\x1dj\xc2f\xa0\x11\xe0\x84\xf3\xc1\xb0\xbe\x1d\xb4m)\xd6\b:E\xfb\xf8\x9e1\xb5\xe3\xdb\xfd\x0e5\xc7H\xde(\x1f\xe2\xba\x18\xef\x86\x8a\x87\xa9\xa4H`\x8c\x1c\xad\x87\xc8\xe0\x1e\x1c\x92\t\x00\xe6\xf8\xde\xb8\x98\x19[\xbe\xee\xe2\xa9\x94\x00'/146, 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1h\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\b\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x2ae) syz_create_resource$binfmt(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/125], 0xfc}}, 0x0) 1m21.361723113s ago: executing program 3 (id=2305): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x24, 0x2c, 0xd37, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe, 0xa}, {}, {0x8, 0xffff}}}, 0x24}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m21.166823257s ago: executing program 3 (id=2306): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000980), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1c, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0xd, 0x2, &(0x7f00000001c0)=""/2, 0x41000, 0x10, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0xc, 0x800, 0x200}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r1, 0x0, 0x46) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="1f12ac", 0x3}]) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000580)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x8031) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x10) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r6}) 1m20.31148643s ago: executing program 0 (id=2307): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffff", 0x45}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000380)=""/176) getpid() open_by_handle_at(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x850001) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095f0ff0000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="c40000000001010400000000000000000a00006f5c0001802c00018014000300fe88000000000000000000000000010114000400ff0100000000000000000000000000012c00018013000300fe80000000000000000000000000001814000400200100000000000000000000000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000"], 0xc4}}, 0x800) 1m19.464144453s ago: executing program 3 (id=2308): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) readv(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 1m19.418347294s ago: executing program 0 (id=2309): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x44000000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4, 0x0, 0x9}, 0x18) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="003531d0081634a844cb7924d87a8dce5d1a6c9ae88dce733292494dc2900e6759d69221ec8f827bc438bf6a983de5286b648195a809a18b941c6b3d090092180d1746e9c5eae6b9c2992b32ec95bffe226d2ad16124944e105e9d268dfafd74ca934a7dbef224c2293a4798904f162d126d1819febf57d3758306dadf1057fdf9ee584e"], 0x1, 0x55a, &(0x7f0000000b80)="$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") r5 = open(0x0, 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1m18.457706389s ago: executing program 0 (id=2310): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000380), &(0x7f00000001c0)=0x68) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b000000b9000000010001000900000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r2, &(0x7f0000000180), &(0x7f0000000680)=""/141}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x10, 0x3, 0xb) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, r5, {0x10}, {0xffff, 0xffff}, {0x2, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x400}]}, 0x2c}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r7], 0x50}, 0x1, 0xba01}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r2, &(0x7f0000000040)}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000d14010027bd7000fbdbdf25080001"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x40880) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = socket$igmp(0x2, 0x3, 0x2) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x2, 0xfffffefc, 0x6}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r10], 0x1c}}, 0x804) setsockopt$MRT_ASSERT(r9, 0x0, 0xcf, &(0x7f0000000000)=0x1, 0x4) ioctl$TCXONC(r8, 0x5608, 0x3) 1m15.511742046s ago: executing program 32 (id=2270): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0x0, 0x7, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x66ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x7, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0xa, 0x2, 0x81, 0x4b, 0x80, 0x6, 0x9, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0x102, 0xff, 0x3, 0x80000000, 0x2, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m4.668989657s ago: executing program 0 (id=2321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) times(&(0x7f0000000040)) getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) 1m4.329317293s ago: executing program 33 (id=2308): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x200, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) readv(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 1m2.841172556s ago: executing program 0 (id=2329): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffff", 0x45}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000380)=""/176) getpid() open_by_handle_at(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x850001) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='devices.list\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095f0ff0000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="c40000000001010400000000000000000a00006f5c0001802c00018014000300fe88000000000000000000000000010114000400ff0100000000000000000000000000012c00018013000300fe80000000000000000000000000001814000400200100000000000000000000000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000"], 0xc4}}, 0x800) 1m1.931893471s ago: executing program 0 (id=2330): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x48c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, &(0x7f0000000100)) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="180100002800010004000000f8dbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x40000) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) unshare(0x40000000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 46.835520849s ago: executing program 34 (id=2330): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x48c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, &(0x7f0000000100)) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="180100002800010004000000f8dbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x40000) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) unshare(0x40000000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 29.414806115s ago: executing program 2 (id=2365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) times(&(0x7f0000000040)) getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) 28.119838635s ago: executing program 2 (id=2368): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) futex(&(0x7f0000004000)=0x8007, 0x4, 0x0, 0x0, &(0x7f0000004000)=0x2, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) 27.18460294s ago: executing program 2 (id=2370): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@ipv4_newroute={0x58c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}, [@RTA_METRICS={0x570, 0x8, 0x0, 0x1, "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"}]}, 0x58c}}, 0x0) 26.894909075s ago: executing program 2 (id=2372): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r0, 0x2000, 0x0) 19.078962768s ago: executing program 2 (id=2380): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000980), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1c, 0x0, &(0x7f0000000100), &(0x7f0000000140)='GPL\x00', 0xd, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0xc, 0x800, 0x200}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r1, 0x0, 0x46) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="1f12ac", 0x3}]) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000580)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x8031) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x10) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r6}) 17.982868156s ago: executing program 2 (id=2384): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmmsg$unix(r0, 0x0, 0x0, 0x81) mkdirat(0xffffffffffffff9c, 0x0, 0x26) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x0, 0xb, 0x110, 0x2, 0x0, 0x10001, 0x0}) 14.488176691s ago: executing program 1 (id=2393): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000980), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1c, 0x0, &(0x7f0000000100), &(0x7f0000000140)='GPL\x00', 0xd, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0xc, 0x800, 0x200}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r1, 0x0, 0x46) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="1f12ac", 0x3}]) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000580)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x8031) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x10) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r6}) 13.29352644s ago: executing program 1 (id=2397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0xe, 0x0, &(0x7f0000000900)) 11.912907692s ago: executing program 1 (id=2398): r0 = socket$inet6(0xa, 0x3, 0x7) sendto$inet6(r0, 0x0, 0x0, 0x200000d1, 0x0, 0x0) 11.765596054s ago: executing program 1 (id=2399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) times(&(0x7f0000000040)) getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) 9.966114123s ago: executing program 1 (id=2401): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) copy_file_range(r3, &(0x7f0000000300)=0x6, r2, 0x0, 0xb, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r6, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x47b07c7d, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x80000001, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e6, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe04, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000fb8ad2f248391a59010d3c120cc8000000"], 0x14}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000030301030000000000010000070000000c00020000000000000000095214c7a7623bfde56d9b5010e72223c763b85c10e3267c28f8c630830d795043d200e94fd178"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7.159922567s ago: executing program 5 (id=2403): r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r4}, &(0x7f0000001c00), &(0x7f0000001c40)=r5}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x201000, 0x1000}, 0x20) 6.421476378s ago: executing program 1 (id=2404): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r4, 0x0) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000000)="c1", 0xfcf6}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000007100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 5.999319066s ago: executing program 5 (id=2405): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14e7e100158b010000000000000000000001fd00"], 0x14}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xffff}, {0x4, 0x1}, {0x5, 0x5}}}, 0x24}}, 0x40) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x993568c40857f797, &(0x7f00000011c0)=""/57, &(0x7f0000001200)=0x39) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x10, 0x8001, 0x3, 0x0, 0x2, 0xb}}) 5.841887558s ago: executing program 6 (id=2406): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000980), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1c, 0x0, &(0x7f0000000100), &(0x7f0000000140)='GPL\x00', 0xd, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0xc, 0x800, 0x200}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r1, 0x0, 0x46) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="1f12ac", 0x3}]) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000580)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x8031) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x10) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r6}) 5.199649818s ago: executing program 5 (id=2407): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x32}, 0x1e) 5.04269642s ago: executing program 5 (id=2408): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x80000000}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r6 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x0, 0x3, 0x8b}, &(0x7f0000000400)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r6, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r4, r5, 0x0) r9 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1fc}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r9, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/151, 0x97}], 0x1}}], 0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000500000000000000e40000001800000000000000050000000000000054b608000100000095000000000000009500000000000000234f20ca88c22b6c5bbcd3a338da3ee1e969c55747de3baa2564d2acecb0a2638424238edb1fad781244ca9204feab4b9515a6588849b71e2e2ccb03fdd49dab47d031071deeb73e3f9c41c41a6cc286aa805d41f099d4f2e9e68a7c085b854afd726ede980f55586ed66f7817ba2bac545d2f86ee26ceef6c7fd5"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0x10, 0xfffffff8}, 0x10, 0x2f313, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc306340, @void, @value}, 0x94) 4.941732772s ago: executing program 7 (id=2343): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000002880)='net/ip6_mr_vif\x00') read$FUSE(r5, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f00000", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000002340)=@alg, 0x80, &(0x7f00000028c0)=[{&(0x7f00000023c0)=""/95, 0x5f}, {&(0x7f0000002440)=""/200, 0xc8}, {&(0x7f0000002540)=""/219, 0xdb}, {&(0x7f0000002c40)=""/139, 0x8b}, {&(0x7f0000002700)=""/71, 0x47}, {&(0x7f0000002780)=""/92, 0x5c}, {&(0x7f00000000c0)=""/44, 0x2c}, {&(0x7f0000002800)=""/97, 0x61}, {&(0x7f00000001c0)=""/17, 0x11}], 0x9, &(0x7f0000002980)=""/231, 0xe7}, 0x5}], 0x1, 0x10002, 0x0) 4.42543767s ago: executing program 6 (id=2409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r0}, &(0x7f0000001080), &(0x7f00000001c0)=r1}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0xb0, 0x1000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "44cb6d37c6818e519c60ca92b05c8ad4ae74ea79fdb58e2b7f29fa51c12f5cbb", "529ce0c19fb809804c2ff3c5412218a7d847fbc93cfef70c00506d947ea54e7f53d1fdc46c7f32f5461c69dbb12ae334", "93789889a9e2835b672961b74d925e86afc527fa482ea332ce27b8a5", {"2e5da89a0ace8edabc766b388285d39f", "375c5bef000000000d4600"}}}}}}}, 0x0) 3.999993627s ago: executing program 5 (id=2410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) times(&(0x7f0000000040)) getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0) 3.955968957s ago: executing program 7 (id=2411): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x10, 0x6, @link_local}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000002c0)=@md0, 0x0, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) 3.858727559s ago: executing program 6 (id=2412): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x44000000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4, 0x0, 0x9}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="003531d0081634a844cb7924d87a8dce5d1a6c9ae88dce733292494dc2900e6759d69221ec8f827bc438bf6a983de5286b648195a809a18b941c6b3d090092180d1746e9c5eae6b9c2992b32ec95bffe226d2ad16124944e105e9d268dfafd74ca934a7dbef224c2293a4798904f162d126d1819febf57d3758306dadf1057fdf9ee584e"], 0x1, 0x55a, &(0x7f0000000b80)="$eJzs2s9qE1EUB+CTP02LCGYtLgbcuCrVJzBICsWAEMlCceFA4yYjwmQzyaoP4hP4PD5JVt1F6oSkURGknUxtvg9CDvlNMucykHsX5+OTz5PzL9NPH75/jaOXSbQjonkZ0Y1mtKLUiI1GdOK6iwAA/jfDYdqruweqlee99OoMd/hbMvpWS0MAAAAAAAAAAADc2L/M/zfN/wPAvVDO/3fqboMK5Xkv7azOb9vM/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD1uVwuHy3/8qq7PwDg9tn/AWD/2P8BYP/Y/wFg/7x99/51bzDoD5PkKGJxUYyKUfle5qdng/5J8lN3861FUYxa6/x5mSfb+UE8WOUv/ph34tnTMr/KXr0Z/JIfxnn1ywcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACuOU7Wuo31p4uiGLXKfHNBN7bysjo9G/RPVhds5+143N7dOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICbm87mkzTLxrmiiqIdETu41/HD8mkerJ7q7d8iolHRLyvuZlHffxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCv6Ww+SbNsnE/r7gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuCums/kkzbJxXmFR9xoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYvR8BAAD//2/WhiY=") r5 = open(0x0, 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2.871143695s ago: executing program 7 (id=2413): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000001) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a12000/0x4000)=nil, 0x4000, 0x3, 0x10010, r0, 0xe07cf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, 0x0, 0x40004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) 2.843529265s ago: executing program 35 (id=2384): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmmsg$unix(r0, 0x0, 0x0, 0x81) mkdirat(0xffffffffffffff9c, 0x0, 0x26) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x0, 0xb, 0x110, 0x2, 0x0, 0x10001, 0x0}) 2.838412115s ago: executing program 5 (id=2415): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) listen(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002040)='net/route\x00') read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0x96) close(r0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) read$FUSE(r1, &(0x7f0000004440)={0x2020}, 0x2020) 2.762106456s ago: executing program 6 (id=2416): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14e7e100158b010000000000000000000001fd00"], 0x14}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xffff}, {0x4, 0x1}, {0x5, 0x5}}}, 0x24}}, 0x40) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x993568c40857f797, &(0x7f00000011c0)=""/57, &(0x7f0000001200)=0x39) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x10, 0x8001, 0x3, 0x0, 0x2, 0xb}}) 1.718778393s ago: executing program 7 (id=2417): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x60, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0xff}, 0x0, 0x0, 0x0}) 1.2530534s ago: executing program 6 (id=2418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="99742dbd7000fbdbdf2515000000400001802c000400140001000200000000000000f0000000000000001400020067004e227f00000100000000000000000d0001007564703a73797a3200000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 1.044278764s ago: executing program 6 (id=2419): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000980), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1c, 0x0, &(0x7f0000000100), &(0x7f0000000140)='GPL\x00', 0xd, 0x2, &(0x7f00000001c0)=""/2, 0x41000, 0x10, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x2, 0xc, 0x800, 0x200}, 0x10, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r1, 0x0, 0x46) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="1f12ac", 0x3}]) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000580)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x8031) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x10) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r6}) 1.043609704s ago: executing program 7 (id=2420): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x80000000}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r6 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x0, 0x3, 0x8b}, &(0x7f0000000400)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r6, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r4, r5, 0x0) r9 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1fc}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r9, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/151, 0x97}], 0x1}}], 0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000500000000000000e40000001800000000000000050000000000000054b608000100000095000000000000009500000000000000234f20ca88c22b6c5bbcd3a338da3ee1e969c55747de3baa2564d2acecb0a2638424238edb1fad781244ca9204feab4b9515a6588849b71e2e2ccb03fdd49dab47d031071deeb73e3f9c41c41a6cc286aa805d41f099d4f2e9e68a7c085b854afd726ede980f55586ed66f7817ba2bac545d2f86ee26ceef6c7fd5"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0x10, 0xfffffff8}, 0x10, 0x2f313, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xc306340, @void, @value}, 0x94) 0s ago: executing program 7 (id=2421): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000002880)='net/ip6_mr_vif\x00') read$FUSE(r5, &(0x7f0000000300)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f00000", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{&(0x7f0000002340)=@alg, 0x80, &(0x7f00000028c0)=[{&(0x7f00000023c0)=""/95, 0x5f}, {&(0x7f0000002440)=""/200, 0xc8}, {&(0x7f0000002540)=""/219, 0xdb}, {&(0x7f0000002c40)=""/139, 0x8b}, {&(0x7f0000002700)=""/71, 0x47}, {&(0x7f0000002780)=""/92, 0x5c}, {&(0x7f00000000c0)=""/44, 0x2c}, {&(0x7f0000002800)=""/97, 0x61}, {&(0x7f00000001c0)=""/17, 0x11}], 0x9, &(0x7f0000002980)=""/231, 0xe7}, 0x5}], 0x1, 0x10002, 0x0) kernel console output (not intermixed with test programs): cess `syz.4.1379'. [ 377.218225][ T8918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1380'. [ 377.271511][ T8920] netlink: 'syz.3.1380': attribute type 4 has an invalid length. [ 377.506842][ T8925] bond1: (slave erspan0): Releasing backup interface [ 378.264891][ T8927] netlink: 'syz.0.1384': attribute type 10 has an invalid length. [ 378.267242][ T8927] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1384'. [ 378.318242][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'. [ 378.346329][ T8927] device geneve0 entered promiscuous mode [ 378.348505][ T8927] team0: Port device geneve0 added [ 378.359098][ T5611] bridge0: port 3(team0) entered blocking state [ 378.360974][ T5611] bridge0: port 3(team0) entered forwarding state [ 378.362979][ T8932] netlink: 'syz.3.1386': attribute type 10 has an invalid length. [ 378.365267][ T8932] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1386'. [ 378.407651][ T8940] loop0: detected capacity change from 0 to 512 [ 378.446727][ T8932] team0: Port device geneve0 added [ 378.535327][ T8940] __quota_error: 103 callbacks suppressed [ 378.535340][ T8940] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 378.538258][ T8938] device vlan2 entered promiscuous mode [ 378.539731][ T8940] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 378.551923][ T8938] device bridge0 entered promiscuous mode [ 378.575409][ T8940] EXT4-fs (loop0): mount failed [ 378.811573][ T8951] device wg2 entered promiscuous mode [ 378.857835][ T27] audit: type=1326 audit(2000000286.586:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b5a7a8 code=0x7ffc0000 [ 378.867049][ T27] audit: type=1326 audit(2000000286.596:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b5a7a8 code=0x7ffc0000 [ 378.915949][ T27] audit: type=1326 audit(2000000286.606:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffffb5b5a7a8 code=0x7ffc0000 [ 378.972194][ T27] audit: type=1326 audit(2000000286.606:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b5a7a8 code=0x7ffc0000 [ 379.009648][ T27] audit: type=1326 audit(2000000286.606:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b5a7a8 code=0x7ffc0000 [ 379.046156][ T27] audit: type=1326 audit(2000000286.616:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffb5b5a7a8 code=0x7ffc0000 [ 379.086393][ T27] audit: type=1326 audit(2000000286.616:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b5a7a8 code=0x7ffc0000 [ 379.105864][ T27] audit: type=1326 audit(2000000286.616:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b5a7a8 code=0x7ffc0000 [ 379.111919][ T27] audit: type=1326 audit(2000000286.616:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8948 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb5b5a7a8 code=0x7ffc0000 [ 379.193021][ T8955] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.414516][ T8955] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.427035][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 379.731550][ T8955] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.882488][ T8955] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.923854][ T8972] netlink: 'syz.2.1398': attribute type 10 has an invalid length. [ 379.926210][ T8972] __nla_validate_parse: 1 callbacks suppressed [ 379.926219][ T8972] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1398'. [ 379.938504][ T8972] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.946235][ T8972] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.948664][ T8972] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.957558][ T8972] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.209609][ T8977] loop1: detected capacity change from 0 to 512 [ 380.237637][ T8977] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 380.366875][ T8977] EXT4-fs (loop1): orphan cleanup on readonly fs [ 380.382466][ T8977] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1399: bg 0: block 248: padding at end of block bitmap is not set [ 380.392680][ T8977] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.1399: Failed to acquire dquot type 1 [ 380.410136][ T8977] EXT4-fs (loop1): 1 truncate cleaned up [ 380.421022][ T8977] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 380.610172][ T8976] device wg2 left promiscuous mode [ 380.656275][ T8955] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.673607][ T8955] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.680987][ T8982] netlink: 'syz.3.1401': attribute type 10 has an invalid length. [ 380.683536][ T8982] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1401'. [ 380.755805][ T8955] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.769079][ T8955] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.855822][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1402'. [ 380.922134][ T4295] EXT4-fs (loop1): unmounting filesystem. [ 381.461866][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1409'. [ 381.464380][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1409'. [ 381.466863][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1409'. [ 381.469284][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1409'. [ 381.471743][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1409'. [ 381.474224][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1409'. [ 381.476691][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1409'. [ 382.334481][ T9014] loop2: detected capacity change from 0 to 1024 [ 382.417162][ T9014] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.1410: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 382.429164][ T9014] EXT4-fs error (device loop2): ext4_quota_enable:7025: comm syz.2.1410: Bad quota inode: 3, type: 0 [ 382.433659][ T9014] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 382.441352][ T9014] EXT4-fs (loop2): mount failed [ 382.602982][ T9026] loop3: detected capacity change from 0 to 2048 [ 382.674098][ T9026] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 382.701088][ T9026] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 382.740508][ T9026] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 382.752819][ T9026] EXT4-fs (loop3): This should not happen!! Data will be lost [ 382.752819][ T9026] [ 382.755690][ T9026] EXT4-fs (loop3): Total free blocks count 0 [ 382.773598][ T9026] EXT4-fs (loop3): Free/Dirty block details [ 382.775346][ T9026] EXT4-fs (loop3): free_blocks=4096 [ 382.777253][ T9026] EXT4-fs (loop3): dirty_blocks=32 [ 382.785955][ T9026] EXT4-fs (loop3): Block reservation details [ 382.787778][ T9026] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 382.881710][ T5611] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 384.955258][ T9063] __nla_validate_parse: 97 callbacks suppressed [ 384.955272][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1429'. [ 385.441573][ T9083] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1434'. [ 386.237581][ T9089] loop1: detected capacity change from 0 to 512 [ 386.312206][ T9089] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1438: invalid indirect mapped block 256 (level 2) [ 386.360512][ T9089] EXT4-fs (loop1): 2 truncates cleaned up [ 386.362241][ T9089] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 387.755171][ T4295] EXT4-fs (loop1): unmounting filesystem. [ 388.623474][ T9129] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1450'. [ 390.351792][ T9142] netlink: 'syz.3.1454': attribute type 10 has an invalid length. [ 390.354033][ T9142] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1454'. [ 390.375102][ T9142] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1454'. [ 391.456187][ T9154] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1460'. [ 391.969898][ T9169] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1463'. [ 392.610190][ T9168] loop3: detected capacity change from 0 to 512 [ 392.734304][ T9168] EXT4-fs: Ignoring removed nomblk_io_submit option [ 392.736998][ T9168] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 392.777904][ T9176] netlink: 'syz.1.1467': attribute type 10 has an invalid length. [ 392.780259][ T9176] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1467'. [ 392.788255][ T9176] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.797464][ T9176] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.800168][ T9176] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.801204][ T9168] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 392.802668][ T9176] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.805154][ T9168] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 393.572739][ T9176] device vlan2 entered promiscuous mode [ 393.574339][ T9176] device bridge0 entered promiscuous mode [ 393.596922][ T4304] EXT4-fs (loop3): unmounting filesystem. [ 393.639192][ T9176] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1467'. [ 393.755599][ T9189] @: renamed from vlan0 [ 394.709180][ T9198] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1473'. [ 394.967791][ T27] kauditd_printk_skb: 283 callbacks suppressed [ 394.967803][ T27] audit: type=1326 audit(2000000302.676:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.0.1479" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88d5a7a8 code=0x7ffc0000 [ 394.985875][ T27] audit: type=1326 audit(2000000302.716:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.0.1479" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff88d5a7a8 code=0x7ffc0000 [ 395.012298][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1479'. [ 395.015332][ T27] audit: type=1326 audit(2000000302.716:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.0.1479" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88d5a7a8 code=0x7ffc0000 [ 395.043805][ T27] audit: type=1326 audit(2000000302.736:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.0.1479" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff88d5a7a8 code=0x7ffc0000 [ 395.050155][ T27] audit: type=1326 audit(2000000302.736:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.0.1479" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88d5a7a8 code=0x7ffc0000 [ 395.053744][ T9214] netlink: 'syz.1.1480': attribute type 8 has an invalid length. [ 395.056526][ T27] audit: type=1326 audit(2000000302.736:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.0.1479" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff88d5cd4c code=0x7ffc0000 [ 395.058177][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'. [ 395.064213][ T27] audit: type=1326 audit(2000000302.736:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.0.1479" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffff88d5cc68 code=0x7ffc0000 [ 395.064248][ T27] audit: type=1326 audit(2000000302.736:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.0.1479" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffff88d5cb6c code=0x7ffc0000 [ 395.064277][ T27] audit: type=1326 audit(2000000302.736:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.0.1479" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffff88d5cb6c code=0x7ffc0000 [ 395.064306][ T27] audit: type=1326 audit(2000000302.736:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9209 comm="syz.0.1479" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff88d590ac code=0x7ffc0000 [ 396.940182][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1492'. [ 396.942945][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1492'. [ 396.945499][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1492'. [ 396.948061][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1492'. [ 396.950870][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1492'. [ 396.953390][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1492'. [ 396.956003][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1492'. [ 396.958497][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1492'. [ 396.961124][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1492'. [ 396.963665][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1492'. [ 397.938185][ T9259] bond1: (slave erspan0): Releasing backup interface [ 398.025354][ T9259] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 399.115030][ T9281] netlink: 'syz.3.1506': attribute type 11 has an invalid length. [ 400.274910][ T9302] netlink: 'syz.2.1512': attribute type 10 has an invalid length. [ 400.664558][ T27] kauditd_printk_skb: 56 callbacks suppressed [ 400.664569][ T27] audit: type=1326 audit(2000000308.397:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.2.1517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85d5a7a8 code=0x7ffc0000 [ 400.673072][ T27] audit: type=1326 audit(2000000308.407:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.2.1517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85d5a7a8 code=0x7ffc0000 [ 400.679520][ T27] audit: type=1326 audit(2000000308.407:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.2.1517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff85d5a7a8 code=0x7ffc0000 [ 400.685464][ T27] audit: type=1326 audit(2000000308.407:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.2.1517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85d5a7a8 code=0x7ffc0000 [ 400.691477][ T27] audit: type=1326 audit(2000000308.407:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.2.1517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85d5a7a8 code=0x7ffc0000 [ 400.697281][ T27] audit: type=1326 audit(2000000308.407:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.2.1517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff85d5a7a8 code=0x7ffc0000 [ 400.703414][ T27] audit: type=1326 audit(2000000308.407:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.2.1517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85d5a7a8 code=0x7ffc0000 [ 400.709242][ T27] audit: type=1326 audit(2000000308.407:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.2.1517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85d5a7a8 code=0x7ffc0000 [ 400.715091][ T27] audit: type=1326 audit(2000000308.427:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.2.1517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff85d5cd4c code=0x7ffc0000 [ 400.721203][ T27] audit: type=1326 audit(2000000308.427:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9315 comm="syz.2.1517" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffff85d5cc68 code=0x7ffc0000 [ 401.511730][ T9323] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 401.582910][ T9327] loop3: detected capacity change from 0 to 512 [ 401.612580][ T9327] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 401.927277][ T9327] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 401.930175][ T9327] ext4 filesystem being mounted at /356/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.828411][ T4304] EXT4-fs (loop3): unmounting filesystem. [ 402.885700][ T9345] netlink: 'syz.1.1524': attribute type 10 has an invalid length. [ 402.887810][ T9345] __nla_validate_parse: 100 callbacks suppressed [ 402.887819][ T9345] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1524'. [ 402.928787][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1522'. [ 403.012143][ T9350] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1526'. [ 403.139881][ T9355] loop3: detected capacity change from 0 to 512 [ 403.163939][ T9355] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1529: invalid indirect mapped block 256 (level 2) [ 403.193895][ T9355] EXT4-fs (loop3): 2 truncates cleaned up [ 403.195538][ T9355] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 403.202140][ T9361] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1528'. [ 403.349835][ T4304] EXT4-fs (loop3): unmounting filesystem. [ 406.269847][ T9379] netlink: 'syz.0.1537': attribute type 10 has an invalid length. [ 406.272118][ T9379] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1537'. [ 407.118758][ T4438] bridge0: port 3(team0) entered disabled state [ 407.140817][ T9384] device vlan2 entered promiscuous mode [ 407.142414][ T9384] device bridge0 entered promiscuous mode [ 407.167013][ T9379] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1537'. [ 407.282842][ T9387] 9pnet: Could not find request transport: 0xffffffffffffffff [ 408.170237][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 408.354753][ T9406] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1543'. [ 410.301424][ T9428] lo speed is unknown, defaulting to 1000 [ 410.371643][ T9429] loop2: detected capacity change from 0 to 512 [ 411.158607][ T9429] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 411.161080][ T9429] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.230932][ T9439] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1554'. [ 411.239495][ T9439] device hsr_slave_0 left promiscuous mode [ 411.272914][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 411.617299][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'. [ 411.620003][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'. [ 411.622432][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'. [ 411.624769][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'. [ 411.627144][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'. [ 411.629667][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'. [ 411.632012][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'. [ 411.634352][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1556'. [ 412.936277][ T9452] hub 8-0:1.0: USB hub found [ 412.950067][ T9452] hub 8-0:1.0: 8 ports detected [ 413.120901][ T9468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.124925][ T9468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.418666][ T9472] ALSA: seq fatal error: cannot create timer (-19) [ 416.249107][ T9487] loop2: detected capacity change from 0 to 8192 [ 416.293781][ T9487] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 416.449367][ T9482] loop2: detected capacity change from 0 to 2048 [ 416.458870][ T9493] netlink: 'syz.0.1569': attribute type 10 has an invalid length. [ 416.461387][ T9493] __nla_validate_parse: 43 callbacks suppressed [ 416.461396][ T9493] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1569'. [ 416.611674][ T9493] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1569'. [ 416.615373][ T9493] netlink: 'syz.0.1569': attribute type 11 has an invalid length. [ 417.743265][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'. [ 417.745762][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'. [ 417.748246][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'. [ 417.750619][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'. [ 417.753049][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'. [ 417.755360][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'. [ 417.757808][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'. [ 417.760231][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'. [ 418.805447][ T9522] hub 8-0:1.0: USB hub found [ 418.819439][ T9522] hub 8-0:1.0: 8 ports detected [ 420.019269][ T9536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.023227][ T9536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.733437][ T9539] netlink: 'syz.4.1585': attribute type 10 has an invalid length. [ 420.801730][ T9539] netlink: 'syz.4.1585': attribute type 11 has an invalid length. [ 421.533927][ T9560] __nla_validate_parse: 46 callbacks suppressed [ 421.533942][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1592'. [ 422.363101][ T9576] netlink: 'syz.3.1599': attribute type 10 has an invalid length. [ 422.371787][ T9576] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1599'. [ 422.895264][ T9586] hub 8-0:1.0: USB hub found [ 423.041138][ T9586] hub 8-0:1.0: 8 ports detected [ 423.579529][ T9595] loop1: detected capacity change from 0 to 512 [ 423.633739][ T9595] EXT4-fs (loop1): too many log groups per flexible block group [ 423.636098][ T9595] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 423.643198][ T9595] EXT4-fs (loop1): mount failed [ 425.391600][ T9615] netlink: 'syz.4.1610': attribute type 10 has an invalid length. [ 425.393892][ T9615] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1610'. [ 425.669514][ T9619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.673380][ T9619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.457732][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 427.460371][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 427.462885][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 427.465426][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 427.468060][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 427.470570][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 427.473013][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 427.475437][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 427.477928][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 427.480387][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 427.906064][ T9649] netlink: 'syz.3.1621': attribute type 10 has an invalid length. [ 428.017305][ T9651] netlink: 'syz.1.1622': attribute type 10 has an invalid length. [ 428.043335][ T9651] device vlan0 entered promiscuous mode [ 430.457323][ T9685] hub 8-0:1.0: USB hub found [ 430.459976][ T9685] hub 8-0:1.0: 8 ports detected [ 430.568274][ T9691] netlink: 'syz.3.1634': attribute type 10 has an invalid length. [ 433.129751][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.131620][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 434.197018][ T9729] netlink: 'syz.0.1647': attribute type 10 has an invalid length. [ 434.199257][ T9729] __nla_validate_parse: 47 callbacks suppressed [ 434.199266][ T9729] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1647'. [ 434.232330][ T9731] bond5: (slave erspan0): Releasing backup interface [ 434.270858][ T9731] device team0 left promiscuous mode [ 434.272490][ T9731] device team_slave_0 left promiscuous mode [ 434.287002][ T9731] device team_slave_1 left promiscuous mode [ 434.288930][ T9731] device geneve0 left promiscuous mode [ 434.290738][ T9731] bridge0: port 3(team0) entered disabled state [ 434.330927][ T9735] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1647'. [ 434.338348][ T9731] device bridge_slave_0 left promiscuous mode [ 434.340248][ T9731] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.391894][ T9731] device bridge_slave_1 left promiscuous mode [ 434.393843][ T9731] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.499034][ T9731] bond0: (slave bond_slave_0): Releasing backup interface [ 434.538206][ T9731] bond0: (slave bond_slave_1): Releasing backup interface [ 434.585157][ T9731] team0: Port device team_slave_0 removed [ 434.597600][ T9731] team0: Port device team_slave_1 removed [ 434.599488][ T9731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.615633][ T9731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.626574][ T9731] team0: Port device geneve0 removed [ 434.633533][ T9731] bond0: (slave wlan1): Releasing backup interface [ 435.091751][ T9751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.095894][ T9751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.721942][ T9760] loop3: detected capacity change from 0 to 2048 [ 436.777915][ T9760] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 436.901960][ T9767] hub 8-0:1.0: USB hub found [ 436.929478][ T9767] hub 8-0:1.0: 8 ports detected [ 436.938901][ T9760] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 436.957986][ T9760] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 481 with error 28 [ 436.961640][ T9760] EXT4-fs (loop3): This should not happen!! Data will be lost [ 436.961640][ T9760] [ 436.978184][ T9760] EXT4-fs (loop3): Total free blocks count 0 [ 436.979931][ T9760] EXT4-fs (loop3): Free/Dirty block details [ 436.981550][ T9760] EXT4-fs (loop3): free_blocks=4096 [ 437.007119][ T9760] EXT4-fs (loop3): dirty_blocks=512 [ 437.008646][ T9760] EXT4-fs (loop3): Block reservation details [ 437.010341][ T9760] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 437.067454][ T4380] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 437.159449][ T9770] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1657'. [ 437.664205][ T9786] netlink: 'syz.3.1661': attribute type 10 has an invalid length. [ 437.672829][ T9786] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1661'. [ 437.684569][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1660'. [ 437.687402][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1660'. [ 437.689915][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1660'. [ 437.692345][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1660'. [ 437.694834][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1660'. [ 437.697330][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1660'. [ 438.696455][ T9804] No such timeout policy "syz0" [ 439.865536][ T9818] netlink: 'syz.2.1672': attribute type 10 has an invalid length. [ 439.886317][ T9818] __nla_validate_parse: 46 callbacks suppressed [ 439.886328][ T9818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1672'. [ 439.997943][ T9818] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.000235][ T9818] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.002428][ T9818] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.004624][ T9818] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.064786][ T9818] team0: Port device geneve0 added [ 440.788864][ T9818] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1672'. [ 440.990089][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 441.000447][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'. [ 441.005174][ T9830] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1677'. [ 441.981072][ T9844] hub 8-0:1.0: USB hub found [ 441.982710][ T9844] hub 8-0:1.0: 8 ports detected [ 442.763500][ T9854] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1680'. [ 443.609453][ T9861] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1683'. [ 444.099987][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 444.099999][ T27] audit: type=1326 audit(2000000351.829:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.3.1686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 444.127991][ T27] audit: type=1326 audit(2000000351.859:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.3.1686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 444.134074][ T27] audit: type=1326 audit(2000000351.859:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.3.1686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=425 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 444.168442][ T9870] netlink: 'syz.1.1687': attribute type 13 has an invalid length. [ 444.170621][ T9870] netlink: 'syz.1.1687': attribute type 27 has an invalid length. [ 444.201697][ T27] audit: type=1326 audit(2000000351.859:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.3.1686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff8fd5a7dc code=0x7ffc0000 [ 444.228428][ T27] audit: type=1326 audit(2000000351.879:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.3.1686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff8fd5a7dc code=0x7ffc0000 [ 444.260793][ T27] audit: type=1326 audit(2000000351.879:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.3.1686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 444.300382][ T27] audit: type=1326 audit(2000000351.879:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.3.1686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 444.306611][ T27] audit: type=1326 audit(2000000351.879:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.3.1686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 444.312670][ T27] audit: type=1326 audit(2000000351.879:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.3.1686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 444.319825][ T27] audit: type=1326 audit(2000000351.879:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.3.1686" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=133 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 444.405912][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1689'. [ 444.475505][ T9882] loop2: detected capacity change from 0 to 1024 [ 444.480890][ T9884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1691'. [ 444.501877][ T9882] EXT4-fs: Ignoring removed nobh option [ 444.522709][ T9882] EXT4-fs: Ignoring removed bh option [ 444.603674][ T9882] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 444.768763][ T9878] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.1690: Allocating blocks 497-513 which overlap fs metadata [ 444.814610][ T9878] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.1690: Allocating blocks 497-513 which overlap fs metadata [ 445.144504][ T9877] EXT4-fs (loop2): pa 000000003de1f43c: logic 0, phys. 113, len 25 [ 445.147254][ T9877] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4881: group 0, free 23, pa_free 24 [ 445.389411][ T4299] EXT4-fs (loop2): unmounting filesystem. [ 445.816750][ T9906] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1696'. [ 448.451202][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1705'. [ 449.796326][ T9962] loop3: detected capacity change from 0 to 8192 [ 449.816442][ T9962] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 449.922355][ T9958] loop3: detected capacity change from 0 to 2048 [ 449.923408][ T4289] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 450.241913][ T9972] netlink: 'syz.3.1718': attribute type 10 has an invalid length. [ 450.264718][ T9972] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1718'. [ 450.297255][ T9972] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1718'. [ 451.336219][ T9983] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1719'. [ 454.509532][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1732'. [ 454.603993][T10031] netlink: 'syz.0.1734': attribute type 10 has an invalid length. [ 454.641281][T10031] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1734'. [ 454.670660][T10030] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1734'. [ 456.422898][T10062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1743'. [ 457.642215][T10070] netlink: 'syz.1.1747': attribute type 10 has an invalid length. [ 457.651442][T10070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1747'. [ 457.660872][T10070] device vlan0 entered promiscuous mode [ 457.711577][T10076] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1747'. [ 459.931341][T10107] netlink: 'syz.3.1760': attribute type 10 has an invalid length. [ 459.933509][T10107] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1760'. [ 459.939506][T10107] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1760'. [ 460.163457][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1761'. [ 460.349604][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1761'. [ 460.384747][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1761'. [ 460.421263][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1761'. [ 460.453938][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1761'. [ 462.066632][T10144] __nla_validate_parse: 44 callbacks suppressed [ 462.066646][T10144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1768'. [ 462.847075][T10150] netlink: 'syz.0.1771': attribute type 10 has an invalid length. [ 462.849728][T10150] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1771'. [ 462.879521][T10147] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1771'. [ 464.643222][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 464.658581][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 464.675184][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 464.684038][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 464.699449][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 464.714888][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 464.722934][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1790'. [ 466.177685][T10197] netlink: 'syz.2.1786': attribute type 10 has an invalid length. [ 466.411355][T10197] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.413913][T10197] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.431039][T10197] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.433437][T10197] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.622652][T10203] device vlan2 entered promiscuous mode [ 469.562873][T10244] loop2: detected capacity change from 0 to 8192 [ 469.621389][T10244] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 469.810305][T10243] loop2: detected capacity change from 0 to 2048 [ 470.178442][ T27] audit: type=1326 audit(2000000377.911:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10249 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85d5a7a8 code=0x7ffc0000 [ 470.206424][ T27] audit: type=1326 audit(2000000377.941:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10249 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff85d5a7a8 code=0x7ffc0000 [ 470.232445][ T27] audit: type=1326 audit(2000000377.941:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10249 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85d5a7a8 code=0x7ffc0000 [ 470.319943][ T27] audit: type=1326 audit(2000000377.961:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10249 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff85d5a7a8 code=0x7ffc0000 [ 470.327091][ T27] audit: type=1326 audit(2000000377.961:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10249 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85d5a7a8 code=0x7ffc0000 [ 470.333934][ T27] audit: type=1326 audit(2000000377.961:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10249 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff85d5cd4c code=0x7ffc0000 [ 470.340341][ T27] audit: type=1326 audit(2000000377.961:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10249 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffff85d5cc68 code=0x7ffc0000 [ 470.349597][ T27] audit: type=1326 audit(2000000377.961:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10249 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffff85d5cb6c code=0x7ffc0000 [ 470.355810][ T27] audit: type=1326 audit(2000000377.961:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10249 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffff85d5cb6c code=0x7ffc0000 [ 470.361869][ T27] audit: type=1326 audit(2000000377.961:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10249 comm="syz.2.1803" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff85d590ac code=0x7ffc0000 [ 470.405094][T10253] __nla_validate_parse: 44 callbacks suppressed [ 470.405108][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1804'. [ 470.409367][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1804'. [ 470.560081][T10261] netlink: 'syz.3.1807': attribute type 10 has an invalid length. [ 470.562346][T10261] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1807'. [ 470.578743][T10261] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1807'. [ 473.717920][T10299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1815'. [ 475.444158][T10314] hub 8-0:1.0: USB hub found [ 475.446186][T10314] hub 8-0:1.0: 8 ports detected [ 476.150599][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1820'. [ 476.153147][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1820'. [ 476.761179][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1820'. [ 476.944520][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1820'. [ 476.947030][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1820'. [ 476.949385][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1820'. [ 476.982754][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1820'. [ 476.991536][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1820'. [ 477.004318][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1820'. [ 477.007082][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1820'. [ 480.928974][T10368] hub 8-0:1.0: USB hub found [ 480.931167][T10368] hub 8-0:1.0: 8 ports detected [ 484.239042][T10395] __nla_validate_parse: 40 callbacks suppressed [ 484.239083][T10395] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1839'. [ 487.058146][T10413] hub 8-0:1.0: USB hub found [ 487.060099][T10413] hub 8-0:1.0: 8 ports detected [ 490.446792][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 490.449650][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 490.452015][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 490.469868][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 490.472379][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 490.553995][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 490.563815][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 490.574032][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 490.576690][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 490.587539][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 491.795926][T10456] device wg2 entered promiscuous mode [ 491.822015][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 491.822027][ T27] audit: type=1326 audit(2000000399.552:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10454 comm="syz.3.1855" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 491.841666][ T27] audit: type=1326 audit(2000000399.572:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10454 comm="syz.3.1855" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 491.874260][ T27] audit: type=1326 audit(2000000399.572:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10454 comm="syz.3.1855" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 491.904415][ T27] audit: type=1326 audit(2000000399.572:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10454 comm="syz.3.1855" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 491.910759][ T27] audit: type=1326 audit(2000000399.572:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10454 comm="syz.3.1855" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 491.972448][ T27] audit: type=1326 audit(2000000399.572:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10454 comm="syz.3.1855" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 492.080548][ T27] audit: type=1326 audit(2000000399.572:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10454 comm="syz.3.1855" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 492.098544][ T27] audit: type=1326 audit(2000000399.572:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10454 comm="syz.3.1855" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 492.109032][ T27] audit: type=1326 audit(2000000399.572:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10454 comm="syz.3.1855" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 492.119495][ T27] audit: type=1326 audit(2000000399.572:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10454 comm="syz.3.1855" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 494.564136][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.565962][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.705182][T10491] hub 8-0:1.0: USB hub found [ 495.724397][T10491] hub 8-0:1.0: 8 ports detected [ 496.115747][T10498] __nla_validate_parse: 40 callbacks suppressed [ 496.115760][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 496.119848][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 496.122261][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 496.124785][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 496.127203][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 496.129510][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 496.131909][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 496.134346][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 496.136814][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 496.139203][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 504.017055][T10549] __nla_validate_parse: 41 callbacks suppressed [ 504.017069][T10549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1876'. [ 504.097852][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1878'. [ 504.100451][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1878'. [ 504.103085][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1878'. [ 504.105453][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1878'. [ 504.107826][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1878'. [ 504.110298][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1878'. [ 504.112693][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1878'. [ 504.115272][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1878'. [ 504.117740][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1878'. [ 510.656204][T10589] hub 8-0:1.0: USB hub found [ 510.657676][T10589] hub 8-0:1.0: 8 ports detected [ 510.664984][ T27] kauditd_printk_skb: 170 callbacks suppressed [ 510.664994][ T27] audit: type=1326 audit(2000000418.403:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615a7a8 code=0x7ffc0000 [ 510.686451][ T27] audit: type=1326 audit(2000000418.423:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8615a7a8 code=0x7ffc0000 [ 510.705216][ T27] audit: type=1326 audit(2000000418.443:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615a7a8 code=0x7ffc0000 [ 510.726880][T10594] __nla_validate_parse: 42 callbacks suppressed [ 510.726891][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1891'. [ 510.737663][ T27] audit: type=1326 audit(2000000418.443:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615a7a8 code=0x7ffc0000 [ 510.782833][ T27] audit: type=1326 audit(2000000418.443:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8615a7a8 code=0x7ffc0000 [ 510.819647][ T27] audit: type=1326 audit(2000000418.443:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615a7a8 code=0x7ffc0000 [ 510.829292][ T27] audit: type=1326 audit(2000000418.443:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615a7a8 code=0x7ffc0000 [ 510.895123][ T27] audit: type=1326 audit(2000000418.443:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8615cd4c code=0x7ffc0000 [ 510.919211][T10599] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 510.933231][T10603] netlink: 'syz.0.1892': attribute type 10 has an invalid length. [ 510.935404][T10603] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1892'. [ 510.940966][ T27] audit: type=1326 audit(2000000418.443:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffff8615cc68 code=0x7ffc0000 [ 510.961127][T10603] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1892'. [ 510.982943][T10603] netlink: 'syz.0.1892': attribute type 11 has an invalid length. [ 510.985697][ T27] audit: type=1326 audit(2000000418.443:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10591 comm="syz.4.1891" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=207 compat=0 ip=0xffff8615cb6c code=0x7ffc0000 [ 513.713282][T10620] bridge0: port 1(team0) entered blocking state [ 513.715222][T10620] bridge0: port 1(team0) entered disabled state [ 513.977579][T10620] device team0 entered promiscuous mode [ 513.979261][T10620] device geneve0 entered promiscuous mode [ 515.244370][T10636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1900'. [ 516.401411][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 516.401423][ T27] audit: type=1326 audit(2000000424.133:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b5a7a8 code=0x7ffc0000 [ 516.409988][ T27] audit: type=1326 audit(2000000424.143:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b5a7a8 code=0x7ffc0000 [ 516.454666][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 516.457093][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 516.459501][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 516.461888][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 516.464506][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 516.466885][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 516.469301][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 516.471682][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 516.474041][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 516.476368][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 516.487844][ T27] audit: type=1326 audit(2000000424.223:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb5b5a7a8 code=0x7ffc0000 [ 516.509992][ T27] audit: type=1326 audit(2000000424.233:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b5a7a8 code=0x7ffc0000 [ 516.539844][ T27] audit: type=1326 audit(2000000424.233:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b5a7a8 code=0x7ffc0000 [ 516.614565][ T27] audit: type=1326 audit(2000000424.233:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb5b5a7a8 code=0x7ffc0000 [ 516.626122][T10651] bond2: (slave erspan0): Releasing backup interface [ 516.654931][ T27] audit: type=1326 audit(2000000424.233:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b5a7a8 code=0x7ffc0000 [ 516.835012][T10651] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 516.840845][ T27] audit: type=1326 audit(2000000424.233:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b5a7a8 code=0x7ffc0000 [ 516.859152][ T27] audit: type=1326 audit(2000000424.233:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb5b5a7a8 code=0x7ffc0000 [ 516.865885][ T27] audit: type=1326 audit(2000000424.233:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10646 comm="syz.1.1904" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b5a7a8 code=0x7ffc0000 [ 520.206505][T10682] hub 8-0:1.0: USB hub found [ 520.207976][T10682] hub 8-0:1.0: 8 ports detected [ 521.910310][T10708] __nla_validate_parse: 42 callbacks suppressed [ 521.910323][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1921'. [ 521.972765][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1919'. [ 521.975299][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1919'. [ 521.977686][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1919'. [ 521.980073][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1919'. [ 521.982622][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1919'. [ 521.985008][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1919'. [ 521.987405][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1919'. [ 521.989805][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1919'. [ 521.992351][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1919'. [ 526.112710][T10757] loop3: detected capacity change from 0 to 8192 [ 528.047230][T10757] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 528.758421][T10769] __nla_validate_parse: 43 callbacks suppressed [ 528.758436][T10769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1938'. [ 529.552492][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1940'. [ 529.559948][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 529.559960][ T27] audit: type=1326 audit(2000000437.254:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.0.1940" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88d5a7a8 code=0x7ffc0000 [ 529.568108][ T27] audit: type=1326 audit(2000000437.254:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.0.1940" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88d5a7a8 code=0x7ffc0000 [ 529.581625][ T27] audit: type=1326 audit(2000000437.274:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.0.1940" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff88d5a7a8 code=0x7ffc0000 [ 529.587564][ T27] audit: type=1326 audit(2000000437.274:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.0.1940" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88d5a7a8 code=0x7ffc0000 [ 529.594727][ T27] audit: type=1326 audit(2000000437.274:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.0.1940" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88d5a7a8 code=0x7ffc0000 [ 529.600666][ T27] audit: type=1326 audit(2000000437.274:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.0.1940" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff88d5a7a8 code=0x7ffc0000 [ 529.635344][T10776] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 529.751719][ T27] audit: type=1326 audit(2000000437.294:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.0.1940" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88d5a7a8 code=0x7ffc0000 [ 529.757769][ T27] audit: type=1326 audit(2000000437.294:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.0.1940" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88d5a7a8 code=0x7ffc0000 [ 529.790349][ T27] audit: type=1326 audit(2000000437.294:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.0.1940" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=204 compat=0 ip=0xffff88d5a7a8 code=0x7ffc0000 [ 529.796615][ T27] audit: type=1326 audit(2000000437.294:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.0.1940" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88d5a7a8 code=0x7ffc0000 [ 529.854990][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1941'. [ 529.857476][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1941'. [ 529.859890][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1941'. [ 529.862448][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1941'. [ 529.864768][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1941'. [ 529.867181][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1941'. [ 529.869563][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1941'. [ 529.871975][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1941'. [ 531.906418][T10812] hub 8-0:1.0: USB hub found [ 531.908696][T10812] hub 8-0:1.0: 8 ports detected [ 534.211789][T10838] __nla_validate_parse: 43 callbacks suppressed [ 534.211804][T10838] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1957'. [ 534.490543][T10850] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1958'. [ 535.496003][T10858] netlink: 'syz.3.1961': attribute type 10 has an invalid length. [ 535.498268][T10858] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1961'. [ 535.506274][T10858] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1961'. [ 535.510191][T10858] netlink: 'syz.3.1961': attribute type 11 has an invalid length. [ 535.638722][T10862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1962'. [ 536.756220][T10880] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1968'. [ 537.118408][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1969'. [ 537.121213][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1969'. [ 537.123953][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1969'. [ 537.126728][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1969'. [ 538.996706][T10900] netlink: 'syz.0.1972': attribute type 10 has an invalid length. [ 539.614848][T10912] loop0: detected capacity change from 0 to 512 [ 542.780733][T10912] EXT4-fs warning (device loop0): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop0. [ 543.266276][T10925] __nla_validate_parse: 47 callbacks suppressed [ 543.266290][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1978'. [ 543.393296][T10923] hub 8-0:1.0: USB hub found [ 543.394986][T10923] hub 8-0:1.0: 8 ports detected [ 544.798698][T10951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1986'. [ 545.803382][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1991'. [ 545.977039][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1993'. [ 545.979678][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1993'. [ 545.982221][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1993'. [ 545.984668][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1993'. [ 545.987089][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1993'. [ 545.989434][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1993'. [ 545.991926][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1993'. [ 546.076376][T10965] hub 8-0:1.0: USB hub found [ 546.077853][T10965] hub 8-0:1.0: 8 ports detected [ 548.847980][T11011] netlink: 'syz.2.2007': attribute type 10 has an invalid length. [ 548.850147][T11011] __nla_validate_parse: 45 callbacks suppressed [ 548.850157][T11011] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2007'. [ 548.920197][T11011] device vlan2 entered promiscuous mode [ 548.965377][T11019] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2011'. [ 549.057769][T11022] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2007'. [ 549.064866][T11022] netlink: 'syz.2.2007': attribute type 11 has an invalid length. [ 549.489131][T11032] loop2: detected capacity change from 0 to 2048 [ 549.630267][T11032] Alternate GPT is invalid, using primary GPT. [ 549.638616][T11032] loop2: p1 p2 p3 [ 549.795878][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2016'. [ 549.798460][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2016'. [ 549.800958][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2016'. [ 549.803461][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2016'. [ 549.805906][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2016'. [ 549.808212][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2016'. [ 549.810667][T11035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2016'. [ 551.252899][T10750] udevd[10750]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 551.259694][T10522] udevd[10522]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 551.299956][T10523] udevd[10523]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 551.340458][T11061] netlink: 'syz.1.2023': attribute type 10 has an invalid length. [ 551.382365][T11061] device vlan0 entered promiscuous mode [ 551.415131][T11064] netlink: 'syz.1.2023': attribute type 11 has an invalid length. [ 551.416513][T10523] udevd[10523]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 551.441443][T10522] udevd[10522]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 551.447098][T10750] udevd[10750]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 554.614845][T11106] netlink: 'syz.1.2038': attribute type 10 has an invalid length. [ 554.617010][T11106] __nla_validate_parse: 98 callbacks suppressed [ 554.617019][T11106] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2038'. [ 554.626810][T11106] device vlan0 entered promiscuous mode [ 554.676341][T11109] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2038'. [ 554.686784][T11109] netlink: 'syz.1.2038': attribute type 11 has an invalid length. [ 554.982358][T11119] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2045'. [ 556.000722][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 556.002597][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 556.064515][T11138] netlink: 'syz.1.2050': attribute type 10 has an invalid length. [ 556.066708][T11138] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2050'. [ 556.072353][T11138] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2050'. [ 556.076172][T11138] netlink: 'syz.1.2050': attribute type 11 has an invalid length. [ 556.126991][T11136] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2047'. [ 557.068182][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2055'. [ 557.078707][T11158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2056'. [ 558.664624][T11177] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2062'. [ 558.681131][T11179] netlink: 'syz.2.2063': attribute type 10 has an invalid length. [ 558.683444][T11179] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2063'. [ 558.705437][T11179] netlink: 'syz.2.2063': attribute type 11 has an invalid length. [ 560.237533][T11214] __nla_validate_parse: 2 callbacks suppressed [ 560.237547][T11214] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2074'. [ 560.416838][T11219] netlink: 'syz.4.2077': attribute type 10 has an invalid length. [ 560.428669][T11219] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2077'. [ 560.453109][T11219] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2077'. [ 560.475003][T11219] netlink: 'syz.4.2077': attribute type 11 has an invalid length. [ 560.568299][T11216] infiniband syz!: set active [ 560.579392][T11216] infiniband syz!: added team_slave_0 [ 560.711939][T11216] RDS/IB: syz!: added [ 560.723374][T11216] smc: adding ib device syz! with port count 1 [ 560.729998][T11216] smc: ib device syz! port 1 has pnetid [ 561.010507][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2080'. [ 561.012912][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2080'. [ 561.015271][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2080'. [ 561.017645][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2080'. [ 561.020099][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2080'. [ 561.022426][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2080'. [ 561.024829][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2080'. [ 562.260573][T11255] netlink: 'syz.0.2088': attribute type 10 has an invalid length. [ 562.860756][T11266] bond3: (slave erspan0): Releasing backup interface [ 563.393471][T11276] netlink: 'syz.1.2095': attribute type 10 has an invalid length. [ 563.743525][T11284] netlink: 'syz.0.2099': attribute type 10 has an invalid length. [ 564.464650][T11307] xt_hashlimit: size too large, truncated to 1048576 [ 564.972036][T11318] netlink: 'syz.4.2111': attribute type 10 has an invalid length. [ 564.988263][T11318] netlink: 'syz.4.2111': attribute type 11 has an invalid length. [ 565.547470][T11333] lo speed is unknown, defaulting to 1000 [ 567.322642][T11352] __nla_validate_parse: 59 callbacks suppressed [ 567.322657][T11352] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2121'. [ 567.474215][T11354] netlink: 'syz.0.2122': attribute type 10 has an invalid length. [ 567.476521][T11354] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2122'. [ 567.507425][T11354] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2122'. [ 567.524763][T11354] netlink: 'syz.0.2122': attribute type 11 has an invalid length. [ 568.221884][T11366] IPv6: NLM_F_CREATE should be specified when creating new route [ 568.260418][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 568.260432][ T27] audit: type=1326 audit(2000000476.006:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.4.2127" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615a7a8 code=0x7ffc0000 [ 568.274660][ T27] audit: type=1326 audit(2000000476.006:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.4.2127" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615a7a8 code=0x7ffc0000 [ 568.293267][ T27] audit: type=1326 audit(2000000476.006:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.4.2127" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8615a7a8 code=0x7ffc0000 [ 568.308320][ T27] audit: type=1326 audit(2000000476.006:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.4.2127" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615a7a8 code=0x7ffc0000 [ 568.327318][ T27] audit: type=1326 audit(2000000476.006:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.4.2127" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615a7a8 code=0x7ffc0000 [ 568.331996][T11368] ALSA: seq fatal error: cannot create timer (-19) [ 568.341262][ T27] audit: type=1326 audit(2000000476.006:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.4.2127" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8615a7a8 code=0x7ffc0000 [ 568.348258][ T27] audit: type=1326 audit(2000000476.006:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.4.2127" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615a7a8 code=0x7ffc0000 [ 568.367420][ T27] audit: type=1326 audit(2000000476.006:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.4.2127" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615a7a8 code=0x7ffc0000 [ 568.383018][ T27] audit: type=1326 audit(2000000476.006:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.4.2127" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8615a7a8 code=0x7ffc0000 [ 568.395451][ T27] audit: type=1326 audit(2000000476.006:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11367 comm="syz.4.2127" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615a7a8 code=0x7ffc0000 [ 568.709623][T11382] netlink: 'syz.4.2133': attribute type 10 has an invalid length. [ 568.718093][T11382] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2133'. [ 568.767185][T11382] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2133'. [ 568.785419][T11382] netlink: 'syz.4.2133': attribute type 11 has an invalid length. [ 569.717644][T11405] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2139'. [ 569.742421][T11404] netlink: 'syz.3.2139': attribute type 2 has an invalid length. [ 569.744552][T11404] netlink: 'syz.3.2139': attribute type 1 has an invalid length. [ 569.984490][T11410] device syzkaller1 entered promiscuous mode [ 572.017419][T11445] loop0: detected capacity change from 0 to 512 [ 572.081092][T11445] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 572.085941][T11445] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.277018][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 574.713620][T11486] loop4: detected capacity change from 0 to 1024 [ 574.720641][T11486] EXT4-fs: Ignoring removed nobh option [ 574.725197][T11486] EXT4-fs: Ignoring removed bh option [ 574.732494][T11486] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 574.781832][T11486] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 574.787226][T11486] EXT4-fs (loop4): shut down requested (2) [ 575.003451][ T4305] EXT4-fs (loop4): unmounting filesystem. [ 575.673810][T11512] hub 8-0:1.0: USB hub found [ 575.675371][T11512] hub 8-0:1.0: 8 ports detected [ 576.682356][T11523] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2181'. [ 577.098466][T11536] loop0: detected capacity change from 0 to 512 [ 577.158339][T11536] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 577.160990][T11536] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.290593][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 577.320650][T11552] hub 8-0:1.0: USB hub found [ 577.322188][T11552] hub 8-0:1.0: 8 ports detected [ 578.347514][T11578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2200'. [ 578.615560][T11588] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2204'. [ 578.620576][ T27] kauditd_printk_skb: 69 callbacks suppressed [ 578.620588][ T27] audit: type=1326 audit(2000000486.367:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 578.635586][ T27] audit: type=1326 audit(2000000486.367:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 578.651951][ T27] audit: type=1326 audit(2000000486.387:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 578.658144][ T27] audit: type=1326 audit(2000000486.387:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 578.691203][ T27] audit: type=1326 audit(2000000486.387:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 578.718656][ T27] audit: type=1326 audit(2000000486.387:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=439 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 578.909947][ T27] audit: type=1326 audit(2000000486.387:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 578.917517][ T27] audit: type=1326 audit(2000000486.387:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11592 comm="syz.3.2206" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 578.929596][T11602] hub 8-0:1.0: USB hub found [ 578.931143][T11602] hub 8-0:1.0: 8 ports detected [ 579.574164][T11619] lo speed is unknown, defaulting to 1000 [ 579.972941][ T27] audit: type=1326 audit(2000000487.717:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.1.2220" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b5a7a8 code=0x0 [ 579.973129][T11628] lo speed is unknown, defaulting to 1000 [ 580.138751][ T27] audit: type=1326 audit(2000000487.837:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11633 comm="syz.4.2222" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8615a7a8 code=0x0 [ 580.818113][T11650] hub 8-0:1.0: USB hub found [ 580.820154][T11650] hub 8-0:1.0: 8 ports detected [ 582.709067][T11691] ptrace attach of "./syz-executor exec"[11695] was attempted by "./syz-executor exec"[11691] [ 582.795243][T11694] lo speed is unknown, defaulting to 1000 [ 582.853312][T11699] ptrace attach of "./syz-executor exec"[11703] was attempted by "./syz-executor exec"[11699] [ 583.261456][T11709] hub 8-0:1.0: USB hub found [ 583.262992][T11709] hub 8-0:1.0: 8 ports detected [ 584.075239][T11720] bond2: (slave erspan0): Releasing backup interface [ 585.250937][T11734] netlink: 'syz.0.2260': attribute type 10 has an invalid length. [ 585.258632][T11734] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2260'. [ 585.269117][T11734] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2260'. [ 587.743109][T11761] xt_hashlimit: size too large, truncated to 1048576 [ 587.890224][T11768] netlink: 'syz.1.2273': attribute type 10 has an invalid length. [ 587.896038][T11768] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2273'. [ 587.933263][T11768] device vlan0 entered promiscuous mode [ 587.972581][T11770] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2273'. [ 589.383705][T11785] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 589.396525][T11786] loop3: detected capacity change from 0 to 512 [ 589.493584][T11786] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 589.496275][T11786] ext4 filesystem being mounted at /498/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 589.644230][ T4304] EXT4-fs (loop3): unmounting filesystem. [ 590.650938][T11804] loop3: detected capacity change from 0 to 2048 [ 591.378847][T11811] netlink: 'syz.2.2285': attribute type 10 has an invalid length. [ 591.381007][T11811] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2285'. [ 591.412409][T11811] device vlan2 entered promiscuous mode [ 591.439198][T11812] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2285'. [ 591.468450][T11814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.474288][T11814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.879791][T11836] tipc: Enabled bearer , priority 10 [ 594.058832][T11836] tipc: Enabling of bearer rejected, failed to enable media [ 594.278657][T11841] loop3: detected capacity change from 0 to 2048 [ 594.858713][T11843] netlink: 'syz.1.2297': attribute type 10 has an invalid length. [ 594.860898][T11843] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2297'. [ 595.026369][T11843] device vlan0 entered promiscuous mode [ 595.074284][T11850] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2297'. [ 595.083786][T11850] netlink: 'syz.1.2297': attribute type 11 has an invalid length. [ 596.231937][T11858] loop0: detected capacity change from 0 to 1024 [ 596.524136][T11858] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 596.533944][T11858] ext4 filesystem being mounted at /437/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.696294][T11869] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2303'. [ 597.330139][ T4300] EXT4-fs (loop0): unmounting filesystem. [ 598.561044][T11885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2307'. [ 599.344747][ T27] audit: type=1326 audit(2000000507.088:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11887 comm="syz.3.2308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 599.357365][ T27] audit: type=1326 audit(2000000507.088:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11887 comm="syz.3.2308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 599.397832][ T27] audit: type=1326 audit(2000000507.088:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11887 comm="syz.3.2308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 599.455789][ T27] audit: type=1326 audit(2000000507.088:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11887 comm="syz.3.2308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 599.494537][ T27] audit: type=1326 audit(2000000507.088:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11887 comm="syz.3.2308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 599.500820][ T27] audit: type=1326 audit(2000000507.088:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11887 comm="syz.3.2308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 599.506906][ T27] audit: type=1326 audit(2000000507.098:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11887 comm="syz.3.2308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 599.513140][ T27] audit: type=1326 audit(2000000507.188:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11887 comm="syz.3.2308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 599.527618][ T27] audit: type=1326 audit(2000000507.188:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11887 comm="syz.3.2308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 599.533776][ T27] audit: type=1326 audit(2000000507.188:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11887 comm="syz.3.2308" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8fd5a7a8 code=0x7ffc0000 [ 599.706375][T11892] loop0: detected capacity change from 0 to 2048 [ 600.267736][T11888] tipc: Started in network mode [ 600.269257][T11888] tipc: Node identity e619a0b3f8c6, cluster identity 4711 [ 600.271329][T11888] tipc: Enabled bearer , priority 0 [ 600.338925][T11887] tipc: Resetting bearer [ 600.478917][T11896] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2310'. [ 600.483193][T11896] netlink: 'syz.0.2310': attribute type 11 has an invalid length. [ 600.498293][T11898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.500992][T11898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.084439][T11907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.088572][T11907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.318757][ T4343] tipc: Node number set to 517972147 [ 602.960172][T11919] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2316'. [ 603.468873][ T4301] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 603.472502][ T4301] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 603.475198][ T4301] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 603.480938][ T4301] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 603.483346][ T4301] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 603.485572][ T4301] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 603.652553][T11933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2319'. [ 604.855594][T11940] loop2: detected capacity change from 0 to 2048 [ 605.517284][ T4301] Bluetooth: hci5: command 0x0409 tx timeout [ 607.597634][ T4301] Bluetooth: hci5: command 0x041b tx timeout [ 609.677855][ T4301] Bluetooth: hci5: command 0x040f tx timeout [ 611.757010][ T4301] Bluetooth: hci5: command 0x0419 tx timeout [ 614.000641][T11887] tipc: Disabling bearer [ 614.004194][T11894] netlink: 'syz.0.2310': attribute type 10 has an invalid length. [ 614.006280][T11894] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2310'. [ 614.256208][T11925] lo speed is unknown, defaulting to 1000 [ 614.300867][T11952] ipt_CLUSTERIP: Please specify destination IP [ 614.575949][ T4301] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 614.585476][ T4301] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 614.589706][ T4301] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 614.592394][ T4301] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 614.595853][ T4301] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 614.601220][ T4301] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 614.690918][ T4801] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.882957][ T4801] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.955380][ T4801] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.021227][ T4801] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.075813][T11960] lo speed is unknown, defaulting to 1000 [ 615.093890][T11925] chnl_net:caif_netlink_parms(): no params data found [ 615.442096][T11925] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.444221][T11925] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.467095][T11925] device bridge_slave_0 entered promiscuous mode [ 615.569121][T11925] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.574575][T11925] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.579505][T11925] device bridge_slave_1 entered promiscuous mode [ 615.694999][T11989] loop2: detected capacity change from 0 to 512 [ 615.715286][T11989] EXT4-fs: Ignoring removed i_version option [ 615.717104][T11989] ext3: Unknown parameter 'uid>00000000000000000000' [ 615.938838][T11925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.002798][T11925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.057971][T12001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2329'. [ 616.648384][ T4298] Bluetooth: hci4: command 0x0409 tx timeout [ 616.994724][T11925] team0: Port device team_slave_0 added [ 617.074125][T11925] team0: Port device team_slave_1 added [ 617.086775][T11960] chnl_net:caif_netlink_parms(): no params data found [ 617.204347][ T4801] bond1: (slave erspan0): Releasing backup interface [ 617.262528][T11925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.264628][T11925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.286620][T11925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.291918][T11925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.293805][T11925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.325941][T11925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.437276][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 617.439039][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 617.608527][T11925] device hsr_slave_0 entered promiscuous mode [ 617.646923][T11925] device hsr_slave_1 entered promiscuous mode [ 617.686756][T11925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 617.689869][T11925] Cannot create hsr debugfs directory [ 617.692037][T12016] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2331'. [ 617.698471][T12009] lo speed is unknown, defaulting to 1000 [ 617.794827][T11960] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.807235][T11960] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.811624][T11960] device bridge_slave_0 entered promiscuous mode [ 617.834550][T11960] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.843340][T11960] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.853462][T11960] device bridge_slave_1 entered promiscuous mode [ 618.095685][ T4801] bond0: (slave wlan1): Releasing backup interface [ 618.253595][T11960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.297674][T11960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.425364][T12026] loop2: detected capacity change from 0 to 40427 [ 618.463610][T12026] F2FS-fs (loop2): invalid crc value [ 618.474047][T12026] F2FS-fs (loop2): Found nat_bits in checkpoint [ 618.517095][T12026] F2FS-fs (loop2): Start checkpoint disabled! [ 618.572886][T12026] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 618.776865][ T4301] Bluetooth: hci4: command 0x041b tx timeout [ 619.422464][T11960] team0: Port device team_slave_0 added [ 619.533196][T11960] team0: Port device team_slave_1 added [ 619.661047][T11960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.662944][T11960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.702840][T11960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.785603][ T4801] device hsr_slave_0 left promiscuous mode [ 619.876787][ T4801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.878960][ T4801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.883776][ T4801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.885813][ T4801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.904402][ T4801] device team0 left promiscuous mode [ 619.905919][ T4801] device team_slave_0 left promiscuous mode [ 619.928266][ T4801] device team_slave_1 left promiscuous mode [ 619.929994][ T4801] device geneve0 left promiscuous mode [ 619.933141][ T4801] bridge0: port 3(team0) entered disabled state [ 619.998752][ T4801] device bridge_slave_1 left promiscuous mode [ 620.000623][ T4801] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.084297][ T4801] device bridge_slave_0 left promiscuous mode [ 620.086108][ T4801] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.217012][ T4801] device veth1_macvtap left promiscuous mode [ 620.218968][ T4801] device veth0_macvtap left promiscuous mode [ 620.220630][ T4801] device veth1_vlan left promiscuous mode [ 620.222219][ T4801] device veth0_vlan left promiscuous mode [ 620.498821][ T4801] bond1 (unregistering): Released all slaves [ 620.801803][ T4298] Bluetooth: hci4: command 0x040f tx timeout [ 620.861847][ T4801] team0 (unregistering): Port device geneve0 removed [ 622.330815][T12065] loop1: detected capacity change from 0 to 2048 [ 622.876656][ T4301] Bluetooth: hci4: command 0x0419 tx timeout [ 623.047504][ T4801] team0 (unregistering): Port device team_slave_1 removed [ 623.277541][ T4801] team0 (unregistering): Port device team_slave_0 removed [ 623.447086][ T4801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.647860][ T4801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.969778][ T4801] bond0 (unregistering): Released all slaves [ 626.229926][T11960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.231800][T11960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.239091][T11960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.404854][T11925] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 626.415058][T12075] loop1: detected capacity change from 0 to 256 [ 626.439100][T11925] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 626.598065][T11960] device hsr_slave_0 entered promiscuous mode [ 626.657769][T11960] device hsr_slave_1 entered promiscuous mode [ 626.688660][T11960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 626.690736][T11960] Cannot create hsr debugfs directory [ 626.698971][T11925] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 626.703602][T12087] loop2: detected capacity change from 0 to 16 [ 626.728754][T12087] erofs: (device loop2): mounted with root inode @ nid 36. [ 626.745153][T11925] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 627.293238][T10826] Bluetooth: hci3: Frame reassembly failed (-84) [ 627.297098][T10826] Bluetooth: hci3: Frame reassembly failed (-84) [ 627.643170][T12094] loop2: detected capacity change from 0 to 256 [ 627.654324][T12094] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 628.698850][T11925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.707670][T11925] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.758704][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 628.761269][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 628.763672][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 628.767221][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 628.789783][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.791735][ T5607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.794021][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 628.800237][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 628.813515][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.815520][ T5607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.823862][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 628.826786][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 628.829646][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 628.833119][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 628.837607][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 628.841469][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 628.844333][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 628.846936][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 628.849616][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 628.852083][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 628.862286][T11925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 628.866525][T11925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 628.877953][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 628.883445][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 629.016450][T12106] input: syz0 as /devices/virtual/input/input3 [ 629.287256][ T4301] Bluetooth: hci3: command 0x1003 tx timeout [ 629.289589][ T4298] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 631.674772][T11960] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 631.845870][T11960] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 631.868795][T11960] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 631.984541][T12124] netlink: 'syz.2.2344': attribute type 3 has an invalid length. [ 632.001028][T12124] netlink: 'syz.2.2344': attribute type 3 has an invalid length. [ 632.019387][T11960] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 632.122221][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 632.124471][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 632.144879][ T4301] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 632.150657][ T4301] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 632.153514][ T4301] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 632.164920][ T4301] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 632.174710][ T4301] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 632.177368][ T4301] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 632.197843][T11925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.427091][T11960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.463254][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 632.466505][ T5601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 632.492153][T12110] loop1: detected capacity change from 0 to 40427 [ 632.516974][T12110] F2FS-fs (loop1): invalid crc value [ 632.530698][T12110] F2FS-fs (loop1): Found nat_bits in checkpoint [ 632.563024][T12110] F2FS-fs (loop1): Start checkpoint disabled! [ 632.575899][T12110] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 633.521610][T11960] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.802793][ T4801] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.060327][T12158] loop2: detected capacity change from 0 to 2048 [ 634.238329][T11927] Bluetooth: hci3: command 0x0409 tx timeout [ 634.418034][T12129] lo speed is unknown, defaulting to 1000 [ 634.460725][T11925] device veth0_vlan entered promiscuous mode [ 634.466588][T11925] device veth1_vlan entered promiscuous mode [ 635.335969][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 635.338909][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 635.342684][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 635.356002][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 635.359239][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 635.361957][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 635.364629][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 635.368644][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 635.376478][ T5569] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.378798][ T5569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.381331][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 635.384023][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 635.386827][ T5569] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.388813][ T5569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.391170][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 635.396955][T12166] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2348'. [ 635.400597][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 635.421838][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 635.425954][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 635.441979][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 635.444908][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 635.449173][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 635.455362][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 635.468412][T11925] device veth0_macvtap entered promiscuous mode [ 635.471037][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 635.474173][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 635.537182][ T4801] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.557917][T11925] device veth1_macvtap entered promiscuous mode [ 635.572046][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 635.575032][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 635.578277][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 635.584944][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 635.601555][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 635.604520][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 635.661211][T11925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.664632][T11925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.673679][T11925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 635.677736][T11925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.682021][T11925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.693641][T11925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.697671][T11925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.700636][T11925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.703708][T11925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.714069][T11925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.719301][T11925] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.722027][T11925] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.724732][T11925] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.733949][T11925] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.770977][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 635.774124][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 635.784134][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 635.787932][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 635.790900][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 635.794019][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 636.028337][ T4801] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.316239][ T4301] Bluetooth: hci3: command 0x041b tx timeout [ 636.864408][ T4801] bridge0: port 4(netdevsim0) entered disabled state [ 637.007230][ T4801] device netdevsim0 left promiscuous mode [ 637.008955][ T4801] bridge0: port 4(netdevsim0) entered disabled state [ 637.057832][ T4801] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.529515][ T5601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.532053][ T5601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.579187][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 637.592695][T12129] chnl_net:caif_netlink_parms(): no params data found [ 637.742603][ T4471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.745097][ T4471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.767641][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 638.028777][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 638.031139][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 638.068352][ T4801] tipc: Left network mode [ 638.072008][T11960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.092902][T12129] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.106813][T12129] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.109615][T12129] device bridge_slave_0 entered promiscuous mode [ 638.123417][T12129] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.131570][T12129] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.139675][T12129] device bridge_slave_1 entered promiscuous mode [ 638.395957][T11927] Bluetooth: hci3: command 0x040f tx timeout [ 639.105252][T12129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.114704][T12215] bridge0: port 3(team0) entered blocking state [ 639.116850][T12215] bridge0: port 3(team0) entered disabled state [ 639.119525][T12215] device team0 entered promiscuous mode [ 639.121114][T12215] device team_slave_0 entered promiscuous mode [ 639.122951][T12215] device team_slave_1 entered promiscuous mode [ 639.125945][T12215] bridge0: port 3(team0) entered blocking state [ 639.127895][T12215] bridge0: port 3(team0) entered forwarding state [ 639.136109][T12129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.248551][T12220] loop5: detected capacity change from 0 to 512 [ 639.265703][T12220] EXT4-fs: Ignoring removed i_version option [ 639.273568][T12220] ext4: Unknown parameter 'seclabel' [ 639.276651][T12129] team0: Port device team_slave_0 added [ 639.288452][T12129] team0: Port device team_slave_1 added [ 639.625435][T12230] input: syz0 as /devices/virtual/input/input4 [ 640.486624][ T4301] Bluetooth: hci3: command 0x0419 tx timeout [ 641.524047][T12129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.527948][T12129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.706008][T12129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.149338][T12129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.204812][T12129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.228185][T12129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.864671][T12246] loop1: detected capacity change from 0 to 2048 [ 643.211530][T12129] device hsr_slave_0 entered promiscuous mode [ 643.255553][T12129] device hsr_slave_1 entered promiscuous mode [ 643.395350][T12129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 643.397710][T12129] Cannot create hsr debugfs directory [ 644.608048][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 644.814038][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 645.694017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 645.697049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 645.701061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 645.721272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 645.724395][T11960] device veth0_vlan entered promiscuous mode [ 646.502364][ T9] Bluetooth: hci1: Frame reassembly failed (-84) [ 646.579497][T11960] device veth1_vlan entered promiscuous mode [ 646.669723][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 646.995824][T12286] input: syz1 as /devices/virtual/input/input5 [ 648.043041][ T4801] bond0: (slave wlan1): Releasing backup interface [ 648.075127][ T4301] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 648.182792][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 648.185797][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 648.194110][T11960] device veth0_macvtap entered promiscuous mode [ 648.252873][T11960] device veth1_macvtap entered promiscuous mode [ 648.960114][T12296] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2363'. [ 649.196621][ T5588] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 649.320334][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.331449][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.340705][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.343736][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.424839][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.427752][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.432933][T11960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.457077][T12129] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 649.493997][T12129] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 649.551901][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.562400][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.572325][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.593208][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.602121][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.611489][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.628128][T11960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.632362][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 649.635687][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 649.640683][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 649.649560][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 650.184031][T12313] loop1: detected capacity change from 0 to 2048 [ 650.583057][T12129] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 650.682528][T12129] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 650.795967][T11960] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.798396][T11960] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.800745][T11960] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.804348][T11960] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.566104][T12129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.589346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 652.591974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 652.624682][T12129] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.637771][ T5569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.643639][ T5569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.659255][T12332] lo speed is unknown, defaulting to 1000 [ 652.670109][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 652.672778][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 652.676034][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 652.680797][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.682775][ T4438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.689703][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 652.695063][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 652.701049][ T4438] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.703071][ T4438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.711049][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 652.716282][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 652.752102][ T4801] batman_adv: batadv0: Removing interface: team0 [ 652.754377][ T4801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.761171][ T4801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.769525][ T4801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.773890][ T4801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.776916][ T4801] device bridge_slave_1 left promiscuous mode [ 652.778736][ T4801] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.797208][ T4801] device bridge_slave_0 left promiscuous mode [ 652.799112][ T4801] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.905165][ T4801] device veth1_macvtap left promiscuous mode [ 652.907052][ T4801] device veth0_macvtap left promiscuous mode [ 652.908801][ T4801] device veth1_vlan left promiscuous mode [ 652.982084][ T4801] infiniband syz!: set down [ 653.043728][ T4801] bond1 (unregistering): Released all slaves [ 653.294816][T12352] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2374'. [ 653.935080][ T4801] team0 (unregistering): Port device geneve0 removed [ 655.324757][T12366] loop5: detected capacity change from 0 to 2048 [ 656.125788][ T4801] team0 (unregistering): Port device team_slave_1 removed [ 656.315974][ T4801] team0 (unregistering): Port device team_slave_0 removed [ 656.327942][ T9] smc: removing ib device syz! [ 656.496231][ T4801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.715345][ T4801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.027211][ T4801] bond0 (unregistering): Released all slaves [ 659.300614][ T4286] infiniband syz!: ib_query_port failed (-19) [ 659.307015][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 659.339106][ T5569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.341394][ T5569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.437939][T12372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.440635][T12372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.443624][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 659.449955][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 659.452674][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 659.478899][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 659.484678][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 659.501243][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 659.509265][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 659.513616][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 659.526507][T12129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 659.533571][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 659.547690][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 661.106048][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 661.106062][ T27] audit: type=1326 audit(2000000568.851:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12413 comm="syz.1.2386" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5b5a7a8 code=0x7ffc0000 [ 661.119167][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 661.121390][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 661.123468][T12412] netlink: 'syz.6.2325': attribute type 6 has an invalid length. [ 661.155527][T12129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.327077][T12422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.330769][T12422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.564932][T12436] loop6: detected capacity change from 0 to 2048 [ 664.252787][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 664.255795][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 664.390428][T12129] device veth0_vlan entered promiscuous mode [ 664.394444][ T5609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 664.397053][ T5609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 664.400106][ T5609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 664.402584][ T5609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 664.441418][T12129] device veth1_vlan entered promiscuous mode [ 664.650208][T12463] bridge0: port 3(team0) entered blocking state [ 664.652277][T12463] bridge0: port 3(team0) entered disabled state [ 664.662969][T12463] device team0 entered promiscuous mode [ 664.664625][T12463] device team_slave_0 entered promiscuous mode [ 664.667216][T12463] device team_slave_1 entered promiscuous mode [ 664.672431][T12463] bridge0: port 3(team0) entered blocking state [ 664.674341][T12463] bridge0: port 3(team0) entered forwarding state [ 665.284234][T12129] device veth0_macvtap entered promiscuous mode [ 665.299229][T12129] device veth1_macvtap entered promiscuous mode [ 665.341195][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 665.344797][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 665.347366][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 665.349972][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 665.352520][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 665.354002][T12466] loop6: detected capacity change from 0 to 512 [ 665.364166][T12466] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 665.368861][T12470] loop5: detected capacity change from 0 to 256 [ 665.374523][T12466] EXT4-fs (loop6): invalid journal inode [ 665.376128][T12466] EXT4-fs (loop6): can't get journal size [ 665.444739][T12129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.447671][T12129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.450359][T12129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.453200][T12129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.485505][T12466] EXT4-fs (loop6): 1 truncate cleaned up [ 665.487141][T12466] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 665.567779][T12129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.570616][T12129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.584869][T12129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.596559][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 665.599244][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 665.602380][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 665.610123][T12129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.612940][T12129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.624006][T12129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.636196][T12129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.645573][T12129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.647191][T12470] FAT-fs (loop5): Directory bread(block 64) failed [ 665.650319][T12470] FAT-fs (loop5): Directory bread(block 65) failed [ 665.651830][T12129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.652067][T12470] FAT-fs (loop5): Directory bread(block 66) failed [ 665.656566][T12470] FAT-fs (loop5): Directory bread(block 67) failed [ 665.673183][T12129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.491009][T12478] ptrace attach of ""[12480] was attempted by "./syz-executor exec"[12478] [ 666.738192][T12470] FAT-fs (loop5): Directory bread(block 68) failed [ 666.740029][T12470] FAT-fs (loop5): Directory bread(block 69) failed [ 666.741846][T12470] FAT-fs (loop5): Directory bread(block 70) failed [ 666.743575][T12470] FAT-fs (loop5): Directory bread(block 71) failed [ 666.784546][T12470] FAT-fs (loop5): Directory bread(block 72) failed [ 666.786413][T12470] FAT-fs (loop5): Directory bread(block 73) failed [ 666.795707][T12129] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.798087][T12129] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.800410][T12129] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.802955][T12129] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.625303][ T5574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 667.631702][ T5574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 667.856356][T12496] loop5: detected capacity change from 0 to 2048 [ 668.854455][ T5609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.860766][ T5609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.097472][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 669.110668][ T5607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.113157][ T5607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.118191][ T5607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 669.401438][T12505] input: syz1 as /devices/virtual/input/input6 [ 670.285827][T11960] EXT4-fs (loop6): unmounting filesystem. [ 672.988995][ T4801] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.621287][ T4801] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.858683][ T4801] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.580026][ T4801] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.338295][T12571] loop6: detected capacity change from 0 to 2048 [ 676.326686][T12584] netlink: 165 bytes leftover after parsing attributes in process `syz.7.2413'. [ 677.061134][T12589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.068108][T12589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.089728][ T4301] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 677.097939][ T4301] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 677.102396][ T4301] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 677.105691][ T4301] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 677.108799][ T4301] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 677.111021][ T4301] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 677.541285][T12590] lo speed is unknown, defaulting to 1000 [ 678.661701][T12578] loop5: detected capacity change from 0 to 40427 [ 678.736889][T12578] F2FS-fs (loop5): invalid crc value [ 678.749865][T12578] F2FS-fs (loop5): Found nat_bits in checkpoint [ 678.791652][T12578] F2FS-fs (loop5): Start checkpoint disabled! [ 678.883561][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 678.885350][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 678.921946][T12578] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 679.033267][ C1] ------------[ cut here ]------------ [ 679.035190][ C1] refcount_t: addition on 0; use-after-free. [ 679.037049][ C1] WARNING: CPU: 1 PID: 12578 at lib/refcount.c:25 refcount_warn_saturate+0x134/0x1f8 [ 679.039599][ C1] Modules linked in: [ 679.040688][ C1] CPU: 1 PID: 12578 Comm: syz.5.2415 Not tainted 6.1.141-syzkaller #0 [ 679.042852][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 679.045543][ C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 679.047659][ C1] pc : refcount_warn_saturate+0x134/0x1f8 [ 679.049181][ C1] lr : refcount_warn_saturate+0x134/0x1f8 [ 679.050731][ C1] sp : ffff8000080178c0 [ 679.051870][ C1] x29: ffff8000080178c0 x28: ffff0000f1edd800 x27: ffff0000d2320608 [ 679.054070][ C1] x26: ffff0000f9606af0 x25: dfff800000000000 x24: 1fffe0001a4640c1 [ 679.056266][ C1] x23: ffff0000f4bccc00 x22: ffff0000d478b9d4 x21: ffff0000f4ff3080 [ 679.058409][ C1] x20: ffff0000d478b9d4 x19: ffff800017a32000 x18: 0000000000000000 [ 679.060569][ C1] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 679.062746][ C1] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 679.064949][ C1] x11: ff0080000819149c x10: 0000000000000000 x9 : 29d40538741bfe00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 679.067058][ C1] x8 : 29d40538741bfe00 x7 : 0000000000000001 x6 : 0000000000000001 [ 679.069159][ C1] x5 : ffff800008017358 x4 : ffff800015154700 x3 : ffff80000852da40 [ 679.071326][ C1] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000000 [ 679.073458][ C1] Call trace: [ 679.074305][ C1] refcount_warn_saturate+0x134/0x1f8 [ 679.075771][ C1] tipc_crypto_xmit+0x1518/0x2014 [ 679.077127][ C1] tipc_bearer_xmit_skb+0x1f0/0x384 [ 679.078544][ C1] tipc_disc_timeout+0x4c8/0x608 [ 679.079851][ C1] call_timer_fn+0x1b8/0x964 [ 679.081079][ C1] __run_timers+0x460/0x6bc [ 679.082285][ C1] run_timer_softirq+0x7c/0x114 [ 679.083593][ C1] handle_softirqs+0x318/0xc6c [ 679.084833][ C1] __do_softirq+0x14/0x20 [ 679.085982][ C1] ____do_softirq+0x14/0x20 [ 679.087168][ C1] call_on_irq_stack+0x24/0x4c [ 679.088434][ C1] do_softirq_own_stack+0x20/0x2c [ 679.089789][ C1] __irq_exit_rcu+0x23c/0x43c [ 679.091077][ C1] irq_exit_rcu+0x14/0x84 [ 679.092221][ C1] el1_interrupt+0x38/0x54 [ 679.093400][ C1] el1h_64_irq_handler+0x18/0x24 [ 679.094707][ C1] el1h_64_irq+0x64/0x68 [ 679.095853][ C1] _raw_spin_unlock_irq+0x44/0x90 [ 679.097242][ C1] shmem_get_folio_gfp+0x1610/0x2040 [ 679.098627][ C1] shmem_fault+0x178/0x550 [ 679.099867][ C1] __do_fault+0x11c/0x3d8 [ 679.100983][ C1] handle_mm_fault+0x1ac0/0x2fd4 [ 679.102308][ C1] __get_user_pages+0x338/0x798 [ 679.103638][ C1] populate_vma_page_range+0x1f4/0x298 [ 679.105142][ C1] __mm_populate+0x208/0x330 [ 679.106348][ C1] vm_mmap_pgoff+0x1cc/0x284 [ 679.107588][ C1] ksys_mmap_pgoff+0xd0/0x5a0 [ 679.108873][ C1] __arm64_sys_mmap+0xf8/0x110 [ 679.110190][ C1] invoke_syscall+0x98/0x2bc [ 679.111413][ C1] el0_svc_common+0x138/0x258 [ 679.112691][ C1] do_el0_svc+0x58/0x13c [ 679.113791][ C1] el0_svc+0x58/0x138 [ 679.114879][ C1] el0t_64_sync_handler+0x84/0xf0 [ 679.116229][ C1] el0t_64_sync+0x18c/0x190 [ 679.117459][ C1] irq event stamp: 117357 [ 679.118621][ C1] hardirqs last enabled at (117356): [] __up_console_sem+0xb4/0x100 [ 679.121203][ C1] hardirqs last disabled at (117357): [] el1_dbg+0x24/0x80 [ 679.123546][ C1] softirqs last enabled at (114178): [] handle_softirqs+0xaf8/0xc6c [ 679.126054][ C1] softirqs last disabled at (117263): [] __do_softirq+0x14/0x20 [ 679.128473][ C1] ---[ end trace 0000000000000000 ]--- [ 679.130010][ C1] ------------[ cut here ]------------ [ 679.131430][ C1] refcount_t: underflow; use-after-free. [ 679.133134][ C1] WARNING: CPU: 1 PID: 12578 at lib/refcount.c:28 refcount_warn_saturate+0x154/0x1f8 [ 679.135666][ C1] Modules linked in: [ 679.136699][ C1] CPU: 1 PID: 12578 Comm: syz.5.2415 Tainted: G W 6.1.141-syzkaller #0 [ 679.139296][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 679.141946][ C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 679.144052][ C1] pc : refcount_warn_saturate+0x154/0x1f8 [ 679.145571][ C1] lr : refcount_warn_saturate+0x154/0x1f8 [ 679.147052][ C1] sp : ffff8000080178c0 [ 679.148160][ C1] x29: ffff8000080178c0 x28: ffff0000f1edd800 x27: 0000000000000000 [ 679.150309][ C1] x26: ffff0000f9606af0 x25: dfff800000000000 x24: 1fffe0001f2c0d68 [ 679.152420][ C1] x23: 1fffe0001b846379 x22: ffff0000d2320600 x21: 00000000c0000000 [ 679.154588][ C1] x20: ffff0000d478b9d4 x19: ffff800017a32000 x18: 0000000000000000 [ 679.156696][ C1] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 679.158828][ C1] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 679.160942][ C1] x11: ff0080000819149c x10: 0000000000000000 x9 : 29d40538741bfe00 [ 679.163084][ C1] x8 : 29d40538741bfe00 x7 : 0000000000000001 x6 : 0000000000000001 [ 679.165262][ C1] x5 : ffff800008017358 x4 : ffff800015154700 x3 : ffff8000083115f4 [ 679.167360][ C1] x2 : 0000000000000001 x1 : 0000000100000101 x0 : 0000000000000000 [ 679.169500][ C1] Call trace: [ 679.170372][ C1] refcount_warn_saturate+0x154/0x1f8 [ 679.171843][ C1] tipc_crypto_xmit+0x1664/0x2014 [ 679.173190][ C1] tipc_bearer_xmit_skb+0x1f0/0x384 [ 679.174548][ C1] tipc_disc_timeout+0x4c8/0x608 [ 679.175849][ C1] call_timer_fn+0x1b8/0x964 [ 679.177042][ C1] __run_timers+0x460/0x6bc [ 679.178208][ C1] run_timer_softirq+0x7c/0x114 [ 679.179470][ C1] handle_softirqs+0x318/0xc6c [ 679.180707][ C1] __do_softirq+0x14/0x20 [ 679.181833][ C1] ____do_softirq+0x14/0x20 [ 679.183013][ C1] call_on_irq_stack+0x24/0x4c [ 679.184285][ C1] do_softirq_own_stack+0x20/0x2c [ 679.185679][ C1] __irq_exit_rcu+0x23c/0x43c [ 679.186883][ C1] irq_exit_rcu+0x14/0x84 [ 679.188038][ C1] el1_interrupt+0x38/0x54 [ 679.189284][ C1] el1h_64_irq_handler+0x18/0x24 [ 679.190608][ C1] el1h_64_irq+0x64/0x68 [ 679.191789][ C1] _raw_spin_unlock_irq+0x44/0x90 [ 679.193122][ C1] shmem_get_folio_gfp+0x1610/0x2040 [ 679.193202][ T4298] Bluetooth: hci1: command 0x0409 tx timeout [ 679.194536][ C1] shmem_fault+0x178/0x550 [ 679.194596][ C1] __do_fault+0x11c/0x3d8 [ 679.198716][ C1] handle_mm_fault+0x1ac0/0x2fd4 [ 679.200038][ C1] __get_user_pages+0x338/0x798 [ 679.201387][ C1] populate_vma_page_range+0x1f4/0x298 [ 679.202848][ C1] __mm_populate+0x208/0x330 [ 679.204074][ C1] vm_mmap_pgoff+0x1cc/0x284 [ 679.205241][ C1] ksys_mmap_pgoff+0xd0/0x5a0 [ 679.206446][ C1] __arm64_sys_mmap+0xf8/0x110 [ 679.207693][ C1] invoke_syscall+0x98/0x2bc [ 679.208901][ C1] el0_svc_common+0x138/0x258 [ 679.210137][ C1] do_el0_svc+0x58/0x13c [ 679.211284][ C1] el0_svc+0x58/0x138 [ 679.212367][ C1] el0t_64_sync_handler+0x84/0xf0 [ 679.213697][ C1] el0t_64_sync+0x18c/0x190 [ 679.214886][ C1] irq event stamp: 117389 [ 679.216031][ C1] hardirqs last enabled at (117388): [] __up_console_sem+0xb4/0x100 [ 679.218651][ C1] hardirqs last disabled at (117389): [] el1_dbg+0x24/0x80 [ 679.220957][ C1] softirqs last enabled at (114178): [] handle_softirqs+0xaf8/0xc6c [ 679.223670][ C1] softirqs last disabled at (117263): [] __do_softirq+0x14/0x20 [ 679.226096][ C1] ---[ end trace 0000000000000000 ]--- [ 680.073082][ C1] ------------[ cut here ]------------ [ 680.074757][ C1] refcount_t: saturated; leaking memory. [ 680.076536][ C1] WARNING: CPU: 1 PID: 12638 at lib/refcount.c:22 refcount_warn_saturate+0x1b4/0x1f8 [ 680.079018][ C1] Modules linked in: [ 680.080029][ C1] CPU: 1 PID: 12638 Comm: sed Tainted: G W 6.1.141-syzkaller #0 [ 680.082365][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 680.085000][ C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 680.087080][ C1] pc : refcount_warn_saturate+0x1b4/0x1f8 [ 680.088633][ C1] lr : refcount_warn_saturate+0x1b4/0x1f8 [ 680.090151][ C1] sp : ffff8000080178c0 [ 680.091248][ C1] x29: ffff8000080178c0 x28: ffff0000e59cd000 x27: ffff0000d2320608 [ 680.093393][ C1] x26: ffff0000f9606af0 x25: dfff800000000000 x24: 1fffe0001a4640c1 [ 680.095502][ C1] x23: ffff0000f4bccc00 x22: ffff0000d478b9d4 x21: 000000007ffffffe [ 680.097641][ C1] x20: ffff0000d478b9d4 x19: ffff800017a32000 x18: 0000000000000000 [ 680.099766][ C1] x17: 0000000000000000 x16: ffff8000082d1c00 x15: 0000000000000000 [ 680.101865][ C1] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000ff0100 [ 680.103996][ C1] x11: ff0080000819149c x10: 0000000000000000 x9 : 79484d3202c51c00 [ 680.106094][ C1] x8 : 79484d3202c51c00 x7 : 0000000000000001 x6 : 0000000000000001 [ 680.108226][ C1] x5 : ffff800008017358 x4 : ffff800015154700 x3 : ffff80000852da40 [ 680.110311][ C1] x2 : 0000000000000001 x1 : 0000000100000100 x0 : 0000000000000000 [ 680.112479][ C1] Call trace: [ 680.113350][ C1] refcount_warn_saturate+0x1b4/0x1f8 [ 680.114748][ C1] tipc_crypto_xmit+0x1518/0x2014 [ 680.116064][ C1] tipc_bearer_xmit_skb+0x1f0/0x384 [ 680.117490][ C1] tipc_disc_timeout+0x4c8/0x608 [ 680.118817][ C1] call_timer_fn+0x1b8/0x964 [ 680.120031][ C1] __run_timers+0x460/0x6bc [ 680.121191][ C1] run_timer_softirq+0x7c/0x114 [ 680.122469][ C1] handle_softirqs+0x318/0xc6c [ 680.123741][ C1] __do_softirq+0x14/0x20 [ 680.124858][ C1] ____do_softirq+0x14/0x20 [ 680.126098][ C1] call_on_irq_stack+0x24/0x4c [ 680.127352][ C1] do_softirq_own_stack+0x20/0x2c [ 680.128739][ C1] __irq_exit_rcu+0x23c/0x43c [ 680.129971][ C1] irq_exit_rcu+0x14/0x84 [ 680.131109][ C1] el1_interrupt+0x38/0x54 [ 680.132249][ C1] el1h_64_irq_handler+0x18/0x24 [ 680.133612][ C1] el1h_64_irq+0x64/0x68 [ 680.134763][ C1] __memset+0xcc/0x188 [ 680.135889][ C1] __kasan_poison_pages+0x4c/0x5c [ 680.137229][ C1] free_unref_page_prepare+0x744/0xb18 [ 680.138702][ C1] free_unref_page_list+0xd8/0x8ec [ 680.140095][ C1] release_pages+0xd84/0xfac [ 680.141301][ C1] free_pages_and_swap_cache+0xa0/0xb8 [ 680.142778][ C1] tlb_flush_mmu+0x120/0x224 [ 680.143966][ C1] tlb_finish_mmu+0xc0/0x1e4 [ 680.145218][ C1] exit_mmap+0x28c/0x934 [ 680.146365][ C1] __mmput+0xec/0x39c [ 680.147433][ C1] mmput+0x70/0xac [ 680.148402][ C1] exit_mm+0x140/0x234 [ 680.149473][ C1] do_exit+0x4c4/0x19a8 [ 680.150552][ C1] do_group_exit+0x194/0x22c [ 680.151776][ C1] __wake_up_parent+0x0/0x60 [ 680.152980][ C1] invoke_syscall+0x98/0x2bc [ 680.154161][ C1] el0_svc_common+0x138/0x258 [ 680.155417][ C1] do_el0_svc+0x58/0x13c [ 680.156566][ C1] el0_svc+0x58/0x138 [ 680.157676][ C1] el0t_64_sync_handler+0x84/0xf0 [ 680.158989][ C1] el0t_64_sync+0x18c/0x190 [ 680.160157][ C1] irq event stamp: 9935 [ 680.161229][ C1] hardirqs last enabled at (9934): [] __up_console_sem+0xb4/0x100 [ 680.163745][ C1] hardirqs last disabled at (9935): [] el1_dbg+0x24/0x80 [ 680.166045][ C1] softirqs last enabled at (8508): [] local_bh_enable+0x10/0x34 [ 680.168541][ C1] softirqs last disabled at (9897): [] __do_softirq+0x14/0x20 [ 680.171010][ C1] ---[ end trace 0000000000000000 ]--- [ 682.070708][ T4801] bond0: (slave wlan1): Releasing backup interface [ 682.609874][ T4801] device hsr_slave_0 left promiscuous mode [ 682.703311][ T4801] device hsr_slave_1 left promiscuous mode [ 682.772976][ T4801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.775300][ T4801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.778406][ T4801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.780446][ T4801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.782788][ T4801] device team0 left promiscuous mode [ 682.786768][ T4801] device team_slave_0 left promiscuous mode [ 682.788467][ T4801] device geneve0 left promiscuous mode [ 682.790106][ T4801] bridge0: port 3(team0) entered disabled state [ 682.853797][ T4801] device bridge_slave_1 left promiscuous mode [ 682.855669][ T4801] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.894585][ T4801] device bridge_slave_0 left promiscuous mode [ 682.896391][ T4801] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.993201][ T4801] device veth1_macvtap left promiscuous mode [ 682.994882][ T4801] device veth0_macvtap left promiscuous mode [ 682.996666][ T4801] device veth1_vlan left promiscuous mode [ 682.998229][ T4801] device veth0_vlan left promiscuous mode [ 683.085423][ T4801] bond2 (unregistering): Released all slaves [ 683.127817][ T4801] bond1 (unregistering): Released all slaves [ 683.308224][ T4801] team0 (unregistering): Port device geneve0 removed [ 685.085029][ T4801] team0 (unregistering): Port device team_slave_1 removed [ 685.274523][ T4801] team0 (unregistering): Port device team_slave_0 removed [ 685.464090][ T4801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.685018][ T4801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.017782][ T4801] bond0 (unregistering): Released all slaves