last executing test programs: 13m36.835225668s ago: executing program 32 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="df23952674f4"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) 13m3.430094567s ago: executing program 33 (id=148): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x2}) 8m15.621657791s ago: executing program 5 (id=1174): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) 8m15.166177611s ago: executing program 5 (id=1178): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200e77"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xff}, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x53, "ab7009ede6b53586b20fef44338b2b690cb0cef36bbbd2dae487edf4a0ad6fa4ff782804382e7692132375195dc33340d80f975ce8d715b4b661a427913ac9a43431f3d316daf8f9834ee08b89182d189f6d00"}, 0x0}) 8m11.904063003s ago: executing program 5 (id=1195): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f043608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1506fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 8m11.165468055s ago: executing program 5 (id=1198): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@private2, {0x327, 0x9, 0x0, 0x4, 0x20000000000000, 0x0, 0x1, 0x7}, {0x0, 0x0, 0x2}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x3502, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e22, @in6=@rand_addr=' \x01\x00'}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 8m9.551453345s ago: executing program 5 (id=1204): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 8m9.051001827s ago: executing program 5 (id=1207): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @echo_request={0x2}}}}}}, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffb]}}) 7m53.962546851s ago: executing program 34 (id=1207): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @echo_request={0x2}}}}}}, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_cmd={0x26, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffb]}}) 7m42.281443418s ago: executing program 4 (id=1272): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="6803000010001307fefffffffcdbdf2564010101000000000000000000000000e0000001000000000000000000000000000000004e2100020a0000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x368}, 0x1, 0x0, 0x0, 0x880}, 0x0) 7m39.24854738s ago: executing program 4 (id=1276): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unshare(0x60000600) inotify_rm_watch(0xffffffffffffffff, 0x0) 7m37.39844081s ago: executing program 4 (id=1280): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}, {0xe}}}, 0x24}}, 0x0) 7m35.147617298s ago: executing program 4 (id=1285): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000580)=""/174, 0xae) 7m34.004026197s ago: executing program 4 (id=1288): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x2, {{@in=@multicast2=0xfe800000, @in=@dev={0xac, 0x14, 0x14, 0x37}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x800000000000}}}, 0xb8}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000010008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000002ffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4cb, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) syz_fuse_handle_req(r8, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0xf4ad, 0x736400a3, 0xdcf, 0x4, 0xb, 0x7fe, 0x0, 0x0, 0x4, 0x9e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x800) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2000, 0x0, 0xffff}, 'syz0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x18, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000040)=0x1, 0x4) 7m32.575714779s ago: executing program 4 (id=1292): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003b00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x6, 0xffffffffffffffdb, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x18, r4, 0x713, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c09}, 0x2de0d2a06d7aeea8) r6 = epoll_create(0xa) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000180)={0x60000038}) fchdir(r0) newfstatat(0xffffffffffffff9c, &(0x7f0000001580)='.\x00', 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x1}) ioctl$TUNSETDEBUG(r9, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETVNETLE(r9, 0x800454dd, &(0x7f0000000180)) shutdown(r8, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r11, 0x0, 0x0, 0x80000) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 7m17.310591861s ago: executing program 35 (id=1292): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000003b00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x6, 0xffffffffffffffdb, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x18, r4, 0x713, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8c09}, 0x2de0d2a06d7aeea8) r6 = epoll_create(0xa) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000180)={0x60000038}) fchdir(r0) newfstatat(0xffffffffffffff9c, &(0x7f0000001580)='.\x00', 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x1}) ioctl$TUNSETDEBUG(r9, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETVNETLE(r9, 0x800454dd, &(0x7f0000000180)) shutdown(r8, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4$bt_l2cap(r11, 0x0, 0x0, 0x80000) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 7m6.818286376s ago: executing program 6 (id=1360): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x20000054) 7m2.465940255s ago: executing program 6 (id=1369): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}]}}]}, 0x38}}, 0x0) 6m59.183429038s ago: executing program 6 (id=1375): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x6) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) 6m58.820625114s ago: executing program 6 (id=1376): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000528000)=[{0x6, 0x0, 0x0, 0xfffffffc}]}, 0x10) close(r0) 6m58.327401185s ago: executing program 6 (id=1378): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x201, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x1800}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x21, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 6m56.838908181s ago: executing program 6 (id=1380): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/254, 0x37, 0xfe, 0x1}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x24002, 0x47) io_submit(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 6m39.414530763s ago: executing program 36 (id=1380): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000840)=""/254, 0x37, 0xfe, 0x1}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x24002, 0x47) io_submit(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 6m7.945845549s ago: executing program 0 (id=1513): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000300)={[{@auto_da_alloc_val}, {@noquota}, {@init_itable_val={'init_itable', 0x3d, 0x5c}}, {@dioread_nolock}, {@dax_never}]}, 0x3, 0x45c, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0xd1e2, 0x47fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f0000001000)=@abs={0x0, 0x0, 0xce27}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 6m5.474976288s ago: executing program 0 (id=1520): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x0, 0x0, 0x2}}}}, 0x128}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000180)) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000240)=[@increfs_done], 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 6m1.581726218s ago: executing program 0 (id=1527): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e8b, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x2, 0x0, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @loopback}]}, 0x2c}, 0x1, 0xffffff7f}, 0x4040000) 5m59.94349786s ago: executing program 0 (id=1529): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route_sched(r1, 0x0, 0x4000004) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}, {0xe}}}, 0x24}}, 0x0) 5m59.584072025s ago: executing program 0 (id=1535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r6, &(0x7f0000000000)="fa", 0xfffffdef) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x288}], 0x1}}], 0x1, 0x400c0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 5m58.485077443s ago: executing program 0 (id=1538): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) creat(&(0x7f0000000280)='./file1\x00', 0x20) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a010000000d481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 5m43.350603135s ago: executing program 37 (id=1538): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) creat(&(0x7f0000000280)='./file1\x00', 0x20) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) 1m56.235417785s ago: executing program 2 (id=2420): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000800)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) unshare(0x20000400) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @private}}, 0x1e) 1m55.934986679s ago: executing program 2 (id=2424): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0xa) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) close_range(r0, r2, 0x0) 1m55.717888559s ago: executing program 2 (id=2427): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readv(r4, &(0x7f0000000600)=[{&(0x7f0000000140)=""/169, 0xa9}], 0x1) 1m52.843147585s ago: executing program 2 (id=2439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x20000054) 1m51.547799531s ago: executing program 2 (id=2443): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) unlinkat(0xffffffffffffffff, 0x0, 0x200) 1m51.082891031s ago: executing program 2 (id=2446): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = epoll_create1(0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) 1m36.02138841s ago: executing program 38 (id=2446): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = epoll_create1(0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}]}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) 25.15137741s ago: executing program 3 (id=2696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x20000054) 24.038109339s ago: executing program 3 (id=2699): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) poll(0x0, 0x0, 0x7) 22.759117475s ago: executing program 3 (id=2702): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000200)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 20.700310525s ago: executing program 3 (id=2705): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000580)=""/174, 0xae) 19.688623329s ago: executing program 3 (id=2708): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000009e040000fc0f000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="01efff4001"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 19.459387899s ago: executing program 3 (id=2712): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000100)=0x2, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @broadcast}, 0x10) 17.216798448s ago: executing program 8 (id=2716): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 9.695663096s ago: executing program 8 (id=2730): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb011703010902240001000020000904c40102fffd0180090502f10f"], 0x0) 8.423078902s ago: executing program 8 (id=2736): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x2, 0x9, 0x6, 0x2, 0x2, 0x0, 0x70bd0b, 0x25dfdbff}, 0x10}}, 0x10) 8.151439034s ago: executing program 8 (id=2739): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 4.887186957s ago: executing program 7 (id=2750): socketpair(0xa, 0x1, 0x600, &(0x7f0000000000)) 4.727458974s ago: executing program 1 (id=2751): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x42fffffe) 4.553681911s ago: executing program 7 (id=2753): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) 4.506882563s ago: executing program 1 (id=2754): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) 4.331188451s ago: executing program 9 (id=2755): bpf$MAP_CREATE(0x0, &(0x7f0000010280)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES8=0x0, @ANYBLOB="0000fffffffffffffffffffffffd2e5f"], 0x48) 3.66998598s ago: executing program 9 (id=2756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x80, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) 3.419509331s ago: executing program 1 (id=2757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000180)={r2}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x30]}}, &(0x7f0000000f40)=""/4089, 0x33, 0xff9, 0x1}, 0x28) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xe, @dev={0xfe, 0x80, '\x00', 0x43}, 0x4}, 0x1c) 3.366863783s ago: executing program 7 (id=2758): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000580)=""/174, 0xae) 3.21150216s ago: executing program 9 (id=2759): r0 = socket(0x2c, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x43) 2.444822373s ago: executing program 1 (id=2760): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20180, 0x6028d}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @remote}]}}}, @IFLA_MTU={0x8, 0x4, 0x10000}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048086}, 0x0) 2.361816657s ago: executing program 9 (id=2761): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 2.336295988s ago: executing program 7 (id=2762): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000300000000020000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d000000000000000000000000000000840105"], 0x23c}}, 0x0) 2.224721353s ago: executing program 8 (id=2763): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2.127460118s ago: executing program 9 (id=2764): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}], 0x1, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) 2.127327027s ago: executing program 7 (id=2765): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) 2.106870838s ago: executing program 1 (id=2766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) 1.946371545s ago: executing program 7 (id=2767): setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) 1.823452271s ago: executing program 8 (id=2768): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 360.89µs ago: executing program 9 (id=2769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000180)={r2}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x30]}}, &(0x7f0000000f40)=""/4089, 0x33, 0xff9, 0x1}, 0x28) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xe, @dev={0xfe, 0x80, '\x00', 0x43}, 0x4}, 0x1c) 0s ago: executing program 1 (id=2770): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffa000/0x2000)=nil) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) kernel console output (not intermixed with test programs): ="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531778f749 code=0x7ffc0000 [ 528.009989][ T27] audit: type=1326 audit(1763616530.961:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f531778f749 code=0x7ffc0000 [ 528.121448][ T27] audit: type=1326 audit(1763616530.961:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531778f749 code=0x7ffc0000 [ 528.984938][ T27] audit: type=1326 audit(1763616530.961:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.0.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f531778f749 code=0x7ffc0000 [ 529.050614][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 529.063643][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 529.072512][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 529.082338][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 529.092160][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 529.104965][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 530.893566][ T9481] chnl_net:caif_netlink_parms(): no params data found [ 530.963331][ T9510] loop0: detected capacity change from 0 to 256 [ 531.135311][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 532.078002][ T9481] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.104803][ T9481] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.113174][ T9481] device bridge_slave_0 entered promiscuous mode [ 532.185200][ T9481] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.192424][ T9481] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.216254][ T9481] device bridge_slave_1 entered promiscuous mode [ 533.127514][ T9481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.179841][ T9481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.215095][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 533.382724][ T9481] team0: Port device team_slave_0 added [ 533.490004][ T9542] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 533.499938][ T9542] FAT-fs (loop1): unable to read boot sector [ 533.871680][ T9481] team0: Port device team_slave_1 added [ 534.101782][ T8808] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 535.106434][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.113462][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.139659][ T9481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.154585][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.184481][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.294774][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 535.374755][ T9481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.468664][ T9561] loop3: detected capacity change from 0 to 256 [ 535.748517][ T9481] device hsr_slave_0 entered promiscuous mode [ 536.575232][ T9481] device hsr_slave_1 entered promiscuous mode [ 536.630337][ T9481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 536.658582][ T9576] loop0: detected capacity change from 0 to 512 [ 536.676947][ T9481] Cannot create hsr debugfs directory [ 536.700390][ T9576] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 536.764827][ T9576] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 536.826884][ T9576] EXT4-fs (loop0): 1 truncate cleaned up [ 536.833140][ T9576] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 537.238316][ T9585] tmpfs: Unknown parameter 'no' [ 537.562901][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 537.718925][ T4416] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.732266][ T9589] syz.0.1450[9589] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 537.732373][ T9589] syz.0.1450[9589] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 537.745404][ T9589] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 537.809539][ T9591] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 538.009682][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 538.091462][ T4416] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.241408][ T4416] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.368631][ T4416] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.494714][ T9481] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 538.539046][ T9481] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 538.601499][ T9481] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 538.634917][ T9481] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 538.838597][ T4416] tipc: Disabling bearer [ 538.844378][ T4416] tipc: Left network mode [ 538.860595][ T9620] loop0: detected capacity change from 0 to 256 [ 540.291744][ T9481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.607797][ T9637] loop0: detected capacity change from 0 to 128 [ 540.632852][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 540.641068][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 540.701775][ T9481] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.731218][ T9637] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 540.799279][ T9637] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 540.821874][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 540.841257][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 540.860827][ T9637] FAT-fs (loop0): Filesystem has been set read-only [ 540.886682][ T9637] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 540.899500][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.906728][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.065485][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 541.086501][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 541.154618][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 541.163932][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.171170][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.180525][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 541.189771][ T2964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 542.089063][ T9481] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 542.112203][ T9481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 542.175018][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 542.184467][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 542.250633][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 542.288647][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 542.336280][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 542.378143][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 542.428164][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 542.474307][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 542.686794][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 543.151754][ T9682] loop3: detected capacity change from 0 to 512 [ 543.222824][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 543.721819][ T9686] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 543.902881][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 544.048098][ T9686] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 544.125677][ T9705] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 544.927193][ T9686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 545.038677][ T9705] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 545.060758][ T9705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 546.231432][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 546.263752][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 546.332335][ T9481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.071351][ T4416] device hsr_slave_0 left promiscuous mode [ 548.095807][ T4416] device hsr_slave_1 left promiscuous mode [ 548.172342][ T9750] loop8: detected capacity change from 0 to 512 [ 548.262633][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.275655][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 548.371114][ T4416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.455467][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 548.523432][ T4416] device bridge_slave_1 left promiscuous mode [ 548.553584][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.569369][ T4416] device bridge_slave_0 left promiscuous mode [ 548.584876][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.682856][ T4416] device veth1_macvtap left promiscuous mode [ 548.699795][ T4416] device veth0_macvtap left promiscuous mode [ 548.712565][ T4416] device veth1_vlan left promiscuous mode [ 548.732482][ T4416] device veth0_vlan left promiscuous mode [ 548.911330][ T9760] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1494'. [ 549.910825][ T9768] loop3: detected capacity change from 0 to 512 [ 549.930337][ T9768] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 549.961256][ T9768] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 551.050451][ T9768] EXT4-fs (loop3): 1 truncate cleaned up [ 551.067677][ T9768] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 551.455584][ T9783] syz.3.1499[9783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 551.455719][ T9783] syz.3.1499[9783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 551.468975][ T9783] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 553.162553][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 555.862231][ T4416] team0 (unregistering): Port device team_slave_1 removed [ 555.941984][ T4416] team0 (unregistering): Port device team_slave_0 removed [ 556.033056][ T4416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.122152][ T4416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.853967][ T4416] bond0 (unregistering): Released all slaves [ 557.017192][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1508'. [ 557.667822][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 557.751169][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 558.017248][ T9481] device veth0_vlan entered promiscuous mode [ 558.096206][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 558.129967][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 558.188696][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 558.228813][ T9827] loop0: detected capacity change from 0 to 512 [ 558.242344][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 558.272684][ T9481] device veth1_vlan entered promiscuous mode [ 558.297629][ T9827] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 558.362125][ T9827] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 558.650972][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 558.660901][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 558.674021][ T9481] device veth0_macvtap entered promiscuous mode [ 558.727249][ T9481] device veth1_macvtap entered promiscuous mode [ 558.833979][ T9842] netlink: 'syz.8.1516': attribute type 12 has an invalid length. [ 558.886610][ T9842] loop8: detected capacity change from 0 to 512 [ 558.959171][ T9827] EXT4-fs (loop0): 1 truncate cleaned up [ 559.105442][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 559.140141][ T9827] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 559.183697][ T9842] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 559.193354][ T9842] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.219729][ T9842] EXT4-fs (loop8): unmounting filesystem. [ 559.324262][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 560.177166][ T9481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.381038][ T9827] syz.0.1513[9827] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 560.381150][ T9827] syz.0.1513[9827] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 560.394075][ T9827] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 560.620541][ T9481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.745031][ T9481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.827335][ T9481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.890124][ T9481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.920493][ T9481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.932294][ T9481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.945093][ T9481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.955671][ T9481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.965646][ T9481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.976637][ T9481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.994486][ T9481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.017680][ T9481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.175020][ T9854] syz.7.1521[9854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 561.175445][ T9854] syz.7.1521[9854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 561.326823][ T9481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.417070][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 563.103340][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.109780][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.125005][ T4829] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 563.160243][ T4829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 563.257629][ T4829] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 563.303432][ T4829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 564.398620][ T9481] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.465009][ T9481] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.546554][ T9481] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.582300][ T9481] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.301509][ T4502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.340825][ T4502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.379948][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 566.433501][ T4416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.481686][ T4416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.532099][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 567.612899][ T27] audit: type=1326 audit(1763616571.331:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 567.734767][ T27] audit: type=1326 audit(1763616571.371:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 567.844887][ T27] audit: type=1326 audit(1763616571.441:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 568.006031][ T27] audit: type=1326 audit(1763616571.441:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 568.269791][ T27] audit: type=1326 audit(1763616571.441:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 568.581692][ T27] audit: type=1326 audit(1763616571.441:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 568.611048][ T27] audit: type=1326 audit(1763616571.441:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 568.694900][ T27] audit: type=1326 audit(1763616571.441:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 568.830167][ T27] audit: type=1326 audit(1763616571.451:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 568.883973][ T27] audit: type=1326 audit(1763616571.451:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9914 comm="syz.3.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 569.859272][ T9942] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 569.892984][ T9942] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 570.029846][ T9942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 571.647074][ T9969] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 572.446551][ T9968] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 572.545827][ T9968] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 572.572972][ T9976] loop3: detected capacity change from 0 to 128 [ 572.625205][ T9968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 572.845861][ T9976] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 573.057581][ T9976] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.012068][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 581.237130][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 581.557872][T10044] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1572'. [ 581.577895][T10038] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1572'. [ 581.625610][T10038] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1572'. [ 582.173929][T10066] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 582.590517][T10066] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 582.686415][T10066] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 584.585360][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 584.596909][ T4278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 584.606641][ T4278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 584.617871][ T4278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 584.627103][ T4278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 584.634555][ T4278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 586.380926][T10092] chnl_net:caif_netlink_parms(): no params data found [ 586.735882][ T4285] Bluetooth: hci5: command 0x0409 tx timeout [ 589.011408][ T4278] Bluetooth: hci5: command 0x041b tx timeout [ 589.218963][T10092] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.238055][T10092] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.315027][T10092] device bridge_slave_0 entered promiscuous mode [ 589.542008][T10156] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 589.614536][ T4546] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.182795][T10157] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 590.279037][T10157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 590.299840][T10092] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.314939][T10092] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.343874][T10092] device bridge_slave_1 entered promiscuous mode [ 590.474412][ T4546] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.495854][ T26] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 590.657707][ T4546] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.706801][ T26] usb 10-1: Using ep0 maxpacket: 8 [ 590.722733][T10092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.733519][ T26] usb 10-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 590.764418][ T26] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.792041][ T26] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 590.829406][ T26] usb 10-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 590.853562][ T26] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.865888][ T27] kauditd_printk_skb: 50 callbacks suppressed [ 590.865904][ T27] audit: type=1326 audit(1763616594.591:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10174 comm="syz.8.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 590.884776][ T26] usb 10-1: Product: syz [ 590.902632][ T4546] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.945882][ T26] usb 10-1: Manufacturer: syz [ 590.967672][T10092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.969282][ T26] usb 10-1: SerialNumber: syz [ 590.984839][ T27] audit: type=1326 audit(1763616594.641:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10174 comm="syz.8.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 591.009430][ T26] usb 10-1: config 0 descriptor?? [ 591.055145][ T4278] Bluetooth: hci5: command 0x040f tx timeout [ 591.118952][ T27] audit: type=1326 audit(1763616594.821:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10174 comm="syz.8.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 591.173524][ T27] audit: type=1326 audit(1763616594.841:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10174 comm="syz.8.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 591.196424][T10092] team0: Port device team_slave_0 added [ 591.250265][ T26] usb 10-1: USB disconnect, device number 2 [ 591.258797][T10092] team0: Port device team_slave_1 added [ 591.451473][T10092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.484790][T10092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.523879][T10092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.571491][T10180] netlink: 'syz.8.1603': attribute type 4 has an invalid length. [ 591.595777][T10092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.602909][T10092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.636160][T10092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.785710][ T4546] tipc: Disabling bearer [ 591.791494][ T4546] tipc: Disabling bearer [ 591.805813][ T4546] tipc: Disabling bearer [ 591.815529][ T4546] tipc: Left network mode [ 591.889524][T10092] device hsr_slave_0 entered promiscuous mode [ 591.955418][T10092] device hsr_slave_1 entered promiscuous mode [ 591.994882][T10092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 592.023271][T10092] Cannot create hsr debugfs directory [ 593.135102][ T4278] Bluetooth: hci5: command 0x0419 tx timeout [ 593.303570][ T27] audit: type=1326 audit(1763616597.021:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10204 comm="syz.7.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 593.828576][ T27] audit: type=1326 audit(1763616597.021:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10204 comm="syz.7.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 594.110117][ T27] audit: type=1326 audit(1763616597.051:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10204 comm="syz.7.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 594.155085][ T27] audit: type=1326 audit(1763616597.051:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10204 comm="syz.7.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 594.238699][ T27] audit: type=1326 audit(1763616597.051:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10204 comm="syz.7.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 594.418086][T10182] loop3: detected capacity change from 0 to 40427 [ 594.438880][T10182] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 594.493599][T10182] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 594.543894][T10182] F2FS-fs (loop3): invalid crc value [ 594.612233][T10182] F2FS-fs (loop3): Found nat_bits in checkpoint [ 596.719117][ T27] audit: type=1326 audit(1763616600.321:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.8.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 597.208159][ T27] audit: type=1326 audit(1763616600.321:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.8.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 597.262904][ T27] audit: type=1326 audit(1763616600.331:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.8.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 597.320635][T10251] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 597.331869][T10251] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 597.335068][ T27] audit: type=1326 audit(1763616600.331:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.8.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 597.341523][T10251] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 598.291684][ T27] audit: type=1326 audit(1763616600.331:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.8.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 598.314435][ T27] audit: type=1326 audit(1763616600.341:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.8.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 598.362831][ T27] audit: type=1326 audit(1763616600.341:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.8.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 598.407881][ T27] audit: type=1326 audit(1763616600.341:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.8.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 598.758283][T10268] overlayfs: failed to clone lowerpath [ 599.669049][ T27] audit: type=1326 audit(1763616600.341:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.8.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 599.718228][ T27] audit: type=1326 audit(1763616600.931:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10236 comm="syz.8.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 599.910460][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1628'. [ 599.938021][T10279] loop9: detected capacity change from 0 to 512 [ 600.009008][T10279] EXT4-fs (loop9): Test dummy encryption mode enabled [ 600.042208][T10279] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 600.268858][T10279] EXT4-fs error (device loop9): ext4_orphan_get:1426: comm syz.9.1630: bad orphan inode 131083 [ 600.458358][T10279] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 601.507833][ T9481] EXT4-fs (loop9): unmounting filesystem. [ 601.688044][T10092] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 602.019995][T10092] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 602.784121][T10092] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 602.843823][T10092] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 603.684787][ T4546] device hsr_slave_0 left promiscuous mode [ 603.691835][ T4546] device hsr_slave_1 left promiscuous mode [ 603.795220][ T4546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.831021][ T4546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.940785][ T4546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.979303][ T4546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.469107][ T4546] device bridge_slave_1 left promiscuous mode [ 604.508898][ T4546] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.537574][ T4546] device bridge_slave_0 left promiscuous mode [ 604.544219][ T4546] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.727748][ T4546] device veth1_macvtap left promiscuous mode [ 604.734209][ T4546] device veth0_macvtap left promiscuous mode [ 604.775233][ T4546] device veth1_vlan left promiscuous mode [ 604.781283][ T4546] device veth0_vlan left promiscuous mode [ 605.140441][T10346] loop3: detected capacity change from 0 to 512 [ 605.192031][T10346] EXT4-fs (loop3): Test dummy encryption mode enabled [ 605.261347][T10346] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 605.906796][T10346] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.1644: bad orphan inode 131083 [ 605.917785][T10346] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 606.759519][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 607.429752][ T4546] team0 (unregistering): Port device team_slave_1 removed [ 607.504209][ T4546] team0 (unregistering): Port device team_slave_0 removed [ 607.572051][ T4546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.638570][ T4546] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.288988][ T4546] bond0 (unregistering): Released all slaves [ 608.411647][T10344] device veth3 entered promiscuous mode [ 609.630718][T10383] loop9: detected capacity change from 0 to 512 [ 609.653512][T10383] EXT4-fs (loop9): Test dummy encryption mode enabled [ 609.683277][T10383] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 609.846853][T10092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.920570][T10092] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.042053][T10383] EXT4-fs error (device loop9): ext4_orphan_get:1426: comm syz.9.1656: bad orphan inode 131083 [ 610.145823][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 610.229946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 610.447416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 610.569953][T10383] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 610.605325][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 610.815548][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.822753][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.863108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 610.871529][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 610.882456][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 610.896246][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.903689][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.124565][T10396] loop3: detected capacity change from 0 to 512 [ 611.136466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 611.563023][ T9481] EXT4-fs (loop9): unmounting filesystem. [ 611.662688][T10396] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1658: inode has both inline data and extents flags [ 611.963463][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 611.983959][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 612.007248][T10396] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1658: couldn't read orphan inode 15 (err -117) [ 612.056381][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 612.074985][T10396] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 612.124188][ T4826] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 613.191687][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 613.242863][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 613.252016][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 613.281496][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 613.290856][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 613.324352][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 613.334432][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 613.340326][T10414] syz.8.1664[10414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 613.348423][T10092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 614.044800][ T8808] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 614.248438][ T8808] usb 9-1: unable to get BOS descriptor or descriptor too short [ 614.269230][ T8808] usb 9-1: config 0 has no interfaces? [ 614.293734][ T8808] usb 9-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 614.319158][ T8808] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.351513][ T8808] usb 9-1: Product: syz [ 614.372964][ T8808] usb 9-1: Manufacturer: syz [ 615.191183][ T8808] usb 9-1: SerialNumber: syz [ 615.205411][ T8808] usb 9-1: config 0 descriptor?? [ 615.231116][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 615.231132][ T27] audit: type=1326 audit(1763616618.951:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10438 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 615.383049][ T27] audit: type=1326 audit(1763616618.951:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10438 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 615.416252][ T4344] usb 9-1: USB disconnect, device number 3 [ 615.417275][ T27] audit: type=1326 audit(1763616618.981:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10438 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 615.522579][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 615.538408][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 615.563061][T10092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.569498][ T27] audit: type=1326 audit(1763616619.281:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10438 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 615.594390][ T27] audit: type=1326 audit(1763616619.291:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10438 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 615.795475][T10448] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 615.873281][T10448] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 615.980048][T10448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 616.255305][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 616.609668][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 616.628831][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 616.775022][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 616.821325][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 616.848395][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 616.865446][T10451] syz.7.1676[10451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 616.881332][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 616.965850][T10092] device veth0_vlan entered promiscuous mode [ 617.207562][T10092] device veth1_vlan entered promiscuous mode [ 618.053398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 618.123341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 618.229584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 618.258498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 618.334367][T10092] device veth0_macvtap entered promiscuous mode [ 618.460637][T10092] device veth1_macvtap entered promiscuous mode [ 619.450214][T10092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.461483][T10092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.571038][T10092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.683402][T10092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.859422][T10092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.889287][T10092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.967171][T10092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.012825][ T27] audit: type=1326 audit(1763616623.731:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.9.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 620.037787][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 620.064076][ T27] audit: type=1326 audit(1763616623.761:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.9.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 620.069295][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 620.144384][ T27] audit: type=1326 audit(1763616623.771:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10478 comm="syz.9.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 620.145964][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 620.270207][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 620.319846][T10092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.349227][T10486] loop8: detected capacity change from 0 to 512 [ 620.359953][T10092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.371435][T10486] EXT4-fs: Ignoring removed bh option [ 620.384700][T10092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.408294][T10488] syz.3.1690[10488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 620.420464][T10092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.442542][T10486] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 620.456051][T10092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.467735][T10092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.482635][T10486] EXT4-fs (loop8): orphan cleanup on readonly fs [ 620.494053][T10486] EXT4-fs (loop8): 1 truncate cleaned up [ 620.516888][T10092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.530368][T10486] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 620.592595][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 620.619663][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 620.647507][T10493] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 621.053390][T10493] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 621.114022][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 621.173480][T10493] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 621.192826][T10092] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.204285][T10092] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.214013][T10092] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.233940][T10092] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.486993][ T4416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.510043][ T4416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.573253][ T4850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 622.454009][ T4850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.495737][ T4850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.530918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 623.826099][T10535] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 624.820048][T10539] syz.9.1700[10539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 624.870166][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.888328][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.128487][T10542] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 625.253947][T10547] loop3: detected capacity change from 0 to 512 [ 625.373854][T10547] EXT4-fs: inline encryption not supported [ 625.551539][T10547] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1703: inode has both inline data and extents flags [ 625.644917][T10547] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1703: couldn't read orphan inode 15 (err -117) [ 625.705981][T10547] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 627.168748][T10562] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 627.213769][T10562] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 627.337049][T10564] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1704'. [ 627.823858][T10562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 627.975839][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 629.486717][T10584] syz.7.1712[10584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 629.636900][T10590] tipc: Enabling of bearer rejected, already enabled [ 631.054070][T10619] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 631.072143][T10619] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 631.115784][T10619] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 631.965887][T10636] syz.3.1725[10636] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 632.542697][T10642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1727'. [ 632.650845][T10648] loop2: detected capacity change from 0 to 512 [ 632.667615][T10642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1727'. [ 632.694897][T10642] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1727'. [ 632.696111][T10649] xt_CT: You must specify a L4 protocol and not use inversions on it [ 633.146806][T10648] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1730: inode has both inline data and extents flags [ 633.444323][T10648] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1730: couldn't read orphan inode 15 (err -117) [ 633.524732][T10648] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 634.511257][T10092] EXT4-fs (loop2): unmounting filesystem. [ 635.483883][T10686] syz.2.1737[10686] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 635.814107][T10695] loop3: detected capacity change from 0 to 512 [ 635.931000][T10695] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1742: inode has both inline data and extents flags [ 636.050052][T10695] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1742: couldn't read orphan inode 15 (err -117) [ 636.158848][T10695] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 636.652800][T10714] loop8: detected capacity change from 0 to 512 [ 636.684183][T10714] EXT4-fs (loop8): Test dummy encryption mode enabled [ 636.878891][T10714] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 637.152996][T10714] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.1748: bad orphan inode 131083 [ 637.367214][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 637.464471][T10714] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 638.097331][T10728] syz.2.1750[10728] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 638.246440][ T9054] EXT4-fs (loop8): unmounting filesystem. [ 638.955289][T10755] loop9: detected capacity change from 0 to 256 [ 639.490128][T10765] netlink: 'syz.7.1761': attribute type 13 has an invalid length. [ 639.649149][T10765] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 639.885444][T10765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 639.985492][T10765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 640.079400][T10771] loop3: detected capacity change from 0 to 512 [ 640.114671][T10771] EXT4-fs (loop3): Test dummy encryption mode enabled [ 640.224812][T10771] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 640.244160][T10758] overlayfs: failed to clone lowerpath [ 640.284769][T10771] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.1763: bad orphan inode 131083 [ 640.322585][T10771] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 640.792845][T10789] tipc: Failed to remove unknown binding: 66,1,1/0:1860677975/1860677977 [ 640.841069][T10792] Dead loop on virtual device ip6_vti0, fix it urgently! [ 640.864783][T10789] tipc: Failed to remove unknown binding: 66,1,1/0:1860677975/1860677977 [ 640.973298][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 644.735981][ T27] audit: type=1326 audit(1763616648.461:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.9.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 644.809332][ T27] audit: type=1326 audit(1763616648.461:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.9.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 644.950387][ T27] audit: type=1326 audit(1763616648.461:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.9.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 645.064008][ T27] audit: type=1326 audit(1763616648.461:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.9.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 645.136427][ T27] audit: type=1326 audit(1763616648.461:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.9.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 645.869833][ T27] audit: type=1326 audit(1763616648.461:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.9.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 646.282915][ T27] audit: type=1326 audit(1763616648.461:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.9.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 646.685895][ T27] audit: type=1326 audit(1763616648.461:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.9.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 647.098685][ T27] audit: type=1326 audit(1763616648.461:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.9.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 647.131947][ T27] audit: type=1326 audit(1763616648.461:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10845 comm="syz.9.1782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 649.814206][T10895] overlayfs: failed to clone lowerpath [ 649.845620][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 649.845637][ T27] audit: type=1326 audit(1763616653.571:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10890 comm="syz.8.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 649.919900][ T27] audit: type=1326 audit(1763616653.571:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10890 comm="syz.8.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 649.958664][ T27] audit: type=1326 audit(1763616653.671:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10890 comm="syz.8.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 650.116128][ T27] audit: type=1326 audit(1763616653.671:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10890 comm="syz.8.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 650.189599][ T27] audit: type=1326 audit(1763616653.671:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10890 comm="syz.8.1796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 650.213768][T10905] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1799'. [ 650.253861][T10905] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1799'. [ 650.472697][ T27] audit: type=1326 audit(1763616654.191:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 650.573754][ T27] audit: type=1326 audit(1763616654.231:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 651.343981][ T27] audit: type=1326 audit(1763616654.231:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10917 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 652.143887][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 652.202885][T10938] overlayfs: failed to clone lowerpath [ 654.200601][T10979] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 654.348507][T10979] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 654.471649][T10979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 657.455648][T11011] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 657.841057][T11012] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 658.793999][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1834'. [ 660.098790][T11050] syz.7.1840[11050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 661.052293][T11066] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 661.983029][T11075] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1847'. [ 662.034556][T11075] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1847'. [ 662.086724][T11075] netlink: 'syz.7.1847': attribute type 5 has an invalid length. [ 662.095362][T11075] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1847'. [ 662.347511][T11086] syz.8.1851[11086] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 663.141694][T11108] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1857'. [ 663.320328][T11117] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 665.536180][T11137] syz.3.1867[11137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 667.445904][T11171] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 670.218756][T11198] netlink: 'syz.7.1882': attribute type 32 has an invalid length. [ 672.338363][T11239] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 674.566813][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1898'. [ 674.612011][T11263] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1898'. [ 675.072920][T11273] syz.2.1902[11273] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 678.138734][T11292] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1908'. [ 678.166112][T11294] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 678.190178][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 678.197978][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 678.226877][T11294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 678.261685][T11296] loop9: detected capacity change from 0 to 512 [ 678.374974][T11296] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.1910: inode has both inline data and extents flags [ 678.452457][T11296] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.1910: couldn't read orphan inode 15 (err -117) [ 678.540939][T11296] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 678.689139][T11314] netlink: 'syz.7.1912': attribute type 32 has an invalid length. [ 679.283098][T11320] syz.2.1915[11320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 679.579939][ T9481] EXT4-fs (loop9): unmounting filesystem. [ 681.317549][T11360] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 681.333933][T11360] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 681.343953][T11360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 681.708784][T11371] netlink: 'syz.9.1930': attribute type 32 has an invalid length. [ 681.802272][T11375] syz.7.1929[11375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 681.900738][T11376] overlayfs: failed to clone upperpath [ 683.936449][ T27] audit: type=1326 audit(1763616687.661:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.2.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 683.996888][ T27] audit: type=1326 audit(1763616687.661:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.2.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 684.070418][ T27] audit: type=1326 audit(1763616687.661:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.2.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 684.191059][ T27] audit: type=1326 audit(1763616687.661:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.2.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 684.301012][ T27] audit: type=1326 audit(1763616687.721:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11397 comm="syz.2.1935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 684.621498][T11424] syz.9.1943[11424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 684.745116][T11432] netlink: 'syz.3.1944': attribute type 32 has an invalid length. [ 684.797166][ T27] audit: type=1326 audit(1763616688.521:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11429 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 684.896004][ T27] audit: type=1326 audit(1763616688.521:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11429 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 685.006122][ T27] audit: type=1326 audit(1763616688.521:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11429 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 685.134786][ T27] audit: type=1326 audit(1763616688.521:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11429 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 685.226580][ T27] audit: type=1326 audit(1763616688.521:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11429 comm="syz.2.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 685.860329][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.866781][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.652047][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1955'. [ 686.691263][T11477] syz.8.1956[11477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 686.693735][T11475] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1955'. [ 687.759158][T11510] syz.2.1967[11510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 692.375745][T11543] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 692.457316][T11542] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 692.476931][T11542] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 693.045240][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 693.052824][T11543] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 693.106787][T11543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 693.729534][T11565] syz.7.1980[11565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 697.686603][T11611] syz.9.1992[11611] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 699.387699][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 699.387716][ T27] audit: type=1326 audit(1763616703.111:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.7.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 699.631561][ T27] audit: type=1326 audit(1763616703.171:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.7.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 699.749152][ T27] audit: type=1326 audit(1763616703.171:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.7.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 699.844414][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2001'. [ 699.853769][ T27] audit: type=1326 audit(1763616703.171:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.7.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 699.928656][ T27] audit: type=1326 audit(1763616703.171:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.7.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 700.024735][ T27] audit: type=1326 audit(1763616703.171:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.7.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 700.114974][ T27] audit: type=1326 audit(1763616703.171:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.7.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 700.204823][ T27] audit: type=1326 audit(1763616703.171:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.7.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 701.222724][T11661] syz.3.2006[11661] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 702.814931][ T27] audit: type=1326 audit(1763616706.531:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11669 comm="syz.9.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 703.332880][ T27] audit: type=1326 audit(1763616706.531:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11669 comm="syz.9.2011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 703.390200][T11684] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2013'. [ 705.084938][T11714] syz.3.2020[11714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 707.564315][T11739] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2026'. [ 708.801887][T11754] syz.9.2031[11754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 709.069067][ T4278] Bluetooth: hci5: command 0x0406 tx timeout [ 709.714754][T11779] tipc: Started in network mode [ 709.719719][T11779] tipc: Node identity ac14141b, cluster identity 4711 [ 709.726830][T11779] tipc: New replicast peer: 255.255.255.255 [ 709.733486][T11779] tipc: Enabled bearer , priority 10 [ 711.460887][ T4335] tipc: Node number set to 2886997019 [ 713.946114][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 713.946130][ T27] audit: type=1326 audit(1763616717.671:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11824 comm="syz.2.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 714.078860][ T27] audit: type=1326 audit(1763616717.671:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11824 comm="syz.2.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 714.183386][ T27] audit: type=1326 audit(1763616717.671:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11824 comm="syz.2.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 716.226617][ T27] audit: type=1326 audit(1763616717.671:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11824 comm="syz.2.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 716.363404][ T27] audit: type=1326 audit(1763616717.671:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11824 comm="syz.2.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 716.395015][ T27] audit: type=1326 audit(1763616717.671:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11824 comm="syz.2.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 716.448339][ T27] audit: type=1326 audit(1763616717.671:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11824 comm="syz.2.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 716.633888][ T27] audit: type=1326 audit(1763616717.671:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11824 comm="syz.2.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 716.667857][T11848] syz.2.2057[11848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 716.668367][T11848] syz.2.2057[11848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 716.943406][ T27] audit: type=1326 audit(1763616717.671:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11824 comm="syz.2.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 717.259214][ T27] audit: type=1326 audit(1763616717.701:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11824 comm="syz.2.2051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 718.972091][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 718.972106][ T27] audit: type=1326 audit(1763616722.691:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11862 comm="syz.8.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 719.156585][ T27] audit: type=1326 audit(1763616722.761:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11862 comm="syz.8.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 719.184240][ T27] audit: type=1326 audit(1763616722.761:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11862 comm="syz.8.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 719.220402][ T27] audit: type=1326 audit(1763616722.761:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11862 comm="syz.8.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 719.332505][ T27] audit: type=1326 audit(1763616722.761:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11862 comm="syz.8.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 719.394528][ T27] audit: type=1326 audit(1763616722.761:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11862 comm="syz.8.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 719.481113][ T27] audit: type=1326 audit(1763616722.761:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11862 comm="syz.8.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 719.967456][T11878] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2065'. [ 719.976564][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2065'. [ 719.985633][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2065'. [ 721.114814][T11880] tipc: Started in network mode [ 721.119782][T11880] tipc: Node identity ac14141b, cluster identity 4711 [ 721.126819][T11880] tipc: New replicast peer: 255.255.255.255 [ 721.133222][T11880] tipc: Enabled bearer , priority 10 [ 722.092805][ T27] audit: type=1326 audit(1763616725.811:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11906 comm="syz.3.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 722.174636][T11544] tipc: Node number set to 2886997019 [ 722.180558][ T27] audit: type=1326 audit(1763616725.841:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11906 comm="syz.3.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 722.207701][ T27] audit: type=1326 audit(1763616725.841:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11906 comm="syz.3.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 722.786943][T11921] tipc: Enabling of bearer rejected, media not registered [ 722.956582][T11925] tipc: Enabling of bearer rejected, already enabled [ 724.005102][T11931] overlayfs: failed to clone lowerpath [ 724.788309][T11902] loop9: detected capacity change from 0 to 40427 [ 724.871224][T11902] F2FS-fs (loop9): invalid crc value [ 724.945530][T11902] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 725.250491][T11902] F2FS-fs (loop9): Cannot turn on quotas: -2 on 2 [ 726.695703][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2103'. [ 726.741455][T11997] syz.7.2105[11997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 726.741566][T11997] syz.7.2105[11997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 726.777411][T11997] syz.7.2105[11997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 726.807689][T11997] syz.7.2105[11997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 727.033773][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 727.033789][ T27] audit: type=1326 audit(1763616730.751:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.7.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x50000 [ 727.084184][ T27] audit: type=1326 audit(1763616730.751:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.7.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x50000 [ 727.089045][T12009] netlink: 220 bytes leftover after parsing attributes in process `syz.9.2108'. [ 727.115178][ T27] audit: type=1326 audit(1763616730.751:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.7.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x50000 [ 727.145082][ T27] audit: type=1326 audit(1763616730.751:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.7.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x50000 [ 727.173718][ T27] audit: type=1326 audit(1763616730.751:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.7.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x50000 [ 727.201003][ T27] audit: type=1326 audit(1763616730.751:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.7.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x50000 [ 727.252275][ T27] audit: type=1326 audit(1763616730.751:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.7.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x50000 [ 727.289353][T11986] overlayfs: failed to clone lowerpath [ 727.292956][ T27] audit: type=1326 audit(1763616730.751:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.7.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x50000 [ 727.337947][ T27] audit: type=1326 audit(1763616730.751:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.7.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x50000 [ 727.367948][ T27] audit: type=1326 audit(1763616730.751:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12004 comm="syz.7.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x50000 [ 727.744437][T12023] loop9: detected capacity change from 0 to 512 [ 727.862358][T12023] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.2112: inode has both inline data and extents flags [ 727.897314][T12027] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2116'. [ 727.972204][T12023] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.2112: couldn't read orphan inode 15 (err -117) [ 728.157926][T12023] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 728.368563][ T9481] EXT4-fs (loop9): unmounting filesystem. [ 732.348258][T12081] loop9: detected capacity change from 0 to 512 [ 732.525880][T12081] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.2129: inode has both inline data and extents flags [ 732.834916][T12081] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.2129: couldn't read orphan inode 15 (err -117) [ 733.665935][T12081] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 733.908612][T12096] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2133'. [ 734.041545][T12100] overlayfs: failed to clone lowerpath [ 734.323108][T12110] xt_TPROXY: Can be used only with -p tcp or -p udp [ 734.653976][T12122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2139'. [ 734.954149][T12122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2139'. [ 737.594654][ T27] kauditd_printk_skb: 60 callbacks suppressed [ 737.594671][ T27] audit: type=1326 audit(1763616741.311:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.8.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 737.724826][ T27] audit: type=1326 audit(1763616741.311:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.8.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 737.750417][T12146] netlink: 'syz.3.2145': attribute type 32 has an invalid length. [ 737.893895][ T27] audit: type=1326 audit(1763616741.311:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.8.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 737.959629][ T27] audit: type=1326 audit(1763616741.311:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.8.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 737.982442][ T27] audit: type=1326 audit(1763616741.311:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12137 comm="syz.8.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c3798f749 code=0x7ffc0000 [ 738.294821][T12160] netlink: 'syz.8.2147': attribute type 13 has an invalid length. [ 738.394973][T12160] gretap0: refused to change device tx_queue_len [ 738.404285][T12160] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 740.328080][ T9481] EXT4-fs (loop9): unmounting filesystem. [ 740.747641][T12170] overlayfs: failed to clone lowerpath [ 741.812326][T12209] netlink: 'syz.8.2159': attribute type 32 has an invalid length. [ 747.300697][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.307211][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.572325][ T27] audit: type=1326 audit(1763616752.291:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.3.2177" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc9d98f749 code=0x0 [ 748.732155][T12270] overlayfs: failed to clone lowerpath [ 748.761256][ T27] audit: type=1326 audit(1763616752.481:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.7.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 748.876244][ T27] audit: type=1326 audit(1763616752.481:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.7.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 748.973985][ T27] audit: type=1326 audit(1763616752.511:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.7.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 749.090848][ T27] audit: type=1326 audit(1763616752.511:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.7.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 749.169208][ T27] audit: type=1326 audit(1763616752.511:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.7.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 749.223494][T12292] netlink: 'syz.2.2178': attribute type 32 has an invalid length. [ 749.289076][ T27] audit: type=1326 audit(1763616752.511:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.7.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 749.403594][ T27] audit: type=1326 audit(1763616752.511:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.7.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 749.540655][ T27] audit: type=1326 audit(1763616752.511:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.7.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 749.648988][ T27] audit: type=1326 audit(1763616752.511:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12260 comm="syz.7.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 752.003733][T12331] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 752.520578][T12331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 753.112137][T12340] syz.7.2187[12340] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 753.112258][T12340] syz.7.2187[12340] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 753.126648][T12340] overlayfs: failed to clone upperpath [ 753.680079][T12357] netlink: 'syz.8.2196': attribute type 32 has an invalid length. [ 754.190984][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 754.191000][ T27] audit: type=1326 audit(1763616757.911:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12363 comm="syz.3.2198" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc9d98f749 code=0x0 [ 754.349540][T12367] overlayfs: failed to clone lowerpath [ 756.940790][T12417] overlayfs: failed to clone lowerpath [ 757.788872][T12419] overlayfs: failed to clone lowerpath [ 758.275148][T12434] IPv6: NLM_F_CREATE should be specified when creating new route [ 758.445431][ T27] audit: type=1326 audit(1763616762.171:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12438 comm="syz.3.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 758.531881][ T27] audit: type=1326 audit(1763616762.191:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12438 comm="syz.3.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 758.634186][ T27] audit: type=1326 audit(1763616762.191:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12438 comm="syz.3.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 758.764727][ T27] audit: type=1326 audit(1763616762.191:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12438 comm="syz.3.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 758.805105][ T27] audit: type=1326 audit(1763616762.191:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12438 comm="syz.3.2218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 761.856517][T12473] overlayfs: failed to clone lowerpath [ 763.120062][ T27] audit: type=1326 audit(1763616766.831:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12479 comm="syz.3.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 763.544650][ T27] audit: type=1326 audit(1763616766.871:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12479 comm="syz.3.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 763.679578][ T27] audit: type=1326 audit(1763616766.951:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12479 comm="syz.3.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 764.714759][ T27] audit: type=1326 audit(1763616766.961:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12479 comm="syz.3.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 764.886656][ T27] audit: type=1326 audit(1763616766.971:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12479 comm="syz.3.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9d98f749 code=0x7ffc0000 [ 766.466311][T12516] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2238'. [ 767.593446][T12535] overlayfs: failed to clone lowerpath [ 768.846414][T12560] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 768.902907][T12560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 770.457324][T12567] raw_sendmsg: syz.7.2254 forgot to set AF_INET. Fix it! [ 770.640291][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'. [ 770.977485][T12587] netlink: 'syz.3.2258': attribute type 32 has an invalid length. [ 772.285603][T12609] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 772.316781][T12609] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 772.385791][T12609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 773.224763][ T27] audit: type=1326 audit(1763616776.941:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.9.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 773.316080][ T27] audit: type=1326 audit(1763616776.941:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.9.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 773.320786][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2268'. [ 773.379199][ T27] audit: type=1326 audit(1763616777.031:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.9.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 773.473435][ T27] audit: type=1326 audit(1763616777.031:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.9.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 773.570822][ T27] audit: type=1326 audit(1763616777.031:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12605 comm="syz.9.2263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 774.254814][ T27] audit: type=1326 audit(1763616777.941:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.9.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 774.562028][ T27] audit: type=1326 audit(1763616778.001:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.9.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 774.669860][T12650] netlink: 'syz.3.2276': attribute type 32 has an invalid length. [ 774.684648][ T27] audit: type=1326 audit(1763616778.081:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.9.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 774.742088][T12651] bridge: RTM_NEWNEIGH with invalid ether address [ 774.758948][ T27] audit: type=1326 audit(1763616778.091:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.9.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 774.836471][ T27] audit: type=1326 audit(1763616778.101:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12632 comm="syz.9.2273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 776.701066][T12684] overlayfs: failed to clone lowerpath [ 777.758579][T12696] bridge: RTM_NEWNEIGH with invalid ether address [ 778.052929][T12705] netlink: 'syz.8.2293': attribute type 32 has an invalid length. [ 784.109832][T12789] overlayfs: failed to clone lowerpath [ 784.205352][T12790] overlayfs: failed to clone lowerpath [ 791.982884][T12911] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 792.067543][T12911] overlayfs: missing 'lowerdir' [ 796.657088][T12954] bridge0: port 3(gretap0) entered blocking state [ 796.666392][T12954] bridge0: port 3(gretap0) entered disabled state [ 796.694694][T12954] device gretap0 entered promiscuous mode [ 796.745151][T12954] bridge0: port 3(gretap0) entered blocking state [ 796.752232][T12954] bridge0: port 3(gretap0) entered forwarding state [ 797.254179][T12966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 797.262025][T12966] IPv6: NLM_F_CREATE should be set when creating new route [ 797.269378][T12966] IPv6: NLM_F_CREATE should be set when creating new route [ 799.776023][T13012] tipc: Started in network mode [ 799.781094][T13012] tipc: Node identity ac14141b, cluster identity 4711 [ 799.788971][T13012] tipc: New replicast peer: 255.255.255.255 [ 799.796554][T13012] tipc: Enabled bearer , priority 10 [ 800.594567][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 800.594583][ T27] audit: type=1326 audit(2000000024.391:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13015 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 800.642452][T13020] overlayfs: failed to resolve './file1': -2 [ 800.693513][ T27] audit: type=1326 audit(2000000024.421:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13015 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 800.790895][ T27] audit: type=1326 audit(2000000024.421:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13015 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 800.843370][ T27] audit: type=1326 audit(2000000024.421:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13015 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 800.904512][ T27] audit: type=1326 audit(2000000024.421:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13015 comm="syz.7.2375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 801.113522][ T4711] tipc: Node number set to 2886997019 [ 802.624090][T13053] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2386'. [ 802.660048][T13055] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2381'. [ 802.994983][T13062] tipc: Enabling of bearer rejected, already enabled [ 804.068415][T13076] overlayfs: failed to clone lowerpath [ 806.191010][T13121] tipc: Enabling of bearer rejected, already enabled [ 807.963985][ T27] audit: type=1326 audit(2000000031.761:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.2.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 808.070944][ T27] audit: type=1326 audit(2000000031.791:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.2.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 808.131203][ T27] audit: type=1326 audit(2000000031.791:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.2.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 808.251629][ T27] audit: type=1326 audit(2000000031.791:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.2.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 808.329041][ T27] audit: type=1326 audit(2000000031.791:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.2.2409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f745ad8f749 code=0x7ffc0000 [ 808.445739][ T27] audit: type=1326 audit(2000000032.111:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.9.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 808.600642][ T27] audit: type=1326 audit(2000000032.111:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.9.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 808.725196][T13163] tipc: Enabling of bearer rejected, already enabled [ 808.741439][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.757743][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.171904][ T27] audit: type=1326 audit(2000000032.111:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.9.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 809.242084][ T27] audit: type=1326 audit(2000000032.121:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.9.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 809.277306][ T27] audit: type=1326 audit(2000000032.121:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13155 comm="syz.9.2412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 810.664634][T13206] tipc: Enabling of bearer rejected, already enabled [ 811.572385][T13211] netlink: 'syz.9.2428': attribute type 4 has an invalid length. [ 811.680668][T13217] netlink: 'syz.9.2428': attribute type 4 has an invalid length. [ 811.968514][T13220] overlayfs: failed to clone lowerpath [ 813.566461][T13259] tipc: Enabling of bearer rejected, already enabled [ 815.039461][T13273] overlayfs: failed to clone lowerpath [ 815.917118][T13292] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 815.949095][T13292] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 815.967587][T13292] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 816.034093][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 816.034130][ T27] audit: type=1326 audit(2000000039.822:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13285 comm="syz.9.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 816.643556][ T27] audit: type=1326 audit(2000000039.932:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13285 comm="syz.9.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f697a98de97 code=0x7ffc0000 [ 816.684727][ T27] audit: type=1326 audit(2000000039.962:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13285 comm="syz.9.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 816.772673][ T27] audit: type=1326 audit(2000000039.972:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13285 comm="syz.9.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 816.897384][ T27] audit: type=1326 audit(2000000039.992:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13285 comm="syz.9.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 816.992411][ T27] audit: type=1326 audit(2000000040.012:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13285 comm="syz.9.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 817.106634][ T27] audit: type=1326 audit(2000000040.032:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13285 comm="syz.9.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 817.231166][ T27] audit: type=1326 audit(2000000040.042:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13285 comm="syz.9.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 817.352409][ T27] audit: type=1326 audit(2000000040.062:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13285 comm="syz.9.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 817.436321][ T27] audit: type=1326 audit(2000000040.082:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13285 comm="syz.9.2449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 817.687557][T13327] tipc: Enabling of bearer rejected, already enabled [ 819.947028][T13342] overlayfs: failed to clone lowerpath [ 822.305760][T13378] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 822.340483][T13378] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 822.360387][T13378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 823.634697][T13386] tipc: Enabling of bearer rejected, already enabled [ 827.267666][T13418] overlayfs: failed to clone lowerpath [ 828.818361][T13445] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 828.855373][T13445] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 828.872899][T13445] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 829.333883][T13448] tipc: Started in network mode [ 829.338858][T13448] tipc: Node identity ac14141b, cluster identity 4711 [ 829.346055][T13448] tipc: New replicast peer: 255.255.255.255 [ 829.352808][T13448] tipc: Enabled bearer , priority 10 [ 831.457602][ T952] tipc: Node number set to 2886997019 [ 833.408920][ T4285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 833.420602][ T4285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 833.432253][ T4285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 833.442798][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 833.450670][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 833.459489][ T4285] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 834.194236][T13479] overlayfs: failed to clone lowerpath [ 834.224903][T13484] chnl_net:caif_netlink_parms(): no params data found [ 834.572971][T13484] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.591491][T13484] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.599821][T13484] device bridge_slave_0 entered promiscuous mode [ 834.663266][T13484] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.687353][T13484] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.713443][T13484] device bridge_slave_1 entered promiscuous mode [ 834.869529][T13484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.923219][T13484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.386256][T13484] team0: Port device team_slave_0 added [ 835.499825][T13523] tipc: Enabling of bearer rejected, already enabled [ 835.543105][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 835.790575][T13484] team0: Port device team_slave_1 added [ 836.860344][T13484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.911316][T13484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 837.183094][T13540] fuse: Unknown parameter 'group_i00000000000000000000' [ 837.498749][T13484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.683205][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 838.006165][T13484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.050133][T13484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.158300][T13484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.437904][T13550] overlayfs: failed to clone lowerpath [ 838.608193][T13484] device hsr_slave_0 entered promiscuous mode [ 838.642292][T13484] device hsr_slave_1 entered promiscuous mode [ 838.667886][T13484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 838.690628][T13484] Cannot create hsr debugfs directory [ 838.817656][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.205081][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.372910][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.959360][ T4278] Bluetooth: hci3: command 0x040f tx timeout [ 840.145257][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.269581][T13589] fuse: Unknown parameter 'group_id00000000000000000000' [ 842.021576][ T4278] Bluetooth: hci3: command 0x0419 tx timeout [ 843.177734][ T11] tipc: Disabling bearer [ 843.183490][ T11] tipc: Left network mode [ 843.193900][T13610] overlayfs: failed to clone lowerpath [ 843.544630][T13620] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 843.556786][T13620] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 843.568930][T13620] overlayfs: missing 'lowerdir' [ 845.954960][T13644] overlayfs: failed to clone lowerpath [ 849.595301][T13689] tipc: Enabling of bearer rejected, already enabled [ 849.692127][T13694] overlayfs: failed to clone lowerpath [ 850.879342][T13484] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 850.911912][T13484] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 850.961501][T13484] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 852.010471][T13484] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 852.142963][ T11] device hsr_slave_0 left promiscuous mode [ 852.159885][ T11] device hsr_slave_1 left promiscuous mode [ 852.172668][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 852.491055][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.649001][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 852.781512][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 853.120474][ T11] device bridge_slave_1 left promiscuous mode [ 853.126833][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.182743][ T11] device bridge_slave_0 left promiscuous mode [ 853.193625][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.728561][ T11] device veth1_macvtap left promiscuous mode [ 853.831837][ T11] device veth0_macvtap left promiscuous mode [ 853.938489][ T11] device veth1_vlan left promiscuous mode [ 853.977303][ T11] device veth0_vlan left promiscuous mode [ 854.258629][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 854.258644][ T27] audit: type=1326 audit(2000000078.054:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.9.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 856.545877][T13743] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 857.160240][ T27] audit: type=1326 audit(2000000078.064:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.9.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 857.211393][ T27] audit: type=1326 audit(2000000078.084:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.9.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 857.234310][ T27] audit: type=1326 audit(2000000080.924:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13736 comm="syz.9.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 857.259480][ T27] audit: type=1326 audit(2000000080.934:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13741 comm="syz.9.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f697a9c2005 code=0x7ffc0000 [ 857.310908][ T27] audit: type=1326 audit(2000000081.084:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13741 comm="syz.9.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 857.570345][ T27] audit: type=1326 audit(2000000081.374:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.7.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 857.680654][ T27] audit: type=1326 audit(2000000081.404:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.7.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 857.709348][ T27] audit: type=1326 audit(2000000081.404:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.7.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 857.939052][ T27] audit: type=1326 audit(2000000081.404:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13753 comm="syz.7.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 859.067506][ T11] team0 (unregistering): Port device team_slave_1 removed [ 859.142037][ T11] team0 (unregistering): Port device team_slave_0 removed [ 859.212794][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.284053][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.913226][ T11] bond0 (unregistering): Released all slaves [ 862.133437][T13743] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 862.142958][T13743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 862.272552][T13790] 9pnet_fd: Insufficient options for proto=fd [ 862.420351][T13795] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2566'. [ 862.447866][T13795] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2566'. [ 862.528692][T13484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.570119][T13795] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2566'. [ 862.598467][T13795] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2566'. [ 862.668916][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 862.726246][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 862.953520][T13484] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.388463][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 863.422016][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 863.450213][ T4840] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.457434][ T4840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.469739][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 863.469756][ T27] audit: type=1326 audit(2000000087.264:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13808 comm="syz.7.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 863.605065][ T27] audit: type=1326 audit(2000000087.314:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13808 comm="syz.7.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 863.725494][ T27] audit: type=1326 audit(2000000087.314:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13808 comm="syz.7.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 863.749148][ T27] audit: type=1326 audit(2000000087.314:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13808 comm="syz.7.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 863.779810][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 863.794570][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 863.814586][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 863.915782][ T4840] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.923054][ T4840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.360087][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 864.616168][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 864.662112][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 864.706705][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 864.717810][ T4840] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 865.225119][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 865.265419][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 865.310678][T13822] tipc: Enabling of bearer rejected, already enabled [ 865.553438][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 865.583419][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 867.744430][T13484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 867.757536][T13484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 867.769989][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 867.778679][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 871.159369][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.165743][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.706887][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 871.956450][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 872.314192][T13484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.460034][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 872.469910][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 872.533879][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 872.548128][ T27] audit: type=1326 audit(2000000096.345:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13893 comm="syz.9.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 872.550324][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 872.633713][ T27] audit: type=1326 audit(2000000096.375:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13893 comm="syz.9.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 872.644836][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 872.710014][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 872.751710][ T27] audit: type=1326 audit(2000000096.385:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13893 comm="syz.9.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 872.776606][T13484] device veth0_vlan entered promiscuous mode [ 872.824756][T13484] device veth1_vlan entered promiscuous mode [ 872.875246][ T27] audit: type=1326 audit(2000000096.385:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13893 comm="syz.9.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 872.953636][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 872.971502][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 872.979655][ T27] audit: type=1326 audit(2000000096.385:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13893 comm="syz.9.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 873.031227][T13484] device veth0_macvtap entered promiscuous mode [ 873.063667][T13484] device veth1_macvtap entered promiscuous mode [ 873.093388][ T27] audit: type=1326 audit(2000000096.385:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13893 comm="syz.9.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 873.123924][T13484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.144992][T13484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.159620][ T27] audit: type=1326 audit(2000000096.385:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13893 comm="syz.9.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 873.188046][T13484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.211122][T13484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.226268][ T27] audit: type=1326 audit(2000000096.385:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13893 comm="syz.9.2595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697a98f749 code=0x7ffc0000 [ 873.252078][T13484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.264158][T13484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.566493][T13484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.614137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 873.636781][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 873.704373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 873.770196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 873.827028][T13484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.925946][T13484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.959265][T13484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.987299][T13484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.007551][T13484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.040027][T13484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.075700][T13484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 874.094521][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 874.130154][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 874.152347][T13484] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.172509][T13484] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.189189][T13484] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.254929][T13484] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.951905][ T4400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.980491][ T27] audit: type=1326 audit(2000000100.785:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="syz.7.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 876.988933][ T4400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.066595][ T27] audit: type=1326 audit(2000000100.815:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13936 comm="syz.7.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60d138f749 code=0x7ffc0000 [ 877.092302][ T4829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.101868][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 877.156782][ T4829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.195858][ T4819] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 880.213267][T14017] tipc: Enabling of bearer rejected, already enabled [ 881.490158][T14023] overlayfs: failed to clone lowerpath [ 883.872553][T14061] tipc: Started in network mode [ 883.877671][T14061] tipc: Node identity ac14141b, cluster identity 4711 [ 883.885536][T14061] tipc: New replicast peer: 255.255.255.255 [ 883.892528][T14061] tipc: Enabled bearer , priority 10 [ 884.970837][ T952] tipc: Node number set to 2886997019 [ 885.795776][T14086] overlayfs: failed to clone lowerpath [ 890.086380][T14134] overlayfs: failed to clone lowerpath [ 891.446553][T14145] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 893.277608][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2671'. [ 893.407521][T14164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2671'. [ 897.161372][T14220] tipc: Enabling of bearer rejected, already enabled [ 901.219748][T14259] tipc: Enabling of bearer rejected, already enabled [ 905.723994][T14292] overlayfs: failed to clone lowerpath [ 908.111425][T14307] tipc: Enabling of bearer rejected, already enabled [ 908.511580][T14313] loop1: detected capacity change from 0 to 512 [ 908.646767][T14313] EXT4-fs (loop1): Test dummy encryption mode enabled [ 908.690263][T14313] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 908.853599][T14313] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.2707: bad orphan inode 131083 [ 909.012127][T14313] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 911.010969][T14341] overlayfs: failed to clone lowerpath [ 911.033817][T13484] EXT4-fs (loop1): unmounting filesystem. [ 912.798656][ T4285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 912.811291][ T4285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 912.820110][ T4285] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 912.842593][ T4285] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 912.851039][ T4285] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 912.858582][ T4285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 913.486683][T14369] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 914.591231][T14367] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2725'. [ 914.600407][T14367] device bridge_slave_1 left promiscuous mode [ 914.606802][T14367] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.657587][T14367] device bridge_slave_0 left promiscuous mode [ 914.663922][T14367] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.887054][ T4278] Bluetooth: hci5: command 0x0409 tx timeout [ 916.350753][T14390] overlayfs: failed to clone upperpath [ 916.978370][ T4285] Bluetooth: hci5: command 0x041b tx timeout [ 917.620840][T14354] chnl_net:caif_netlink_parms(): no params data found [ 917.740434][T14412] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2737'. [ 917.786906][T14412] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 919.441297][ T4285] Bluetooth: hci5: command 0x040f tx timeout [ 919.720290][T14354] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.736889][T14354] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.761178][T14354] device bridge_slave_0 entered promiscuous mode [ 919.849236][T14354] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.869074][T14354] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.902290][T14354] device bridge_slave_1 entered promiscuous mode [ 920.359928][T14354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 920.382293][T14453] overlayfs: failed to clone lowerpath [ 920.789069][T14354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.055749][T14354] team0: Port device team_slave_0 added [ 921.117236][ T4502] tipc: Disabling bearer [ 921.122812][ T4502] tipc: Left network mode [ 921.128651][T14354] team0: Port device team_slave_1 added [ 921.367514][T14354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.377092][T14354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.475332][T14354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.567494][ T4285] Bluetooth: hci5: command 0x0419 tx timeout [ 921.577025][T14354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.618286][T14354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.679092][T14354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.437733][T14354] device hsr_slave_0 entered promiscuous mode [ 922.445286][T14354] device hsr_slave_1 entered promiscuous mode [ 922.471685][T14354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 922.493793][T14354] Cannot create hsr debugfs directory [ 922.965617][T14488] overlayfs: failed to clone lowerpath [ 923.845688][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2763'. [ 923.891102][T14502] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2763'. [ 926.100043][T14526] [ 926.102462][T14526] ====================================================== [ 926.109512][T14526] WARNING: possible circular locking dependency detected [ 926.116578][T14526] syzkaller #0 Not tainted [ 926.121029][T14526] ------------------------------------------------------ [ 926.128212][T14526] syz.1.2770/14526 is trying to acquire lock: [ 926.134320][T14526] ffff88805632d4a0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x33c/0x1a10 [ 926.145113][T14526] [ 926.145113][T14526] but task is already holding lock: [ 926.152511][T14526] ffff888018b10158 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 926.162595][T14526] [ 926.162595][T14526] which lock already depends on the new lock. [ 926.162595][T14526] [ 926.173120][T14526] [ 926.173120][T14526] the existing dependency chain (in reverse order) is: [ 926.182165][T14526] [ 926.182165][T14526] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 926.189747][T14526] down_read_killable+0x4c/0x340 [ 926.195242][T14526] mmap_read_lock_killable+0x1d/0x60 [ 926.201095][T14526] lock_mm_and_find_vma+0x2b1/0x2f0 [ 926.206849][T14526] do_user_addr_fault+0x2db/0xb10 [ 926.212410][T14526] exc_page_fault+0x60/0x100 [ 926.217547][T14526] asm_exc_page_fault+0x22/0x30 [ 926.222926][T14526] fault_in_readable+0x13e/0x1f0 [ 926.228402][T14526] fault_in_iov_iter_readable+0xbb/0x2e0 [ 926.234570][T14526] generic_perform_write+0x1d2/0x560 [ 926.240387][T14526] __generic_file_write_iter+0x172/0x430 [ 926.246558][T14526] generic_file_write_iter+0xab/0x2e0 [ 926.252464][T14526] vfs_write+0x44c/0x960 [ 926.257252][T14526] ksys_write+0x143/0x240 [ 926.262123][T14526] do_syscall_64+0x4c/0xa0 [ 926.267077][T14526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 926.273505][T14526] [ 926.273505][T14526] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 926.282218][T14526] __lock_acquire+0x2cf8/0x7c50 [ 926.287608][T14526] lock_acquire+0x1b4/0x490 [ 926.292646][T14526] down_write+0x36/0x60 [ 926.297342][T14526] process_measurement+0x33c/0x1a10 [ 926.303077][T14526] ima_file_mmap+0x104/0x150 [ 926.308223][T14526] __se_sys_remap_file_pages+0x53e/0x770 [ 926.314390][T14526] do_syscall_64+0x4c/0xa0 [ 926.319439][T14526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 926.325877][T14526] [ 926.325877][T14526] other info that might help us debug this: [ 926.325877][T14526] [ 926.336112][T14526] Possible unsafe locking scenario: [ 926.336112][T14526] [ 926.343568][T14526] CPU0 CPU1 [ 926.348936][T14526] ---- ---- [ 926.354325][T14526] lock(&mm->mmap_lock); [ 926.358868][T14526] lock(&sb->s_type->i_mutex_key#12); [ 926.366865][T14526] lock(&mm->mmap_lock); [ 926.373721][T14526] lock(&sb->s_type->i_mutex_key#12); [ 926.379199][T14526] [ 926.379199][T14526] *** DEADLOCK *** [ 926.379199][T14526] [ 926.387345][T14526] 1 lock held by syz.1.2770/14526: [ 926.392461][T14526] #0: ffff888018b10158 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 926.402932][T14526] [ 926.402932][T14526] stack backtrace: [ 926.408841][T14526] CPU: 0 PID: 14526 Comm: syz.1.2770 Not tainted syzkaller #0 [ 926.416393][T14526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 926.426470][T14526] Call Trace: [ 926.429764][T14526] [ 926.432703][T14526] dump_stack_lvl+0x168/0x22e [ 926.437396][T14526] ? load_image+0x3b0/0x3b0 [ 926.441923][T14526] ? show_regs_print_info+0x12/0x12 [ 926.447146][T14526] ? print_circular_bug+0x12b/0x1a0 [ 926.452366][T14526] check_noncircular+0x274/0x310 [ 926.457324][T14526] ? add_chain_block+0x940/0x940 [ 926.462282][T14526] ? lockdep_lock+0xdc/0x1e0 [ 926.466890][T14526] ? __bpf_ringbuf_reserve+0x452/0x5a0 [ 926.472372][T14526] ? _find_first_zero_bit+0xcf/0x100 [ 926.477684][T14526] __lock_acquire+0x2cf8/0x7c50 [ 926.482560][T14526] ? ima_match_policy+0x104/0x2100 [ 926.487684][T14526] ? verify_lock_unused+0x140/0x140 [ 926.492904][T14526] ? ima_match_policy+0x207a/0x2100 [ 926.498117][T14526] ? finish_task_switch+0x265/0x8f0 [ 926.503332][T14526] lock_acquire+0x1b4/0x490 [ 926.507944][T14526] ? process_measurement+0x33c/0x1a10 [ 926.513339][T14526] ? __might_sleep+0xd0/0xd0 [ 926.517948][T14526] ? read_lock_is_recursive+0x10/0x10 [ 926.523372][T14526] ? ima_get_action+0x71/0xa0 [ 926.528083][T14526] down_write+0x36/0x60 [ 926.532277][T14526] ? process_measurement+0x33c/0x1a10 [ 926.537674][T14526] process_measurement+0x33c/0x1a10 [ 926.542894][T14526] ? preempt_schedule+0xa7/0xb0 [ 926.547760][T14526] ? ima_file_mmap+0x150/0x150 [ 926.552541][T14526] ? aa_file_perm+0x117/0xec0 [ 926.557254][T14526] ? mtree_range_walk+0x672/0x7b0 [ 926.562294][T14526] ? aa_get_current_label+0x110/0x1d0 [ 926.567688][T14526] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 926.573866][T14526] ima_file_mmap+0x104/0x150 [ 926.578475][T14526] ? ima_file_free+0x3e0/0x3e0 [ 926.583260][T14526] ? common_file_perm+0x171/0x1c0 [ 926.588305][T14526] ? bpf_lsm_mmap_file+0x5/0x10 [ 926.593176][T14526] ? security_mmap_file+0x11b/0x180 [ 926.598402][T14526] __se_sys_remap_file_pages+0x53e/0x770 [ 926.604096][T14526] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 926.609848][T14526] ? lockdep_hardirqs_on+0x94/0x140 [ 926.615153][T14526] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 926.620892][T14526] do_syscall_64+0x4c/0xa0 [ 926.625324][T14526] ? clear_bhb_loop+0x60/0xb0 [ 926.630010][T14526] ? clear_bhb_loop+0x60/0xb0 [ 926.634703][T14526] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 926.640611][T14526] RIP: 0033:0x7fe8d4b8f749 [ 926.645069][T14526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.664687][T14526] RSP: 002b:00007fe8d5a5b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 926.673113][T14526] RAX: ffffffffffffffda RBX: 00007fe8d4de5fa0 RCX: 00007fe8d4b8f749 [ 926.681101][T14526] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffb000 [ 926.689084][T14526] RBP: 00007fe8d4c13f91 R08: 0000000000080000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 926.697064][T14526] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 926.705048][T14526] R13: 00007fe8d4de6038 R14: 00007fe8d4de5fa0 R15: 00007ffe6a901ec8 [ 926.713038][T14526] [ 928.363487][ T4502] device hsr_slave_0 left promiscuous mode [ 928.369964][ T4502] device hsr_slave_1 left promiscuous mode [ 928.396575][ T4502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 928.406669][ T4502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 928.426509][ T4502] device bridge_slave_1 left promiscuous mode [ 928.432791][ T4502] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.458338][ T4502] device bridge_slave_0 left promiscuous mode [ 928.464615][ T4502] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.038706][ T4502] team0 (unregistering): Port device team_slave_1 removed [ 929.099033][ T4502] team0 (unregistering): Port device team_slave_0 removed [ 929.152953][ T4502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 929.210538][ T4502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 929.819795][ T4502] bond0 (unregistering): Released all slaves [ 930.330470][ T4502] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.371973][ T4502] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.421075][ T4502] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.470284][ T4502] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.575280][ T4502] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.632523][ T4502] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.672791][ T4502] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.724112][ T4502] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.856664][ T4502] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.911503][ T4502] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.960754][ T4502] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.010998][ T4502] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.090314][ T4502] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.139461][ T4502] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.180019][ T4502] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.240214][ T4502] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.367483][ T4502] tipc: Disabling bearer [ 931.372912][ T4502] tipc: Left network mode [ 931.379341][ T4502] tipc: Disabling bearer [ 931.385366][ T4502] tipc: Left network mode [ 931.392503][ T4502] tipc: Disabling bearer [ 931.400784][ T4502] tipc: Left network mode [ 931.407859][ T4502] tipc: Disabling bearer [ 931.413315][ T4502] tipc: Left network mode [ 931.620589][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.626999][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.189061][ T4502] bridge0: port 3(gretap0) entered disabled state [ 932.250906][ T4502] device gretap0 left promiscuous mode [ 932.258683][ T4502] bridge0: port 3(gretap0) entered disabled state [ 933.257466][ T4502] device hsr_slave_0 left promiscuous mode [ 933.263960][ T4502] device hsr_slave_1 left promiscuous mode [ 933.271416][ T4502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.281480][ T4502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.291886][ T4502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 933.302308][ T4502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.310875][ T4502] device bridge_slave_1 left promiscuous mode [ 933.319177][ T4502] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.327685][ T4502] device bridge_slave_0 left promiscuous mode [ 933.333947][ T4502] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.349075][ T4502] device hsr_slave_0 left promiscuous mode [ 933.355507][ T4502] device hsr_slave_1 left promiscuous mode [ 933.364077][ T4502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.372348][ T4502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.382897][ T4502] device bridge_slave_1 left promiscuous mode [ 933.389523][ T4502] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.399593][ T4502] device bridge_slave_0 left promiscuous mode [ 933.405872][ T4502] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.417452][ T4502] device hsr_slave_0 left promiscuous mode [ 933.423984][ T4502] device hsr_slave_1 left promiscuous mode [ 933.431071][ T4502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.438775][ T4502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.447088][ T4502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 933.454549][ T4502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.464442][ T4502] device bridge_slave_1 left promiscuous mode [ 933.471094][ T4502] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.480467][ T4502] device bridge_slave_0 left promiscuous mode [ 933.487032][ T4502] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.498865][ T4502] device hsr_slave_0 left promiscuous mode [ 933.505230][ T4502] device hsr_slave_1 left promiscuous mode [ 933.511902][ T4502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.519608][ T4502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.528097][ T4502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 933.535559][ T4502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.550216][ T4502] device hsr_slave_0 left promiscuous mode [ 933.556814][ T4502] device hsr_slave_1 left promiscuous mode [ 933.563246][ T4502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.571084][ T4502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.579214][ T4502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 933.586710][ T4502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 933.594444][ T4502] device bridge_slave_1 left promiscuous mode [ 933.602871][ T4502] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.611271][ T4502] device bridge_slave_0 left promiscuous mode [ 933.619335][ T4502] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.634822][ T4502] device veth1_macvtap left promiscuous mode [ 933.643275][ T4502] device veth0_macvtap left promiscuous mode [ 933.649563][ T4502] device veth1_vlan left promiscuous mode [ 933.655394][ T4502] device veth0_vlan left promiscuous mode [ 933.664481][ T4502] device veth1_macvtap left promiscuous mode [ 933.671010][ T4502] device veth0_macvtap left promiscuous mode [ 933.680927][ T4502] device veth1_vlan left promiscuous mode [ 933.687288][ T4502] device veth0_vlan left promiscuous mode [ 933.694310][ T4502] device veth1_macvtap left promiscuous mode [ 933.702676][ T4502] device veth0_macvtap left promiscuous mode [ 933.708961][ T4502] device veth1_vlan left promiscuous mode [ 933.714805][ T4502] device veth0_vlan left promiscuous mode [ 933.724214][ T4502] device veth1_macvtap left promiscuous mode [ 933.730372][ T4502] device veth0_macvtap left promiscuous mode [ 933.738994][ T4502] device veth1_vlan left promiscuous mode [ 933.744854][ T4502] device veth0_vlan left promiscuous mode [ 934.045969][ T4502] team0 (unregistering): Port device team_slave_1 removed [ 934.057961][ T4502] team0 (unregistering): Port device team_slave_0 removed [ 934.091042][ T4502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 934.145806][ T4502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.201303][ T4502] bond0 (unregistering): Released all slaves [ 934.369098][ T4502] team0 (unregistering): Port device team_slave_1 removed [ 934.401792][ T4502] team0 (unregistering): Port device team_slave_0 removed [ 934.437019][ T4502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 934.470639][ T4502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.517756][ T4502] bond0 (unregistering): Released all slaves [ 934.701872][ T4502] team0 (unregistering): Port device team_slave_1 removed [ 934.734897][ T4502] team0 (unregistering): Port device team_slave_0 removed [ 934.746022][ T4502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 934.759014][ T4502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.812155][ T4502] bond0 (unregistering): Released all slaves [ 935.321756][ T4502] team0 (unregistering): Port device team_slave_1 removed [ 935.373459][ T4502] team0 (unregistering): Port device team_slave_0 removed [ 935.427596][ T4502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 935.480640][ T4502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface