last executing test programs: 24m21.841107843s ago: executing program 32 (id=764): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) 22m34.609109121s ago: executing program 33 (id=1564): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x800884, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX], 0x4, 0x2b4, &(0x7f00000013c0)="$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") r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) io_setup(0x20fe, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000080)=0xa) 20m41.872637778s ago: executing program 34 (id=2579): bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x5e4, &(0x7f0000000600)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x80, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x3, 0x0, 0x404042bbe) 20m10.541017563s ago: executing program 35 (id=2765): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 18m6.658760385s ago: executing program 36 (id=3588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) recvmmsg(r1, &(0x7f0000004200)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000020, 0x0) 17m5.738210372s ago: executing program 37 (id=3962): socket(0x23, 0x5, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r0, 0x100000000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000002040)="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", 0xfc1}], 0x1, 0x6) close(0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 15m57.294058068s ago: executing program 38 (id=4439): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd2(0x8, 0x1) write$eventfd(r1, &(0x7f0000000040)=0xfffffffffffffffd, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000040)=@ethtool_flash={0x33, 0x1, './file1\x00'}}) 15m37.207481697s ago: executing program 39 (id=4577): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) 13m29.66885593s ago: executing program 40 (id=5358): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x8, 0x6, @remote}, 0x14) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) 10m47.014839779s ago: executing program 41 (id=6328): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0x7076, 0x400, 0x2, 0x4028a}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000480)={r2, @in6={{0xa, 0x4e22, 0x6, @remote, 0xfff}}}, &(0x7f0000000240)=0x84) 9m2.966461294s ago: executing program 42 (id=6628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x22000810) 8m35.813919292s ago: executing program 7 (id=6775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x34, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x86, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x86}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf1a}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x0) 8m34.050061397s ago: executing program 7 (id=6785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x2}, 0x48) 8m32.771143079s ago: executing program 7 (id=6793): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 8m32.412163701s ago: executing program 7 (id=6796): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xae, 0x200, 0x0, 0x0, 0x2, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d306e6d602000000000000000000010001", [0x204]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101542, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000380)='\\', 0x1, 0x3000}]) 8m30.47647429s ago: executing program 7 (id=6804): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 8m29.239948128s ago: executing program 7 (id=6810): r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000f14010000000000000000000c002e0072646d615f63"], 0x1c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 8m28.30187293s ago: executing program 43 (id=6810): r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000f14010000000000000000000c002e0072646d615f63"], 0x1c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 8m0.45664679s ago: executing program 4 (id=6909): socket$inet6(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5, 0x7], &(0x7f0000000180)=[0x2], 0x0, 0x2, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 7m59.928681366s ago: executing program 4 (id=6912): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x400}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004a7000/0x2000)=nil, &(0x7f0000986000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00009fd000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000719000/0x4000)=nil, &(0x7f000036e000/0x4000)=nil, &(0x7f00002bc000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x10000}, 0x28) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) io_uring_enter(r2, 0x4010af, 0xfbb9, 0x1f, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 7m57.905141423s ago: executing program 4 (id=6925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x198, 0x3a010003, 0xb0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback=0x7f000008, 0x0, 0x0, 'pim6reg\x00', 'veth1_to_bond\x00'}, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0xc}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@ttl={{0x28}}]}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) 7m56.490299237s ago: executing program 4 (id=6928): r0 = fsopen(&(0x7f0000000300)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 7m52.396304346s ago: executing program 4 (id=6933): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100809, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x180) chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) 7m51.994281501s ago: executing program 4 (id=6935): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) listen(r0, 0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000003fc0)=@filter={'filter\x00', 0x42, 0x4, 0x1340, 0xffffffff, 0x1210, 0x1210, 0x0, 0xffffffff, 0xffffffff, 0x12a8, 0x12a8, 0x12a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @multicast2, 0xffffffff, 0xff000000, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x89, 0x1, 0x29}, 0x3127, 0x10d0, 0x10f8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x5, 0x0, './cgroup/syz0\x00', 0x9, {0x8dfd}}}]}, @REJECT={0x28}}, {{@uncond, 0x287, 0xf0, 0x118, 0x0, {0x0, 0x4}, [@common=@addrtype={{0x30}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x0, 0x1}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13a0) 7m36.116098122s ago: executing program 44 (id=6935): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) listen(r0, 0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000003fc0)=@filter={'filter\x00', 0x42, 0x4, 0x1340, 0xffffffff, 0x1210, 0x1210, 0x0, 0xffffffff, 0xffffffff, 0x12a8, 0x12a8, 0x12a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @multicast2, 0xffffffff, 0xff000000, 'vcan0\x00', 'veth0_to_bridge\x00', {}, {0xff}, 0x89, 0x1, 0x29}, 0x3127, 0x10d0, 0x10f8, 0x1ba, {0x46010000}, [@common=@addrtype={{0x30}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x5, 0x0, './cgroup/syz0\x00', 0x9, {0x8dfd}}}]}, @REJECT={0x28}}, {{@uncond, 0x287, 0xf0, 0x118, 0x0, {0x0, 0x4}, [@common=@addrtype={{0x30}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x4, 0x0, 0x1}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13a0) 6m10.770471609s ago: executing program 9 (id=7266): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) r1 = syz_io_uring_setup(0x9e, &(0x7f0000001280)={0x0, 0x936, 0x0, 0x0, 0x1f3}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x47b6, 0x800000, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 6m10.508275822s ago: executing program 9 (id=7270): r0 = fanotify_init(0x0, 0x1000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x71, 0x101a, r1, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000380)="00b5", 0x2}], 0x1) open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r3, r4, 0x3, 0x0) 6m9.530335107s ago: executing program 9 (id=7272): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff0}, 0x94) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb86dd6a000000009c1100fe8000000000000000000000000000aaff0200000000000000000000000000014e1d4e20009c90780100000007000000a098f75bcd9a5516f311a8eaa9ce4a38b9000000000000000000000000000000674e20c1c38da0a452bae176e96e2b1e08fcde1ee4805fe36ef556ff6cb46fd595915c86beafe26107bc517193b48ef75e34272cb58a0edc78aea033a347974dea840918d802fa5f8a1c7c9a75d450fb18d042893597291d77675a638674ef6f2b136c97448a476ca98e61cf"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000140), 0x0, 0x0) 6m7.888529991s ago: executing program 9 (id=7283): r0 = socket(0x10, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) creat(&(0x7f0000002640)='./bus\x00', 0x44) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 6m6.035383433s ago: executing program 9 (id=7290): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 6m5.008579874s ago: executing program 9 (id=7292): r0 = io_uring_setup(0x12b9, &(0x7f00000002c0)={0x0, 0x48c7, 0x810, 0xfffffffc, 0x1000168}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000340), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m4.290668336s ago: executing program 45 (id=7292): r0 = io_uring_setup(0x12b9, &(0x7f00000002c0)={0x0, 0x48c7, 0x810, 0xfffffffc, 0x1000168}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000340), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m42.649867596s ago: executing program 3 (id=7614): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000480)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m39.487275245s ago: executing program 3 (id=7624): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602200000000e000a001400000002", 0x29}], 0x1}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) bind$alg(r1, &(0x7f00000006c0)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3m37.555470745s ago: executing program 3 (id=7629): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sndctrl(0x0, 0xe0, 0x10400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000900000004000000000000120200000002000000000000120400000007000000000000910100"], 0x0, 0x51, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000007e5ff00004000000000000000010000840800000000000000"], 0x0, 0x42}, 0x28) 3m35.00706547s ago: executing program 3 (id=7636): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000006840)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x110, 0x700, 0x270, 0x278, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvlan0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0x8000, 0xffff, 0xfffd, 0x20}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@float={0x6, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0xd, 0x3}, {0xa}, {0x40d, 0x8003}, {0x1, 0x45}, {0x6, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x4}}]}, {0x0, [0x5f, 0x2e, 0x61, 0x61, 0x30]}}, &(0x7f0000000180)=""/14, 0x7f, 0xe, 0x1, 0x4}, 0x28) syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@auto_da_alloc}, {@barrier}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@delalloc}, {@auto_da_alloc}]}, 0x1, 0x490, &(0x7f0000000580)="$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") r2 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]}) pwritev2(r2, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000006fe5e40cf1b400b3d550000000109021200014300a00009ac89a779981c5f69ae8704a600000e010000b18beebab4057565a9f628e745d0f81c32b2aa46dc1ef09562673f433c236783701f38d44d398938eefe56fabeb98028f3b96d0ddbb2671db5"], 0x0) 3m31.908055803s ago: executing program 3 (id=7643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xe, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xbe}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x18, r5, 0x1, 0xff}, 0x14) 3m27.536443989s ago: executing program 3 (id=7654): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffffffff, 0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x34}}, 0x0) 3m26.112265274s ago: executing program 46 (id=7654): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffffffff, 0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x34}}, 0x0) 2m47.738025289s ago: executing program 8 (id=7720): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0x8}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20044042) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) bind$unix(r1, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) recvmmsg(r0, &(0x7f0000000d40), 0x40000000000038f, 0x10020, 0x0) 2m46.468571771s ago: executing program 8 (id=7725): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x4040) 2m45.212951741s ago: executing program 8 (id=7728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001640)={0x30, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7e}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m44.085682881s ago: executing program 8 (id=7730): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) memfd_create(&(0x7f0000000200)='\xb1Y\xf8$\x00\x00\x00\x00\x00\xb8\xc9\xf7\xd8V#\xb3\xcf\x1f\xbd\xef\xc8\xe6\x84*\xc0\xfeR\x01\x95', 0x1) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) 2m42.795638884s ago: executing program 8 (id=7731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x40080) 2m40.994106253s ago: executing program 8 (id=7734): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 2m25.518052688s ago: executing program 47 (id=7734): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 2m2.010955911s ago: executing program 2 (id=7787): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x80) openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) rseq(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r1 = syz_open_procfs(0x0, 0x0) read$qrtrtun(r1, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) 2m1.610791786s ago: executing program 2 (id=7789): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x20, 0x3e, 0x9, 0x0, 0x800, {0x3}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x3b}]}]}, 0x20}}, 0x0) 2m0.385377554s ago: executing program 2 (id=7790): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) pipe(0x0) r1 = io_uring_setup(0x6001, &(0x7f0000001c80)={0x0, 0x20eec2, 0x2, 0x2, 0x65}) syz_usb_connect$cdc_ncm(0x2, 0x86, &(0x7f00000006c0)=ANY=[@ANYBLOB="12011003020000102505a1a44000010203010902740002010690dc0904000001020d0000082406000111a1d8052400fd5c0d240f01030000000104090bce06241a0100221524120300a317a88b045e4f01a607c0ffcb7e392a0905"], 0x0) close_range(r1, r1, 0x0) shutdown(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000200000005"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) 1m59.695175705s ago: executing program 2 (id=7792): r0 = socket(0x2, 0x80805, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x1) 1m58.629648919s ago: executing program 2 (id=7795): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(r2, &(0x7f0000000d80)=[{&(0x7f0000001e40)=""/42, 0x2a}], 0x1, &(0x7f0000001f80)=[{&(0x7f0000001e80)=""/247, 0xf7}], 0x1, 0x0) 1m57.378579519s ago: executing program 2 (id=7796): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x8000) close(0x3) 1m41.999200746s ago: executing program 48 (id=7796): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r2, 0x1, 0x6, @remote}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x8000) close(0x3) 16.495974465s ago: executing program 1 (id=7971): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200040f0}, 0x4890) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 14.008016585s ago: executing program 1 (id=7975): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) cachestat(r0, &(0x7f0000000140)={0x1, 0x7fc001}, &(0x7f0000000100), 0x0) 12.894735553s ago: executing program 6 (id=7978): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4044844) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x3]}, 0x8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4040040}, 0x20000010) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.936408846s ago: executing program 6 (id=7981): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x10042) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) 10.483167095s ago: executing program 5 (id=7983): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 9.767404879s ago: executing program 1 (id=7984): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)={0x30, r4, 0x401, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x6008004) 9.582593195s ago: executing program 6 (id=7986): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) 8.543200937s ago: executing program 5 (id=7987): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffc}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x5d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.090732056s ago: executing program 0 (id=7988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(&(0x7f00000002c0), 0xb, 0x0) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)=""/4104, 0x440000}], 0x1f77) 7.385018779s ago: executing program 5 (id=7989): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x301, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) 5.868080483s ago: executing program 5 (id=7990): pipe2$9p(0x0, 0x800) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x15) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4ad00, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r4}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 5.845361574s ago: executing program 0 (id=7991): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xb8f1, 0x1, 0xffffffee, 0x1c3}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x48, 0x0, 0x10000, 0x3, 0x0, 0x1, 0x0, 0x1, {0x3}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.843054194s ago: executing program 6 (id=7992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 5.842485564s ago: executing program 1 (id=7993): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0xed) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 4.714567114s ago: executing program 0 (id=7994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x529ae000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r3, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) 4.682198737s ago: executing program 1 (id=7995): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000180), 0x3, 0x470, &(0x7f0000000dc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) 4.442138418s ago: executing program 6 (id=7996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0x94) 3.775024367s ago: executing program 5 (id=7997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x9e, &(0x7f00000002c0)={0x0, 0xec25, 0x0, 0x0, 0x40000733}, &(0x7f00000006c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x25, 0x0, @fd, 0x6, &(0x7f0000000380)=[{0x0}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.970748268s ago: executing program 0 (id=7998): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000280)="dc8daf8d760c0b8caa98fa19c6a35a18883775d272c579ff33a6effc0c4932", 0x1f) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, &(0x7f0000000580)) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000100)={[{@numtail}, {@fat=@debug}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_mixed}, {@fat=@check_strict}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@shortname_winnt}, {@fat=@nfs}, {@shortname_win95}, {@uni_xlateno}, {@utf8no}, {@shortname_lower}, {@fat=@tz_utc}]}, 0x1, 0x360, &(0x7f0000000900)="$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") 2.954138329s ago: executing program 1 (id=8006): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.281083627s ago: executing program 0 (id=7999): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x140, 0x40000000, 0x41000000}], 0x0) 1.279691407s ago: executing program 6 (id=8008): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="0c00990041000000600000000800a0147c030000080026009a03"], 0x40}}, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000000206010100105bebbd63f4000000000000000a0000080d000300686173683a6d61630000000015000300686173683a69702c706f72742c6e6574000000000500000a000000050004000200000011000300686173"], 0x60}, 0x1, 0x0, 0x0, 0x20044844}, 0x20000014) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 162.85µs ago: executing program 0 (id=8000): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000080)=0x1, 0x4) 0s ago: executing program 5 (id=8001): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000780)=@ethtool_gstrings={0x1b, 0x1}}) syz_usb_connect$uac1(0x0, 0x8b, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0xff, 0x0, '\x00\x00'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x6, 0x4, 0xe80, 0x5, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x10, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x83}}}}}}}]}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x30, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4ff, {0x2, 0x6, "181331", 0x9, 0x33, 0x0, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) read$FUSE(r2, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r1, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000440)=""/140, 0x8c, 0x0, 0x2, 0x2}}, 0x48) kernel console output (not intermixed with test programs): 212 [ 1114.574787][T26739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1114.588551][ T27] audit: type=1326 audit(3919109650.456:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26802 comm="syz.2.6675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1114.618844][T26825] tipc: Failed to remove unknown binding: 66,0,0/2126:3659907211/3659907212 [ 1114.627985][T26739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.692011][ T27] audit: type=1326 audit(3919109650.456:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26802 comm="syz.2.6675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1114.758241][T26739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1114.993995][T26739] hsr_slave_0: entered promiscuous mode [ 1115.078672][T26739] hsr_slave_1: entered promiscuous mode [ 1115.099674][T26739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1115.107558][T26739] Cannot create hsr debugfs directory [ 1115.508417][T22892] Bluetooth: hci4: command tx timeout [ 1116.127927][T26843] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6683'. [ 1116.317081][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.323704][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.653744][T26855] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1116.867727][T26858] pimreg: entered allmulticast mode [ 1117.319946][T26860] pimreg: left allmulticast mode [ 1117.472080][T26868] 9p filesystem being mounted at /1952/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 1117.590842][T22892] Bluetooth: hci4: command tx timeout [ 1117.922229][T26880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1118.096087][T26885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1118.172243][T26872] bond11: entered allmulticast mode [ 1118.186891][T26880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1118.216031][T26873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6688'. [ 1118.340746][T26873] bridge12: entered allmulticast mode [ 1118.388042][T26873] bond11: (slave bridge12): Enslaving as an active interface with an up link [ 1118.855232][T26739] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1118.896585][T26739] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1118.928058][T26739] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1118.966462][T26739] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1119.018854][T26898] sctp: [Deprecated]: syz.8.6693 (pid 26898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1119.018854][T26898] Use struct sctp_sack_info instead [ 1119.361975][T26739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.434763][T26739] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.484684][T26381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.491945][T26381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.577601][T26381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.584954][T26381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.668401][T22892] Bluetooth: hci4: command tx timeout [ 1120.120915][T26918] veth0_vlan: left promiscuous mode [ 1120.165894][T26918] veth0_vlan: entered promiscuous mode [ 1120.930439][T26739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1121.992727][T26739] veth0_vlan: entered promiscuous mode [ 1122.034304][T26948] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6703'. [ 1122.060240][T26739] veth1_vlan: entered promiscuous mode [ 1122.241737][T26739] veth0_macvtap: entered promiscuous mode [ 1122.299380][T26739] veth1_macvtap: entered promiscuous mode [ 1123.495705][T26739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.693382][T26739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.724632][T26739] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.745182][T26739] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.763794][T26739] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.785167][T26739] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.099642][T26383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.107572][T26383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.256868][ T7427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.280958][ T7427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.534091][T26982] binder: 26981:26982 ioctl c0306201 2000000003c0 returned -14 [ 1124.765077][T26984] 9p filesystem being mounted at /849/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 1127.131288][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 1127.131305][ T27] audit: type=1804 audit(3919109663.826:653): pid=27034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.6724" name="/newroot/4/bus/file1" dev="overlay" ino=46 res=1 errno=0 [ 1127.436354][T27047] tipc: Started in network mode [ 1127.458300][T27047] tipc: Node identity 4, cluster identity 4711 [ 1127.464630][T27047] tipc: Node number set to 4 [ 1127.521727][T27050] syz_tun: entered allmulticast mode [ 1131.459111][T27147] bridge0: port 1(syz_tun) entered blocking state [ 1131.500759][T27147] bridge0: port 1(syz_tun) entered disabled state [ 1131.507499][T27147] syz_tun: entered allmulticast mode [ 1131.559927][T27147] syz_tun: entered promiscuous mode [ 1131.601228][T27147] bridge0: port 1(syz_tun) entered blocking state [ 1131.607909][T27147] bridge0: port 1(syz_tun) entered forwarding state [ 1131.825381][T27148] netlink: 'syz.7.6750': attribute type 1 has an invalid length. [ 1131.843247][T27148] netlink: 16150 bytes leftover after parsing attributes in process `syz.7.6750'. [ 1131.912790][T27150] netlink: 'syz.8.6751': attribute type 10 has an invalid length. [ 1132.108614][T27150] bridge0: port 1(syz_tun) entered disabled state [ 1134.276406][T27194] bond0: left allmulticast mode [ 1134.321918][T27194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1137.635105][T27257] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6775'. [ 1138.157481][T27265] sctp: [Deprecated]: syz.2.6780 (pid 27265) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1138.157481][T27265] Use struct sctp_sack_info instead [ 1138.709767][T27267] IPv6: NLM_F_CREATE should be specified when creating new route [ 1139.756487][T27300] sctp: [Deprecated]: syz.8.6790 (pid 27300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1139.756487][T27300] Use struct sctp_sack_info instead [ 1140.645925][T27319] loop7: detected capacity change from 0 to 512 [ 1140.811765][T27319] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1140.870933][T27319] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1141.069446][T27319] loop7: detected capacity change from 512 to 1 [ 1141.102798][T27319] Dev loop7: unable to read RDB block 1 [ 1141.137939][T27319] loop7: unable to read partition table [ 1141.146841][T27330] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.6796: corrupted xattr block 33: invalid header [ 1141.177602][T27319] loop7: partition table beyond EOD, truncated [ 1141.199671][T27319] loop_reread_partitions: partition scan of loop7 (ï5ŸA;¹8R÷Ö¤®mÝûÑÎ])Âî^\©) failed (rc=-5) [ 1141.251878][T27330] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5920: Out of memory [ 1141.306104][T27330] EXT4-fs error (device loop7): ext4_dirty_inode:6124: inode #15: comm syz.7.6796: mark_inode_dirty error [ 1141.318820][T27330] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5920: Out of memory [ 1141.330134][T27330] EXT4-fs error (device loop7): ext4_write_end:1349: inode #15: comm syz.7.6796: mark_inode_dirty error [ 1142.347550][T26739] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5920: Out of memory [ 1142.439114][T26739] EXT4-fs error (device loop7): ext4_dirty_inode:6124: inode #2: comm syz-executor: mark_inode_dirty error [ 1142.551840][T26383] kworker/u4:8: attempt to access beyond end of device [ 1142.551840][T26383] loop7: rw=1, sector=148, nr_sectors = 4 limit=1 [ 1142.628509][T26383] EXT4-fs warning (device loop7): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 37) [ 1142.673665][T26383] buffer_io_error: 22 callbacks suppressed [ 1142.673683][T26383] Buffer I/O error on device loop7, logical block 37 [ 1142.813537][T26739] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.922592][T27322] kmmpd-loop7: attempt to access beyond end of device [ 1142.922592][T27322] loop7: rw=14337, sector=48, nr_sectors = 4 limit=1 [ 1142.998363][T27322] Buffer I/O error on dev loop7, logical block 12, lost sync page write [ 1143.499864][T26739] syz_tun (unregistering): left allmulticast mode [ 1143.505109][T27364] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 1143.934195][ T7429] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.331849][ T7429] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.521015][ T7429] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.781255][T27391] overlayfs: failed to clone lowerpath [ 1147.136328][ T7429] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.083134][T16143] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1148.101613][T16143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1148.111904][T16143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1148.121091][T16143] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1148.159259][T16143] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1148.166918][T16143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1150.229681][T16143] Bluetooth: hci2: command tx timeout [ 1151.201029][T27415] chnl_net:caif_netlink_parms(): no params data found [ 1152.313299][T16143] Bluetooth: hci2: command tx timeout [ 1152.830356][ T7429] hsr_slave_0: left promiscuous mode [ 1153.362279][ T7429] hsr_slave_1: left promiscuous mode [ 1153.408348][ T7429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1153.415884][ T7429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1153.465782][ T7429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1153.484379][ T7429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1153.510204][ T7429] bridge_slave_1: left allmulticast mode [ 1153.526308][ T7429] bridge_slave_1: left promiscuous mode [ 1153.544581][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.565301][ T7429] bridge_slave_0: left allmulticast mode [ 1153.584295][ T7429] bridge_slave_0: left promiscuous mode [ 1153.609356][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.870490][ T7429] veth1_macvtap: left promiscuous mode [ 1153.886456][ T7429] veth0_macvtap: left promiscuous mode [ 1153.898871][ T7429] veth1_vlan: left promiscuous mode [ 1153.904309][ T7429] veth0_vlan: left promiscuous mode [ 1154.389283][T16143] Bluetooth: hci2: command tx timeout [ 1156.473993][T16143] Bluetooth: hci2: command tx timeout [ 1156.485634][ T7429] team0 (unregistering): Port device team_slave_1 removed [ 1156.642572][ T7429] team0 (unregistering): Port device team_slave_0 removed [ 1156.776234][ T7429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1156.910265][ T7429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1158.052458][ T7429] bond0 (unregistering): Released all slaves [ 1158.261785][T27520] bond6: entered allmulticast mode [ 1158.267237][T27520] bond6: left allmulticast mode [ 1158.278022][T27523] pimreg: entered allmulticast mode [ 1158.313312][T27415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.346310][T27415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.387812][T27415] bridge_slave_0: entered allmulticast mode [ 1158.399687][T27415] bridge_slave_0: entered promiscuous mode [ 1158.428730][T27415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.435935][T27415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.468059][T27415] bridge_slave_1: entered allmulticast mode [ 1158.490104][T27415] bridge_slave_1: entered promiscuous mode [ 1158.723862][T27415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.801172][T27415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.002535][T27415] team0: Port device team_slave_0 added [ 1159.074998][T27415] team0: Port device team_slave_1 added [ 1159.146535][T27556] xt_hashlimit: max too large, truncated to 1048576 [ 1159.309184][T27415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.348363][T27415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.441818][T27415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.511301][T27415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.548938][T27415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1159.639404][T27415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.123752][T27415] hsr_slave_0: entered promiscuous mode [ 1160.158743][T27415] hsr_slave_1: entered promiscuous mode [ 1160.198507][T27415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1160.206176][T27415] Cannot create hsr debugfs directory [ 1161.669105][T27610] bridge0: port 2(macvlan0) entered blocking state [ 1161.696979][T27610] bridge0: port 2(macvlan0) entered disabled state [ 1161.727531][T27610] macvlan0: entered allmulticast mode [ 1161.756843][T27610] bridge0: entered allmulticast mode [ 1161.783862][T27610] macvlan0: left allmulticast mode [ 1161.789597][T27610] bridge0: left allmulticast mode [ 1163.506295][T27415] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1163.584246][T27415] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1163.649992][T27415] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1163.736631][T27415] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1164.026117][T27415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1164.119117][T27415] 8021q: adding VLAN 0 to HW filter on device team0 [ 1164.200859][T26385] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.208101][T26385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.273339][T26385] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.280564][T26385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.591540][T27653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6873'. [ 1164.729388][T27653] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1164.904982][T27415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1165.573913][T27680] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6878'. [ 1165.633787][T27680] ip6gre3: entered promiscuous mode [ 1165.712267][T27680] ip6gre3: entered allmulticast mode [ 1165.951910][T27415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.976715][T27685] netlink: 'syz.0.6878': attribute type 6 has an invalid length. [ 1166.028499][T27685] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6878'. [ 1166.564921][T27711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6886'. [ 1166.969128][T27415] veth0_vlan: entered promiscuous mode [ 1167.011829][T27415] veth1_vlan: entered promiscuous mode [ 1167.101555][T27415] veth0_macvtap: entered promiscuous mode [ 1167.149565][T27415] veth1_macvtap: entered promiscuous mode [ 1167.213229][T27415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.247030][T27415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.302773][T27415] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.324438][T27415] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.367247][T27415] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.394311][T27415] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.802724][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.848440][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.023638][ T7429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.036932][ T7429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.470093][T27766] batadv_slave_0: entered promiscuous mode [ 1169.526570][T27763] batadv_slave_0: left promiscuous mode [ 1170.393673][T27794] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6903'. [ 1170.578591][T27794] team1: entered promiscuous mode [ 1170.583722][T27794] team1: entered allmulticast mode [ 1170.628410][T27794] 8021q: adding VLAN 0 to HW filter on device team1 [ 1170.663545][T27798] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6903'. [ 1170.757707][T27798] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 1170.878491][T14038] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1170.951610][T27798] team2: entered promiscuous mode [ 1171.008655][T27798] team2: entered allmulticast mode [ 1171.036183][T27798] 8021q: adding VLAN 0 to HW filter on device team2 [ 1171.088453][T14038] usb 5-1: Using ep0 maxpacket: 16 [ 1171.150595][T14038] usb 5-1: config 222 has an invalid interface number: 31 but max is 0 [ 1171.168831][T14038] usb 5-1: config 222 has no interface number 0 [ 1171.175221][T14038] usb 5-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 1171.239990][T14038] usb 5-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 1171.278913][T14038] usb 5-1: config 222 interface 31 has no altsetting 0 [ 1171.294823][T14038] usb 5-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 1171.305202][T14038] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.334570][T14038] usb 5-1: Product: syz [ 1171.349343][T14038] usb 5-1: Manufacturer: syz [ 1171.354108][T14038] usb 5-1: SerialNumber: syz [ 1171.437750][T27800] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1171.909070][T14038] ldusb 5-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 1171.982941][T14038] usb 5-1: USB disconnect, device number 31 [ 1172.034416][T14038] ldusb 5-1:222.31: LD USB Device #0 now disconnected [ 1172.802855][T27839] tipc: Failed to remove unknown binding: 66,0,0/4:669163063/669163065 [ 1172.829383][T27839] tipc: Failed to remove unknown binding: 66,0,0/4:669163063/669163064 [ 1172.857748][T27839] tipc: Failed to remove unknown binding: 66,0,0/4:669163063/669163065 [ 1172.899726][T27839] tipc: Failed to remove unknown binding: 66,0,0/4:669163063/669163064 [ 1173.231146][T27852] tipc: Failed to remove unknown binding: 66,0,0/2126:4074816059/4074816061 [ 1173.265521][T27852] tipc: Failed to remove unknown binding: 66,0,0/2126:4074816059/4074816060 [ 1173.293528][T27852] tipc: Failed to remove unknown binding: 66,0,0/2126:4074816059/4074816061 [ 1173.307312][T27852] tipc: Failed to remove unknown binding: 66,0,0/2126:4074816059/4074816060 [ 1175.533465][T27896] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1177.137190][T27911] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6930'. [ 1177.175269][T27911] syz_tun: left allmulticast mode [ 1177.215459][T27911] syz_tun: left promiscuous mode [ 1177.263127][T27911] bridge0: port 1(syz_tun) entered disabled state [ 1177.758015][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.765065][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.976602][T27935] tipc: New replicast peer: 255.255.255.255 [ 1180.015126][T27935] tipc: Enabled bearer , priority 10 [ 1180.315551][T27902] Set syz1 is full, maxelem 65536 reached [ 1180.586738][T27937] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6932'. [ 1180.597072][T27937] tipc: Disabling bearer [ 1185.145641][ T27] audit: type=1326 audit(3919109721.836:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27997 comm="syz.0.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5c99c629 code=0x7fc00000 [ 1185.593579][ T27] audit: type=1326 audit(3919109722.266:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27997 comm="syz.0.6948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fce5c99c629 code=0x7fc00000 [ 1186.934687][ T27] audit: type=1804 audit(3919109723.626:656): pid=28040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6954" name="file0" dev="ramfs" ino=87483 res=1 errno=0 [ 1188.443375][T28083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6961'. [ 1189.132765][T28096] netlink: 'syz.8.6966': attribute type 1 has an invalid length. [ 1189.287457][T28096] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1189.364751][T28101] gretap3: entered promiscuous mode [ 1189.411165][T28101] bond14: (slave gretap3): making interface the new active one [ 1189.462150][T28101] bond14: (slave gretap3): Enslaving as an active interface with an up link [ 1191.062624][T28132] overlayfs: failed to resolve './file0': -2 [ 1191.300631][T28139] netlink: 'syz.0.6972': attribute type 1 has an invalid length. [ 1191.411908][T28146] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6973'. [ 1191.575679][T28151] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6973'. [ 1191.613362][T28139] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1191.699422][T28142] bond10: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1191.843665][T28148] bond10: (slave ip6gretap1): making interface the new active one [ 1191.942354][T28148] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1192.810370][T28183] tipc: Enabling of bearer rejected, failed to enable media [ 1193.370976][T28197] netlink: 'syz.0.6984': attribute type 1 has an invalid length. [ 1194.114195][T28197] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1194.140477][T28194] bond11: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 1194.317691][T28194] bond11: entered allmulticast mode [ 1195.392918][T28235] overlayfs: failed to clone upperpath [ 1198.371898][T22892] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1198.409439][T22892] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1198.420699][T22892] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1198.431688][T22892] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1198.440165][T22892] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1198.459433][T22892] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1200.544159][T26383] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.571787][T16143] Bluetooth: hci2: command tx timeout [ 1201.921025][T26383] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.628321][T16143] Bluetooth: hci2: command tx timeout [ 1202.901369][T26383] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.370659][T26383] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.994268][T28268] chnl_net:caif_netlink_parms(): no params data found [ 1204.708735][T16143] Bluetooth: hci2: command tx timeout [ 1205.560298][T28268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.621156][T28268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.638432][T28268] bridge_slave_0: entered allmulticast mode [ 1205.646125][T28268] bridge_slave_0: entered promiscuous mode [ 1205.679880][T28268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.687327][T28268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.818605][T28268] bridge_slave_1: entered allmulticast mode [ 1205.876814][T28268] bridge_slave_1: entered promiscuous mode [ 1206.789618][T16143] Bluetooth: hci2: command tx timeout [ 1206.885419][T28268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1206.942616][T28268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1207.772077][T28268] team0: Port device team_slave_0 added [ 1207.917786][T28268] team0: Port device team_slave_1 added [ 1208.474829][T28268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1208.488518][T28268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1208.547064][T28268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1208.588477][T28268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1208.598249][T28268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1208.660511][T28268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1208.681204][T28401] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.7018'. [ 1210.920566][T28268] hsr_slave_0: entered promiscuous mode [ 1210.978680][T28268] hsr_slave_1: entered promiscuous mode [ 1211.009509][T28268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1211.017503][T28268] Cannot create hsr debugfs directory [ 1211.626179][T26383] hsr_slave_0: left promiscuous mode [ 1211.676765][T26383] hsr_slave_1: left promiscuous mode [ 1211.718513][T26383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1211.746965][T26383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1211.796329][T26383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1211.821815][T26383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1211.860108][T26383] bridge_slave_1: left allmulticast mode [ 1211.865854][T26383] bridge_slave_1: left promiscuous mode [ 1211.903481][T26383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.975945][T26383] bridge_slave_0: left allmulticast mode [ 1212.000504][T26383] bridge_slave_0: left promiscuous mode [ 1212.028929][T26383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.270543][T26383] veth1_macvtap: left promiscuous mode [ 1212.306769][T26383] veth0_macvtap: left promiscuous mode [ 1212.342584][T26383] veth1_vlan: left promiscuous mode [ 1212.362904][T26383] veth0_vlan: left promiscuous mode [ 1215.412085][T26383] team0 (unregistering): Port device team_slave_1 removed [ 1215.575038][T26383] team0 (unregistering): Port device team_slave_0 removed [ 1215.746789][T26383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1215.909548][T26383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1217.344520][T26383] bond0 (unregistering): Released all slaves [ 1217.586420][T28438] netlink: 'syz.2.7026': attribute type 1 has an invalid length. [ 1217.596304][T28438] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1220.480283][T28528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7046'. [ 1220.611276][T28528] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1220.643681][T28530] macvlan2: entered promiscuous mode [ 1220.688188][T28530] macvlan2: entered allmulticast mode [ 1220.694776][T28530] bond12: entered allmulticast mode [ 1220.701627][T28530] bond12: entered promiscuous mode [ 1220.707967][T28530] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1220.720901][T28530] team0: Port device macvlan2 added [ 1222.054982][T28569] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7057'. [ 1222.099372][T28268] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1222.787337][T28268] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1222.891752][T28571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7057'. [ 1222.912722][T28571] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7057'. [ 1223.077320][T28268] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1223.122045][T28268] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1223.339234][T28593] bond12: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1223.452585][T28593] bond12: (slave lo): Enslaving as an active interface with an up link [ 1223.520673][T28593] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1224.015497][T28604] Invalid ELF header magic: != ELF [ 1224.207132][T28268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.303458][T28268] 8021q: adding VLAN 0 to HW filter on device team0 [ 1224.346911][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.354252][ T7429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.463643][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.471033][ T7429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.454749][T28268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1229.274326][T28268] veth0_vlan: entered promiscuous mode [ 1229.973623][T28268] veth1_vlan: entered promiscuous mode [ 1230.175421][T28268] veth0_macvtap: entered promiscuous mode [ 1230.259897][T28268] veth1_macvtap: entered promiscuous mode [ 1230.324881][T28268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1230.355289][T28268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1230.404368][T28268] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.436067][T28268] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.463706][T28268] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.518203][T28268] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1230.909015][T24006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1230.983291][T24006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.013101][T26383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1231.048994][T26383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.340036][T28712] netlink: 1319 bytes leftover after parsing attributes in process `syz.9.6993'. [ 1238.052560][T28752] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1238.879012][T28774] netlink: 'syz.2.7101': attribute type 39 has an invalid length. [ 1239.189303][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1239.211098][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.217487][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.628950][T28790] netlink: 'syz.0.7106': attribute type 39 has an invalid length. [ 1239.686913][T27939] infiniband syz1: ib_query_port failed (-19) [ 1239.809893][T28790] syz_tun (unregistering): left allmulticast mode [ 1239.816496][T28790] bridge0: port 2(syz_tun) entered disabled state [ 1240.468392][T28821] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7113'. [ 1240.554351][T16143] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1240.565386][T16143] CPU: 1 PID: 16143 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1240.573134][T16143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1240.583252][T16143] Workqueue: hci2 hci_rx_work [ 1240.588002][T16143] Call Trace: [ 1240.591325][T16143] [ 1240.594303][T16143] dump_stack_lvl+0x18c/0x250 [ 1240.599057][T16143] ? show_regs_print_info+0x20/0x20 [ 1240.604321][T16143] ? load_image+0x400/0x400 [ 1240.608909][T16143] sysfs_create_dir_ns+0x26e/0x2a0 [ 1240.614090][T16143] ? sysfs_warn_dup+0xa0/0xa0 [ 1240.618828][T16143] ? do_raw_spin_unlock+0x121/0x230 [ 1240.624094][T16143] kobject_add_internal+0x61c/0xcc0 [ 1240.629364][T16143] kobject_add+0x164/0x240 [ 1240.634282][T16143] ? __rwlock_init+0x150/0x150 [ 1240.639124][T16143] ? kobject_init+0x1e0/0x1e0 [ 1240.643863][T16143] ? _raw_spin_unlock+0x28/0x40 [ 1240.648784][T16143] ? get_device_parent+0x366/0x390 [ 1240.653971][T16143] device_add+0x408/0xc20 [ 1240.658464][T16143] hci_conn_add_sysfs+0xd5/0x1e0 [ 1240.663649][T16143] le_conn_complete_evt+0xf5d/0x1540 [ 1240.669006][T16143] ? hci_event_packet+0x4cb/0x1270 [ 1240.674200][T16143] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1240.680527][T16143] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1240.686233][T16143] ? skb_pull_data+0xfb/0x200 [ 1240.690962][T16143] hci_le_enh_conn_complete_evt+0x189/0x460 [ 1240.696987][T16143] ? hci_le_remote_conn_param_req_evt+0xd10/0xd10 [ 1240.703540][T16143] ? hci_remote_host_features_evt+0x150/0x150 [ 1240.709657][T16143] hci_event_packet+0x7ba/0x1270 [ 1240.715261][T16143] ? bis_list+0x290/0x290 [ 1240.719635][T16143] ? lockdep_hardirqs_on+0x98/0x150 [ 1240.725011][T16143] ? hci_send_to_monitor+0xd7/0x4f0 [ 1240.730269][T16143] hci_rx_work+0x43a/0xd60 [ 1240.734732][T16143] ? process_scheduled_works+0x96f/0x15d0 [ 1240.740489][T16143] process_scheduled_works+0xa5d/0x15d0 [ 1240.746088][T16143] ? assign_work+0x430/0x430 [ 1240.750711][T16143] ? assign_work+0x3d0/0x430 [ 1240.755333][T16143] worker_thread+0xa55/0xfc0 [ 1240.759955][T16143] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1240.765897][T16143] ? _raw_spin_unlock+0x40/0x40 [ 1240.770965][T16143] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1240.776915][T16143] kthread+0x2fa/0x390 [ 1240.781013][T16143] ? pr_cont_work+0x560/0x560 [ 1240.785720][T16143] ? kthread_blkcg+0xd0/0xd0 [ 1240.790434][T16143] ret_from_fork+0x48/0x80 [ 1240.794887][T16143] ? kthread_blkcg+0xd0/0xd0 [ 1240.799509][T16143] ret_from_fork_asm+0x11/0x20 [ 1240.804404][T16143] [ 1240.816662][T16143] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1240.832073][T16143] Bluetooth: hci2: failed to register connection device [ 1242.772718][T16143] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 1242.809202][T28862] x_tables: duplicate underflow at hook 2 [ 1243.983535][T28896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7131'. [ 1249.992902][T28985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7148'. [ 1252.170243][T29015] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7152'. [ 1252.199399][T29015] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7152'. [ 1252.624226][T29023] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1252.651946][T29023] CIFS mount error: No usable UNC path provided in device string! [ 1252.651946][T29023] [ 1252.662537][T29023] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1253.630221][T29035] netlink: 'syz.0.7157': attribute type 1 has an invalid length. [ 1254.629876][T29035] bond13: entered promiscuous mode [ 1254.635078][T29035] bond13: entered allmulticast mode [ 1254.721308][T29040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7157'. [ 1254.919618][T29040] bridge11: the hash_elasticity option has been deprecated and is always 16 [ 1254.984492][T29040] bond13: (slave bridge11): making interface the new active one [ 1255.076695][T29040] bridge11: entered promiscuous mode [ 1255.111421][T29040] bridge11: entered allmulticast mode [ 1255.151750][T29040] bond13: (slave bridge11): Enslaving as an active interface with an up link [ 1255.208270][T29041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7157'. [ 1255.273847][T29041] bond13: left promiscuous mode [ 1255.280368][T29041] bridge11: left promiscuous mode [ 1255.285762][T29041] bond13: left allmulticast mode [ 1255.328622][T29041] bridge11: left allmulticast mode [ 1255.335112][T29041] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1255.556441][T29065] loop9: detected capacity change from 0 to 512 [ 1255.754522][T29065] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 1255.847843][T29065] EXT4-fs (loop9): group descriptors corrupted! [ 1256.383514][T29082] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7167'. [ 1256.539942][T29087] xt_TCPMSS: Only works on TCP SYN packets [ 1256.822705][T29092] o2cb: This node has not been configured. [ 1256.843147][T29092] o2cb: Cluster check failed. Fix errors before retrying. [ 1256.885374][T29092] (syz.2.7170,29092,1):user_dlm_register:674 ERROR: status = -22 [ 1256.915622][T29092] (syz.2.7170,29092,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1257.228305][T29103] netlink: 'syz.2.7174': attribute type 1 has an invalid length. [ 1257.369888][T29103] bond13: entered promiscuous mode [ 1257.467479][T29103] bond13: entered allmulticast mode [ 1257.498659][T29108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7174'. [ 1257.591457][T29108] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 1257.670288][T29108] bond13: (slave bridge0): making interface the new active one [ 1257.698252][T29108] bridge0: entered promiscuous mode [ 1257.729173][T29108] bridge0: entered allmulticast mode [ 1257.742467][T29108] bond13: (slave bridge0): Enslaving as an active interface with an up link [ 1257.790057][T29109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7174'. [ 1257.822045][T29109] bond13: left promiscuous mode [ 1257.827474][T29109] bridge0: left promiscuous mode [ 1257.918609][T29109] bond13: left allmulticast mode [ 1257.923984][T29109] bridge0: left allmulticast mode [ 1258.004928][T29109] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1258.946197][T29097] loop9: detected capacity change from 0 to 32768 [ 1259.041751][T29097] XFS: noikeep mount option is deprecated. [ 1259.392137][T29097] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1259.505748][ T27] audit: type=1326 audit(2000000016.470:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29148 comm="syz.2.7181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1259.599144][ T27] audit: type=1326 audit(2000000016.500:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29148 comm="syz.2.7181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1259.628571][ T27] audit: type=1326 audit(2000000016.500:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29148 comm="syz.2.7181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1259.693364][ T27] audit: type=1326 audit(2000000016.530:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29148 comm="syz.2.7181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1259.767598][ T27] audit: type=1326 audit(2000000016.530:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29148 comm="syz.2.7181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1259.838266][ T27] audit: type=1326 audit(2000000016.530:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29148 comm="syz.2.7181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1259.903593][T29097] XFS (loop9): Ending clean mount [ 1259.924943][ T27] audit: type=1326 audit(2000000016.530:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29148 comm="syz.2.7181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1259.976240][T29097] XFS (loop9): Quotacheck needed: Please wait. [ 1259.983540][ T27] audit: type=1326 audit(2000000016.530:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29148 comm="syz.2.7181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1260.316214][ T27] audit: type=1326 audit(2000000016.530:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29148 comm="syz.2.7181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1260.729925][ T27] audit: type=1326 audit(2000000016.530:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29148 comm="syz.2.7181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1260.814857][T29097] XFS (loop9): Quotacheck: Done. [ 1260.986009][T28268] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1265.525652][T29225] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7187'. [ 1266.184976][T29243] ip_vti0: Master is either lo or non-ether device [ 1267.567539][T29265] lo speed is unknown, defaulting to 1000 [ 1267.597564][T29265] lo speed is unknown, defaulting to 1000 [ 1267.639328][T29265] lo speed is unknown, defaulting to 1000 [ 1267.802589][T29265] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1268.027425][T29265] lo speed is unknown, defaulting to 1000 [ 1268.035987][T29265] lo speed is unknown, defaulting to 1000 [ 1268.044356][T29265] lo speed is unknown, defaulting to 1000 [ 1268.060383][T29265] lo speed is unknown, defaulting to 1000 [ 1268.068002][T29265] lo speed is unknown, defaulting to 1000 [ 1268.118644][T29265] lo speed is unknown, defaulting to 1000 [ 1268.326436][T29265] lo speed is unknown, defaulting to 1000 [ 1270.502945][T29310] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7218'. [ 1270.516502][T29310] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7218'. [ 1271.526868][T29333] IPVS: Scheduler module ip_vs_ not found [ 1280.652543][T29467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7259'. [ 1283.996455][T29532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7279'. [ 1284.028866][T29532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7279'. [ 1285.126563][T29550] loop9: detected capacity change from 0 to 2048 [ 1285.233127][T29550] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1286.063922][T29558] vlan1: entered promiscuous mode [ 1286.118732][T29561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7286'. [ 1286.150935][T29558] bridge0: entered promiscuous mode [ 1286.156394][T29558] vlan1: entered allmulticast mode [ 1286.162446][T29558] bridge0: entered allmulticast mode [ 1286.259540][T29558] bond12: (slave lo): Releasing backup interface [ 1286.294737][T29558] bond12: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1286.366198][T29558] bond0: (slave veth0_virt_wifi): Releasing active interface [ 1286.839548][T28268] UDF-fs: error (device loop9): udf_read_inode: (ino 1) failed !bh [ 1286.888471][T28268] UDF-fs: error (device loop9): udf_read_inode: (ino 1) failed !bh [ 1287.152475][T29558] bond2: (slave vcan1): Releasing backup interface [ 1287.189541][T29558] team0: Port device bridge3 removed [ 1287.234313][T29558] bond5: (slave geneve2): Releasing active interface [ 1287.282236][T29558] bond7: (slave bridge9): Removing an active aggregator [ 1287.331024][T29558] bond7: (slave bridge9): Releasing backup interface [ 1287.360909][T29558] vlan0: left allmulticast mode [ 1287.366070][T29558] macvlan0: left allmulticast mode [ 1287.397654][T29558] vlan0: left promiscuous mode [ 1287.407890][T29558] macvlan0: left promiscuous mode [ 1287.419405][T29558] bridge10: port 1(vlan0) entered disabled state [ 1287.461855][T29558] bond0: (slave veth15): Releasing active interface [ 1287.489473][T29558] bond8: (slave erspan2): Releasing active interface [ 1287.527300][T29558] bond10: (slave ip6gretap1): Releasing active interface [ 1287.541203][T29558] ip6gretap1: left promiscuous mode [ 1287.546629][T29558] ip6gretap1: left allmulticast mode [ 1287.556762][T29558] bond11: (slave bridge12): Releasing backup interface [ 1287.567611][T29558] bridge12: left allmulticast mode [ 1287.598905][T29558] bond13: (slave bridge0): Releasing active interface [ 1288.073803][T26381] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.414187][T26381] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.721272][T26381] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.164702][T26381] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.091496][T22892] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1290.153332][T22892] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1290.199605][T22892] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1290.213066][T22892] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1290.238280][T22892] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1290.245890][T22892] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1290.966300][T29602] lo speed is unknown, defaulting to 1000 [ 1293.079995][T16143] Bluetooth: hci2: command tx timeout [ 1294.035276][T29638] netlink: 'syz.0.7302': attribute type 1 has an invalid length. [ 1294.117516][T29641] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1294.138762][T29641] bond14: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 1294.152323][T29641] bond14: (slave vxcan1): making interface the new active one [ 1294.161117][T29641] bond14: (slave vxcan1): Enslaving as an active interface with an up link [ 1294.801614][T29655] netlink: 276 bytes leftover after parsing attributes in process `syz.8.7304'. [ 1295.109465][T16143] Bluetooth: hci2: command tx timeout [ 1296.036698][T29644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7302'. [ 1296.135879][T29644] bond14 (unregistering): (slave vxcan1): Releasing backup interface [ 1296.414350][T29644] bond14 (unregistering): Released all slaves [ 1297.398865][T16143] Bluetooth: hci2: command tx timeout [ 1299.428372][T16143] Bluetooth: hci2: command tx timeout [ 1299.519410][T29602] chnl_net:caif_netlink_parms(): no params data found [ 1299.620632][T26381] hsr_slave_0: left promiscuous mode [ 1299.645042][T26381] hsr_slave_1: left promiscuous mode [ 1299.687332][T26381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1299.717771][T26381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1299.747446][T26381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1299.788276][T26381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1299.809213][T26381] bridge_slave_1: left allmulticast mode [ 1299.830918][T26381] bridge_slave_1: left promiscuous mode [ 1299.854115][T26381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.883139][T26381] bridge_slave_0: left allmulticast mode [ 1299.908830][T26381] bridge_slave_0: left promiscuous mode [ 1299.953300][T26381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.270986][T26381] veth1_macvtap: left promiscuous mode [ 1300.276646][T26381] veth0_macvtap: left promiscuous mode [ 1300.303157][T26381] veth1_vlan: left promiscuous mode [ 1300.326059][T26381] veth0_vlan: left promiscuous mode [ 1300.641938][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.648536][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.698438][T26381] team0 (unregistering): Port device team_slave_1 removed [ 1303.826368][T26381] team0 (unregistering): Port device team_slave_0 removed [ 1303.957211][T26381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1304.084633][T26381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1305.183446][T26381] bond0 (unregistering): Released all slaves [ 1305.417919][T29687] bridge12: entered promiscuous mode [ 1305.423701][T29687] bridge12: entered allmulticast mode [ 1305.441339][T29687] team0: Port device bridge12 added [ 1305.463864][T29688] bridge0: port 2(team0) entered blocking state [ 1305.470431][T29688] bridge0: port 2(team0) entered disabled state [ 1305.476948][T29688] team0: entered allmulticast mode [ 1305.489061][T29688] team_slave_0: entered allmulticast mode [ 1305.496006][T29688] team_slave_1: entered allmulticast mode [ 1305.513671][T29688] team0: entered promiscuous mode [ 1305.524923][T29688] team_slave_0: entered promiscuous mode [ 1305.536188][T29688] team_slave_1: entered promiscuous mode [ 1305.552214][T29688] bridge6: entered promiscuous mode [ 1305.575722][T29695] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.584203][T29695] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.592702][T29695] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.618190][T29695] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.626874][T29695] geneve3: entered promiscuous mode [ 1305.647540][T29695] geneve3: entered allmulticast mode [ 1305.656935][T29695] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.669241][T29695] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.696567][T29695] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.705669][T29695] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.771941][T29697] lo speed is unknown, defaulting to 1000 [ 1305.791440][T29749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7317'. [ 1306.172050][T29602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.188347][T29602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.207061][T29602] bridge_slave_0: entered allmulticast mode [ 1306.229704][T29602] bridge_slave_0: entered promiscuous mode [ 1306.315249][T29602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.353392][T29602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.385205][T29602] bridge_slave_1: entered allmulticast mode [ 1306.401224][T29602] bridge_slave_1: entered promiscuous mode [ 1306.625328][T29602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1306.750212][T29602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1306.959909][T29602] team0: Port device team_slave_0 added [ 1307.015740][T29602] team0: Port device team_slave_1 added [ 1307.149638][T29602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1307.156689][T29602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1307.183803][T29602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1307.197596][T29602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1307.214357][T29602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1307.649254][T29602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1308.126504][T29602] hsr_slave_0: entered promiscuous mode [ 1308.161495][T29602] hsr_slave_1: entered promiscuous mode [ 1308.196580][T29602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1308.225629][T29602] Cannot create hsr debugfs directory [ 1309.518290][ T27] kauditd_printk_skb: 54 callbacks suppressed [ 1309.518310][ T27] audit: type=1326 audit(2000000066.460:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29801 comm="syz.8.7328" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efda5d9c629 code=0x0 [ 1309.687798][ T27] audit: type=1326 audit(2000000066.650:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29803 comm="syz.0.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5c99c629 code=0x7ffc0000 [ 1309.778531][ T27] audit: type=1326 audit(2000000066.690:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29803 comm="syz.0.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fce5c99c629 code=0x7ffc0000 [ 1309.878316][ T27] audit: type=1326 audit(2000000066.690:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29803 comm="syz.0.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5c99c629 code=0x7ffc0000 [ 1309.969054][ T27] audit: type=1326 audit(2000000066.690:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29803 comm="syz.0.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5c99c629 code=0x7ffc0000 [ 1310.071261][ T27] audit: type=1326 audit(2000000066.690:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29803 comm="syz.0.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fce5c99c629 code=0x7ffc0000 [ 1310.187256][ T27] audit: type=1326 audit(2000000066.690:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29803 comm="syz.0.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5c99c629 code=0x7ffc0000 [ 1310.258859][ T27] audit: type=1326 audit(2000000066.690:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29803 comm="syz.0.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5c99c629 code=0x7ffc0000 [ 1310.348575][ T27] audit: type=1326 audit(2000000066.700:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29803 comm="syz.0.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fce5c99c629 code=0x7ffc0000 [ 1310.627661][ T27] audit: type=1326 audit(2000000066.700:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29803 comm="syz.0.7327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fce5c99c392 code=0x7ffc0000 [ 1314.145016][T29855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7333'. [ 1314.855413][T29602] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1314.912479][T29602] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1314.952594][T29602] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1315.030848][T29602] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1315.328008][T29602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.483089][T29602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1315.539334][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.546763][ T7429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1315.610423][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.617647][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1316.114592][T29871] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7336'. [ 1316.446817][T29874] bond15: (slave gretap0): Enslaving as an active interface with an up link [ 1316.561537][T29876] bond15 (unregistering): (slave gretap0): Releasing backup interface [ 1316.663033][T29876] bond15 (unregistering): Released all slaves [ 1316.787284][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 1316.787301][ T27] audit: type=1326 audit(2000000073.750:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29880 comm="syz.2.7337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1316.911799][ T27] audit: type=1326 audit(2000000073.770:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29880 comm="syz.2.7337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1316.969470][T29602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1317.004868][ T27] audit: type=1326 audit(2000000073.790:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29880 comm="syz.2.7337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1317.114812][ T27] audit: type=1326 audit(2000000073.790:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29880 comm="syz.2.7337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1317.181901][T29602] veth0_vlan: entered promiscuous mode [ 1317.215197][T29602] veth1_vlan: entered promiscuous mode [ 1317.243369][ T27] audit: type=1326 audit(2000000073.810:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29880 comm="syz.2.7337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1317.303348][ T27] audit: type=1326 audit(2000000073.810:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29880 comm="syz.2.7337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1317.362895][ T27] audit: type=1326 audit(2000000073.810:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29880 comm="syz.2.7337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1317.439251][T29602] veth0_macvtap: entered promiscuous mode [ 1317.459833][ T27] audit: type=1326 audit(2000000073.850:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29880 comm="syz.2.7337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1317.502520][T29602] veth1_macvtap: entered promiscuous mode [ 1317.562931][T29889] bridge13: entered promiscuous mode [ 1317.589683][T29889] bridge13: entered allmulticast mode [ 1317.597723][T29889] team0: Port device bridge13 added [ 1317.597874][ T27] audit: type=1326 audit(2000000073.850:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29880 comm="syz.2.7337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbd0ab9c392 code=0x7ffc0000 [ 1317.695396][T29889] bridge0: port 1(team0) entered blocking state [ 1317.707983][T29889] bridge0: port 1(team0) entered disabled state [ 1317.722137][ T27] audit: type=1326 audit(2000000073.920:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29880 comm="syz.2.7337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbd0ab5cece code=0x7ffc0000 [ 1317.745639][T29889] team0: entered allmulticast mode [ 1317.790695][T29889] team0: entered promiscuous mode [ 1317.962038][T29892] geneve2: entered promiscuous mode [ 1317.999841][T29892] geneve2: entered allmulticast mode [ 1318.151526][T29602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1318.191967][T29602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1318.358913][T29602] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.367716][T29602] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.416327][T29602] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.449674][T29602] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.120181][T29927] lo speed is unknown, defaulting to 1000 [ 1319.146247][T26381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1319.175611][T26381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1319.415380][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1319.454271][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.666684][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 1334.666697][ T27] audit: type=1326 audit(2000000091.630:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30060 comm="syz.0.7376" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce5c99c629 code=0x0 [ 1337.051521][T30083] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 1337.386670][T30083] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1347.294673][T30143] Invalid option length (57448) for dns_resolver key [ 1347.964258][T30147] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7391'. [ 1348.751602][T30159] xt_TCPMSS: Only works on TCP SYN packets [ 1350.930202][ T27] audit: type=1326 audit(2000000107.900:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30184 comm="syz.3.7401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72c579c629 code=0x0 [ 1352.254126][T13708] lo speed is unknown, defaulting to 1000 [ 1352.278315][T28488] lo speed is unknown, defaulting to 1000 [ 1352.311013][ T1115] bond3: (slave gretap0): link status definitely down, disabling slave [ 1352.352195][ T1115] bond3: now running without any active interface! [ 1352.552950][T30219] xt_TCPMSS: Only works on TCP SYN packets [ 1353.388846][T30207] /dev/loop0: Can't lookup blockdev [ 1353.856309][T30235] xt_nat: multiple ranges no longer supported [ 1356.850563][T30268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7411'. [ 1357.835031][T30270] loop3: detected capacity change from 0 to 256 [ 1358.209066][T30270] FAT-fs (loop3): Directory bread(block 64) failed [ 1358.215659][T30270] FAT-fs (loop3): Directory bread(block 65) failed [ 1358.245172][T30270] FAT-fs (loop3): Directory bread(block 66) failed [ 1358.368178][T30270] FAT-fs (loop3): Directory bread(block 67) failed [ 1358.408378][T30270] FAT-fs (loop3): Directory bread(block 68) failed [ 1358.415107][T30270] FAT-fs (loop3): Directory bread(block 69) failed [ 1358.538324][T30270] FAT-fs (loop3): Directory bread(block 70) failed [ 1358.545046][T30270] FAT-fs (loop3): Directory bread(block 71) failed [ 1358.688302][T30270] FAT-fs (loop3): Directory bread(block 72) failed [ 1358.730407][T30270] FAT-fs (loop3): Directory bread(block 73) failed [ 1359.255830][T30284] bridge13: entered allmulticast mode [ 1359.265518][T30284] team0: Port device bridge13 added [ 1359.358093][T30284] bridge0: port 1(team0) entered blocking state [ 1359.364534][T30284] bridge0: port 1(team0) entered disabled state [ 1359.371245][T30284] team0: entered allmulticast mode [ 1359.377724][T30284] team0: entered promiscuous mode [ 1359.382958][T30284] bridge13: entered promiscuous mode [ 1362.099269][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.105858][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.480020][T30349] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: 1 [ 1365.634405][T30349] ref_ctr increment failed for inode: 0x84 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802626f200 [ 1365.994073][T30352] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: -1 [ 1366.025833][T30352] ref_ctr decrement failed for inode: 0x84 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802626f200 [ 1366.239456][T30367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7434'. [ 1366.372523][T30370] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1366.413149][T30370] batadv1: entered promiscuous mode [ 1366.435378][T30370] batadv1: entered allmulticast mode [ 1366.485019][T30370] team0: Port device batadv1 added [ 1366.546971][T30378] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7436'. [ 1366.615486][T30375] bridge13: port 1(veth37) entered blocking state [ 1366.634446][T30375] bridge13: port 1(veth37) entered disabled state [ 1366.656638][T30375] veth37: entered allmulticast mode [ 1366.683856][T30375] veth37: entered promiscuous mode [ 1366.796424][T30367] bridge13: port 2(veth39) entered blocking state [ 1366.827973][T30367] bridge13: port 2(veth39) entered disabled state [ 1366.850307][T30367] veth39: entered allmulticast mode [ 1366.871447][ T11] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1366.881648][T30367] veth39: entered promiscuous mode [ 1366.882456][ T11] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1366.980466][T30378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7436'. [ 1367.008556][T30378] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7436'. [ 1370.215111][T30424] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7447'. [ 1370.398861][T30426] sch_fq: defrate 0 ignored. [ 1370.609178][T30424] bridge15: port 1(veth21) entered blocking state [ 1370.615968][T30424] bridge15: port 1(veth21) entered disabled state [ 1370.713348][T30424] veth21: entered allmulticast mode [ 1370.754751][T30424] veth21: entered promiscuous mode [ 1370.989759][T30431] bridge15: port 2(veth23) entered blocking state [ 1371.038302][T30431] bridge15: port 2(veth23) entered disabled state [ 1371.109293][T30431] veth23: entered allmulticast mode [ 1371.157354][T30431] veth23: entered promiscuous mode [ 1371.206274][T30434] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7449'. [ 1371.242023][T30440] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7451'. [ 1372.451974][T30466] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1374.018688][T26364] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1374.218339][T26364] usb 4-1: Using ep0 maxpacket: 16 [ 1374.231024][T26364] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1374.262170][T26364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.298149][T26364] usb 4-1: Product: syz [ 1374.312688][T26364] usb 4-1: Manufacturer: syz [ 1374.317387][T26364] usb 4-1: SerialNumber: syz [ 1374.367899][T26364] usb 4-1: config 0 descriptor?? [ 1374.836631][T26364] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1374.885531][T26364] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1374.907850][T26363] kernel write not supported for file bpf-prog (pid: 26363 comm: kworker/0:3) [ 1374.923375][T26364] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1374.989565][T30511] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 1375.120501][T30481] Cannot find add_set index 0 as target [ 1375.648615][T26364] usb 4-1: media controller created [ 1375.715561][T26364] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1375.892678][T30519] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 1376.513716][T26364] zl10353_read_register: readreg error (reg=127, ret==0) [ 1376.540290][T26364] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1377.653246][T26364] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1377.672615][T26364] usb 4-1: USB disconnect, device number 7 [ 1377.844345][T26364] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1379.793678][T30567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7486'. [ 1380.345625][T30573] openvswitch: netlink: Message has 4 unknown bytes. [ 1381.621812][T26364] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1382.528657][T26364] usb 4-1: Using ep0 maxpacket: 32 [ 1382.545667][T26364] usb 4-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 1382.563613][T26364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.587588][T26364] usb 4-1: config 0 descriptor?? [ 1382.832152][T30606] bridge0: port 1(team0) entered disabled state [ 1384.690001][T30616] 9pnet_fd: Insufficient options for proto=fd [ 1384.802560][T30606] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.816652][T30606] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.848148][T30606] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.888425][T30606] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.534718][T30640] openvswitch: netlink: Message has 4 unknown bytes. [ 1386.430143][ T27] audit: type=1326 audit(2000000151.397:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30644 comm="syz.2.7502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1386.510648][ T27] audit: type=1326 audit(2000000151.427:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30644 comm="syz.2.7502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1386.588282][ T27] audit: type=1326 audit(2000000151.427:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30644 comm="syz.2.7502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1386.662591][ T27] audit: type=1326 audit(2000000151.427:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30644 comm="syz.2.7502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1386.752895][ T27] audit: type=1326 audit(2000000151.427:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30644 comm="syz.2.7502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1386.809594][ T27] audit: type=1326 audit(2000000151.427:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30644 comm="syz.2.7502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1386.886623][ T27] audit: type=1326 audit(2000000151.447:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30644 comm="syz.2.7502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1386.940926][ T27] audit: type=1326 audit(2000000151.447:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30644 comm="syz.2.7502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1387.017295][ T27] audit: type=1326 audit(2000000151.447:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30644 comm="syz.2.7502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1387.092198][ T27] audit: type=1326 audit(2000000151.447:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30644 comm="syz.2.7502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1389.014301][T30587] bridge_slave_0: left allmulticast mode [ 1389.028129][T30587] bridge_slave_0: left promiscuous mode [ 1389.046119][T30587] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.152602][T30587] bridge_slave_1: left allmulticast mode [ 1389.168166][T30587] bridge_slave_1: left promiscuous mode [ 1389.182878][T30587] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.323401][T30587] bond0: (slave bond_slave_0): Releasing backup interface [ 1389.424517][T30587] bond0: (slave bond_slave_1): Releasing backup interface [ 1389.808767][T30587] team0: Port device team_slave_0 removed [ 1389.870857][T30587] team0: Port device team_slave_1 removed [ 1389.877463][T30587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1389.916419][T30587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1389.947311][T30587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1389.962648][T30587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1390.082211][T28097] usb 4-1: USB disconnect, device number 8 [ 1390.224871][T30654] vxcan2: entered allmulticast mode [ 1390.399345][T30667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7504'. [ 1390.489257][T30675] netlink: 'syz.8.7506': attribute type 10 has an invalid length. [ 1392.711592][T30715] xt_socket: unknown flags 0x50 [ 1393.839870][T30723] xt_socket: unknown flags 0x4c [ 1394.579591][T30726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7518'. [ 1394.657179][T30726] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1394.666647][T30726] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1394.675647][T30726] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1394.684511][T30726] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1394.781015][T30726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7518'. [ 1394.805954][T30734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7519'. [ 1394.863677][T30728] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7519'. [ 1395.140450][T30743] netlink: 'syz.3.7522': attribute type 1 has an invalid length. [ 1395.428962][T30743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1395.664346][T30750] bond1: (slave gretap1): making interface the new active one [ 1395.762773][T30750] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1396.941908][T30766] netlink: 'syz.8.7526': attribute type 1 has an invalid length. [ 1397.186531][T30766] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1397.519453][T30770] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1397.526768][T30770] bond15: (slave vti0): The slave device specified does not support setting the MAC address [ 1397.575892][T30759] loop3: detected capacity change from 0 to 32768 [ 1397.621458][T30759] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.7525 (30759) [ 1397.748097][T30759] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1397.812048][T30759] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1397.849180][T30770] bond15: (slave vti0): Error -95 calling set_mac_address [ 1397.859908][T30759] BTRFS info (device loop3): using free space tree [ 1398.167036][T30759] BTRFS info (device loop3): enabling ssd optimizations [ 1398.204973][T30771] bond15: (slave gretap4): making interface the new active one [ 1398.226011][T30759] BTRFS info (device loop3): auto enabling async discard [ 1398.246760][T30771] bond15: (slave gretap4): Enslaving as an active interface with an up link [ 1400.483645][T29602] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1403.026927][T30838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1405.420394][T30878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7543'. [ 1406.488091][ T27] kauditd_printk_skb: 45 callbacks suppressed [ 1406.488111][ T27] audit: type=1326 audit(2000000171.437:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30903 comm="syz.2.7551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1406.603563][ T27] audit: type=1326 audit(2000000171.437:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30903 comm="syz.2.7551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1406.713068][ T27] audit: type=1326 audit(2000000171.497:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30903 comm="syz.2.7551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1406.829981][ T27] audit: type=1326 audit(2000000171.497:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30903 comm="syz.2.7551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1406.976653][ T27] audit: type=1326 audit(2000000171.497:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30903 comm="syz.2.7551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbd0ab9c629 code=0x7ffc0000 [ 1408.028798][ T27] audit: type=1326 audit(2000000171.497:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30903 comm="syz.2.7551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbd0ab9c392 code=0x7ffc0000 [ 1408.174622][ T27] audit: type=1326 audit(2000000171.497:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30903 comm="syz.2.7551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbd0ab5cece code=0x7ffc0000 [ 1408.326857][ T27] audit: type=1326 audit(2000000171.527:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30903 comm="syz.2.7551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbd0ab9c457 code=0x7ffc0000 [ 1408.448321][ T27] audit: type=1326 audit(2000000171.527:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30903 comm="syz.2.7551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd0ab5cece code=0x7ffc0000 [ 1408.518486][ T27] audit: type=1326 audit(2000000171.527:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30903 comm="syz.2.7551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd0ab9c2bb code=0x7ffc0000 [ 1408.618177][T30940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7557'. [ 1408.627449][T30934] VFS: Mount too revealing [ 1409.719158][T30957] overlayfs: failed to clone upperpath [ 1411.988256][T30981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7565'. [ 1412.272612][T30981] netlink: 'syz.0.7565': attribute type 5 has an invalid length. [ 1412.308637][T30981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7565'. [ 1412.328934][T30988] overlayfs: failed to resolve './file1': -2 [ 1415.358226][T31015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7573'. [ 1415.668508][T16143] Bluetooth: hci2: command 0x0406 tx timeout [ 1415.689421][T31009] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7572'. [ 1416.749796][T31032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7577'. [ 1417.762313][T31048] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 1418.217010][T31055] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7581'. [ 1418.328712][T31058] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7581'. [ 1418.376095][T31057] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1418.385467][T31057] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1418.394144][T31057] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1419.331072][T31083] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1419.819842][T31095] netlink: get zone limit has 4 unknown bytes [ 1420.638103][T31097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7588'. [ 1420.711621][T31101] netlink: 'syz.8.7589': attribute type 1 has an invalid length. [ 1420.753301][T31101] netlink: 193500 bytes leftover after parsing attributes in process `syz.8.7589'. [ 1420.946566][T31105] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7590'. [ 1422.732720][T31130] netlink: 'syz.0.7594': attribute type 3 has an invalid length. [ 1422.751046][T31130] netlink: 'syz.0.7594': attribute type 3 has an invalid length. [ 1423.540575][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.546973][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.700388][T31154] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7599'. [ 1427.549394][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 1427.549411][ T27] audit: type=1326 audit(2000000192.517:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31189 comm="syz.0.7609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5c99c629 code=0x7ffc0000 [ 1427.587781][T31176] bond1: (slave gretap1): Releasing active interface [ 1427.659885][ T27] audit: type=1326 audit(2000000192.517:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31189 comm="syz.0.7609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5c99c629 code=0x7ffc0000 [ 1427.758995][ T27] audit: type=1326 audit(2000000192.517:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31189 comm="syz.0.7609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5c99c629 code=0x7ffc0000 [ 1427.819715][T31179] vlan0: entered promiscuous mode [ 1427.878485][ T27] audit: type=1326 audit(2000000192.517:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31189 comm="syz.0.7609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5c99c629 code=0x7ffc0000 [ 1427.947096][ T27] audit: type=1326 audit(2000000192.547:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31189 comm="syz.0.7609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce5c95cece code=0x7ffc0000 [ 1427.986886][T31179] team0: Port device vlan0 added [ 1428.032491][ T27] audit: type=1326 audit(2000000192.547:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31189 comm="syz.0.7609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5c99c629 code=0x7ffc0000 [ 1428.121087][ T27] audit: type=1326 audit(2000000192.547:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31189 comm="syz.0.7609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5c99c629 code=0x7ffc0000 [ 1428.423037][ T27] audit: type=1326 audit(2000000192.597:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31189 comm="syz.0.7609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5c99c629 code=0x7ffc0000 [ 1428.858417][ T27] audit: type=1326 audit(2000000192.597:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31189 comm="syz.0.7609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce5c99c629 code=0x7ffc0000 [ 1429.014600][ T27] audit: type=1326 audit(2000000192.607:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31189 comm="syz.0.7609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fce5c99c629 code=0x7ffc0000 [ 1431.456411][T31222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7615'. [ 1432.042265][T31236] tipc: Enabled bearer , priority 10 [ 1432.163475][T31236] tipc: Enabled bearer , priority 0 [ 1436.940076][T31299] netlink: 'syz.2.7632': attribute type 4 has an invalid length. [ 1437.463374][T31311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7634'. [ 1437.936111][T31311] bond14: (slave vcan0): refused to change device type [ 1438.002846][T31320] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7635'. [ 1438.028241][T31320] team0: left allmulticast mode [ 1438.033188][T31320] team0: left promiscuous mode [ 1438.058720][T31323] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1438.069187][T31320] bridge0: port 1(team0) entered disabled state [ 1438.093690][T31323] loop3: detected capacity change from 0 to 512 [ 1438.206329][T31323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1438.248182][T31323] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1438.409477][T31323] loop3: detected capacity change from 512 to 64 [ 1438.440138][T31334] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5920: Out of memory [ 1438.499263][T31334] EXT4-fs error (device loop3): ext4_dirty_inode:6124: inode #18: comm syz.3.7636: mark_inode_dirty error [ 1438.569633][T31334] __quota_error: 26 callbacks suppressed [ 1438.569655][T31334] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 1438.646291][T31334] EXT4-fs error (device loop3): ext4_write_dquot:6929: comm syz.3.7636: Failed to commit dquot type 0 [ 1438.747421][T31334] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 1438.768831][T31334] EXT4-fs error (device loop3): ext4_write_dquot:6929: comm syz.3.7636: Failed to commit dquot type 1 [ 1438.828751][T31334] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5920: Out of memory [ 1438.839059][T28487] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1438.878930][T31334] EXT4-fs error (device loop3): ext4_dirty_inode:6124: inode #18: comm syz.3.7636: mark_inode_dirty error [ 1438.958552][T31334] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5920: Out of memory [ 1439.042672][T31334] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #18: comm syz.3.7636: mark_inode_dirty error [ 1439.066128][T31334] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 1439.126341][T31334] EXT4-fs error (device loop3): ext4_write_dquot:6929: comm syz.3.7636: Failed to commit dquot type 0 [ 1439.219533][T31334] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 1439.228489][T28487] usb 4-1: config 67 has 0 interfaces, different from the descriptor's value: 1 [ 1439.238995][T28487] usb 4-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=55.3d [ 1439.278206][T31334] EXT4-fs error (device loop3): ext4_write_dquot:6929: comm syz.3.7636: Failed to commit dquot type 1 [ 1439.313354][T28487] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.004383][T14032] usb 4-1: USB disconnect, device number 9 [ 1441.415149][T31358] lo speed is unknown, defaulting to 1000 [ 1441.869931][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1441.912089][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.311040][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1442.330149][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.715462][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1442.757418][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.638142][T31327] kmmpd-loop3: attempt to access beyond end of device [ 1443.638142][T31327] loop3: rw=14337, sector=64, nr_sectors = 8 limit=64 [ 1443.688116][T31327] Buffer I/O error on dev loop3, logical block 8, lost sync page write [ 1443.747448][T31327] EXT4-fs error: 8 callbacks suppressed [ 1443.747468][T31327] EXT4-fs error (device loop3): kmmpd:186: comm kmmpd-loop3: Error writing to MMP block [ 1444.059336][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1444.106711][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.087443][T29602] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.149300][T31327] kmmpd-loop3: attempt to access beyond end of device [ 1445.149300][T31327] loop3: rw=14337, sector=64, nr_sectors = 8 limit=64 [ 1445.208069][T31327] Buffer I/O error on dev loop3, logical block 8, lost sync page write [ 1447.406753][T31433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7659'. [ 1449.670395][T28270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1449.685044][T28270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1449.697530][T28270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1449.706601][T28270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1449.715476][T28270] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1449.723386][T28270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1450.868322][T31456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7664'. [ 1450.978871][T31456] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 1451.024284][T31450] lo speed is unknown, defaulting to 1000 [ 1451.831058][T28270] Bluetooth: hci2: command tx timeout [ 1452.277703][T31461] netlink: 63 bytes leftover after parsing attributes in process `syz.0.7664'. [ 1452.632684][T31474] netlink: 'syz.2.7668': attribute type 1 has an invalid length. [ 1453.917020][T28270] Bluetooth: hci2: command tx timeout [ 1454.164598][ T144] hsr_slave_0: left promiscuous mode [ 1454.240749][ T144] hsr_slave_1: left promiscuous mode [ 1454.503466][ T144] veth1_macvtap: left promiscuous mode [ 1454.539323][ T144] veth0_macvtap: left promiscuous mode [ 1454.551920][ T144] veth1_vlan: left promiscuous mode [ 1455.998715][T28270] Bluetooth: hci2: command tx timeout [ 1456.937546][ T144] bond1 (unregistering): Released all slaves [ 1458.071288][T28270] Bluetooth: hci2: command tx timeout [ 1458.839193][ T144] team0 (unregistering): Port device vlan0 removed [ 1462.796135][ T144] bond0 (unregistering): Released all slaves [ 1463.385028][T31504] 8021q: adding VLAN 0 to HW filter on device team0 [ 1463.419209][T31504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1463.488196][T31535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7682'. [ 1463.905144][T31536] sch_tbf: burst 88 is lower than device veth41 mtu (1514) ! [ 1468.654041][T31559] bad cache= option: no%e [ 1468.654041][T31559] [ 1468.661399][T31559] CIFS: VFS: bad cache= option: no%e [ 1469.019191][T31450] chnl_net:caif_netlink_parms(): no params data found [ 1469.214816][T31566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7688'. [ 1471.477819][T31592] netlink: 'syz.0.7693': attribute type 10 has an invalid length. [ 1471.489292][T31592] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7693'. [ 1471.510703][T31592] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.528289][T31592] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.536563][T31592] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.591252][T31592] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.630848][T31592] geneve0: entered promiscuous mode [ 1471.636367][T31592] geneve0: entered allmulticast mode [ 1471.674227][T31592] team0: Port device geneve0 added [ 1471.795449][T31450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1471.866518][T31450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.904735][T31450] bridge_slave_0: entered allmulticast mode [ 1471.948279][T31450] bridge_slave_0: entered promiscuous mode [ 1472.044104][T31450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.276983][T31450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.638488][T31450] bridge_slave_1: entered allmulticast mode [ 1472.646174][T31450] bridge_slave_1: entered promiscuous mode [ 1472.963969][T31450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.038799][T31450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1474.122322][T31450] team0: Port device team_slave_0 added [ 1474.168899][T31450] team0: Port device team_slave_1 added [ 1474.284477][T31450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1474.344427][T31450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1474.447757][T31450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1474.489964][T31450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1474.548657][T31450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1474.621651][T31450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1476.389436][T31638] netlink: 'syz.0.7702': attribute type 1 has an invalid length. [ 1476.519955][T31638] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1476.594352][T31450] hsr_slave_0: entered promiscuous mode [ 1476.617583][T31450] hsr_slave_1: entered promiscuous mode [ 1476.635340][T31450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1476.653029][T31450] Cannot create hsr debugfs directory [ 1476.713885][T31642] bond14: entered allmulticast mode [ 1485.098724][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.105295][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.493392][T31450] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1487.219758][T31730] Device name cannot be null; rc = [-22] [ 1487.279859][T31450] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1487.592464][T31450] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1487.906891][T31450] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1488.957162][T31756] netlink: 'syz.8.7730': attribute type 11 has an invalid length. [ 1493.366435][T31773] lo speed is unknown, defaulting to 1000 [ 1497.304431][T31450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1501.220427][T31450] 8021q: adding VLAN 0 to HW filter on device team0 [ 1502.131052][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.138329][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1502.185176][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.192510][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1503.979579][T31833] netlink: 'syz.0.7742': attribute type 1 has an invalid length. [ 1504.826768][T31450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1505.857987][T26383] hsr_slave_0: left promiscuous mode [ 1505.864333][T26383] hsr_slave_1: left promiscuous mode [ 1505.901822][T26383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1505.929729][T26383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1505.949081][T26383] bridge_slave_1: left allmulticast mode [ 1505.954922][T26383] bridge_slave_1: left promiscuous mode [ 1505.968728][T26383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.997711][T26383] bridge_slave_0: left allmulticast mode [ 1506.015353][T26383] bridge_slave_0: left promiscuous mode [ 1506.039202][T26383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.216158][T22892] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1508.238266][T22892] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1508.256313][T22892] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1508.266995][T22892] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1508.276416][T22892] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1508.285090][T22892] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1508.291963][T31862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1508.304199][T31862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1508.318507][T31862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1508.332121][T31862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1508.349210][T31862] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1508.367253][T31862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1508.653650][T26383] team0 (unregistering): Port device team_slave_1 removed [ 1508.800055][T26383] team0 (unregistering): Port device team_slave_0 removed [ 1508.932617][T26383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1509.049416][T26383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1510.203736][T26383] bond0 (unregistering): Released all slaves [ 1510.468290][T31862] Bluetooth: hci4: command tx timeout [ 1510.468345][T22892] Bluetooth: hci5: command tx timeout [ 1510.734033][T31860] lo speed is unknown, defaulting to 1000 [ 1510.773586][T31861] lo speed is unknown, defaulting to 1000 [ 1512.548260][T22892] Bluetooth: hci5: command tx timeout [ 1512.553850][T31862] Bluetooth: hci4: command tx timeout [ 1513.505377][T31861] chnl_net:caif_netlink_parms(): no params data found [ 1513.543942][T31891] netlink: 'syz.0.7755': attribute type 5 has an invalid length. [ 1513.914147][T31860] chnl_net:caif_netlink_parms(): no params data found [ 1514.638409][T22892] Bluetooth: hci5: command tx timeout [ 1514.643924][T22892] Bluetooth: hci4: command tx timeout [ 1515.258361][T31861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.265588][T31861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.309600][T31861] bridge_slave_0: entered allmulticast mode [ 1515.317694][T31861] bridge_slave_0: entered promiscuous mode [ 1515.439175][T31861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.446451][T31861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.488824][T31861] bridge_slave_1: entered allmulticast mode [ 1515.552024][T31861] bridge_slave_1: entered promiscuous mode [ 1515.918498][T31860] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.925836][T31860] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.944863][T31860] bridge_slave_0: entered allmulticast mode [ 1515.966781][T31860] bridge_slave_0: entered promiscuous mode [ 1516.003608][T31861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1516.017669][T31861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.066268][T31860] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.084603][T31860] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.094869][T31860] bridge_slave_1: entered allmulticast mode [ 1516.109627][T31860] bridge_slave_1: entered promiscuous mode [ 1516.176344][T31861] team0: Port device team_slave_0 added [ 1516.302474][T31861] team0: Port device team_slave_1 added [ 1516.366796][T31860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1516.494813][T31860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.529323][T31861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.548702][T31861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.597309][T31861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.711246][T31862] Bluetooth: hci4: command tx timeout [ 1516.716752][T31862] Bluetooth: hci5: command tx timeout [ 1517.180760][T31928] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1517.966202][T31861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1517.976095][T31861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1518.012827][T31861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1518.043648][T31860] team0: Port device team_slave_0 added [ 1518.182015][T31860] team0: Port device team_slave_1 added [ 1518.397104][T31861] hsr_slave_0: entered promiscuous mode [ 1518.415700][T31861] hsr_slave_1: entered promiscuous mode [ 1518.452163][T31861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1518.470631][T31861] Cannot create hsr debugfs directory [ 1518.582078][T31860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1518.590190][T31860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1519.440987][T31860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1519.470879][T31860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1519.488015][T31860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1519.543578][T31860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1519.564498][T31935] lo speed is unknown, defaulting to 1000 [ 1520.183671][T31860] hsr_slave_0: entered promiscuous mode [ 1520.199788][T31860] hsr_slave_1: entered promiscuous mode [ 1520.210562][T31860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1520.226681][T31860] Cannot create hsr debugfs directory [ 1520.734227][T26383] hsr_slave_0: left promiscuous mode [ 1520.745262][T26383] hsr_slave_1: left promiscuous mode [ 1520.752502][T26383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1520.762060][T26383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1520.779165][T26383] bridge_slave_1: left allmulticast mode [ 1520.785129][T26383] bridge_slave_1: left promiscuous mode [ 1520.795469][T26383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1520.814484][T26383] bridge_slave_0: left allmulticast mode [ 1520.825011][T26383] bridge_slave_0: left promiscuous mode [ 1520.831657][T26383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.804133][T26383] team0 (unregistering): Port device team_slave_1 removed [ 1521.927695][T26383] team0 (unregistering): Port device team_slave_0 removed [ 1522.079658][T26383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1522.212387][T26383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1523.099063][T26383] bond0 (unregistering): Released all slaves [ 1524.101707][T31958] netlink: 'syz.0.7771': attribute type 4 has an invalid length. [ 1525.219763][T31964] netlink: 'syz.0.7774': attribute type 9 has an invalid length. [ 1525.435109][T31972] netlink: 'syz.2.7776': attribute type 21 has an invalid length. [ 1527.349177][T31860] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1527.509341][T31860] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1527.524499][T31860] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1527.620633][T31860] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1527.666007][T26383] tipc: Left network mode [ 1527.989414][T26383] bond12: (slave ip6gretap1): Releasing backup interface [ 1527.999028][T26383] ip6gretap1 (unregistering): left allmulticast mode [ 1528.313717][T31861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1528.655359][T31861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1529.011036][T31861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1529.522942][T31861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1529.976167][T26383] bond14: (slave gretap3): Releasing active interface [ 1530.083703][T26383] bond15: (slave gretap4): Releasing active interface [ 1531.010628][T31860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1531.307858][T31860] 8021q: adding VLAN 0 to HW filter on device team0 [ 1531.326500][T31861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1531.441314][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1531.448569][ T7429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1531.556964][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.564247][ T7429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1531.815379][T32019] netlink: get zone limit has 4 unknown bytes [ 1531.890884][T31861] 8021q: adding VLAN 0 to HW filter on device team0 [ 1532.389893][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.397137][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1532.477481][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.484761][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1532.550906][T26383] veth23: left allmulticast mode [ 1532.555956][T26383] veth23: left promiscuous mode [ 1532.576038][T26383] bridge15: port 2(veth23) entered disabled state [ 1532.592791][T26383] veth21: left allmulticast mode [ 1532.607993][T26383] veth21: left promiscuous mode [ 1532.613238][T26383] bridge15: port 1(veth21) entered disabled state [ 1532.663688][T26383] hsr_slave_0: left promiscuous mode [ 1532.687729][T26383] hsr_slave_1: left promiscuous mode [ 1534.065147][T26383] bond15 (unregistering): Released all slaves [ 1534.878221][T32031] ptrace attach of "./syz-executor exec"[32033] was attempted by "./syz-executor exec"[32031] [ 1535.856429][T26383] team0 (unregistering): Port device bridge13 removed [ 1537.152906][T26383] bond14 (unregistering): Released all slaves [ 1542.778602][T26383] bond13 (unregistering): (slave veth15): Releasing backup interface [ 1542.786779][T26383] veth15 (unregistering): left promiscuous mode [ 1543.440930][T26383] bond13 (unregistering): Released all slaves [ 1543.471055][T26383] bond12 (unregistering): Released all slaves [ 1543.591346][T26383] bond11 (unregistering): Released all slaves [ 1544.082611][T26383] bond10 (unregistering): Released all slaves [ 1544.168643][T26383] bond9 (unregistering): Released all slaves [ 1544.785773][T26383] bond8 (unregistering): Released all slaves [ 1545.384771][T26383] bond0 (unregistering): Released all slaves [ 1545.917538][T26383] bond7 (unregistering): Released all slaves [ 1546.406570][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.413171][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.451699][T26383] bond6 (unregistering): Released all slaves [ 1546.864944][T26383] bond5 (unregistering): Released all slaves [ 1546.900398][T26383] bond4 (unregistering): Released all slaves [ 1547.415948][T26383] bond3 (unregistering): Released all slaves [ 1547.814580][T26383] bond2 (unregistering): Released all slaves [ 1548.336705][T26383] bond1 (unregistering): Released all slaves [ 1550.634807][T32042] netlink: 'syz.2.7796': attribute type 1 has an invalid length. [ 1550.670484][T32042] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1551.580684][T31860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1551.928403][T31861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1552.284377][T31861] veth0_vlan: entered promiscuous mode [ 1552.341184][T31861] veth1_vlan: entered promiscuous mode [ 1552.440489][T22892] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1552.459859][T22892] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1552.483563][T22892] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1552.529091][T22892] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1552.574997][T22892] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1552.585341][T22892] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1552.699437][T31861] veth0_macvtap: entered promiscuous mode [ 1552.761582][T31861] veth1_macvtap: entered promiscuous mode [ 1552.921470][T31861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1552.964773][T32086] lo speed is unknown, defaulting to 1000 [ 1552.973459][T31861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1553.054494][T31861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.098312][T31861] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.137817][T31861] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.146804][T31861] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.711572][T31860] veth0_vlan: entered promiscuous mode [ 1553.939929][ T7431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.964621][ T7431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1553.985408][T31860] veth1_vlan: entered promiscuous mode [ 1554.080108][T26383] IPVS: stop unused estimator thread 0... [ 1554.156428][ T7431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1554.186019][ T7431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1554.279989][T31860] veth0_macvtap: entered promiscuous mode [ 1554.337260][T31860] veth1_macvtap: entered promiscuous mode [ 1554.459763][T31860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1554.503907][T31860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.536203][T31860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1554.780400][T32086] chnl_net:caif_netlink_parms(): no params data found [ 1554.804608][T22892] Bluetooth: hci0: command tx timeout [ 1554.817734][T31860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1555.283451][T31860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.312958][T31860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1555.491795][T31860] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.505006][T31860] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.569241][T31860] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.600213][T31860] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.682503][T32124] netlink: zone id is out of range [ 1555.721998][T32124] netlink: zone id is out of range [ 1555.727314][T32124] netlink: zone id is out of range [ 1555.758613][T32124] netlink: zone id is out of range [ 1555.771207][T32124] netlink: zone id is out of range [ 1555.776743][T32124] netlink: zone id is out of range [ 1555.823966][T32124] netlink: zone id is out of range [ 1555.877439][T32124] netlink: zone id is out of range [ 1555.918226][T32124] netlink: zone id is out of range [ 1555.923437][T32124] netlink: zone id is out of range [ 1556.050241][T32086] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.083399][T32086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.111189][T32086] bridge_slave_0: entered allmulticast mode [ 1556.138954][T32086] bridge_slave_0: entered promiscuous mode [ 1556.220285][T32086] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.227527][T32086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.295718][T32086] bridge_slave_1: entered allmulticast mode [ 1556.338436][T32086] bridge_slave_1: entered promiscuous mode [ 1556.869816][T22892] Bluetooth: hci0: command tx timeout [ 1557.266234][T32086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1557.367472][T32086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1557.778618][T31788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.014579][T31788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.352162][T32086] team0: Port device team_slave_0 added [ 1558.384909][T32086] team0: Port device team_slave_1 added [ 1558.699783][ T7431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1558.781020][T32158] UBIFS error (pid: 32158): cannot open "./file0", error -22 [ 1558.884193][T32086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1559.188717][T22892] Bluetooth: hci0: command tx timeout [ 1559.778259][ T7431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.794536][T32086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.869212][T32086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1559.920907][T32086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1559.937837][T32086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1560.108133][T32086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1561.031471][T32086] hsr_slave_0: entered promiscuous mode [ 1561.049410][T32086] hsr_slave_1: entered promiscuous mode [ 1561.056099][T32086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1561.064207][T32086] Cannot create hsr debugfs directory [ 1561.278104][T22892] Bluetooth: hci0: command tx timeout [ 1561.547985][T30648] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1561.948026][T30648] usb 6-1: Using ep0 maxpacket: 16 [ 1562.009407][T30648] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1562.450896][T30648] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1562.892029][T30648] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1563.048455][T30648] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1563.057642][T30648] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1563.109752][T30648] usb 6-1: SerialNumber: syz [ 1563.158716][T32171] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1563.302264][T32190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7822'. [ 1563.472913][T32171] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1564.246285][T30648] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1564.445203][T30648] usb 6-1: USB disconnect, device number 14 [ 1564.852752][T32206] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7823'. [ 1565.013238][T32086] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1565.071898][T32086] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1566.288527][T32086] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1566.362782][T32086] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1566.476442][T32220] loop5: detected capacity change from 0 to 512 [ 1566.776655][T32193] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1566.811926][T32086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1567.466958][T32086] 8021q: adding VLAN 0 to HW filter on device team0 [ 1567.592291][T26383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.599593][T26383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1567.701536][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.708854][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1568.226509][T32086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1568.690957][T32248] netlink: 'syz.5.7832': attribute type 4 has an invalid length. [ 1569.729841][T32086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1572.124480][T32290] x_tables: duplicate entry at hook 3 [ 1572.200496][T32291] netlink: 'syz.5.7840': attribute type 16 has an invalid length. [ 1572.266067][T32291] netlink: 'syz.5.7840': attribute type 17 has an invalid length. [ 1572.804716][T32291] net_ratelimit: 23 callbacks suppressed [ 1572.804729][T32291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1573.209592][T32086] veth0_vlan: entered promiscuous mode [ 1573.278746][T32086] veth1_vlan: entered promiscuous mode [ 1573.391565][T32086] veth0_macvtap: entered promiscuous mode [ 1573.430350][T32086] veth1_macvtap: entered promiscuous mode [ 1573.529436][T32086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1573.560545][T32086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1573.588060][T32086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1573.608407][T32086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1573.642905][T32086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1573.678456][T32312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7843'. [ 1573.698172][T32312] bridge_slave_1: left allmulticast mode [ 1573.703944][T32312] bridge_slave_1: left promiscuous mode [ 1573.748973][T32312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.819867][T32312] bridge_slave_0: left allmulticast mode [ 1573.847316][T32312] bridge_slave_0: left promiscuous mode [ 1573.868273][T32312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.261797][T32086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1574.337758][T32086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1574.384980][T32086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1574.396330][T32086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1574.419930][T32086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1574.434209][T32086] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.456808][T32086] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.476494][T32086] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.791157][T32086] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1575.269727][T32330] loop5: detected capacity change from 0 to 4096 [ 1575.277395][T32330] EXT4-fs: Ignoring removed mblk_io_submit option [ 1575.306164][T32330] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1575.351340][T32330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1576.427100][ T7431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1576.485841][ T7431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1576.522969][T32345] bridge16: entered allmulticast mode [ 1576.603734][T31860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1576.729138][T32147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1576.784370][T32147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1579.298174][ T8] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1580.595204][ T8] usb 2-1: config 3 has an invalid interface number: 173 but max is 0 [ 1580.614140][ T8] usb 2-1: config 3 has no interface number 0 [ 1580.628340][ T8] usb 2-1: config 3 interface 173 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1580.647942][ T8] usb 2-1: config 3 interface 173 has no altsetting 0 [ 1580.671998][ T8] usb 2-1: New USB device found, idVendor=03f0, idProduct=0f9b, bcdDevice=d2.cf [ 1580.712044][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.738977][T32379] syzkaller0: entered promiscuous mode [ 1580.767211][T32379] syzkaller0: entered allmulticast mode [ 1580.773133][ T8] usb 2-1: Product: syz [ 1580.808608][ T8] usb 2-1: Manufacturer: syz [ 1580.813308][ T8] usb 2-1: SerialNumber: syz [ 1580.928616][ T8] usb 2-1: can't set config #3, error -71 [ 1581.009137][ T8] usb 2-1: USB disconnect, device number 21 [ 1581.023639][T32385] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7857'. [ 1582.744925][ T27] audit: type=1804 audit(2000000347.707:898): pid=32394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7860" name="bus" dev="ramfs" ino=102462 res=1 errno=0 [ 1582.832374][ T27] audit: type=1804 audit(2000000347.737:899): pid=32394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.7860" name="bus" dev="ramfs" ino=102462 res=1 errno=0 [ 1584.289412][T32408] xt_TCPMSS: Only works on TCP SYN packets [ 1586.901392][T32425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7855'. [ 1586.932521][T32425] team0: left allmulticast mode [ 1586.937481][T32425] team_slave_0: left allmulticast mode [ 1587.029679][T32425] team_slave_1: left allmulticast mode [ 1587.079817][T32425] geneve0: left allmulticast mode [ 1587.126646][T32425] team0: left promiscuous mode [ 1587.166679][T32425] team_slave_0: left promiscuous mode [ 1587.258254][T32425] team_slave_1: left promiscuous mode [ 1587.460330][T32425] bridge6: left promiscuous mode [ 1587.650902][T32425] geneve0: left promiscuous mode [ 1587.845883][T32425] bridge0: port 2(team0) entered disabled state [ 1587.928837][T32425] bridge_slave_0: left allmulticast mode [ 1587.934596][T32425] bridge_slave_0: left promiscuous mode [ 1587.992681][T32425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.319620][T32439] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7870'. [ 1588.469848][T32439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7870'. [ 1592.533254][T32491] loop6: detected capacity change from 0 to 4096 [ 1592.550533][T32491] ext4: Unknown parameter 'hash' [ 1594.430667][T32498] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7880'. [ 1595.177327][T32510] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7881'. [ 1595.257523][T32510] bridge_slave_1: left allmulticast mode [ 1595.297446][T32510] bridge_slave_1: left promiscuous mode [ 1595.304196][T32510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.558644][T32510] bridge_slave_0: left allmulticast mode [ 1595.564762][T32510] bridge_slave_0: left promiscuous mode [ 1595.604206][T32510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1600.023662][T32582] loop6: detected capacity change from 0 to 256 [ 1600.028290][ T27] audit: type=1804 audit(2000000364.977:900): pid=32578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.7892" name="/newroot/22/bus/bus" dev="overlay" ino=139 res=1 errno=0 [ 1600.090407][T32582] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1600.132157][T32582] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1600.186293][T32582] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1600.377701][T32587] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7894'. [ 1605.522674][T32640] libceph: resolve '4..' (ret=-3): failed [ 1607.837537][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.844012][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.281756][T32674] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 1617.821352][T30648] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1623.899645][T32766] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1624.075923][ T301] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1624.427451][ T307] bond_slave_1: entered promiscuous mode [ 1624.863731][ T307] bond_slave_1: left promiscuous mode [ 1628.444686][ T341] loop5: detected capacity change from 0 to 4096 [ 1628.461910][ T341] ext4: Unknown parameter 'hash' [ 1630.209915][T32193] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1630.873214][ T351] 9pnet_fd: Insufficient options for proto=fd [ 1631.730332][ T365] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1633.596989][ T390] bond15: (slave ip6gretap2): making interface the new active one [ 1633.759296][ T390] bond15: (slave ip6gretap2): Enslaving as an active interface with an up link [ 1635.153728][ T420] loop5: detected capacity change from 0 to 128 [ 1635.205973][ T420] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1635.254853][ T420] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1635.309404][ T426] loop6: detected capacity change from 0 to 512 [ 1635.333809][ T424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7964'. [ 1635.344228][ T420] ext2 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1635.509082][T16143] Bluetooth: hci4: command 0x0406 tx timeout [ 1635.594155][T16143] Bluetooth: hci5: command 0x0406 tx timeout [ 1635.653655][ T426] FAT-fs (loop6): error, invalid FAT chain (i_pos 51, last_block 64) [ 1635.883821][T31860] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1638.254902][ T461] tipc: Started in network mode [ 1638.278143][ T461] tipc: Node identity 4a1357e5f89c, cluster identity 4711 [ 1638.321471][ T461] tipc: Enabled bearer , priority 0 [ 1638.596870][ T455] tipc: Disabling bearer [ 1648.272555][ T588] loop1: detected capacity change from 0 to 512 [ 1648.332773][ T588] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1648.438075][ T588] EXT4-fs error (device loop1): ext4_orphan_get:1424: comm syz.1.7995: bad orphan inode 131083 [ 1648.490435][ T588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1649.897198][T31861] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1652.988024][T30650] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1653.168022][T30650] usb 7-1: Using ep0 maxpacket: 16 [ 1653.190855][T30650] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1653.261548][T30650] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1653.319440][T30650] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1653.384504][ T133] ------------[ cut here ]------------ [ 1653.391688][ T133] WARNING: CPU: 1 PID: 133 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3a7/0x820 [ 1653.401801][ T133] Modules linked in: [ 1653.405745][ T133] CPU: 1 PID: 133 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1653.413311][ T133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1653.423528][ T133] Workqueue: iou_exit io_ring_exit_work [ 1653.430105][ T133] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 1653.436026][ T133] Code: 78 23 e8 ac 2a 0b f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ed ec 10 00 48 85 c0 75 1d e8 93 2a 0b f7 e9 b9 fd ff ff e8 89 2a 0b f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 1653.455876][ T133] RSP: 0018:ffffc90002d77a40 EFLAGS: 00010293 [ 1653.462392][ T133] RAX: ffffffff8a7bea87 RBX: ffff88805a764000 RCX: ffff88801af59e00 [ 1653.470498][ T133] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000 [ 1653.478636][ T133] RBP: ffffc90002d77bb0 R08: ffffc90002d779c7 R09: 1ffff920005aef38 [ 1653.486886][ T133] R10: dffffc0000000000 R11: fffff520005aef39 R12: dffffc0000000000 [ 1653.495032][ T133] R13: ffff88805a764288 R14: 0000000100020fc9 R15: 0000000100020fcb [ 1653.503096][ T133] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1653.512432][ T133] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1653.519195][ T133] CR2: 0000001b2d31cff8 CR3: 00000000247f6000 CR4: 00000000003506e0 [ 1653.527214][ T133] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1653.535880][ T133] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1653.544081][ T133] Call Trace: [ 1653.547413][ T133] [ 1653.550492][ T133] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 1653.556378][ T133] ? _raw_spin_unlock_irq+0x23/0x50 [ 1653.561665][ T133] ? process_scheduled_works+0x96f/0x15d0 [ 1653.567441][ T133] ? process_scheduled_works+0x96f/0x15d0 [ 1653.573325][ T133] process_scheduled_works+0xa5d/0x15d0 [ 1653.579103][ T133] ? assign_work+0x430/0x430 [ 1653.583844][ T133] ? assign_work+0x3d0/0x430 [ 1653.589008][ T133] worker_thread+0xa55/0xfc0 [ 1653.593685][ T133] kthread+0x2fa/0x390 [ 1653.597936][ T133] ? pr_cont_work+0x560/0x560 [ 1653.602674][ T133] ? kthread_blkcg+0xd0/0xd0 [ 1653.607320][ T133] ret_from_fork+0x48/0x80 [ 1653.611884][ T133] ? kthread_blkcg+0xd0/0xd0 [ 1653.616559][ T133] ret_from_fork_asm+0x11/0x20 [ 1653.621446][ T133] [ 1653.624517][ T133] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1653.631830][ T133] CPU: 1 PID: 133 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 1653.639329][ T133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1653.649522][ T133] Workqueue: iou_exit io_ring_exit_work [ 1653.655139][ T133] Call Trace: [ 1653.658451][ T133] [ 1653.661417][ T133] dump_stack_lvl+0x18c/0x250 [ 1653.666146][ T133] ? show_regs_print_info+0x20/0x20 [ 1653.671433][ T133] ? load_image+0x400/0x400 [ 1653.675995][ T133] panic+0x2dc/0x730 [ 1653.679943][ T133] ? bpf_jit_dump+0xd0/0xd0 [ 1653.684508][ T133] ? ret_from_fork_asm+0x11/0x20 [ 1653.689511][ T133] __warn+0x2e0/0x470 [ 1653.693533][ T133] ? io_ring_exit_work+0x3a7/0x820 [ 1653.698704][ T133] ? io_ring_exit_work+0x3a7/0x820 [ 1653.703858][ T133] report_bug+0x2be/0x4f0 [ 1653.708247][ T133] ? io_ring_exit_work+0x3a7/0x820 [ 1653.713405][ T133] ? io_ring_exit_work+0x3a7/0x820 [ 1653.718555][ T133] ? io_ring_exit_work+0x3a9/0x820 [ 1653.723709][ T133] handle_bug+0xcf/0x120 [ 1653.727998][ T133] exc_invalid_op+0x1a/0x50 [ 1653.732547][ T133] asm_exc_invalid_op+0x1a/0x20 [ 1653.737450][ T133] RIP: 0010:io_ring_exit_work+0x3a7/0x820 [ 1653.743227][ T133] Code: 78 23 e8 ac 2a 0b f7 48 8b 7c 24 30 48 8b 74 24 08 e8 ed ec 10 00 48 85 c0 75 1d e8 93 2a 0b f7 e9 b9 fd ff ff e8 89 2a 0b f7 <0f> 0b b8 70 17 00 00 48 89 44 24 08 eb cf c7 84 24 90 00 00 00 00 [ 1653.762884][ T133] RSP: 0018:ffffc90002d77a40 EFLAGS: 00010293 [ 1653.769004][ T133] RAX: ffffffff8a7bea87 RBX: ffff88805a764000 RCX: ffff88801af59e00 [ 1653.777013][ T133] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000 [ 1653.785114][ T133] RBP: ffffc90002d77bb0 R08: ffffc90002d779c7 R09: 1ffff920005aef38 [ 1653.793129][ T133] R10: dffffc0000000000 R11: fffff520005aef39 R12: dffffc0000000000 [ 1653.801148][ T133] R13: ffff88805a764288 R14: 0000000100020fc9 R15: 0000000100020fcb [ 1653.809169][ T133] ? io_ring_exit_work+0x3a7/0x820 [ 1653.814359][ T133] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 1653.820239][ T133] ? _raw_spin_unlock_irq+0x23/0x50 [ 1653.825478][ T133] ? process_scheduled_works+0x96f/0x15d0 [ 1653.831241][ T133] ? process_scheduled_works+0x96f/0x15d0 [ 1653.837017][ T133] process_scheduled_works+0xa5d/0x15d0 [ 1653.842645][ T133] ? assign_work+0x430/0x430 [ 1653.847380][ T133] ? assign_work+0x3d0/0x430 [ 1653.852021][ T133] worker_thread+0xa55/0xfc0 [ 1653.856684][ T133] kthread+0x2fa/0x390 [ 1653.860797][ T133] ? pr_cont_work+0x560/0x560 [ 1653.865520][ T133] ? kthread_blkcg+0xd0/0xd0 [ 1653.870147][ T133] ret_from_fork+0x48/0x80 [ 1653.874609][ T133] ? kthread_blkcg+0xd0/0xd0 [ 1653.879238][ T133] ret_from_fork_asm+0x11/0x20 [ 1653.884071][ T133] [ 1653.887696][ T133] Kernel Offset: disabled [ 1653.892262][ T133] Rebooting in 86400 seconds..