last executing test programs: 1m4.400071258s ago: executing program 0 (id=2098): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x68, r1, 0x303, 0xfffffffc, 0x0, {0xa, 0x6}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x4000014) 1m4.307485759s ago: executing program 0 (id=2100): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="540100001000130700000000000000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1914aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000d00000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29"], 0x154}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 1m4.220311029s ago: executing program 0 (id=2103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x100000000}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) 1m4.10728091s ago: executing program 0 (id=2106): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000500), 0x4) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, &(0x7f00000019c0)={@dev={0xac, 0x14, 0x14, 0x39}, @private=0xa010100, 0x0, "544e6b24af869c8bcb343306faffff1400165fadcc19dc1a4d5b370e4d00", 0x0, 0x0, 0xfffffffd}, 0x3c) 1m3.573376314s ago: executing program 0 (id=2111): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)='%pi6 \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000000ac0)="$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") r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 1m3.293704266s ago: executing program 0 (id=2117): unshare(0x68040200) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x400}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 47.978178016s ago: executing program 32 (id=2117): unshare(0x68040200) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x400}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 30.614176069s ago: executing program 2 (id=2473): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010010000500000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000340), 0x0}, 0x20) 30.195632492s ago: executing program 2 (id=2476): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x40000162, 0x0, 0x0) 30.195363202s ago: executing program 2 (id=2477): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8, 0x0, 0x0, 0x0, 0x5}, {0x0, 0xc}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x10000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x20000}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x10}], [{}, {}, {}, {}, {}, {0x5}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) 30.100004602s ago: executing program 2 (id=2480): syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000540)='./file0\x00', 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00420152c4c7ef7f633ea8000000004d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c370fd65509ff9c85cbd090000008b9412ffa005000000000000273d94d3d75d2327ae06fb74cea53cd8f2abbcf843f247be745ac8e75c32b9460623409a4af21c2568c62dbe7e78359bf47bdb82bbdd40be4a7e5d3396b0212ad24405886f22285c70296a4bb673226b70c4d0e6b98b7a9c2644d4cd55cb77b6abbec07137f6f9d178abb6b3c3bd2c932f52ff1f308e49e9ea435e999a11765291492bfbe10b148bbfddd6f7d6ca1469e4b3646ffc"], 0x9, 0xa36, &(0x7f0000001580)="$eJzs3d1rXOedB/DvGevNSvA6iTfrNUk8dnCiJFpZkjc2JhcbWxrZyuplkWSI2V3iENuLsdgsSRaSsBdeKL1qaCil0Pam5LJXgfSiuSm+ay97VUqhzX9QQq/cQpkyZ0a2JM+MZFmWXPfzETNzXn7P8/zOnDPn8YxnzhP+mtXr9fK2xfkLP97JZHn4nJ386rPPP2nc/v9G+rInrxY/TQaSVJOeP5fHSu/E5ML87AYVXU8uJbmZFEn603zsYO+auUspvp3H78zfTPHDHGxTbOAeN44N1fmbttvHHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJQmJkdHx4rMTM9deLPaWTkEeJf1K9V9WY76XXy5uom+Ns0WSdG4ZWBgZajvgwfurH66cXc0zzTnnmmO/D2Qjx97ev9rT/VUVsp3SWhHvP/Rx9ffXl6+8t6dRb0bFup/sDltSd/Wip2rzU0vzk/PnjlXq04vzldPnzw5evz81GJ1ajq1xYuLS7XZ6sRC7czS/EJ1aOKl6tjp0yeqtZGL8xfmzk2OzNRWFp76p/HR0ZPVN0b+rXZmYXF+7vgbI4sT56dnZqbnzpUxjdWNmFONA/Ffp5eqS7Uzs9Xq1WvLV05slGQjaKztmqK6J6uCxjeqaXx0fHxsbHx87OSrp189NTrac9eC0XVyV8TuH7Tsnp88kHM4bFGl1f9nJtOZy4W8mWrbv4lMZiHzme2wvmWl/z92vNa13dX9/0ovf/DO6kMp+//nmnPPder/O+Sy8V+93qx5q+VX/t7PR/k41/N2lrOcK3nvvmvsz7rM/ni/Nbb+qm23dvD+aj2XWuYyncXMZzqzOVMuqbaWVHM6J3Myo3kr5zOVxVQzlenMpJbFXMxillIrj6iJLKSWM1nKfBZSzVAm8lKqGcvpnM6JVFPLSC5mPhcyl3OZzJmylqu5Vj7vJ7rkeDtobDNB412Ctrn/rz+M/xLkQdvW8zfcj3qr/2/3Hr0ZUF+ZGprYsawAAACA7fSPv8i+A0/+/LdJb54tP5efmp6pje52WgAAAMA2Kr+u90zjobcx9WwK7/8BAADgUVOUv7ErkgzmcHOq+UuoPfEhAAAAADwiyv//f67xMNiYOpzi9pVQLu12bgAAAMD2uH2N/XS6xu6GV+Evhlcu/1u93Hy83IpoXed3cGp6pjYyMT/z2lheKK8yUP7S4K7a9iRFb/nzg5dzpBl1ZLD5OLi2xoFG1NjIa2N5OUdbGzL0fOPh+aE2kePNyBebkS92iTzRiASAR93RLv3xZvv/lzPcjBg+1NOXpOdQm551VM8KAA+LjcfY2TCi+Oc77/97W9Wu6f+fzNXDza8UjOSdvJvlXM5w+WuD8hsHa2r9j09bnxnc/hrCaIY3+DRgJfaXpyoZ7vB5QF/W1zue4Q0+EWjG5j+TEw9+RwDADjraoR++l/5/eNX7/9z9/v/20EJX/KQQAB4Kt0ewf4ATu72NAMBaemkAAAAAAAAAAAAAAAAAAAAAAAAAAADYftt6tf+BLRb/XWtcvwc7DMFdE3tbz8HW6/lOkp3LuWi01b99FVa2oZ56kp3aXzs3kf3Jlp/VtodxX5KNi/dsImanJnbzrAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBOKZI97ZZXkv4ko0mO73xWW1c0tqiLGzuWyUPjX1bPFLdyKx9m3+6lAwAAAAAAAAAAAAAAAAAAAAAAAAAAAADwaGpd/7+S5uNjzUXpqSTHklxK8u+7neN2urXbCWyTvVsst+r6/419nnqRnuZuT9E7MbkwP1uOn9DfWP/VZ59/0ritKt6/2XbKwMq6wSVaLayP/dHj6WtOPVGWGpy88v71D979n+rk2VTSl7NLUzOTs+cWXr9T5Onii6Sa5m3FSr7/d+xnn7bZ8i8aW9re+nanyidn8u52/6Fd6e7tdnNt+cp4o6Wl2ptL//vf1z5cterJHEmeH0qG1rb0X41bh5aOpLdba8XXxTeLffleLpX7v/FsFPWisYv+rtz+vVevLV8Zeefd5csdctqfw0kuJwObz+lw5wE5yqOu0ttodbQMatwdaFdf9zE92tY41mEbnigPmcHWNvRtahuqGySw6nmvtFvfzOhEh4yeygtt9nS9P+mc0Qvd93R7xdfFb4rz+VW+sWr8j0pj/x9L51fn2irKyFVHSsfISjOy3PLx1SveWh/5++9vKvu2w9Rwr7615sVbWXX+b+2rbTof1Yuu56NVLd7b62Jdi+uOii6vi7JHOrCuROvs06lMK88Dzai1ef76g1bI3+eVpOdQt7PiXb31Kxud0lbKv95+9VZf/z8ohvKH3DD+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FDb27grkj3tVlaSY0n2r8xXk/o91N3faUVlsLjHNLfXjdt3j4TKvRYobuVWPsy+B5MOAAAAAAAAADvt7ORXn33+SeNW/n/8nlv1euv/96tJT5L9xXf3ZnJhfnaDinqTS0ludvgeQdOf6k1rlzbK5fE78zcbcwfbVrB/k5sFAHTxlwAAAP//uwNuOw==") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x1b, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0x700, 0x12) 29.726673945s ago: executing program 2 (id=2487): r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x2c, &(0x7f0000000580)=[@in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x32}, 0x40dd}]}, &(0x7f0000000440)=0x10) 29.607614986s ago: executing program 2 (id=2488): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdae, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 14.511948725s ago: executing program 33 (id=2488): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdae, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.693554289s ago: executing program 3 (id=2823): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="186800000006", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 4.47572118s ago: executing program 3 (id=2826): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 4.352829741s ago: executing program 3 (id=2828): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x7, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r1) 4.009881303s ago: executing program 3 (id=2832): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.831700694s ago: executing program 3 (id=2834): r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x1fe) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 3.595632826s ago: executing program 3 (id=2837): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1428437b3c8026bdfeb6db4ee9bcb25b1811d40a203bf40b3a7da5a8a64db04ed6dd26eea2a37229c339b1f91201c2796", 0x3d}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r2) 1.675414679s ago: executing program 5 (id=2862): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001140)=@newtfilter={0xccc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc9c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffffb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xf}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x4}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x2}, @TCA_FLOW_POLICE={0xc60, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xec8, 0xffffffff, 0x2, 0x7, 0x7, 0x8001, 0x2, 0x3, 0x4b79, 0x667, 0xecd7, 0x7b, 0x1548, 0x7fff, 0x80000000, 0x0, 0x800, 0xa, 0x3, 0x10000, 0x6, 0x9, 0x8, 0x5, 0x1, 0x2, 0x200, 0x800, 0x0, 0x8000, 0x0, 0xb4, 0xfffffffa, 0x3, 0x4, 0x1, 0x7, 0x5, 0x3, 0xffffffff, 0x1, 0xb4d, 0x4, 0x0, 0x5, 0x1ff, 0x78, 0x0, 0x9, 0x6, 0x400, 0x0, 0x5, 0x81, 0x7fff, 0x7727637b, 0x3, 0x3, 0xe, 0x6, 0x80000000, 0xffffffff, 0x1, 0x2, 0x7, 0x6, 0x5cd, 0x7, 0x6, 0x8, 0x9, 0x4, 0x6d, 0x4, 0x7f08, 0x0, 0x5, 0x7, 0xfffffff1, 0xd2, 0x8000, 0x0, 0x312a, 0x6, 0x5, 0x3, 0x7, 0x80000001, 0x30a, 0x6, 0x4, 0xc4b, 0x7, 0x1000, 0x100, 0x0, 0x4, 0x2, 0x3, 0x9, 0x10000, 0xc5e, 0x0, 0x40, 0x5, 0x8, 0x5, 0x401, 0x4, 0x5, 0x7, 0x2, 0x80000001, 0xb, 0x0, 0x2883, 0x6, 0x2, 0x2, 0x4, 0x1, 0x8, 0x5, 0x64, 0x7, 0x2, 0x3, 0x6, 0x6, 0xf9, 0xfc000000, 0xd, 0xfffffffd, 0xfff, 0x3ff, 0x3, 0x80000000, 0x1, 0x1, 0xffff, 0x6, 0x7f, 0xa0000000, 0x2, 0x3, 0x1866, 0x8, 0x3, 0x3, 0x3, 0x100, 0x7, 0x7, 0x82, 0x7, 0x200, 0xa8, 0x5, 0x5a5, 0xc, 0x6, 0x101, 0x7, 0x25d, 0xffffffff, 0x80000001, 0x9, 0x176a, 0x7ff, 0x4, 0x7, 0x0, 0x0, 0x9, 0x78, 0x2, 0x26, 0x100, 0x2, 0x4, 0xffffffff, 0xc2c16dd9, 0xf58, 0x2, 0x4, 0xcf4, 0x795a33b2, 0x2, 0xe, 0x4, 0x8, 0x0, 0x8, 0x0, 0xd2000000, 0x1, 0x0, 0xc74, 0x9, 0x10001, 0x3, 0x9, 0x7, 0xa8, 0x3, 0x7, 0x8, 0x4, 0xfff, 0x66e945ea, 0xd47, 0xe, 0x8, 0x4, 0x1, 0x4, 0xfffffff7, 0x500000, 0x0, 0x7ff, 0x6, 0x5a, 0x80, 0x401, 0x0, 0xfffffc00, 0x4, 0x40, 0x4, 0x8, 0x7, 0x6, 0xffffffff, 0xfffffff8, 0x6, 0x7, 0x9, 0x4e09, 0x5, 0x8000, 0x80, 0x0, 0x1, 0x5, 0x800, 0xffffffff, 0x2, 0x3, 0x48, 0x4, 0x0, 0xfffffffc, 0x8, 0x2, 0xf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x1, 0x5184, 0xfffffe00, {0x6, 0x0, 0x5, 0xc, 0x5, 0x3ff}, {0x2b, 0x1, 0x3, 0x8, 0x8}, 0xf, 0x8000, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x1, 0x6, 0x3, 0x6, 0xe3b9, 0x1, 0x4, 0x2, 0x3d7, 0xfffffff9, 0x40, 0x4, 0xe5, 0x3, 0x9, 0x1, 0x7, 0x6, 0x5, 0x5, 0x1, 0x8d, 0x8, 0x8, 0x400, 0x5, 0x7, 0x9, 0xb, 0x9, 0x3, 0x9, 0x9, 0x7, 0x6, 0xd6, 0x6, 0x7, 0x8, 0x9bc, 0x7, 0xffffffff, 0x8, 0x7, 0x4, 0xdc, 0xe, 0x9b5b, 0x3, 0x3, 0x9, 0x826, 0x4, 0x8, 0x1, 0x4, 0x5, 0x3, 0x0, 0x1ff, 0x5, 0x3, 0x40000000, 0x1, 0xfffffff2, 0xb06, 0x3, 0x7c0, 0x10, 0xfffffffe, 0x1, 0x3, 0xfffffffe, 0x8001, 0x7, 0x0, 0x101, 0x3, 0x5, 0x8001, 0x7, 0x7fff, 0xb, 0x8, 0x59c8, 0x2, 0xff, 0x0, 0x3a2e, 0x5, 0x61, 0x2, 0x8, 0x2, 0x1, 0x8, 0x7, 0x4, 0x2, 0x0, 0x6, 0x1, 0x1a2a, 0xf6, 0x7, 0x1, 0xfffffffe, 0x5, 0x3, 0xe129, 0xce2, 0x7f1, 0x3, 0xffff, 0xa100, 0x0, 0x10001, 0x2, 0xac, 0x72ba05b7, 0x2, 0x9, 0x7fffffff, 0x4, 0xfd, 0xbe43, 0x3ff, 0x9, 0x2, 0xff, 0x5, 0x9, 0x9, 0x4, 0x100000, 0x81, 0x3, 0x7348, 0xd, 0x4, 0x1, 0x6, 0x1, 0x2, 0x5a, 0x1, 0x80000000, 0x2, 0x3, 0x5, 0x101, 0x2, 0x80000001, 0x4, 0x0, 0x5, 0x9, 0x8, 0x2, 0xd3af, 0xf, 0xd, 0xf, 0xaaee, 0x400, 0x7, 0xfffffff7, 0x7c, 0x1, 0xffffffef, 0x6, 0x100, 0x6, 0x1, 0x6, 0x3ff, 0x3, 0x678, 0x4, 0x10000, 0x5c09, 0x6, 0x4, 0x8, 0x9, 0x4, 0x7, 0x6, 0xe30d, 0x7ff, 0x1, 0x7c6a2ca8, 0x3ff, 0xd0f, 0x5, 0x10001, 0x4, 0xf, 0x4856, 0xff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x4, 0x5, 0x1, 0x100, 0x5, 0x3, 0x3, 0x7, 0x0, 0x10000, 0x1, 0x1, 0x80, 0x1, 0x3, 0xffff, 0x100, 0x8001, 0xfffffffb, 0xa, 0x8000, 0x0, 0x7, 0x9, 0x8, 0x211, 0x8, 0x1, 0x0, 0x1000, 0xc, 0x1, 0x800, 0xfffffeff, 0x8, 0x6, 0x3e9, 0x10000, 0x5, 0x3, 0x7, 0x4, 0x6, 0x7496b2ee, 0x81, 0x5, 0x1000, 0x33, 0x4, 0x5]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x0, 0x0, 0x5, 0x0, 0x1, 0xff, 0x5, 0x5, 0x5, 0x8, 0xe, 0xa27c, 0xffffffff, 0x1, 0x0, 0x80000001, 0x6, 0x0, 0x2, 0x1000, 0x5, 0x5, 0x4, 0xfffffffd, 0x8000, 0x2, 0x1, 0x10001, 0xfffffff9, 0xd78, 0xfffffffb, 0x5, 0x3, 0x6, 0x5, 0x6, 0x3, 0x80, 0x0, 0x2, 0xf2a4, 0x10001, 0x7, 0x8, 0x0, 0x40, 0x4, 0x1a41, 0x6, 0xc1cb, 0x2, 0x0, 0x2, 0x7, 0x6, 0x5, 0x100, 0x5cf2, 0x8, 0x1, 0x20960f7b, 0x6, 0x9, 0x8, 0x6, 0x5, 0x7, 0x6a5, 0x18000, 0xe62, 0x1, 0x7, 0x80000001, 0xe, 0x401, 0x561d, 0xffff, 0x0, 0x32e, 0x6, 0x6, 0x7, 0x81e, 0x3, 0xfdf4, 0xffffffff, 0xfffffff9, 0x7, 0x5, 0x0, 0x9, 0xfffffff8, 0x4f, 0x81, 0x9, 0x1, 0x63, 0x7, 0x40, 0x3ff, 0x7fffffff, 0x4, 0xc, 0x8, 0x1, 0x9, 0x3, 0x0, 0x1, 0x97f9, 0xfffffffd, 0x6, 0x6, 0x81, 0x8, 0x8001, 0x4, 0x6a446555, 0x6, 0x1000, 0x8001, 0x3, 0x3, 0xffffffff, 0x40, 0x9, 0x9, 0x9, 0xf9, 0xffffffff, 0xc, 0x9, 0x61b6, 0xfffff123, 0x2653ab6c, 0x5, 0x0, 0x800, 0x0, 0xd, 0x3, 0x6, 0xca, 0x6, 0xc406, 0x5, 0xf, 0xff, 0xfffffff9, 0xfffffffc, 0x524, 0x80000000, 0x11, 0x8, 0x8, 0x2, 0x10000, 0x3, 0xfffff57a, 0x3, 0x3d2, 0x802, 0x9, 0x8, 0x6, 0x80, 0x1, 0x1, 0x80000000, 0xf, 0xc6f, 0x7, 0x7fffffff, 0x8, 0x12ba, 0x9, 0x1, 0xf99, 0x7, 0x3, 0x6, 0x1, 0x4, 0x7fff, 0x6195, 0x4, 0x45ca29e4, 0x40, 0x4, 0x40, 0x9, 0x101, 0x1, 0x8, 0xffffffc0, 0x8, 0x0, 0x8, 0x1, 0x5, 0x6d, 0x8, 0xffffffe4, 0x0, 0xfffffff9, 0x5, 0x9, 0x6, 0x8000, 0x608f, 0xfffffff8, 0x3288, 0x400, 0x10, 0x9, 0x10001, 0x3, 0x9, 0x7, 0x2, 0x1, 0xe, 0x800, 0x3fbb5ed2, 0x6, 0xfffffffc, 0x2719, 0x3, 0x7, 0x2, 0x8, 0x52, 0x9fa, 0xbe8, 0x7, 0x7, 0xffff, 0x400, 0x8, 0x6, 0x5, 0x2, 0x1, 0x9, 0x8001, 0x3, 0x9, 0xa, 0x7ff, 0xc00, 0x5, 0x5, 0x8001, 0x8, 0x9]}]}]}}]}, 0xccc}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0xac, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x62}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x7f, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_a, @from_mac=@device_b, {0x6, 0x6}, @value=@ver_80211n={0x0, 0x61e, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x40, @val={0x10, 0x1, 0xf5}, [{0xdd, 0x54, "2723f16dd723c0b5a654fe006248c1c6440c805b16577201fe42d3008fcd9c3c82d842ca9d6909a1040f4cba6b2e87bc83c3da9bb61978b6fda47f9d4ae62c1479171cf614d08280a054af410a88fdc4664dea07"}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote}, 0x10) 1.070698742s ago: executing program 5 (id=2868): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069141c000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff80, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.001282973s ago: executing program 5 (id=2869): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000)=0x1ff, 0x4) 868.483104ms ago: executing program 5 (id=2871): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x101000) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10180, 0x4, 0x2c0}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB='\r', @ANYRES8=r2, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 814.002614ms ago: executing program 5 (id=2873): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x22041, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x5) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x7, 0x10, 0xa5c, 0x10, 0x14, "722f9724b9a90fa2"}) socket$inet6_udplite(0xa, 0x2, 0x88) 735.703035ms ago: executing program 5 (id=2874): r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) io_uring_enter(r0, 0x7e8, 0x96bc, 0x8, &(0x7f0000000380)={[0x3]}, 0x8) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x2a082, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 649.506365ms ago: executing program 1 (id=2876): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xa9, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x119ca}, @IFLA_TXQLEN={0x8, 0xd, 0x2}]}, 0x30}}, 0x0) 575.121146ms ago: executing program 4 (id=2877): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001140)=@newtfilter={0xccc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc9c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffffb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xf}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x4}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x2}, @TCA_FLOW_POLICE={0xc60, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xec8, 0xffffffff, 0x2, 0x7, 0x7, 0x8001, 0x2, 0x3, 0x4b79, 0x667, 0xecd7, 0x7b, 0x1548, 0x7fff, 0x80000000, 0x0, 0x800, 0xa, 0x3, 0x10000, 0x6, 0x9, 0x8, 0x5, 0x1, 0x2, 0x200, 0x800, 0x0, 0x8000, 0x0, 0xb4, 0xfffffffa, 0x3, 0x4, 0x1, 0x7, 0x5, 0x3, 0xffffffff, 0x1, 0xb4d, 0x4, 0x0, 0x5, 0x1ff, 0x78, 0x0, 0x9, 0x6, 0x400, 0x0, 0x5, 0x81, 0x7fff, 0x7727637b, 0x3, 0x3, 0xe, 0x6, 0x80000000, 0xffffffff, 0x1, 0x2, 0x7, 0x6, 0x5cd, 0x7, 0x6, 0x8, 0x9, 0x4, 0x6d, 0x4, 0x7f08, 0x0, 0x5, 0x7, 0xfffffff1, 0xd2, 0x8000, 0x0, 0x312a, 0x6, 0x5, 0x3, 0x7, 0x80000001, 0x30a, 0x6, 0x4, 0xc4b, 0x7, 0x1000, 0x100, 0x0, 0x4, 0x2, 0x3, 0x9, 0x10000, 0xc5e, 0x0, 0x40, 0x5, 0x8, 0x5, 0x401, 0x4, 0x5, 0x7, 0x2, 0x80000001, 0xb, 0x0, 0x2883, 0x6, 0x2, 0x2, 0x4, 0x1, 0x8, 0x5, 0x64, 0x7, 0x2, 0x3, 0x6, 0x6, 0xf9, 0xfc000000, 0xd, 0xfffffffd, 0xfff, 0x3ff, 0x3, 0x80000000, 0x1, 0x1, 0xffff, 0x6, 0x7f, 0xa0000000, 0x2, 0x3, 0x1866, 0x8, 0x3, 0x3, 0x3, 0x100, 0x7, 0x7, 0x82, 0x7, 0x200, 0xa8, 0x5, 0x5a5, 0xc, 0x6, 0x101, 0x7, 0x25d, 0xffffffff, 0x80000001, 0x9, 0x176a, 0x7ff, 0x4, 0x7, 0x0, 0x0, 0x9, 0x78, 0x2, 0x26, 0x100, 0x2, 0x4, 0xffffffff, 0xc2c16dd9, 0xf58, 0x2, 0x4, 0xcf4, 0x795a33b2, 0x2, 0xe, 0x4, 0x8, 0x0, 0x8, 0x0, 0xd2000000, 0x1, 0x0, 0xc74, 0x9, 0x10001, 0x3, 0x9, 0x7, 0xa8, 0x3, 0x7, 0x8, 0x4, 0xfff, 0x66e945ea, 0xd47, 0xe, 0x8, 0x4, 0x1, 0x4, 0xfffffff7, 0x500000, 0x0, 0x7ff, 0x6, 0x5a, 0x80, 0x401, 0x0, 0xfffffc00, 0x4, 0x40, 0x4, 0x8, 0x7, 0x6, 0xffffffff, 0xfffffff8, 0x6, 0x7, 0x9, 0x4e09, 0x5, 0x8000, 0x80, 0x0, 0x1, 0x5, 0x800, 0xffffffff, 0x2, 0x3, 0x48, 0x4, 0x0, 0xfffffffc, 0x8, 0x2, 0xf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x1, 0x5184, 0xfffffe00, {0x6, 0x0, 0x5, 0xc, 0x5, 0x3ff}, {0x2b, 0x1, 0x3, 0x8, 0x8}, 0xf, 0x8000, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x1, 0x6, 0x3, 0x6, 0xe3b9, 0x1, 0x4, 0x2, 0x3d7, 0xfffffff9, 0x40, 0x4, 0xe5, 0x3, 0x9, 0x1, 0x7, 0x6, 0x5, 0x5, 0x1, 0x8d, 0x8, 0x8, 0x400, 0x5, 0x7, 0x9, 0xb, 0x9, 0x3, 0x9, 0x9, 0x7, 0x6, 0xd6, 0x6, 0x7, 0x8, 0x9bc, 0x7, 0xffffffff, 0x8, 0x7, 0x4, 0xdc, 0xe, 0x9b5b, 0x3, 0x3, 0x9, 0x826, 0x4, 0x8, 0x1, 0x4, 0x5, 0x3, 0x0, 0x1ff, 0x5, 0x3, 0x40000000, 0x1, 0xfffffff2, 0xb06, 0x3, 0x7c0, 0x10, 0xfffffffe, 0x1, 0x3, 0xfffffffe, 0x8001, 0x7, 0x0, 0x101, 0x3, 0x5, 0x8001, 0x7, 0x7fff, 0xb, 0x8, 0x59c8, 0x2, 0xff, 0x0, 0x3a2e, 0x5, 0x61, 0x2, 0x8, 0x2, 0x1, 0x8, 0x7, 0x4, 0x2, 0x0, 0x6, 0x1, 0x1a2a, 0xf6, 0x7, 0x1, 0xfffffffe, 0x5, 0x3, 0xe129, 0xce2, 0x7f1, 0x3, 0xffff, 0xa100, 0x0, 0x10001, 0x2, 0xac, 0x72ba05b7, 0x2, 0x9, 0x7fffffff, 0x4, 0xfd, 0xbe43, 0x3ff, 0x9, 0x2, 0xff, 0x5, 0x9, 0x9, 0x4, 0x100000, 0x81, 0x3, 0x7348, 0xd, 0x4, 0x1, 0x6, 0x1, 0x2, 0x5a, 0x1, 0x80000000, 0x2, 0x3, 0x5, 0x101, 0x2, 0x80000001, 0x4, 0x0, 0x5, 0x9, 0x8, 0x2, 0xd3af, 0xf, 0xd, 0xf, 0xaaee, 0x400, 0x7, 0xfffffff7, 0x7c, 0x1, 0xffffffef, 0x6, 0x100, 0x6, 0x1, 0x6, 0x3ff, 0x3, 0x678, 0x4, 0x10000, 0x5c09, 0x6, 0x4, 0x8, 0x9, 0x4, 0x7, 0x6, 0xe30d, 0x7ff, 0x1, 0x7c6a2ca8, 0x3ff, 0xd0f, 0x5, 0x10001, 0x4, 0xf, 0x4856, 0xff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x4, 0x5, 0x1, 0x100, 0x5, 0x3, 0x3, 0x7, 0x0, 0x10000, 0x1, 0x1, 0x80, 0x1, 0x3, 0xffff, 0x100, 0x8001, 0xfffffffb, 0xa, 0x8000, 0x0, 0x7, 0x9, 0x8, 0x211, 0x8, 0x1, 0x0, 0x1000, 0xc, 0x1, 0x800, 0xfffffeff, 0x8, 0x6, 0x3e9, 0x10000, 0x5, 0x3, 0x7, 0x4, 0x6, 0x7496b2ee, 0x81, 0x5, 0x1000, 0x33, 0x4, 0x5]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x0, 0x0, 0x5, 0x0, 0x1, 0xff, 0x5, 0x5, 0x5, 0x8, 0xe, 0xa27c, 0xffffffff, 0x1, 0x0, 0x80000001, 0x6, 0x0, 0x2, 0x1000, 0x5, 0x5, 0x4, 0xfffffffd, 0x8000, 0x2, 0x1, 0x10001, 0xfffffff9, 0xd78, 0xfffffffb, 0x5, 0x3, 0x6, 0x5, 0x6, 0x3, 0x80, 0x0, 0x2, 0xf2a4, 0x10001, 0x7, 0x8, 0x0, 0x40, 0x4, 0x1a41, 0x6, 0xc1cb, 0x2, 0x0, 0x2, 0x7, 0x6, 0x5, 0x100, 0x5cf2, 0x8, 0x1, 0x20960f7b, 0x6, 0x9, 0x8, 0x6, 0x5, 0x7, 0x6a5, 0x18000, 0xe62, 0x1, 0x7, 0x80000001, 0xe, 0x401, 0x561d, 0xffff, 0x0, 0x32e, 0x6, 0x6, 0x7, 0x81e, 0x3, 0xfdf4, 0xffffffff, 0xfffffff9, 0x7, 0x5, 0x0, 0x9, 0xfffffff8, 0x4f, 0x81, 0x9, 0x1, 0x63, 0x7, 0x40, 0x3ff, 0x7fffffff, 0x4, 0xc, 0x8, 0x1, 0x9, 0x3, 0x0, 0x1, 0x97f9, 0xfffffffd, 0x6, 0x6, 0x81, 0x8, 0x8001, 0x4, 0x6a446555, 0x6, 0x1000, 0x8001, 0x3, 0x3, 0xffffffff, 0x40, 0x9, 0x9, 0x9, 0xf9, 0xffffffff, 0xc, 0x9, 0x61b6, 0xfffff123, 0x2653ab6c, 0x5, 0x0, 0x800, 0x0, 0xd, 0x3, 0x6, 0xca, 0x6, 0xc406, 0x5, 0xf, 0xff, 0xfffffff9, 0xfffffffc, 0x524, 0x80000000, 0x11, 0x8, 0x8, 0x2, 0x10000, 0x3, 0xfffff57a, 0x3, 0x3d2, 0x802, 0x9, 0x8, 0x6, 0x80, 0x1, 0x1, 0x80000000, 0xf, 0xc6f, 0x7, 0x7fffffff, 0x8, 0x12ba, 0x9, 0x1, 0xf99, 0x7, 0x3, 0x6, 0x1, 0x4, 0x7fff, 0x6195, 0x4, 0x45ca29e4, 0x40, 0x4, 0x40, 0x9, 0x101, 0x1, 0x8, 0xffffffc0, 0x8, 0x0, 0x8, 0x1, 0x5, 0x6d, 0x8, 0xffffffe4, 0x0, 0xfffffff9, 0x5, 0x9, 0x6, 0x8000, 0x608f, 0xfffffff8, 0x3288, 0x400, 0x10, 0x9, 0x10001, 0x3, 0x9, 0x7, 0x2, 0x1, 0xe, 0x800, 0x3fbb5ed2, 0x6, 0xfffffffc, 0x2719, 0x3, 0x7, 0x2, 0x8, 0x52, 0x9fa, 0xbe8, 0x7, 0x7, 0xffff, 0x400, 0x8, 0x6, 0x5, 0x2, 0x1, 0x9, 0x8001, 0x3, 0x9, 0xa, 0x7ff, 0xc00, 0x5, 0x5, 0x8001, 0x8, 0x9]}]}]}}]}, 0xccc}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0xac, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x62}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x7f, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_a, @from_mac=@device_b, {0x6, 0x6}, @value=@ver_80211n={0x0, 0x61e, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x40, @val={0x10, 0x1, 0xf5}, [{0xdd, 0x54, "2723f16dd723c0b5a654fe006248c1c6440c805b16577201fe42d3008fcd9c3c82d842ca9d6909a1040f4cba6b2e87bc83c3da9bb61978b6fda47f9d4ae62c1479171cf614d08280a054af410a88fdc4664dea07"}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote}, 0x10) 548.774726ms ago: executing program 1 (id=2878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb015819d7a91a027dec0f7b558e"], 0xfc}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) 516.455606ms ago: executing program 6 (id=2879): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x8800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 505.731506ms ago: executing program 4 (id=2880): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x1}) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) 447.572887ms ago: executing program 6 (id=2881): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2a, 0x2, 0x0) io_uring_setup(0x68e0, &(0x7f0000000140)={0x0, 0xd77, 0x2, 0x1, 0x239}) socket$inet(0x2, 0x3, 0x2) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 410.379877ms ago: executing program 1 (id=2882): syz_emit_ethernet(0x52, &(0x7f00000000c0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "6284b8", 0x1c, 0x3a, 0x1, @remote, @private1, {[], @mlv2_query={0x82, 0x0, 0x0, 0x7, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5, 0x1, 0x0, 0x7}}}}}}, 0x0) 409.701407ms ago: executing program 4 (id=2883): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {0x10}}, 0x24, 0x1) io_setup(0x8, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x400454a4, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x42, &(0x7f00000000c0)=0x1) 307.712978ms ago: executing program 1 (id=2884): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) 307.582738ms ago: executing program 6 (id=2885): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@multicast2, 0x4e24, 0x0, 0x0, 0x1, 0xa, 0x0, 0x0, 0x5e}, {0x40000000000002, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x9, 0xffffffffffffffff, 0xea}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x20000}}, 0xe4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0xff00}, 0x1c) 307.458517ms ago: executing program 4 (id=2886): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='d', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r2, 0x0, 0x2, 0x3, 0x7fff, 0x81}, 0x14) 280.175298ms ago: executing program 6 (id=2887): r0 = fsopen(&(0x7f0000000040)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x3, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='\x1e\x01\x00\x00arYe)', 0x0) 254.802208ms ago: executing program 6 (id=2888): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800c0001006d6163766c616e00240002800800010010000000100005802a000400aaaaaaaaaa3b0000080003000300000008000500", @ANYRES32=r2], 0x5c}}, 0x0) 212.112278ms ago: executing program 1 (id=2889): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001140)=@newtfilter={0xccc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc9c, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0xfffffffb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8c30}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xf}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x4}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x2}, @TCA_FLOW_POLICE={0xc60, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xec8, 0xffffffff, 0x2, 0x7, 0x7, 0x8001, 0x2, 0x3, 0x4b79, 0x667, 0xecd7, 0x7b, 0x1548, 0x7fff, 0x80000000, 0x0, 0x800, 0xa, 0x3, 0x10000, 0x6, 0x9, 0x8, 0x5, 0x1, 0x2, 0x200, 0x800, 0x0, 0x8000, 0x0, 0xb4, 0xfffffffa, 0x3, 0x4, 0x1, 0x7, 0x5, 0x3, 0xffffffff, 0x1, 0xb4d, 0x4, 0x0, 0x5, 0x1ff, 0x78, 0x0, 0x9, 0x6, 0x400, 0x0, 0x5, 0x81, 0x7fff, 0x7727637b, 0x3, 0x3, 0xe, 0x6, 0x80000000, 0xffffffff, 0x1, 0x2, 0x7, 0x6, 0x5cd, 0x7, 0x6, 0x8, 0x9, 0x4, 0x6d, 0x4, 0x7f08, 0x0, 0x5, 0x7, 0xfffffff1, 0xd2, 0x8000, 0x0, 0x312a, 0x6, 0x5, 0x3, 0x7, 0x80000001, 0x30a, 0x6, 0x4, 0xc4b, 0x7, 0x1000, 0x100, 0x0, 0x4, 0x2, 0x3, 0x9, 0x10000, 0xc5e, 0x0, 0x40, 0x5, 0x8, 0x5, 0x401, 0x4, 0x5, 0x7, 0x2, 0x80000001, 0xb, 0x0, 0x2883, 0x6, 0x2, 0x2, 0x4, 0x1, 0x8, 0x5, 0x64, 0x7, 0x2, 0x3, 0x6, 0x6, 0xf9, 0xfc000000, 0xd, 0xfffffffd, 0xfff, 0x3ff, 0x3, 0x80000000, 0x1, 0x1, 0xffff, 0x6, 0x7f, 0xa0000000, 0x2, 0x3, 0x1866, 0x8, 0x3, 0x3, 0x3, 0x100, 0x7, 0x7, 0x82, 0x7, 0x200, 0xa8, 0x5, 0x5a5, 0xc, 0x6, 0x101, 0x7, 0x25d, 0xffffffff, 0x80000001, 0x9, 0x176a, 0x7ff, 0x4, 0x7, 0x0, 0x0, 0x9, 0x78, 0x2, 0x26, 0x100, 0x2, 0x4, 0xffffffff, 0xc2c16dd9, 0xf58, 0x2, 0x4, 0xcf4, 0x795a33b2, 0x2, 0xe, 0x4, 0x8, 0x0, 0x8, 0x0, 0xd2000000, 0x1, 0x0, 0xc74, 0x9, 0x10001, 0x3, 0x9, 0x7, 0xa8, 0x3, 0x7, 0x8, 0x4, 0xfff, 0x66e945ea, 0xd47, 0xe, 0x8, 0x4, 0x1, 0x4, 0xfffffff7, 0x500000, 0x0, 0x7ff, 0x6, 0x5a, 0x80, 0x401, 0x0, 0xfffffc00, 0x4, 0x40, 0x4, 0x8, 0x7, 0x6, 0xffffffff, 0xfffffff8, 0x6, 0x7, 0x9, 0x4e09, 0x5, 0x8000, 0x80, 0x0, 0x1, 0x5, 0x800, 0xffffffff, 0x2, 0x3, 0x48, 0x4, 0x0, 0xfffffffc, 0x8, 0x2, 0xf]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x1, 0x5184, 0xfffffe00, {0x6, 0x0, 0x5, 0xc, 0x5, 0x3ff}, {0x2b, 0x1, 0x3, 0x8, 0x8}, 0xf, 0x8000, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x1, 0x6, 0x3, 0x6, 0xe3b9, 0x1, 0x4, 0x2, 0x3d7, 0xfffffff9, 0x40, 0x4, 0xe5, 0x3, 0x9, 0x1, 0x7, 0x6, 0x5, 0x5, 0x1, 0x8d, 0x8, 0x8, 0x400, 0x5, 0x7, 0x9, 0xb, 0x9, 0x3, 0x9, 0x9, 0x7, 0x6, 0xd6, 0x6, 0x7, 0x8, 0x9bc, 0x7, 0xffffffff, 0x8, 0x7, 0x4, 0xdc, 0xe, 0x9b5b, 0x3, 0x3, 0x9, 0x826, 0x4, 0x8, 0x1, 0x4, 0x5, 0x3, 0x0, 0x1ff, 0x5, 0x3, 0x40000000, 0x1, 0xfffffff2, 0xb06, 0x3, 0x7c0, 0x10, 0xfffffffe, 0x1, 0x3, 0xfffffffe, 0x8001, 0x7, 0x0, 0x101, 0x3, 0x5, 0x8001, 0x7, 0x7fff, 0xb, 0x8, 0x59c8, 0x2, 0xff, 0x0, 0x3a2e, 0x5, 0x61, 0x2, 0x8, 0x2, 0x1, 0x8, 0x7, 0x4, 0x2, 0x0, 0x6, 0x1, 0x1a2a, 0xf6, 0x7, 0x1, 0xfffffffe, 0x5, 0x3, 0xe129, 0xce2, 0x7f1, 0x3, 0xffff, 0xa100, 0x0, 0x10001, 0x2, 0xac, 0x72ba05b7, 0x2, 0x9, 0x7fffffff, 0x4, 0xfd, 0xbe43, 0x3ff, 0x9, 0x2, 0xff, 0x5, 0x9, 0x9, 0x4, 0x100000, 0x81, 0x3, 0x7348, 0xd, 0x4, 0x1, 0x6, 0x1, 0x2, 0x5a, 0x1, 0x80000000, 0x2, 0x3, 0x5, 0x101, 0x2, 0x80000001, 0x4, 0x0, 0x5, 0x9, 0x8, 0x2, 0xd3af, 0xf, 0xd, 0xf, 0xaaee, 0x400, 0x7, 0xfffffff7, 0x7c, 0x1, 0xffffffef, 0x6, 0x100, 0x6, 0x1, 0x6, 0x3ff, 0x3, 0x678, 0x4, 0x10000, 0x5c09, 0x6, 0x4, 0x8, 0x9, 0x4, 0x7, 0x6, 0xe30d, 0x7ff, 0x1, 0x7c6a2ca8, 0x3ff, 0xd0f, 0x5, 0x10001, 0x4, 0xf, 0x4856, 0xff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x4, 0x5, 0x1, 0x100, 0x5, 0x3, 0x3, 0x7, 0x0, 0x10000, 0x1, 0x1, 0x80, 0x1, 0x3, 0xffff, 0x100, 0x8001, 0xfffffffb, 0xa, 0x8000, 0x0, 0x7, 0x9, 0x8, 0x211, 0x8, 0x1, 0x0, 0x1000, 0xc, 0x1, 0x800, 0xfffffeff, 0x8, 0x6, 0x3e9, 0x10000, 0x5, 0x3, 0x7, 0x4, 0x6, 0x7496b2ee, 0x81, 0x5, 0x1000, 0x33, 0x4, 0x5]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x800, 0x0, 0x0, 0x5, 0x0, 0x1, 0xff, 0x5, 0x5, 0x5, 0x8, 0xe, 0xa27c, 0xffffffff, 0x1, 0x0, 0x80000001, 0x6, 0x0, 0x2, 0x1000, 0x5, 0x5, 0x4, 0xfffffffd, 0x8000, 0x2, 0x1, 0x10001, 0xfffffff9, 0xd78, 0xfffffffb, 0x5, 0x3, 0x6, 0x5, 0x6, 0x3, 0x80, 0x0, 0x2, 0xf2a4, 0x10001, 0x7, 0x8, 0x0, 0x40, 0x4, 0x1a41, 0x6, 0xc1cb, 0x2, 0x0, 0x2, 0x7, 0x6, 0x5, 0x100, 0x5cf2, 0x8, 0x1, 0x20960f7b, 0x6, 0x9, 0x8, 0x6, 0x5, 0x7, 0x6a5, 0x18000, 0xe62, 0x1, 0x7, 0x80000001, 0xe, 0x401, 0x561d, 0xffff, 0x0, 0x32e, 0x6, 0x6, 0x7, 0x81e, 0x3, 0xfdf4, 0xffffffff, 0xfffffff9, 0x7, 0x5, 0x0, 0x9, 0xfffffff8, 0x4f, 0x81, 0x9, 0x1, 0x63, 0x7, 0x40, 0x3ff, 0x7fffffff, 0x4, 0xc, 0x8, 0x1, 0x9, 0x3, 0x0, 0x1, 0x97f9, 0xfffffffd, 0x6, 0x6, 0x81, 0x8, 0x8001, 0x4, 0x6a446555, 0x6, 0x1000, 0x8001, 0x3, 0x3, 0xffffffff, 0x40, 0x9, 0x9, 0x9, 0xf9, 0xffffffff, 0xc, 0x9, 0x61b6, 0xfffff123, 0x2653ab6c, 0x5, 0x0, 0x800, 0x0, 0xd, 0x3, 0x6, 0xca, 0x6, 0xc406, 0x5, 0xf, 0xff, 0xfffffff9, 0xfffffffc, 0x524, 0x80000000, 0x11, 0x8, 0x8, 0x2, 0x10000, 0x3, 0xfffff57a, 0x3, 0x3d2, 0x802, 0x9, 0x8, 0x6, 0x80, 0x1, 0x1, 0x80000000, 0xf, 0xc6f, 0x7, 0x7fffffff, 0x8, 0x12ba, 0x9, 0x1, 0xf99, 0x7, 0x3, 0x6, 0x1, 0x4, 0x7fff, 0x6195, 0x4, 0x45ca29e4, 0x40, 0x4, 0x40, 0x9, 0x101, 0x1, 0x8, 0xffffffc0, 0x8, 0x0, 0x8, 0x1, 0x5, 0x6d, 0x8, 0xffffffe4, 0x0, 0xfffffff9, 0x5, 0x9, 0x6, 0x8000, 0x608f, 0xfffffff8, 0x3288, 0x400, 0x10, 0x9, 0x10001, 0x3, 0x9, 0x7, 0x2, 0x1, 0xe, 0x800, 0x3fbb5ed2, 0x6, 0xfffffffc, 0x2719, 0x3, 0x7, 0x2, 0x8, 0x52, 0x9fa, 0xbe8, 0x7, 0x7, 0xffff, 0x400, 0x8, 0x6, 0x5, 0x2, 0x1, 0x9, 0x8001, 0x3, 0x9, 0xa, 0x7ff, 0xc00, 0x5, 0x5, 0x8001, 0x8, 0x9]}]}]}}]}, 0xccc}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00'}, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0xac, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x62}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x7f, 0x33, @mgmt_frame=@auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @device_b, @device_a, @from_mac=@device_b, {0x6, 0x6}, @value=@ver_80211n={0x0, 0x61e, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x40, @val={0x10, 0x1, 0xf5}, [{0xdd, 0x54, "2723f16dd723c0b5a654fe006248c1c6440c805b16577201fe42d3008fcd9c3c82d842ca9d6909a1040f4cba6b2e87bc83c3da9bb61978b6fda47f9d4ae62c1479171cf614d08280a054af410a88fdc4664dea07"}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @remote}, 0x10) 211.833968ms ago: executing program 4 (id=2890): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x8800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 127.175889ms ago: executing program 6 (id=2891): socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 31.703629ms ago: executing program 4 (id=2892): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x4, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=2893): r0 = syz_open_dev$video(&(0x7f0000000040), 0xab, 0x800) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000180)={0x9}) kernel console output (not intermixed with test programs): it(265.820:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.1.2026" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbe7a2328 code=0x7ffc0000 [ 265.969829][ T26] audit: type=1326 audit(265.820:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.1.2026" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe7a2328 code=0x7ffc0000 [ 265.987099][ T9464] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.996724][ T9481] device gre1 entered promiscuous mode [ 266.003921][ T26] audit: type=1326 audit(265.820:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9478 comm="syz.1.2026" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe7a2328 code=0x7ffc0000 [ 266.095293][ T9464] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.238850][ T9494] loop0: detected capacity change from 0 to 1024 [ 266.270313][ T9464] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.293979][ T9494] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=d000c09c, mo2=0002] [ 266.310526][ T9464] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.319220][ T9464] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.330637][ T9464] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.338536][ T9494] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,block_validity,resuid=0x0000000000000000,noblock_validity,minixdf,debug,journal_ioprio=0x0000000000000006,data_err=abort,,errors=continue. Quota mode: writeback. [ 266.537498][ T9509] netlink: 'syz.1.2037': attribute type 10 has an invalid length. [ 266.603704][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 266.773578][ T9513] sp0: Synchronizing with TNC [ 267.635886][ T9524] loop1: detected capacity change from 0 to 128 [ 267.653749][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 267.720765][ T9529] kernel profiling enabled (shift: 4) [ 267.924508][ T9536] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.055026][ T9536] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.080883][ T9540] netlink: 'syz.0.2051': attribute type 10 has an invalid length. [ 268.340542][ T9536] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.356647][ T9543] IPv6: NLM_F_CREATE should be specified when creating new route [ 268.542552][ T9547] sp0: Synchronizing with TNC [ 269.223903][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 269.287671][ T9552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2054'. [ 269.297428][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2054'. [ 269.302808][ T9536] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.318540][ T9553] loop4: detected capacity change from 0 to 1024 [ 269.418348][ T9553] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 269.451285][ T9553] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 269.495970][ T9553] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2746: inode #2: comm syz.4.2055: corrupted in-inode xattr [ 269.524474][ T9536] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.531894][ T9568] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #2: comm syz.4.2055: corrupted in-inode xattr [ 269.538875][ T9536] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.545197][ T9536] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.552053][ T9536] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.664964][ T9574] netlink: 'syz.2.2063': attribute type 10 has an invalid length. [ 269.703525][ T9576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2065'. [ 269.715068][ T9578] bridge0: Device is already in use. [ 269.799917][ T9584] loop2: detected capacity change from 0 to 1024 [ 269.864704][ T9584] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 269.884384][ T4813] udevd[4813]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 269.956064][ T9594] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.090052][ T9594] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.205200][ T9594] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.234197][ T9611] netlink: 'syz.4.2081': attribute type 10 has an invalid length. [ 270.283918][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 270.327047][ T9594] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.481815][ T9630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2088'. [ 270.502000][ T9594] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.532723][ T9594] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.554744][ T9594] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.575102][ T9594] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.617456][ T9637] tmpfs: Bad value for 'mpol' [ 270.902132][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 270.902145][ T26] audit: type=1326 audit(270.850:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.0.2096" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80c9c328 code=0x7ffc0000 [ 270.918213][ T26] audit: type=1326 audit(270.870:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.0.2096" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff80c9c328 code=0x7ffc0000 [ 270.933652][ T26] audit: type=1326 audit(270.870:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.0.2096" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80c9c328 code=0x7ffc0000 [ 270.957820][ T26] audit: type=1326 audit(270.880:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.0.2096" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff80c9c328 code=0x7ffc0000 [ 270.980788][ T26] audit: type=1326 audit(270.880:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.0.2096" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80c9c328 code=0x7ffc0000 [ 271.024275][ T26] audit: type=1326 audit(270.880:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.0.2096" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff80c9c328 code=0x7ffc0000 [ 271.029113][ T26] audit: type=1326 audit(270.880:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.0.2096" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80c9c328 code=0x7ffc0000 [ 271.039131][ T9654] loop2: detected capacity change from 0 to 256 [ 271.057145][ T26] audit: type=1326 audit(270.880:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.0.2096" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff80c9c328 code=0x7ffc0000 [ 271.077463][ T26] audit: type=1326 audit(270.880:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.0.2096" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff80c9c328 code=0x7ffc0000 [ 271.082498][ T26] audit: type=1326 audit(270.880:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.0.2096" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff80c9c328 code=0x7ffc0000 [ 271.092544][ T9654] FAT-fs (loop2): bogus number of FAT sectors [ 271.094387][ T9654] FAT-fs (loop2): Can't find a valid FAT filesystem [ 271.136923][ T9662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2100'. [ 271.247523][ T9667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 271.249407][ T9667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 271.305489][ T9667] bond0: (slave bond_slave_0): Releasing backup interface [ 271.323793][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 271.399018][ T9667] bond0: (slave bond_slave_1): Releasing backup interface [ 271.420020][ T9673] loop4: detected capacity change from 0 to 512 [ 271.433386][ T9667] rdma_rxe: ignoring netdev event = 27 for team_slave_0 [ 271.435461][ T9667] device team_slave_0 left promiscuous mode [ 271.436972][ T9667] rdma_rxe: ignoring netdev event = 26 for team_slave_0 [ 271.444236][ T9667] rdma_rxe: ignoring netdev event = 21 for team_slave_0 [ 271.447635][ T9667] rdma_rxe: ignoring netdev event = 10 for team_slave_0 [ 271.484379][ T9667] infiniband syz1: set down [ 271.492530][ T9667] rdma_rxe: ignoring netdev event = 9 for team_slave_0 [ 271.508162][ T9667] rdma_rxe: ignoring netdev event = 8 for team_slave_0 [ 271.510298][ T9667] team0: Port device team_slave_0 removed [ 271.512534][ T9667] device team_slave_1 left promiscuous mode [ 271.536203][ T9667] team0: Port device team_slave_1 removed [ 271.542760][ T9667] device veth0_to_batadv left promiscuous mode [ 271.576787][ T9667] team0: Port device veth0_to_batadv removed [ 271.582142][ T9667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.592067][ T9667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.602361][ T9667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.615932][ T9667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.657241][ T9667] device geneve0 left promiscuous mode [ 271.670919][ T9667] team0: Port device geneve0 removed [ 271.679372][ T9667] bond0: (slave netdevsim0): Releasing backup interface [ 271.739152][ T9667] bond1: (slave batadv1): Releasing backup interface [ 271.865930][ T9688] loop0: detected capacity change from 0 to 512 [ 271.872350][ T9691] tmpfs: Bad value for 'mpol' [ 271.949232][ T9688] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 272.078710][ T9700] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2114'. [ 272.175923][ T4023] EXT4-fs error (device loop0): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /416/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 272.181545][ T9708] loop2: detected capacity change from 0 to 1024 [ 272.207926][ T9708] EXT4-fs (loop2): Ignoring removed orlov option [ 272.209490][ T9708] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 272.211428][ T9708] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 272.216334][ T9708] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 272.219633][ T9711] loop3: detected capacity change from 0 to 128 [ 272.222023][ T9708] EXT4-fs (loop2): invalid journal inode [ 272.225173][ T9708] EXT4-fs (loop2): can't get journal size [ 272.249251][ T9708] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,norecovery,orlov,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 272.302564][ T9711] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 272.363860][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 273.233205][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 273.271590][ T9724] bond0: (slave bridge0): Releasing backup interface [ 273.308587][ T9724] bridge0: port 3(team0) entered disabled state [ 273.320444][ T9730] loop3: detected capacity change from 0 to 256 [ 273.362171][ T9724] device bridge_slave_0 left promiscuous mode [ 273.368027][ T9730] FAT-fs (loop3): bogus number of FAT sectors [ 273.369549][ T9730] FAT-fs (loop3): Can't find a valid FAT filesystem [ 273.371896][ T9724] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.388551][ T9736] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2129'. [ 273.403618][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 273.463748][ T9724] device bridge_slave_1 left promiscuous mode [ 273.465524][ T9724] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.492727][ T9738] loop4: detected capacity change from 0 to 1024 [ 273.508843][ T9724] bond0: (slave bond_slave_0): Releasing backup interface [ 273.511980][ T9738] EXT4-fs (loop4): Ignoring removed oldalloc option [ 273.544443][ T9724] device bond_slave_0 left promiscuous mode [ 273.548980][ T9738] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 273.567514][ T9724] bond0: (slave bond_slave_1): Releasing backup interface [ 273.606264][ T9724] device bond_slave_1 left promiscuous mode [ 273.628074][ T9724] device team_slave_0 left promiscuous mode [ 273.792815][ T9724] team0: Port device team_slave_0 removed [ 273.815480][ T9724] device team_slave_1 left promiscuous mode [ 273.876546][ T9724] team0: Port device team_slave_1 removed [ 273.878620][ T9724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.880442][ T9724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.915686][ T9724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.917438][ T9724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.930347][ T9724] device geneve0 left promiscuous mode [ 273.998154][ T9724] team0: Port device geneve0 removed [ 274.030698][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 274.118251][ T9748] loop4: detected capacity change from 0 to 1024 [ 274.156446][ T9750] netlink: 'syz.1.2143': attribute type 10 has an invalid length. [ 274.164750][ T9751] tmpfs: Bad value for 'mpol' [ 274.194262][ T9748] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 274.454071][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 275.354333][ T9762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2138'. [ 275.483649][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 275.559721][ T9774] loop1: detected capacity change from 0 to 1024 [ 275.630745][ T9780] loop3: detected capacity change from 0 to 1024 [ 275.757460][ T9783] cgroup: fork rejected by pids controller in /syz4 [ 275.900004][ T9774] EXT4-fs (loop1): Ignoring removed oldalloc option [ 275.900052][ T9780] EXT4-fs (loop3): Ignoring removed orlov option [ 275.905536][ T9780] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 275.909018][ T9780] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 275.912740][ T9780] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 275.939873][ T9780] EXT4-fs (loop3): invalid journal inode [ 275.941468][ T9780] EXT4-fs (loop3): can't get journal size [ 275.944283][ T9774] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 275.971619][ T9794] loop2: detected capacity change from 0 to 1024 [ 275.974969][ T9780] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,norecovery,orlov,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 276.117818][ T9794] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 276.213086][ T9799] loop1: detected capacity change from 0 to 128 [ 276.315980][ T9799] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 276.384149][ T4030] bond0: (slave syz_tun): Releasing backup interface [ 276.533791][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 276.762937][ T9812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2156'. [ 276.876051][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 276.876064][ T26] audit: type=1326 audit(276.830:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.2.2157" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0eb6328 code=0x7ffc0000 [ 276.890227][ T26] audit: type=1326 audit(276.840:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.2.2157" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=197 compat=0 ip=0xffffa0eb6328 code=0x7ffc0000 [ 276.907602][ T26] audit: type=1326 audit(276.850:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9813 comm="syz.2.2157" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa0eb6328 code=0x7ffc0000 [ 276.995137][ T9819] cgroup: fork rejected by pids controller in /syz2 [ 277.411082][ T9838] loop1: detected capacity change from 0 to 1024 [ 277.545730][ T9838] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 277.563635][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 277.859586][ T9822] chnl_net:caif_netlink_parms(): no params data found [ 278.112023][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2168'. [ 278.335454][ T9822] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.337238][ T9822] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.339789][ T9822] device bridge_slave_0 entered promiscuous mode [ 278.385341][ T9822] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.387090][ T9822] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.389624][ T9822] device bridge_slave_1 entered promiscuous mode [ 278.556698][ T9822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.561280][ T9822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.603717][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 278.726734][ T9822] team0: Port device team_slave_0 added [ 278.832905][ T9868] loop3: detected capacity change from 0 to 1024 [ 278.949356][ T9868] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 279.013208][ T9822] team0: Port device team_slave_1 added [ 279.036192][ T9876] EXT4-fs (loop3): shut down requested (0) [ 279.083591][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 279.108459][ T4282] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.176581][ T9880] netlink: 'syz.1.2177': attribute type 10 has an invalid length. [ 279.251132][ T4282] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.282199][ T26] audit: type=1326 audit(279.230:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9881 comm="syz.1.2178" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe7a2328 code=0x0 [ 279.284174][ T9822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.294165][ T9822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.318096][ T9822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.367441][ T4282] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.408411][ T9822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.410131][ T9822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.424106][ T9822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.427824][ T9884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2179'. [ 279.444317][ T4282] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.606072][ T9853] chnl_net:caif_netlink_parms(): no params data found [ 279.643630][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 279.651936][ T26] audit: type=1326 audit(279.600:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.1.2180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe7a2328 code=0x7ffc0000 [ 279.668102][ T26] audit: type=1326 audit(279.620:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.1.2180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=260 compat=0 ip=0xffffbe7a2328 code=0x7ffc0000 [ 279.708433][ T9822] device hsr_slave_0 entered promiscuous mode [ 279.712283][ T4453] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 279.722915][ T4453] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 279.731416][ T4453] EXT4-fs (loop3): This should not happen!! Data will be lost [ 279.731416][ T4453] [ 279.734228][ T4453] EXT4-fs (loop3): Total free blocks count 0 [ 279.735821][ T4453] EXT4-fs (loop3): Free/Dirty block details [ 279.737263][ T4453] EXT4-fs (loop3): free_blocks=68451041280 [ 279.738719][ T4453] EXT4-fs (loop3): dirty_blocks=6512 [ 279.740115][ T4453] EXT4-fs (loop3): Block reservation details [ 279.741680][ T4453] EXT4-fs (loop3): i_reserved_data_blocks=407 [ 279.763939][ T9822] device hsr_slave_1 entered promiscuous mode [ 279.777806][ T4453] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 279.784650][ T26] audit: type=1326 audit(279.740:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.1.2180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe7a2328 code=0x7ffc0000 [ 279.789826][ T26] audit: type=1326 audit(279.740:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.1.2180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe7a2328 code=0x7ffc0000 [ 279.803570][ T9822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.805386][ T9822] Cannot create hsr debugfs directory [ 280.125542][ T4013] Bluetooth: hci1: command 0x0409 tx timeout [ 280.131619][ T9853] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.136511][ T9853] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.139138][ T9853] device bridge_slave_0 entered promiscuous mode [ 280.185233][ T9853] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.193059][ T9853] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.204482][ T9853] device bridge_slave_1 entered promiscuous mode [ 280.307706][ T4282] tipc: Disabling bearer [ 280.313246][ T4282] tipc: Left network mode [ 280.408411][ T9853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.430642][ T9853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.514744][ T9822] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.565964][ T9853] team0: Port device team_slave_0 added [ 280.580873][ T9853] team0: Port device team_slave_1 added [ 280.607482][ T9853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.609201][ T9853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.620944][ T9853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.674161][ T9822] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.683857][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 280.691779][ T9853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.693406][ T9853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.713635][ T9853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.742657][ T9923] netlink: 'syz.3.2189': attribute type 10 has an invalid length. [ 280.756751][ T9822] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.935967][ T9853] device hsr_slave_0 entered promiscuous mode [ 280.964078][ T9853] device hsr_slave_1 entered promiscuous mode [ 281.001632][ T9934] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 281.004475][ T9853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.006195][ T9853] Cannot create hsr debugfs directory [ 281.031908][ T9822] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.096197][ T26] audit: type=1107 audit(281.040:1685): pid=9935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 281.173806][ T25] Bluetooth: hci3: command 0x041b tx timeout [ 281.371658][ T9951] ALSA: seq fatal error: cannot create timer (-22) [ 281.497235][ T9957] netlink: 'syz.1.2201': attribute type 10 has an invalid length. [ 281.564675][ T9822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 281.662761][ T9822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 281.723689][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 281.859645][ T9822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 281.895696][ T9822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 282.541616][ T25] Bluetooth: hci1: command 0x041b tx timeout [ 282.556512][ T9975] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2205'. [ 282.635377][ T9981] tmpfs: Bad value for 'mpol' [ 282.773745][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 283.149761][ T9822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.205150][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 283.207654][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.244073][ T4013] Bluetooth: hci3: command 0x040f tx timeout [ 283.285494][ T9822] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.368476][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 283.371051][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.386502][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.388121][ T4706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.399824][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 283.422875][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 283.427657][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.446077][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.447883][ T4706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.453155][ T9853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 283.743346][ T4282] device hsr_slave_0 left promiscuous mode [ 283.803646][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 283.824042][ T4282] device hsr_slave_1 left promiscuous mode [ 283.901657][ T4282] device bond0 left promiscuous mode [ 283.964486][ T4282] device veth1_macvtap left promiscuous mode [ 283.966449][ T4282] device veth0_macvtap left promiscuous mode [ 283.968010][ T4282] device veth1_vlan left promiscuous mode [ 283.969541][ T4282] device veth0_vlan left promiscuous mode [ 284.297086][ T4282] bond2 (unregistering): Released all slaves [ 284.331412][ T4282] bond1 (unregistering): Released all slaves [ 284.615042][ T25] Bluetooth: hci1: command 0x040f tx timeout [ 284.741477][ T4282] bond0 (unregistering): Released all slaves [ 284.843818][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 284.875737][ T9853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 284.932711][T10027] lo speed is unknown, defaulting to 1000 [ 284.943811][T10027] lo speed is unknown, defaulting to 1000 [ 284.973804][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 284.998785][ T9853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 285.041565][T10027] lo speed is unknown, defaulting to 1000 [ 285.042013][ T9853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 285.046144][T10027] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 285.051737][T10027] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 285.051934][T10031] tmpfs: Bad value for 'mpol' [ 285.108831][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.111541][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.114675][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.123380][T10027] lo speed is unknown, defaulting to 1000 [ 285.129052][T10027] lo speed is unknown, defaulting to 1000 [ 285.133320][T10027] lo speed is unknown, defaulting to 1000 [ 285.135770][T10027] lo speed is unknown, defaulting to 1000 [ 285.137816][T10027] lo speed is unknown, defaulting to 1000 [ 285.144279][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 285.155320][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.164327][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.174039][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 285.176597][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 285.179337][T10027] lo speed is unknown, defaulting to 1000 [ 285.183174][ T9822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.194154][ T9822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 285.206208][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 285.208826][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 285.281319][ T26] audit: type=1326 audit(285.230:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe7a2328 code=0x7ffc0000 [ 285.315714][ T26] audit: type=1326 audit(285.270:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbe7a2328 code=0x7ffc0000 [ 285.320719][ T26] audit: type=1326 audit(285.270:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe7a2328 code=0x7ffc0000 [ 285.326322][ T25] Bluetooth: hci3: command 0x0419 tx timeout [ 285.351580][ T26] audit: type=1326 audit(285.270:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe7a2328 code=0x7ffc0000 [ 285.377013][ T26] audit: type=1326 audit(285.280:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbe7a2328 code=0x7ffc0000 [ 285.382174][ T26] audit: type=1326 audit(285.280:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe7a2328 code=0x7ffc0000 [ 285.417802][ T26] audit: type=1326 audit(285.280:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe7a2328 code=0x7ffc0000 [ 285.422760][ T26] audit: type=1326 audit(285.280:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffbe7a2328 code=0x7ffc0000 [ 285.454546][ T9853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.466910][ T26] audit: type=1326 audit(285.280:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe7a2328 code=0x7ffc0000 [ 285.471969][ T26] audit: type=1326 audit(285.280:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10036 comm="syz.1.2220" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe7a2328 code=0x7ffc0000 [ 285.503912][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 285.523053][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.547194][ T9853] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.552186][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 285.555590][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 285.557842][ T4453] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.559606][ T4453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.597613][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 285.652445][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 285.664281][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 285.666832][ T4453] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.668550][ T4453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.684486][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 285.702278][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 285.704550][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 285.735472][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 285.761546][ T9822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.786402][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 285.791157][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 285.804995][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 285.814965][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 285.817817][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 285.883703][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 286.024919][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.027585][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.030236][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.032879][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 286.048227][ T9853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 286.056052][T10063] loop1: detected capacity change from 0 to 512 [ 286.144970][T10063] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 286.319900][ T9853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.322458][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 286.324548][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 286.351374][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 286.356482][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 286.408986][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.411504][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 286.415537][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.418918][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.421420][ T9822] device veth0_vlan entered promiscuous mode [ 286.426841][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 286.429350][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 286.467475][ T9822] device veth1_vlan entered promiscuous mode [ 286.486761][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 286.489054][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 286.491298][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 286.495158][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 286.504526][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 286.507501][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 286.511732][ T9853] device veth0_vlan entered promiscuous mode [ 286.547312][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.550112][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.556370][ T9822] device veth0_macvtap entered promiscuous mode [ 286.565948][ T9853] device veth1_vlan entered promiscuous mode [ 286.584260][ T9822] device veth1_macvtap entered promiscuous mode [ 286.643115][ T9853] device veth0_macvtap entered promiscuous mode [ 286.646541][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 286.648829][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 286.651287][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 286.664252][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 286.674216][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 286.684199][ T4013] Bluetooth: hci1: command 0x0419 tx timeout [ 286.687249][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 286.695297][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.697661][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.700108][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.702506][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.724837][ T9822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.734597][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 286.737080][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 286.739551][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 286.745490][ T9853] device veth1_macvtap entered promiscuous mode [ 286.785929][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.788379][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.790517][ T9822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.792777][ T9822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.839984][ T9822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.855904][ T9822] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.858096][ T9822] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.860177][ T9822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.862437][ T9822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.887497][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 286.889817][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 286.892587][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 286.923784][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 286.964611][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.967088][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.983584][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.986137][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.988451][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.990910][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.999174][ T9853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.006009][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 287.008463][ T4708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 287.076801][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.079272][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.081663][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.097490][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.099970][ T9853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.102361][ T9853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.114904][ T9853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.116836][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 287.119597][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 287.165033][ T9853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.167202][ T9853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.169204][ T9853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.171172][ T9853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.188866][ T4708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.190908][ T4708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.196378][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 287.255003][ T4453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.257168][ T4453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.261759][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 287.458181][T10077] loop1: detected capacity change from 0 to 512 [ 287.463279][T10079] loop4: detected capacity change from 0 to 128 [ 287.518842][ T4453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.520899][ T4453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.557244][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 287.637171][ T8615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.639252][ T8615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.644455][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 287.659931][T10079] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 287.670781][T10077] EXT4-fs (loop1): orphan cleanup on readonly fs [ 287.672312][T10077] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 287.675104][T10077] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 288.553379][T10086] lo speed is unknown, defaulting to 1000 [ 288.620570][T10077] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.2228: attempt to clear invalid blocks 2 len 1 [ 288.627877][T10077] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2228: invalid indirect mapped block 1819239214 (level 0) [ 288.638539][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 288.673672][T10077] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2228: invalid indirect mapped block 1819239214 (level 1) [ 288.706102][T10077] EXT4-fs (loop1): 1 truncate cleaned up [ 288.707529][T10077] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,jqfmt=vfsv0,nouid32,resgid=0x0000000000000000,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 288.761518][T10077] EXT4-fs error (device loop1): ext4_lookup:1855: inode #2: comm syz.1.2228: 'file1' linked to parent dir [ 288.765790][T10079] handle_bad_sector: 154 callbacks suppressed [ 288.765807][T10079] attempt to access beyond end of device [ 288.765807][T10079] loop4: rw=3, want=6952, limit=128 [ 288.787453][T10079] attempt to access beyond end of device [ 288.787453][T10079] loop4: rw=2051, want=7894, limit=128 [ 289.142892][T10105] tmpfs: Bad value for 'mpol' [ 289.201998][T10107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2235'. [ 289.317427][T10084] lo speed is unknown, defaulting to 1000 [ 289.608045][T10084] chnl_net:caif_netlink_parms(): no params data found [ 289.643794][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 289.781868][T10125] tmpfs: Bad value for 'mpol' [ 289.907436][T10084] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.913916][T10084] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.937920][T10084] device bridge_slave_0 entered promiscuous mode [ 289.956469][T10084] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.968394][T10084] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.970957][T10084] device bridge_slave_1 entered promiscuous mode [ 290.055223][T10084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.082294][T10084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.164865][T10147] loop4: detected capacity change from 0 to 128 [ 290.172063][T10084] team0: Port device team_slave_0 added [ 290.186667][T10084] team0: Port device team_slave_1 added [ 290.264755][T10147] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 290.324918][T10160] tmpfs: Bad value for 'mpol' [ 290.517468][ T4282] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.558965][T10084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.560605][T10084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.569003][T10084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.573160][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 290.573171][ T26] audit: type=1326 audit(290.520:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.3.2266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 290.587553][ T26] audit: type=1326 audit(290.540:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.3.2266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 290.602122][T10084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.613668][T10084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.636549][T10084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.639201][ T26] audit: type=1326 audit(290.540:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.3.2266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 290.673545][ T26] audit: type=1326 audit(290.540:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.3.2266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 290.683643][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 290.683672][ T4136] Bluetooth: hci5: command 0x0409 tx timeout [ 290.693556][ T26] audit: type=1326 audit(290.540:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.3.2266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 290.698725][ T26] audit: type=1326 audit(290.580:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.3.2266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 290.708013][ T4282] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.732953][ T26] audit: type=1326 audit(290.580:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.3.2266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 290.742429][ T26] audit: type=1326 audit(290.580:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.3.2266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 290.764022][ T26] audit: type=1326 audit(290.580:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.3.2266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 290.771662][ T26] audit: type=1326 audit(290.580:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10171 comm="syz.3.2266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 290.776096][T10185] tmpfs: Bad value for 'mpol' [ 290.819895][ T4282] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.896997][T10084] device hsr_slave_0 entered promiscuous mode [ 290.953866][T10084] device hsr_slave_1 entered promiscuous mode [ 291.004037][T10084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.005667][T10084] Cannot create hsr debugfs directory [ 291.015604][ T4282] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.274798][ T4282] tipc: Disabling bearer [ 291.276148][ T4282] tipc: Left network mode [ 291.602180][T10207] loop1: detected capacity change from 0 to 512 [ 291.721483][T10214] loop4: detected capacity change from 0 to 256 [ 291.724235][T10207] EXT4-fs (loop1): Ignoring removed orlov option [ 291.733885][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 291.758219][T10207] EXT4-fs (loop1): orphan cleanup on readonly fs [ 291.760744][T10084] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 291.767200][T10214] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 291.771102][T10207] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2277: bg 0: block 248: padding at end of block bitmap is not set [ 291.776762][T10084] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 291.802869][T10207] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.2277: Failed to acquire dquot type 1 [ 291.811982][T10220] tmpfs: Bad value for 'mpol' [ 291.817223][T10084] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 291.824191][T10214] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 291.828270][T10207] EXT4-fs (loop1): 1 truncate cleaned up [ 291.832297][T10207] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,orlov,abort,nombcache,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 291.838669][T10217] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2281'. [ 291.876148][T10084] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 292.037851][T10230] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2284'. [ 292.264595][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2290'. [ 292.264971][T10240] xt_hashlimit: max too large, truncated to 1048576 [ 292.272062][T10240] Cannot find set identified by id 0 to match [ 292.393718][T10245] device hsr_slave_1 left promiscuous mode [ 292.485518][T10084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.536637][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 292.539172][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 292.560288][T10084] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.587050][T10258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2293'. [ 292.589663][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.592468][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.595105][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.596760][ T4706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.638433][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.640879][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.646834][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.665078][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.666995][ T4706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.673372][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.708957][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.711927][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.725601][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.729785][T10262] tmpfs: Bad value for 'mpol' [ 292.759534][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.763665][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 292.764133][ T4136] Bluetooth: hci5: command 0x041b tx timeout [ 292.775139][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.789695][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.804881][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.829847][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.853873][T10084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.857266][T10084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.865217][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.867720][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.916493][T10268] device pim6reg1 entered promiscuous mode [ 293.185834][T10084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.187780][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.189574][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.313368][T10293] device pim6reg1 entered promiscuous mode [ 293.558135][T10308] 9pnet: Insufficient options for proto=fd [ 293.901692][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 294.605473][T10316] sp0: Synchronizing with TNC [ 294.810585][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 294.814492][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 294.927454][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 295.427190][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 295.481487][T10338] netlink: 'syz.1.2315': attribute type 10 has an invalid length. [ 295.598670][T10344] x_tables: ip_tables: udp match: only valid for protocol 17 [ 295.604580][T10342] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2316'. [ 295.612030][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 295.615044][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.618058][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 295.637412][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.642709][T10084] device veth0_vlan entered promiscuous mode [ 295.723169][T10084] device veth1_vlan entered promiscuous mode [ 295.942940][T10084] device veth0_macvtap entered promiscuous mode [ 295.959566][T10084] device veth1_macvtap entered promiscuous mode [ 295.973733][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 295.980633][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 295.983391][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.991962][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 296.047164][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 296.097581][T10084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.099981][T10084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.102163][T10084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.134604][T10084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.137591][T10084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.140425][T10084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.142758][T10084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.145658][T10084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.149617][T10084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.165298][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 296.167954][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 296.193898][T10084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.196605][T10084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.198886][T10084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.201269][T10084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.231262][T10084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.243525][T10084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.245895][T10084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.248197][T10084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.288850][T10084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.290943][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.296007][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.324190][T10084] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.326363][T10084] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.328351][T10084] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.330429][T10084] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.538794][ T4453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.543046][ T4453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.565903][ T4704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 296.647994][ T4704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.650259][ T4704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.659320][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 296.761875][ T4282] device hsr_slave_0 left promiscuous mode [ 296.818420][ T4282] device hsr_slave_1 left promiscuous mode [ 296.915836][ T4282] bridge0: port 1(team0) entered disabled state [ 297.003612][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 297.063911][ T4282] device veth1_macvtap left promiscuous mode [ 297.065439][ T4282] device veth0_macvtap left promiscuous mode [ 297.066930][ T4282] device veth1_vlan left promiscuous mode [ 297.068301][ T4282] device veth0_vlan left promiscuous mode [ 297.279611][ T4282] bond3 (unregistering): Released all slaves [ 297.290617][ T4282] bond2 (unregistering): Released all slaves [ 297.304225][ T4282] bond1 (unregistering): Released all slaves [ 297.484298][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 297.601319][ T4282] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 297.636044][ T4282] bond0 (unregistering): Released all slaves [ 298.043718][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 298.215664][T10457] lo speed is unknown, defaulting to 1000 [ 298.236663][T10473] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 298.878611][T10514] sp0: Synchronizing with TNC [ 299.083919][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 299.162527][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2371'. [ 299.183066][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2371'. [ 299.283350][ T26] kauditd_printk_skb: 54 callbacks suppressed [ 299.283363][ T26] audit: type=1326 audit(299.230:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10524 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafa6f328 code=0x7ffc0000 [ 299.290522][ T26] audit: type=1326 audit(299.240:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10524 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafa6f328 code=0x7ffc0000 [ 299.301634][ T26] audit: type=1326 audit(299.250:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10524 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffafa6f328 code=0x7ffc0000 [ 299.323810][ T26] audit: type=1326 audit(299.250:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10524 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafa6f328 code=0x7ffc0000 [ 299.328860][ T26] audit: type=1326 audit(299.250:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10524 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafa6f328 code=0x7ffc0000 [ 299.385259][ T26] audit: type=1326 audit(299.250:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10524 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffafa6f328 code=0x7ffc0000 [ 299.390564][ T26] audit: type=1326 audit(299.250:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10524 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafa6f328 code=0x7ffc0000 [ 299.421390][ T26] audit: type=1326 audit(299.250:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10524 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafa6f328 code=0x7ffc0000 [ 299.443667][ T26] audit: type=1326 audit(299.250:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10524 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffafa6f328 code=0x7ffc0000 [ 299.459597][ T26] audit: type=1326 audit(299.250:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10524 comm="syz.2.2372" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffafa6f328 code=0x7ffc0000 [ 299.915502][T10572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2387'. [ 299.921954][T10571] netlink: 'syz.2.2386': attribute type 10 has an invalid length. [ 299.934269][T10571] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.936257][T10571] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.985330][T10571] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.987208][T10571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.989287][T10571] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.990995][T10571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.038610][T10571] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 300.092772][T10581] loop4: detected capacity change from 0 to 512 [ 300.123691][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 300.455731][T10598] sp0: Synchronizing with TNC [ 300.904408][T10609] device pim6reg1 entered promiscuous mode [ 301.163606][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 301.172296][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2406'. [ 301.208176][T10628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2406'. [ 301.242834][T10628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2406'. [ 301.255795][T10628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2406'. [ 301.360828][T10648] loop5: detected capacity change from 0 to 1024 [ 301.394197][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2410'. [ 301.484015][T10648] EXT4-fs (loop5): Ignoring removed orlov option [ 301.485509][T10648] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 301.529969][T10648] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 301.706885][T10661] ebtables: ebtables: counters copy to user failed while replacing table [ 301.713343][T10665] device hsr_slave_0 left promiscuous mode [ 302.133010][T10681] sp0: Synchronizing with TNC [ 302.203721][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 302.273908][T10694] netlink: 'syz.4.2424': attribute type 10 has an invalid length. [ 302.287440][T10694] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.289429][T10694] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.380115][T10694] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.382006][T10694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.383960][T10694] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.385595][T10694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.408664][T10694] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 302.419077][T10679] lo speed is unknown, defaulting to 1000 [ 302.477024][T10705] netlink: 'syz.1.2428': attribute type 39 has an invalid length. [ 302.510894][T10705] device veth0_macvtap left promiscuous mode [ 302.584624][T10712] loop4: detected capacity change from 0 to 512 [ 302.705753][T10712] EXT4-fs (loop4): Ignoring removed oldalloc option [ 302.707376][T10712] EXT4-fs (loop4): Ignoring removed bh option [ 302.708786][T10712] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 302.781215][T10719] loop1: detected capacity change from 0 to 1764 [ 302.916289][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2435'. [ 302.996575][T10736] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2437'. [ 302.999323][T10719] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 303.204349][T10739] sp0: Synchronizing with TNC [ 303.243863][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 303.652874][T10774] loop4: detected capacity change from 0 to 164 [ 303.729728][T10774] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 303.973021][T10785] sp0: Synchronizing with TNC [ 304.178491][T10798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2458'. [ 304.283722][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 304.367247][ T26] kauditd_printk_skb: 82 callbacks suppressed [ 304.367260][ T26] audit: type=1326 audit(304.320:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10813 comm="syz.4.2463" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f68f328 code=0x7ffc0000 [ 304.379325][ T26] audit: type=1326 audit(304.330:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10813 comm="syz.4.2463" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=3 compat=0 ip=0xffff7f68f328 code=0x7ffc0000 [ 304.411916][ T26] audit: type=1326 audit(304.330:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10813 comm="syz.4.2463" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f68f328 code=0x7ffc0000 [ 304.488454][T10827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2467'. [ 304.731680][T10838] sp0: Synchronizing with TNC [ 304.897033][T10843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2474'. [ 304.962105][T10837] loop5: detected capacity change from 0 to 4096 [ 305.051694][T10837] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 305.119632][T10837] EXT4-fs (loop5): shut down requested (0) [ 305.291237][ T26] audit: type=1326 audit(305.240:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.4.2479" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f68f328 code=0x7ffc0000 [ 305.296742][ T26] audit: type=1326 audit(305.240:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.4.2479" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f68f328 code=0x7ffc0000 [ 305.323684][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 305.361794][ T26] audit: type=1326 audit(305.240:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.4.2479" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7f68f328 code=0x7ffc0000 [ 305.384010][ T26] audit: type=1326 audit(305.240:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.4.2479" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f68f328 code=0x7ffc0000 [ 305.404721][T10863] netlink: '+}[@': attribute type 10 has an invalid length. [ 305.413965][ T26] audit: type=1326 audit(305.240:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.4.2479" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f68f328 code=0x7ffc0000 [ 305.419019][ T26] audit: type=1326 audit(305.240:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.4.2479" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=441 compat=0 ip=0xffff7f68f328 code=0x7ffc0000 [ 305.453602][ T26] audit: type=1326 audit(305.240:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.4.2479" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f68f328 code=0x7ffc0000 [ 305.501823][T10869] ebtables: ebtables: counters copy to user failed while replacing table [ 305.535428][T10863] device geneve0 entered promiscuous mode [ 305.585640][T10863] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 305.624647][T10869] device hsr_slave_0 left promiscuous mode [ 305.627663][T10865] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 305.674591][T10869] device hsr_slave_1 left promiscuous mode [ 305.792325][T10886] xt_hashlimit: size too large, truncated to 1048576 [ 305.800528][T10881] netlink: 'syz.1.2485': attribute type 10 has an invalid length. [ 306.278940][T10911] loop5: detected capacity change from 0 to 1764 [ 306.363758][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 306.542670][T10911] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 306.551761][T10925] device hsr_slave_0 left promiscuous mode [ 306.604993][T10925] device hsr_slave_1 left promiscuous mode [ 306.637301][T10923] ebtables: ebtables: counters copy to user failed while replacing table [ 306.891896][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2506'. [ 306.904256][T10936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.906129][T10936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.949617][T10936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.951485][T10936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.004838][T10940] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 307.288115][T10950] loop5: detected capacity change from 0 to 128 [ 307.367212][T10950] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 307.403800][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 307.719498][T10952] tipc: Enabling of bearer rejected, already enabled [ 307.859888][T10968] IPv6: Can't replace route, no match found [ 307.889415][T10961] ebtables: ebtables: counters copy to user failed while replacing table [ 307.958269][T10972] loop3: detected capacity change from 0 to 512 [ 308.019334][T10972] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,grpid,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 308.236547][T10982] loop4: detected capacity change from 0 to 256 [ 308.325215][T10982] FAT-fs (loop4): Directory bread(block 64) failed [ 308.326866][T10982] FAT-fs (loop4): Directory bread(block 65) failed [ 308.328491][T10982] FAT-fs (loop4): Directory bread(block 66) failed [ 308.343800][T10982] FAT-fs (loop4): Directory bread(block 67) failed [ 308.350754][T10982] FAT-fs (loop4): Directory bread(block 68) failed [ 308.352358][T10982] FAT-fs (loop4): Directory bread(block 69) failed [ 308.375106][T10982] FAT-fs (loop4): Directory bread(block 70) failed [ 308.385681][T10982] FAT-fs (loop4): Directory bread(block 71) failed [ 308.394178][T10982] FAT-fs (loop4): Directory bread(block 72) failed [ 308.417797][T10982] FAT-fs (loop4): Directory bread(block 73) failed [ 308.443728][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 308.488336][T10982] attempt to access beyond end of device [ 308.488336][T10982] loop4: rw=0, want=1820, limit=256 [ 308.505928][T10982] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 326) [ 308.507993][T10982] FAT-fs (loop4): Filesystem has been set read-only [ 308.517593][T10982] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 326) [ 308.553019][T10998] loop5: detected capacity change from 0 to 164 [ 308.600252][T10998] ISOFS: unable to read i-node block [ 308.601663][T10998] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 308.626894][T11000] loop3: detected capacity change from 0 to 512 [ 308.653896][T11000] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 308.705381][T11000] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,dioread_lock,,errors=continue. Quota mode: writeback. [ 308.748735][T11009] device wireguard0 entered promiscuous mode [ 309.061164][T11012] ebtables: ebtables: counters copy to user failed while replacing table [ 309.357320][T11025] ebtables: ebtables: counters copy to user failed while replacing table [ 309.465538][T11028] lo speed is unknown, defaulting to 1000 [ 309.483619][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 309.537151][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 309.537164][ T26] audit: type=1326 audit(309.490:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 309.549818][ T26] audit: type=1326 audit(309.500:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 309.579318][ T26] audit: type=1326 audit(309.500:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 309.603672][ T26] audit: type=1326 audit(309.530:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 309.630505][ T26] audit: type=1326 audit(309.530:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 309.650523][ T26] audit: type=1326 audit(309.530:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 309.673521][ T26] audit: type=1326 audit(309.530:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 309.688960][ T26] audit: type=1326 audit(309.530:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 309.733535][ T26] audit: type=1326 audit(309.530:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 309.738465][ T26] audit: type=1326 audit(309.530:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="GPL" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 309.783089][T11047] loop5: detected capacity change from 0 to 2048 [ 309.849555][ T4813] Alternate GPT is invalid, using primary GPT. [ 309.851418][ T4813] loop5: p2 p3 p7 [ 309.898055][T11047] Alternate GPT is invalid, using primary GPT. [ 309.901518][T11047] loop5: p2 p3 p7 [ 309.982246][T11052] ebtables: ebtables: counters copy to user failed while replacing table [ 309.982373][T11058] loop4: detected capacity change from 0 to 2048 [ 310.106319][T11058] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 310.150560][T11066] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 310.163588][T11066] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 310.208975][ T4813] udevd[4813]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 310.222188][ T7624] udevd[7624]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 310.230186][ T7624] udevd[7624]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 310.375667][ T4159] udevd[4159]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 310.406226][ T4014] udevd[4014]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 310.437509][ T7624] udevd[7624]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 310.496085][T11085] netlink: 'syz.4.2560': attribute type 10 has an invalid length. [ 310.499066][T11085] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.500798][T11085] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.523762][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 310.597974][T11094] loop4: detected capacity change from 0 to 256 [ 310.621272][T11094] FAT-fs (loop4): bogus number of FAT sectors [ 310.622824][T11094] FAT-fs (loop4): Can't find a valid FAT filesystem [ 310.883180][T11106] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2568'. [ 311.285369][T11127] sp0: Synchronizing with TNC [ 311.386151][T11128] netlink: 'syz.3.2576': attribute type 1 has an invalid length. [ 311.564128][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 311.578634][T11130] loop3: detected capacity change from 0 to 512 [ 311.653380][T11130] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 311.682058][T11130] EXT4-fs (loop3): 1 orphan inode deleted [ 311.685918][T11130] EXT4-fs (loop3): 1 truncate cleaned up [ 311.699323][T11130] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 311.779335][T11130] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz.3.2577: path /576/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 311.824952][T11130] EXT4-fs (loop3): Remounting filesystem read-only [ 312.275188][T11150] loop4: detected capacity change from 0 to 512 [ 312.347174][T11154] tmpfs: Bad value for 'mpol' [ 312.398855][T11150] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,minixdf,noquota,,errors=continue. Quota mode: none. [ 312.422376][T11157] loop5: detected capacity change from 0 to 1764 [ 312.603728][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 312.655565][T11162] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 312.676798][T11162] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 312.750326][T11166] loop4: detected capacity change from 0 to 512 [ 312.813850][T11166] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 312.824751][T11166] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 312.826823][T11166] System zones: 1-12 [ 312.838486][T11166] EXT4-fs (loop4): 1 truncate cleaned up [ 312.863703][T11166] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback. [ 312.946399][T11169] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2593'. [ 313.303994][T11179] netlink: 'syz.5.2597': attribute type 1 has an invalid length. [ 313.579963][T11196] loop1: detected capacity change from 0 to 256 [ 313.606683][T11196] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 313.619534][T11196] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 313.643627][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 313.648438][T11199] loop3: detected capacity change from 0 to 256 [ 313.684813][T11201] netlink: 'syz.5.2608': attribute type 10 has an invalid length. [ 313.694120][T11201] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.696203][T11201] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.745512][T11199] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 313.752337][T11201] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.754087][T11201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.755865][T11201] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.757438][T11201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.785708][T11201] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 314.170282][T11215] loop5: detected capacity change from 0 to 512 [ 314.188121][T11206] lo speed is unknown, defaulting to 1000 [ 314.222939][T11215] EXT4-fs error (device loop5): ext4_xattr_block_get:546: inode #2: comm syz.5.2614: corrupted xattr block 255 [ 314.242077][T11215] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 314.248852][T11215] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,dioread_lock,init_itable,auto_da_alloc,grpjquota=.noload,barrier=0x0000000000000007,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 314.255087][T11215] EXT4-fs error (device loop5): ext4_xattr_block_get:546: inode #2: comm syz.5.2614: corrupted xattr block 255 [ 314.402456][T11222] netem: change failed [ 314.644774][T11237] device pim6reg1 entered promiscuous mode [ 314.665700][T11242] loop1: detected capacity change from 0 to 512 [ 314.683805][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 314.733317][T11242] __quota_error: 111 callbacks suppressed [ 314.733335][T11242] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144). [ 314.741009][T11242] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 314.756332][T11242] EXT4-fs (loop1): mount failed [ 315.124622][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2630'. [ 315.315654][T11273] loop1: detected capacity change from 0 to 1024 [ 315.401286][T11273] EXT4-fs (loop1): Ignoring removed orlov option [ 315.402775][T11273] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 315.504128][T11273] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 315.511947][T11284] netlink: 'syz.4.2638': attribute type 10 has an invalid length. [ 315.579448][T11288] loop3: detected capacity change from 0 to 512 [ 315.611289][ T26] audit: type=1326 audit(315.560:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11289 comm="syz.5.2641" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff836ee328 code=0x7ffc0000 [ 315.633773][ T26] audit: type=1326 audit(315.590:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11289 comm="syz.5.2641" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff836ee328 code=0x7ffc0000 [ 315.642010][ T26] audit: type=1326 audit(315.590:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11289 comm="syz.5.2641" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff836ee328 code=0x7ffc0000 [ 315.653751][ T26] audit: type=1326 audit(315.590:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11289 comm="syz.5.2641" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff836ee328 code=0x7ffc0000 [ 315.686224][ T26] audit: type=1326 audit(315.590:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11289 comm="syz.5.2641" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff836ee328 code=0x7ffc0000 [ 315.691177][ T26] audit: type=1326 audit(315.590:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11289 comm="syz.5.2641" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff836ee328 code=0x7ffc0000 [ 315.728908][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 315.734860][T11288] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 315.736661][T11288] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 315.757162][T11288] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 315.759143][T11288] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 315.773387][T11298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2643'. [ 315.801390][ T26] audit: type=1326 audit(315.590:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11289 comm="syz.5.2641" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff836ee328 code=0x7ffc0000 [ 315.806880][T11288] EXT4-fs (loop3): 1 truncate cleaned up [ 315.806907][T11288] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,mblk_io_submit,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 315.813581][ T26] audit: type=1326 audit(315.590:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11289 comm="syz.5.2641" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff836ee328 code=0x7ffc0000 [ 315.818631][ T26] audit: type=1326 audit(315.590:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11289 comm="syz.5.2641" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff836ee328 code=0x7ffc0000 [ 315.925375][T11288] EXT4-fs (loop3): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpquota,noquota,quota,noload,noload,. Quota mode: writeback. [ 316.111615][T11320] loop4: detected capacity change from 0 to 512 [ 316.178134][T11320] EXT2-fs (loop4): error: couldn't mount because of unsupported optional features (4740) [ 316.497539][T11337] device pim6reg1 entered promiscuous mode [ 316.547104][T11347] loop3: detected capacity change from 0 to 512 [ 316.608363][ T4022] bond0: (slave syz_tun): Releasing backup interface [ 316.717478][T11347] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 316.763795][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 316.811172][T11355] loop5: detected capacity change from 0 to 512 [ 316.895571][T11355] EXT4-fs warning (device loop5): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 316.904904][T11355] EXT4-fs (loop5): mount failed [ 316.915498][T11358] device bridge_slave_1 left promiscuous mode [ 316.926417][T11358] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.003237][T11358] device bridge_slave_0 left promiscuous mode [ 317.019885][T11358] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.139878][T11373] loop5: detected capacity change from 0 to 256 [ 317.148904][T11358] bond0: (slave bridge0): Releasing backup interface [ 317.210769][T11373] FAT-fs (loop5): Directory bread(block 64) failed [ 317.212447][T11373] FAT-fs (loop5): Directory bread(block 65) failed [ 317.214775][T11373] FAT-fs (loop5): Directory bread(block 66) failed [ 317.224059][T11373] FAT-fs (loop5): Directory bread(block 67) failed [ 317.228970][T11373] FAT-fs (loop5): Directory bread(block 68) failed [ 317.230623][T11373] FAT-fs (loop5): Directory bread(block 69) failed [ 317.232248][T11373] FAT-fs (loop5): Directory bread(block 70) failed [ 317.258147][T11373] FAT-fs (loop5): Directory bread(block 71) failed [ 317.259875][T11373] FAT-fs (loop5): Directory bread(block 72) failed [ 317.261664][T11373] FAT-fs (loop5): Directory bread(block 73) failed [ 317.317211][T11343] lo speed is unknown, defaulting to 1000 [ 317.390623][T11373] attempt to access beyond end of device [ 317.390623][T11373] loop5: rw=524288, want=1768, limit=256 [ 317.402013][T11373] attempt to access beyond end of device [ 317.402013][T11373] loop5: rw=0, want=1744, limit=256 [ 317.797026][T11343] chnl_net:caif_netlink_parms(): no params data found [ 317.803703][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 318.385637][T11343] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.387566][T11343] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.390188][T11343] device bridge_slave_0 entered promiscuous mode [ 318.425476][T11478] loop3: detected capacity change from 0 to 2048 [ 318.431961][T11343] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.439612][T11343] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.455647][T11343] device bridge_slave_1 entered promiscuous mode [ 318.457505][T11478] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 318.614171][ T4070] Bluetooth: hci2: command 0x0409 tx timeout [ 318.657366][T11343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.664933][T11493] netlink: 'syz.3.2682': attribute type 10 has an invalid length. [ 318.717333][T11343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.812280][T11343] team0: Port device team_slave_0 added [ 318.840127][T11343] team0: Port device team_slave_1 added [ 318.843743][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 318.876286][T11500] loop5: detected capacity change from 0 to 2048 [ 318.931230][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2688'. [ 318.933393][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2688'. [ 318.938487][T11500] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 318.948541][T11343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.950205][T11343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.962545][T11511] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2689'. [ 318.975813][T11343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.980049][T11343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.981839][T11343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.988254][T11343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.156112][T11343] device hsr_slave_0 entered promiscuous mode [ 319.183923][T11343] device hsr_slave_1 entered promiscuous mode [ 319.362680][T11533] netlink: 'syz.5.2695': attribute type 10 has an invalid length. [ 319.365500][T11533] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.367242][T11533] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.580617][T11343] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.640418][T11343] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.766192][T11343] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.829362][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 319.829376][ T26] audit: type=1326 audit(319.780:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.3.2702" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 319.838338][ T26] audit: type=1326 audit(319.780:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.3.2702" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 319.861626][ T26] audit: type=1326 audit(319.790:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.3.2702" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=239 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 319.875853][T11343] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.883988][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 319.890920][ T26] audit: type=1326 audit(319.790:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.3.2702" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 319.912320][ T26] audit: type=1326 audit(319.790:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11555 comm="syz.3.2702" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88251328 code=0x7ffc0000 [ 319.955887][T11560] tipc: Enabling of bearer rejected, failed to enable media [ 320.096790][T11343] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 320.139030][T11343] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 320.167419][T11343] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 320.457127][T11343] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 320.548857][ T26] audit: type=1326 audit(320.500:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11578 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f68f328 code=0x7ffc0000 [ 320.580051][ T26] audit: type=1326 audit(320.530:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11578 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff7f68f328 code=0x7ffc0000 [ 320.593105][T11580] loop4: detected capacity change from 0 to 512 [ 320.606206][ T26] audit: type=1326 audit(320.540:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11578 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f68f328 code=0x7ffc0000 [ 320.611143][ T26] audit: type=1326 audit(320.540:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11578 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7f68f328 code=0x7ffc0000 [ 320.665248][ T26] audit: type=1326 audit(320.540:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11578 comm="syz.4.2707" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f68f328 code=0x7ffc0000 [ 320.673148][T11580] EXT4-fs (loop4): Test dummy encryption mode enabled [ 320.683691][ T4070] Bluetooth: hci2: command 0x041b tx timeout [ 320.742032][T11580] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2707: inode #1: comm syz.4.2707: iget: illegal inode # [ 320.745387][T11580] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2707: error while reading EA inode 1 err=-117 [ 320.756197][T11580] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.2707: inode #1: comm syz.4.2707: iget: illegal inode # [ 320.761926][T11580] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.2707: error while reading EA inode 1 err=-117 [ 320.797614][T11580] EXT4-fs (loop4): 1 orphan inode deleted [ 320.799044][T11580] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,nobarrier,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 320.885559][T11343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.923764][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 321.009029][T11468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.011562][T11468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.043171][T11343] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.154376][T11468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.157073][T11468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.159375][T11468] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.160928][T11468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.163390][T11468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 321.216206][T11468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 321.218778][T11468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.221075][T11468] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.222701][T11468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.286608][T11600] loop3: detected capacity change from 0 to 8192 [ 321.316283][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 321.377104][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 321.443323][T11617] xt_CT: You must specify a L4 protocol and not use inversions on it [ 321.467066][T11614] device bond_slave_0 entered promiscuous mode [ 321.468579][T11614] device bond_slave_1 entered promiscuous mode [ 321.581531][T11614] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 321.604081][T11619] loop5: detected capacity change from 0 to 512 [ 321.609957][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 321.615634][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 321.626429][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 321.645723][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 321.657682][T11628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2715'. [ 321.664700][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 321.687556][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 321.689511][T11619] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 321.696232][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 321.709623][T11343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.721184][T11343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 321.731735][T11619] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2718: bg 0: block 64: padding at end of block bitmap is not set [ 321.740243][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 321.741380][T11619] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.2718: Failed to acquire dquot type 0 [ 321.742950][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 321.755940][T11619] EXT4-fs (loop5): 1 truncate cleaned up [ 321.757251][T11619] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 321.876249][T11614] tipc: Started in network mode [ 321.877478][T11614] tipc: Node identity ac14140f, cluster identity 4711 [ 321.879223][T11614] tipc: New replicast peer: 255.255.255.5 [ 321.880690][T11614] tipc: Enabled bearer , priority 10 [ 321.963623][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 322.174418][T11641] netlink: 'syz.4.2724': attribute type 10 has an invalid length. [ 322.270691][T11610] lo speed is unknown, defaulting to 1000 [ 322.334763][T11468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 322.336764][T11468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 322.438775][T11343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.571921][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 322.577925][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 322.728116][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 322.730945][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 322.774399][ T1959] Bluetooth: hci2: command 0x040f tx timeout [ 322.788240][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 322.790877][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 322.871411][T11343] device veth0_vlan entered promiscuous mode [ 322.929266][T11343] device veth1_vlan entered promiscuous mode [ 322.994072][ T21] tipc: Node number set to 2886997007 [ 323.003762][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 323.034550][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 323.037149][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 323.040493][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 323.050436][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.080180][T11343] device veth0_macvtap entered promiscuous mode [ 323.099107][T11343] device veth1_macvtap entered promiscuous mode [ 323.132793][T11610] chnl_net:caif_netlink_parms(): no params data found [ 323.469776][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.472206][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.483679][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.486204][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.497756][ T1959] Bluetooth: hci0: command 0x0409 tx timeout [ 323.513508][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.515840][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.517987][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.520300][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.574408][T11343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.595735][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 323.598392][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 323.601149][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 323.648753][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 323.680068][ T8615] tipc: Disabling bearer [ 323.681536][ T8615] tipc: Disabling bearer [ 323.684294][ T8615] tipc: Left network mode [ 323.734572][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.737174][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.739522][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.742850][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.773606][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.776134][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.778405][T11343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.780716][T11343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.854067][T11343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.977124][T11343] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.979884][T11343] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.981982][T11343] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.993650][T11343] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.007683][T11466] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 324.010581][T11466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.020412][T11710] device sit0 entered promiscuous mode [ 324.043628][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 324.187944][T11714] netlink: 'syz.4.2749': attribute type 10 has an invalid length. [ 324.308182][T11610] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.310082][T11610] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.312727][T11610] device bridge_slave_0 entered promiscuous mode [ 324.410062][T11610] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.411871][T11610] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.430172][T11610] device bridge_slave_1 entered promiscuous mode [ 324.559714][T11610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.564600][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.566873][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.604857][T11610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.615865][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 324.809654][T11610] team0: Port device team_slave_0 added [ 324.830783][T11610] team0: Port device team_slave_1 added [ 324.854032][ T1959] Bluetooth: hci2: command 0x0419 tx timeout [ 324.966076][ T4706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.968420][ T4706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.083548][T11610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.083749][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 325.085326][T11610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.103697][T11610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.136756][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 325.211679][ T8615] device erspan0 left promiscuous mode [ 325.427988][T11610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.436692][T11610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.479998][T11610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.503548][T11742] netlink: 'syz.5.2758': attribute type 10 has an invalid length. [ 325.556829][T11745] sp0: Synchronizing with TNC [ 325.563657][ T1959] Bluetooth: hci0: command 0x041b tx timeout [ 325.756748][T11610] device hsr_slave_0 entered promiscuous mode [ 325.774609][T11610] device hsr_slave_1 entered promiscuous mode [ 325.803935][T11610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.805637][T11610] Cannot create hsr debugfs directory [ 326.123644][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 326.779755][T11610] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 326.817767][T11791] device pim6reg1 entered promiscuous mode [ 326.821670][T11610] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 326.878683][T11610] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 327.037205][T11610] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 327.092574][ T8615] device batadv_slave_1 left promiscuous mode [ 327.163709][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 327.179557][ T8615] device bridge_slave_1 left promiscuous mode [ 327.181160][ T8615] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.283158][ T8615] device bridge_slave_0 left promiscuous mode [ 327.287543][ T8615] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.395625][ T8615] device veth1_macvtap left promiscuous mode [ 327.398609][ T8615] device veth1_vlan left promiscuous mode [ 327.400021][ T8615] device veth0_vlan left promiscuous mode [ 327.643747][ T4128] Bluetooth: hci0: command 0x040f tx timeout [ 327.771021][ T8615] bond3 (unregistering): Released all slaves [ 327.801984][ T8615] bond2 (unregistering): Released all slaves [ 327.831062][ T8615] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 327.898725][ T8615] bond1 (unregistering): Released all slaves [ 328.205286][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.237729][ T8615] team0 (unregistering): Port device team_slave_1 removed [ 328.249360][ T8615] team0 (unregistering): Port device team_slave_0 removed [ 328.259985][ T8615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.305580][ T8615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.515693][ T8615] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 328.564454][ T8615] bond0 (unregistering): Released all slaves [ 329.012203][T11610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.080007][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.082709][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.094256][T11610] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.129116][T11853] netlink: 'syz.3.2798': attribute type 10 has an invalid length. [ 329.131525][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.137558][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.141377][ T4243] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.142993][ T4243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.172363][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.194428][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.197038][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.234173][ T4243] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.235873][ T4243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.238075][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.243821][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.296732][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.299641][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.311768][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.318572][T11858] device pim6reg1 entered promiscuous mode [ 329.321218][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.479136][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.482190][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.496140][T11867] device veth1_macvtap left promiscuous mode [ 329.497698][T11867] device macsec0 entered promiscuous mode [ 329.532496][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.535422][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.547138][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.549718][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.580870][T11610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.723061][T11880] netlink: 'syz.3.2809': attribute type 10 has an invalid length. [ 329.725592][ T4136] Bluetooth: hci0: command 0x0419 tx timeout [ 329.838265][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 329.840288][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 329.848984][T11610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.283706][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 330.359007][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 330.361797][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 330.414424][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 330.417175][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 330.419981][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 330.424512][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 330.465979][T11610] device veth0_vlan entered promiscuous mode [ 330.505824][T11610] device veth1_vlan entered promiscuous mode [ 330.554654][T11909] Â: renamed from pim6reg1 [ 330.637768][T11914] netlink: 'syz.3.2820': attribute type 10 has an invalid length. [ 330.664089][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 330.666425][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 330.668608][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 330.671153][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 330.690230][T11610] device veth0_macvtap entered promiscuous mode [ 330.696856][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 330.716003][T11610] device veth1_macvtap entered promiscuous mode [ 330.758606][T11610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.761234][T11610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.793796][T11610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.800203][T11610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.802533][T11610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.823545][T11610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.833609][T11610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.835994][T11610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.843576][T11610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.845923][T11610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.857441][T11610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.871806][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 330.874890][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 330.906818][T11610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.909361][T11610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.911627][T11610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.942901][T11610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.953537][T11610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.955862][T11610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.958122][T11610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.960509][T11610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.962867][T11610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.993822][T11610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.014716][T11610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.020386][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 331.023179][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 331.089164][T11610] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.091247][T11610] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.093299][T11610] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.114067][T11610] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.324683][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 331.453009][ T4706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.455509][ T4706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.461043][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 331.528196][ T4706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.530458][ T4706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.544986][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 331.852300][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 331.852319][ T26] audit: type=1326 audit(331.800:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.6.2712" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb250d328 code=0x7ffc0000 [ 331.860444][ T26] audit: type=1326 audit(331.800:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.6.2712" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb250d328 code=0x7ffc0000 [ 331.889945][ T26] audit: type=1326 audit(331.820:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.6.2712" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=113 compat=0 ip=0xffffb250d328 code=0x7ffc0000 [ 331.923697][ T26] audit: type=1326 audit(331.820:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.6.2712" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb250d328 code=0x7ffc0000 [ 331.945813][ T26] audit: type=1326 audit(331.820:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.6.2712" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb250d328 code=0x7ffc0000 [ 332.363645][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 332.881468][T11966] chnl_net:caif_netlink_parms(): no params data found [ 333.040906][T11997] netlink: 'syz.6.2852': attribute type 10 has an invalid length. [ 333.043303][T11997] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.045229][T11997] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.077036][T11997] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.079017][T11997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.081094][T11997] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.082772][T11997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.104824][T11997] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 333.142114][T11966] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.154574][T11966] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.169859][T11966] device bridge_slave_0 entered promiscuous mode [ 333.197654][T11966] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.201268][T11966] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.210623][T11966] device bridge_slave_1 entered promiscuous mode [ 333.338046][T11966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.358708][T11966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.403774][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 333.466752][T11966] team0: Port device team_slave_0 added [ 333.487422][T11966] team0: Port device team_slave_1 added [ 333.559144][T11966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.561895][T11966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.577998][T11966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.588355][T11966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.589991][T11966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.615919][T11966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.708214][T12017] device pim6reg1 entered promiscuous mode [ 333.815976][T11966] device hsr_slave_0 entered promiscuous mode [ 333.854665][T11966] device hsr_slave_1 entered promiscuous mode [ 333.873743][T11966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.875615][T11966] Cannot create hsr debugfs directory [ 334.285206][T12029] netlink: 'syz.5.2862': attribute type 10 has an invalid length. [ 334.443684][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 334.512675][ T4071] Bluetooth: hci1: command 0x0409 tx timeout [ 334.712214][ T8615] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.806910][T12063] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 334.821134][ T8615] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.839789][T12065] netlink: 'syz.4.2877': attribute type 10 has an invalid length. [ 334.873281][ T8615] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.941789][ T8615] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.211108][ T8615] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.227870][T12092] netlink: 'syz.1.2889': attribute type 10 has an invalid length. [ 335.230091][T12092] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.232078][T12092] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.262949][T12092] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.264781][T12092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.266686][T12092] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.268595][T12092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.285698][T12092] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 335.340907][ T8615] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.425344][ T8615] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.483767][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 335.491458][T12102] Architecture has no drm_cache.c support [ 335.493456][T12102] ------------[ cut here ]------------ [ 335.494714][T12102] WARNING: CPU: 0 PID: 12102 at drivers/gpu/drm/drm_cache.c:116 drm_clflush_pages+0x1c/0x2c [ 335.497021][T12102] Modules linked in: [ 335.497858][T12102] CPU: 0 PID: 12102 Comm: syz.4.2892 Not tainted 5.15.173-syzkaller #0 [ 335.499713][T12102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 335.501953][T12102] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 335.503725][T12102] pc : drm_clflush_pages+0x1c/0x2c [ 335.504896][T12102] lr : drm_clflush_pages+0x1c/0x2c [ 335.506046][T12102] sp : ffff800020f977f0 [ 335.507000][T12102] x29: ffff800020f977f0 x28: 1fffe0001cb3ce84 x27: ffff0000e59e7400 [ 335.508780][T12102] x26: dfff800000000000 x25: 1fffe0001c8e8247 x24: dfff800000000000 [ 335.510553][T12102] x23: 0000000000017000 x22: ffff0000e4741230 x21: ffff0000f6fa3800 [ 335.512443][T12102] x20: ffff0000e4741000 x19: ffff0000e4741230 x18: 0000000000000001 [ 335.514210][T12102] x17: 0000000000000002 x16: ffff800011ab8a34 x15: 00000000ffffffff [ 335.516035][T12102] x14: ffff0000d5740000 x13: 0000000000000001 x12: 0000000000040000 [ 335.517789][T12102] x11: 0000000000016633 x10: ffff8000261d9000 x9 : 602027af5d00a500 [ 335.519557][T12102] x8 : 602027af5d00a500 x7 : 0000000000000001 x6 : 0000000000000001 [ 335.521361][T12102] x5 : ffff800020f96f58 x4 : ffff800014ba05e0 x3 : ffff80000a98269c [ 335.523169][T12102] x2 : ffff0001b418dd10 x1 : 0000000100000000 x0 : 0000000000000027 [ 335.525000][T12102] Call trace: [ 335.525769][T12102] drm_clflush_pages+0x1c/0x2c [ 335.526839][T12102] vgem_prime_pin+0xd4/0x184 [ 335.527899][T12102] drm_gem_pin+0x6c/0x8c [ 335.528816][T12102] drm_gem_map_attach+0x40/0x50 [ 335.529918][T12102] dma_buf_dynamic_attach+0x1b8/0x748 [ 335.531153][T12102] dma_buf_attach+0x30/0x40 [ 335.532189][T12102] drm_gem_prime_import_dev+0xf4/0x338 [ 335.533490][T12102] drm_gem_prime_fd_to_handle+0x1ac/0x464 [ 335.534764][T12102] drm_prime_fd_to_handle_ioctl+0x94/0xd0 [ 335.535996][T12102] drm_ioctl_kernel+0x2cc/0x458 [ 335.537115][T12102] drm_ioctl+0x5d0/0xa64 [ 335.538065][T12102] __arm64_sys_ioctl+0x14c/0x1c8 [ 335.539193][T12102] invoke_syscall+0x98/0x2b8 [ 335.540270][T12102] el0_svc_common+0x138/0x258 [ 335.541261][T12102] do_el0_svc+0x58/0x14c [ 335.542255][T12102] el0_svc+0x7c/0x1f0 [ 335.543205][T12102] el0t_64_sync_handler+0x84/0xe4 [ 335.544342][T12102] el0t_64_sync+0x1a0/0x1a4 [ 335.545352][T12102] irq event stamp: 998 [ 335.546266][T12102] hardirqs last enabled at (997): [] __up_console_sem+0xb4/0x100 [ 335.548392][T12102] hardirqs last disabled at (998): [] el1_dbg+0x24/0x80 [ 335.550278][T12102] softirqs last enabled at (674): [] local_bh_enable+0x10/0x34 [ 335.552384][T12102] softirqs last disabled at (672): [] local_bh_disable+0x10/0x34 [ 335.554534][T12102] ---[ end trace f7e94624799c8c07 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 335.582165][ T8615] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.212093][ T8615] tipc: Disabling bearer [ 336.213725][ T8615] tipc: Left network mode [ 336.529094][ T4071] Bluetooth: hci1: command 0x041b tx timeout [ 338.303630][ T8615] device erspan0 left promiscuous mode [ 340.720475][ T8615] device batadv_slave_1 left promiscuous mode [ 340.819072][ T8615] device hsr_slave_0 left promiscuous mode [ 340.863982][ T8615] device hsr_slave_1 left promiscuous mode [ 340.959382][ T8615] device hsr_slave_0 left promiscuous mode [ 341.014902][ T8615] device hsr_slave_1 left promiscuous mode [ 341.105555][ T8615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.107565][ T8615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.111351][ T8615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.112956][ T8615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.116254][ T8615] device bridge_slave_1 left promiscuous mode [ 341.117840][ T8615] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.154796][ T8615] device bridge_slave_0 left promiscuous mode [ 341.156499][ T8615] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.293755][ T8615] device veth1_macvtap left promiscuous mode [ 341.295154][ T8615] device veth0_macvtap left promiscuous mode [ 341.296559][ T8615] device veth1_vlan left promiscuous mode [ 341.298024][ T8615] device veth0_vlan left promiscuous mode [ 341.384074][ T8615] device veth1_macvtap left promiscuous mode [ 341.385553][ T8615] device veth0_macvtap left promiscuous mode [ 341.387010][ T8615] device veth1_vlan left promiscuous mode [ 341.388477][ T8615] device veth0_vlan left promiscuous mode [ 341.645080][ T8615] bond6 (unregistering): Released all slaves [ 341.659091][ T8615] bond5 (unregistering): Released all slaves [ 341.671709][ T8615] bond4 (unregistering): Released all slaves [ 341.685550][ T8615] bond3 (unregistering): Released all slaves [ 341.697673][ T8615] bond2 (unregistering): Released all slaves [ 341.710766][ T8615] bond1 (unregistering): Released all slaves [ 341.836354][ T4243] smc: removing ib device s [ 341.987480][ T8615] bond0 (unregistering): Released all slaves [ 342.283270][ T8615] team0 (unregistering): Port device team_slave_1 removed [ 342.302282][ T8615] team0 (unregistering): Port device team_slave_0 removed [ 342.335504][ T8615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.404419][ T8615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.653014][ T8615] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 342.706172][ T8615] bond0 (unregistering): Released all slaves