last executing test programs: 19m51.483140002s ago: executing program 3 (id=1964): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000010c0)=0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001780), 0x8, r4}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x386) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) 19m49.582321264s ago: executing program 3 (id=1974): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000280)={[{@dioread_nolock}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x1) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r3, &(0x7f0000000240)='./bus/file0\x00', r3, &(0x7f00000001c0)='./file0\x00', 0x2) 19m48.563470418s ago: executing program 3 (id=1977): r0 = timerfd_create(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xffffffffffffffff, 0x24020000) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') lseek(r4, 0x10000000005, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x2}) syz_io_uring_submit(0x0, 0x0, 0x0) kexec_load(0x5, 0x0, 0x0, 0x0) 19m47.395660468s ago: executing program 3 (id=1982): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000010c0)=0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001780), 0x8}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x386) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) 19m44.59039175s ago: executing program 3 (id=1994): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0x299) syz_open_dev$vim2m(0x0, 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x18, &(0x7f0000000000)=""/4071, &(0x7f0000001080)=0xfe7) 19m41.672630396s ago: executing program 3 (id=1998): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) futex(0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet(0x2, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 19m25.971301283s ago: executing program 32 (id=1998): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) futex(0xfffffffffffffffd, 0x8, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet(0x2, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 11.048281635s ago: executing program 1 (id=4982): syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', r0}, 0x18) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) unshare(0x22020600) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) syz_emit_ethernet(0x66, &(0x7f0000000f80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0xfffc}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) socket$inet(0x2, 0x3, 0x6) 10.567220375s ago: executing program 4 (id=4984): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x21182, 0x0) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2084) writev(r2, &(0x7f00000036c0)=[{&(0x7f0000002080)}, {&(0x7f00000034c0)="03", 0x1}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0xfe, 0x7ffc0002}]}) semctl$GETZCNT(0x0, 0x2, 0xf, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0xd5d1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x1, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000100", "2809e8dbe108598948224aee4afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x4, 0x2000000000001]}}) ioctl$LOOP_GET_STATUS(r6, 0x4c03, &(0x7f0000000c80)) bind$netrom(r5, 0x0, 0x0) write$cgroup_int(r0, &(0x7f00000000c0)=0x10001, 0x12) 8.105436491s ago: executing program 4 (id=4989): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r4, @ANYRES64=r3], 0x118) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000080008400000000a0400164008001540000000030400170058000d8014"], 0xd4}}, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0x18}}], 0x1, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x8, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r9, @ANYRES64=r8], 0x118) 7.774459926s ago: executing program 2 (id=4990): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sched_getparam(r2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udplite(0xa, 0x2, 0x88) sigaltstack(&(0x7f0000001000)={&(0x7f0000000000)=""/4088, 0x0, 0xff54}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}}, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) timer_settime(0x0, 0x0, 0x0, 0x0) sigaltstack(0x0, &(0x7f0000001080)={0x0}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040768, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto(r0, &(0x7f0000000780)="7057da", 0x3, 0x24000011, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba1e9bb7ec30de54e3d82d4e023f9a336ec7e55fefd0d3c8f30eea40e40a6e32d6873837bb90f2fafc91", 0xffffffffffffff29, 0x80, 0x0, 0x0) 6.848342895s ago: executing program 0 (id=4991): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000040a2f732789a4079e6f98838292064759aa00f4a694a5a3fea24723c16437132beb45ffb9482c5dd16f2cfb20f7b9004000000000000007485e08712c167e3ac38b1afdf81", @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf25010000000000000007410000004c00180000000873797a3100"/98], 0x68}}, 0x20000885) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) 6.811955787s ago: executing program 2 (id=4992): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) dup(r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fadbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a006080", @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0xc0c0}, 0x50) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00010000000000000000000000000000a30a00000000fbffffffffffffffffff000000000000000000000000000800000000000000000000000000000041fbfdb9000000007c28524cc5ea06000000000000000c0000000000000000"], 0xb8}}, 0x0) 6.73956079s ago: executing program 4 (id=4993): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, 0x0, 0x0, 0x4) r5 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setresgid(0x0, r8, r8) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002f00)={{{@in6=@private0, @in6=@private0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000003000)=0xe8) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000004c0)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) 6.639534724s ago: executing program 0 (id=4994): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20400, 0x38) getdents64(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00007c000000009a97b166af73792800000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000240)=ANY=[@ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r5, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0x17, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe97, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.549572728s ago: executing program 0 (id=4995): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sched_getparam(r2, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udplite(0xa, 0x2, 0x88) sigaltstack(&(0x7f0000001000)={&(0x7f0000000000)=""/4088, 0x0, 0xff54}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}}, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) timer_settime(0x0, 0x0, 0x0, 0x0) sigaltstack(0x0, &(0x7f0000001080)={0x0}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040768, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto(r0, &(0x7f0000000780)="7057da", 0x3, 0x24000011, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba1e9bb7ec30de54e3d82d4e023f9a336ec7e55fefd0d3c8f30eea40e40a6e32d6873837bb90f2fafc91", 0xffffffffffffff29, 0x80, 0x0, 0x0) 6.535729379s ago: executing program 4 (id=4996): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f00000000c0)={0x0, 0x0}) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x8, 0x18000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000540)={[{@test_dummy_encryption}, {@oldalloc}]}, 0x80, 0x236, &(0x7f0000000300)="$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") r5 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0xc, r5, 0x0, 0x0, 0x0, 0xfffffffffe000001}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x6, 0x25dfdbff, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @empty}]}, 0x24}}, 0x48010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x6d, 0x1}}]}, 0x2c}}, 0x30008000) syz_io_uring_setup(0x3c5f, 0x0, &(0x7f0000000200), &(0x7f0000000300)) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000040)={0x7, 0x1, 0xe000}) 5.863553408s ago: executing program 1 (id=4997): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0xffffffff, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0xffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52c, 0x0, 0x5, 0x0, 0xfff, 0x3, 0x0, 0xfffffffe, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000002, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x40, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xf, 0x4]}, 0x45c) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x2, 0x0, 0x0, &(0x7f00000011c0)="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"}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001100010028bdfddbdf2564010100000000000000000000000000008004d5000014000d006c00"/51], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x80) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="000000000100"}) 4.4004443s ago: executing program 1 (id=4998): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000004c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500), r3, 0x0, 0x2, 0x4}}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sync_file_range(r0, 0x2, 0x9, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000500)={@mcast1, 0x0}, &(0x7f0000000540)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x47, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, &(0x7f00000004c0)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, @sk_lookup=0x24, r0, 0x8, &(0x7f0000000580)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x10, 0x3, 0x1000}, 0x10, r7, 0xffffffffffffffff, 0x6, 0x0, &(0x7f00000006c0)=[{0x1, 0x1, 0xb}, {0x1, 0x5, 0xe, 0xa}, {0x4, 0x2, 0x4, 0x3}, {0x1, 0x1, 0x10, 0x2}, {0x5, 0x3, 0xe, 0x2}, {0x3, 0x3, 0xe, 0xc}]}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 4.399021621s ago: executing program 0 (id=5006): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) socket(0x2, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48810}, 0x4048040) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0xb0) write$FUSE_GETXATTR(r6, &(0x7f0000000480)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x80, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}}) 4.394765381s ago: executing program 2 (id=5007): syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r6, @ANYBLOB="080003"], 0x80}}, 0x8000) read$msr(0xffffffffffffffff, &(0x7f0000000880)=""/102392, 0x19001) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) bind$can_raw(r7, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 2.219284405s ago: executing program 0 (id=4999): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x50, 0x0, r6, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000103, 0x0, {0x4}}) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r7 = syz_open_dev$dri(0x0, 0x1ff, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[0x0], 0x1, r10, r11, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x4132, 0xe154, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) r12 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r12, &(0x7f0000000000)="170cf31f8e85bcdbb6ad484c26dfa6be3180020cc3ad083eb719a8495180e3411bca5a3904d99c037e2d8e3c1c72fa92fbc31f328a0634a228ba73fca36ab95455c2429a396c437ae822453d5dbfd246cfc6e49f4b77fbb58e3e23beae7970b5bdb6c5d6a4b76a6e910402706986d2c4da7f3cab1ec82c46628456875bad37ebb5c0bef76aeae81b5489235cc4a3533c44fae97f864aa56771761bf7b68f404289dfd955fc20d7c7eb05951df334942d46ba78c78f3c72a7e827134798ba9e611ff2de814c88b7ee20d616", 0xcb, 0x4000810, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r12, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) setsockopt$sock_int(r12, 0x1, 0xa, &(0x7f0000000140)=0x3, 0x4) 2.131085059s ago: executing program 1 (id=5000): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x3, 0x2, 0x4, 0x0, 0x12}) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xcd}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48}, 0x4800) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003c40)=@newchain={0x2d88, 0x64, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0x5, 0x10}, {0xf, 0x2}}, [@f_rsvp={{0x9}, {0x2d58, 0x2, [@TCA_RSVP_ACT={0x2d54, 0x6, [@m_connmark={0x10c, 0xe, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x0, 0x76, 0x5}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1ff, 0x3, 0x0, 0x6}, 0x1cb1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc60, 0x7, 0x4, 0x7, 0x8}, 0x9}}]}, {0x85, 0x6, "bd75706d89ac21e4efa146f8edc9dc74a264135d8be0a15b03b916d2ec926ace8d391e40b7cbcd8dad534b781c86c08e7b433e52df8726554d80eb351982d458c73cba45ee3db878a247a4af2a2c24d58b2ffd71df896a448e6932afbda738695bf1847dbce541f4e1e6139f943f0f59c533035d59afdce7da341e5d230d69c795"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xf24, 0x3, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x7, 0x7, 0x9, 0x1}, 0xf1, 0x2}, [{0x2, 0xfffffffb, 0x752b, 0x9, 0x5, 0x2}, {0x6507b03b, 0x1, 0x7, 0xfffffffe, 0x6, 0x5}, {0x4, 0x1, 0x3, 0x8a, 0x6, 0x2}, {0x7, 0x1200000, 0x88d, 0x2, 0x4, 0x2}, {0xffff5cff, 0x4, 0x0, 0x1, 0x40, 0x8001}, {0x6, 0x9, 0x3, 0x0, 0x8, 0xf}, {0x5, 0x9, 0x2, 0x2, 0x3, 0x3}, {0x3, 0x7fffffff, 0x39cbefbf, 0x3, 0x3, 0x8}, {0x6, 0x0, 0xf, 0x1, 0x9, 0x1000}, {0x80000000, 0xffff, 0x4, 0x4, 0x80}, {0x3ff, 0x4, 0x3a14, 0x56d5, 0x2, 0x2}, {0x2, 0x2, 0x8, 0x7, 0xffffff81}, {0x3, 0xc9d, 0x3, 0x13ee, 0x4, 0x6}, {0x7fffffff, 0x1, 0x8, 0x4e80000, 0xf950, 0x9873}, {0x3772, 0x1182, 0x7, 0x6ae9, 0x79, 0xfb28}, {0x8, 0x6962, 0x0, 0x6, 0x4, 0x157}, {0x12968238, 0x0, 0xffffffff, 0x101, 0x0, 0x6}, {0x8, 0x9, 0xa68c, 0x2, 0x1, 0x80000000}, {0x1, 0x80000001, 0x8, 0x1000, 0x7, 0xa}, {0x6, 0x7, 0x9, 0x7fff, 0x6ffb, 0x7}, {0x2, 0x7bb, 0x10, 0xb6c, 0x9, 0x9}, {0x6, 0x5, 0x80000000, 0x5, 0x40}, {0xfffff2e7, 0x7, 0x3, 0x7, 0xa2, 0xfffffff9}, {0x7, 0x2, 0xd, 0x5, 0x6, 0x7fffffff}, {0xb30, 0xfffffff8, 0xc767, 0x2, 0x3, 0x805a0}, {0xffff3594, 0x7, 0x8, 0x2, 0xfffff1f2, 0x4}, {0x4, 0x1, 0x3, 0x1ff, 0x3, 0x3ff}, {0xa0d0, 0xffffff30, 0x0, 0x1, 0x5, 0x5}, {0x0, 0x8, 0x3d, 0x4, 0xfffffffd, 0xde0}, {0x6, 0x8, 0xfffffffc, 0x4, 0x9, 0x10000}, {0x0, 0x80000000, 0x85, 0x9, 0x30ba, 0xfc}, {0x6, 0xffffffff, 0xf, 0x7, 0x7f, 0x1efb}, {0xfffffbff, 0x0, 0x3, 0xe8f6, 0x4, 0x98d}, {0x8, 0x7d0, 0x8, 0xff, 0x7, 0x1}, {0x5, 0x3, 0x7ff, 0x0, 0x2, 0x613}, {0x0, 0xfff, 0x4c3c, 0x5, 0x2, 0x2}, {0x8, 0x2, 0x0, 0xfffffffd, 0xdb1c, 0x3ff}, {0x5, 0xfffffffd, 0x8001, 0x81, 0x9, 0x1}, {0x3, 0x4175, 0x0, 0x2, 0x9, 0x5}, {0x1, 0x3, 0x4, 0x9, 0x100, 0x2}, {0x7, 0x10, 0x0, 0x9, 0xdc}, {0xfffffffb, 0x8, 0xff, 0x6, 0x3, 0x8}, {0x5, 0xff, 0x401, 0x6, 0x7, 0x3}, {0x18, 0x1, 0x4, 0xfff, 0xa, 0x2}, {0x6, 0x9, 0x10000, 0x3f, 0xab9, 0xfffffff5}, {0x7fffffff, 0x2, 0x94c, 0x9dee, 0xffff1483, 0x8}, {0x6fce8c73, 0x81, 0x7, 0x3ff, 0x0, 0x1}, {0x7fff, 0xad, 0x4, 0x0, 0x4, 0x7ff}, {0x1, 0xe364, 0x100, 0x9, 0x3, 0x2}, {0x5, 0x4, 0x80000000, 0x6, 0xb, 0x8}, {0xb95c, 0x80000001, 0x9, 0x6, 0xc, 0xb}, {0x3, 0x3, 0xc1, 0x0, 0x7f7, 0xfffff530}, {0x1, 0x0, 0x40, 0x2, 0x5}, {0x0, 0x3, 0x7, 0x82b, 0x0, 0x5}, {0xfff, 0x98, 0x6a4c, 0x101, 0x9, 0x40}, {0xffff, 0x7, 0x38, 0xb, 0x8, 0x8000}, {0x1, 0x0, 0x0, 0x6, 0x5, 0xf8}, {0x1, 0x6, 0xeef, 0x0, 0x101, 0x2}, {0x8, 0x7, 0x6f, 0x7, 0x6, 0x3}, {0x3f, 0x5, 0x3, 0x8, 0x9, 0x1}, {0x80000001, 0xfffffff9, 0x5, 0x800, 0x543, 0x1}, {0x22a, 0x204, 0x3, 0x0, 0x4, 0x7}, {0xad, 0x7, 0xfffffffa, 0x7b9, 0x164, 0x9}, {0x4, 0x7, 0x9, 0x7, 0x5, 0xc66}, {0x9, 0x3, 0x5, 0x3, 0x54, 0x6}, {0xf, 0x5, 0x9, 0x9, 0xe, 0x7}, {0x2a0d, 0x5, 0x4, 0x7, 0x9, 0x4}, {0x17, 0x200, 0xffff8001, 0x6, 0x62a, 0x4}, {0xc, 0x24000, 0x7f, 0x6b, 0x4, 0xd}, {0x7329e723, 0x4, 0x2, 0x1, 0x2, 0x1}, {0x10000, 0x80, 0x5821, 0x0, 0x5, 0x4}, {0x6, 0x3, 0x2, 0x7, 0x3, 0xcb14}, {0x7, 0x25b, 0x2, 0x6, 0x4, 0x9}, {0x8, 0x7, 0x4, 0xfffffffe, 0x7, 0x9}, {0x7, 0x7, 0x0, 0x648, 0x5, 0x100}, {0x1, 0x0, 0x59a0, 0x1, 0x7, 0x401}, {0x10000, 0x7ff, 0xfffffcca, 0xff, 0x8, 0x3}, {0x1, 0x4, 0x5, 0x7, 0x5}, {0x4, 0x2, 0x6, 0xd, 0x7, 0xb152}, {0x47, 0x9, 0x5, 0xfffffff9, 0x7fffffff, 0xa00000}, {0x4, 0x26c, 0x9, 0x8bab, 0xbc5d}, {0x1, 0x7, 0x5, 0x7, 0x8000, 0x9}, {0x5f, 0x8, 0x5, 0x200, 0x8, 0x10001}, {0x8, 0x2, 0x80000000, 0x6, 0x101, 0x8}, {0x7fffffff, 0xfff, 0x10, 0xfffffff3, 0x8, 0x4}, {0x800, 0xffff, 0x5, 0x7, 0x344, 0x2b25}, {0x8, 0x7, 0x6, 0x1, 0x3, 0x8e02}, {0x1, 0x9e6, 0x8, 0x400, 0x6, 0x3}, {0x8, 0x0, 0x1, 0x7, 0x1, 0x3}, {0x9, 0x2, 0x2, 0x8, 0x3, 0x4}, {0x6, 0xfffffec4, 0x200, 0x8, 0x8, 0x9}, {0x1, 0x8, 0x500, 0x400, 0xc52b, 0x4}, {0x9, 0x1, 0x100, 0xb6a, 0x9, 0x32b5}, {0x8, 0x1, 0x4, 0x0, 0xd73, 0x870}, {0xe08c, 0x7ff, 0x2, 0x6, 0x40, 0x9}, {0xffff, 0x4428, 0x3, 0x6, 0x8, 0x9}, {0x1000, 0x10001, 0x5, 0x4, 0x3, 0xb}, {0xfffff0aa, 0x9, 0xfffffffa, 0x5, 0x2, 0x4}, {0xd, 0xfffffff0, 0x4, 0x0, 0x8, 0x101}, {0xd, 0x2, 0x686, 0xfffffffa, 0x4, 0x4}, {0x7fff, 0x6, 0x200, 0x6, 0x4, 0x8}, {0x96, 0x6, 0x7, 0x7, 0x226, 0x8}, {0x6, 0x3, 0x5, 0x6, 0x7, 0xfff}, {0x3, 0xffffffff, 0x2, 0x568, 0x4, 0xffffffeb}, {0x2, 0x200, 0x2, 0x7, 0x6, 0x6}, {0x4, 0x566, 0x10001, 0xb, 0x4, 0x5594fdf3}, {0x423303a3, 0x9, 0x6, 0x3, 0x6, 0x3}, {0x100, 0x3, 0x0, 0x9, 0x8, 0x25}, {0x8, 0xd47, 0x0, 0x0, 0x6, 0x8f6d}, {0xff, 0x0, 0x0, 0x1, 0x7, 0xe}, {0xce1, 0x9, 0x0, 0x4, 0xffffffff, 0x200}, {0x4, 0xe, 0x3, 0x5e0, 0x8, 0x1}, {0x0, 0x1, 0x1, 0x1, 0x9, 0x8}, {0x4f75, 0x8, 0x3c, 0xb, 0x4, 0x5}, {0x3, 0xd64, 0x1, 0x6, 0x8, 0x6}, {0x3, 0x401, 0x6, 0x4, 0x80, 0x640a525a}, {0x5, 0x0, 0x8, 0xfffffffe, 0xe, 0x6cd4}, {0x9, 0x0, 0x8, 0xa9ba, 0x100, 0x5}, {0x15, 0xfffffeff, 0x2, 0x5, 0x5fc0, 0xfffffff1}, {0x39d, 0x9, 0x1, 0x0, 0xfc, 0x7}, {0x6, 0xe69, 0xe, 0xffffff81, 0xbe7e, 0x401}, {0xfffffffa, 0x4, 0x0, 0x0, 0x6, 0xfffff001}, {0xcf2d, 0x8, 0x9176, 0x0, 0x4f, 0x1}, {0x0, 0x9, 0x5, 0xfff, 0x9030}, {0x4, 0x4, 0x800, 0x41e, 0x8000}, {0x6, 0xfffffffa, 0x0, 0x9a, 0x6, 0x8}, {0x3, 0xb, 0xf079, 0x7fffffff, 0x200, 0x7}, {0x65f, 0x100, 0x8, 0x1, 0x400, 0x2}], [{0x3}, {0x1, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x4}, {}, {0x0, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x3}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x5, 0x649fb4c58d4cf3cc}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x1}, {0x2, 0xd2cd4f2f2bcaea07}, {0x5}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x8dafc58315d2bbb3}, {0x2}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x4, 0x9889dd74d1bcf2ee}, {0x1, 0x1}, {}, {0x3}, {0x4}, {}, {0x3}, {0x3}, {0x1}], 0x1}}]}, {0xd5, 0x6, "b72cad9dfd0ee1daefe8c93e0602743215b52d27bc7c99338bd43bdc4f75eae44c2a4235fe44b7bcdf688acabe1021e01ffa21e9c8b191763ca72904c55e64b5d9a938f31deb4684d5683c2e076346f07612abe19713dff2f2216879367aba15ad79c1acad4e675fdca517a022c42b250f9abb64c0ee4e3dcc66087b16b56e352a9580de053681774f19729c39192436c831496d1a4632134087249aaf27ed0004d8051a834f49aca59b42124f8c31dc6ca4cab51a95d57f82b0d0c43330ac070695404802e9bb070bc172393fee16c945"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbedit={0x94, 0x3, 0x0, 0x0, {{0xc}, {0x4}, {0x65, 0x6, "56e43759954cbeea87a923de98e2286fbcc56acf6b12b311659ef7ea84341210e79a3e6a663ab7df7ca60c9677283b702a416de45c8f60e3ca26f96557c73a5f780d5b0c43c3d28eaae7beb4e54eac8161c2b15bb938edcb62ef46a9e63fe06bed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x1}}}}, @m_police={0x1c8c, 0x0, 0x0, 0x0, {{0xb}, {0x1c60, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x3, 0x0, 0x5, 0x9, 0x5, 0x8, 0x7ff, 0x3, 0x40, 0x296d, 0x7fffffff, 0x1, 0x6, 0x5, 0x2, 0x6, 0x0, 0x6, 0x2, 0x7, 0x1a, 0x5, 0x8, 0xbc, 0x1, 0x10d, 0x2000000, 0x5, 0x4, 0xe83, 0x4, 0x6, 0x28000, 0x57c, 0xa, 0x1, 0x0, 0xad, 0x4, 0x6, 0xfffff000, 0x9, 0x5, 0x6, 0x0, 0x2, 0x4, 0x0, 0x101, 0x0, 0x4, 0x9, 0xec, 0x8, 0x35a, 0x6, 0x5, 0x5, 0x9, 0x7, 0x12fb, 0xfffffffd, 0x5, 0x9, 0x200, 0x7, 0x4, 0x7, 0xf, 0xff, 0x0, 0x6, 0x80, 0x40, 0x9, 0x71da, 0x7, 0x80000000, 0xfff, 0x2, 0xf2e, 0x10000, 0x9, 0x5, 0x1, 0x1, 0x5, 0x8, 0xb99, 0xf, 0x8, 0x2702, 0xa2, 0x101, 0x10000, 0x5, 0xe, 0x391, 0x8, 0xa0, 0x7, 0xdc4, 0x9, 0x2, 0x9, 0x4, 0xd16, 0x4, 0xab, 0xa, 0xffff4eaf, 0xffffffff, 0x8, 0x9, 0x900000, 0x3, 0x7, 0x9, 0xa, 0x7f, 0x1a3, 0x7, 0x401, 0x8, 0x6, 0x9, 0x82, 0x0, 0x5, 0x3, 0x100, 0x8, 0x7a, 0x5, 0xf, 0x10000, 0x3, 0x40000000, 0x10, 0x2, 0x8, 0x7f, 0x2, 0x6d5, 0x2, 0x7, 0xfffffffa, 0x7fff, 0x4, 0x5, 0x3, 0x5, 0xe000, 0x4, 0x4, 0x7, 0x3, 0x6, 0x9, 0x923e, 0x200, 0xfffffffc, 0x200, 0x2a4, 0x5, 0x7, 0xef3, 0x8, 0x48f, 0xd4, 0x1, 0x3ff, 0x9, 0x323c, 0x8, 0x5, 0xff, 0xa, 0xfffffff9, 0x4, 0x2, 0x2, 0x4, 0x1, 0x7fffffff, 0xd40, 0x0, 0xff, 0x5, 0x3, 0x200, 0x9, 0x2, 0x7ff, 0x3ef, 0x3, 0x5, 0xfffffffd, 0x8, 0x0, 0x20ac, 0x0, 0x0, 0x1, 0xc, 0x7, 0x1, 0x7, 0x5, 0xec4, 0x5, 0x5b, 0x6, 0x5, 0x6b58, 0x8001, 0x718, 0xffffff01, 0xfff, 0x1, 0x7fffffff, 0x1c, 0x5, 0x2, 0x0, 0x8, 0x0, 0x0, 0x5, 0x3c, 0x26000000, 0x5, 0x1, 0xfd, 0x7fff, 0x9, 0x80, 0xffffff06, 0x7, 0x80000000, 0x8, 0x4, 0x9, 0x4, 0xba, 0xff, 0x3, 0x9, 0xfffffffb, 0x6, 0x401, 0x3, 0x8, 0x463c, 0x917]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffa}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x7ff, 0x1, 0x2, 0x3, 0x1, 0x7fffffff, 0x4, 0x7, 0x2d, 0x7, 0x0, 0x400, 0x10000, 0x401, 0x149, 0x6, 0xc, 0xffffffff, 0x9, 0x1, 0x7, 0x0, 0xfffffff9, 0x6a, 0x5, 0x2, 0x4, 0x3, 0x7, 0x8000, 0x3, 0x1, 0xfd5, 0x6, 0xfffffbff, 0x23d6, 0xff, 0x101, 0x80d, 0x3, 0x9, 0x3, 0x1f, 0x2, 0x7, 0x400, 0x1, 0xbe, 0x1, 0x2, 0xc6, 0x2, 0x6, 0x2020, 0x9, 0x5f0, 0x5, 0x81, 0x100, 0xf4, 0x4, 0xffffffff, 0x9, 0x4, 0x2f, 0x1, 0xfff, 0x8, 0x81, 0x3, 0x8001, 0x2, 0x8, 0x7, 0x8, 0x80, 0x166, 0x10001, 0x2, 0x8, 0x6, 0x0, 0x400, 0x10001, 0x6, 0x1a, 0x64a8ce5d, 0x100, 0x4, 0xc000, 0x5, 0x6, 0xe, 0x5, 0xc0, 0x0, 0x3ff, 0xcd, 0x2, 0x6b6, 0xb27, 0x99, 0x5, 0xfffffc01, 0x6, 0x6, 0x3, 0x0, 0x2, 0x7, 0x4, 0x80000001, 0x9, 0x233, 0x6, 0x6e8, 0x8, 0xa1, 0x0, 0xffffff56, 0x9, 0x8, 0x0, 0x39000000, 0x7, 0x1, 0x9, 0x9, 0x6, 0x0, 0x2, 0xbe, 0x653, 0x7e3d, 0x7fffffff, 0x5, 0x8000, 0x7, 0x100, 0x5, 0x5, 0x8, 0x7fffffff, 0x1, 0x2, 0x9, 0x5, 0x0, 0x4, 0x3, 0xf5, 0xace, 0x800, 0xc, 0x80000000, 0x5, 0x2, 0x5, 0x800, 0x9, 0x7, 0x6, 0x0, 0x1, 0x4, 0x6, 0x1, 0x1, 0x3, 0x10001, 0xf, 0xfffffff2, 0xfff, 0x1ff, 0x4, 0x6, 0x6f2, 0x8, 0x6, 0x1, 0x4, 0x81, 0xffffffff, 0xfffffff8, 0xffff, 0x1, 0x4, 0xe3c2, 0x200, 0x4, 0x80000000, 0x4343, 0x0, 0x1763, 0xff6, 0x8, 0x8, 0x70d8, 0x2706, 0xb65f5cac, 0x0, 0x7, 0x92b, 0x1, 0x48, 0x3, 0x0, 0x8, 0xd1, 0x7, 0x1e2, 0x1, 0xe, 0x7, 0x9, 0x9, 0x8f, 0x1, 0x8, 0x4, 0x9f, 0x12000000, 0x7, 0x7, 0x7, 0x9, 0x0, 0xfd, 0x80000000, 0x21fc, 0x8, 0x3, 0x80000000, 0x6, 0x200, 0x9, 0x60, 0x3, 0xb9, 0x6, 0x6, 0x8, 0x4ccab518, 0x8, 0x4df5, 0xffffffff, 0xc000, 0x1000, 0x7f, 0xb77, 0xa3, 0x7, 0x8, 0x681, 0x7f]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x8, 0x10, 0x4, 0x10, 0x7, 0x6d06, 0xfb, 0x0, 0x9, 0x4, 0x2, 0x3403, 0x1, 0x8, 0x6, 0xb, 0x6, 0x0, 0x4, 0x7, 0x7, 0x7, 0x2, 0x8, 0x3, 0xfff, 0x4, 0x8, 0x0, 0xe09, 0x80, 0x2, 0x1c, 0xa10f, 0x2, 0x7, 0x4, 0x1, 0x401, 0x6, 0x2, 0x0, 0x1, 0x10, 0x8, 0x0, 0x10000, 0x80000000, 0x3, 0x4, 0x200, 0x7fff, 0x8, 0x8e0, 0x4, 0xfffff000, 0x786d, 0x0, 0x26c90, 0x219, 0x7, 0x2, 0x8, 0x5, 0x7a, 0x800, 0x9, 0x5, 0x5, 0xe, 0x2, 0x7, 0x305c, 0x9, 0x9, 0x6, 0xffff9a45, 0x4, 0x10000, 0x80000000, 0xffffffff, 0x8, 0x2, 0x2, 0x5, 0x5, 0x5, 0x4, 0x8, 0x5, 0x7, 0x4f48, 0x8, 0xfff, 0x2, 0x6, 0x0, 0x40, 0x2, 0x3, 0x1000, 0x1, 0x3, 0x5, 0x9, 0x2, 0x8080, 0x7, 0x0, 0x7, 0x80000000, 0x5, 0x0, 0xbe, 0x3, 0xd, 0x2, 0x0, 0x5, 0x9, 0x9, 0x8, 0x3, 0x67653bff, 0x4, 0xfffffffd, 0x3, 0x3, 0x380000, 0xe, 0x9f51, 0x3, 0x8, 0x3ff, 0x4, 0x11, 0x4, 0xd3, 0x7, 0xff, 0x1, 0x1, 0x4, 0x9, 0x8, 0x7f, 0x10, 0x1000, 0x2, 0x7, 0x1, 0x8, 0xf785, 0x30, 0x8, 0x7, 0x7, 0xe, 0x3, 0x6, 0x12, 0x8, 0x401, 0xffff8000, 0x35f, 0x0, 0x7, 0x7, 0x81, 0x5, 0x7fffffff, 0x2, 0x7, 0x1000, 0x9, 0x0, 0xfffff45b, 0x0, 0x2, 0xffffff81, 0x0, 0x10000, 0x6, 0x80000001, 0x40, 0x5, 0x9, 0x800, 0x4, 0x1000, 0xffffffff, 0x100, 0x4da9, 0x8, 0x0, 0xcf, 0xffff, 0x9, 0x6, 0x4, 0x9, 0x80000000, 0x322e71f0, 0x3, 0x78b6dc54, 0x1, 0x0, 0x447, 0x37, 0x7, 0x8, 0x829, 0xff, 0x3, 0x4, 0xd, 0x2, 0x8001, 0x7fff, 0x1, 0xcc6, 0x1, 0x9, 0x8, 0x624, 0x0, 0x100, 0x0, 0x100, 0xbbd, 0x9, 0x10000, 0x8, 0x6e, 0x800, 0x80fb, 0x7, 0x8, 0x80000001, 0x7, 0xfffffffb, 0x7db, 0xfd0b7939, 0x8, 0x401, 0x6c, 0x6, 0x200, 0xffffffff, 0x1, 0x0, 0xa, 0x3, 0x4be66d51, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x6, 0x200, 0x1, 0x1, 0xff, 0x2, 0x9, 0x7, 0xffffff81, 0x1, 0x3ff, 0x6, 0x6, 0x6, 0x8001, 0x4, 0x100, 0x0, 0x5, 0x2, 0x8, 0xeab, 0x6, 0x1, 0x9, 0x9a0, 0x0, 0x896, 0x0, 0x8000, 0x8, 0x1944, 0xffff, 0x9fa, 0x324, 0x2, 0x1, 0x8, 0x3, 0x10001, 0xc, 0x4a1, 0x2, 0x400, 0x2, 0x0, 0x5, 0x0, 0x0, 0x8506, 0x8, 0x1, 0x2, 0x401, 0x5a7, 0x3, 0x2, 0x10e0, 0x3, 0x9, 0x2, 0x8000, 0x7ff, 0x3f51348c, 0x7, 0x10001, 0x10000, 0x7f, 0x1, 0x1000, 0x7f, 0x3, 0xfffffffb, 0x2, 0x0, 0x1, 0x7ff, 0xfff, 0x3, 0x9, 0x9, 0x1, 0x81, 0x8, 0x3, 0x4, 0x3, 0x0, 0x3, 0x2, 0x3, 0x5, 0x5, 0x2, 0xfffffb9d, 0x5, 0x4, 0x80000001, 0xe5b6, 0x1, 0x1, 0x0, 0xed70, 0x3, 0x32, 0xb, 0x10000, 0x6, 0x2, 0x7fffffff, 0x7, 0x3, 0x9, 0xac, 0x0, 0x8, 0x1000, 0x5, 0x80, 0x800, 0x5, 0xfffffbff, 0x6, 0x3, 0xd1, 0x9, 0x62c, 0x6, 0x3, 0xc2d, 0x6, 0x220, 0x2, 0xf95, 0x1, 0x0, 0x5, 0x3ff, 0xf74, 0x7c1, 0x3, 0xcc, 0xf24, 0x519, 0x6, 0xc, 0xa, 0xffff, 0x2, 0x9, 0x3, 0x0, 0xffffffff, 0x0, 0xb2, 0xffff, 0x9, 0xcd9c, 0x6, 0x1ff, 0x81, 0x8ab1, 0xe, 0x140, 0xe3b, 0x9, 0x7ff, 0xb5bc, 0x7, 0x3, 0x7, 0x253d, 0x6, 0x8, 0x6e08, 0x2, 0x8, 0x3cffc163, 0xc, 0x3, 0xbad4, 0x3, 0x101, 0x0, 0x4, 0x7, 0x8, 0x7, 0x0, 0x4144, 0x80000000, 0x2, 0x7fffffff, 0x3ff, 0x3ff, 0x80000001, 0x66a, 0x27, 0x80000000, 0x7fffffff, 0x6, 0xfffffffe, 0x7, 0x1, 0x20e8, 0x9, 0x5, 0x0, 0x7, 0x441f, 0x9, 0x3, 0x6, 0x8, 0xa, 0x5, 0x3, 0x9, 0xb, 0x0, 0x3, 0x4, 0x43a8, 0x9, 0x3, 0x0, 0x6, 0x5, 0xff, 0xf92, 0xe, 0xffffff8e, 0x5c5, 0x8, 0x6b1d, 0x6, 0xfffffff0, 0x1, 0x8c, 0x5, 0x1ff, 0x100, 0x8001, 0x1, 0x0, 0xfffffffc, 0x8, 0x6f1c88ed, 0x6, 0x3, 0x2, 0x6, 0x1, 0x6, 0xcc]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x7fffffff, 0x40, 0x2, 0x0, 0x7, 0x81, 0x4000000, 0x6, 0x0, 0x7, 0x6, 0x1, 0x62, 0x8, 0xfffffffb, 0x2, 0x36b7, 0x80000000, 0x5, 0x1a, 0x8, 0x9, 0x101, 0xfffff001, 0x6, 0x2, 0x6, 0x1, 0x9, 0x9, 0x1ff, 0x17, 0xc127, 0x7fff, 0x7, 0x4, 0x7fff, 0x3b3, 0x200, 0x5, 0x2d31, 0x6, 0x80, 0xfffffff7, 0x600000, 0x100, 0x4, 0x5, 0x8, 0xffffffff, 0x3, 0x0, 0x2, 0x6, 0x4, 0x80, 0x0, 0xb9, 0x1, 0xfffffff9, 0x7, 0x7f, 0x2, 0x3, 0x9, 0x9, 0x2, 0xffffffff, 0xe4be, 0x1, 0x0, 0x7fff, 0x4, 0x8445, 0x0, 0xffff, 0x1, 0x3206, 0x9, 0xd45, 0x3, 0x1, 0x80000001, 0x2, 0x2, 0x800, 0x7, 0x9, 0xb, 0x9, 0x5, 0x400, 0x200, 0x8, 0x5, 0x9, 0x0, 0xb64a, 0x4, 0x8001, 0x7, 0x8001, 0x3, 0x7, 0xff, 0x8, 0x7fff, 0x4, 0x2, 0x8, 0x0, 0x2, 0x10000, 0x1, 0xf16, 0x181de494, 0x400, 0xffffffff, 0x2, 0x7ff, 0xe68b, 0xfffffffc, 0x800, 0x7fff, 0x56c1fbd4, 0x400, 0x8001, 0x2, 0x8, 0x7, 0x2, 0x0, 0x2, 0x0, 0x8, 0x401, 0x5, 0x2, 0xffff, 0xffffffff, 0x400, 0x0, 0x795, 0x3, 0x9, 0x755, 0x6, 0x3, 0x8, 0x6, 0x8, 0x10, 0xd, 0x10, 0x8, 0x45, 0x80, 0xfff, 0xe7d, 0x6, 0xa048, 0xa09a, 0x1, 0x10, 0x101, 0x5, 0x7fffffff, 0xffffafb3, 0x7, 0x2, 0x6, 0xfffffffc, 0xfff, 0x0, 0x0, 0x2, 0x2, 0x8, 0x9, 0x2, 0x371c9f7d, 0x6, 0x1, 0xcb, 0x5, 0xfffff801, 0x2, 0x5, 0xfff, 0x3ff, 0x9569, 0x8, 0x43, 0x6, 0x0, 0x6, 0x0, 0x3, 0xd81, 0x6, 0x6, 0x17eb, 0x4, 0x6, 0x4639, 0x4, 0x8, 0x8, 0x6, 0x7fff, 0x0, 0x3, 0x74, 0x9, 0xb, 0x3, 0x0, 0x5, 0x800, 0x3, 0xfffffff8, 0xffffffff, 0x9, 0x7, 0x6, 0x0, 0xd, 0x3, 0x469, 0x7, 0x7bc9, 0x6, 0x5, 0x9, 0x301a, 0xffffff05, 0x7, 0x6, 0xfffffff9, 0xfffffff8, 0x5, 0x400, 0x101, 0x800, 0x4, 0x9, 0x4, 0x80000000, 0x3, 0xeabd, 0x428, 0x6, 0x2, 0x10001, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x5, 0x1, 0x3, 0xd, 0x3, 0x401, 0xfffffff9, 0x2, 0x8, 0x80000000, 0x5f8, 0x7, 0x3f8e0000, 0x3, 0x80000001, 0x7, 0x9, 0xffffffff, 0x5, 0x0, 0x8, 0x7, 0x101, 0x6, 0x5, 0xaf, 0x9, 0x8, 0xc, 0x9, 0x9, 0x1, 0x8, 0x8, 0x0, 0xff, 0x401, 0x9, 0x2, 0x200, 0x8000, 0x3, 0x4, 0x1, 0xfffffffc, 0x10001, 0x1, 0xb, 0x2a4, 0x1, 0xffffff4f, 0x1, 0x8, 0x1, 0x8, 0x81, 0xff, 0x1ff, 0x9, 0x4, 0x7, 0xae53, 0xff, 0x242, 0x7, 0x9e, 0x5, 0x8, 0x8, 0x9, 0x81, 0x8, 0x8001, 0x3, 0x1000, 0xa7, 0x2, 0x5, 0xffffff7f, 0x2c3, 0x10001, 0x5, 0x5, 0x0, 0xa764, 0x3, 0x8, 0x3, 0x9, 0x1, 0xe, 0xff, 0x9585, 0x4, 0x4, 0x2, 0x9, 0x4, 0x8, 0xfffffff7, 0x1, 0x5bc, 0x7fffffff, 0x7, 0x7, 0x93c, 0x40, 0x78, 0xfffffffc, 0x2, 0x5, 0xf, 0x7, 0x200, 0x1000, 0xfffffffe, 0x3, 0x77a0e92b, 0x8, 0x10001, 0xc77, 0xfffff000, 0x800, 0x6c6, 0x80000000, 0xf2, 0x8, 0x6, 0x5, 0xf, 0x103, 0x10001, 0x800, 0xb, 0x400, 0xe3, 0x5, 0x0, 0x8000, 0x9, 0x6, 0x9, 0x7, 0xfffffffe, 0x6627, 0x18df, 0x6, 0xf, 0x5, 0x3, 0x4, 0x6, 0x1, 0x9, 0x40, 0xd, 0x6, 0x5, 0x3, 0xb, 0xffffffff, 0x7, 0x3, 0x4000, 0xffffffff, 0x9, 0xe, 0x1e, 0x0, 0x72, 0x3, 0xe, 0x1000, 0x5, 0x9, 0x7, 0x100, 0xab66, 0x6, 0x7ff, 0x0, 0x1523, 0xffff, 0x200, 0x10000, 0x8, 0xfffffffe, 0x1000, 0x200, 0x7332, 0x4, 0x9, 0x7fff, 0x5, 0x2, 0xd, 0x40, 0x1, 0x5, 0x2, 0x9, 0x36a7, 0x4, 0x7, 0x401, 0x2ff, 0x4, 0x2, 0x9, 0x80000000, 0xfff, 0x0, 0x97a5, 0x10000, 0x1be, 0x7, 0xe, 0x92, 0x7ff, 0xd2ae, 0x66, 0x38, 0x1, 0x5, 0xfff, 0x8001, 0x346, 0x5, 0x8, 0x2, 0x2, 0x6, 0x0, 0x0, 0xebda, 0x3ff, 0x8, 0x5, 0x10000, 0x4, 0x9, 0xf0d575b, 0x1, 0x3, 0x5, 0x1, 0x9, 0x4, 0x7, 0x2, 0x200, 0x0, 0x407c, 0x8b7e]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffeffff}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x9, 0x2, 0x9, 0x81, 0x0, 0x89, 0x400, 0x4, 0x3, 0x0, 0x1ff, 0x6e, 0x4, 0x0, 0x8000, 0x5, 0xfffffffe, 0x6, 0x10000, 0x4, 0x3, 0x3, 0x8, 0x9, 0x2b9, 0x2, 0xb, 0x2, 0xfffffffb, 0x1, 0x56d, 0xff, 0x8, 0x9, 0x2, 0x7, 0x0, 0x3, 0x6, 0x48000, 0x1, 0x2f, 0x0, 0x4, 0x2, 0x8, 0x0, 0x9, 0x3, 0x7, 0x4, 0x7fffffff, 0x4, 0x0, 0x7, 0x9, 0x2, 0xff, 0x7, 0x7b, 0xfffffffc, 0x800, 0x6, 0x8, 0x2e9, 0x1, 0x5, 0x4, 0x6, 0x6, 0x7, 0x6, 0x32ac, 0x80000000, 0xa313, 0x6, 0x9, 0x4, 0x9, 0x9, 0x6, 0x0, 0x2, 0x6, 0x4, 0x3ff, 0x7ff, 0x7, 0xc0, 0x101, 0x9, 0x3, 0x2, 0x7, 0xfe, 0x5, 0xc5, 0x1, 0x5, 0x0, 0x2, 0x3, 0x7f, 0xfffff795, 0x0, 0x0, 0x10, 0x9, 0x1, 0x81, 0x40, 0x7, 0x4, 0x10000, 0x10000, 0x10001, 0x10001, 0x10000, 0x4, 0x1, 0x9, 0x5f4e, 0xf, 0x2, 0xfffffff8, 0xfffffffc, 0x200, 0x7fff, 0xbb9, 0x100, 0x3, 0x6, 0x2, 0xfffff001, 0x0, 0x1, 0x28, 0x0, 0x6, 0x9, 0xc7, 0x0, 0x0, 0x8001, 0x7, 0x80, 0xc, 0x48000000, 0x24, 0xd, 0x3ff, 0xfffffffc, 0xfffffc01, 0x4, 0x6, 0x2, 0x3, 0x8000, 0x8, 0x9, 0x7, 0xfffffffb, 0xe2, 0xc, 0x1, 0xff, 0x800, 0x8000, 0xad, 0x6e, 0x55c59186, 0x9, 0x1, 0x6, 0x40, 0x8ab3, 0x10001, 0x4, 0xfff, 0x101, 0xff, 0x8, 0x1, 0xfff, 0x8, 0x9a, 0x4, 0x7, 0x7, 0x64a0c87b, 0x0, 0xfffff800, 0x8d, 0x9f8, 0xbc6, 0x3, 0x2d, 0x7fff, 0x59, 0x34f, 0xfffffffb, 0x9, 0x81, 0xfffff139, 0x1b70, 0x3, 0x100, 0xadb, 0x1, 0x7fff, 0x8000, 0x4, 0x8, 0x6, 0x2, 0x8, 0x68b, 0x5, 0x9, 0xf134, 0x2, 0x2, 0x0, 0x80000001, 0x4, 0x7f59b01c, 0x0, 0x1, 0x6, 0x1, 0x1, 0xfffffff7, 0x1, 0x5, 0x2, 0x23c0, 0x90, 0x4, 0x4, 0x7, 0x2, 0x9, 0x8, 0x1, 0x7fff, 0x8eed, 0x1ff, 0x2, 0x10001, 0x40000, 0xff, 0x5, 0x2aba, 0x78, 0x7fff]}]]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2d88}, 0x1, 0x0, 0x0, 0x810}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.130457988s ago: executing program 4 (id=5001): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udplite(0xa, 0x2, 0x88) sigaltstack(&(0x7f0000001000)={&(0x7f0000000000)=""/4088, 0x0, 0xff54}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}}, 0x0) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) timer_settime(0x0, 0x0, 0x0, 0x0) sigaltstack(0x0, &(0x7f0000001080)={0x0}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20040768, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto(r0, &(0x7f0000000780)="7057da", 0x3, 0x24000011, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000700)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba1e9bb7ec30de54e3d82d4e023f9a336ec7e55fefd0d3c8f30eea40e40a6e32d6873837bb90f2fafc91", 0xffffffffffffff29, 0x80, 0x0, 0x0) 2.129843039s ago: executing program 2 (id=5002): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000040a2f732789a4079e6f98838292064759aa00f4a694a5a3fea24723c16437132beb45ffb9482c5dd16f2cfb20f7b9004000000000000007485e08712c167e3ac38b1afdf81", @ANYRES16=r4, @ANYBLOB="01002abd7000fddbdf25010000000000000007410000004c00180000000873797a3100"/98], 0x68}}, 0x20000885) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r5) 1.031825536s ago: executing program 1 (id=5003): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20400, 0x38) getdents64(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00007c000000009a97b166af73792800000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000240)=ANY=[@ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r5, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0x17, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe97, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.022112616s ago: executing program 2 (id=5004): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, 0x0, 0x0, 0x4) r5 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setresgid(0x0, r8, r8) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002f00)={{{@in6=@private0, @in6=@private0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f0000003000)=0xe8) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000004c0)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) 1.011903516s ago: executing program 4 (id=5005): syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', r0}, 0x18) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) unshare(0x22020600) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x8001, 0x6, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x8, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x6, 0xb, 0x8, 0x5, 0x8, 0x4, 0x10000, 0xfffffff8]}) syz_emit_ethernet(0x66, &(0x7f0000000f80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0xfffc}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) socket$inet(0x2, 0x3, 0x6) 765.609577ms ago: executing program 1 (id=5008): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socketpair(0x1, 0x3, 0xfffffffd, &(0x7f0000000080)={0xffffffffffffffff}) r9 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x13e, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfd"], 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000001}, 0x40000) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}}, 0x0, 0x6, 0x1, 0xd, 0x7}, &(0x7f0000000280)=0x98) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = dup(0xffffffffffffffff) connect$inet6(r10, 0x0, 0x0) 91.791496ms ago: executing program 2 (id=5009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ef, &(0x7f00000001c0)="$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") openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x5a1000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast}, {0x17, 0x7c, 0x0, @loopback}}}}}, 0x0) sendmsg(r0, 0x0, 0x0) r1 = syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@clear_cache}, {@notreelog}, {@nodiscard}, {}, {@autodefrag}, {@autodefrag}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x8}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f00000103c0)="$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") chdir(&(0x7f0000000080)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x40000, 0x1e4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000140)={"518e50dd9c2104bc47a08cdfa3647454", 0x0, 0x0, {0xcc4, 0x2}, {0x8b, 0x8}, 0x1, [0x4, 0x8, 0x5, 0x6, 0x80000001, 0xd72e, 0x3, 0x7c, 0xe, 0x7, 0x10001, 0x7, 0x101, 0x8, 0x1d8, 0x6]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000003480)={{r2}, r3, 0x2, @unused=[0x101, 0x5, 0x3, 0xe], @subvolid=0x3}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) syz_emit_vhci(0x0, 0x2d) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800) 0s ago: executing program 0 (id=5010): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x3, 0x490, &(0x7f0000000580)="$eJzs3UFrXNUeAPD/nSR9aZu+pO+9RV/BWmwlLdqZpLFtcFEriK4Kat3HmExCyCQTMpO2CUVS/ACCiAquXLkR/ACC9COIUNC9iCiirS5cqCMzudPWOJMETHNx5veD03vOPTPzP6eTOXPPPZe5AXSt4xFxKSJ6IuJ0RAym+3NpivWNVH/c3Ts3puopiVrtyg9JJOm+5msl6fZg+rT+iHj5hYjXkr/GrayuzU+WSsXltFyoLiwVKqtrZ+YWJmeLs8XFsbHR8+MXxs+Nj+xaXy8+9807b374/MVPn7z21cR3p16vN2sgrXuwH7tpo+t9jf+Lpt6IWH4YwTLQk/anL+uGAACwI/Vj/P9ExGON4//B6GkczQEAAACdpPbMQPyaRNQAAACAjpVrXAOb5PLptQADkcvl8xvX8P4vDuRK5Ur1iZnyyuL0xrWyQ9GXm5krFUfSa4WHoi+pl0cb+fvls5vKYxFxOCLeHtzfKOenyqXprE9+AAAAQJc4uGn+//PgxvwfAAAA6DBDWTcAAAAAeOjM/wEAAKDzmf8DAABAR3vx8uV6qjXvfz19dXVlvnz1zHSxMp9fWJnKT5WXl/Kz5fJs4zf7FrZ7vVK5vPRULK5cL1SLlWqhsro2sVBeWaxONO7rPVF0n2gAAADYe4cfvfVlEhHrT+9vpLp9aZ25OnS2XNYNADLTk3UDgMz0Zt0AIDPm+ECyTX1/u4rPdr8tAADAwzH8f+v/0K2s/0P3sv4P3cv6P3Qvc3zA+j8AAHS+gUZKcvl0LXAgcrl8PuJQ47YAfcnMXKk4EhH/jogvBvv+VS+PZt1oAAAAAAAAAAAAAAAAAAAAAAAAAPiHqdWSqAEAAAAdLSL3bZLe/2t48OTA5vMD+5JfBhvbiLj2/pV3r09Wq8uj9f0/3ttffS/dfzaLMxgAAADAZs15enMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC76e6dG1PNtJdxv382IoZaxe+N/sa2P/oi4sBPSfQ+8LwkInp2If76zYg40ip+Um9WDKWt2Bw/FxH7M45/cBfiQze7VR9/LrX6/OXieGPb+vPXm6a/q/34l7s3/vW0Gf8O7TDG0dsfF9rGvxlxtLf1+NOMn7SJf2KH8V99ZW2tXV3tg4jhlt8/yZ9iFaoLS4XK6tqZuYXJ2eJscXFsbPT8+IXxc+MjhZm5UjH9t2WMtx755Pet+n+gTfyhbfp/cof9/+329Tv/3SL+qROt3/8jW8Sv/008nn4P1OuHm/n1jfyDjn30+bGt+j/dpv/bvf+ndtj/0y+98fUOHwoA7IHK6tr8ZKlUXJaRkZG5l8l6ZAIAAHbb/YP+rFsCAAAAAAAAAAAAAAAAAAAA3Wsvfk4s6z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzEHwEAAP//0wfUAw==") socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x9) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) mlockall(0x2) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r5 = shmat(r4, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) shmdt(r5) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0x260, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffffff, 0xff000000, 0xff], [0x0, 0xffffff, 0xff, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x4, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) kernel console output (not intermixed with test programs): xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.957985][ T9531] netlink: 'syz.1.1399': attribute type 4 has an invalid length. [ 370.133633][ T9532] netlink: 'syz.1.1399': attribute type 4 has an invalid length. [ 370.137770][ T9518] overlayfs: failed to clone upperpath [ 372.984091][ T9559] xt_CT: You must specify a L4 protocol and not use inversions on it [ 378.515413][ T9581] overlayfs: failed to clone upperpath [ 378.983827][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.990378][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.783088][ T9597] overlayfs: missing 'workdir' [ 379.828109][ T9595] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1419'. [ 380.041124][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1426'. [ 380.052255][ T9608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1426'. [ 380.095771][ T9608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1426'. [ 380.124728][ T9608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1426'. [ 381.392603][ T9619] overlayfs: failed to clone upperpath [ 381.514873][ T9625] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 381.524298][ T9625] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 387.304334][ T9684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1451'. [ 391.511194][ T9704] overlayfs: failed to resolve './file1/file0': -2 [ 391.915035][ T9718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1461'. [ 392.309039][ T9724] overlayfs: failed to clone upperpath [ 392.788114][ T9745] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 392.797247][ T9745] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 392.806084][ T9745] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 393.533586][ T9746] overlayfs: failed to resolve './file1/file0': -2 [ 393.566714][ T9751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1472'. [ 394.826100][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'. [ 394.845837][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'. [ 395.499007][ T9777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1482'. [ 397.386963][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1491'. [ 397.425812][ T9795] overlayfs: failed to resolve './file1/file0': -2 [ 397.775306][ T9807] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1493'. [ 398.095721][ T9811] overlayfs: failed to resolve './file1/file0': -2 [ 399.474013][ T9825] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1498'. [ 400.336295][ T9831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1501'. [ 400.355905][ T9830] overlayfs: failed to resolve './file0': -2 [ 402.200239][ T9859] nbd: must specify an index to disconnect [ 403.487009][ T9861] netlink: 'syz.2.1512': attribute type 10 has an invalid length. [ 403.533514][ T9861] team0: Device bond0 is already an upper device of the team interface [ 404.273928][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1512'. [ 404.325521][ T9850] overlayfs: failed to resolve './file1/file0': -2 [ 404.714157][ T9866] bond0: (slave team0): Releasing backup interface [ 404.763152][ T9866] team0 (unregistering): Port device team_slave_0 removed [ 404.795043][ T9866] team0 (unregistering): Port device team_slave_1 removed [ 406.539059][ T9919] netlink: 'syz.0.1537': attribute type 4 has an invalid length. [ 407.112411][ T9927] netlink: 'syz.0.1541': attribute type 4 has an invalid length. [ 407.386092][ T9941] overlayfs: failed to resolve './file0': -2 [ 408.520400][ T9950] overlayfs: failed to resolve './file1/file0': -2 [ 409.388946][ T9983] fuse: Bad value for 'fd' [ 411.252838][T10001] overlayfs: failed to clone upperpath [ 411.319397][T10005] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1572'. [ 412.615740][T10025] batadv_slave_1: entered promiscuous mode [ 412.654578][T10024] batadv_slave_1: left promiscuous mode [ 417.867711][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1592'. [ 418.563861][T10069] overlayfs: failed to clone upperpath [ 422.715325][T10092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1607'. [ 422.738919][T10092] @: renamed from veth0_to_batadv (while UP) [ 422.789763][T10092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1607'. [ 426.247572][T10132] netlink: 'syz.0.1618': attribute type 4 has an invalid length. [ 434.245527][T10171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1629'. [ 434.270421][T10171] @: renamed from veth0_to_batadv (while UP) [ 434.344492][T10171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1629'. [ 434.374346][T10174] netlink: 'syz.1.1630': attribute type 4 has an invalid length. [ 436.735655][T10204] netlink: 'syz.1.1643': attribute type 4 has an invalid length. [ 437.724810][T10200] overlayfs: failed to clone upperpath [ 439.361445][T10242] netlink: 'syz.1.1653': attribute type 4 has an invalid length. [ 444.379346][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.385901][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.547916][T10246] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 444.559000][T10246] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 444.622162][T10250] syz_tun: entered allmulticast mode [ 444.661980][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1655'. [ 444.799059][T10250] syz_tun (unregistering): left allmulticast mode [ 445.853096][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 445.853111][ T28] audit: type=1326 audit(1763602439.057:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60358f749 code=0x7ffc0000 [ 445.896854][ T28] audit: type=1326 audit(1763602439.097:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb60358f749 code=0x7ffc0000 [ 445.920858][ T28] audit: type=1326 audit(1763602439.097:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb60358f783 code=0x7ffc0000 [ 446.178788][ T28] audit: type=1326 audit(1763602439.097:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb60358f783 code=0x7ffc0000 [ 446.311023][ T28] audit: type=1326 audit(1763602439.097:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60358f749 code=0x7ffc0000 [ 446.423194][T10270] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 446.439651][ T28] audit: type=1326 audit(1763602439.097:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60358f749 code=0x7ffc0000 [ 446.511554][ T28] audit: type=1326 audit(1763602439.107:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fb60358f749 code=0x7ffc0000 [ 446.602668][ T28] audit: type=1326 audit(1763602439.107:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60358f749 code=0x7ffc0000 [ 446.626914][T10270] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 446.702130][ T28] audit: type=1326 audit(1763602439.107:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60358f749 code=0x7ffc0000 [ 446.772394][ T28] audit: type=1326 audit(1763602439.107:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10269 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fb60358f749 code=0x7ffc0000 [ 446.823586][T10282] netlink: 'syz.1.1666': attribute type 4 has an invalid length. [ 447.172595][T10289] overlayfs: failed to clone upperpath [ 448.337560][T10308] netlink: 'syz.2.1675': attribute type 10 has an invalid length. [ 448.367338][T10310] netlink: 'syz.0.1677': attribute type 4 has an invalid length. [ 448.577109][T10315] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 448.593637][T10315] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 448.792760][T10320] overlayfs: failed to clone upperpath [ 449.667800][T10327] overlayfs: failed to clone upperpath [ 450.015302][T10342] netlink: 'syz.3.1688': attribute type 4 has an invalid length. [ 450.964550][T10348] netlink: 'syz.3.1690': attribute type 10 has an invalid length. [ 451.131223][T10348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.181132][T10348] team0: Port device bond0 added [ 452.255462][T10354] overlayfs: failed to clone upperpath [ 452.518668][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1698'. [ 453.305995][T10367] overlayfs: failed to clone upperpath [ 455.286498][T10410] overlayfs: failed to clone upperpath [ 456.031791][T10405] overlayfs: failed to clone upperpath [ 456.389650][T10414] overlayfs: failed to clone upperpath [ 456.620229][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 456.620245][ T28] audit: type=1326 audit(1763602449.817:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10427 comm="syz.3.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62de98f749 code=0x7ffc0000 [ 456.683867][ T28] audit: type=1326 audit(1763602449.817:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10427 comm="syz.3.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62de98f749 code=0x7ffc0000 [ 456.732705][ T28] audit: type=1326 audit(1763602449.817:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10427 comm="syz.3.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f62de98f749 code=0x7ffc0000 [ 456.782758][T10429] siw: device registration error -23 [ 456.792621][ T28] audit: type=1326 audit(1763602449.817:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10427 comm="syz.3.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f62de98f783 code=0x7ffc0000 [ 456.853924][ T28] audit: type=1326 audit(1763602449.817:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10427 comm="syz.3.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f62de98f783 code=0x7ffc0000 [ 456.965419][ T28] audit: type=1326 audit(1763602449.817:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10427 comm="syz.3.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62de98f749 code=0x7ffc0000 [ 456.988907][ T28] audit: type=1326 audit(1763602449.817:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10427 comm="syz.3.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62de98f749 code=0x7ffc0000 [ 457.013437][ T28] audit: type=1326 audit(1763602449.917:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10427 comm="syz.3.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f62de98f749 code=0x7ffc0000 [ 457.036500][ T28] audit: type=1326 audit(1763602449.917:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10427 comm="syz.3.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62de98f749 code=0x7ffc0000 [ 457.059696][ T28] audit: type=1326 audit(1763602449.937:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10427 comm="syz.3.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62de98f749 code=0x7ffc0000 [ 459.284120][T10453] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 459.303314][T10453] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 459.762104][T10454] overlayfs: failed to clone upperpath [ 460.352226][T10463] overlayfs: failed to clone upperpath [ 467.214913][T10489] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1736'. [ 469.095154][T10512] overlayfs: failed to clone upperpath [ 471.183583][T10539] overlayfs: failed to clone upperpath [ 472.345595][T10552] overlayfs: failed to clone upperpath [ 473.754080][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1764'. [ 474.052022][T10576] overlayfs: failed to clone upperpath [ 474.142066][T10585] netlink: 'syz.3.1767': attribute type 4 has an invalid length. [ 474.934609][T10601] overlayfs: failed to clone upperpath [ 476.760464][T10596] overlayfs: failed to clone upperpath [ 476.814342][T10609] netlink: 'syz.2.1774': attribute type 10 has an invalid length. [ 476.835099][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1774'. [ 477.101268][T10623] netlink: 'syz.2.1779': attribute type 4 has an invalid length. [ 480.031418][T10646] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 480.071118][T10646] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 480.209217][T10648] netlink: 'syz.3.1788': attribute type 10 has an invalid length. [ 480.310771][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1788'. [ 481.301421][T10668] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 481.328140][T10668] CIFS mount error: No usable UNC path provided in device string! [ 481.328140][T10668] [ 481.338607][T10668] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 482.962212][T10654] team0 (unregistering): Port device team_slave_0 removed [ 483.119565][T10654] team0 (unregistering): Port device team_slave_1 removed [ 483.139985][T10654] team0 (unregistering): Port device bond0 removed [ 483.508822][T10659] netlink: 'syz.2.1791': attribute type 4 has an invalid length. [ 483.677854][T10681] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 483.687920][T10681] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 485.224156][T10702] netlink: 'syz.3.1807': attribute type 4 has an invalid length. [ 485.535836][T10713] openvswitch: netlink: Message has 16 unknown bytes. [ 486.225329][T10714] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 486.284303][T10714] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 486.316359][T10709] overlayfs: failed to clone upperpath [ 488.814933][T10742] netlink: 'syz.2.1816': attribute type 4 has an invalid length. [ 489.083606][T10751] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 489.097899][T10751] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 492.569112][T10780] netlink: 'syz.3.1827': attribute type 4 has an invalid length. [ 496.915059][T10820] netlink: 'syz.1.1840': attribute type 4 has an invalid length. [ 501.874431][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.880972][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.727606][T10859] netlink: 'syz.2.1852': attribute type 4 has an invalid length. [ 515.060336][T11007] netlink: 'syz.2.1899': attribute type 10 has an invalid length. [ 515.088581][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1899'. [ 515.263622][T11010] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 515.293873][T11010] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 516.148299][T11024] netlink: 'syz.1.1904': attribute type 1 has an invalid length. [ 516.156237][T11024] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1904'. [ 518.748871][T11045] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 518.803943][T11045] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 529.762798][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 529.762816][ T28] audit: type=1107 audit(1763602522.957:130): pid=11066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 531.224327][T11092] overlayfs: failed to clone upperpath [ 536.117627][ T5103] Bluetooth: hci2: unexpected subevent 0x1a length: 10 > 6 [ 539.070567][T11184] netlink: 'syz.3.1955': attribute type 10 has an invalid length. [ 539.190721][T11190] netlink: 'syz.2.1957': attribute type 10 has an invalid length. [ 547.151081][T11294] netlink: 'syz.2.1989': attribute type 10 has an invalid length. [ 547.175303][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1989'. [ 557.162862][T11366] overlayfs: failed to clone upperpath [ 561.312113][T11408] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 561.333113][T11408] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 563.260271][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.267232][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.158001][T11442] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 564.168591][T11442] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 566.521539][ T5801] IPVS: starting estimator thread 0... [ 566.635994][T11458] IPVS: using max 15 ests per chain, 36000 per kthread [ 566.984369][T11468] netlink: 'syz.0.2042': attribute type 4 has an invalid length. [ 567.968076][ T5795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 567.980935][ T5795] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 567.991449][ T5795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 568.017502][ T5795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 568.027771][ T5795] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 568.036744][ T5795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 569.469630][T11482] chnl_net:caif_netlink_parms(): no params data found [ 569.686844][T11482] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.695270][T11482] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.703472][T11482] bridge_slave_0: entered allmulticast mode [ 569.715251][T11482] bridge_slave_0: entered promiscuous mode [ 569.726267][T11482] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.742562][T11482] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.751245][T11482] bridge_slave_1: entered allmulticast mode [ 569.760683][T11482] bridge_slave_1: entered promiscuous mode [ 569.770513][T11508] netlink: 'syz.2.2052': attribute type 4 has an invalid length. [ 569.898225][T11482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.943253][T11482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.275965][T11482] team0: Port device team_slave_0 added [ 570.285939][T11482] team0: Port device team_slave_1 added [ 570.644265][ T5795] Bluetooth: hci4: command tx timeout [ 571.078716][T11512] 9pnet_fd: Insufficient options for proto=fd [ 571.123944][T11482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.141170][T11482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.193405][T11482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.207875][T11482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.215465][T11482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.241673][T11482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.704026][ T5795] Bluetooth: hci4: command tx timeout [ 573.092678][T11482] hsr_slave_0: entered promiscuous mode [ 573.110222][T11482] hsr_slave_1: entered promiscuous mode [ 573.127199][T11482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.146845][T11482] Cannot create hsr debugfs directory [ 573.320809][T11536] netlink: 'syz.0.2061': attribute type 4 has an invalid length. [ 573.629043][T11482] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 573.684411][T11482] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 573.704591][T11482] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 573.724632][T11540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2062'. [ 573.744014][T11540] gretap0: left promiscuous mode [ 573.752487][T11482] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 573.954991][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.247643][T11482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.339822][ T5795] Bluetooth: hci4: command tx timeout [ 575.596828][T11482] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.672458][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.679726][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.735924][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.744092][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.473892][ T5795] Bluetooth: hci4: command tx timeout [ 577.618614][T11572] netlink: 'syz.1.2067': attribute type 10 has an invalid length. [ 577.732723][T11572] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 577.832306][T11482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.178661][T11583] netlink: 'syz.0.2070': attribute type 10 has an invalid length. [ 579.061287][T11583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.078193][T11583] team0: Port device bond0 added [ 579.089008][T11590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'. [ 579.309857][T11590] team0 (unregistering): Port device team_slave_0 removed [ 579.329959][T11590] team0 (unregistering): Port device team_slave_1 removed [ 579.353142][T11590] team0 (unregistering): Port device bond0 removed [ 580.767477][T11482] veth0_vlan: entered promiscuous mode [ 582.755640][T11482] veth1_vlan: entered promiscuous mode [ 582.809927][T11482] veth0_macvtap: entered promiscuous mode [ 583.523955][T11611] tipc: Enabling of bearer rejected, failed to enable media [ 584.394701][T11482] veth1_macvtap: entered promiscuous mode [ 584.487237][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.512529][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.529569][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.540642][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.550606][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.561124][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.571184][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 584.581740][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.616771][T11482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.647255][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.673750][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.716334][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.759899][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.770070][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.786363][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.803768][T11482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 584.821827][T11482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 584.838904][T11482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.902837][T11482] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.934025][T11482] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.942966][T11482] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.973769][T11482] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.293122][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.293579][ T2929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.329434][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.833772][ T2929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.235576][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2037'. [ 592.700091][T11656] netlink: 'syz.2.2087': attribute type 10 has an invalid length. [ 592.722196][T11656] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 593.057193][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2093'. [ 593.081481][T11668] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.091057][T11668] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.100378][T11668] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.110433][T11668] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.676338][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2093'. [ 597.706962][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2101'. [ 598.327512][T11708] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2104'. [ 600.575566][T11729] x_tables: duplicate underflow at hook 3 [ 601.622602][T11737] bridge0: port 1(gretap0) entered blocking state [ 601.629972][T11737] bridge0: port 1(gretap0) entered disabled state [ 601.637287][T11737] gretap0: entered allmulticast mode [ 601.645102][T11737] gretap0: entered promiscuous mode [ 601.652526][T11737] bridge0: port 1(gretap0) entered blocking state [ 601.659445][T11737] bridge0: port 1(gretap0) entered forwarding state [ 601.674874][T11737] gretap0: left allmulticast mode [ 601.680229][T11737] gretap0: left promiscuous mode [ 601.685646][T11737] bridge0: port 1(gretap0) entered disabled state [ 602.026020][T11738] overlayfs: failed to clone upperpath [ 605.582457][T11785] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2127'. [ 605.657244][T11785] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2127'. [ 607.071352][T11805] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 608.665164][T11827] 9pnet_fd: Insufficient options for proto=fd [ 609.024071][T11835] 9p: Unknown Cache mode or invalid value fscach [ 609.775821][T11839] overlayfs: failed to clone upperpath [ 610.365323][T11853] 9pnet_fd: Insufficient options for proto=fd [ 610.374988][T11854] 9pnet_fd: Insufficient options for proto=fd [ 611.401401][T11865] 9p: Unknown Cache mode or invalid value fscach [ 611.495847][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2158'. [ 612.310537][T11876] overlayfs: missing 'lowerdir' [ 612.405271][T11875] overlayfs: failed to clone upperpath [ 612.574379][T11873] loop4: detected capacity change from 0 to 32768 [ 612.592823][T11873] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.2160 (11873) [ 612.633119][T11873] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 612.643945][T11873] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 612.653364][T11873] BTRFS info (device loop4): force zlib compression, level 3 [ 612.662033][T11873] BTRFS info (device loop4): force clearing of disk cache [ 612.669258][T11873] BTRFS info (device loop4): setting nodatasum [ 612.675506][T11873] BTRFS info (device loop4): use zlib compression, level 3 [ 612.682753][T11873] BTRFS info (device loop4): enabling disk space caching [ 612.689942][T11873] BTRFS info (device loop4): disk space caching is enabled [ 612.794817][T11873] BTRFS info (device loop4): enabling ssd optimizations [ 612.802253][T11873] BTRFS info (device loop4): auto enabling async discard [ 612.817304][T11873] BTRFS info (device loop4): rebuilding free space tree [ 612.874125][T11873] BTRFS info (device loop4): disabling free space tree [ 612.881453][T11873] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 612.891762][T11873] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 613.856828][T11482] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 614.298837][T11911] 9pnet_virtio: no channels available for device [ 615.605456][T11920] overlayfs: failed to clone upperpath [ 616.634815][T11931] netlink: 'syz.1.2174': attribute type 10 has an invalid length. [ 616.725044][T11931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.747042][T11931] team0: Port device bond0 added [ 616.753299][T11935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2174'. [ 617.046093][T11935] team0 (unregistering): Port device team_slave_0 removed [ 617.075247][T11935] team0 (unregistering): Port device team_slave_1 removed [ 617.089169][T11935] team0 (unregistering): Port device bond0 removed [ 617.155892][T11937] netlink: 'syz.4.2176': attribute type 10 has an invalid length. [ 617.210176][T11937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.550699][T11937] team0: Port device bond0 added [ 617.682910][T11938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2176'. [ 619.793311][T11938] team0 (unregistering): Port device team_slave_0 removed [ 619.832238][T11938] team0 (unregistering): Port device team_slave_1 removed [ 620.024598][T11938] team0 (unregistering): Port device bond0 removed [ 621.184287][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2183'. [ 624.285519][T11995] ceph: No mds server is up or the cluster is laggy [ 624.298352][ T788] libceph: connect (1)[c::]:6789 error -101 [ 624.305292][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 624.456675][T12004] netlink: 'syz.1.2195': attribute type 10 has an invalid length. [ 624.572614][T12001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2195'. [ 624.703203][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.710104][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.083831][ T5801] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 625.282550][ T5801] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.519193][ T5801] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 625.532912][ T5801] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 625.542399][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.567045][ T5801] usb 5-1: config 0 descriptor?? [ 625.591961][ T5801] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 626.350434][ T5801] usb 5-1: USB disconnect, device number 2 [ 629.084140][T12045] netlink: 'syz.4.2208': attribute type 10 has an invalid length. [ 629.140648][T12051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2208'. [ 629.210722][T12054] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 629.321829][T12054] bridge_slave_0: left allmulticast mode [ 629.355106][T12054] bridge_slave_0: left promiscuous mode [ 629.372649][T12054] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.403778][T12054] bridge_slave_1: left allmulticast mode [ 629.422674][T12054] bridge_slave_1: left promiscuous mode [ 629.439253][T12054] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.456607][T12054] bond0: (slave bond_slave_0): Releasing backup interface [ 629.492906][T12054] bond0: (slave bond_slave_1): Releasing backup interface [ 629.544081][T12054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.553550][T12054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.565210][T12054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.572864][T12054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.620541][T12054] bond1: (slave gretap1): Releasing backup interface [ 629.722835][T12054] bond2: (slave bridge1): Releasing active interface [ 629.803206][T12057] netlink: 'syz.0.2209': attribute type 10 has an invalid length. [ 629.829549][T12057] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 629.878064][T12057] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 630.216244][T12068] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 630.460904][T12071] loop4: detected capacity change from 0 to 512 [ 631.510659][T12087] netlink: 'syz.0.2219': attribute type 10 has an invalid length. [ 631.657934][T12088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2219'. [ 632.445478][T12097] loop4: detected capacity change from 0 to 128 [ 633.215089][ T28] audit: type=1800 audit(1763602626.872:131): pid=12097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2222" name="bus" dev="loop4" ino=1048603 res=0 errno=0 [ 633.250248][T12097] syz.4.2222: attempt to access beyond end of device [ 633.250248][T12097] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 635.051989][T12105] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 637.189998][T12130] 9pnet_virtio: no channels available for device [ 638.282542][T12134] loop4: detected capacity change from 0 to 32768 [ 638.308357][T12134] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.2232 (12134) [ 638.353761][T12134] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 638.366598][T12134] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 638.376134][T12134] BTRFS info (device loop4): force zlib compression, level 3 [ 638.383758][T12134] BTRFS info (device loop4): force clearing of disk cache [ 638.391278][T12134] BTRFS info (device loop4): setting nodatasum [ 638.397536][T12134] BTRFS info (device loop4): use zlib compression, level 3 [ 638.404811][T12134] BTRFS info (device loop4): enabling disk space caching [ 638.411849][T12134] BTRFS info (device loop4): disk space caching is enabled [ 638.525975][T12134] BTRFS info (device loop4): enabling ssd optimizations [ 638.533053][T12134] BTRFS info (device loop4): auto enabling async discard [ 638.702496][T12155] dvmrp1: entered allmulticast mode [ 639.107682][T12134] BTRFS info (device loop4): rebuilding free space tree [ 639.176708][T12134] BTRFS info (device loop4): disabling free space tree [ 639.184589][T12134] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 639.194453][T12134] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 641.976050][T11482] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 643.668081][T12187] 9pnet_virtio: no channels available for device [ 646.212042][T12218] netlink: 'syz.4.2250': attribute type 10 has an invalid length. [ 646.265328][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2250'. [ 647.213763][ T28] audit: type=1800 audit(1763602641.412:132): pid=12225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2253" name="cpuacct.usage_percpu" dev="overlay" ino=267 res=0 errno=0 [ 647.714004][ T27] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 648.209364][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 648.758258][ T27] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 648.867373][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.883825][ T27] usb 5-1: Product: syz [ 648.888223][ T27] usb 5-1: Manufacturer: syz [ 648.892962][ T27] usb 5-1: SerialNumber: syz [ 648.904206][ T27] usb 5-1: config 0 descriptor?? [ 648.994443][T12251] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2259'. [ 649.141213][ T27] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 649.366880][T12258] netlink: 'syz.1.2261': attribute type 10 has an invalid length. [ 649.378289][T12258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2261'. [ 649.960916][T12265] overlayfs: failed to clone upperpath [ 650.589005][ T27] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 650.612022][ T27] usb 5-1: USB disconnect, device number 3 [ 653.021335][T12294] netlink: 'syz.1.2271': attribute type 10 has an invalid length. [ 653.053288][T12294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2271'. [ 656.071714][T12315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2280'. [ 657.086806][T12322] netlink: 'syz.1.2282': attribute type 4 has an invalid length. [ 657.951273][T12322] netlink: 'syz.1.2282': attribute type 17 has an invalid length. [ 658.134832][T12335] dvmrp1: entered allmulticast mode [ 660.423842][ T27] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 660.641949][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.017012][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 661.291577][ T27] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 661.302189][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.426305][ T27] usb 5-1: config 0 descriptor?? [ 661.446437][ T27] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 661.669240][ T27] usb 5-1: USB disconnect, device number 4 [ 662.386861][T12370] overlayfs: failed to clone upperpath [ 663.391597][T12378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2300'. [ 664.558839][T12396] loop4: detected capacity change from 0 to 512 [ 664.584560][T12396] EXT4-fs: Ignoring removed mblk_io_submit option [ 664.591225][T12396] EXT4-fs: inline encryption not supported [ 664.614093][T12396] EXT4-fs: Ignoring removed mblk_io_submit option [ 664.630891][T12396] EXT4-fs (loop4): Test dummy encryption mode enabled [ 664.655981][T12396] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 664.710870][T12396] EXT4-fs (loop4): 1 truncate cleaned up [ 664.742670][T12396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.191536][T12412] wg1: entered promiscuous mode [ 665.196809][T12412] wg1: entered allmulticast mode [ 666.056932][T12407] overlayfs: failed to clone upperpath [ 666.537349][T12396] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 667.078145][T11482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.300207][T12432] loop4: detected capacity change from 0 to 1024 [ 668.626113][T12445] overlayfs: failed to resolve './file0': -2 [ 669.004224][ T27] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 669.301212][ T5103] Bluetooth: Wrong link type (-71) [ 669.610458][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.822301][ T27] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 669.843769][ T27] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 669.864101][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.917148][ T27] usb 5-1: config 0 descriptor?? [ 669.936338][ T27] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 669.976067][T12453] overlayfs: failed to clone upperpath [ 670.150350][ T27] usb 5-1: USB disconnect, device number 5 [ 670.265438][T12471] netlink: 'syz.0.2326': attribute type 10 has an invalid length. [ 670.285680][ T5103] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 670.303335][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2326'. [ 670.507670][T12476] overlayfs: failed to resolve './file0': -2 [ 673.690179][T12499] loop4: detected capacity change from 0 to 512 [ 673.819630][T12504] overlayfs: failed to clone upperpath [ 673.859912][T12499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.890994][T12499] ext4 filesystem being mounted at /53/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 673.975537][T12499] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #2: comm syz.4.2337: corrupted inode contents [ 674.080710][T12499] EXT4-fs error (device loop4): ext4_dirty_inode:6120: inode #2: comm syz.4.2337: mark_inode_dirty error [ 674.158455][T12513] overlayfs: failed to resolve './file0': -2 [ 674.190882][T12499] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #2: comm syz.4.2337: corrupted inode contents [ 674.222963][T12499] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.2337: mark_inode_dirty error [ 674.331926][ T5103] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 674.345201][ T5103] Bluetooth: hci2: Injecting HCI hardware error event [ 674.357832][ T5795] Bluetooth: hci2: hardware error 0x00 [ 674.954681][T12518] netlink: 'syz.2.2342': attribute type 10 has an invalid length. [ 674.995088][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2342'. [ 675.027442][T11482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.376025][T12524] overlayfs: failed to resolve './file1/file0': -2 [ 676.129198][T12539] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2348'. [ 676.583770][ T5795] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 677.196237][T12556] netlink: 'syz.2.2353': attribute type 10 has an invalid length. [ 677.223832][T12546] overlayfs: failed to clone upperpath [ 677.244462][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2353'. [ 678.293351][T12569] netlink: 'syz.1.2366': attribute type 4 has an invalid length. [ 678.387523][T12570] overlayfs: failed to clone upperpath [ 679.259421][T12586] dvmrp1: entered allmulticast mode [ 680.657870][T12584] overlayfs: failed to clone upperpath [ 680.936118][T12602] netlink: 'syz.4.2368': attribute type 4 has an invalid length. [ 682.837832][T12621] netlink: 'syz.1.2374': attribute type 4 has an invalid length. [ 682.846951][T12621] netlink: 'syz.1.2374': attribute type 17 has an invalid length. [ 682.882577][T12623] loop4: detected capacity change from 0 to 512 [ 682.957137][T12622] overlayfs: failed to clone upperpath [ 682.982416][T12623] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 683.047406][T12623] ext4 filesystem being mounted at /61/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.118287][T12623] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #2: comm syz.4.2373: corrupted inode contents [ 683.167897][T12623] EXT4-fs error (device loop4): ext4_dirty_inode:6120: inode #2: comm syz.4.2373: mark_inode_dirty error [ 683.307589][T12623] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #2: comm syz.4.2373: corrupted inode contents [ 683.437864][T12623] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.2373: mark_inode_dirty error [ 683.993067][T11482] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.151295][T12644] netlink: 'syz.4.2379': attribute type 4 has an invalid length. [ 685.731096][T12661] netlink: 'syz.0.2384': attribute type 4 has an invalid length. [ 685.744110][T12661] netlink: 'syz.0.2384': attribute type 17 has an invalid length. [ 685.876789][T12665] loop4: detected capacity change from 0 to 8 [ 686.153485][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.167056][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.866380][T12660] overlayfs: failed to clone upperpath [ 686.959814][T12673] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2389'. [ 687.664476][T12681] netlink: 'syz.1.2391': attribute type 10 has an invalid length. [ 687.729740][T12687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2391'. [ 687.880824][T12682] overlayfs: failed to clone upperpath [ 689.332176][T12708] overlayfs: failed to clone upperpath [ 690.936286][T12723] netlink: 'syz.4.2403': attribute type 10 has an invalid length. [ 690.995710][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2403'. [ 692.097540][T12742] loop4: detected capacity change from 0 to 512 [ 692.160860][T12352] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 692.427806][T12744] xt_ecn: cannot match TCP bits for non-tcp packets [ 692.897438][T12749] (null): rxe_set_mtu: Set mtu to 1024 [ 692.910028][T12749] wg2 speed is unknown, defaulting to 1000 [ 692.933980][T12749] wg2 speed is unknown, defaulting to 1000 [ 692.950241][T12749] wg2 speed is unknown, defaulting to 1000 [ 693.425707][ T5795] Bluetooth: hci4: command 0x0406 tx timeout [ 693.521861][T12749] infiniband syz2: set active [ 693.527114][T12749] infiniband syz2: added wg2 [ 693.540658][ T5833] wg2 speed is unknown, defaulting to 1000 [ 693.586197][T12749] RDS/IB: syz2: added [ 693.591640][T12749] smc: adding ib device syz2 with port count 1 [ 693.598182][T12749] smc: ib device syz2 port 1 has pnetid [ 693.608081][T12749] wg2 speed is unknown, defaulting to 1000 [ 693.796441][ T5833] wg2 speed is unknown, defaulting to 1000 [ 693.825056][T12749] wg2 speed is unknown, defaulting to 1000 [ 694.008976][T12749] wg2 speed is unknown, defaulting to 1000 [ 694.186812][T12749] wg2 speed is unknown, defaulting to 1000 [ 694.362465][T12749] wg2 speed is unknown, defaulting to 1000 [ 696.343715][T12783] netlink: 'syz.2.2415': attribute type 10 has an invalid length. [ 696.370240][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2415'. [ 697.899713][T12796] netlink: 'syz.4.2422': attribute type 10 has an invalid length. [ 697.939399][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2422'. [ 698.012579][T12802] netlink: 'syz.1.2423': attribute type 17 has an invalid length. [ 698.233378][T12805] netlink: 'syz.4.2425': attribute type 4 has an invalid length. [ 698.262214][T12805] netlink: 'syz.4.2425': attribute type 17 has an invalid length. [ 698.788849][T12813] overlayfs: bad index found (index=index/00fb210001059c505d381d46a6a44f47c41211669207048736f901000000000000, ftype=2000, origin ftype=a000). [ 701.133433][T12827] netlink: 'syz.1.2433': attribute type 4 has an invalid length. [ 701.164040][T12832] netlink: 'syz.2.2434': attribute type 17 has an invalid length. [ 701.341068][ T28] audit: type=1800 audit(1763602695.542:133): pid=12822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2430" name="cpuacct.usage_percpu" dev="overlay" ino=513 res=0 errno=0 [ 701.475892][T12842] netlink: 'syz.1.2436': attribute type 10 has an invalid length. [ 701.506620][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2436'. [ 702.995971][T12862] netlink: 'syz.4.2444': attribute type 1 has an invalid length. [ 703.850037][T12868] netlink: 'syz.1.2445': attribute type 4 has an invalid length. [ 703.915928][T12868] netlink: 'syz.1.2445': attribute type 17 has an invalid length. [ 703.953508][T12873] netlink: 'syz.2.2446': attribute type 17 has an invalid length. [ 705.597971][ T5891] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 706.603154][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.962233][T12902] netlink: 'syz.2.2457': attribute type 4 has an invalid length. [ 706.985895][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 707.000053][ T5891] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 707.013692][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.046039][ T5891] usb 5-1: config 0 descriptor?? [ 707.064522][T12902] netlink: 'syz.2.2457': attribute type 17 has an invalid length. [ 707.077942][ T5891] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 707.280897][ T5891] usb 5-1: USB disconnect, device number 6 [ 708.485520][T12914] syz.0.2461 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 711.673837][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2465'. [ 711.683357][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2465'. [ 711.692557][T12932] netlink: 'syz.0.2465': attribute type 18 has an invalid length. [ 711.707080][T12932] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.716140][T12932] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.725389][T12932] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.735942][T12932] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 711.747070][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2465'. [ 711.756190][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2465'. [ 711.765451][T12932] netlink: 'syz.0.2465': attribute type 18 has an invalid length. [ 713.010693][T12924] loop4: detected capacity change from 0 to 32768 [ 713.976975][T12944] netlink: 'syz.0.2469': attribute type 4 has an invalid length. [ 713.997943][T12924] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.2463 (12924) [ 714.037824][T12944] netlink: 'syz.0.2469': attribute type 17 has an invalid length. [ 716.229235][T12968] loop4: detected capacity change from 0 to 64 [ 716.277250][T12968] hfs: get root inode failed [ 721.543680][T13008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 725.890783][T13032] overlayfs: failed to resolve './file1/file0': -2 [ 738.015500][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.504857][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.905438][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.070437][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.760766][T13152] netlink: 'syz.1.2529': attribute type 3 has an invalid length. [ 740.446677][ T42] tipc: Left network mode [ 743.909648][ T5853] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 744.145955][ T5853] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.192296][ T5853] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 744.280054][ T5853] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 744.325328][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.654813][ T5853] usb 5-1: config 0 descriptor?? [ 744.677989][ T5853] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 745.372840][ T5853] usb 5-1: USB disconnect, device number 7 [ 745.782258][T13211] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 746.710965][T13216] overlayfs: missing 'lowerdir' [ 747.649028][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.672755][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.317214][ T42] bond0: (slave wlan1): Releasing backup interface [ 750.531965][ T42] hsr_slave_0: left promiscuous mode [ 750.592692][ T42] hsr_slave_1: left promiscuous mode [ 750.646738][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.673898][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.761038][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.789253][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.814705][ T42] bridge_slave_1: left allmulticast mode [ 750.820412][ T42] bridge_slave_1: left promiscuous mode [ 750.863891][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.884671][ T42] bridge_slave_0: left allmulticast mode [ 750.890385][ T42] bridge_slave_0: left promiscuous mode [ 750.935079][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.040767][ T42] veth1_macvtap: left promiscuous mode [ 751.066008][ T42] veth1_vlan: left promiscuous mode [ 751.092202][ T42] veth0_vlan: left promiscuous mode [ 751.861052][T13261] overlayfs: failed to clone upperpath [ 752.004406][ T42] bond1 (unregistering): (slave bridge4): Releasing active interface [ 752.995853][ T42] bond1 (unregistering): Released all slaves [ 756.289711][T13295] overlayfs: failed to clone upperpath [ 756.343039][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.409364][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.315510][ T42] bond0 (unregistering): Released all slaves [ 763.007254][T13349] netlink: 'syz.2.2574': attribute type 4 has an invalid length. [ 763.111485][T13349] netlink: 'syz.2.2574': attribute type 17 has an invalid length. [ 763.469014][T13363] overlayfs: overlapping lowerdir path [ 763.617777][ T42] IPVS: stop unused estimator thread 0... [ 764.242738][T13380] netlink: 320 bytes leftover after parsing attributes in process `syz.4.2579'. [ 766.938145][T13413] overlayfs: failed to clone upperpath [ 772.228778][T13421] netlink: 'syz.2.2589': attribute type 4 has an invalid length. [ 773.933862][T11077] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 774.130218][T11077] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.171675][T11077] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 774.240416][T11077] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 774.264105][T11077] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.301565][T11077] usb 5-1: config 0 descriptor?? [ 774.350162][T13451] overlayfs: failed to clone upperpath [ 774.737055][T11077] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 775.199775][T11077] usb 5-1: USB disconnect, device number 8 [ 775.542811][T13476] netlink: 'syz.0.2603': attribute type 4 has an invalid length. [ 775.633918][T13476] netlink: 'syz.0.2603': attribute type 17 has an invalid length. [ 777.158244][T13500] xt_socket: unknown flags 0x50 [ 777.174630][T13500] overlayfs: missing 'lowerdir' [ 779.444289][T13514] netlink: 'syz.2.2602': attribute type 4 has an invalid length. [ 779.498501][T13514] netlink: 'syz.2.2602': attribute type 17 has an invalid length. [ 779.537614][T13517] tipc: Enabled bearer , priority 0 [ 781.683634][T11077] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 781.914743][T11077] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.983183][T11077] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 782.002930][T11077] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 782.012863][T11077] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.039071][T11077] usb 5-1: config 0 descriptor?? [ 782.081670][T11077] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 782.367817][ T9] usb 5-1: USB disconnect, device number 9 [ 783.158952][T13572] netlink: 'syz.0.2624': attribute type 4 has an invalid length. [ 783.202050][T13572] netlink: 'syz.0.2624': attribute type 17 has an invalid length. [ 787.343341][ T9] IPVS: starting estimator thread 0... [ 787.388287][T13628] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 787.446667][T13634] IPVS: using max 16 ests per chain, 38400 per kthread [ 797.225960][T13738] (null): rxe_set_mtu: Set mtu to 1024 [ 797.235327][T13738] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 797.975166][T13739] netlink: 'syz.2.2659': attribute type 10 has an invalid length. [ 798.022973][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2659'. [ 798.091446][T13742] netlink: 'syz.4.2660': attribute type 4 has an invalid length. [ 798.150005][T13742] netlink: 'syz.4.2660': attribute type 17 has an invalid length. [ 799.092613][T13758] netlink: 'syz.2.2662': attribute type 4 has an invalid length. [ 799.138582][T13754] netlink: 'syz.2.2662': attribute type 17 has an invalid length. [ 799.383886][ T5801] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 800.482961][T13776] overlayfs: failed to clone upperpath [ 800.535786][ T5801] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.571334][ T5801] usb 5-1: config 0 has no interfaces? [ 800.592314][ T5801] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 800.633571][ T5801] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.760788][ T5801] usb 5-1: config 0 descriptor?? [ 801.520434][T13795] netlink: 'syz.2.2670': attribute type 10 has an invalid length. [ 801.569480][T13795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2670'. [ 801.611826][ T9] usb 5-1: USB disconnect, device number 10 [ 801.790541][T13801] netlink: 'syz.4.2673': attribute type 4 has an invalid length. [ 801.837561][T13801] netlink: 'syz.4.2673': attribute type 17 has an invalid length. [ 802.964397][T13823] overlayfs: failed to clone upperpath [ 804.301593][T13843] netlink: 'syz.2.2683': attribute type 10 has an invalid length. [ 804.339462][T13840] netlink: 'syz.1.2685': attribute type 4 has an invalid length. [ 804.372108][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2683'. [ 804.391003][T13840] netlink: 'syz.1.2685': attribute type 17 has an invalid length. [ 804.870532][T13856] overlayfs: failed to clone upperpath [ 805.555100][T13861] netlink: 'syz.4.2690': attribute type 4 has an invalid length. [ 805.776911][T13861] netlink: 'syz.4.2690': attribute type 17 has an invalid length. [ 807.830063][T13887] netlink: 'syz.2.2696': attribute type 10 has an invalid length. [ 807.857676][T13887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2696'. [ 807.904653][T13890] netlink: 'syz.4.2697': attribute type 4 has an invalid length. [ 807.944490][T13890] netlink: 'syz.4.2697': attribute type 17 has an invalid length. [ 809.029411][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.035860][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.469711][T13903] overlayfs: failed to clone upperpath [ 810.898585][T13918] netlink: 'syz.1.2704': attribute type 4 has an invalid length. [ 810.960069][T13918] netlink: 'syz.1.2704': attribute type 17 has an invalid length. [ 812.287955][T13940] netlink: 'syz.0.2709': attribute type 4 has an invalid length. [ 812.413971][T13940] netlink: 'syz.0.2709': attribute type 17 has an invalid length. [ 812.499524][T13948] netlink: 'syz.4.2710': attribute type 10 has an invalid length. [ 812.509967][T13949] overlayfs: failed to clone upperpath [ 812.550573][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2710'. [ 816.826339][T13980] loop4: detected capacity change from 0 to 32768 [ 817.397891][T13980] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 817.408198][T13980] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 817.418020][T13980] BTRFS info (device loop4): force zlib compression, level 3 [ 817.425540][T13980] BTRFS info (device loop4): force clearing of disk cache [ 817.432787][T13980] BTRFS info (device loop4): setting nodatasum [ 817.439086][T13980] BTRFS info (device loop4): use zlib compression, level 3 [ 817.446499][T13980] BTRFS info (device loop4): enabling disk space caching [ 817.453741][T13980] BTRFS info (device loop4): disk space caching is enabled [ 817.516952][T13980] BTRFS info (device loop4): enabling ssd optimizations [ 817.524160][T13980] BTRFS info (device loop4): auto enabling async discard [ 817.534044][T13980] BTRFS info (device loop4): rebuilding free space tree [ 817.557506][T13980] BTRFS info (device loop4): disabling free space tree [ 817.564715][T13980] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 817.574568][T13980] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 817.856347][T14011] netlink: 'syz.0.2721': attribute type 10 has an invalid length. [ 817.892168][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2721'. [ 818.053269][T11482] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 818.086387][T14018] netlink: 'syz.1.2722': attribute type 10 has an invalid length. [ 818.130115][T14018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2722'. [ 818.346104][T13983] pim6reg: entered allmulticast mode [ 818.419542][T13982] pim6reg: left allmulticast mode [ 821.489841][T14062] netlink: 'syz.4.2733': attribute type 10 has an invalid length. [ 821.524052][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2733'. [ 825.656506][T14086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2736'. [ 826.079211][T14093] netlink: 'syz.2.2738': attribute type 4 has an invalid length. [ 826.177799][T14100] netlink: 'syz.2.2738': attribute type 17 has an invalid length. [ 826.737416][T14120] netlink: 'syz.2.2745': attribute type 10 has an invalid length. [ 828.304677][T14125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2745'. [ 833.204068][T14171] netlink: 'syz.0.2752': attribute type 10 has an invalid length. [ 833.233779][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2752'. [ 837.892249][T14223] netlink: 'syz.4.2764': attribute type 10 has an invalid length. [ 837.929584][T14223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2764'. [ 840.707563][T14249] loop4: detected capacity change from 0 to 32768 [ 840.747568][T14249] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.2771 (14249) [ 840.770270][T14249] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 840.780804][T14249] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 840.790278][T14249] BTRFS info (device loop4): force zlib compression, level 3 [ 840.797889][T14249] BTRFS info (device loop4): force clearing of disk cache [ 840.805102][T14249] BTRFS info (device loop4): setting nodatasum [ 840.811298][T14249] BTRFS info (device loop4): use zlib compression, level 3 [ 840.818654][T14249] BTRFS info (device loop4): enabling disk space caching [ 840.826071][T14249] BTRFS info (device loop4): disk space caching is enabled [ 842.292664][T14252] netlink: 'syz.1.2773': attribute type 1 has an invalid length. [ 842.300585][T14252] netlink: 'syz.1.2773': attribute type 2 has an invalid length. [ 842.387201][T14249] BTRFS info (device loop4): enabling ssd optimizations [ 842.394666][T14249] BTRFS info (device loop4): auto enabling async discard [ 842.405759][T14249] BTRFS info (device loop4): rebuilding free space tree [ 842.435924][T14249] BTRFS info (device loop4): disabling free space tree [ 842.442954][T14249] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 842.455413][T14249] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 842.494633][T11482] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 845.243035][T14319] loop4: detected capacity change from 0 to 32768 [ 845.262822][T14319] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2782 (14319) [ 845.288923][T14319] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 845.299419][T14319] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 845.308268][T14319] BTRFS info (device loop4): using free space tree [ 846.389099][T14319] BTRFS info (device loop4): enabling ssd optimizations [ 846.396535][T14319] BTRFS info (device loop4): auto enabling async discard [ 847.981649][ T28] audit: type=1800 audit(1763602841.842:134): pid=14354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2782" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 849.676999][T14370] ªªªªªª: renamed from wg2 (while UP) [ 849.951322][T14373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2787'. [ 852.952834][T11482] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 853.534337][T14394] netlink: 'syz.4.2789': attribute type 4 has an invalid length. [ 853.603837][T14394] netlink: 'syz.4.2789': attribute type 17 has an invalid length. [ 853.989406][T14402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.095567][T14402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.176155][T14402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.856611][T14407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2796'. [ 854.895188][T14404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 855.625228][ T5103] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 855.676551][ T5103] Bluetooth: hci1: Invalid connection link type handle 0x00c9 [ 856.603077][ T5795] Bluetooth: hci4: command 0x0406 tx timeout [ 858.338831][T14433] netlink: 'syz.2.2804': attribute type 4 has an invalid length. [ 858.366406][T14437] netlink: 'syz.0.2803': attribute type 10 has an invalid length. [ 858.552225][T14441] netlink: 'syz.2.2804': attribute type 17 has an invalid length. [ 858.581479][T14443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2803'. [ 862.064214][T14464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.278425][T14464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.356743][T14464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.408759][T14464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 862.460183][T14464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2810'. [ 862.547866][ T9] wlan1: authenticate with 08:02:11:00:00:00 [ 862.569424][ T9] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 863.724344][T14479] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 864.611139][T14485] netlink: 'syz.1.2816': attribute type 4 has an invalid length. [ 864.689648][T14485] netlink: 'syz.1.2816': attribute type 17 has an invalid length. [ 865.847803][T14488] wg2 speed is unknown, defaulting to 1000 [ 865.902490][T14489] loop4: detected capacity change from 0 to 128 [ 867.224652][T14489] FAT-fs (loop4): Directory bread(block 414) failed [ 867.231821][T14489] FAT-fs (loop4): Directory bread(block 415) failed [ 867.238804][T14489] FAT-fs (loop4): Directory bread(block 416) failed [ 867.245521][T14489] FAT-fs (loop4): Directory bread(block 417) failed [ 867.252562][T14489] FAT-fs (loop4): Directory bread(block 418) failed [ 867.259515][T14489] FAT-fs (loop4): Directory bread(block 419) failed [ 867.269420][T14489] FAT-fs (loop4): Directory bread(block 420) failed [ 867.276820][T14489] FAT-fs (loop4): Directory bread(block 421) failed [ 867.533877][T14500] netlink: 'syz.1.2817': attribute type 10 has an invalid length. [ 867.590580][T14502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2817'. [ 868.563088][T14510] overlayfs: failed to resolve './file1/file0': -2 [ 869.897201][T14531] netlink: 'syz.0.2827': attribute type 4 has an invalid length. [ 869.963840][T14531] netlink: 'syz.0.2827': attribute type 17 has an invalid length. [ 870.163905][T14542] netlink: 'syz.1.2832': attribute type 10 has an invalid length. [ 870.208746][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2832'. [ 870.475631][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.482106][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.321784][T14552] overlayfs: missing 'workdir' [ 872.269014][T14569] netlink: 'syz.4.2842': attribute type 4 has an invalid length. [ 872.312906][T14569] netlink: 'syz.4.2842': attribute type 17 has an invalid length. [ 872.898362][T14578] netlink: 'syz.0.2844': attribute type 10 has an invalid length. [ 872.914110][T14578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2844'. [ 879.211771][T14612] netlink: 'syz.1.2853': attribute type 4 has an invalid length. [ 879.232305][T14612] netlink: 'syz.1.2853': attribute type 17 has an invalid length. [ 881.259031][T14622] netlink: 'syz.1.2855': attribute type 10 has an invalid length. [ 881.307422][T14622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2855'. [ 882.737869][ T1144] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 882.934203][ T1144] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 883.134567][ T50] wlan1: authentication with 08:02:11:00:00:00 timed out [ 883.681058][T14638] tipc: Started in network mode [ 883.686205][T14638] tipc: Node identity 4, cluster identity 4711 [ 883.693743][T14638] tipc: Node number set to 4 [ 883.734130][T14642] 9pnet_fd: Insufficient options for proto=fd [ 885.037172][T14665] netlink: 'syz.1.2869': attribute type 10 has an invalid length. [ 885.078296][T14665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2869'. [ 885.155660][T14659] overlayfs: failed to clone upperpath [ 885.243558][T11077] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 885.527864][T11077] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.538518][T11077] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 885.551904][T11077] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 888.068667][T11077] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.503362][T11077] usb 5-1: config 0 descriptor?? [ 892.513671][T11077] usb 5-1: can't set config #0, error -71 [ 892.521179][T11077] usb 5-1: USB disconnect, device number 11 [ 894.947004][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 895.251423][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 895.423015][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 895.562821][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 895.660989][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.685633][ T9] usb 5-1: config 0 descriptor?? [ 895.712732][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 896.104359][ T9] usb 5-1: USB disconnect, device number 12 [ 896.703576][ T28] audit: type=1326 audit(1763602890.902:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14746 comm="syz.1.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1cf8f749 code=0x7ffc0000 [ 896.792975][ T28] audit: type=1326 audit(1763602890.902:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14746 comm="syz.1.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1cf8f749 code=0x7ffc0000 [ 896.846225][ T28] audit: type=1326 audit(1763602890.902:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14746 comm="syz.1.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c1cf8f749 code=0x7ffc0000 [ 897.022564][ T28] audit: type=1326 audit(1763602890.902:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14746 comm="syz.1.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1cf8f749 code=0x7ffc0000 [ 897.053528][ T28] audit: type=1326 audit(1763602890.902:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14746 comm="syz.1.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8c1cf8f749 code=0x7ffc0000 [ 897.271509][T14752] loop4: detected capacity change from 0 to 32768 [ 897.405544][T14752] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.2896 (14752) [ 898.083905][ T28] audit: type=1326 audit(1763602890.902:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14746 comm="syz.1.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1cf8f749 code=0x7ffc0000 [ 898.113669][T14752] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 898.123932][T14752] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 898.133197][T14752] BTRFS info (device loop4): force zlib compression, level 3 [ 898.140868][T14752] BTRFS info (device loop4): force clearing of disk cache [ 898.148119][T14752] BTRFS info (device loop4): setting nodatasum [ 898.154437][T14752] BTRFS info (device loop4): use zlib compression, level 3 [ 898.161740][T14752] BTRFS info (device loop4): enabling disk space caching [ 898.168875][T14752] BTRFS info (device loop4): disk space caching is enabled [ 898.181926][ T28] audit: type=1326 audit(1763602890.902:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14746 comm="syz.1.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1cf8f749 code=0x7ffc0000 [ 898.205066][ T28] audit: type=1326 audit(1763602890.902:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14746 comm="syz.1.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c1cf8f749 code=0x7ffc0000 [ 898.228457][ T28] audit: type=1326 audit(1763602890.902:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14746 comm="syz.1.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1cf8f749 code=0x7ffc0000 [ 898.251886][ T28] audit: type=1326 audit(1763602890.902:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14746 comm="syz.1.2894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1cf8f749 code=0x7ffc0000 [ 898.285504][T14760] netlink: 'syz.0.2897': attribute type 4 has an invalid length. [ 898.434183][T14760] netlink: 'syz.0.2897': attribute type 17 has an invalid length. [ 898.614547][T14752] BTRFS info (device loop4): enabling ssd optimizations [ 898.621596][T14752] BTRFS info (device loop4): auto enabling async discard [ 898.903638][T14752] BTRFS info (device loop4): rebuilding free space tree [ 898.957910][T14752] BTRFS info (device loop4): disabling free space tree [ 898.965049][T14752] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 898.974908][T14752] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 900.038417][T11482] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 902.801797][T14790] overlayfs: missing 'workdir' [ 905.269669][T14822] loop4: detected capacity change from 0 to 64 [ 905.345270][T14822] hfs: get root inode failed [ 905.550146][T14743] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 914.411051][T14882] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 915.178057][T14889] overlayfs: missing 'lowerdir' [ 915.642841][T14903] overlayfs: missing 'workdir' [ 915.869941][T14909] tipc: Started in network mode [ 915.988469][T14909] tipc: Node identity 4, cluster identity 4711 [ 916.028448][T14909] tipc: Node number set to 4 [ 919.689534][T14940] overlayfs: missing 'lowerdir' [ 919.748213][T14946] tipc: Started in network mode [ 919.753346][T14946] tipc: Node identity 4, cluster identity 4711 [ 919.761344][T14946] tipc: Node number set to 4 [ 925.870594][T14991] overlayfs: missing 'workdir' [ 929.784090][T15020] netlink: 'syz.1.2964': attribute type 10 has an invalid length. [ 929.813976][T15020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2964'. [ 930.171223][T15035] netlink: 'syz.4.2969': attribute type 4 has an invalid length. [ 930.210558][T15035] netlink: 'syz.4.2969': attribute type 17 has an invalid length. [ 931.939713][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.986952][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.769090][T15076] netlink: 'syz.2.2980': attribute type 4 has an invalid length. [ 934.859371][T15076] netlink: 'syz.2.2980': attribute type 17 has an invalid length. [ 936.446243][T15092] netlink: 'syz.0.2992': attribute type 4 has an invalid length. [ 936.489869][T15092] netlink: 'syz.0.2992': attribute type 17 has an invalid length. [ 940.723440][T15123] SET target dimension over the limit! [ 944.153875][T15156] netlink: 'syz.1.3001': attribute type 4 has an invalid length. [ 944.430064][T15164] netlink: 'syz.1.3001': attribute type 17 has an invalid length. [ 947.366467][T15181] netlink: 'syz.0.3006': attribute type 6 has an invalid length. [ 948.555303][T15181] Invalid option length (65058) for dns_resolver key [ 949.021525][T15195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3008'. [ 952.028349][T15215] overlayfs: failed to clone lowerpath [ 952.122417][T15216] overlayfs: failed to clone upperpath [ 952.231674][T15218] "syz.4.3016" (15218) uses obsolete ecb(arc4) skcipher [ 954.576797][T15230] netlink: 'syz.4.3019': attribute type 4 has an invalid length. [ 954.636145][T15230] netlink: 'syz.4.3019': attribute type 17 has an invalid length. [ 954.909310][T15239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3021'. [ 958.807550][T15279] netlink: 'syz.1.3032': attribute type 5 has an invalid length. [ 960.139654][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3035'. [ 961.515141][T15321] xt_CT: You must specify a L4 protocol and not use inversions on it [ 963.473013][T15339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3048'. [ 964.543117][T15350] netlink: 'syz.4.3052': attribute type 10 has an invalid length. [ 964.551360][T15350] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3052'. [ 964.564155][T15350] batman_adv: batadv0: Adding interface: virt_wifi0 [ 964.570807][T15350] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.596945][T15350] batman_adv: batadv0: Interface activated: virt_wifi0 [ 968.039951][T15383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3060'. [ 969.889543][T15412] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 969.896295][T15412] PKCS7: Only support pkcs7_signedData type [ 971.470237][T15418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3068'. [ 971.665651][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3068'. [ 971.681931][T15425] bond2 (unregistering): Released all slaves [ 973.372706][T15439] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.3071'. [ 973.799640][T15443] (null): rxe_set_mtu: Set mtu to 1024 [ 973.808575][T15443] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 976.586604][T15471] netlink: 'syz.2.3077': attribute type 5 has an invalid length. [ 978.331619][T15486] 9pnet_fd: Insufficient options for proto=fd [ 981.218758][T15517] netlink: 'syz.2.3089': attribute type 4 has an invalid length. [ 981.286173][T15517] netlink: 'syz.2.3089': attribute type 17 has an invalid length. [ 981.627388][T15521] 9pnet_fd: Insufficient options for proto=fd [ 981.786676][T15524] netlink: 'syz.2.3093': attribute type 4 has an invalid length. [ 981.840053][T15526] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3094'. [ 981.850859][T15524] netlink: 'syz.2.3093': attribute type 17 has an invalid length. [ 983.567578][T15551] 9pnet_fd: Insufficient options for proto=fd [ 983.699380][T15553] netlink: 'syz.2.3104': attribute type 4 has an invalid length. [ 983.732575][T15553] netlink: 'syz.2.3104': attribute type 17 has an invalid length. [ 983.916045][T15557] netlink: 'syz.2.3105': attribute type 4 has an invalid length. [ 983.981288][T15557] netlink: 'syz.2.3105': attribute type 17 has an invalid length. [ 985.687867][T15572] netlink: 'syz.4.3108': attribute type 3 has an invalid length. [ 985.892520][T15574] netlink: 'syz.2.3109': attribute type 4 has an invalid length. [ 986.765520][T15581] 9pnet_fd: Insufficient options for proto=fd [ 990.374971][T15614] 9pnet_fd: Insufficient options for proto=fd [ 990.631340][T15621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3120'. [ 990.655073][T15617] /dev/nullb0: Can't lookup blockdev [ 992.113729][T15637] netlink: 'syz.0.3129': attribute type 4 has an invalid length. [ 992.146646][T15637] netlink: 'syz.0.3129': attribute type 17 has an invalid length. [ 993.499258][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.505804][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.856523][T15649] 9pnet_fd: Insufficient options for proto=fd [ 994.368062][T15659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3134'. [ 995.061828][T15669] netlink: 'syz.1.3139': attribute type 4 has an invalid length. [ 995.095705][T15669] netlink: 'syz.1.3139': attribute type 17 has an invalid length. [ 995.355832][T15674] 9pnet_fd: Insufficient options for proto=fd [ 996.034413][T15679] netlink: 'syz.1.3143': attribute type 4 has an invalid length. [ 996.073198][T15679] netlink: 'syz.1.3143': attribute type 17 has an invalid length. [ 996.606215][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3145'. [ 997.730908][T15701] netlink: 'syz.1.3149': attribute type 4 has an invalid length. [ 997.760708][T15701] netlink: 'syz.1.3149': attribute type 17 has an invalid length. [ 998.000160][T15705] 9pnet_fd: Insufficient options for proto=fd [ 1002.387106][T15735] netlink: 'syz.2.3159': attribute type 4 has an invalid length. [ 1002.523747][T15735] netlink: 'syz.2.3159': attribute type 17 has an invalid length. [ 1002.637978][T15741] 9pnet_fd: Insufficient options for proto=fd [ 1010.964153][T15771] netlink: 'syz.4.3170': attribute type 4 has an invalid length. [ 1011.090752][T15771] netlink: 'syz.4.3170': attribute type 17 has an invalid length. [ 1012.767446][T15783] netlink: 'syz.0.3172': attribute type 4 has an invalid length. [ 1012.904594][T15783] netlink: 'syz.0.3172': attribute type 17 has an invalid length. [ 1012.964549][T15786] 9pnet_fd: Insufficient options for proto=fd [ 1016.167104][T15819] netlink: 'syz.2.3182': attribute type 4 has an invalid length. [ 1016.994115][T15828] netlink: 'syz.2.3182': attribute type 17 has an invalid length. [ 1017.193050][T15834] 9pnet_fd: Insufficient options for proto=fd [ 1022.844916][ T5103] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1023.503738][T15901] netlink: 'syz.1.3213': attribute type 4 has an invalid length. [ 1023.526606][T15901] netlink: 'syz.1.3213': attribute type 17 has an invalid length. [ 1023.729755][T15908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3206'. [ 1026.853705][ T5103] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1026.864103][ T5103] Bluetooth: hci0: Injecting HCI hardware error event [ 1026.875285][ T5103] Bluetooth: hci0: hardware error 0x00 [ 1028.953509][ T5103] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1035.646041][T15998] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.3229'. [ 1037.814912][T16028] netlink: 'syz.2.3239': attribute type 4 has an invalid length. [ 1037.844581][T16028] netlink: 'syz.2.3239': attribute type 17 has an invalid length. [ 1043.460724][T16098] netlink: 'syz.0.3257': attribute type 10 has an invalid length. [ 1047.172588][T16125] netlink: 'syz.0.3269': attribute type 4 has an invalid length. [ 1047.217287][T16125] netlink: 'syz.0.3269': attribute type 17 has an invalid length. [ 1047.502795][T16136] netlink: 'syz.0.3274': attribute type 1 has an invalid length. [ 1047.525636][T16136] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1050.105400][T16136] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1050.130202][T16136] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1050.151639][T16136] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1050.212057][T16148] ip6erspan0: entered promiscuous mode [ 1050.242686][T16148] bond3: (slave ip6erspan0): making interface the new active one [ 1050.260056][T16148] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1050.298992][T16153] macvlan2: entered promiscuous mode [ 1050.326106][T16153] bond3: entered promiscuous mode [ 1050.332336][T16153] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1050.349435][T16153] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of ip6erspan0 [ 1050.369210][T16153] bond3: left promiscuous mode [ 1050.857709][T16167] netlink: 'syz.0.3282': attribute type 4 has an invalid length. [ 1050.928788][T16167] netlink: 'syz.0.3282': attribute type 17 has an invalid length. [ 1051.068355][T16174] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3284'. [ 1052.017336][T16198] netlink: 'syz.2.3295': attribute type 4 has an invalid length. [ 1052.057757][T16198] netlink: 'syz.2.3295': attribute type 17 has an invalid length. [ 1052.275525][T16203] netlink: 'syz.2.3298': attribute type 4 has an invalid length. [ 1052.309681][T16203] netlink: 'syz.2.3298': attribute type 17 has an invalid length. [ 1052.402875][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3297'. [ 1054.779488][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.787652][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.359603][T16233] netlink: 'syz.1.3308': attribute type 4 has an invalid length. [ 1055.409137][T16233] netlink: 'syz.1.3308': attribute type 17 has an invalid length. [ 1055.715357][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3310'. [ 1059.105234][T16277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3320'. [ 1059.528844][T16290] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3324'. [ 1061.919996][T16301] virtio-fs: tag not found [ 1064.904219][T16321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3332'. [ 1069.465609][T16382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3348'. [ 1071.925259][T16408] netlink: 'syz.1.3356': attribute type 1 has an invalid length. [ 1072.564921][T16408] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1072.745275][T16411] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1072.907095][T16411] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1072.971533][T16411] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1073.081511][T16412] ip6erspan0: entered promiscuous mode [ 1073.471496][T16412] bond2: (slave ip6erspan0): making interface the new active one [ 1073.767422][T16412] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1073.847269][T16408] macvlan2: entered promiscuous mode [ 1073.853771][T16408] bond2: entered promiscuous mode [ 1073.860774][T16408] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1073.894871][T16408] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of ip6erspan0 [ 1073.912104][T16408] bond2: left promiscuous mode [ 1074.229528][T16424] 9pnet: Could not find request transport: fd0x0000000000000005 [ 1078.514769][T16463] 9pnet_fd: Insufficient options for proto=fd [ 1078.702197][T16465] netlink: 'syz.2.3371': attribute type 1 has an invalid length. [ 1078.892952][T16465] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1079.078627][T16471] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1079.114363][T16471] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1079.127923][T16471] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1079.200240][T16465] ip6erspan0: entered promiscuous mode [ 1079.210449][T16465] bond2: (slave ip6erspan0): making interface the new active one [ 1079.221487][T16465] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1079.235285][T16474] netlink: 'syz.1.3374': attribute type 4 has an invalid length. [ 1079.259402][T16477] macvlan2: entered promiscuous mode [ 1079.297425][T16477] bond2: entered promiscuous mode [ 1079.314479][T16477] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1079.359856][T16477] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of ip6erspan0 [ 1079.377698][T16477] bond2: left promiscuous mode [ 1079.438447][T16474] netlink: 'syz.1.3374': attribute type 17 has an invalid length. [ 1081.363163][T16496] 9pnet_fd: Insufficient options for proto=fd [ 1082.306774][T16512] netlink: 'syz.0.3386': attribute type 4 has an invalid length. [ 1082.406905][T16512] netlink: 'syz.0.3386': attribute type 17 has an invalid length. [ 1088.425599][T16526] ptrace attach of ""[16529] was attempted by "./syz-executor exec"[16526] [ 1088.970096][T16535] netlink: 'syz.1.3394': attribute type 4 has an invalid length. [ 1089.009518][T16535] netlink: 'syz.1.3394': attribute type 17 has an invalid length. [ 1089.264579][T16545] netlink: 'syz.4.3397': attribute type 4 has an invalid length. [ 1089.287498][T16545] netlink: 'syz.4.3397': attribute type 17 has an invalid length. [ 1090.448732][T16554] netlink: 'syz.0.3400': attribute type 4 has an invalid length. [ 1090.480749][T16554] netlink: 'syz.0.3400': attribute type 17 has an invalid length. [ 1091.330082][T16558] netlink: 'syz.4.3401': attribute type 1 has an invalid length. [ 1091.386226][T16558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1091.736325][T16566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1091.767245][T16566] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1091.802064][T16566] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 1091.968141][T16558] ip6erspan0: entered promiscuous mode [ 1092.017313][T16558] bond1: (slave ip6erspan0): making interface the new active one [ 1092.637086][T16558] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1092.653127][T16570] macvlan2: entered promiscuous mode [ 1092.661451][T16570] bond1: entered promiscuous mode [ 1092.669065][T16570] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1092.715505][T16570] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of ip6erspan0 [ 1092.798000][T16570] bond1: left promiscuous mode [ 1093.191766][T16585] netlink: 'syz.2.3407': attribute type 4 has an invalid length. [ 1093.215308][T16585] netlink: 'syz.2.3407': attribute type 17 has an invalid length. [ 1093.247309][T16586] netlink: 'syz.0.3406': attribute type 4 has an invalid length. [ 1096.667735][T16612] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1096.676703][T16612] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1096.685549][T16612] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1096.694379][T16612] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1096.703198][T16612] geneve2: entered promiscuous mode [ 1096.708710][T16612] geneve2: entered allmulticast mode [ 1097.489097][T16624] validate_nla: 1 callbacks suppressed [ 1097.489116][T16624] netlink: 'syz.2.3420': attribute type 4 has an invalid length. [ 1097.544596][T16624] netlink: 'syz.2.3420': attribute type 17 has an invalid length. [ 1098.866991][T16627] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1098.931174][ T5103] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 1098.950029][ T5103] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 1099.227608][T16638] netlink: 'syz.2.3424': attribute type 4 has an invalid length. [ 1099.247173][T16638] netlink: 'syz.2.3424': attribute type 17 has an invalid length. [ 1103.023447][ T5103] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1103.033974][ T5103] Bluetooth: hci4: Injecting HCI hardware error event [ 1103.043142][T15929] Bluetooth: hci4: hardware error 0x00 [ 1104.041459][T16681] netlink: 'syz.1.3433': attribute type 4 has an invalid length. [ 1104.086395][T16681] netlink: 'syz.1.3433': attribute type 17 has an invalid length. [ 1105.093670][T15929] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1111.479026][T16731] netlink: 'syz.1.3444': attribute type 4 has an invalid length. [ 1111.515609][T16731] netlink: 'syz.1.3444': attribute type 17 has an invalid length. [ 1115.317221][T16767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1115.521389][T16767] batadv_slave_0: entered promiscuous mode [ 1116.232946][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.239622][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.051395][T16796] siw: device registration error -23 [ 1122.508854][T16835] netlink: 'syz.0.3473': attribute type 10 has an invalid length. [ 1128.931379][T16888] netlink: 'syz.0.3486': attribute type 10 has an invalid length. [ 1128.956359][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 1128.956379][ T28] audit: type=1800 audit(1763603122.663:168): pid=16886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3485" name="SYSV798dd824" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1131.691791][T16890] ptrace attach of ""[16891] was attempted by "./syz-executor exec"[16890] [ 1133.376036][ T27] IPVS: starting estimator thread 0... [ 1133.503577][T16904] IPVS: using max 15 ests per chain, 36000 per kthread [ 1135.144908][T16917] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1137.354118][T16942] netlink: 'syz.2.3499': attribute type 10 has an invalid length. [ 1137.426681][T16946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1137.448981][T16946] batadv_slave_0: entered promiscuous mode [ 1142.081280][T16985] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1143.330292][T16994] netlink: 'syz.2.3512': attribute type 4 has an invalid length. [ 1143.380434][T16994] netlink: 'syz.2.3512': attribute type 17 has an invalid length. [ 1143.935493][T17000] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1144.020967][T17009] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3515'. [ 1144.567594][T17005] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1144.676418][T17005] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 1144.796841][T17011] ipvlan2: entered promiscuous mode [ 1144.848655][T17000] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1146.609223][T17035] netlink: 'syz.0.3525': attribute type 4 has an invalid length. [ 1146.752727][T17035] netlink: 'syz.0.3525': attribute type 17 has an invalid length. [ 1147.254760][T17038] netlink: 'syz.1.3527': attribute type 1 has an invalid length. [ 1147.677585][T17044] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1148.925049][T17044] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1148.966764][T17038] bond3: (slave bridge8): Enslaving as an active interface with a down link [ 1149.576728][T17044] macvlan2: entered promiscuous mode [ 1149.600540][T17044] macvlan2: entered allmulticast mode [ 1149.630564][T17044] bond3: entered promiscuous mode [ 1149.642946][T17044] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1149.661387][T17044] bond3: left promiscuous mode [ 1149.846282][T17056] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1149.877996][T17059] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1149.947871][ T71] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1150.083408][ T71] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1163.665943][T17169] batadv_slave_0: entered promiscuous mode [ 1167.681671][T17210] autofs4:pid:17210:autofs_fill_super: called with bogus options [ 1170.680992][ T28] audit: type=1326 audit(1763603164.833:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.4.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a078f749 code=0x7fc00000 [ 1170.791432][ T28] audit: type=1326 audit(1763603164.993:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17235 comm="syz.4.3580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a078f749 code=0x7fc00000 [ 1171.487752][T17253] ceph: No source [ 1171.498617][T17253] kAFS: unable to lookup cell '\/' [ 1178.252711][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.260018][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.848877][T17333] netlink: 'syz.1.3609': attribute type 17 has an invalid length. [ 1185.778337][T17378] netlink: 'syz.4.3622': attribute type 17 has an invalid length. [ 1190.502483][T17416] netlink: 'syz.0.3633': attribute type 17 has an invalid length. [ 1194.720103][T17458] netlink: 'syz.1.3645': attribute type 17 has an invalid length. [ 1199.419763][T17496] netlink: 'syz.1.3657': attribute type 17 has an invalid length. [ 1199.672890][ T28] audit: type=1326 audit(1763603193.833:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17491 comm="syz.2.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60358f749 code=0x7fc00000 [ 1200.497106][T17502] 9pnet_virtio: no channels available for device syz [ 1200.744695][ T28] audit: type=1326 audit(1763603194.943:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17491 comm="syz.2.3656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb60358f749 code=0x7fc00000 [ 1203.742394][T17533] netlink: 'syz.1.3667': attribute type 17 has an invalid length. [ 1206.999697][ T28] audit: type=1326 audit(1763603201.183:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17561 comm="syz.1.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1cf8f749 code=0x7fc00000 [ 1207.373927][T17575] 9pnet_fd: Insufficient options for proto=fd [ 1207.722969][ T28] audit: type=1326 audit(1763603201.923:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17561 comm="syz.1.3675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1cf8f749 code=0x7fc00000 [ 1211.426273][T17608] 9pnet_fd: Insufficient options for proto=fd [ 1215.524345][T17642] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1216.855025][T17648] SET target dimension over the limit! [ 1217.731836][T17652] 9pnet_fd: Insufficient options for proto=fd [ 1225.346340][T17694] 9pnet_fd: Insufficient options for proto=fd [ 1230.804125][T17740] 9pnet_fd: Insufficient options for proto=fd [ 1234.440823][T17782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3734'. [ 1239.098137][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.105444][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.269018][T17830] capability: warning: `syz.2.3747' uses deprecated v2 capabilities in a way that may be insecure [ 1241.312064][T17851] 9pnet_fd: Insufficient options for proto=fd [ 1241.910666][T17850] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1241.918678][T17850] IPv6: NLM_F_CREATE should be set when creating new route [ 1241.926010][T17850] IPv6: NLM_F_CREATE should be set when creating new route [ 1243.955971][T17873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3761'. [ 1244.992806][T17885] netlink: 'syz.1.3766': attribute type 17 has an invalid length. [ 1245.270017][T17893] overlayfs: failed to clone upperpath [ 1248.141716][T17919] netlink: 'syz.0.3776': attribute type 17 has an invalid length. [ 1250.245162][T17941] netlink: 'syz.1.3781': attribute type 17 has an invalid length. [ 1251.589103][T17964] netlink: 'syz.2.3787': attribute type 17 has an invalid length. [ 1251.780108][T17971] netlink: 'syz.1.3792': attribute type 17 has an invalid length. [ 1253.439741][T17991] netlink: 'syz.0.3801': attribute type 17 has an invalid length. [ 1253.470077][T17995] netlink: 'syz.1.3800': attribute type 17 has an invalid length. [ 1254.535092][T18007] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1255.738566][T18020] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 1257.962468][T18030] netlink: 'syz.0.3812': attribute type 17 has an invalid length. [ 1260.299742][T18056] netlink: 'syz.4.3821': attribute type 17 has an invalid length. [ 1262.462233][T18076] netlink: 'syz.4.3826': attribute type 17 has an invalid length. [ 1263.221278][T18081] (null): rxe_set_mtu: Set mtu to 1024 [ 1263.227089][T18081] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 1264.668035][T18100] netlink: 'syz.2.3831': attribute type 17 has an invalid length. [ 1267.624186][T18127] netlink: 'syz.1.3837': attribute type 17 has an invalid length. [ 1272.723701][T18157] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1274.956077][T18169] 9pnet: Could not find request transport: fd0x0000000000000007 [ 1276.954835][T18203] 9pnet: Could not find request transport: fd0x0000000000000007 [ 1277.697605][T18212] netlink: 'syz.1.3863': attribute type 17 has an invalid length. [ 1279.169703][T18231] netlink: 'syz.1.3870': attribute type 17 has an invalid length. [ 1280.308066][T18244] 9pnet: Could not find request transport: fd0x0000000000000007 [ 1280.331613][T18249] netlink: 'syz.4.3875': attribute type 17 has an invalid length. [ 1281.267796][T18262] netlink: 'syz.2.3880': attribute type 17 has an invalid length. [ 1283.615299][T18286] netlink: 'syz.4.3885': attribute type 17 has an invalid length. [ 1284.268089][T18292] 9pnet_fd: Insufficient options for proto=fd [ 1285.315535][T18302] netlink: 'syz.1.3890': attribute type 17 has an invalid length. [ 1286.871435][T18314] ptrace attach of "./syz-executor exec"[5792] was attempted by "./syz-executor exec"[18314] [ 1287.803516][T18325] netlink: 'syz.2.3905': attribute type 21 has an invalid length. [ 1287.842816][T18325] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3905'. [ 1287.871055][T18325] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3905'. [ 1287.882955][T18323] netlink: 'syz.1.3897': attribute type 17 has an invalid length. [ 1288.954603][T18336] netlink: 'syz.0.3900': attribute type 17 has an invalid length. [ 1291.635055][T18360] netlink: 'syz.1.3908': attribute type 17 has an invalid length. [ 1295.902774][T18407] netlink: 'syz.1.3919': attribute type 17 has an invalid length. [ 1296.368523][T18421] netlink: 'syz.0.3925': attribute type 17 has an invalid length. [ 1297.039596][T18425] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1297.049216][T18425] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1297.058882][T18425] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1297.320035][ T28] audit: type=1326 audit(1763603291.523:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.4.3927" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14a078f749 code=0x0 [ 1299.324462][T18451] netlink: 'syz.1.3932': attribute type 17 has an invalid length. [ 1299.515322][T18454] netlink: 'syz.0.3933': attribute type 17 has an invalid length. [ 1299.898180][T18465] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3936'. [ 1299.913106][T18465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3936'. [ 1300.556815][T18466] netlink: 'syz.0.3937': attribute type 17 has an invalid length. [ 1300.634047][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.640675][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.707518][T18484] bridge9: entered promiscuous mode [ 1301.713101][T18484] bridge9: entered allmulticast mode [ 1302.567603][T18483] netlink: 'syz.4.3944': attribute type 17 has an invalid length. [ 1303.451734][T18489] netlink: 'syz.1.3946': attribute type 4 has an invalid length. [ 1303.596776][T18489] netlink: 'syz.1.3946': attribute type 17 has an invalid length. [ 1304.601448][T18509] (null): rxe_set_mtu: Set mtu to 1024 [ 1304.610616][T18509] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 1305.419912][T18517] netlink: 'syz.1.3955': attribute type 17 has an invalid length. [ 1310.052287][T18538] netlink: 'syz.0.3958': attribute type 4 has an invalid length. [ 1310.094812][T18538] netlink: 'syz.0.3958': attribute type 17 has an invalid length. [ 1314.076984][T18576] (null): rxe_set_mtu: Set mtu to 1024 [ 1314.082875][T18576] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 1320.243549][T18621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1320.294298][T18621] batadv_slave_0: entered promiscuous mode [ 1330.542362][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4013'. [ 1335.344889][T18766] MTD: Couldn't look up './file0': -15 [ 1335.425671][T18770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4027'. [ 1335.443439][T18770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4027'. [ 1338.260455][T18781] netlink: 'syz.4.4030': attribute type 4 has an invalid length. [ 1344.803031][T18823] netlink: 'syz.4.4040': attribute type 4 has an invalid length. [ 1348.797561][T18859] netlink: 'syz.1.4050': attribute type 4 has an invalid length. [ 1350.703291][T18872] overlayfs: failed to clone upperpath [ 1353.815879][T18895] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1355.210546][T18905] netlink: 'syz.1.4060': attribute type 4 has an invalid length. [ 1355.510554][T18909] tipc: Enabled bearer , priority 0 [ 1359.159457][T18939] overlayfs: failed to clone upperpath [ 1360.301782][T18943] netlink: 'syz.0.4070': attribute type 4 has an invalid length. [ 1362.181989][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.188645][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.247775][T18985] netlink: 'syz.0.4081': attribute type 4 has an invalid length. [ 1367.631075][T19013] sctp: [Deprecated]: syz.1.4088 (pid 19013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1367.631075][T19013] Use struct sctp_sack_info instead [ 1369.572434][T19030] netlink: 'syz.2.4092': attribute type 4 has an invalid length. [ 1373.237817][T19065] netlink: 'syz.0.4103': attribute type 10 has an invalid length. [ 1373.261669][T19066] netlink: 'syz.2.4104': attribute type 4 has an invalid length. [ 1374.063503][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.113888][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.391292][T19101] netlink: 'syz.0.4115': attribute type 4 has an invalid length. [ 1381.573860][T19114] Bluetooth: hci1: command 0x0406 tx timeout [ 1382.044816][T19139] netlink: 'syz.1.4124': attribute type 4 has an invalid length. [ 1382.956707][T19150] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1385.975637][T19172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1386.004964][T19172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4134'. [ 1386.632622][T19172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1386.858629][T19182] netlink: 'syz.4.4135': attribute type 4 has an invalid length. [ 1392.147841][T19215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4143'. [ 1394.110432][T19235] netlink: 'syz.4.4147': attribute type 4 has an invalid length. [ 1396.672043][T19249] sctp: [Deprecated]: syz.4.4154 (pid 19249) Use of int in max_burst socket option. [ 1396.672043][T19249] Use struct sctp_assoc_value instead [ 1397.358649][T19260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4155'. [ 1398.162235][T19267] netlink: 'syz.4.4159': attribute type 4 has an invalid length. [ 1402.061821][ T28] audit: type=1326 audit(1763603396.263:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19282 comm="syz.1.4162" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c1cf8f749 code=0x0 [ 1402.572208][T19299] netlink: 'syz.2.4166': attribute type 33 has an invalid length. [ 1402.580571][T19299] netlink: 51 bytes leftover after parsing attributes in process `syz.2.4166'. [ 1403.251497][T19304] netlink: 'syz.4.4168': attribute type 4 has an invalid length. [ 1410.528996][T19346] netlink: 'syz.4.4179': attribute type 4 has an invalid length. [ 1413.378911][T19385] netlink: 'syz.4.4190': attribute type 4 has an invalid length. [ 1415.944555][T19414] netlink: 'syz.0.4200': attribute type 4 has an invalid length. [ 1422.549052][T19454] netlink: 'syz.0.4211': attribute type 4 has an invalid length. [ 1423.419069][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.426185][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.344233][T19494] netlink: 'syz.1.4221': attribute type 4 has an invalid length. [ 1432.168734][T19529] netlink: 'syz.1.4231': attribute type 4 has an invalid length. [ 1434.147989][T19549] o2cb: This node has not been configured. [ 1434.154460][T19549] o2cb: Cluster check failed. Fix errors before retrying. [ 1434.162015][T19549] (syz.4.4236,19549,0):user_dlm_register:674 ERROR: status = -22 [ 1434.170019][T19549] (syz.4.4236,19549,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1434.975315][T19561] overlayfs: failed to clone upperpath [ 1435.700712][T19566] netlink: 'syz.1.4242': attribute type 4 has an invalid length. [ 1436.591955][T19573] tipc: Enabling of bearer rejected, already enabled [ 1438.808240][T19592] netlink: 'syz.0.4251': attribute type 4 has an invalid length. [ 1439.532683][T19599] syz_tun: entered allmulticast mode [ 1439.564956][T19600] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1439.695442][T19600] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1439.787044][T19597] syz_tun: left allmulticast mode [ 1439.858497][T19600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4253'. [ 1443.273962][T19640] overlayfs: failed to clone upperpath [ 1444.492872][T19649] overlayfs: failed to clone upperpath [ 1446.766510][T19667] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1446.792738][T19667] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1446.881578][T19667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4270'. [ 1446.998637][T19667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.007388][T19667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.063757][ T28] audit: type=1326 audit(1763603445.263:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1cf8f749 code=0x7ffc0000 [ 1451.376602][ T28] audit: type=1326 audit(1763603445.293:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1cf8f749 code=0x7ffc0000 [ 1451.430468][ T28] audit: type=1326 audit(1763603445.383:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f8c1cf8f749 code=0x7ffc0000 [ 1451.455495][ T28] audit: type=1326 audit(1763603445.383:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1cf8f749 code=0x7ffc0000 [ 1451.479318][ T28] audit: type=1326 audit(1763603445.383:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c1cf8f749 code=0x7ffc0000 [ 1451.511043][ T28] audit: type=1326 audit(1763603445.523:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c1cf91667 code=0x7ffc0000 [ 1451.534069][ T28] audit: type=1326 audit(1763603445.523:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8c1cf915dc code=0x7ffc0000 [ 1451.556698][ T28] audit: type=1326 audit(1763603445.523:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8c1cf91514 code=0x7ffc0000 [ 1451.637524][ T28] audit: type=1326 audit(1763603445.523:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8c1cf91514 code=0x7ffc0000 [ 1451.698390][ T28] audit: type=1326 audit(1763603445.523:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.1.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8c1cf8e3aa code=0x7ffc0000 [ 1460.587804][T19791] ceph: No mds server is up or the cluster is laggy [ 1467.423208][T19891] tipc: New replicast peer: 255.255.255.255 [ 1467.430099][T19891] tipc: Enabled bearer , priority 10 [ 1474.559662][T19944] overlayfs: failed to clone upperpath [ 1478.116451][T19979] overlayfs: failed to clone lowerpath [ 1479.670492][T19990] netlink: 'syz.2.4359': attribute type 29 has an invalid length. [ 1479.681253][T19990] netlink: 'syz.2.4359': attribute type 29 has an invalid length. [ 1479.697895][T19990] netlink: 'syz.2.4359': attribute type 29 has an invalid length. [ 1484.451973][T20028] 9pnet_fd: Insufficient options for proto=fd [ 1484.866607][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.873231][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1500.658107][T20209] 9pnet_fd: Insufficient options for proto=fd [ 1508.501057][T20287] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1519.590729][T20400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4492'. [ 1519.661579][T20400] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4492'. [ 1519.865385][T20410] sit0: entered promiscuous mode [ 1519.892093][T20410] netlink: 'syz.2.4497': attribute type 1 has an invalid length. [ 1519.925580][T20410] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4497'. [ 1546.227481][T20667] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1546.286505][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 1546.286526][ T28] audit: type=1800 audit(1763603540.483:208): pid=20667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4573" name="SYSV00000000" dev="hugetlbfs" ino=8 res=0 errno=0 [ 1546.334526][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.341345][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.830309][T20712] dns_resolver: Unsupported server list version (0) [ 1554.007827][T20723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4588'. [ 1554.061830][T20723] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4588'. [ 1554.449740][T20732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4589'. [ 1555.571116][T20739] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1555.876331][T20741] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1559.462319][T20768] sit0: left promiscuous mode [ 1559.673717][T20771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4600'. [ 1559.721703][T20771] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4600'. [ 1564.329647][T20808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4611'. [ 1564.356146][T20808] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4611'. [ 1570.848824][T20854] CIFS mount error: No usable UNC path provided in device string! [ 1570.848824][T20854] [ 1570.859134][T20854] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1578.812019][T20927] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4642'. [ 1578.822486][T20927] unsupported nlmsg_type 40 [ 1578.835192][T20927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4642'. [ 1578.862210][T20927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4642'. [ 1579.755423][T20931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4644'. [ 1579.806465][T20931] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4644'. [ 1583.818922][T20964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4654'. [ 1583.857542][T20964] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4654'. [ 1584.851522][T20987] bridge9: entered promiscuous mode [ 1584.856904][T20987] bridge9: entered allmulticast mode [ 1586.191976][T21010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4662'. [ 1589.245264][T21023] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4668'. [ 1594.441617][T21069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1604.178617][T21160] overlayfs: failed to clone upperpath [ 1605.028122][T21165] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4709'. [ 1607.724974][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.731343][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1618.550505][T21267] pimreg3: entered allmulticast mode [ 1625.926260][T21317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4749'. [ 1625.963782][T21317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4749'. [ 1626.303476][T21322] pimreg3: entered allmulticast mode [ 1636.170121][T21401] overlayfs: failed to clone upperpath [ 1636.917378][T21410] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4775'. [ 1637.433771][T21407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4774'. [ 1638.675889][T21425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4777'. [ 1641.315144][T21450] fuse: Unknown parameter 'fd0x0000000000000005' [ 1641.530714][T21450] ceph: No mds server is up or the cluster is laggy [ 1644.275195][T21472] overlayfs: failed to clone upperpath [ 1652.973705][T21557] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4816'. [ 1659.909962][T21593] netlink: 'syz.4.4826': attribute type 10 has an invalid length. [ 1667.732131][T21654] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1667.795756][T21654] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.803294][T21654] bridge0: port 2(bridge_slave_1) entered listening state [ 1667.811676][T21654] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.819132][T21654] bridge0: port 1(bridge_slave_0) entered listening state [ 1667.833352][T21654] bond_slave_0: entered promiscuous mode [ 1667.840871][T21654] bond_slave_1: entered promiscuous mode [ 1667.856215][T21654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1668.766600][T21654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1669.143935][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.150967][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.329431][T21661] IPVS: Scheduler module ip_vs_sip not found [ 1675.364432][T21711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4858'. [ 1680.242097][T21743] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4869'. [ 1685.669387][T21788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4882'. [ 1686.997162][T21802] x_tables: duplicate underflow at hook 1 [ 1689.812510][T21831] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4893'. [ 1689.957074][T21833] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4892'. [ 1697.919512][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1697.928357][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1698.384090][T21882] No such timeout policy "syz1" [ 1699.336893][T21901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4914'. [ 1705.340164][T21950] bond_slave_0: left promiscuous mode [ 1705.346372][T21950] bond_slave_1: left promiscuous mode [ 1705.351905][T21950] bond0: entered promiscuous mode [ 1705.357811][T21950] bond_slave_0: entered promiscuous mode [ 1705.363783][T21950] bond_slave_1: entered promiscuous mode [ 1710.947507][T22014] No such timeout policy "syz1" [ 1714.615944][T22046] x_tables: duplicate underflow at hook 1 [ 1715.607557][T22049] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4953'. [ 1718.600211][T22088] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4966'. [ 1719.952787][T22111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4969'. [ 1720.524611][T22115] netlink: 'syz.4.4976': attribute type 10 has an invalid length. [ 1720.532568][T22115] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4976'. [ 1721.396137][T22123] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4977'. [ 1723.996016][ T28] audit: type=1326 audit(1763603718.027:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22144 comm="syz.4.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a078f749 code=0x7ffc0000 [ 1724.402705][T22150] macvtap0: entered promiscuous mode [ 1724.408335][T22150] macvtap0: entered allmulticast mode [ 1724.413769][T22150] veth1_vlan: entered allmulticast mode [ 1724.555353][ T28] audit: type=1326 audit(1763603718.027:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22144 comm="syz.4.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a078f749 code=0x7ffc0000 [ 1724.578402][ T28] audit: type=1326 audit(1763603718.027:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22144 comm="syz.4.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f14a078f749 code=0x7ffc0000 [ 1724.607480][ T28] audit: type=1326 audit(1763603718.027:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22144 comm="syz.4.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a078f749 code=0x7ffc0000 [ 1724.637619][ T28] audit: type=1326 audit(1763603718.027:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22144 comm="syz.4.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a078f749 code=0x7ffc0000 [ 1724.695360][ T28] audit: type=1326 audit(1763603718.027:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22144 comm="syz.4.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14a078df90 code=0x7ffc0000 [ 1724.719477][ T28] audit: type=1326 audit(1763603718.037:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22144 comm="syz.4.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a078f749 code=0x7ffc0000 [ 1724.745729][ T28] audit: type=1326 audit(1763603718.037:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22144 comm="syz.4.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a078f749 code=0x7ffc0000 [ 1724.768693][ T28] audit: type=1326 audit(1763603718.037:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22144 comm="syz.4.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14a078df90 code=0x7ffc0000 [ 1724.791989][ T28] audit: type=1326 audit(1763603718.037:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22144 comm="syz.4.4984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14a078f749 code=0x7ffc0000 [ 1724.831001][T22156] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4989'. [ 1726.967189][ C0] hrtimer: interrupt took 72569 ns [ 1727.608540][T22186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4997'. [ 1727.986888][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1727.994177][ C1] bridge0: topology change detected, propagating [ 1728.002772][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1728.010068][ C1] bridge0: topology change detected, propagating [ 1730.553216][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.559834][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.179063][T22224] No such timeout policy "syz1" [ 1733.680578][T22227] bond0: (slave wlan1): Releasing backup interface [ 1733.696383][T22227] ------------[ cut here ]------------ [ 1733.702220][T22227] WARNING: CPU: 1 PID: 22227 at net/mac80211/chan.c:2022 ieee80211_link_release_channel+0x154/0x180 [ 1733.713296][T22227] Modules linked in: [ 1733.717249][T22227] CPU: 1 PID: 22227 Comm: syz.1.5008 Not tainted syzkaller #0 [ 1733.724776][T22227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1733.734954][T22227] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 1733.741970][T22227] Code: 7c 2d 00 00 74 08 48 89 df e8 68 39 e9 f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 41 b1 83 00 e8 fc dd 91 f7 <0f> 0b eb c5 48 c7 c1 1c c2 4a 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 1733.761803][T22227] RSP: 0018:ffffc9000e6670e8 EFLAGS: 00010287 [ 1733.767942][T22227] RAX: ffffffff89f3b194 RBX: ffff88805e239598 RCX: 0000000000080000 [ 1733.776112][T22227] RDX: ffffc9000ca2a000 RSI: 000000000007878c RDI: 000000000007878d [ 1733.784255][T22227] RBP: 0000000000000000 R08: ffffffff8e4a8d6f R09: 1ffffffff1c951ad [ 1733.792682][T22227] R10: dffffc0000000000 R11: fffffbfff1c951ae R12: ffff88805e23ac08 [ 1733.800930][T22227] R13: 1ffff1100bc472b3 R14: ffff88805e23a3c0 R15: dffffc0000000000 [ 1733.808959][T22227] FS: 00007f8c1ded76c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1733.817943][T22227] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1733.824629][T22227] CR2: fffffffffffffffd CR3: 0000000077a25000 CR4: 00000000003506e0 [ 1733.832790][T22227] Call Trace: [ 1733.836109][T22227] [ 1733.839049][T22227] ? trace_drv_return_void+0x1c0/0x1c0 [ 1733.844713][T22227] unregister_netdevice_many_notify+0x1257/0x1810 [ 1733.851244][T22227] ? unregister_netdevice_many+0x20/0x20 [ 1733.856958][T22227] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1733.862871][T22227] ? __lock_acquire+0x7c80/0x7c80 [ 1733.867963][T22227] unregister_netdevice_queue+0x324/0x360 [ 1733.873716][T22227] ? list_netdevice+0x730/0x730 [ 1733.878723][T22227] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1733.884641][T22227] _cfg80211_unregister_wdev+0x16b/0x580 [ 1733.890372][T22227] ieee80211_if_remove+0x1c1/0x2c0 [ 1733.895830][T22227] ieee80211_del_iface+0x19/0x20 [ 1733.900777][T22227] cfg80211_remove_virtual_intf+0x224/0x3c0 [ 1733.906856][T22227] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1733.912468][T22227] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 1733.918412][T22227] ? bpf_lsm_capable+0x9/0x10 [ 1733.923192][T22227] ? security_capable+0x89/0xb0 [ 1733.928119][T22227] genl_rcv_msg+0x60b/0x790 [ 1733.932660][T22227] ? genl_bind+0x360/0x360 [ 1733.937278][T22227] ? nl80211_exit+0x30/0x30 [ 1733.941880][T22227] ? nl80211_new_interface+0xeb0/0xeb0 [ 1733.947530][T22227] ? nl80211_pre_doit+0x930/0x930 [ 1733.952581][T22227] ? ref_tracker_free+0x634/0x7d0 [ 1733.957752][T22227] ? __copy_skb_header+0xa7/0x550 [ 1733.963016][T22227] netlink_rcv_skb+0x216/0x480 [ 1733.968010][T22227] ? genl_bind+0x360/0x360 [ 1733.972550][T22227] ? netlink_ack+0x1110/0x1110 [ 1733.977439][T22227] ? __lock_acquire+0x7c80/0x7c80 [ 1733.982554][T22227] ? down_read+0x1ac/0x2e0 [ 1733.987233][T22227] genl_rcv+0x28/0x40 [ 1733.991238][T22227] netlink_unicast+0x751/0x8d0 [ 1733.996105][T22227] netlink_sendmsg+0x8c1/0xbe0 [ 1734.001184][T22227] ? netlink_getsockopt+0x580/0x580 [ 1734.006437][T22227] ? aa_sock_msg_perm+0x94/0x150 [ 1734.011380][T22227] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1734.016707][T22227] ? security_socket_sendmsg+0x80/0xa0 [ 1734.022165][T22227] ? netlink_getsockopt+0x580/0x580 [ 1734.027403][T22227] ____sys_sendmsg+0x5bf/0x950 [ 1734.032353][T22227] ? __asan_memset+0x22/0x40 [ 1734.037145][T22227] ? __sys_sendmsg_sock+0x30/0x30 [ 1734.042285][T22227] ? __import_iovec+0x5f2/0x860 [ 1734.047319][T22227] ? import_iovec+0x73/0xa0 [ 1734.051848][T22227] ___sys_sendmsg+0x220/0x290 [ 1734.056691][T22227] ? __sys_sendmsg+0x270/0x270 [ 1734.061491][T22227] __se_sys_sendmsg+0x1a5/0x270 [ 1734.066420][T22227] ? __x64_sys_sendmsg+0x80/0x80 [ 1734.071372][T22227] ? lockdep_hardirqs_on+0x98/0x150 [ 1734.076712][T22227] do_syscall_64+0x55/0xb0 [ 1734.081144][T22227] ? clear_bhb_loop+0x40/0x90 [ 1734.085882][T22227] ? clear_bhb_loop+0x40/0x90 [ 1734.090579][T22227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1734.096660][T22227] RIP: 0033:0x7f8c1cf8f749 [ 1734.101560][T22227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1734.121262][T22227] RSP: 002b:00007f8c1ded7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1734.129827][T22227] RAX: ffffffffffffffda RBX: 00007f8c1d1e5fa0 RCX: 00007f8c1cf8f749 [ 1734.137838][T22227] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1734.146157][T22227] RBP: 00007f8c1d013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1734.154242][T22227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1734.162352][T22227] R13: 00007f8c1d1e6038 R14: 00007f8c1d1e5fa0 R15: 00007ffe2bc83c58 [ 1734.170417][T22227] [ 1734.173445][T22227] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1734.180719][T22227] CPU: 1 PID: 22227 Comm: syz.1.5008 Not tainted syzkaller #0 [ 1734.188175][T22227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1734.198426][T22227] Call Trace: [ 1734.201705][T22227] [ 1734.204643][T22227] dump_stack_lvl+0x16c/0x230 [ 1734.209327][T22227] ? show_regs_print_info+0x20/0x20 [ 1734.214532][T22227] ? load_image+0x3b0/0x3b0 [ 1734.219071][T22227] panic+0x2c0/0x710 [ 1734.222965][T22227] ? bpf_jit_dump+0xd0/0xd0 [ 1734.227477][T22227] __warn+0x2e0/0x470 [ 1734.231546][T22227] ? ieee80211_link_release_channel+0x154/0x180 [ 1734.237822][T22227] ? ieee80211_link_release_channel+0x154/0x180 [ 1734.244077][T22227] report_bug+0x2be/0x4f0 [ 1734.248558][T22227] ? ieee80211_link_release_channel+0x154/0x180 [ 1734.255021][T22227] ? ieee80211_link_release_channel+0x154/0x180 [ 1734.261278][T22227] ? ieee80211_link_release_channel+0x156/0x180 [ 1734.267522][T22227] handle_bug+0xcf/0x120 [ 1734.271780][T22227] exc_invalid_op+0x1a/0x50 [ 1734.276288][T22227] asm_exc_invalid_op+0x1a/0x20 [ 1734.281156][T22227] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 1734.288008][T22227] Code: 7c 2d 00 00 74 08 48 89 df e8 68 39 e9 f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 41 b1 83 00 e8 fc dd 91 f7 <0f> 0b eb c5 48 c7 c1 1c c2 4a 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 1734.307629][T22227] RSP: 0018:ffffc9000e6670e8 EFLAGS: 00010287 [ 1734.313870][T22227] RAX: ffffffff89f3b194 RBX: ffff88805e239598 RCX: 0000000000080000 [ 1734.321944][T22227] RDX: ffffc9000ca2a000 RSI: 000000000007878c RDI: 000000000007878d [ 1734.329920][T22227] RBP: 0000000000000000 R08: ffffffff8e4a8d6f R09: 1ffffffff1c951ad [ 1734.337896][T22227] R10: dffffc0000000000 R11: fffffbfff1c951ae R12: ffff88805e23ac08 [ 1734.345970][T22227] R13: 1ffff1100bc472b3 R14: ffff88805e23a3c0 R15: dffffc0000000000 [ 1734.354034][T22227] ? ieee80211_link_release_channel+0x154/0x180 [ 1734.360381][T22227] ? ieee80211_link_release_channel+0x154/0x180 [ 1734.366732][T22227] ? trace_drv_return_void+0x1c0/0x1c0 [ 1734.372212][T22227] unregister_netdevice_many_notify+0x1257/0x1810 [ 1734.378650][T22227] ? unregister_netdevice_many+0x20/0x20 [ 1734.384309][T22227] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1734.390236][T22227] ? __lock_acquire+0x7c80/0x7c80 [ 1734.395265][T22227] unregister_netdevice_queue+0x324/0x360 [ 1734.401014][T22227] ? list_netdevice+0x730/0x730 [ 1734.406083][T22227] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1734.412097][T22227] _cfg80211_unregister_wdev+0x16b/0x580 [ 1734.417745][T22227] ieee80211_if_remove+0x1c1/0x2c0 [ 1734.422879][T22227] ieee80211_del_iface+0x19/0x20 [ 1734.427837][T22227] cfg80211_remove_virtual_intf+0x224/0x3c0 [ 1734.433731][T22227] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1734.439293][T22227] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 1734.445194][T22227] ? bpf_lsm_capable+0x9/0x10 [ 1734.449933][T22227] ? security_capable+0x89/0xb0 [ 1734.454961][T22227] genl_rcv_msg+0x60b/0x790 [ 1734.459485][T22227] ? genl_bind+0x360/0x360 [ 1734.463919][T22227] ? nl80211_exit+0x30/0x30 [ 1734.468415][T22227] ? nl80211_new_interface+0xeb0/0xeb0 [ 1734.474129][T22227] ? nl80211_pre_doit+0x930/0x930 [ 1734.479238][T22227] ? ref_tracker_free+0x634/0x7d0 [ 1734.484353][T22227] ? __copy_skb_header+0xa7/0x550 [ 1734.489664][T22227] netlink_rcv_skb+0x216/0x480 [ 1734.494468][T22227] ? genl_bind+0x360/0x360 [ 1734.498919][T22227] ? netlink_ack+0x1110/0x1110 [ 1734.503697][T22227] ? __lock_acquire+0x7c80/0x7c80 [ 1734.508742][T22227] ? down_read+0x1ac/0x2e0 [ 1734.513164][T22227] genl_rcv+0x28/0x40 [ 1734.517173][T22227] netlink_unicast+0x751/0x8d0 [ 1734.521942][T22227] netlink_sendmsg+0x8c1/0xbe0 [ 1734.526803][T22227] ? netlink_getsockopt+0x580/0x580 [ 1734.532009][T22227] ? aa_sock_msg_perm+0x94/0x150 [ 1734.537036][T22227] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1734.542317][T22227] ? security_socket_sendmsg+0x80/0xa0 [ 1734.547982][T22227] ? netlink_getsockopt+0x580/0x580 [ 1734.553206][T22227] ____sys_sendmsg+0x5bf/0x950 [ 1734.557994][T22227] ? __asan_memset+0x22/0x40 [ 1734.562590][T22227] ? __sys_sendmsg_sock+0x30/0x30 [ 1734.567617][T22227] ? __import_iovec+0x5f2/0x860 [ 1734.572564][T22227] ? import_iovec+0x73/0xa0 [ 1734.577124][T22227] ___sys_sendmsg+0x220/0x290 [ 1734.581820][T22227] ? __sys_sendmsg+0x270/0x270 [ 1734.586620][T22227] __se_sys_sendmsg+0x1a5/0x270 [ 1734.591481][T22227] ? __x64_sys_sendmsg+0x80/0x80 [ 1734.596432][T22227] ? lockdep_hardirqs_on+0x98/0x150 [ 1734.601642][T22227] do_syscall_64+0x55/0xb0 [ 1734.606056][T22227] ? clear_bhb_loop+0x40/0x90 [ 1734.610758][T22227] ? clear_bhb_loop+0x40/0x90 [ 1734.615444][T22227] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1734.621335][T22227] RIP: 0033:0x7f8c1cf8f749 [ 1734.625837][T22227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1734.645455][T22227] RSP: 002b:00007f8c1ded7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1734.653987][T22227] RAX: ffffffffffffffda RBX: 00007f8c1d1e5fa0 RCX: 00007f8c1cf8f749 [ 1734.661959][T22227] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1734.670019][T22227] RBP: 00007f8c1d013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1734.677985][T22227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1734.686055][T22227] R13: 00007f8c1d1e6038 R14: 00007f8c1d1e5fa0 R15: 00007ffe2bc83c58 [ 1734.694310][T22227] [ 1734.697730][T22227] Kernel Offset: disabled [ 1734.702181][T22227] Rebooting in 86400 seconds..