last executing test programs: 8m6.690653843s ago: executing program 4 (id=476): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) 8m4.907497039s ago: executing program 4 (id=485): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 8m4.589455926s ago: executing program 4 (id=488): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x4c, 0x30, 0x9, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 8m4.241698044s ago: executing program 4 (id=489): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x24, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 8m3.276642684s ago: executing program 4 (id=491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486"], 0x20a) 8m2.820433921s ago: executing program 4 (id=495): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f20700", 0x0, 0x2f, 0x0, @private2, @remote}}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400)={[{@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7bf, &(0x7f0000000e00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000080)={0x1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0xfffffffd, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e0000008500000050000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x9) 7m46.938216899s ago: executing program 32 (id=495): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f20700", 0x0, 0x2f, 0x0, @private2, @remote}}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400)={[{@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7bf, &(0x7f0000000e00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x3ffff) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000080)={0x1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0xfffffffd, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e0000008500000050000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x9) 1m7.734209861s ago: executing program 5 (id=2567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 1m7.474064223s ago: executing program 5 (id=2570): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[], 0x50) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xffffffc1) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmmsg$inet6(r2, &(0x7f00000008c0), 0x0, 0x408c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 1m7.033311479s ago: executing program 5 (id=2575): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010002, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8no}, {@shortname_win95}, {@uni_xlate}, {@fat=@uid}, {@numtail}]}, 0x1, 0x36b, &(0x7f0000000500)="$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") syz_emit_ethernet(0x27, &(0x7f0000000280)={@link_local, @multicast, @void, {@generic={0x4305, "73c586ffcc2b7d817dac920684417fec9a8b44a8b7b8b6a5e1"}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) sendmsg$tipc(r4, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1m5.706910048s ago: executing program 5 (id=2585): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[], 0x50) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xffffffc1) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmmsg$inet6(r2, &(0x7f00000008c0), 0x0, 0x408c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 1m4.265502617s ago: executing program 5 (id=2592): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 1m3.781840456s ago: executing program 5 (id=2595): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc01000019000143ae00000001000000fe880000000000000000000000000101ac1414bb0000000000000000000000000000000000000000020000000000000025a5dedd7f2a801a384ce6539974806c370263ab84cf3dca97528b7de5e9306e0b0e2ae5e43bd54b4b1d3b7732e2a726d6daf910d6bc6cd395988337ab4b33b14d94abe9ab2e2f09652900"/153, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000001000000000004010500ac1414aa0000000000000000000000000000000033000000000000000a0101000000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000003c0000000a000000fc000000000000000000000000000000000000000500"/372], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x14, 0x1e, 0x109, 0x102, 0x25dfdbfc}, 0x14}, 0x1, 0x2b1e}, 0x2000c000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001000000000014000400fc0200000000000000000000000000002c000380060001"], 0x10c}}, 0x0) sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000080)=0x2, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf13000000000000850000002a000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee87"], 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xff80, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r5, 0x0, 0x24000044) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r7}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r8}, 0x38) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 48.529141187s ago: executing program 33 (id=2595): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="bc01000019000143ae00000001000000fe880000000000000000000000000101ac1414bb0000000000000000000000000000000000000000020000000000000025a5dedd7f2a801a384ce6539974806c370263ab84cf3dca97528b7de5e9306e0b0e2ae5e43bd54b4b1d3b7732e2a726d6daf910d6bc6cd395988337ab4b33b14d94abe9ab2e2f09652900"/153, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000001000000000004010500ac1414aa0000000000000000000000000000000033000000000000000a0101000000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000000003c00000000000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414bb000000000000000000000000000000003c0000000a000000fc000000000000000000000000000000000000000500"/372], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x14, 0x1e, 0x109, 0x102, 0x25dfdbfc}, 0x14}, 0x1, 0x2b1e}, 0x2000c000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001000000000014000400fc0200000000000000000000000000002c000380060001"], 0x10c}}, 0x0) sendto$inet6(r3, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000080)=0x2, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf13000000000000850000002a000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee87"], 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xff80, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r5, 0x0, 0x24000044) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r7}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r8}, 0x38) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 14.38439889s ago: executing program 6 (id=2756): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$can_bcm(r0, 0x0, 0x4804) syz_genetlink_get_family_id$smc(0x0, r0) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 14.124682971s ago: executing program 1 (id=2759): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[], 0x84}}, 0x20008040) 13.817037536s ago: executing program 1 (id=2762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xd769, 0x2, 0x49b, 0x7, 0x5, 0x7}}, @TCA_NETEM_CORR={0x10, 0x1, {0x80000001, 0x6af, 0xe}}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 12.500664384s ago: executing program 1 (id=2766): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[], 0x50) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xffffffc1) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmmsg$inet6(r2, &(0x7f00000008c0), 0x0, 0x408c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 12.172793601s ago: executing program 1 (id=2768): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)=@newtfilter={0x444, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0xe, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x414, 0x2, [@TCA_CGROUP_EMATCHES={0x8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xab, 0x7, 0x0, 0x6, 0x100, 0x7a, 0x8, 0xff, 0x0, 0x0, 0x47, 0x10000, 0x5, 0x2, 0xec, 0x4, 0x88b, 0x3, 0x8, 0xfffffff8, 0x7, 0xceff, 0x1, 0xae42, 0x94, 0x9, 0x4dd8, 0xffffffff, 0x8, 0x20ce, 0x7, 0x9, 0x4, 0x3, 0x36222594, 0x6, 0x3, 0x9, 0x80, 0x7, 0x7ff, 0x9, 0x8, 0x9, 0x9c18, 0x5, 0x4, 0xffffffcf, 0x20000000, 0x0, 0x5, 0x7fffffff, 0x3, 0x1, 0x80, 0xffffffff, 0x5, 0x4, 0x1, 0x80, 0x2, 0xfff, 0x9, 0x100, 0x2, 0x1, 0x4ea4, 0x7, 0x8, 0x2, 0x5, 0x6, 0x4, 0x7, 0x9, 0x0, 0x1, 0x897, 0x3, 0xf555, 0x81, 0x3, 0xf, 0xfffffff9, 0xffffff7f, 0x3, 0x5e8, 0x8, 0x7e, 0xa1b4, 0x0, 0x3, 0x10000, 0x5, 0x8000, 0x1ff, 0x7, 0xa, 0x6, 0x6, 0x421, 0x5, 0x5, 0xff, 0x9, 0x6, 0x5, 0x9b8e, 0x0, 0xaf8c, 0x1e, 0x1, 0x9, 0x8b9, 0x7, 0x7, 0x2, 0x8, 0x7, 0xba8e, 0x5, 0x7b, 0x6c6, 0x5, 0x9, 0x9, 0x7fffffff, 0x1a8e, 0x8, 0x3, 0x6, 0xa, 0x4, 0x8, 0xfff, 0xf, 0x1000, 0x2, 0x6, 0x101, 0x1, 0x7, 0xe, 0xe00, 0x80000001, 0x80000000, 0xf, 0x6, 0x2, 0xfff, 0x0, 0x7, 0xfffffe00, 0x8, 0x9ab2, 0x8, 0xfffffff8, 0x8000, 0x1e, 0x4, 0x6, 0xfffffffa, 0x8, 0xe, 0x800, 0x0, 0x8000, 0x3, 0x400, 0xfffff800, 0x1, 0x9, 0x10000, 0x101, 0xf, 0x8, 0x7fffffff, 0x7, 0x2, 0x4, 0x5, 0x2, 0x7, 0xfa, 0x2, 0x7, 0x9, 0x2f, 0x7, 0x5, 0x1, 0x590, 0x5, 0x10, 0x1, 0x4, 0x2, 0x3ff, 0x55, 0x5, 0xf, 0xa, 0x8, 0x80000006, 0x7fff, 0x0, 0x7, 0xffffffff, 0xfff, 0xfffffff7, 0x0, 0xb0, 0x81, 0x5152, 0x7fffffff, 0x7fffffff, 0x6, 0xff, 0x2, 0xfffffffd, 0x2, 0x7ff, 0x8, 0xba, 0x5, 0x1, 0x8000, 0xecf, 0x2, 0x4000000, 0x400, 0xc9db, 0x0, 0x3, 0x8ed, 0x34, 0x1, 0x81, 0x8, 0x7ff, 0x21a, 0x7fff, 0x0, 0xfffe000, 0x1, 0x9, 0xfff, 0x1, 0x1, 0x3, 0x10000, 0x800, 0x4, 0x7ffffffe, 0x7]}]}]}}]}, 0x444}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) 11.750633376s ago: executing program 1 (id=2770): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) 11.508623696s ago: executing program 1 (id=2771): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r6 = syz_open_procfs$namespace(0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x10800}, 0x10) 5.987000199s ago: executing program 3 (id=2792): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) 5.719690331s ago: executing program 3 (id=2794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) wait4(r0, &(0x7f0000002040), 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) waitid(0x1, r0, &(0x7f0000000380), 0x1000000, &(0x7f0000000580)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$inet(0x2, 0x2, 0x0) 5.551636745s ago: executing program 0 (id=2796): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x989680}, 0x0, 0x0) 4.773794868s ago: executing program 0 (id=2797): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000002940)='./file0\x00', 0x0, 0x800) getresuid(0x0, 0x0, &(0x7f0000002b00)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4008010) write$tun(0xffffffffffffffff, &(0x7f0000000580)={@void, @val={0x2, 0x85, 0x28, 0x3, 0x9638, 0xbf}, @ipv6=@icmpv6={0x4, 0x6, "d5f8f5", 0x30, 0x3a, 0xff, @mcast2, @private2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xc8, {0xa, 0x6, "166af6", 0x200, 0x1d, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}, 0x62) 4.528579049s ago: executing program 2 (id=2798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x6}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.435723496s ago: executing program 3 (id=2799): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[], 0x50) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xffffffc1) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmmsg$inet6(r2, &(0x7f00000008c0), 0x0, 0x408c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 4.098693114s ago: executing program 6 (id=2800): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0xfffffffffffffcf2, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000240)=@framed={{}, [@jmp={0x5, 0x0, 0x2, 0xb, 0x4, 0xc, 0xfffffffffffffffc}]}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_emit_ethernet(0x9a, &(0x7f00000002c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x64, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000000008080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c40dd3be27df3e34066d42ca0a5c15b37adac15084dbaf636b41e5af1802"}, {}]}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map, 0xffffffffffffffff, 0x22, 0x20}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000000feff9500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x6, &(0x7f0000000440)=0x7, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r7, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) 3.817115147s ago: executing program 3 (id=2801): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x20, 0x0, 0xfd}, [@RTA_IIF={0x8, 0x3, r7}]}, 0x24}}, 0x20004000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000086a05190341000102030109022400010100000000040004010301df00092125b2014334cef339b0ae7b0700070122"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1407}}]}) syz_read_part_table(0x4058, &(0x7f00000030c0)="$eJzszkEuA2EYBuC3HcyPJrWwIw2xl+nOqnGJuYAzOIDoTSznAi5mK6REqwiSsSCeZ/O/me/9Jl/4De6GSepvlh8Gy3h0nHnTbCxi9VG1mWZzpwwzSnK5Nnnaabs+RwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH9OtYq7z8/VlzsXBxknORslpU5yXeV+NhlkP3VOV7WytrSV7cUzTdrux64HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6Xw0+ne6/yzUnms0n1pnH+Esry020yfv+rtutxJQAAAPDIDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcyAAAAAML8rfNoPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsFAAD//7oxDeI=") 3.728746144s ago: executing program 2 (id=2802): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @default, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0xfffbffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r0, 0x1ad72f7) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}], 0x1}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) 3.496280434s ago: executing program 0 (id=2803): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x54}}, 0x0) 3.391028222s ago: executing program 2 (id=2804): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = syz_pidfd_open(0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="34000000030000fcffffffffffffff0018042b8378a3473a6580420e04", @ANYRES32, @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x32, &(0x7f0000000040)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0x2, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(0xffffffffffffffff) r4 = dup(r2) write$uinput_user_dev(r4, 0x0, 0x36) 2.662371342s ago: executing program 0 (id=2805): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x81}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 2.208461919s ago: executing program 6 (id=2806): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6, 0x0, 0x6c}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) 1.852667928s ago: executing program 2 (id=2807): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$alg(0x26, 0x5, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r7, {0x7, 0x1}, {0xffff}, {0x1}}}, 0x24}}, 0x0) 1.778962395s ago: executing program 6 (id=2808): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) wait4(r0, &(0x7f0000002040), 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) waitid(0x1, r0, &(0x7f0000000380), 0x1000000, &(0x7f0000000580)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$inet(0x2, 0x2, 0x0) 1.614344008s ago: executing program 0 (id=2809): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x30, 0x20, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x19af90f06f4514f1}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}}, 0x0) 600.189551ms ago: executing program 2 (id=2810): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[], 0x50) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xffffffc1) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmmsg$inet6(r2, &(0x7f00000008c0), 0x0, 0x408c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 592.613081ms ago: executing program 3 (id=2811): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x6}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 551.066895ms ago: executing program 0 (id=2812): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000002940)='./file0\x00', 0x0, 0x800) getresuid(0x0, 0x0, &(0x7f0000002b00)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4008010) write$tun(0xffffffffffffffff, &(0x7f0000000580)={@void, @val={0x2, 0x85, 0x28, 0x3, 0x9638, 0xbf}, @ipv6=@icmpv6={0x4, 0x6, "d5f8f5", 0x30, 0x3a, 0xff, @mcast2, @private2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xc8, {0xa, 0x6, "166af6", 0x200, 0x1d, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}, 0x62) 419.728286ms ago: executing program 6 (id=2813): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @default, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0xfffbffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r0, 0x1ad72f7) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}], 0x1}, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) 96.070602ms ago: executing program 3 (id=2814): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x54}}, 0x0) 1.67252ms ago: executing program 6 (id=2815): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x1c, r1, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0xfffffffffffffcf2, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000240)=@framed={{}, [@jmp={0x5, 0x0, 0x2, 0xb, 0x4, 0xc, 0xfffffffffffffffc}]}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_emit_ethernet(0x9a, &(0x7f00000002c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x64, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000000008080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c40dd3be27df3e34066d42ca0a5c15b37adac15084dbaf636b41e5af1802"}, {}]}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map, 0xffffffffffffffff, 0x22, 0x20}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000000feff9500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x6, &(0x7f0000000440)=0x7, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r7, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) 0s ago: executing program 2 (id=2816): prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = syz_pidfd_open(0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="34000000030000fcffffffffffffff0018042b8378a3473a6580420e04", @ANYRES32, @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_emit_ethernet(0x32, &(0x7f0000000040)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000000)=0x2, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(0xffffffffffffffff) r4 = dup(r2) write$uinput_user_dev(r4, 0x0, 0x36) kernel console output (not intermixed with test programs): g=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4518eb69 code=0x7ffc0000 [ 406.638357][ T27] audit: type=1326 audit(1754081523.992:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4518eb69 code=0x7ffc0000 [ 406.722503][ T27] audit: type=1326 audit(1754081523.992:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc4518eb69 code=0x7ffc0000 [ 406.823654][ T27] audit: type=1326 audit(1754081523.992:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4518eb69 code=0x7ffc0000 [ 406.888183][ T27] audit: type=1326 audit(1754081523.992:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc4518eb69 code=0x7ffc0000 [ 406.941230][ T27] audit: type=1326 audit(1754081523.992:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4518eb69 code=0x7ffc0000 [ 407.015901][ T27] audit: type=1326 audit(1754081523.992:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fbc4518eb69 code=0x7ffc0000 [ 407.136852][ T27] audit: type=1326 audit(1754081523.992:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4518eb69 code=0x7ffc0000 [ 407.235420][ T27] audit: type=1326 audit(1754081523.992:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4518eb69 code=0x7ffc0000 [ 408.574042][ T8395] syz.2.1316[8395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 408.574132][ T8395] syz.2.1316[8395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 408.610607][ T8395] syz.2.1316[8395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 408.687727][ T8395] syz.2.1316[8395] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 408.815326][ T8388] loop5: detected capacity change from 0 to 512 [ 408.963526][ T8388] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 408.972763][ T8388] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 410.403936][ T6020] EXT4-fs (loop5): unmounting filesystem. [ 411.650229][ T8432] netlink: 'syz.0.1328': attribute type 4 has an invalid length. [ 411.994956][ T8433] netlink: 'syz.0.1328': attribute type 4 has an invalid length. [ 412.574056][ T8442] loop0: detected capacity change from 0 to 256 [ 412.663604][ T8442] FAT-fs (loop0): Directory bread(block 64) failed [ 412.691371][ T8442] FAT-fs (loop0): Directory bread(block 65) failed [ 412.705450][ T8447] loop5: detected capacity change from 0 to 512 [ 412.717699][ T8442] FAT-fs (loop0): Directory bread(block 66) failed [ 412.734706][ T8442] FAT-fs (loop0): Directory bread(block 67) failed [ 412.747868][ T8442] FAT-fs (loop0): Directory bread(block 68) failed [ 412.774193][ T8447] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 412.800618][ T8442] FAT-fs (loop0): Directory bread(block 69) failed [ 412.817674][ T8442] FAT-fs (loop0): Directory bread(block 70) failed [ 412.832697][ T8447] EXT4-fs (loop5): 1 truncate cleaned up [ 412.833844][ T8442] FAT-fs (loop0): Directory bread(block 71) failed [ 412.845680][ T8442] FAT-fs (loop0): Directory bread(block 72) failed [ 412.852682][ T8442] FAT-fs (loop0): Directory bread(block 73) failed [ 412.893209][ T8447] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 414.333455][ T27] audit: type=1326 audit(1754081531.722:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 414.366204][ T27] audit: type=1326 audit(1754081531.752:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 414.566297][ T27] audit: type=1326 audit(1754081531.752:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 414.707583][ T22] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 414.733666][ T27] audit: type=1326 audit(1754081531.752:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 414.756844][ T27] audit: type=1326 audit(1754081531.752:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 414.788278][ T27] audit: type=1326 audit(1754081531.752:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 414.930661][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 414.954617][ T27] audit: type=1326 audit(1754081531.752:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 414.956080][ T6020] EXT4-fs (loop5): unmounting filesystem. [ 414.977709][ T27] audit: type=1326 audit(1754081531.752:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.1.1331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 414.986466][ T22] usb 4-1: unable to get BOS descriptor or descriptor too short [ 415.022176][ T8461] xt_CT: No such helper "netbios-ns" [ 415.083800][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.129315][ T22] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 415.169504][ T22] usb 4-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.41 [ 415.194964][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.400092][ T22] usb 4-1: Product: syz [ 415.404610][ T22] usb 4-1: Manufacturer: syz [ 415.409591][ T22] usb 4-1: SerialNumber: syz [ 415.548148][ T8482] netlink: 'syz.2.1343': attribute type 4 has an invalid length. [ 415.960031][ T8461] loop3: detected capacity change from 0 to 32768 [ 416.019151][ T8483] netlink: 'syz.2.1343': attribute type 4 has an invalid length. [ 416.035450][ T8461] loop3: p1 p3 < p5 p6 > [ 416.084709][ T8461] loop3: p5 start 117448704 is beyond EOD, truncated [ 416.102383][ T22] usb 4-1: USB disconnect, device number 4 [ 416.175872][ T3638] loop3: p1 p3 < p5 p6 > [ 416.227036][ T3638] loop3: p5 start 117448704 is beyond EOD, truncated [ 416.396213][ T8497] loop5: detected capacity change from 0 to 256 [ 416.490781][ T8497] FAT-fs (loop5): Directory bread(block 64) failed [ 416.502339][ T8497] FAT-fs (loop5): Directory bread(block 65) failed [ 416.524826][ T8497] FAT-fs (loop5): Directory bread(block 66) failed [ 416.551667][ T8497] FAT-fs (loop5): Directory bread(block 67) failed [ 416.584030][ T8497] FAT-fs (loop5): Directory bread(block 68) failed [ 416.631194][ T8497] FAT-fs (loop5): Directory bread(block 69) failed [ 416.674442][ T8497] FAT-fs (loop5): Directory bread(block 70) failed [ 416.751237][ T8497] FAT-fs (loop5): Directory bread(block 71) failed [ 416.779414][ T8497] FAT-fs (loop5): Directory bread(block 72) failed [ 416.813124][ T8497] FAT-fs (loop5): Directory bread(block 73) failed [ 417.150926][ T8503] loop0: detected capacity change from 0 to 512 [ 417.244046][ T8503] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 417.269864][ T8503] ext4 filesystem being mounted at /258/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 417.318967][ T8519] netlink: 'syz.1.1356': attribute type 8 has an invalid length. [ 417.425527][ T5984] udevd[5984]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 417.436504][ T6169] udevd[6169]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 417.440694][ T5909] udevd[5909]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 417.584870][ T8519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.595382][ T8519] bond0: (slave bond1): Enslaving as an active interface with an up link [ 417.619629][ T5984] udevd[5984]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 417.638900][ T5909] udevd[5909]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 417.639043][ T6169] udevd[6169]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 418.677873][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 418.915657][ T8543] xt_CT: No such helper "netbios-ns" [ 419.487373][ T8566] loop3: detected capacity change from 0 to 256 [ 419.543686][ T8566] FAT-fs (loop3): Directory bread(block 64) failed [ 419.565000][ T8566] FAT-fs (loop3): Directory bread(block 65) failed [ 419.582051][ T8566] FAT-fs (loop3): Directory bread(block 66) failed [ 419.599976][ T8567] random: crng reseeded on system resumption [ 419.603101][ T8566] FAT-fs (loop3): Directory bread(block 67) failed [ 419.624217][ T8566] FAT-fs (loop3): Directory bread(block 68) failed [ 419.644449][ T8566] FAT-fs (loop3): Directory bread(block 69) failed [ 419.657198][ T8566] FAT-fs (loop3): Directory bread(block 70) failed [ 419.673129][ T8566] FAT-fs (loop3): Directory bread(block 71) failed [ 419.687116][ T8566] FAT-fs (loop3): Directory bread(block 72) failed [ 419.705734][ T27] audit: type=1326 audit(1754081537.092:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8550 comm="syz.0.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 419.735363][ T8566] FAT-fs (loop3): Directory bread(block 73) failed [ 419.767055][ T27] audit: type=1326 audit(1754081537.092:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8550 comm="syz.0.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 419.796213][ T27] audit: type=1326 audit(1754081537.092:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8550 comm="syz.0.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 419.830894][ T27] audit: type=1326 audit(1754081537.092:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8550 comm="syz.0.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 419.862022][ T27] audit: type=1326 audit(1754081537.092:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8550 comm="syz.0.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 419.903408][ T27] audit: type=1326 audit(1754081537.102:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8550 comm="syz.0.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 420.054483][ T27] audit: type=1326 audit(1754081537.102:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8550 comm="syz.0.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 420.547778][ T27] audit: type=1326 audit(1754081537.102:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8550 comm="syz.0.1366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 421.147060][ T8586] netlink: 'syz.5.1379': attribute type 29 has an invalid length. [ 421.167924][ T8586] netlink: 'syz.5.1379': attribute type 29 has an invalid length. [ 421.188508][ T8586] netlink: 'syz.5.1379': attribute type 29 has an invalid length. [ 421.951728][ T8602] loop5: detected capacity change from 0 to 256 [ 422.019189][ T8602] FAT-fs (loop5): Directory bread(block 64) failed [ 422.025880][ T8602] FAT-fs (loop5): Directory bread(block 65) failed [ 422.077003][ T8602] FAT-fs (loop5): Directory bread(block 66) failed [ 422.102230][ T8602] FAT-fs (loop5): Directory bread(block 67) failed [ 422.120880][ T8602] FAT-fs (loop5): Directory bread(block 68) failed [ 422.157802][ T8602] FAT-fs (loop5): Directory bread(block 69) failed [ 422.179654][ T8602] FAT-fs (loop5): Directory bread(block 70) failed [ 422.195545][ T8602] FAT-fs (loop5): Directory bread(block 71) failed [ 422.217863][ T8602] FAT-fs (loop5): Directory bread(block 72) failed [ 422.231954][ T8602] FAT-fs (loop5): Directory bread(block 73) failed [ 425.070942][ T8651] tipc: Enabling of bearer rejected, failed to enable media [ 426.347876][ T27] audit: type=1326 audit(1754081543.742:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.1.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 426.425373][ T27] audit: type=1326 audit(1754081543.762:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.1.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 426.537624][ T27] audit: type=1326 audit(1754081543.762:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.1.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 426.652687][ T27] audit: type=1326 audit(1754081543.762:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.1.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 426.737852][ T27] audit: type=1326 audit(1754081543.762:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.1.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 426.810770][ T27] audit: type=1326 audit(1754081543.762:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.1.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 426.923552][ T27] audit: type=1326 audit(1754081543.762:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.1.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 427.029044][ T27] audit: type=1326 audit(1754081543.762:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.1.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 427.152436][ T27] audit: type=1326 audit(1754081543.772:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.1.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 427.297625][ T27] audit: type=1326 audit(1754081543.772:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.1.1401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 428.373203][ T8693] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1415'. [ 428.384314][ T8691] netlink: 'syz.0.1416': attribute type 29 has an invalid length. [ 428.418274][ T8691] netlink: 'syz.0.1416': attribute type 29 has an invalid length. [ 428.457787][ T8691] netlink: 'syz.0.1416': attribute type 29 has an invalid length. [ 429.149155][ T4299] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 430.601810][ T8734] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1429'. [ 430.939461][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1438'. [ 431.020784][ T8760] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1441'. [ 431.035999][ T8760] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1441'. [ 431.047296][ T8760] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1441'. [ 431.068284][ T8760] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1441'. [ 431.246076][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1442'. [ 431.346477][ T8765] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 431.540127][ T8777] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1446'. [ 432.561711][ T8793] netlink: 'syz.3.1448': attribute type 4 has an invalid length. [ 432.636508][ T8794] netlink: 'syz.3.1448': attribute type 4 has an invalid length. [ 432.677657][ T8801] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1453'. [ 432.792777][ T8802] tipc: Enabling of bearer rejected, failed to enable media [ 433.450587][ T8833] loop5: detected capacity change from 0 to 512 [ 433.491774][ T8833] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 433.720907][ T8833] EXT4-fs (loop5): 1 truncate cleaned up [ 433.830995][ T8844] netlink: 'syz.2.1465': attribute type 4 has an invalid length. [ 434.060124][ T8833] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 434.551865][ T8849] __nla_validate_parse: 4 callbacks suppressed [ 434.551885][ T8849] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1467'. [ 434.735361][ T8845] netlink: 'syz.2.1465': attribute type 4 has an invalid length. [ 435.147796][ T8849] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1467'. [ 435.193535][ T8853] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1467'. [ 435.283819][ T8847] netlink: 'syz.0.1464': attribute type 4 has an invalid length. [ 435.527273][ T6020] EXT4-fs (loop5): unmounting filesystem. [ 435.606672][ T8857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1467'. [ 436.990272][ T8890] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1482'. [ 437.036781][ T8890] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1482'. [ 437.106312][ T8890] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1482'. [ 437.193779][ T8894] netlink: 'syz.3.1479': attribute type 4 has an invalid length. [ 437.670782][ T8896] netlink: 'syz.3.1479': attribute type 4 has an invalid length. [ 437.815824][ T8890] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1482'. [ 440.712846][ T8945] netlink: 'syz.1.1496': attribute type 4 has an invalid length. [ 443.146587][ T8947] netlink: 'syz.1.1496': attribute type 4 has an invalid length. [ 443.238281][ T8943] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1498'. [ 445.321275][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.327776][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.471126][ T8980] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1510'. [ 445.719682][ T8973] loop0: detected capacity change from 0 to 512 [ 445.805195][ T8984] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1512'. [ 445.853229][ T8973] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 445.877821][ T8973] ext4 filesystem being mounted at /287/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 446.039794][ T8996] device netdevsim0 entered promiscuous mode [ 446.058800][ T8996] device macsec1 entered promiscuous mode [ 446.088284][ T8996] device netdevsim0 left promiscuous mode [ 446.898085][ T22] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 447.157685][ T8998] xt_CT: No such helper "netbios-ns" [ 447.282409][ T22] usb 6-1: Using ep0 maxpacket: 8 [ 447.291723][ T22] usb 6-1: unable to get BOS descriptor or descriptor too short [ 447.316033][ T22] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.351893][ T22] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 447.374320][ T22] usb 6-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.41 [ 447.398568][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.431902][ T22] usb 6-1: Product: syz [ 447.436714][ T22] usb 6-1: Manufacturer: syz [ 447.471091][ T22] usb 6-1: SerialNumber: syz [ 447.499215][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 447.554738][ T9011] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1519'. [ 447.604872][ T9011] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1519'. [ 447.628800][ T9011] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1519'. [ 447.797909][ T9011] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1519'. [ 447.955687][ T8998] loop5: detected capacity change from 0 to 32768 [ 448.014826][ T8998] loop5: p1 p3 < p5 p6 > [ 448.023851][ T8998] loop5: p5 start 117448704 is beyond EOD, truncated [ 448.627524][ T3638] loop5: p1 p3 < p5 p6 > [ 448.710229][ T3638] loop5: p5 start 117448704 is beyond EOD, truncated [ 449.203822][ T1193] usb 6-1: USB disconnect, device number 2 [ 450.431674][ T7095] udevd[7095]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 450.445505][ T5984] udevd[5984]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 450.478816][ T5909] udevd[5909]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 450.574248][ T9054] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1534'. [ 450.595597][ T7095] udevd[7095]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 450.596054][ T5984] udevd[5984]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 450.609471][ T5909] udevd[5909]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 450.622689][ T9054] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1534'. [ 450.673025][ T9059] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1534'. [ 450.732110][ T9054] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1534'. [ 451.107212][ T9072] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1540'. [ 451.156801][ T9072] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1540'. [ 451.212908][ T9072] IPVS: length: 220 != 24 [ 451.483139][ T9061] infiniband syz2: set down [ 451.538162][ T9061] infiniband syz2: added syzkaller0 [ 453.341012][ T9061] RDS/IB: syz2: added [ 453.363563][ T9061] smc: adding ib device syz2 with port count 1 [ 453.378577][ T9061] smc: ib device syz2 port 1 has pnetid [ 453.406821][ T9096] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1549'. [ 453.419892][ T4892] smc: removing ib device syz2 [ 453.430214][ T9096] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1549'. [ 453.440797][ T9096] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1549'. [ 453.451828][ T9096] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1549'. [ 453.754087][ T9061] rdma_rxe: rxe_register_device failed with error -19 [ 453.773976][ T9061] rdma_rxe: failed to add syzkaller0 [ 454.688219][ T9113] netlink: 'syz.2.1554': attribute type 4 has an invalid length. [ 455.488987][ T9118] syz.0.1555 uses obsolete (PF_INET,SOCK_PACKET) [ 455.508456][ T9114] netlink: 'syz.2.1554': attribute type 4 has an invalid length. [ 455.797766][ T4279] Bluetooth: hci5: command 0x0405 tx timeout [ 455.989252][ T9127] netlink: 'syz.0.1560': attribute type 5 has an invalid length. [ 456.023458][ T9127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1560'. [ 456.136564][ T9131] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1562'. [ 456.589593][ T9144] tipc: Enabled bearer , priority 0 [ 456.728173][ T9147] device syzkaller0 entered promiscuous mode [ 456.912915][ T9147] tipc: Resetting bearer [ 457.012276][ T9143] tipc: Resetting bearer [ 457.118272][ T9143] tipc: Disabling bearer [ 458.168440][ T9163] netlink: 'syz.5.1574': attribute type 5 has an invalid length. [ 458.207954][ T9163] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1574'. [ 460.317652][ T5942] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 460.507779][ T5942] usb 4-1: Using ep0 maxpacket: 8 [ 460.538272][ T5942] usb 4-1: unable to get BOS descriptor or descriptor too short [ 460.601682][ T5942] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.623109][ T9185] xt_CT: No such helper "netbios-ns" [ 460.659410][ T5942] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 460.694247][ T5942] usb 4-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.41 [ 460.710252][ T9196] netlink: 'syz.2.1589': attribute type 5 has an invalid length. [ 460.737512][ T9196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1589'. [ 460.773314][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.801353][ T5942] usb 4-1: Product: syz [ 460.813252][ T5942] usb 4-1: Manufacturer: syz [ 460.833753][ T5942] usb 4-1: SerialNumber: syz [ 461.333905][ T9184] loop3: detected capacity change from 0 to 32768 [ 461.390041][ T9184] loop3: p1 p3 < p5 p6 > [ 461.397048][ T9184] loop3: p5 start 117448704 is beyond EOD, truncated [ 462.592805][ T4318] usb 4-1: USB disconnect, device number 5 [ 463.323528][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1600'. [ 463.342178][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1600'. [ 463.379964][ T9233] netlink: 'syz.5.1600': attribute type 6 has an invalid length. [ 464.025821][ T9233] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.035665][ T9233] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.044486][ T9233] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.053447][ T9233] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.224990][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1600'. [ 464.274566][ T9233] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1600'. [ 464.304154][ T9233] netlink: 'syz.5.1600': attribute type 6 has an invalid length. [ 464.356123][ T7095] udevd[7095]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 464.356281][ T5984] udevd[5984]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 464.384643][ T5909] udevd[5909]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 464.757986][ T9254] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.766860][ T9254] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.775843][ T9254] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.784781][ T9254] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.497801][ T4318] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 465.717748][ T9257] xt_CT: No such helper "netbios-ns" [ 465.747716][ T4318] usb 1-1: Using ep0 maxpacket: 8 [ 465.757694][ T4318] usb 1-1: unable to get BOS descriptor or descriptor too short [ 465.797805][ T4318] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.834188][ T4318] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 465.864978][ T4318] usb 1-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.41 [ 465.884811][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.893758][ T9265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1612'. [ 465.901896][ T4318] usb 1-1: Product: syz [ 465.913482][ T4318] usb 1-1: Manufacturer: syz [ 465.918456][ T4318] usb 1-1: SerialNumber: syz [ 465.950867][ T9265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1612'. [ 465.962416][ T9265] IPVS: length: 220 != 24 [ 466.398083][ T9256] loop0: detected capacity change from 0 to 32768 [ 466.482778][ T9256] loop0: p1 p3 < p5 p6 > [ 466.509892][ T9256] loop0: p5 start 117448704 is beyond EOD, truncated [ 467.666374][ T4389] usb 1-1: USB disconnect, device number 4 [ 467.890982][ T9294] tipc: Enabled bearer , priority 0 [ 467.920512][ T9294] device syzkaller0 entered promiscuous mode [ 468.053894][ T9294] tipc: Resetting bearer [ 468.098196][ T9292] tipc: Resetting bearer [ 468.236615][ T9303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1623'. [ 468.260640][ T9292] tipc: Disabling bearer [ 468.313532][ T9305] IPVS: length: 220 != 24 [ 468.330160][ T9303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1623'. [ 468.351221][ T9301] tipc: Enabled bearer , priority 0 [ 468.363110][ T9301] device syzkaller0 entered promiscuous mode [ 468.384722][ T9301] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 468.498995][ T9301] tipc: Resetting bearer [ 468.528113][ T9300] tipc: Resetting bearer [ 468.542258][ T5909] udevd[5909]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 468.572048][ T7095] udevd[7095]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 468.605097][ T9288] udevd[9288]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 468.663148][ T9300] tipc: Disabling bearer [ 468.875157][ T9324] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1632'. [ 469.701960][ T9341] IPVS: length: 220 != 24 [ 470.018922][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 470.018947][ T27] audit: type=1326 audit(1754081587.412:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 470.118343][ T27] audit: type=1326 audit(1754081587.442:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 470.183020][ T27] audit: type=1326 audit(1754081587.442:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 470.214525][ T9356] loop3: detected capacity change from 0 to 256 [ 470.294765][ T27] audit: type=1326 audit(1754081587.442:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 470.329791][ T9356] FAT-fs (loop3): Directory bread(block 64) failed [ 470.336512][ T9356] FAT-fs (loop3): Directory bread(block 65) failed [ 470.378928][ T27] audit: type=1326 audit(1754081587.442:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 470.395783][ T9356] FAT-fs (loop3): Directory bread(block 66) failed [ 470.446508][ T27] audit: type=1326 audit(1754081587.442:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 470.474131][ T9356] FAT-fs (loop3): Directory bread(block 67) failed [ 470.504247][ T9356] FAT-fs (loop3): Directory bread(block 68) failed [ 470.504323][ T9361] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1647'. [ 470.536812][ T27] audit: type=1326 audit(1754081587.442:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 470.550705][ T9356] FAT-fs (loop3): Directory bread(block 69) failed [ 470.577704][ T9356] FAT-fs (loop3): Directory bread(block 70) failed [ 470.594296][ T27] audit: type=1326 audit(1754081587.452:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9325 comm="syz.1.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eff38eb69 code=0x7ffc0000 [ 470.608138][ T9356] FAT-fs (loop3): Directory bread(block 71) failed [ 470.723312][ T9356] FAT-fs (loop3): Directory bread(block 72) failed [ 470.772201][ T9356] FAT-fs (loop3): Directory bread(block 73) failed [ 470.888106][ T9374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1651'. [ 472.369102][ T9397] dccp_invalid_packet: P.Data Offset(4) too small [ 472.612284][ T9402] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.621349][ T9402] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.630349][ T9402] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 472.639403][ T9402] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.656674][ T9435] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.665802][ T9435] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.674735][ T9435] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.683667][ T9435] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 474.916969][ T9445] fuse: Unknown parameter '0x0000000000000005' [ 476.153048][ T9453] infiniband syz2: set down [ 476.157773][ T952] infiniband syz2: ib_query_port failed (-19) [ 476.197807][ T9453] infiniband syz2: added syzkaller0 [ 476.350818][ T9453] RDS/IB: syz2: added [ 476.354956][ T9453] smc: adding ib device syz2 with port count 1 [ 476.366242][ T9453] smc: ib device syz2 port 1 has pnetid [ 476.376771][ T9453] smc: removing ib device syz2 [ 476.510760][ T9479] tipc: Enabling of bearer rejected, failed to enable media [ 476.682859][ T9481] overlayfs: failed to resolve './file0': -2 [ 476.846906][ T9453] rdma_rxe: rxe_register_device failed with error -19 [ 476.859664][ T9453] rdma_rxe: failed to add syzkaller0 [ 477.826820][ T9491] loop5: detected capacity change from 0 to 256 [ 477.993731][ T9498] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 478.026780][ T9491] FAT-fs (loop5): Directory bread(block 64) failed [ 478.050911][ T9498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 478.054981][ T9491] FAT-fs (loop5): Directory bread(block 65) failed [ 478.066995][ T9498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 478.101824][ T9498] device bridge_slave_0 left promiscuous mode [ 478.106802][ T9491] FAT-fs (loop5): Directory bread(block 66) failed [ 478.137231][ T9491] FAT-fs (loop5): Directory bread(block 67) failed [ 478.137783][ T9498] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.156462][ T9491] FAT-fs (loop5): Directory bread(block 68) failed [ 478.175717][ T9491] FAT-fs (loop5): Directory bread(block 69) failed [ 478.193425][ T9491] FAT-fs (loop5): Directory bread(block 70) failed [ 478.216827][ T9491] FAT-fs (loop5): Directory bread(block 71) failed [ 478.225270][ T9498] device bridge_slave_1 left promiscuous mode [ 478.235082][ T9491] FAT-fs (loop5): Directory bread(block 72) failed [ 478.243320][ T9498] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.258439][ T9491] FAT-fs (loop5): Directory bread(block 73) failed [ 478.283934][ T9498] bond0: (slave bond_slave_0): Releasing backup interface [ 478.366122][ T9498] bond0: (slave bond_slave_1): Releasing backup interface [ 478.581968][ T9498] team0: Port device team_slave_0 removed [ 479.339204][ T9498] team0: Port device team_slave_1 removed [ 479.346004][ T9498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.372753][ T9498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.398517][ T9498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.406036][ T9498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.485817][ T9522] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.494755][ T9522] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.503700][ T9522] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.512936][ T9522] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.687514][ T9523] tipc: Enabling of bearer rejected, failed to enable media [ 481.056086][ T9544] loop3: detected capacity change from 0 to 4096 [ 481.118221][ T9544] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 481.172645][ T9544] overlayfs: './file1' not a directory [ 481.775922][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 482.819653][ T9584] tipc: Enabling of bearer rejected, failed to enable media [ 483.564880][ T9607] loop0: detected capacity change from 0 to 512 [ 484.067612][ T9607] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 484.252443][ T9607] EXT4-fs (loop0): 1 truncate cleaned up [ 484.267722][ T9607] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 485.565087][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 485.679574][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1746'. [ 487.123592][ T9647] tipc: Started in network mode [ 487.151176][ T9647] tipc: Node identity 66959c9885e9, cluster identity 4711 [ 487.212079][ T9647] tipc: Enabled bearer , priority 0 [ 487.262253][ T9653] device syzkaller0 entered promiscuous mode [ 487.409754][ T9646] tipc: Resetting bearer [ 487.510940][ T9665] loop0: detected capacity change from 0 to 512 [ 488.242367][ T9651] tipc: Node number set to 3816594584 [ 488.250897][ T9665] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 488.270859][ T9646] tipc: Disabling bearer [ 488.320457][ T9665] EXT4-fs (loop0): 1 truncate cleaned up [ 488.326215][ T9665] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 488.349277][ T9667] netlink: 'syz.1.1753': attribute type 4 has an invalid length. [ 488.373253][ T9668] netlink: 'syz.1.1753': attribute type 4 has an invalid length. [ 489.648394][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 491.189684][ T9700] tipc: Enabling of bearer rejected, failed to enable media [ 492.333868][ T9724] loop0: detected capacity change from 0 to 256 [ 492.401805][ T9729] loop5: detected capacity change from 0 to 512 [ 492.414230][ T9724] FAT-fs (loop0): Directory bread(block 64) failed [ 492.434453][ T9729] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 492.473998][ T9724] FAT-fs (loop0): Directory bread(block 65) failed [ 492.501519][ T9729] EXT4-fs (loop5): 1 truncate cleaned up [ 492.507538][ T9729] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 492.533093][ T9724] FAT-fs (loop0): Directory bread(block 66) failed [ 492.577639][ T9724] FAT-fs (loop0): Directory bread(block 67) failed [ 492.607671][ T9724] FAT-fs (loop0): Directory bread(block 68) failed [ 492.614281][ T9724] FAT-fs (loop0): Directory bread(block 69) failed [ 492.644679][ T9724] FAT-fs (loop0): Directory bread(block 70) failed [ 492.713716][ T9724] FAT-fs (loop0): Directory bread(block 71) failed [ 492.754345][ T9717] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 492.766453][ T9721] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 492.774638][ T9724] FAT-fs (loop0): Directory bread(block 72) failed [ 492.782661][ T9724] FAT-fs (loop0): Directory bread(block 73) failed [ 494.013284][ T6020] EXT4-fs (loop5): unmounting filesystem. [ 494.911373][ T9709] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.925545][ T9709] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.942692][ T9709] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.953916][ T9709] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.055943][ T9709] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.065095][ T9709] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.074829][ T9709] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.083827][ T9709] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.096741][ T9714] @ÿþ€: renamed from veth0_vlan [ 495.106841][ T9718] netlink: 'syz.3.1769': attribute type 4 has an invalid length. [ 495.266881][ T9719] netlink: 'syz.3.1769': attribute type 4 has an invalid length. [ 495.287663][ T9749] netlink: 'syz.0.1777': attribute type 5 has an invalid length. [ 495.295659][ T9749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1777'. [ 495.791798][ T9779] loop5: detected capacity change from 0 to 256 [ 495.793966][ T9777] loop0: detected capacity change from 0 to 512 [ 495.882418][ T9779] FAT-fs (loop5): Directory bread(block 64) failed [ 495.902490][ T9779] FAT-fs (loop5): Directory bread(block 65) failed [ 495.916107][ T9779] FAT-fs (loop5): Directory bread(block 66) failed [ 495.937604][ T9777] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 495.971358][ T9779] FAT-fs (loop5): Directory bread(block 67) failed [ 496.012459][ T9777] EXT4-fs (loop0): 1 truncate cleaned up [ 496.063652][ T9779] FAT-fs (loop5): Directory bread(block 68) failed [ 496.073700][ T9777] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 496.108297][ T9779] FAT-fs (loop5): Directory bread(block 69) failed [ 496.115114][ T9779] FAT-fs (loop5): Directory bread(block 70) failed [ 496.188777][ T9779] FAT-fs (loop5): Directory bread(block 71) failed [ 496.233289][ T9779] FAT-fs (loop5): Directory bread(block 72) failed [ 496.254686][ T9779] FAT-fs (loop5): Directory bread(block 73) failed [ 497.654817][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 497.784803][ T9804] netlink: 'syz.1.1792': attribute type 4 has an invalid length. [ 498.509297][ T9805] netlink: 'syz.1.1792': attribute type 4 has an invalid length. [ 498.964973][ T9820] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1797'. [ 499.253958][ T9830] loop3: detected capacity change from 0 to 512 [ 499.314352][ T9830] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 499.403958][ T9830] EXT4-fs (loop3): 1 truncate cleaned up [ 499.431061][ T9830] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 501.839461][ T9846] tipc: Enabling of bearer rejected, failed to enable media [ 502.341620][ T9862] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1811'. [ 502.566333][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 503.280714][ T9872] loop5: detected capacity change from 0 to 256 [ 503.462090][ T9872] FAT-fs (loop5): Directory bread(block 64) failed [ 503.477709][ T9872] FAT-fs (loop5): Directory bread(block 65) failed [ 503.484522][ T9872] FAT-fs (loop5): Directory bread(block 66) failed [ 503.546009][ T9872] FAT-fs (loop5): Directory bread(block 67) failed [ 503.584216][ T9872] FAT-fs (loop5): Directory bread(block 68) failed [ 503.622887][ T9872] FAT-fs (loop5): Directory bread(block 69) failed [ 503.647569][ T9872] FAT-fs (loop5): Directory bread(block 70) failed [ 503.654289][ T9872] FAT-fs (loop5): Directory bread(block 71) failed [ 503.707929][ T9872] FAT-fs (loop5): Directory bread(block 72) failed [ 503.724853][ T9872] FAT-fs (loop5): Directory bread(block 73) failed [ 505.566107][ T9897] loop5: detected capacity change from 0 to 512 [ 505.604430][ T9897] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 505.660354][ T9897] EXT4-fs (loop5): 1 truncate cleaned up [ 505.666247][ T9897] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 506.903240][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.920098][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.593291][ T6020] EXT4-fs (loop5): unmounting filesystem. [ 507.638506][ T9922] loop3: detected capacity change from 0 to 256 [ 507.744062][ T9922] FAT-fs (loop3): Directory bread(block 64) failed [ 507.777622][ T9922] FAT-fs (loop3): Directory bread(block 65) failed [ 507.787681][ T9922] FAT-fs (loop3): Directory bread(block 66) failed [ 507.794464][ T9922] FAT-fs (loop3): Directory bread(block 67) failed [ 507.837635][ T9922] FAT-fs (loop3): Directory bread(block 68) failed [ 507.863016][ T9922] FAT-fs (loop3): Directory bread(block 69) failed [ 507.909892][ T9922] FAT-fs (loop3): Directory bread(block 70) failed [ 507.925543][ T9922] FAT-fs (loop3): Directory bread(block 71) failed [ 507.946396][ T9922] FAT-fs (loop3): Directory bread(block 72) failed [ 507.968725][ T9922] FAT-fs (loop3): Directory bread(block 73) failed [ 508.024408][ T9928] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1834'. [ 509.506303][ T9928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.576010][ T9928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.612714][ T9928] bond0 (unregistering): Released all slaves [ 510.082865][ T9956] loop0: detected capacity change from 0 to 512 [ 510.143778][ T9956] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 510.228529][ T9956] EXT4-fs (loop0): 1 truncate cleaned up [ 510.234559][ T9956] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 510.311380][ T9968] loop3: detected capacity change from 0 to 256 [ 510.413035][ T9968] FAT-fs (loop3): Directory bread(block 64) failed [ 510.453037][ T9968] FAT-fs (loop3): Directory bread(block 65) failed [ 510.519233][ T9968] FAT-fs (loop3): Directory bread(block 66) failed [ 510.534950][ T9968] FAT-fs (loop3): Directory bread(block 67) failed [ 510.552099][ T9968] FAT-fs (loop3): Directory bread(block 68) failed [ 510.568096][ T9968] FAT-fs (loop3): Directory bread(block 69) failed [ 510.584581][ T9968] FAT-fs (loop3): Directory bread(block 70) failed [ 510.732586][ T9968] FAT-fs (loop3): Directory bread(block 71) failed [ 511.038227][ T9968] FAT-fs (loop3): Directory bread(block 72) failed [ 511.106015][ T9968] FAT-fs (loop3): Directory bread(block 73) failed [ 511.503627][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 512.066642][ T9987] loop0: detected capacity change from 0 to 256 [ 512.110061][ T9989] tipc: Enabling of bearer rejected, failed to enable media [ 512.231727][ T9987] FAT-fs (loop0): Directory bread(block 64) failed [ 512.258924][ T9987] FAT-fs (loop0): Directory bread(block 65) failed [ 512.265648][ T9987] FAT-fs (loop0): Directory bread(block 66) failed [ 512.301797][ T9987] FAT-fs (loop0): Directory bread(block 67) failed [ 512.319324][ T9987] FAT-fs (loop0): Directory bread(block 68) failed [ 512.344133][ T9987] FAT-fs (loop0): Directory bread(block 69) failed [ 512.371216][ T9987] FAT-fs (loop0): Directory bread(block 70) failed [ 512.400156][ T9987] FAT-fs (loop0): Directory bread(block 71) failed [ 512.453106][ T9987] FAT-fs (loop0): Directory bread(block 72) failed [ 512.497742][ T9987] FAT-fs (loop0): Directory bread(block 73) failed [ 514.540051][T10034] tipc: Enabling of bearer rejected, failed to enable media [ 516.616207][T10074] netlink: 'syz.1.1885': attribute type 10 has an invalid length. [ 516.657199][T10074] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 516.832281][T10084] tipc: Enabled bearer , priority 0 [ 516.868401][T10084] device syzkaller0 entered promiscuous mode [ 516.908938][T10084] tipc: Resetting bearer [ 516.929219][T10083] tipc: Resetting bearer [ 516.985510][T10083] tipc: Disabling bearer [ 518.201909][T10102] loop5: detected capacity change from 0 to 4096 [ 518.266717][T10102] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 518.290605][T10113] loop3: detected capacity change from 0 to 256 [ 518.411362][T10118] netlink: 'syz.1.1901': attribute type 10 has an invalid length. [ 518.416489][T10113] FAT-fs (loop3): Directory bread(block 64) failed [ 518.437719][T10113] FAT-fs (loop3): Directory bread(block 65) failed [ 518.445715][T10113] FAT-fs (loop3): Directory bread(block 66) failed [ 518.455269][T10113] FAT-fs (loop3): Directory bread(block 67) failed [ 518.467803][T10113] FAT-fs (loop3): Directory bread(block 68) failed [ 518.508066][T10113] FAT-fs (loop3): Directory bread(block 69) failed [ 518.514880][T10113] FAT-fs (loop3): Directory bread(block 70) failed [ 518.562706][T10113] FAT-fs (loop3): Directory bread(block 71) failed [ 518.596669][T10113] FAT-fs (loop3): Directory bread(block 72) failed [ 518.608738][T10113] FAT-fs (loop3): Directory bread(block 73) failed [ 518.616491][ T6020] EXT4-fs (loop5): unmounting filesystem. [ 519.517164][T10132] tipc: Enabling of bearer rejected, failed to enable media [ 519.942899][T10147] netlink: 'syz.0.1906': attribute type 4 has an invalid length. [ 519.954149][T10147] netlink: 'syz.0.1906': attribute type 4 has an invalid length. [ 520.991190][T10157] loop5: detected capacity change from 0 to 4096 [ 521.057927][T10157] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 521.211594][T10157] overlayfs: missing 'lowerdir' [ 521.308602][T10170] loop0: detected capacity change from 0 to 256 [ 521.401957][T10170] FAT-fs (loop0): Directory bread(block 64) failed [ 521.431903][T10170] FAT-fs (loop0): Directory bread(block 65) failed [ 521.442126][T10170] FAT-fs (loop0): Directory bread(block 66) failed [ 521.464540][T10170] FAT-fs (loop0): Directory bread(block 67) failed [ 521.488651][T10170] FAT-fs (loop0): Directory bread(block 68) failed [ 521.495653][T10170] FAT-fs (loop0): Directory bread(block 69) failed [ 521.517024][T10170] FAT-fs (loop0): Directory bread(block 70) failed [ 521.543422][T10170] FAT-fs (loop0): Directory bread(block 71) failed [ 521.570768][T10170] FAT-fs (loop0): Directory bread(block 72) failed [ 521.583731][T10170] FAT-fs (loop0): Directory bread(block 73) failed [ 521.806204][ T6020] EXT4-fs (loop5): unmounting filesystem. [ 523.936905][T10188] loop5: detected capacity change from 0 to 512 [ 524.014710][T10188] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 524.091706][T10188] EXT4-fs (loop5): 1 truncate cleaned up [ 524.105623][T10188] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 525.094416][T10209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1931'. [ 525.193828][T10209] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1931'. [ 525.255927][T10209] IPVS: length: 220 != 24 [ 525.270720][ T6020] EXT4-fs (loop5): unmounting filesystem. [ 525.309028][T10211] random: crng reseeded on system resumption [ 525.415713][T10217] loop5: detected capacity change from 0 to 256 [ 525.426647][ T27] audit: type=1326 audit(1754081642.812:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10182 comm="syz.0.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 525.503047][T10217] FAT-fs (loop5): Directory bread(block 64) failed [ 525.535597][ T27] audit: type=1326 audit(1754081642.862:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10182 comm="syz.0.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 525.558366][T10217] FAT-fs (loop5): Directory bread(block 65) failed [ 525.565063][T10217] FAT-fs (loop5): Directory bread(block 66) failed [ 525.582530][T10217] FAT-fs (loop5): Directory bread(block 67) failed [ 525.598421][T10217] FAT-fs (loop5): Directory bread(block 68) failed [ 525.607546][ T27] audit: type=1326 audit(1754081642.862:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10182 comm="syz.0.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 525.637562][T10217] FAT-fs (loop5): Directory bread(block 69) failed [ 525.664804][T10217] FAT-fs (loop5): Directory bread(block 70) failed [ 525.671854][T10217] FAT-fs (loop5): Directory bread(block 71) failed [ 525.687537][ T27] audit: type=1326 audit(1754081642.862:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10182 comm="syz.0.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 525.720491][T10217] FAT-fs (loop5): Directory bread(block 72) failed [ 525.747689][T10217] FAT-fs (loop5): Directory bread(block 73) failed [ 525.784958][ T27] audit: type=1326 audit(1754081642.862:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10182 comm="syz.0.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 525.828340][T10214] overlayfs: missing 'lowerdir' [ 526.026906][T10222] tipc: Enabling of bearer rejected, failed to enable media [ 526.450530][ T27] audit: type=1326 audit(1754081642.862:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10182 comm="syz.0.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 526.497989][ T27] audit: type=1326 audit(1754081642.862:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10182 comm="syz.0.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 526.703576][ T27] audit: type=1326 audit(1754081642.872:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10182 comm="syz.0.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 526.962650][ T27] audit: type=1326 audit(1754081642.872:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10182 comm="syz.0.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 527.084856][ T27] audit: type=1326 audit(1754081642.872:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10182 comm="syz.0.1923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 527.376545][T10231] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1936'. [ 528.366959][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1939'. [ 528.414974][T10238] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1939'. [ 528.474741][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1939'. [ 528.507997][T10238] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1939'. [ 529.185694][T10256] loop3: detected capacity change from 0 to 4096 [ 529.302336][T10256] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 529.365625][T10256] overlayfs: missing 'lowerdir' [ 529.581036][ T9752] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 529.630061][ T9752] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 530.068897][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 532.171753][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1955'. [ 532.187576][T10283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1955'. [ 532.239453][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1955'. [ 532.298949][T10283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1955'. [ 532.314820][T10278] xt_CT: No such helper "netbios-ns" [ 532.766269][T10297] loop3: detected capacity change from 0 to 256 [ 533.559274][T10297] FAT-fs (loop3): Directory bread(block 64) failed [ 533.584796][T10297] FAT-fs (loop3): Directory bread(block 65) failed [ 533.591739][T10297] FAT-fs (loop3): Directory bread(block 66) failed [ 533.598501][T10297] FAT-fs (loop3): Directory bread(block 67) failed [ 533.605165][T10297] FAT-fs (loop3): Directory bread(block 68) failed [ 533.612278][T10297] FAT-fs (loop3): Directory bread(block 69) failed [ 533.623230][T10297] FAT-fs (loop3): Directory bread(block 70) failed [ 533.677693][T10297] FAT-fs (loop3): Directory bread(block 71) failed [ 533.697121][T10297] FAT-fs (loop3): Directory bread(block 72) failed [ 533.757828][T10297] FAT-fs (loop3): Directory bread(block 73) failed [ 533.766844][T10302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1963'. [ 533.806481][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 533.833715][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 533.853881][T10304] loop5: detected capacity change from 0 to 512 [ 533.856372][T10302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 533.885584][T10304] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 533.999525][T10302] device bridge_slave_0 left promiscuous mode [ 534.015415][T10302] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.034386][T10304] EXT4-fs (loop5): 1 truncate cleaned up [ 534.044775][T10304] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 534.092245][T10302] device bridge_slave_1 left promiscuous mode [ 534.332457][T10302] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.138373][T10302] bond0: (slave bond_slave_0): Releasing backup interface [ 535.285490][T10302] bond0: (slave bond_slave_1): Releasing backup interface [ 535.376616][T10302] team0: Port device team_slave_0 removed [ 535.412169][T10302] team0: Port device team_slave_1 removed [ 535.430464][T10302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.440143][T10302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.445935][ T6020] EXT4-fs (loop5): unmounting filesystem. [ 535.475242][T10302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.513967][T10302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.540827][T10302] bond0: (slave wlan1): Releasing backup interface [ 535.557345][T10302] device ip6gretap1 left promiscuous mode [ 535.580451][T10302] bridge0: port 3(ip6gretap1) entered disabled state [ 535.600133][T10302] bond0: (slave bond1): Releasing backup interface [ 535.656244][T10305] team0: Mode changed to "broadcast" [ 535.714255][T10320] random: crng reseeded on system resumption [ 536.606048][ T27] audit: type=1326 audit(1754081653.992:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 536.675595][ T27] audit: type=1326 audit(1754081653.992:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 536.685480][T10328] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1967'. [ 536.736389][ T27] audit: type=1326 audit(1754081654.062:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 536.770337][ T27] audit: type=1326 audit(1754081654.062:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 536.847462][ T27] audit: type=1326 audit(1754081654.062:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 536.929186][ T27] audit: type=1326 audit(1754081654.062:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 536.975118][ T27] audit: type=1326 audit(1754081654.062:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 537.034221][ T27] audit: type=1326 audit(1754081654.062:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10290 comm="syz.0.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff38eb69 code=0x7ffc0000 [ 538.283099][T10352] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1976'. [ 538.363955][T10354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1977'. [ 539.617105][T10375] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1982'. [ 539.710511][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1983'. [ 540.530608][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1988'. [ 540.589570][T10399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1988'. [ 540.843484][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1988'. [ 541.123262][T10399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1988'. [ 541.806092][T10434] loop5: detected capacity change from 0 to 256 [ 542.047740][T10434] FAT-fs (loop5): Directory bread(block 64) failed [ 542.057542][T10434] FAT-fs (loop5): Directory bread(block 65) failed [ 542.162407][T10434] FAT-fs (loop5): Directory bread(block 66) failed [ 542.221566][T10434] FAT-fs (loop5): Directory bread(block 67) failed [ 542.247960][T10434] FAT-fs (loop5): Directory bread(block 68) failed [ 542.265851][T10434] FAT-fs (loop5): Directory bread(block 69) failed [ 542.288595][T10434] FAT-fs (loop5): Directory bread(block 70) failed [ 542.301706][T10434] FAT-fs (loop5): Directory bread(block 71) failed [ 542.301763][T10442] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1994'. [ 542.325006][T10434] FAT-fs (loop5): Directory bread(block 72) failed [ 542.351192][T10434] FAT-fs (loop5): Directory bread(block 73) failed [ 542.439068][T10446] tipc: Enabling of bearer rejected, failed to enable media [ 543.145892][T10454] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1998'. [ 543.251357][T10454] IPVS: length: 220 != 24 [ 543.282409][T10457] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 543.361347][T10457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 543.398039][T10457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 543.417668][T10457] device bridge_slave_0 left promiscuous mode [ 543.427020][T10457] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.508927][T10457] device bridge_slave_1 left promiscuous mode [ 543.580653][T10457] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.612043][T10457] bond0: (slave bond_slave_0): Releasing backup interface [ 543.664143][T10457] bond0: (slave bond_slave_1): Releasing backup interface [ 544.485546][T10457] team0: Port device team_slave_0 removed [ 544.656115][T10457] team0: Port device team_slave_1 removed [ 544.668780][T10457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.686700][T10457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.703357][T10457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.711773][T10457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.733653][T10457] device ip6gretap1 left promiscuous mode [ 544.740528][T10457] bridge0: port 3(ip6gretap1) entered disabled state [ 544.769456][T10461] netlink: 'syz.0.1999': attribute type 10 has an invalid length. [ 544.819667][T10461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.871949][T10461] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 544.888195][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 544.947626][T10485] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2007'. [ 545.052775][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2008'. [ 545.198365][T10487] device dummy0 entered promiscuous mode [ 545.204177][T10487] device macsec1 entered promiscuous mode [ 545.382519][T10499] tipc: Enabled bearer , priority 0 [ 545.405094][T10499] device syzkaller0 entered promiscuous mode [ 547.171281][ T9754] tipc: Node number set to 1194083888 [ 547.171296][T10505] tipc: Enabling of bearer rejected, failed to enable media [ 547.331420][T10497] tipc: Resetting bearer [ 547.392456][T10497] tipc: Disabling bearer [ 547.684896][T10525] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 547.723041][T10525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 547.744826][T10525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 547.829221][T10530] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2022'. [ 547.854886][T10531] netlink: 'syz.1.2020': attribute type 10 has an invalid length. [ 547.929151][T10531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.954737][T10531] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 547.993126][T10419] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 548.533069][T10549] netlink: 'syz.1.2026': attribute type 4 has an invalid length. [ 548.953731][T10550] netlink: 'syz.1.2026': attribute type 4 has an invalid length. [ 549.487605][T10557] tipc: Enabled bearer , priority 0 [ 549.515427][T10557] device syzkaller0 entered promiscuous mode [ 549.592758][T10556] tipc: Resetting bearer [ 549.722401][T10556] tipc: Disabling bearer [ 549.788788][T10564] tipc: Enabling of bearer rejected, failed to enable media [ 550.313130][T10578] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2039'. [ 550.343039][T10581] tipc: Enabled bearer , priority 0 [ 550.357354][T10580] tipc: Disabling bearer [ 550.446616][T10585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 550.500021][T10585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 550.557959][T10585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 550.944033][T10598] tipc: Enabled bearer , priority 0 [ 550.992237][T10598] tipc: Resetting bearer [ 551.041743][T10597] tipc: Disabling bearer [ 551.991521][T10639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2061'. [ 552.370007][T10651] tipc: Enabling of bearer rejected, failed to enable media [ 553.269924][T10655] vxcan1: MTU too low for tipc bearer [ 553.275420][T10655] tipc: Enabling of bearer rejected, failed to enable media [ 553.693830][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2076'. [ 555.412167][T10713] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2089'. [ 555.581960][T10718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2091'. [ 555.836769][T10710] xt_CT: No such helper "netbios-ns" [ 556.023914][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2098'. [ 556.067769][T10732] device dummy0 entered promiscuous mode [ 556.087458][T10732] device macsec1 entered promiscuous mode [ 556.259098][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2101'. [ 556.313379][T10738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2101'. [ 556.360619][T10742] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2103'. [ 556.380495][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2101'. [ 556.397104][T10738] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2101'. [ 556.789374][T10753] loop3: detected capacity change from 0 to 4096 [ 556.861820][T10753] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 556.925239][T10753] overlayfs: missing 'workdir' [ 557.121667][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 557.526856][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 557.811482][T10783] loop3: detected capacity change from 0 to 256 [ 557.918078][T10783] FAT-fs (loop3): Directory bread(block 64) failed [ 557.937516][T10783] FAT-fs (loop3): Directory bread(block 65) failed [ 557.944232][T10783] FAT-fs (loop3): Directory bread(block 66) failed [ 557.982687][T10783] FAT-fs (loop3): Directory bread(block 67) failed [ 558.000907][T10783] FAT-fs (loop3): Directory bread(block 68) failed [ 558.015374][T10783] FAT-fs (loop3): Directory bread(block 69) failed [ 558.032783][T10783] FAT-fs (loop3): Directory bread(block 70) failed [ 558.047649][T10783] FAT-fs (loop3): Directory bread(block 71) failed [ 558.060401][T10783] FAT-fs (loop3): Directory bread(block 72) failed [ 558.077233][T10783] FAT-fs (loop3): Directory bread(block 73) failed [ 560.240760][T10807] overlayfs: missing 'workdir' [ 560.333149][T10802] xt_CT: No such helper "netbios-ns" [ 560.404968][T10817] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2131'. [ 562.550272][T10851] overlayfs: missing 'workdir' [ 565.067676][ T4318] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 565.092812][T10879] xt_CT: No such helper "netbios-ns" [ 565.277603][ T4318] usb 1-1: Using ep0 maxpacket: 8 [ 565.289947][ T4318] usb 1-1: unable to get BOS descriptor or descriptor too short [ 565.314458][ T4318] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.342968][ T4318] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 565.375617][ T4318] usb 1-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.41 [ 565.407573][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.426301][ T4318] usb 1-1: Product: syz [ 565.436008][ T4318] usb 1-1: Manufacturer: syz [ 565.453677][ T4318] usb 1-1: SerialNumber: syz [ 566.324905][T10876] loop0: detected capacity change from 0 to 32768 [ 566.469857][T10876] loop0: p1 p3 < p5 p6 > [ 566.476594][T10876] loop0: p5 start 117448704 is beyond EOD, truncated [ 567.627524][ T4318] usb 1-1: USB disconnect, device number 5 [ 568.192912][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.199426][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.602178][ T7095] udevd[7095]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 568.613295][ T9288] udevd[9288]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 568.699756][ T5909] udevd[5909]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 569.239765][T11003] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2190'. [ 569.358108][T11006] tipc: Enabled bearer , priority 0 [ 569.518242][T11006] device syzkaller0 entered promiscuous mode [ 569.525223][T11006] tipc: Resetting bearer [ 569.582182][T11004] tipc: Resetting bearer [ 570.454699][ T4318] tipc: Node number set to 37484356 [ 572.962980][T11004] tipc: Disabling bearer [ 573.017996][T11037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2203'. [ 573.216360][T11043] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2206'. [ 573.426300][T11053] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 573.446581][T11053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 573.465213][T11053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 573.511089][T11053] bond0: (slave wlan1): Releasing backup interface [ 573.559121][T11057] netlink: 'syz.1.2210': attribute type 10 has an invalid length. [ 573.580216][T11057] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 573.590101][T11059] !: renamed from dummy0 [ 573.629279][T11059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2213'. [ 573.663954][T11059] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 574.344687][T11084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2218'. [ 574.500389][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2220'. [ 574.681903][T11086] device dummy0 entered promiscuous mode [ 574.697949][T11086] device macsec1 entered promiscuous mode [ 576.373345][T11117] device syzkaller0 entered promiscuous mode [ 576.665605][T11119] infiniband syz1: set down [ 576.675709][T11119] infiniband syz1: added veth1_to_bond [ 576.769698][T11119] RDS/IB: syz1: added [ 576.774027][T11119] smc: adding ib device syz1 with port count 1 [ 576.780707][T11119] smc: ib device syz1 port 1 has pnetid [ 579.051282][T11132] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 579.089420][T11132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 579.097165][T11132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 579.151910][T11132] bond0: (slave batadv_slave_0): Releasing backup interface [ 579.245909][T11132] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 579.273706][T11133] netlink: 'syz.3.2236': attribute type 10 has an invalid length. [ 579.326901][T11133] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 580.953781][T11172] loop3: detected capacity change from 0 to 256 [ 581.022321][T11172] FAT-fs (loop3): Directory bread(block 64) failed [ 581.029706][T11164] device syzkaller0 entered promiscuous mode [ 581.057567][T11172] FAT-fs (loop3): Directory bread(block 65) failed [ 581.064345][T11172] FAT-fs (loop3): Directory bread(block 66) failed [ 581.148348][T11172] FAT-fs (loop3): Directory bread(block 67) failed [ 581.155189][T11172] FAT-fs (loop3): Directory bread(block 68) failed [ 581.197863][T11172] FAT-fs (loop3): Directory bread(block 69) failed [ 581.227526][T11172] FAT-fs (loop3): Directory bread(block 70) failed [ 581.234205][T11172] FAT-fs (loop3): Directory bread(block 71) failed [ 581.257899][T11172] FAT-fs (loop3): Directory bread(block 72) failed [ 581.284928][T11172] FAT-fs (loop3): Directory bread(block 73) failed [ 584.659177][T11179] tipc: Enabled bearer , priority 0 [ 584.688480][T11188] tipc: Resetting bearer [ 584.705528][T11176] tipc: Disabling bearer [ 585.819953][T11216] netlink: 'syz.5.2263': attribute type 4 has an invalid length. [ 586.671619][T11222] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 586.691622][T11217] netlink: 'syz.5.2263': attribute type 4 has an invalid length. [ 587.215491][T11236] tipc: Enabled bearer , priority 0 [ 587.380942][T11236] device syzkaller0 entered promiscuous mode [ 587.403522][T11236] tipc: Resetting bearer [ 587.432113][T11238] tipc: Enabled bearer , priority 0 [ 587.466318][T11245] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2275'. [ 587.494807][T11235] tipc: Resetting bearer [ 591.638653][T11235] tipc: Disabling bearer [ 591.678185][T11256] tipc: Resetting bearer [ 591.705146][T11237] tipc: Disabling bearer [ 591.727649][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2288'. [ 591.770501][T11280] device macsec1 entered promiscuous mode [ 591.776325][T11280] device 0! entered promiscuous mode [ 591.904406][T11287] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2290'. [ 592.059663][T11295] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2293'. [ 592.166925][T11300] loop0: detected capacity change from 0 to 256 [ 592.231347][T11304] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2297'. [ 592.253659][T11300] FAT-fs (loop0): Directory bread(block 64) failed [ 592.271968][T11300] FAT-fs (loop0): Directory bread(block 65) failed [ 592.292593][T11300] FAT-fs (loop0): Directory bread(block 66) failed [ 592.315151][T11300] FAT-fs (loop0): Directory bread(block 67) failed [ 592.329530][T11300] FAT-fs (loop0): Directory bread(block 68) failed [ 592.336400][T11300] FAT-fs (loop0): Directory bread(block 69) failed [ 592.355457][T11300] FAT-fs (loop0): Directory bread(block 70) failed [ 592.365149][T11300] FAT-fs (loop0): Directory bread(block 71) failed [ 592.372408][T11300] FAT-fs (loop0): Directory bread(block 72) failed [ 592.379661][T11300] FAT-fs (loop0): Directory bread(block 73) failed [ 592.554942][T11311] tipc: Enabling of bearer rejected, failed to enable media [ 593.433656][T11318] tipc: Enabled bearer , priority 0 [ 593.533492][T11318] tipc: Resetting bearer [ 593.681741][T11317] tipc: Disabling bearer [ 593.825222][T11329] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2306'. [ 593.889653][T11331] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2307'. [ 593.953524][T11331] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2307'. [ 593.996658][T11333] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2308'. [ 593.997501][T11331] IPVS: length: 220 != 24 [ 594.260651][T11341] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2312'. [ 595.772961][T11362] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2320'. [ 595.832235][T11364] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2321'. [ 595.929517][T11366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2322'. [ 595.981996][T11366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2322'. [ 596.005513][T11366] IPVS: length: 220 != 24 [ 596.260355][T11379] netlink: 'syz.0.2326': attribute type 1 has an invalid length. [ 596.287743][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2326'. [ 596.310234][T11378] netlink: 'syz.2.2328': attribute type 10 has an invalid length. [ 596.336040][T11378] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 596.373860][T11384] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 596.385855][T11383] IPVS: stopping backup sync thread 11384 ... [ 596.514343][T11386] loop3: detected capacity change from 0 to 256 [ 596.626754][T11386] FAT-fs (loop3): Directory bread(block 64) failed [ 596.646667][T11386] FAT-fs (loop3): Directory bread(block 65) failed [ 596.703687][T11386] FAT-fs (loop3): Directory bread(block 66) failed [ 596.726253][T11386] FAT-fs (loop3): Directory bread(block 67) failed [ 596.746566][T11386] FAT-fs (loop3): Directory bread(block 68) failed [ 596.787530][T11386] FAT-fs (loop3): Directory bread(block 69) failed [ 596.794272][T11386] FAT-fs (loop3): Directory bread(block 70) failed [ 596.818386][T11386] FAT-fs (loop3): Directory bread(block 71) failed [ 596.825176][T11386] FAT-fs (loop3): Directory bread(block 72) failed [ 597.185413][T11386] FAT-fs (loop3): Directory bread(block 73) failed [ 598.242917][T11402] IPVS: length: 220 != 24 [ 598.499832][T11407] device bond0 entered promiscuous mode [ 598.505482][T11407] device wlan1 entered promiscuous mode [ 598.536975][T11407] device bond0 left promiscuous mode [ 598.543116][T11407] device wlan1 left promiscuous mode [ 598.653986][T11411] device bond0 entered promiscuous mode [ 598.712625][T11411] device wlan1 entered promiscuous mode [ 598.746517][T11411] device bond0 left promiscuous mode [ 598.767540][T11411] device wlan1 left promiscuous mode [ 598.833194][T11421] netlink: 'syz.1.2345': attribute type 10 has an invalid length. [ 598.947922][T11421] team0: Device dummy0 failed to register rx_handler [ 598.974849][T11426] loop5: detected capacity change from 0 to 512 [ 598.982601][T11430] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 598.997027][T11426] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 599.013328][T11423] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 599.039043][T11426] EXT4-fs (loop5): 1 truncate cleaned up [ 599.044984][T11426] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 599.147821][T11423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 599.209141][T11423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 600.326719][T11423] bond0: (slave wlan1): Releasing backup interface [ 600.386731][T11429] netlink: 'syz.0.2346': attribute type 10 has an invalid length. [ 600.603146][T11429] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 600.630025][ T6020] EXT4-fs (loop5): unmounting filesystem. [ 600.950832][T11455] device geneve2 entered promiscuous mode [ 601.797287][T11477] __nla_validate_parse: 6 callbacks suppressed [ 601.811768][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2366'. [ 602.173357][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 602.203213][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 602.217233][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 602.337207][T11479] bond0: (slave wlan1): Releasing backup interface [ 602.478450][T11479] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 602.513883][T11483] netlink: 'syz.3.2367': attribute type 10 has an invalid length. [ 602.586589][T11483] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 603.595210][T11516] loop5: detected capacity change from 0 to 512 [ 603.623455][T11517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2378'. [ 603.669788][T11516] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 603.712719][T11516] EXT4-fs (loop5): 1 truncate cleaned up [ 603.718605][T11516] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 604.803862][ T6020] EXT4-fs (loop5): unmounting filesystem. [ 605.064228][T11541] (unnamed net_device) (uninitialized): option use_carrier: invalid value (2) [ 605.513394][T11555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2392'. [ 605.562044][T11559] loop3: detected capacity change from 0 to 256 [ 605.673867][T11559] FAT-fs (loop3): Directory bread(block 64) failed [ 605.696298][T11559] FAT-fs (loop3): Directory bread(block 65) failed [ 605.718978][T11559] FAT-fs (loop3): Directory bread(block 66) failed [ 605.754036][T11559] FAT-fs (loop3): Directory bread(block 67) failed [ 605.776714][T11559] FAT-fs (loop3): Directory bread(block 68) failed [ 605.786486][T11559] FAT-fs (loop3): Directory bread(block 69) failed [ 605.793366][T11559] FAT-fs (loop3): Directory bread(block 70) failed [ 605.800347][T11559] FAT-fs (loop3): Directory bread(block 71) failed [ 605.807646][T11559] FAT-fs (loop3): Directory bread(block 72) failed [ 605.814235][T11559] FAT-fs (loop3): Directory bread(block 73) failed [ 607.415677][T11589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2405'. [ 607.672525][T11600] loop3: detected capacity change from 0 to 256 [ 607.782982][T11600] FAT-fs (loop3): Directory bread(block 64) failed [ 607.845618][T11600] FAT-fs (loop3): Directory bread(block 65) failed [ 607.903787][T11600] FAT-fs (loop3): Directory bread(block 66) failed [ 607.938138][T11600] FAT-fs (loop3): Directory bread(block 67) failed [ 607.945566][T11600] FAT-fs (loop3): Directory bread(block 68) failed [ 608.129293][T11604] tipc: Enabling of bearer rejected, failed to enable media [ 608.205899][T11600] FAT-fs (loop3): Directory bread(block 69) failed [ 608.347823][T11600] FAT-fs (loop3): Directory bread(block 70) failed [ 608.605234][T11600] FAT-fs (loop3): Directory bread(block 71) failed [ 608.612019][T11600] FAT-fs (loop3): Directory bread(block 72) failed [ 608.618654][T11600] FAT-fs (loop3): Directory bread(block 73) failed [ 609.396896][T11621] tipc: Enabling of bearer rejected, failed to enable media [ 609.610400][T11629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2418'. [ 609.904878][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2420'. [ 610.084530][T11649] tipc: Enabling of bearer rejected, failed to enable media [ 610.092877][T11648] loop0: detected capacity change from 0 to 512 [ 610.146437][T11648] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 610.228770][T11648] EXT4-fs (loop0): 1 truncate cleaned up [ 610.234527][T11648] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 610.294894][T11659] tipc: Enabling of bearer rejected, failed to enable media [ 611.429760][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 612.676917][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2436'. [ 612.851399][T11684] xt_CT: No such helper "netbios-ns" [ 613.040293][T11704] tipc: Enabling of bearer rejected, failed to enable media [ 613.475414][T11714] loop3: detected capacity change from 0 to 512 [ 613.495496][T11714] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 613.525215][T11714] EXT4-fs (loop3): 1 truncate cleaned up [ 613.541080][T11714] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 614.811005][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 614.940597][T11735] !: renamed from dummy0 [ 615.013864][T11740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2457'. [ 615.029652][T11741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2455'. [ 615.049619][T11741] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 615.067571][T11737] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2456'. [ 615.078122][T11743] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2457'. [ 615.476008][T11748] tipc: Enabling of bearer rejected, failed to enable media [ 619.925431][T11777] xt_CT: No such helper "netbios-ns" [ 620.245826][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2470'. [ 620.370118][T11800] tipc: Enabling of bearer rejected, failed to enable media [ 620.983505][T11821] loop0: detected capacity change from 0 to 512 [ 620.997286][T11821] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 621.036876][T11821] EXT4-fs (loop0): 1 truncate cleaned up [ 621.045341][T11821] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 621.858736][T11836] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2482'. [ 621.861080][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2481'. [ 621.880193][T11834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2481'. [ 621.895932][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 621.993283][T11840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2483'. [ 622.041713][T11838] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2482'. [ 622.193247][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2484'. [ 622.254488][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2481'. [ 622.297950][T11834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2481'. [ 622.647116][T11861] netlink: 'syz.0.2490': attribute type 10 has an invalid length. [ 624.071113][T11875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2492'. [ 624.180507][T11875] device dummy0 entered promiscuous mode [ 624.219623][T11875] device macsec1 entered promiscuous mode [ 625.054179][T11887] loop3: detected capacity change from 0 to 256 [ 625.213220][T11887] FAT-fs (loop3): Directory bread(block 64) failed [ 625.227477][T11887] FAT-fs (loop3): Directory bread(block 65) failed [ 625.235759][T11887] FAT-fs (loop3): Directory bread(block 66) failed [ 625.265719][T11887] FAT-fs (loop3): Directory bread(block 67) failed [ 625.289613][T11887] FAT-fs (loop3): Directory bread(block 68) failed [ 625.322300][T11887] FAT-fs (loop3): Directory bread(block 69) failed [ 625.348358][T11887] FAT-fs (loop3): Directory bread(block 70) failed [ 625.389923][T11887] FAT-fs (loop3): Directory bread(block 71) failed [ 625.423500][T11887] FAT-fs (loop3): Directory bread(block 72) failed [ 625.437887][T11887] FAT-fs (loop3): Directory bread(block 73) failed [ 625.457982][T11890] __nla_validate_parse: 3 callbacks suppressed [ 625.458001][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2499'. [ 625.524343][T11890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2499'. [ 626.718938][T11918] loop3: detected capacity change from 0 to 512 [ 626.767653][T11918] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 626.796751][T11921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2510'. [ 626.821353][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2510'. [ 626.837315][T11921] IPVS: length: 220 != 24 [ 626.975568][T11918] EXT4-fs (loop3): 1 truncate cleaned up [ 626.988816][T11918] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 627.105400][T11928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2511'. [ 629.819921][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.828692][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.034772][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2513'. [ 630.097508][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2513'. [ 630.419986][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2513'. [ 630.457570][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2513'. [ 630.565122][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 631.624691][T11966] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2517'. [ 631.703510][T11969] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2518'. [ 631.782328][T11968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2521'. [ 631.855180][T11968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2521'. [ 631.878429][T11968] IPVS: length: 220 != 24 [ 632.634434][T11982] tipc: Started in network mode [ 632.640193][T11982] tipc: Node identity 4, cluster identity 4711 [ 632.647994][T11982] tipc: Node number set to 4 [ 632.656969][T11985] netlink: 'syz.1.2527': attribute type 3 has an invalid length. [ 632.686189][T11989] loop5: detected capacity change from 0 to 256 [ 632.743530][T11989] FAT-fs (loop5): Directory bread(block 64) failed [ 632.763193][T11989] FAT-fs (loop5): Directory bread(block 65) failed [ 632.795092][T11989] FAT-fs (loop5): Directory bread(block 66) failed [ 632.826511][T11989] FAT-fs (loop5): Directory bread(block 67) failed [ 632.864233][T11989] FAT-fs (loop5): Directory bread(block 68) failed [ 632.901412][T11989] FAT-fs (loop5): Directory bread(block 69) failed [ 632.933113][T11989] FAT-fs (loop5): Directory bread(block 70) failed [ 632.992190][T11989] FAT-fs (loop5): Directory bread(block 71) failed [ 633.013850][T11989] FAT-fs (loop5): Directory bread(block 72) failed [ 633.032779][T11989] FAT-fs (loop5): Directory bread(block 73) failed [ 633.265308][T11996] device syzkaller0 entered promiscuous mode [ 633.811987][T12000] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2532'. [ 634.184023][T12006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2533'. [ 634.193783][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2534'. [ 634.220562][T12011] netlink: 'syz.0.2535': attribute type 10 has an invalid length. [ 634.267935][T12011] team0: Device dummy0 failed to register rx_handler [ 634.301768][T12012] IPVS: length: 220 != 24 [ 634.329025][T12006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2533'. [ 634.757560][T12023] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2539'. [ 636.192900][T12048] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2546'. [ 636.398438][T12049] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 637.758225][T12069] device syzkaller0 entered promiscuous mode [ 637.894127][T12061] xt_CT: No such helper "netbios-ns" [ 638.235135][T12082] loop3: detected capacity change from 0 to 256 [ 638.346400][T12082] FAT-fs (loop3): Directory bread(block 64) failed [ 638.369346][T12082] FAT-fs (loop3): Directory bread(block 65) failed [ 638.389912][T12082] FAT-fs (loop3): Directory bread(block 66) failed [ 638.416866][T12082] FAT-fs (loop3): Directory bread(block 67) failed [ 638.436512][T12082] FAT-fs (loop3): Directory bread(block 68) failed [ 638.458713][T12082] FAT-fs (loop3): Directory bread(block 69) failed [ 638.491118][T12082] FAT-fs (loop3): Directory bread(block 70) failed [ 638.512138][T12082] FAT-fs (loop3): Directory bread(block 71) failed [ 638.559748][T12082] FAT-fs (loop3): Directory bread(block 72) failed [ 638.594212][T12082] FAT-fs (loop3): Directory bread(block 73) failed [ 639.664942][T12104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2565'. [ 639.825318][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2568'. [ 639.963449][T12119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2572'. [ 640.364510][T12130] loop5: detected capacity change from 0 to 256 [ 640.455988][T12130] FAT-fs (loop5): Directory bread(block 64) failed [ 640.483755][T12130] FAT-fs (loop5): Directory bread(block 65) failed [ 640.497545][T12130] FAT-fs (loop5): Directory bread(block 66) failed [ 640.509570][T12130] FAT-fs (loop5): Directory bread(block 67) failed [ 640.529562][T12130] FAT-fs (loop5): Directory bread(block 68) failed [ 640.551819][T12130] FAT-fs (loop5): Directory bread(block 69) failed [ 640.573823][T12130] FAT-fs (loop5): Directory bread(block 70) failed [ 640.595734][T12130] FAT-fs (loop5): Directory bread(block 71) failed [ 640.617630][T12130] FAT-fs (loop5): Directory bread(block 72) failed [ 640.633965][T12130] FAT-fs (loop5): Directory bread(block 73) failed [ 640.651029][T12142] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2580'. [ 643.101138][T12173] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.135658][T12173] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.198124][T12175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2591'. [ 643.219084][T12175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2591'. [ 643.263849][T12175] device ip6gretap0 entered promiscuous mode [ 643.277190][T12175] device batadv_slave_1 entered promiscuous mode [ 643.299335][ T4933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 643.324631][T12181] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2593'. [ 643.568922][T12173] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.596452][T12173] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.644395][T12187] IPVS: Unknown mcast interface: bond0 [ 643.653415][T12189] loop3: detected capacity change from 0 to 256 [ 643.657179][T12187] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2595'. [ 643.729351][T12189] FAT-fs (loop3): Directory bread(block 64) failed [ 643.741430][T12189] FAT-fs (loop3): Directory bread(block 65) failed [ 643.764320][T12192] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2595'. [ 643.765471][T12189] FAT-fs (loop3): Directory bread(block 66) failed [ 643.781017][T12189] FAT-fs (loop3): Directory bread(block 67) failed [ 643.787904][T12189] FAT-fs (loop3): Directory bread(block 68) failed [ 643.794921][T12189] FAT-fs (loop3): Directory bread(block 69) failed [ 643.801828][T12189] FAT-fs (loop3): Directory bread(block 70) failed [ 643.808701][T12189] FAT-fs (loop3): Directory bread(block 71) failed [ 643.808977][T12192] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2595'. [ 643.815495][T12189] FAT-fs (loop3): Directory bread(block 72) failed [ 643.844017][T12189] FAT-fs (loop3): Directory bread(block 73) failed [ 643.859915][T12173] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 643.884160][T12173] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.146705][T12173] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 645.125568][T12173] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.676571][T12204] loop3: detected capacity change from 0 to 512 [ 645.746730][T12173] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 645.775771][T12204] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 645.799764][T12173] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.834749][T12204] EXT4-fs (loop3): 1 truncate cleaned up [ 645.844088][T12204] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 645.903410][T12173] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.025314][T12173] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.086003][T12173] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.108028][T12173] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.123873][T12173] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 646.132365][T12173] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.972611][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 647.162015][T12223] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2607'. [ 647.310497][T12230] loop3: detected capacity change from 0 to 256 [ 647.402519][T12230] FAT-fs (loop3): Directory bread(block 64) failed [ 647.432720][T12230] FAT-fs (loop3): Directory bread(block 65) failed [ 647.481918][T12230] FAT-fs (loop3): Directory bread(block 66) failed [ 647.491876][T12230] FAT-fs (loop3): Directory bread(block 67) failed [ 647.498926][T12230] FAT-fs (loop3): Directory bread(block 68) failed [ 647.505639][T12230] FAT-fs (loop3): Directory bread(block 69) failed [ 647.512750][T12230] FAT-fs (loop3): Directory bread(block 70) failed [ 647.525761][T12230] FAT-fs (loop3): Directory bread(block 71) failed [ 647.532959][T12230] FAT-fs (loop3): Directory bread(block 72) failed [ 647.540021][T12230] FAT-fs (loop3): Directory bread(block 73) failed [ 650.195562][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2614'. [ 651.436948][T12270] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2621'. [ 651.510180][T12270] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 651.531434][T12270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 651.555410][T12270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 651.715962][T12270] bond0: (slave wlan1): Releasing backup interface [ 651.797194][T12270] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 651.966877][T12272] team0: Mode changed to "broadcast" [ 652.043083][T12274] device vlan0 entered promiscuous mode [ 652.134206][T12274] team0: Port device vlan0 added [ 652.158092][T12280] IPv6: syztnl1: Disabled Multicast RS [ 652.206139][T12276] tipc: Enabled bearer , priority 31 [ 652.471694][T12290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2625'. [ 652.489029][T12290] netlink: 'syz.0.2625': attribute type 10 has an invalid length. [ 653.205203][T12304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2630'. [ 653.509867][T12310] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2632'. [ 653.535862][T12310] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2632'. [ 653.960292][T12318] device syzkaller0 entered promiscuous mode [ 654.549745][T12315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.498559][T12320] IPv6: Can't replace route, no match found [ 657.506451][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2637'. [ 657.534685][T12328] netlink: 'syz.2.2637': attribute type 10 has an invalid length. [ 657.834308][T12344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2641'. [ 658.893858][T12367] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2650'. [ 659.191219][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2653'. [ 659.232954][T12376] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 659.669471][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 659.682116][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 659.692557][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 659.706166][T12387] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 659.716278][T12387] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 659.724047][T12387] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 660.063189][T12392] tipc: Enabled bearer , priority 0 [ 660.117047][T12392] device syzkaller0 entered promiscuous mode [ 660.351436][T12395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2659'. [ 660.378647][T12395] IPVS: length: 220 != 24 [ 660.827460][T12408] tipc: Resetting bearer [ 661.787658][T12387] Bluetooth: hci3: command 0x0409 tx timeout [ 661.928155][T12422] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 661.967693][T12425] tipc: Enabling of bearer rejected, failed to enable media [ 662.121146][T12386] chnl_net:caif_netlink_parms(): no params data found [ 662.442963][T12386] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.450852][T12386] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.492231][T12440] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2675'. [ 662.518633][T12386] device bridge_slave_0 entered promiscuous mode [ 662.537665][T12441] IPVS: length: 220 != 24 [ 662.557668][T12438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2673'. [ 662.600835][T12386] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.622524][T12386] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.653871][T12386] device bridge_slave_1 entered promiscuous mode [ 662.817503][T12386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.859878][T12386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.860308][T12449] loop3: detected capacity change from 0 to 512 [ 662.900212][T12449] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 662.993722][T12449] EXT4-fs (loop3): 1 truncate cleaned up [ 662.999555][T12449] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 663.171731][T12386] team0: Port device team_slave_0 added [ 663.249107][T12386] team0: Port device team_slave_1 added [ 663.887470][T12387] Bluetooth: hci3: command 0x041b tx timeout [ 663.956678][T12460] device syzkaller0 entered promiscuous mode [ 664.043936][T12465] tipc: Enabled bearer , priority 0 [ 664.061269][T12386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.072695][T12386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.106050][T12386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.107246][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 664.123288][T12457] tipc: Resetting bearer [ 664.918796][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2684'. [ 665.958941][T12387] Bluetooth: hci3: command 0x040f tx timeout [ 666.895721][T12457] tipc: Disabling bearer [ 666.903976][T12386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.911369][T12386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.938109][T12386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.090623][ T41] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.138050][ T41] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.161234][T12483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2687'. [ 667.194416][T12483] IPVS: length: 220 != 24 [ 667.299964][ T41] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.347672][ T41] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.407213][T12386] device hsr_slave_0 entered promiscuous mode [ 667.453812][T12386] device hsr_slave_1 entered promiscuous mode [ 667.481791][T12496] loop3: detected capacity change from 0 to 512 [ 667.489287][T12386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 667.505795][T12386] Cannot create hsr debugfs directory [ 667.513939][T12496] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 667.580948][ T41] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.587713][T12496] EXT4-fs (loop3): 1 truncate cleaned up [ 667.597148][T12496] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 667.623309][ T41] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.870925][ T41] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.039175][T12387] Bluetooth: hci3: command 0x0419 tx timeout [ 668.202003][ T41] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.720348][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 668.839554][T12509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2694'. [ 668.861111][T12509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2694'. [ 668.892676][T12386] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 668.960925][T12386] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 668.998757][T12386] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 669.072267][T12386] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 669.088039][ T41] tipc: Left network mode [ 669.166014][T12517] tipc: Enabled bearer , priority 0 [ 669.200304][ T41] bridge0: port 3(ip6gretap1) entered disabled state [ 669.289330][ T41] device ip6gretap1 left promiscuous mode [ 669.296673][ T41] bridge0: port 3(ip6gretap1) entered disabled state [ 669.399848][T12530] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2700'. [ 669.415006][T12517] device syzkaller0 entered promiscuous mode [ 669.425930][T12517] tipc: Resetting bearer [ 669.489284][T12534] IPVS: length: 220 != 24 [ 669.537884][T12530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2700'. [ 669.558370][T12515] tipc: Resetting bearer [ 669.751890][T12548] loop3: detected capacity change from 0 to 512 [ 669.778394][T12548] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 669.822803][T12548] EXT4-fs (loop3): 1 truncate cleaned up [ 669.840936][T12548] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 670.968493][ T4266] EXT4-fs (loop3): unmounting filesystem. [ 673.528560][T12515] tipc: Disabling bearer [ 674.048683][T12386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.171265][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 674.193483][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 674.269602][T12386] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.332685][T12588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2712'. [ 674.371608][T12583] device syzkaller0 entered promiscuous mode [ 674.383248][T12588] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2712'. [ 674.396452][T12588] IPVS: length: 220 != 24 [ 674.828551][T12601] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 677.528519][T12590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2713'. [ 677.545430][T12590] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 677.553834][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 677.565025][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 677.574047][ T5262] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.581287][ T5262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.592392][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 677.633575][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2714'. [ 677.681852][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 677.693020][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 677.705755][ T5262] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.713028][ T5262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.836692][T12612] tipc: Enabling of bearer rejected, failed to enable media [ 677.874060][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 677.899372][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 677.924582][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 677.959041][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 677.968327][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 678.138167][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 678.155249][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 678.186019][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 678.209013][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 678.410862][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 678.428636][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 678.452638][T12386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 678.872606][T12642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2722'. [ 678.996517][T12646] IPVS: length: 220 != 24 [ 680.084701][T12631] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.093362][T12631] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.101848][T12631] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.110452][T12631] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.181952][T12631] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.190840][T12631] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.199297][T12631] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.207735][T12631] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.232544][T12631] device macsec1 left promiscuous mode [ 680.271533][T12642] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2722'. [ 680.804586][ T41] device hsr_slave_0 left promiscuous mode [ 680.822336][ T41] device hsr_slave_1 left promiscuous mode [ 680.851128][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.879224][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.887291][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.895122][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.928434][ T41] device bridge_slave_1 left promiscuous mode [ 680.934782][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.960846][ T41] device bridge_slave_0 left promiscuous mode [ 680.967233][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.017180][ T41] device dummy0 left promiscuous mode [ 681.035995][ T41] device veth1_macvtap left promiscuous mode [ 681.042786][ T41] device veth0_macvtap left promiscuous mode [ 681.049620][ T41] device veth1_vlan left promiscuous mode [ 681.055768][ T41] device veth0_vlan left promiscuous mode [ 682.149834][ T41] team0 (unregistering): Port device team_slave_1 removed [ 682.204758][ T41] team0 (unregistering): Port device team_slave_0 removed [ 682.816627][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2725'. [ 682.835679][T12665] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 682.868069][T12681] tipc: Enabled bearer , priority 0 [ 682.912624][T12683] device syzkaller0 entered promiscuous mode [ 682.920273][T12683] tipc: Resetting bearer [ 682.961853][T12677] tipc: Resetting bearer [ 685.632769][T12677] tipc: Disabling bearer [ 685.655198][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 685.674096][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 685.737718][T12386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.653330][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2736'. [ 686.672289][T12725] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 687.025637][T12732] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2737'. [ 687.078870][T12736] tipc: Enabled bearer , priority 0 [ 687.115552][T12732] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 687.375017][T12736] device syzkaller0 entered promiscuous mode [ 687.382621][T12736] tipc: Resetting bearer [ 687.449944][T12734] tipc: Resetting bearer [ 690.181628][T12734] tipc: Disabling bearer [ 690.189454][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 690.202853][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 690.218158][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2741'. [ 690.385405][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 690.408674][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 690.429386][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 690.448339][ T5262] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 690.478878][T12386] device veth0_vlan entered promiscuous mode [ 690.520104][T12386] device veth1_vlan entered promiscuous mode [ 690.629162][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 690.652182][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 690.676653][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 690.711511][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 690.743617][T12386] device veth0_macvtap entered promiscuous mode [ 690.840852][T12386] device veth1_macvtap entered promiscuous mode [ 690.930898][T12386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.003321][T12386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.070156][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.076551][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.076722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 691.114284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 691.133171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 691.143100][T12780] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 691.175518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 691.205337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 691.236446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 691.280070][T12785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2747'. [ 691.368920][T12386] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.398357][T12386] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.436635][T12386] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.464038][T12386] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.624972][T12793] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2750'. [ 691.881926][ T5262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.927441][ T5262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.983162][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 692.028327][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.040140][ T4318] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 692.060803][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.112190][ T5795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 692.122813][ T4318] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 692.321892][T12810] tipc: Enabling of bearer rejected, already enabled [ 692.741493][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2754'. [ 693.345191][T12838] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2761'. [ 694.836743][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2765'. [ 695.208192][T12865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2768'. [ 695.273312][T12865] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 695.310804][T12866] dummy0: Device is already in use. [ 695.606252][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2769'. [ 696.589956][T12889] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2773'. [ 697.178370][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 697.189416][ T4279] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 697.203471][ T4279] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 697.223256][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 697.237798][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 697.246614][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 697.515935][ T4892] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.599826][ T4892] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.804152][ T4892] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.845155][ T4892] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.886769][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2780'. [ 697.915542][T12917] IPv6: ADDRCONF(NETDEV_CHANGE): gre4: link becomes ready [ 697.964730][T12903] device syzkaller0 entered promiscuous mode [ 697.977172][T12903] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 698.154584][ T4892] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.197645][ T4892] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.635959][ T4892] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.837559][ T4318] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 699.045759][ T4892] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.097731][ T4318] usb 4-1: Using ep0 maxpacket: 8 [ 699.114782][ T4318] usb 4-1: unable to get BOS descriptor or descriptor too short [ 699.228979][ T4318] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.262317][T12936] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2784'. [ 699.267605][ T4318] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 699.307531][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 699.317610][ T4318] usb 4-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.41 [ 699.335630][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.380182][T12936] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 699.401149][ T4318] usb 4-1: Product: syz [ 699.415719][ T4318] usb 4-1: Manufacturer: syz [ 699.452516][ T4318] usb 4-1: SerialNumber: syz [ 699.968400][T12931] loop3: detected capacity change from 0 to 32768 [ 700.042955][T12931] loop3: p1 p3 < p5 p6 > [ 700.054874][T12931] loop3: p5 start 117448704 is beyond EOD, truncated [ 700.359661][T12898] chnl_net:caif_netlink_parms(): no params data found [ 700.518159][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2790'. [ 700.551509][T12958] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 701.049270][T12898] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.062966][T12898] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.098818][T12898] device bridge_slave_0 entered promiscuous mode [ 701.288055][ T127] usb 4-1: USB disconnect, device number 6 [ 701.364396][T12898] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.377506][T12898] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.387434][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 701.430850][T12898] device bridge_slave_1 entered promiscuous mode [ 701.711515][T12898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.946252][T12898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.703912][T12991] netlink: 'syz.3.2794': attribute type 4 has an invalid length. [ 702.883982][T12945] udevd[12945]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 702.902115][T12652] udevd[12652]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 702.918654][T12689] udevd[12689]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 703.067127][T12898] team0: Port device team_slave_0 added [ 703.133646][T12898] team0: Port device team_slave_1 added [ 703.315164][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2800'. [ 703.470564][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 703.503104][ T4892] bond0: (slave wlan1): Releasing backup interface [ 703.523220][ T4892] bond0: Destroying bond [ 704.357759][ T4340] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 704.567560][ T4340] usb 4-1: Using ep0 maxpacket: 8 [ 704.582768][ T4340] usb 4-1: unable to get BOS descriptor or descriptor too short [ 704.664076][ T4340] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 704.692984][ T4340] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 704.710483][ T4340] usb 4-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.41 [ 704.732185][ T4340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.742229][ T4340] usb 4-1: Product: syz [ 704.746562][ T4340] usb 4-1: Manufacturer: syz [ 704.751336][ T4340] usb 4-1: SerialNumber: syz [ 704.794936][ T4892] bond0 (unregistering): Released all slaves [ 704.815080][T12898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.822599][T12898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.868028][T12898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.881557][T12898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.889555][T12898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.915923][T12898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.238206][T13015] loop3: detected capacity change from 0 to 32768 [ 705.282409][T13015] loop3: p1 p3 < p5 p6 > [ 705.289308][T13015] loop3: p5 start 117448704 is beyond EOD, truncated [ 705.430119][T12898] device hsr_slave_0 entered promiscuous mode [ 705.453771][T12898] device hsr_slave_1 entered promiscuous mode [ 705.485029][T12898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 705.498976][T12898] Cannot create hsr debugfs directory [ 705.527623][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2807'. [ 705.557683][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 706.674295][ T127] usb 4-1: USB disconnect, device number 7 [ 706.729603][T13039] netlink: 'syz.6.2808': attribute type 4 has an invalid length. [ 707.246307][ T4892] device hsr_slave_0 left promiscuous mode [ 707.296250][ T4892] device hsr_slave_1 left promiscuous mode [ 707.307849][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 707.319741][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 707.328227][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Not tainted 6.1.147-syzkaller #0 [ 707.336255][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 707.346357][ C1] RIP: 0010:fq_codel_enqueue+0xd2d/0x1590 [ 707.352139][ C1] Code: 24 08 48 8b 44 24 20 80 3c 10 00 74 12 4c 89 ef e8 38 c3 82 f9 48 ba 00 00 00 00 00 fc ff df 4d 8b 65 00 4c 89 e0 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 e7 e8 15 c3 82 f9 48 ba 00 00 00 00 00 fc [ 707.371792][ C1] RSP: 0018:ffffc900001b77a0 EFLAGS: 00010246 [ 707.377907][ C1] RAX: 0000000000000000 RBX: 1ffff92000036f44 RCX: 1ffff11003b72c5a [ 707.385926][ C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 707.393950][ C1] RBP: ffffc900001b78f0 R08: dffffc0000000000 R09: fffffbfff215ba7f [ 707.401973][ C1] R10: fffffbfff215ba7f R11: 1ffffffff215ba7e R12: 0000000000000000 [ 707.409985][ C1] R13: ffff8880570e0000 R14: 0000000000000000 R15: 0000000000000000 [ 707.417980][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 707.426934][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 707.433533][ C1] CR2: 00007fbf25384f18 CR3: 00000000744ed000 CR4: 00000000003506e0 [ 707.441527][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 707.449517][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 707.457507][ C1] Call Trace: [ 707.460799][ C1] [ 707.463754][ C1] ? INET_ECN_set_ce+0x960/0x960 [ 707.468720][ C1] ? ktime_get+0x247/0x270 [ 707.473164][ C1] netem_dequeue+0xcfc/0x13c0 [ 707.477882][ C1] ? netem_enqueue+0x36f0/0x36f0 [ 707.482852][ C1] __qdisc_run+0x247/0x15f0 [ 707.487399][ C1] qdisc_run+0xc2/0x230 [ 707.491610][ C1] net_tx_action+0x764/0x920 [ 707.496258][ C1] ? net_tx_action+0x5e6/0x920 [ 707.501044][ C1] ? process_backlog+0x6e0/0x6e0 [ 707.506178][ C1] ? lock_chain_count+0x20/0x20 [ 707.511063][ C1] handle_softirqs+0x2a1/0x920 [ 707.515884][ C1] ? run_ksoftirqd+0x98/0xf0 [ 707.520495][ C1] ? do_softirq+0x200/0x200 [ 707.525028][ C1] run_ksoftirqd+0x98/0xf0 [ 707.529471][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 707.534687][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 707.540097][ C1] ? takeover_tasklets+0x800/0x800 [ 707.545234][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 707.550450][ C1] smpboot_thread_fn+0x64a/0xa40 [ 707.555410][ C1] ? smpboot_thread_fn+0x4c/0xa40 [ 707.560464][ C1] kthread+0x29d/0x330 [ 707.564566][ C1] ? cpu_report_death+0x230/0x230 [ 707.569648][ C1] ? kthread_blkcg+0xd0/0xd0 [ 707.574266][ C1] ret_from_fork+0x1f/0x30 [ 707.578712][ C1] [ 707.581755][ C1] Modules linked in: [ 707.585775][ C1] ---[ end trace 0000000000000000 ]--- [ 707.591308][ C1] RIP: 0010:fq_codel_enqueue+0xd2d/0x1590 [ 707.597085][ C1] Code: 24 08 48 8b 44 24 20 80 3c 10 00 74 12 4c 89 ef e8 38 c3 82 f9 48 ba 00 00 00 00 00 fc ff df 4d 8b 65 00 4c 89 e0 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 e7 e8 15 c3 82 f9 48 ba 00 00 00 00 00 fc [ 707.616786][ C1] RSP: 0018:ffffc900001b77a0 EFLAGS: 00010246 [ 707.622949][ C1] RAX: 0000000000000000 RBX: 1ffff92000036f44 RCX: 1ffff11003b72c5a [ 707.631010][ C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 707.639067][ C1] RBP: ffffc900001b78f0 R08: dffffc0000000000 R09: fffffbfff215ba7f [ 707.647104][ C1] R10: fffffbfff215ba7f R11: 1ffffffff215ba7e R12: 0000000000000000 [ 707.655164][ C1] R13: ffff8880570e0000 R14: 0000000000000000 R15: 0000000000000000 [ 707.663245][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 707.672268][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 707.678964][ C1] CR2: 00007fbf25384f18 CR3: 00000000744ed000 CR4: 00000000003506e0 [ 707.686992][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 707.695070][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 707.703158][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 707.710752][ C1] Kernel Offset: disabled [ 707.715106][ C1] Rebooting in 86400 seconds..