last executing test programs: 9m20.653160463s ago: executing program 32 (id=47): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0xffffffffffffff62, &(0x7f0000389000/0x2000)=nil, 0x4) socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000002e000000080003", @ANYRES32], 0x48}}, 0x40) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 9m11.876672954s ago: executing program 33 (id=71): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sysinfo(&(0x7f0000000180)=""/68) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) 9m1.187481329s ago: executing program 34 (id=107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000140)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@stripe={'stripe', 0x3d, 0x3}}, {@bsdgroups}, {@oldalloc}]}, 0x43, 0x460, &(0x7f0000000780)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) syz_emit_ethernet(0x36, &(0x7f0000000000)={@multicast, @random="35746cda00", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x0, 0x2c, 0xff, @remote, @local}}}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325c671, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 8m30.29741095s ago: executing program 35 (id=155): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0xf8) 8m23.491140838s ago: executing program 36 (id=163): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffff9eef}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x2}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0xfcff, 0x0, 0x0}) 8m0.530637388s ago: executing program 37 (id=170): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000140)=0x900000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty=0xe0000001}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x3}}}}}}, 0x0) 7m20.657183932s ago: executing program 38 (id=212): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000180), 0x7, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="06001200000000000600b50085010200040013000a00060008021100000000000c0043"], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) 7m12.321644607s ago: executing program 39 (id=225): ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1d3942, 0x0) sendfile(r0, r0, 0x0, 0x200000) 7m12.150478116s ago: executing program 40 (id=226): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) 6m38.780175842s ago: executing program 41 (id=306): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000006000)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x102, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000080)={0xa, 0x4e21, 0x10, @private1}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m23.985414936s ago: executing program 42 (id=322): landlock_create_ruleset(0x0, 0x0, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000480)={0x9, {{0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0xe6ec}}}, 0x108) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x100010, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x3, 0x2002) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tracefs\x00', 0x2204c96, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000240)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/21, 0x15}], 0x1) 5m28.3705656s ago: executing program 5 (id=436): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 5m24.843093705s ago: executing program 5 (id=439): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000640)={@val={0x0, 0x884c}, @void, @eth={@multicast, @broadcast, @val={@void, {0x8100, 0x6, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x1c, 0xe4, 0x0, 0x8, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @broadcast}, "ba95a6a890b35a77"}}}}}, 0x32) 5m23.067492087s ago: executing program 5 (id=444): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 5m22.173216078s ago: executing program 5 (id=448): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1010000, &(0x7f00000000c0)={[{@nonumtail}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@uni_xlate}, {@rodir}, {@utf8no}, {@utf8}, {@numtail}, {@fat=@fmask={'fmask', 0x3d, 0x5}}, {@uni_xlateno}, {@uni_xlate}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@rodir}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@fat=@nocase}, {@fat=@errors_remount}]}, 0x1, 0x36a, &(0x7f0000001840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c38303231"], 0x20}}, 0x0) 5m18.505296418s ago: executing program 5 (id=453): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[], 0x40}}, 0x0) 5m17.79012767s ago: executing program 5 (id=455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x10, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) syz_open_dev$video(0x0, 0xa8, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @random="c4bc9cac9686", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1e, 0x28, 0x67, 0x0, 0x9, 0x6, 0x0, @multicast1, @remote}, {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x1, 0x0, 0x1}}}}}}, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000c80)="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"}) 5m2.532892891s ago: executing program 43 (id=455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x10, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) syz_open_dev$video(0x0, 0xa8, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @random="c4bc9cac9686", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1e, 0x28, 0x67, 0x0, 0x9, 0x6, 0x0, @multicast1, @remote}, {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x1, 0x0, 0x1}}}}}}, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000c80)="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"}) 1m38.928602622s ago: executing program 1 (id=1424): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 1m37.396248009s ago: executing program 1 (id=1432): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x6, 0x59ee}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[], 0x8) 1m35.928555436s ago: executing program 1 (id=1438): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x800c808}, 0x4040) recvmmsg(r0, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000002c00)=""/4064, 0xfe0}], 0x2}, 0x70001}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000000500)}, 0x2}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x102, 0x0) 1m34.365263328s ago: executing program 1 (id=1446): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x24, 0x107, 0xfffffffe, 0x0, {0x7, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x400cc}, 0x8010) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m34.323705988s ago: executing program 9 (id=1447): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002280)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 1m33.457696269s ago: executing program 9 (id=1451): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) syz_open_dev$usbfs(0x0, 0x75, 0x109341) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m33.390205664s ago: executing program 1 (id=1452): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) 1m32.723600624s ago: executing program 1 (id=1454): r0 = socket(0x2, 0x80805, 0x0) unshare(0x22020600) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e22, 0x3, 'lc\x00', 0x24, 0x7, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcb, 0x12d5f, 0x3}}, 0x44) 1m31.935727928s ago: executing program 9 (id=1458): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4880}, 0x4c080) 1m31.345566772s ago: executing program 9 (id=1461): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002280)={0x2c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}, @NL80211_ATTR_TX_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 1m30.713252205s ago: executing program 9 (id=1464): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) 1m30.014632523s ago: executing program 9 (id=1467): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m24.163397523s ago: executing program 7 (id=1482): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x800c808}, 0x4040) recvmmsg(r0, &(0x7f0000006000)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000006c0)=""/137, 0x89}, {&(0x7f0000002c00)=""/4064, 0xfe0}], 0x2}, 0x70001}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000000500)}, 0x2}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x102, 0x0) 1m22.918605966s ago: executing program 7 (id=1485): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[], 0x58}}, 0x0) 1m22.466591082s ago: executing program 7 (id=1487): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r1, 0xfffffff9, 0xd}, &(0x7f0000000280)=0xc) 1m22.005199606s ago: executing program 7 (id=1488): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}}, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000)=0x9, 0x4) socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfdff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x7f, 0x0}}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'batadv_slave_0\x00'}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 1m21.658965152s ago: executing program 7 (id=1489): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) 1m21.05529159s ago: executing program 7 (id=1491): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000280)="b5", 0x1, 0x45, 0x0, 0x0) shutdown(r0, 0x1) 1m19.984761371s ago: executing program 3 (id=1494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x43}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048051}, 0x20000800) 1m19.579983107s ago: executing program 3 (id=1496): close(0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x1, @loopback, 0xffff}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0xfffffffc, @local}], 0x1c) 1m18.952096322s ago: executing program 3 (id=1497): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[], 0x58}}, 0x0) 1m18.613206264s ago: executing program 3 (id=1499): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000000)=0x9, 0x4) socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfdff}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x7f, 0x0}}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'batadv_slave_0\x00'}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 1m18.213970133s ago: executing program 3 (id=1501): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file1\x00'}) 1m17.781489248s ago: executing program 3 (id=1502): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x14, 0xffffff87}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) 1m17.287223686s ago: executing program 44 (id=1454): r0 = socket(0x2, 0x80805, 0x0) unshare(0x22020600) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e22, 0x3, 'lc\x00', 0x24, 0x7, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcb, 0x12d5f, 0x3}}, 0x44) 1m14.105590988s ago: executing program 45 (id=1467): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m4.949527075s ago: executing program 46 (id=1491): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000280)="b5", 0x1, 0x45, 0x0, 0x0) shutdown(r0, 0x1) 1m2.475525424s ago: executing program 47 (id=1502): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x14, 0xffffff87}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) 9.204919695s ago: executing program 2 (id=1639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) 8.176407271s ago: executing program 2 (id=1643): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x4000) 7.670752826s ago: executing program 0 (id=1646): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 7.238167371s ago: executing program 2 (id=1648): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 6.770864532s ago: executing program 0 (id=1651): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 6.493547344s ago: executing program 2 (id=1652): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x1e, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x800c808}, 0x4040) recvmmsg(r0, 0x0, 0x0, 0x102, 0x0) 6.336052299s ago: executing program 4 (id=1653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) 6.290252432s ago: executing program 8 (id=1654): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0xfffffffd, 0x79b}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.276344219s ago: executing program 6 (id=1655): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200800, 0x0) close(r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x4850) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1200, r6, 0x25}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x0) 5.815259552s ago: executing program 2 (id=1656): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$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") setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x7fffffff, {{0x2, 0x4e21, @loopback}}}, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x100005e3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240000d0}, 0x2400c002) r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500ea8c56a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000880) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@generic={0x91, 0x1, 0x1, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) getsockopt$packet_int(r3, 0x107, 0x9, &(0x7f0000000000), &(0x7f00000000c0)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) 5.611712269s ago: executing program 4 (id=1657): bind$can_raw(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 5.599229332s ago: executing program 8 (id=1658): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000) 5.234084458s ago: executing program 6 (id=1659): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x24, 0x107, 0xfffffffe, 0x0, {0x7, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x400cc}, 0x8010) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.195637432s ago: executing program 0 (id=1660): socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket(0x40000000015, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) 4.671900517s ago: executing program 8 (id=1661): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 4.379571081s ago: executing program 6 (id=1662): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x81, 0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x22}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r1, 0xfffffff9, 0xd}, 0x0) 4.15472619s ago: executing program 4 (id=1663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) 4.118187276s ago: executing program 0 (id=1664): r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r3, @ANYBLOB="28003300d00093ea3b3f110000010802110000005050505050500000000425030000b07c"], 0x44}}, 0x0) 3.825641756s ago: executing program 8 (id=1665): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, r1, 0x1, 0xfffffffe, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x200c4011}, 0x0) 3.603761493s ago: executing program 6 (id=1666): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x1e, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x800c808}, 0x4040) recvmmsg(r0, &(0x7f0000006000), 0x0, 0x102, 0x0) 3.078274512s ago: executing program 4 (id=1667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) 2.806758679s ago: executing program 8 (id=1668): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0xfffffffd, 0x79b}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.6866011s ago: executing program 0 (id=1669): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200800, 0x0) close(r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x4850) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x1200, r6, 0x25}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x0) 2.355760998s ago: executing program 6 (id=1670): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.130307498s ago: executing program 4 (id=1671): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, 0x0, 0xf0, {0x0, 0x0, 0x1}, 0x2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c081}, 0x40000) 1.876311799s ago: executing program 8 (id=1672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80181, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@initdev, @multicast1}, &(0x7f00000002c0)=0xc) sendmsg$nl_route_sched(r4, 0x0, 0x20040084) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x80}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r7, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 1.515321913s ago: executing program 2 (id=1673): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000300)=ANY=[], 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0xfffffffffffffecc) 1.46154201s ago: executing program 0 (id=1674): socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket(0x40000000015, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) 30.739627ms ago: executing program 4 (id=1675): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x4000000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x6, 0x59ee}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000003c0)=ANY=[], 0x8) 0s ago: executing program 6 (id=1676): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x81, 0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x22}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r1, 0xfffffff9, 0xd}, 0x0) kernel console output (not intermixed with test programs): 4.911152][ T1085] bridge_slave_1: left promiscuous mode [ 344.940750][ T1085] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.003284][ T1085] bridge_slave_0: left allmulticast mode [ 345.019130][ T1085] bridge_slave_0: left promiscuous mode [ 345.048541][ T1085] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.171486][ T5581] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.185254][ T5581] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.205896][ T5581] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.219126][ T5581] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.232187][ T5581] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.324538][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.336167][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.353817][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.378985][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.417007][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.620038][ T48] Bluetooth: hci1: command tx timeout [ 346.690122][ T7202] loop2: detected capacity change from 0 to 512 [ 346.698274][ T1085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.762670][ T1085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.784916][ T7202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.798782][ T7202] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 346.817749][ T1085] bond0 (unregistering): Released all slaves [ 346.838315][ T7202] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.234'. [ 347.107148][ T1085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.124877][ T1085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.142881][ T1085] bond0 (unregistering): Released all slaves [ 347.198524][ T5229] 8021q: adding VLAN 0 to HW filter on device eth22 [ 347.304152][ T48] Bluetooth: hci0: command tx timeout [ 347.465881][ T48] Bluetooth: hci3: command tx timeout [ 347.815069][ T6687] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.380081][ T48] Bluetooth: hci0: command tx timeout [ 349.542857][ T48] Bluetooth: hci3: command tx timeout [ 349.870517][ T1085] hsr_slave_0: left promiscuous mode [ 349.903298][ T1085] hsr_slave_1: left promiscuous mode [ 349.933487][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.965707][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.993501][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.011977][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.053841][ T7241] loop5: detected capacity change from 0 to 256 [ 350.067878][ T1085] hsr_slave_0: left promiscuous mode [ 350.083900][ T1085] hsr_slave_1: left promiscuous mode [ 350.097985][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.121520][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.145262][ T1085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.155250][ T1085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.226044][ T7241] FAT-fs (loop5): Directory bread(block 64) failed [ 350.234197][ T1085] veth1_macvtap: left promiscuous mode [ 350.237661][ T7241] FAT-fs (loop5): Directory bread(block 65) failed [ 350.247040][ T7241] FAT-fs (loop5): Directory bread(block 66) failed [ 350.249910][ T1085] veth0_macvtap: left promiscuous mode [ 350.254207][ T7241] FAT-fs (loop5): Directory bread(block 67) failed [ 350.266049][ T1085] veth1_vlan: left promiscuous mode [ 350.266273][ T1085] veth0_vlan: left promiscuous mode [ 350.283940][ T1085] veth1_macvtap: left promiscuous mode [ 350.300192][ T1085] veth0_macvtap: left promiscuous mode [ 350.308406][ T1085] veth1_vlan: left promiscuous mode [ 350.308519][ T7241] FAT-fs (loop5): Directory bread(block 68) failed [ 350.326552][ T7241] FAT-fs (loop5): Directory bread(block 69) failed [ 350.328931][ T1085] veth0_vlan: left promiscuous mode [ 350.338226][ T7241] FAT-fs (loop5): Directory bread(block 70) failed [ 350.350177][ T7241] FAT-fs (loop5): Directory bread(block 71) failed [ 350.357324][ T7241] FAT-fs (loop5): Directory bread(block 72) failed [ 350.366567][ T7241] FAT-fs (loop5): Directory bread(block 73) failed [ 351.277932][ T7248] loop5: detected capacity change from 0 to 512 [ 351.366425][ T7248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.382426][ T7248] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 351.443551][ T7248] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.243'. [ 351.462465][ T48] Bluetooth: hci0: command tx timeout [ 351.620315][ T48] Bluetooth: hci3: command tx timeout [ 351.787748][ T1085] team0 (unregistering): Port device team_slave_1 removed [ 351.809602][ T1085] team0 (unregistering): Port device team_slave_0 removed [ 352.305454][ T1085] team0 (unregistering): Port device team_slave_1 removed [ 352.327135][ T1085] team0 (unregistering): Port device team_slave_0 removed [ 352.776664][ T6528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.185021][ T7126] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.209615][ T7126] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.237938][ T7126] bridge_slave_0: entered allmulticast mode [ 353.277153][ T7126] bridge_slave_0: entered promiscuous mode [ 353.456391][ T7126] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.476713][ T7126] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.512763][ T7126] bridge_slave_1: entered allmulticast mode [ 353.536774][ T7126] bridge_slave_1: entered promiscuous mode [ 353.544996][ T48] Bluetooth: hci0: command tx timeout [ 353.703265][ T48] Bluetooth: hci3: command tx timeout [ 354.012491][ T7126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.216829][ T7126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.362991][ T7126] team0: Port device team_slave_0 added [ 354.380792][ T7126] team0: Port device team_slave_1 added [ 354.588227][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.595693][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.643876][ T7126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.691035][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.698202][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.727386][ T7126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.363107][ T7126] hsr_slave_0: entered promiscuous mode [ 355.399690][ T7126] hsr_slave_1: entered promiscuous mode [ 355.594350][ T7282] loop2: detected capacity change from 0 to 512 [ 355.729293][ T7282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.814019][ T7282] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.857701][ T7282] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.251'. [ 356.162874][ T6687] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.552968][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.565525][ T7189] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.575071][ T7189] bridge_slave_0: entered allmulticast mode [ 356.595881][ T7189] bridge_slave_0: entered promiscuous mode [ 356.640066][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.670305][ T7189] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.689680][ T7189] bridge_slave_1: entered allmulticast mode [ 356.715345][ T7189] bridge_slave_1: entered promiscuous mode [ 357.094906][ T7189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.144665][ T7189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.518839][ T7189] team0: Port device team_slave_0 added [ 357.633019][ T7189] team0: Port device team_slave_1 added [ 357.853064][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.861570][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.893685][ T7189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.995609][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.005096][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.048587][ T7189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.206423][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.223735][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.232744][ T7183] bridge_slave_0: entered allmulticast mode [ 358.243116][ T7183] bridge_slave_0: entered promiscuous mode [ 358.243176][ T7316] loop5: detected capacity change from 0 to 512 [ 358.327576][ T7316] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.342445][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.375516][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.387107][ T7316] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 358.435941][ T7183] bridge_slave_1: entered allmulticast mode [ 358.462486][ T7183] bridge_slave_1: entered promiscuous mode [ 358.702438][ T6528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.811356][ T7183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.908692][ T7189] hsr_slave_0: entered promiscuous mode [ 358.951213][ T7189] hsr_slave_1: entered promiscuous mode [ 358.963239][ T7189] debugfs: 'hsr0' already exists in 'hsr' [ 358.994843][ T7189] Cannot create hsr debugfs directory [ 359.065652][ T7183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.468687][ T7183] team0: Port device team_slave_0 added [ 359.570152][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.5.265'. [ 359.643804][ T7183] team0: Port device team_slave_1 added [ 359.982168][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.000123][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.028221][ T7183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.096999][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.115260][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.169203][ T7183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.709287][ T7342] loop5: detected capacity change from 0 to 512 [ 360.714780][ T7183] hsr_slave_0: entered promiscuous mode [ 360.727885][ T7183] hsr_slave_1: entered promiscuous mode [ 360.764912][ T7183] debugfs: 'hsr0' already exists in 'hsr' [ 360.774062][ T7183] Cannot create hsr debugfs directory [ 360.827068][ T7342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.880499][ T7342] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 360.925178][ T7126] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 361.003200][ T7126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 361.014612][ T7126] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 361.050027][ T7126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 361.087974][ T6528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.143653][ T7126] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 361.195700][ T7126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 361.468382][ T7126] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 361.546247][ T7126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.113378][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.274'. [ 362.931249][ T7189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 363.021850][ T7189] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.162408][ T7189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 363.224805][ T7189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 363.257092][ T7189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 363.308849][ T7189] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.326385][ T7189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 363.360427][ T7189] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.053368][ T7126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.332474][ T7183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 364.378071][ T7183] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 364.402941][ T7183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 364.450288][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.283'. [ 364.451896][ T7183] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.552280][ T7183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 364.633062][ T7183] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 364.701594][ T7183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 364.740522][ T7183] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.835654][ T7126] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.935624][ T7384] loop5: detected capacity change from 0 to 256 [ 364.995035][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.001211][ T7384] vfat: Unknown parameter 'nnonumtail' [ 365.002539][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.133378][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.141115][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.592506][ T7189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.985977][ T7189] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.230257][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.237838][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.473715][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.481243][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.269150][ T7406] loop5: detected capacity change from 0 to 2048 [ 368.405495][ T7406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.500661][ T7406] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 368.805054][ T7405] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.277211][ T7422] overlayfs: failed to resolve './file1/file0': -2 [ 369.445436][ T7183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.709525][ T7183] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.847549][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.855119][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.040480][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.048058][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.714959][ T7126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.096709][ T7189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.400407][ T7126] veth0_vlan: entered promiscuous mode [ 373.536300][ T7126] veth1_vlan: entered promiscuous mode [ 373.627941][ T7485] overlayfs: failed to resolve './file1/file0': -2 [ 374.035352][ T7189] veth0_vlan: entered promiscuous mode [ 374.242703][ T7126] veth0_macvtap: entered promiscuous mode [ 374.358528][ T7126] veth1_macvtap: entered promiscuous mode [ 374.391031][ T7189] veth1_vlan: entered promiscuous mode [ 374.642266][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.837825][ T7183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.914936][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.166017][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.200380][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.209397][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.331292][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.355188][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.398674][ T7189] veth0_macvtap: entered promiscuous mode [ 375.533222][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.671159][ T7189] veth1_macvtap: entered promiscuous mode [ 375.846586][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.193256][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.421343][ T7189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.733127][ T7189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.024553][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.050568][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.075787][ T7183] veth0_vlan: entered promiscuous mode [ 377.144286][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.248621][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.313377][ T12] bridge_slave_1: left allmulticast mode [ 377.330559][ T12] bridge_slave_1: left promiscuous mode [ 377.356511][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.400178][ T12] bridge_slave_0: left allmulticast mode [ 377.426904][ T12] bridge_slave_0: left promiscuous mode [ 377.473910][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.275378][ T5581] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 378.285915][ T5581] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 378.301829][ T5581] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 378.318990][ T5581] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 378.339049][ T5581] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.587511][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.627414][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.672677][ T12] bond0 (unregistering): Released all slaves [ 378.720529][ T7183] veth1_vlan: entered promiscuous mode [ 378.763095][ T7542] overlayfs: failed to resolve './file1/file0': -2 [ 379.566259][ T12] hsr_slave_0: left promiscuous mode [ 379.607020][ T12] hsr_slave_1: left promiscuous mode [ 379.623387][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.653429][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.677203][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.697423][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.742591][ T12] veth1_macvtap: left promiscuous mode [ 379.757432][ T12] veth0_macvtap: left promiscuous mode [ 379.783692][ T12] veth1_vlan: left promiscuous mode [ 379.796193][ T12] veth0_vlan: left promiscuous mode [ 380.421075][ T5581] Bluetooth: hci2: command tx timeout [ 380.681962][ T12] team0 (unregistering): Port device team_slave_1 removed [ 380.726492][ T12] team0 (unregistering): Port device team_slave_0 removed [ 381.148324][ T7183] veth0_macvtap: entered promiscuous mode [ 381.306366][ T7183] veth1_macvtap: entered promiscuous mode [ 381.686891][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.868823][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.991452][ T1104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.040191][ T1104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.080343][ T1104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.131052][ T1104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.503159][ T5581] Bluetooth: hci2: command tx timeout [ 383.694528][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.741033][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.976404][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.016983][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.580774][ T48] Bluetooth: hci2: command tx timeout [ 385.628273][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.662759][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.748019][ T7535] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.770418][ T7535] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.790791][ T7535] bridge_slave_0: entered allmulticast mode [ 385.810448][ T7535] bridge_slave_0: entered promiscuous mode [ 385.931104][ T7535] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.951744][ T7535] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.971423][ T7535] bridge_slave_1: entered allmulticast mode [ 385.988424][ T7535] bridge_slave_1: entered promiscuous mode [ 386.197635][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.217644][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.229038][ T7535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.320119][ T7535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.639630][ T7535] team0: Port device team_slave_0 added [ 386.660966][ T48] Bluetooth: hci2: command tx timeout [ 386.699552][ T7535] team0: Port device team_slave_1 added [ 386.761732][ T5229] 8021q: adding VLAN 0 to HW filter on device eth23 [ 387.000320][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.042827][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.149969][ T7535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.246723][ T7535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.279030][ T7535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.371685][ T7535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.922205][ T7535] hsr_slave_0: entered promiscuous mode [ 387.967027][ T7535] hsr_slave_1: entered promiscuous mode [ 387.992479][ T7535] debugfs: 'hsr0' already exists in 'hsr' [ 388.035517][ T7535] Cannot create hsr debugfs directory [ 388.259073][ T7644] overlayfs: overlapping lowerdir path [ 388.286256][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.294620][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.334715][ T7646] loop1: detected capacity change from 0 to 512 [ 388.439980][ T7646] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.317: corrupted in-inode xattr: invalid ea_ino [ 388.514414][ T7646] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 388.521866][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 388.534490][ T7646] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.317: couldn't read orphan inode 15 (err -117) [ 388.537808][ C0] EXT4-fs (loop1): initial error at time 1779356751: ext4_iget_extra_inode:5128: inode 15 [ 388.559822][ C0] EXT4-fs (loop1): last error at time 1779356751: ext4_iget_extra_inode:5128: inode 15 [ 388.570455][ T7646] loop1: lost filesystem error report for type 5 error -117 [ 388.605412][ T7646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.989202][ T7126] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.300899][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.351067][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.925876][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.982374][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.111373][ T1091] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.495909][ T1091] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.585181][ T7664] loop1: detected capacity change from 0 to 256 [ 390.718617][ T1091] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.837451][ T7664] FAT-fs (loop1): Directory bread(block 64) failed [ 390.858350][ T7664] FAT-fs (loop1): Directory bread(block 65) failed [ 390.898736][ T7664] FAT-fs (loop1): Directory bread(block 66) failed [ 390.912578][ T7664] FAT-fs (loop1): Directory bread(block 67) failed [ 390.926736][ T7664] FAT-fs (loop1): Directory bread(block 68) failed [ 390.935638][ T7664] FAT-fs (loop1): Directory bread(block 69) failed [ 390.970334][ T7664] FAT-fs (loop1): Directory bread(block 70) failed [ 390.996472][ T7664] FAT-fs (loop1): Directory bread(block 71) failed [ 391.028243][ T7664] FAT-fs (loop1): Directory bread(block 72) failed [ 391.040316][ T1091] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.072783][ T7664] FAT-fs (loop1): Directory bread(block 73) failed [ 391.805196][ T7535] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 391.860738][ T7535] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 391.878554][ T1091] bridge_slave_1: left allmulticast mode [ 391.906418][ T1091] bridge_slave_1: left promiscuous mode [ 391.914240][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.929212][ T1091] bridge_slave_0: left allmulticast mode [ 391.939318][ T1091] bridge_slave_0: left promiscuous mode [ 391.949267][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.351382][ T7672] loop3: detected capacity change from 0 to 128 [ 392.376027][ T7673] overlayfs: overlapping lowerdir path [ 392.386601][ T7672] ext4: Unknown parameter 'fsmagic' [ 392.898746][ T1091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.966796][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.031355][ T1091] bond0 (unregistering): Released all slaves [ 393.083101][ T7535] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 393.164360][ T7535] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 393.246340][ T7535] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 393.339500][ T7535] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 393.468741][ T5581] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 393.488723][ T5581] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 393.500716][ T5581] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 393.527326][ T5581] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 393.539528][ T5581] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 393.596303][ T7535] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 393.639482][ T7535] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 394.065655][ T1091] hsr_slave_0: left promiscuous mode [ 394.095461][ T1091] hsr_slave_1: left promiscuous mode [ 394.122962][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.152464][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.194833][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.222391][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.309022][ T1091] veth1_macvtap: left promiscuous mode [ 394.331385][ T1091] veth0_macvtap: left promiscuous mode [ 394.355316][ T1091] veth1_vlan: left promiscuous mode [ 394.374421][ T1091] veth0_vlan: left promiscuous mode [ 395.620182][ T5581] Bluetooth: hci3: command tx timeout [ 395.724814][ T1091] team0 (unregistering): Port device team_slave_1 removed [ 395.829401][ T1091] team0 (unregistering): Port device team_slave_0 removed [ 397.291765][ T7535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.493676][ T7535] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.577176][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.584734][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.700755][ T5581] Bluetooth: hci3: command tx timeout [ 397.723783][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.731399][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.785780][ T48] Bluetooth: hci3: command tx timeout [ 400.740778][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 401.860681][ T5581] Bluetooth: hci3: command tx timeout [ 401.893207][ T7683] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.953785][ T7683] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.993978][ T7683] bridge_slave_0: entered allmulticast mode [ 402.032453][ T7683] bridge_slave_0: entered promiscuous mode [ 402.098789][ T7535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.128529][ T7683] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.156178][ T7683] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.190822][ T7683] bridge_slave_1: entered allmulticast mode [ 402.219262][ T7683] bridge_slave_1: entered promiscuous mode [ 402.533311][ T7683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.643004][ T7683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.798328][ T7757] overlayfs: failed to clone upperpath [ 402.923803][ T7683] team0: Port device team_slave_0 added [ 402.999121][ T7683] team0: Port device team_slave_1 added [ 403.325012][ T7683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.360175][ T7683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.468344][ T7683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.568884][ T7683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.601425][ T7683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.665459][ T7683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.211433][ T7777] loop1: detected capacity change from 0 to 256 [ 404.256977][ T7777] vfat: Unknown parameter 'nnonumtail' [ 404.268687][ T7683] hsr_slave_0: entered promiscuous mode [ 404.304158][ T7683] hsr_slave_1: entered promiscuous mode [ 404.341972][ T7683] debugfs: 'hsr0' already exists in 'hsr' [ 404.369347][ T7683] Cannot create hsr debugfs directory [ 407.351783][ T7799] overlayfs: overlapping lowerdir path [ 407.547191][ T7535] veth0_vlan: entered promiscuous mode [ 407.837779][ T7535] veth1_vlan: entered promiscuous mode [ 408.494612][ T7683] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 408.557856][ T7683] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 408.587117][ T7683] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 408.650595][ T7683] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 408.672030][ T7683] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 408.764811][ T7683] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 408.818231][ T7683] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 408.903267][ T7683] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 409.036038][ T7535] veth0_macvtap: entered promiscuous mode [ 409.136795][ T7535] veth1_macvtap: entered promiscuous mode [ 409.586662][ T7535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.726612][ T7829] syz.3.353 uses obsolete (PF_INET,SOCK_PACKET) [ 409.786455][ T7535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.165456][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.240189][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.385803][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.438321][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.088813][ T7683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.388966][ T7848] loop1: detected capacity change from 0 to 512 [ 412.564228][ T7683] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.692443][ T7848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.783516][ T7848] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 412.794914][ T7840] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.802511][ T7840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.026263][ T7840] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.034032][ T7840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.222572][ T7126] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.812413][ T7895] overlayfs: failed to clone upperpath [ 416.238217][ T7900] loop3: detected capacity change from 0 to 256 [ 416.293036][ T7900] vfat: Unknown parameter 'nnonumtail' [ 418.421374][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 420.236617][ T7683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.248115][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.291927][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.528841][ T7840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.570162][ T7840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.791353][ T7954] loop4: detected capacity change from 0 to 2048 [ 421.934649][ T7954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.958696][ T7962] loop1: detected capacity change from 0 to 256 [ 421.984742][ T7962] vfat: Unknown parameter 'nnonumtail' [ 422.041404][ T7954] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 422.558644][ T7953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.537915][ T7683] veth0_vlan: entered promiscuous mode [ 424.812586][ T7683] veth1_vlan: entered promiscuous mode [ 425.427152][ T7683] veth0_macvtap: entered promiscuous mode [ 425.579303][ T7683] veth1_macvtap: entered promiscuous mode [ 425.945544][ T7683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.179656][ T7683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.416925][ T76] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.472732][ T76] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.533541][ T76] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.558768][ T76] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.994016][ T8008] loop1: detected capacity change from 0 to 512 [ 427.197867][ T8008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.261146][ T8008] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 427.684739][ T7126] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.504703][ T8066] loop1: detected capacity change from 0 to 512 [ 432.685071][ T8066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.764375][ T8066] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 433.370636][ T7126] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.014774][ T8084] loop1: detected capacity change from 0 to 256 [ 434.054443][ T8084] vfat: Unknown parameter 'nnonumtail' [ 439.071161][ T7840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.128417][ T7840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.365622][ T7840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.396688][ T7840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.102947][ T8128] loop3: detected capacity change from 0 to 512 [ 440.189590][ T8130] loop1: detected capacity change from 0 to 256 [ 440.273485][ T8130] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 440.348309][ T8128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.377451][ T8128] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 440.399489][ T8130] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 440.497368][ T8130] FAT-fs (loop1): Filesystem has been set read-only [ 440.577643][ T8130] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 440.690206][ T8130] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 440.859121][ T8130] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 440.939093][ T8130] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 440.965689][ T8130] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 440.996707][ T7183] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.012773][ T8130] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 441.064662][ T8130] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 441.120043][ T29] audit: type=1800 audit(1779356804.569:2): pid=8130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.415" name="file1" dev="loop1" ino=1048686 res=0 errno=0 [ 441.697380][ T8149] loop7: detected capacity change from 0 to 256 [ 441.822053][ T8149] vfat: Unknown parameter 'nnonumtail' [ 447.727401][ T8209] loop3: detected capacity change from 0 to 256 [ 447.778645][ T8209] vfat: Unknown parameter 'nnonumtail' [ 447.977943][ T8213] loop1: detected capacity change from 0 to 256 [ 448.063724][ T8213] vfat: Unknown parameter 'nnonumtail' [ 449.715184][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.722078][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.828527][ T8229] loop7: detected capacity change from 0 to 512 [ 451.877031][ T8229] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 451.958009][ T8229] EXT4-fs (loop7): ea_inode feature is not supported for Hurd [ 452.503059][ T8229] loop7: detected capacity change from 0 to 1024 [ 452.574031][ T8229] journal_path: Non-blockdev passed as './file0' [ 452.618611][ T8229] EXT4-fs: error: could not find journal device path [ 452.787976][ T8242] overlayfs: missing 'lowerdir' [ 453.917079][ T8260] loop3: detected capacity change from 0 to 256 [ 453.974549][ T8260] vfat: Unknown parameter 'nnonumtail' [ 458.032588][ T8280] netlink: 80 bytes leftover after parsing attributes in process `syz.4.452'. [ 458.091829][ T8285] netlink: 80 bytes leftover after parsing attributes in process `syz.4.452'. [ 458.120532][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'. [ 458.146116][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'. [ 458.168825][ T8286] loop7: detected capacity change from 0 to 128 [ 458.251559][ T8275] loop3: detected capacity change from 0 to 4096 [ 458.417573][ T8275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.003551][ T8294] overlayfs: missing 'lowerdir' [ 459.053004][ T5581] Bluetooth: hci2: hardware error 0x0e [ 460.483799][ T5592] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 460.498574][ T5592] CPU: 0 UID: 0 PID: 5592 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 460.498715][ T5592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 460.498849][ T5592] Workqueue: hci1 hci_rx_work [ 460.499052][ T5592] Call Trace: [ 460.499103][ T5592] [ 460.499152][ T5592] __dump_stack+0x26/0x30 [ 460.499308][ T5592] dump_stack_lvl+0x14c/0x1c0 [ 460.499461][ T5592] dump_stack+0x1e/0x25 [ 460.499595][ T5592] sysfs_create_dir_ns+0x46c/0x540 [ 460.499747][ T5592] kobject_add_internal+0x1084/0x19b0 [ 460.499928][ T5592] kobject_add+0x2c1/0x410 [ 460.500086][ T5592] ? kmsan_get_metadata+0xf1/0x160 [ 460.500260][ T5592] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 460.500441][ T5592] device_add+0xa70/0x1c90 [ 460.500602][ T5592] hci_conn_add_sysfs+0x159/0x2e0 [ 460.500765][ T5592] le_conn_complete_evt+0x1de1/0x2330 [ 460.500974][ T5592] hci_le_conn_complete_evt+0x157/0x260 [ 460.501186][ T5592] hci_le_meta_evt+0x6eb/0x960 [ 460.501309][ T5592] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 460.501518][ T5592] hci_event_packet+0xb8c/0x1820 [ 460.501681][ T5592] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 460.501847][ T5592] hci_rx_work+0x8c3/0xfc0 [ 460.502023][ T5592] ? kmsan_get_metadata+0xf1/0x160 [ 460.502199][ T5592] ? __pfx_hci_rx_work+0x10/0x10 [ 460.502370][ T5592] process_scheduled_works+0xb65/0x1e40 [ 460.502588][ T5592] worker_thread+0xee4/0x1590 [ 460.502779][ T5592] kthread+0x53a/0x5f0 [ 460.502971][ T5592] ? __pfx_worker_thread+0x10/0x10 [ 460.503136][ T5592] ? __pfx_kthread+0x10/0x10 [ 460.503299][ T5592] ret_from_fork+0x20f/0x8d0 [ 460.503439][ T5592] ? __switch_to+0x573/0x7a0 [ 460.503609][ T5592] ? __pfx_kthread+0x10/0x10 [ 460.503776][ T5592] ret_from_fork_asm+0x1a/0x30 [ 460.503971][ T5592] [ 460.882274][ T5592] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 460.897190][ T5592] Bluetooth: hci1: failed to register connection device [ 461.221157][ T5581] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 461.765931][ T7183] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.905857][ T8320] loop1: detected capacity change from 0 to 256 [ 461.968005][ T8320] vfat: Unknown parameter 'nnonumtail' [ 462.020003][ T5581] Bluetooth: hci1: command 0x0406 tx timeout [ 464.669278][ T8332] Illegal XDP return value 4294967274 on prog (id 13) dev syz_tun, expect packet loss! [ 465.156041][ T8339] overlayfs: missing 'lowerdir' [ 466.499031][ T8361] loop7: detected capacity change from 0 to 512 [ 466.577832][ T8361] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 466.686434][ T8361] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 466.713509][ T8361] EXT4-fs (loop7): 1 truncate cleaned up [ 466.800888][ T8361] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.706292][ T2160] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 467.890032][ T2160] usb 2-1: Using ep0 maxpacket: 8 [ 467.916885][ T2160] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 467.937125][ T2160] usb 2-1: config 0 has no interface number 0 [ 467.976552][ T2160] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 468.013512][ T2160] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 468.033642][ T2160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.098038][ T2160] usb 2-1: config 0 descriptor?? [ 468.125304][ T7683] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.195283][ T2160] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 468.668524][ T8385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.692668][ T5229] 8021q: adding VLAN 0 to HW filter on device eth25 [ 468.740173][ T8385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.404904][ T806] usb 2-1: USB disconnect, device number 2 [ 469.905232][ T8396] overlayfs: missing 'lowerdir' [ 471.621180][ T8418] loop3: detected capacity change from 0 to 512 [ 471.697521][ T8418] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 471.744506][ T8418] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 471.939986][ T5581] Bluetooth: hci3: command 0x0406 tx timeout [ 472.518546][ T8428] warning: `syz.1.492' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 473.526861][ T8438] overlayfs: missing 'lowerdir' [ 473.952775][ T5229] 8021q: adding VLAN 0 to HW filter on device eth26 [ 474.347197][ T8445] netlink: 80 bytes leftover after parsing attributes in process `syz.1.499'. [ 474.395855][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 475.028447][ T5581] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 475.043014][ T5581] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 475.052434][ T5581] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 475.066972][ T5581] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 475.078185][ T5581] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 476.214737][ T8468] loop3: detected capacity change from 0 to 512 [ 476.288637][ T8468] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 476.379083][ T8468] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 476.857811][ T8468] loop3: detected capacity change from 0 to 1024 [ 476.915915][ T8468] journal_path: Non-blockdev passed as './file0' [ 476.962691][ T8468] EXT4-fs: error: could not find journal device path [ 477.140078][ T5581] Bluetooth: hci5: command tx timeout [ 478.702971][ T8497] netlink: 80 bytes leftover after parsing attributes in process `syz.7.511'. [ 478.770187][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.7.511'. [ 479.221252][ T5581] Bluetooth: hci5: command tx timeout [ 479.732423][ T5229] 8021q: adding VLAN 0 to HW filter on device eth27 [ 481.134752][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.7.518'. [ 481.302411][ T5581] Bluetooth: hci5: command tx timeout [ 482.052532][ T8537] netlink: 80 bytes leftover after parsing attributes in process `syz.7.523'. [ 482.132571][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.7.523'. [ 482.602870][ T8452] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.649268][ T8452] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.682631][ T8452] bridge_slave_0: entered allmulticast mode [ 482.736230][ T8452] bridge_slave_0: entered promiscuous mode [ 482.829930][ T8452] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.876874][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.932774][ T8452] bridge_slave_1: entered allmulticast mode [ 482.979052][ T8452] bridge_slave_1: entered promiscuous mode [ 483.380836][ T5581] Bluetooth: hci5: command tx timeout [ 483.436814][ T8452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.507975][ T8452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.026687][ T8452] team0: Port device team_slave_0 added [ 484.107730][ T8452] team0: Port device team_slave_1 added [ 484.591595][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.634606][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.777783][ T8571] netlink: 'syz.3.532': attribute type 13 has an invalid length. [ 484.799811][ T8452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.354896][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.393571][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.522423][ T8452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.564909][ T5229] 8021q: adding VLAN 0 to HW filter on device eth28 [ 487.357497][ T8452] hsr_slave_0: entered promiscuous mode [ 487.399747][ T8452] hsr_slave_1: entered promiscuous mode [ 487.463484][ T8452] debugfs: 'hsr0' already exists in 'hsr' [ 487.499535][ T8452] Cannot create hsr debugfs directory [ 488.155242][ T8608] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.546'. [ 488.783542][ T8614] netlink: 128 bytes leftover after parsing attributes in process `syz.1.548'. [ 489.284665][ T8620] tap0: tun_chr_ioctl cmd 1074025677 [ 489.330617][ T8620] tap0: linktype set to 776 [ 491.223648][ T8452] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 491.335592][ T8452] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 491.390112][ T8452] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 491.512546][ T8452] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 491.569415][ T8452] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 491.672720][ T8452] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 491.713102][ T8452] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 491.865601][ T8452] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 492.343797][ T8661] netlink: 128 bytes leftover after parsing attributes in process `syz.3.561'. [ 492.730872][ T5229] 8021q: adding VLAN 0 to HW filter on device eth29 [ 493.401797][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 493.895308][ T8452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.166363][ T8452] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.378430][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.386019][ T6172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.408077][ T8685] netlink: 80 bytes leftover after parsing attributes in process `syz.1.571'. [ 494.451009][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 494.605506][ T1104] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.613163][ T1104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.360981][ T8696] netlink: 128 bytes leftover after parsing attributes in process `syz.1.574'. [ 497.208212][ T8720] netlink: 16 bytes leftover after parsing attributes in process `syz.4.581'. [ 497.976974][ T8727] netlink: 80 bytes leftover after parsing attributes in process `syz.4.583'. [ 498.041603][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 498.553263][ T5229] 8021q: adding VLAN 0 to HW filter on device eth30 [ 498.935012][ T8741] netlink: 'syz.4.587': attribute type 29 has an invalid length. [ 499.010436][ T8742] netlink: 'syz.4.587': attribute type 29 has an invalid length. [ 500.615956][ T8452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.852947][ T8765] netlink: 'syz.4.594': attribute type 21 has an invalid length. [ 500.957657][ T8765] netlink: 168 bytes leftover after parsing attributes in process `syz.4.594'. [ 501.191023][ T8774] netlink: 80 bytes leftover after parsing attributes in process `syz.7.596'. [ 501.272339][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.7.596'. [ 501.445058][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.597'. [ 501.512601][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.597'. [ 504.006491][ T8452] veth0_vlan: entered promiscuous mode [ 504.184276][ T8452] veth1_vlan: entered promiscuous mode [ 504.850136][ T5229] 8021q: adding VLAN 0 to HW filter on device eth31 [ 504.893406][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.7.609'. [ 504.945093][ T8452] veth0_macvtap: entered promiscuous mode [ 504.966722][ T8821] netlink: 12 bytes leftover after parsing attributes in process `syz.7.609'. [ 505.224903][ T8452] veth1_macvtap: entered promiscuous mode [ 505.604044][ T8831] netlink: 80 bytes leftover after parsing attributes in process `syz.3.612'. [ 505.650130][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.612'. [ 505.768509][ T8452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.973383][ T8452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.225917][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.455851][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.503476][ T1104] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.571767][ T1104] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.159519][ T8845] overlayfs: failed to clone upperpath [ 509.103302][ T8876] netlink: 80 bytes leftover after parsing attributes in process `syz.7.624'. [ 509.127460][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.7.624'. [ 510.732077][ T5229] 8021q: adding VLAN 0 to HW filter on device eth32 [ 511.151975][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.158571][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.886626][ T8933] netlink: 80 bytes leftover after parsing attributes in process `syz.7.637'. [ 512.970474][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.7.637'. [ 513.364658][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.640'. [ 515.573212][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.620920][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.871095][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.923856][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.501907][ T8981] netlink: 80 bytes leftover after parsing attributes in process `syz.4.651'. [ 516.521689][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 516.785312][ T8985] loop3: detected capacity change from 0 to 512 [ 516.866963][ T8988] loop7: detected capacity change from 0 to 256 [ 516.880430][ T8985] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 517.091863][ T8985] EXT4-fs (loop3): 1 truncate cleaned up [ 517.147002][ T8985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.351080][ T8988] FAT-fs (loop7): Directory bread(block 64) failed [ 517.386983][ T8988] FAT-fs (loop7): Directory bread(block 65) failed [ 517.425734][ T8988] FAT-fs (loop7): Directory bread(block 66) failed [ 517.488623][ T8988] FAT-fs (loop7): Directory bread(block 67) failed [ 517.523755][ T8988] FAT-fs (loop7): Directory bread(block 68) failed [ 517.599912][ T8988] FAT-fs (loop7): Directory bread(block 69) failed [ 517.700889][ T8988] FAT-fs (loop7): Directory bread(block 70) failed [ 517.769042][ T8988] FAT-fs (loop7): Directory bread(block 71) failed [ 517.800730][ T8988] FAT-fs (loop7): Directory bread(block 72) failed [ 517.843359][ T8988] FAT-fs (loop7): Directory bread(block 73) failed [ 519.018318][ T7183] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.728085][ T9036] netlink: 80 bytes leftover after parsing attributes in process `syz.7.664'. [ 520.834393][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.7.664'. [ 520.845457][ T9039] netlink: 80 bytes leftover after parsing attributes in process `syz.7.664'. [ 520.933049][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.7.664'. [ 522.211842][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'. [ 522.303072][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.670'. [ 522.572188][ T9066] loop9: detected capacity change from 0 to 512 [ 522.674110][ T9066] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 522.922004][ T9066] EXT4-fs (loop9): 1 truncate cleaned up [ 522.988937][ T9066] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.251349][ T9075] tipc: Started in network mode [ 523.335995][ T9075] tipc: Node identity c2441dcf7d55, cluster identity 4711 [ 523.353748][ T9075] tipc: Enabled bearer , priority 0 [ 523.523675][ T9071] tipc: Disabling bearer [ 524.113323][ T8452] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.121557][ T9101] netlink: 80 bytes leftover after parsing attributes in process `syz.9.679'. [ 525.191793][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.9.679'. [ 525.302887][ T9104] netlink: 80 bytes leftover after parsing attributes in process `syz.9.679'. [ 525.439344][ T9104] netlink: 8 bytes leftover after parsing attributes in process `syz.9.679'. [ 526.606856][ T9119] tipc: Enabling of bearer rejected, failed to enable media [ 527.316918][ T9125] loop7: detected capacity change from 0 to 512 [ 527.396231][ T9125] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 527.529296][ T9125] EXT4-fs (loop7): 1 truncate cleaned up [ 527.590712][ T9125] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.727899][ T7683] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.885286][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 529.578136][ T9156] netlink: 80 bytes leftover after parsing attributes in process `syz.7.697'. [ 529.643748][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.7.697'. [ 529.724134][ T9159] netlink: 80 bytes leftover after parsing attributes in process `syz.7.697'. [ 529.801886][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.7.697'. [ 530.686672][ T9170] tipc: Started in network mode [ 530.716453][ T9170] tipc: Node identity 5a306bfe7701, cluster identity 4711 [ 530.791259][ T9170] tipc: Enabled bearer , priority 0 [ 530.940308][ T9166] tipc: Disabling bearer [ 532.246075][ T9192] netlink: 'syz.9.711': attribute type 29 has an invalid length. [ 532.326973][ T9192] netlink: 'syz.9.711': attribute type 29 has an invalid length. [ 532.794690][ T9198] netlink: 128 bytes leftover after parsing attributes in process `syz.7.714'. [ 534.688459][ T9221] autofs: Unknown parameter '0x0000000000000000' [ 535.923511][ T9235] netlink: 128 bytes leftover after parsing attributes in process `syz.1.729'. [ 537.130622][ T1104] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.462786][ T1104] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.885743][ T1104] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.247852][ T1104] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.256971][ T1104] bridge_slave_1: left allmulticast mode [ 539.291024][ T1104] bridge_slave_1: left promiscuous mode [ 539.346045][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.462790][ T1104] bridge_slave_0: left allmulticast mode [ 539.517182][ T1104] bridge_slave_0: left promiscuous mode [ 539.557654][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.470592][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.566295][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.630897][ T1104] bond0 (unregistering): Released all slaves [ 541.949455][ T1104] tipc: Left network mode [ 542.949156][ T1104] hsr_slave_0: left promiscuous mode [ 543.049173][ T1104] hsr_slave_1: left promiscuous mode [ 543.095778][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.146604][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.190912][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.198494][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.367593][ T9327] autofs: Unknown parameter '0x0000000000000000' [ 543.379327][ T1104] veth1_macvtap: left promiscuous mode [ 543.410949][ T1104] veth0_macvtap: left promiscuous mode [ 543.456258][ T1104] veth1_vlan: left promiscuous mode [ 543.472399][ T9327] overlayfs: failed to clone lowerpath [ 543.491774][ T1104] veth0_vlan: left promiscuous mode [ 543.602062][ T9335] netlink: 88 bytes leftover after parsing attributes in process `syz.3.769'. [ 543.628203][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.7.770'. [ 545.668662][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 545.776556][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 546.551523][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.766'. [ 546.632303][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.766'. [ 547.171107][ T9371] autofs: Unknown parameter '0x0000000000000000' [ 548.986509][ T9404] netlink: 44 bytes leftover after parsing attributes in process `syz.7.793'. [ 549.877251][ T9418] autofs: Unknown parameter 'fd0x0000000000000000' [ 552.046986][ T9448] netlink: 44 bytes leftover after parsing attributes in process `syz.9.809'. [ 552.974090][ T9461] autofs: Unknown parameter 'fd0x0000000000000000' [ 555.614667][ T9506] autofs: Unknown parameter 'fd0x0000000000000000' [ 558.595686][ T9559] netlink: 116 bytes leftover after parsing attributes in process `syz.3.846'. [ 559.292369][ T9567] veth0_vlan: entered allmulticast mode [ 562.709209][ T9621] tipc: Enabling of bearer rejected, failed to enable media [ 564.281865][ T9646] netlink: 116 bytes leftover after parsing attributes in process `syz.3.872'. [ 564.381450][ T9649] netlink: 116 bytes leftover after parsing attributes in process `syz.3.872'. [ 566.904149][ T9683] tipc: Enabling of bearer rejected, failed to enable media [ 566.966304][ T9686] netlink: 116 bytes leftover after parsing attributes in process `syz.7.885'. [ 567.028125][ T9690] netlink: 116 bytes leftover after parsing attributes in process `syz.7.885'. [ 568.492255][ T9709] netlink: 8 bytes leftover after parsing attributes in process `syz.9.890'. [ 570.080610][ T9732] netlink: 116 bytes leftover after parsing attributes in process `syz.4.899'. [ 570.148244][ T9732] netlink: 116 bytes leftover after parsing attributes in process `syz.4.899'. [ 570.910241][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.904'. [ 572.183704][ T9758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.234172][ T9758] batadv_slave_1: entered promiscuous mode [ 572.592948][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.605411][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.073268][ T9796] netlink: 80 bytes leftover after parsing attributes in process `syz.7.919'. [ 574.130475][ T9796] netlink: 20 bytes leftover after parsing attributes in process `syz.7.919'. [ 575.014787][ T9810] netlink: 'syz.3.924': attribute type 1 has an invalid length. [ 575.095852][ T9815] netlink: 32 bytes leftover after parsing attributes in process `syz.3.924'. [ 575.635187][ T9810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 575.992191][ T9829] netlink: 116 bytes leftover after parsing attributes in process `syz.1.931'. [ 576.074245][ T9832] netlink: 116 bytes leftover after parsing attributes in process `syz.1.931'. [ 576.096433][ T9817] bond1: (slave geneve2): making interface the new active one [ 576.196525][ T9817] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 576.303754][ T9830] tipc: Enabling of bearer rejected, failed to enable media [ 577.136292][ T9845] netlink: 80 bytes leftover after parsing attributes in process `syz.1.935'. [ 577.199509][ T9845] netlink: 20 bytes leftover after parsing attributes in process `syz.1.935'. [ 578.988393][ T9871] netlink: 'syz.3.944': attribute type 1 has an invalid length. [ 579.377252][ T9880] netlink: 116 bytes leftover after parsing attributes in process `syz.4.945'. [ 579.422299][ T9871] bond2: (slave geneve3): making interface the new active one [ 579.493854][ T9871] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 579.517450][ T9886] netlink: 116 bytes leftover after parsing attributes in process `syz.4.945'. [ 579.824082][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.948'. [ 580.537025][ T9897] loop7: detected capacity change from 0 to 512 [ 580.603908][ T9897] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 580.681784][ T9897] EXT4-fs (loop7): ea_inode feature is not supported for Hurd [ 581.076428][ T9897] loop7: detected capacity change from 0 to 1024 [ 581.152174][ T9897] journal_path: Non-blockdev passed as './file0' [ 581.158759][ T9897] EXT4-fs: error: could not find journal device path [ 581.248890][ T9897] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.949'. [ 582.430260][ T9922] block nbd9: not configured, cannot reconfigure [ 583.385623][ T9935] netlink: 80 bytes leftover after parsing attributes in process `syz.4.960'. [ 583.438188][ T9935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.960'. [ 583.496553][ T9939] netlink: 80 bytes leftover after parsing attributes in process `syz.4.960'. [ 583.526448][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.9.962'. [ 583.526859][ T9939] netlink: 20 bytes leftover after parsing attributes in process `syz.4.960'. [ 584.036784][ T9935] geneve0: entered allmulticast mode [ 584.463756][ T9952] netlink: 128 bytes leftover after parsing attributes in process `syz.9.966'. [ 586.736080][ T9985] netlink: 80 bytes leftover after parsing attributes in process `syz.9.978'. [ 586.782598][ T9985] netlink: 20 bytes leftover after parsing attributes in process `syz.9.978'. [ 586.872541][ T9988] netlink: 80 bytes leftover after parsing attributes in process `syz.9.978'. [ 586.930225][ T9988] netlink: 20 bytes leftover after parsing attributes in process `syz.9.978'. [ 587.421667][ T9985] geneve0: entered allmulticast mode [ 588.381123][T10014] loop1: detected capacity change from 0 to 512 [ 588.414540][T10014] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 588.427010][T10014] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 588.617058][T10014] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.988'. [ 589.633314][T10028] netlink: 36 bytes leftover after parsing attributes in process `syz.1.991'. [ 590.434845][T10026] syzkaller0: entered promiscuous mode [ 590.503109][T10026] syzkaller0: entered allmulticast mode [ 590.967349][T10054] netlink: 80 bytes leftover after parsing attributes in process `syz.4.997'. [ 591.025114][T10054] netlink: 20 bytes leftover after parsing attributes in process `syz.4.997'. [ 591.092238][T10055] netlink: 80 bytes leftover after parsing attributes in process `syz.4.997'. [ 591.143462][T10055] netlink: 20 bytes leftover after parsing attributes in process `syz.4.997'. [ 592.228432][T10067] loop1: detected capacity change from 0 to 512 [ 592.302300][T10067] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 592.354590][T10067] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 592.864875][T10067] loop1: detected capacity change from 0 to 1024 [ 592.964951][T10067] journal_path: Non-blockdev passed as './file0' [ 593.015616][T10067] EXT4-fs: error: could not find journal device path [ 593.066759][T10087] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1005'. [ 593.238934][T10079] veth1_macvtap: renamed from vlan0 [ 593.256712][T10067] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1001'. [ 594.523984][T10103] team0: No ports can be present during mode change [ 594.609313][T10103] vlan0: entered promiscuous mode [ 594.700470][T10105] netlink: 'syz.1.1008': attribute type 1 has an invalid length. [ 594.787130][T10105] netlink: 'syz.1.1008': attribute type 3 has an invalid length. [ 594.883782][T10105] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1008'. [ 594.957021][T10103] team0: Port device vlan0 added [ 595.635688][T10118] syz_tun: entered allmulticast mode [ 595.878804][T10118] pimreg: entered allmulticast mode [ 595.932514][T10124] pimreg: left allmulticast mode [ 596.155159][T10129] loop1: detected capacity change from 0 to 512 [ 596.156094][T10124] syz_tun: left allmulticast mode [ 596.162580][T10131] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1020'. [ 596.236379][T10129] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 596.306066][T10129] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 597.750514][T10149] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1026'. [ 598.093544][T10154] team0: No ports can be present during mode change [ 598.155147][T10154] vlan0: entered promiscuous mode [ 598.271693][T10157] netlink: 'syz.3.1028': attribute type 1 has an invalid length. [ 598.381931][T10157] netlink: 'syz.3.1028': attribute type 3 has an invalid length. [ 598.412168][T10154] team0: Port device vlan0 added [ 598.517634][T10157] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1028'. [ 599.494619][T10174] loop1: detected capacity change from 0 to 512 [ 599.568538][T10174] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 599.601924][T10174] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 600.061547][T10174] loop1: detected capacity change from 0 to 1024 [ 600.149318][T10174] journal_path: Non-blockdev passed as './file0' [ 600.198273][T10174] EXT4-fs: error: could not find journal device path [ 600.582393][T10188] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1042'. [ 602.314316][T10217] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1054'. [ 602.333573][T10218] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1053'. [ 602.426725][T10220] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1054'. [ 602.456800][T10217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1054'. [ 602.481662][T10220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1054'. [ 605.283907][T10255] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1067'. [ 605.580335][T10261] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1069'. [ 605.625944][T10261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1069'. [ 605.694919][T10263] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1069'. [ 605.748845][T10263] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1069'. [ 605.811802][T10261] geneve0: entered allmulticast mode [ 607.827094][T10288] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1079'. [ 608.328973][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1081'. [ 608.845266][T10303] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1084'. [ 608.915213][T10303] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1084'. [ 608.993263][T10305] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1084'. [ 610.470254][T10330] __nla_validate_parse: 3 callbacks suppressed [ 610.470326][T10330] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1093'. [ 611.174179][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1096'. [ 611.826430][T10349] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1100'. [ 611.870132][T10349] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1100'. [ 611.950295][T10354] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1100'. [ 611.996027][T10353] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1102'. [ 612.011276][T10354] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1100'. [ 612.318562][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1104'. [ 612.694142][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'. [ 613.734007][T10378] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1110'. [ 614.698475][T10391] geneve0: entered allmulticast mode [ 616.620767][T10424] __nla_validate_parse: 6 callbacks suppressed [ 616.620843][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1127'. [ 617.559555][T10435] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1132'. [ 617.641961][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1132'. [ 617.697626][T10438] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1132'. [ 617.768226][T10438] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1132'. [ 618.622478][T10453] netlink: 84 bytes leftover after parsing attributes in process `syz.9.1137'. [ 619.480638][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1139'. [ 622.164043][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1153'. [ 623.226819][T10521] netlink: 'syz.7.1159': attribute type 1 has an invalid length. [ 624.039137][T10526] bond1: (slave geneve2): making interface the new active one [ 624.071574][T10526] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 624.902454][T10536] syzkaller0: entered promiscuous mode [ 624.930278][T10536] syzkaller0: entered allmulticast mode [ 625.722538][T10560] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 625.730363][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1169'. [ 628.380711][T10597] netlink: 'syz.3.1181': attribute type 25 has an invalid length. [ 628.443645][T10599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1182'. [ 631.176334][T10641] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 631.183949][T10641] IPv6: NLM_F_CREATE should be set when creating new route [ 631.888064][T10653] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1202'. [ 633.287178][T10675] loop7: detected capacity change from 0 to 512 [ 633.395411][T10675] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 633.460321][T10675] EXT4-fs (loop7): ea_inode feature is not supported for Hurd [ 633.562032][T10683] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1213'. [ 633.618895][T10685] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1213'. [ 634.053653][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.075270][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.202443][T10703] netlink: 100 bytes leftover after parsing attributes in process `syz.9.1220'. [ 637.070630][T10732] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1230'. [ 637.102609][T10731] loop7: detected capacity change from 0 to 512 [ 637.156229][T10724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 637.189968][T10731] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 637.242698][T10731] EXT4-fs (loop7): ea_inode feature is not supported for Hurd [ 637.529980][T10731] loop7: detected capacity change from 0 to 1024 [ 637.582443][T10731] journal_path: Non-blockdev passed as './file0' [ 637.609880][T10731] EXT4-fs: error: could not find journal device path [ 637.640739][T10731] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.1228'. [ 637.980554][T10742] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1233'. [ 638.951518][T10757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 639.774756][T10769] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1242'. [ 639.840174][T10771] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1241'. [ 639.928073][T10771] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1241'. [ 640.488999][T10779] loop1: detected capacity change from 0 to 512 [ 640.540331][T10779] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 640.605869][T10779] EXT4-fs (loop1): ea_inode feature is not supported for Hurd [ 640.679439][T10782] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1247'. [ 640.968184][T10779] loop1: detected capacity change from 0 to 1024 [ 641.017511][T10779] journal_path: Non-blockdev passed as './file0' [ 641.053902][T10779] EXT4-fs: error: could not find journal device path [ 641.066749][ T5229] 8021q: adding VLAN 0 to HW filter on device eth1 [ 641.260983][T10779] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1245'. [ 641.598617][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1251'. [ 642.554176][T10808] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1256'. [ 643.317215][T10815] gtp0: entered allmulticast mode [ 643.432070][T10815] team0: Device gtp0 is of different type [ 643.815870][T10825] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1261'. [ 645.291020][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1268'. [ 645.369878][ T9] IPVS: starting estimator thread 0... [ 645.479991][T10850] IPVS: using max 240 ests per chain, 12000 per kthread [ 645.911016][T10861] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1271'. [ 646.640708][T10869] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1275'. [ 646.909510][ T5229] 8021q: adding VLAN 0 to HW filter on device eth2 [ 648.276533][T10891] loop7: detected capacity change from 0 to 512 [ 648.279357][T10876] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.294406][T10876] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.382714][T10891] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 648.420673][T10891] EXT4-fs (loop7): ea_inode feature is not supported for Hurd [ 648.763595][T10891] loop7: detected capacity change from 0 to 1024 [ 648.813446][T10891] journal_path: Non-blockdev passed as './file0' [ 648.851245][T10891] EXT4-fs: error: could not find journal device path [ 649.389788][T10876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.469041][T10876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.853663][T10876] vlan0: left promiscuous mode [ 650.073807][T10905] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1290'. [ 650.182988][T10895] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1286'. [ 650.195938][ T8222] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.231898][ T8222] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.289012][ T8222] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.325472][ T8222] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.806953][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1293'. [ 651.698827][T10927] loop9: detected capacity change from 0 to 512 [ 651.757548][T10927] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 651.825769][T10927] EXT4-fs (loop9): ea_inode feature is not supported for Hurd [ 652.046603][T10934] erspan0: entered promiscuous mode [ 652.102476][T10934] erspan0: entered allmulticast mode [ 652.377358][T10927] loop9: detected capacity change from 0 to 1024 [ 652.455439][T10927] journal_path: Non-blockdev passed as './file0' [ 652.487643][T10927] EXT4-fs: error: could not find journal device path [ 652.608577][T10941] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1301'. [ 653.505990][T10958] IPVS: sync thread started: state = MASTER, mcast_ifn = gretap0, syncid = 4, id = 0 [ 653.520324][T10954] IPVS: stopping master sync thread 10958 ... [ 653.545695][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1306'. [ 655.495566][T10985] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1315'. [ 656.096558][ T5229] 8021q: adding VLAN 0 to HW filter on device eth3 [ 656.573429][T10999] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1319'. [ 656.594664][T10999] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1319'. [ 656.652077][T10999] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1319'. [ 657.141883][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 657.904671][T11026] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1328'. [ 658.896445][T11037] team0: No ports can be present during mode change [ 658.942028][T11037] vlan0: entered promiscuous mode [ 660.246080][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1339'. [ 661.617018][T11089] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1344'. [ 662.561161][T11104] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1349'. [ 663.642938][T11119] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1354'. [ 664.364525][T11130] team0: No ports can be present during mode change [ 664.535432][T11134] netlink: 'syz.3.1357': attribute type 1 has an invalid length. [ 664.565790][T11134] netlink: 'syz.3.1357': attribute type 3 has an invalid length. [ 664.612556][T11134] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1357'. [ 665.879222][T11151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1363'. [ 666.199127][T11154] overlay: filesystem on ./file0 not supported [ 667.112709][T11169] team0: No ports can be present during mode change [ 667.206299][T11169] netlink: 'syz.3.1370': attribute type 1 has an invalid length. [ 667.266504][T11169] netlink: 'syz.3.1370': attribute type 3 has an invalid length. [ 667.289100][T11169] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1370'. [ 668.435710][T11188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1377'. [ 669.404074][T11199] syzkaller0: entered promiscuous mode [ 669.464331][T11199] syzkaller0: entered allmulticast mode [ 669.773993][T11210] team0: No ports can be present during mode change [ 669.814888][T11210] netlink: 'syz.9.1385': attribute type 1 has an invalid length. [ 669.831646][T11210] netlink: 'syz.9.1385': attribute type 3 has an invalid length. [ 669.858158][T11210] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1385'. [ 670.608996][ T5229] 8021q: adding VLAN 0 to HW filter on device eth4 [ 672.641676][T11250] team0: No ports can be present during mode change [ 672.783505][T11250] netlink: 'syz.9.1399': attribute type 1 has an invalid length. [ 672.821324][T11250] netlink: 'syz.9.1399': attribute type 3 has an invalid length. [ 672.852035][T11250] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1399'. [ 673.463823][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1403'. [ 675.918475][T11301] team0: No ports can be present during mode change [ 676.001612][T11301] netlink: 'syz.3.1416': attribute type 1 has an invalid length. [ 676.055618][T11301] netlink: 'syz.3.1416': attribute type 3 has an invalid length. [ 676.116365][T11301] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1416'. [ 676.651576][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1419'. [ 676.924277][T11322] overlayfs: failed to clone lowerpath [ 678.678300][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1429'. [ 679.498109][T11357] loop7: detected capacity change from 0 to 512 [ 679.566711][T11357] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 679.609062][T11357] EXT4-fs (loop7): ea_inode feature is not supported for Hurd [ 680.036321][T11357] netlink: 1692 bytes leftover after parsing attributes in process `syz.7.1433'. [ 680.088370][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1435'. [ 680.543289][T11372] overlay: filesystem on ./file0 not supported [ 687.793730][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1469'. [ 690.679471][T11509] syzkaller0: entered promiscuous mode [ 690.719456][T11509] syzkaller0: entered allmulticast mode [ 691.678354][T11528] team0: No ports can be present during mode change [ 691.693152][T11528] netlink: 'syz.3.1481': attribute type 1 has an invalid length. [ 691.710850][T11528] netlink: 'syz.3.1481': attribute type 3 has an invalid length. [ 691.727854][T11528] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1481'. [ 695.470025][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.476710][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.649654][T11575] loop3: detected capacity change from 0 to 256 [ 695.768777][T11575] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 695.873320][T11575] loop3: Can't mount, would change RO state [ 695.997325][T11578] team0: No ports can be present during mode change [ 699.674970][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 699.692149][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 699.706846][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 699.723356][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 699.734052][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 700.979834][T11646] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.988183][T11646] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.372232][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 701.405595][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.675199][T11646] geneve0: left allmulticast mode [ 701.780561][ T48] Bluetooth: hci4: command tx timeout [ 701.795332][ T1104] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.854545][ T1104] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.881170][ T1104] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.947894][ T1104] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.326055][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1507'. [ 702.840856][ T13] bridge_slave_1: left allmulticast mode [ 702.869397][ T13] bridge_slave_1: left promiscuous mode [ 702.893590][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.939070][ T13] bridge_slave_0: left allmulticast mode [ 702.961165][ T13] bridge_slave_0: left promiscuous mode [ 702.984088][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.444319][ T5581] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 703.458669][ T5581] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 703.471557][ T5581] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 703.495119][ T5581] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 703.515236][ T5581] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 703.755956][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.823899][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.846124][ T13] bond0 (unregistering): Released all slaves [ 703.864136][ T48] Bluetooth: hci4: command tx timeout [ 704.176781][ T13] tipc: Left network mode [ 704.697368][ T13] hsr_slave_0: left promiscuous mode [ 704.715108][ T13] hsr_slave_1: left promiscuous mode [ 704.747803][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.769323][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.986321][ T13] team0 (unregistering): Port device vlan0 removed [ 705.309450][ T13] team0 (unregistering): Port device team_slave_1 removed [ 705.377236][ T13] team0 (unregistering): Port device team_slave_0 removed [ 705.455544][T11696] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1510'. [ 705.621097][ T48] Bluetooth: hci1: command tx timeout [ 705.940161][ T48] Bluetooth: hci4: command tx timeout [ 706.480942][ T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.664898][ T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.935150][ T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.132644][ T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.699838][ T48] Bluetooth: hci1: command tx timeout [ 708.003128][ T13] bridge_slave_1: left allmulticast mode [ 708.010156][ T13] bridge_slave_1: left promiscuous mode [ 708.016705][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.026280][ T48] Bluetooth: hci4: command tx timeout [ 708.058616][ T13] bridge_slave_0: left allmulticast mode [ 708.078738][ T13] bridge_slave_0: left promiscuous mode [ 708.087848][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.779517][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.796947][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.818330][ T13] bond0 (unregistering): Released all slaves [ 708.857494][T11634] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.865661][T11634] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.874348][T11634] bridge_slave_0: entered allmulticast mode [ 708.889435][T11634] bridge_slave_0: entered promiscuous mode [ 708.943048][T11634] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.951504][T11634] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.959210][T11634] bridge_slave_1: entered allmulticast mode [ 708.976585][T11634] bridge_slave_1: entered promiscuous mode [ 709.034342][ T13] tipc: Left network mode [ 709.158733][T11634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.228130][T11634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.605050][T11634] team0: Port device team_slave_0 added [ 709.707887][ T13] hsr_slave_0: left promiscuous mode [ 709.742404][ T13] hsr_slave_1: left promiscuous mode [ 709.766756][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.780649][ T48] Bluetooth: hci1: command tx timeout [ 709.794310][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.837409][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 709.860430][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.904659][ T13] veth1_macvtap: left promiscuous mode [ 709.908280][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1516'. [ 709.923748][ T13] veth0_macvtap: left promiscuous mode [ 709.931550][ T13] veth1_vlan: left promiscuous mode [ 709.944686][ T13] veth0_vlan: left promiscuous mode [ 710.995217][ T13] team0 (unregistering): Port device team_slave_1 removed [ 711.030579][ T13] team0 (unregistering): Port device team_slave_0 removed [ 711.396564][T11634] team0: Port device team_slave_1 added [ 711.758096][T11634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 711.793064][T11634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.861597][ T48] Bluetooth: hci1: command tx timeout [ 711.903414][T11634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.960902][T11634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.009807][T11634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.054423][T11771] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1519'. [ 712.090785][T11634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.310581][ T13] IPVS: stop unused estimator thread 0... [ 712.393472][ T5581] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 712.409267][ T5581] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 712.414991][T11676] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.428616][ T5581] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 712.443447][ T5581] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 712.460422][ T5581] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 712.523756][T11676] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.565734][T11676] bridge_slave_0: entered allmulticast mode [ 712.620169][T11676] bridge_slave_0: entered promiscuous mode [ 712.691681][T11676] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.719051][T11676] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.745140][T11676] bridge_slave_1: entered allmulticast mode [ 712.772136][T11676] bridge_slave_1: entered promiscuous mode [ 713.106214][T11676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.170580][T11676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.597443][T11634] hsr_slave_0: entered promiscuous mode [ 713.641405][T11634] hsr_slave_1: entered promiscuous mode [ 713.713086][T11676] team0: Port device team_slave_0 added [ 713.827261][T11676] team0: Port device team_slave_1 added [ 714.503688][ T5581] Bluetooth: hci5: command tx timeout [ 714.594054][T11676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.626206][T11676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.662179][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 714.684974][T11676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.685671][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 714.709120][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 714.732368][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 714.747383][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 714.847579][ T8222] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.910780][T11676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.928400][T11676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.017126][T11676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.310794][ T8222] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.519319][ T8222] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.930953][T11676] hsr_slave_0: entered promiscuous mode [ 715.961416][T11676] hsr_slave_1: entered promiscuous mode [ 715.990390][T11676] debugfs: 'hsr0' already exists in 'hsr' [ 715.996673][T11676] Cannot create hsr debugfs directory [ 716.122625][ T8222] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.581547][ T48] Bluetooth: hci5: command tx timeout [ 716.821404][ T48] Bluetooth: hci3: command tx timeout [ 717.113611][T11825] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1527'. [ 717.698632][T11831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1529'. [ 717.759345][ T8222] bridge_slave_1: left allmulticast mode [ 717.766761][ T8222] bridge_slave_1: left promiscuous mode [ 717.773591][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.793214][ T8222] bridge_slave_0: left allmulticast mode [ 717.799126][ T8222] bridge_slave_0: left promiscuous mode [ 717.807079][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.191820][ T8222] bond1 (unregistering): (slave geneve2): Releasing active interface [ 718.252091][T11837] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1532'. [ 718.346683][ T8222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.363458][ T8222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.380392][ T8222] bond0 (unregistering): Released all slaves [ 718.395109][ T8222] bond1 (unregistering): Released all slaves [ 718.662502][ T48] Bluetooth: hci5: command tx timeout [ 718.900045][ T48] Bluetooth: hci3: command tx timeout [ 719.227563][ T8222] hsr_slave_0: left promiscuous mode [ 719.244369][ T8222] hsr_slave_1: left promiscuous mode [ 719.253897][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.264186][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.273685][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.294243][ T8222] veth1_macvtap: left promiscuous mode [ 719.300457][ T8222] veth0_macvtap: left promiscuous mode [ 719.306293][ T8222] veth1_vlan: left promiscuous mode [ 719.742217][ T8222] team0 (unregistering): Port device team_slave_1 removed [ 719.763732][ T8222] team0 (unregistering): Port device team_slave_0 removed [ 720.061202][T11634] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 720.091725][T11634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 720.187602][T11634] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 720.228577][T11634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 720.458158][T11634] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 720.524375][T11634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 720.595658][T11634] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 720.614305][T11856] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1539'. [ 720.626870][T11634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 720.741817][ T48] Bluetooth: hci5: command tx timeout [ 720.980656][ T48] Bluetooth: hci3: command tx timeout [ 721.211621][ T8222] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.343047][T11775] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.357436][T11775] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.372122][T11775] bridge_slave_0: entered allmulticast mode [ 721.385140][T11775] bridge_slave_0: entered promiscuous mode [ 721.486105][ T8222] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.504482][T11775] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.516094][T11775] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.525344][T11775] bridge_slave_1: entered allmulticast mode [ 721.536699][T11775] bridge_slave_1: entered promiscuous mode [ 721.682736][T11775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.713231][ T8222] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.765327][T11775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.048278][ T8222] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.082285][T11775] team0: Port device team_slave_0 added [ 722.144687][T11676] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 722.187874][T11676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 722.220302][T11775] team0: Port device team_slave_1 added [ 722.318419][T11676] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 722.382785][T11676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 722.393174][T11676] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 722.417400][T11676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 722.531271][T11676] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 722.556851][T11676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 722.585101][T11775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.596247][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.628268][T11775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.771605][T11882] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1546'. [ 722.804079][T11775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.816034][T11775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.844162][T11775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.860476][T11801] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.867990][T11801] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.875869][T11801] bridge_slave_0: entered allmulticast mode [ 722.884458][T11801] bridge_slave_0: entered promiscuous mode [ 722.901328][T11801] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.912481][T11801] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.921523][T11801] bridge_slave_1: entered allmulticast mode [ 722.932344][T11801] bridge_slave_1: entered promiscuous mode [ 723.060113][ T48] Bluetooth: hci3: command tx timeout [ 723.174954][T11801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.261056][T11801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.297913][ T8222] bridge_slave_1: left allmulticast mode [ 723.304641][ T8222] bridge_slave_1: left promiscuous mode [ 723.311677][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.324105][ T8222] bridge_slave_0: left allmulticast mode [ 723.330830][ T8222] bridge_slave_0: left promiscuous mode [ 723.337110][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.604228][ T8222] bond2 (unregistering): (slave geneve3): Releasing active interface [ 723.645394][ T8222] bond1 (unregistering): (slave geneve2): Releasing active interface [ 723.784669][ T8222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.800425][ T8222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.816967][ T8222] bond0 (unregistering): Released all slaves [ 723.845149][ T8222] bond1 (unregistering): Released all slaves [ 723.868480][ T8222] bond2 (unregistering): Released all slaves [ 724.109033][T11775] hsr_slave_0: entered promiscuous mode [ 724.120709][T11775] hsr_slave_1: entered promiscuous mode [ 724.130060][T11775] debugfs: 'hsr0' already exists in 'hsr' [ 724.136027][T11775] Cannot create hsr debugfs directory [ 724.152872][T11801] team0: Port device team_slave_0 added [ 724.167791][T11801] team0: Port device team_slave_1 added [ 724.207043][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1548'. [ 724.417963][T11801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.430925][T11801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.462130][T11801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.569007][T11801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.576774][T11801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.604563][T11801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.810706][ T8222] hsr_slave_0: left promiscuous mode [ 724.818636][ T8222] hsr_slave_1: left promiscuous mode [ 724.828235][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.838150][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.849334][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.860985][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.885402][ T8222] veth1_macvtap: left promiscuous mode [ 724.891421][ T8222] veth0_macvtap: left promiscuous mode [ 724.897404][ T8222] veth1_vlan: left promiscuous mode [ 725.432983][ T8222] team0 (unregistering): Port device vlan0 removed [ 725.661481][ T8222] team0 (unregistering): Port device team_slave_1 removed [ 725.731521][ T8222] team0 (unregistering): Port device team_slave_0 removed [ 726.411874][T11801] hsr_slave_0: entered promiscuous mode [ 726.423094][T11801] hsr_slave_1: entered promiscuous mode [ 726.432982][T11801] debugfs: 'hsr0' already exists in 'hsr' [ 726.438956][T11801] Cannot create hsr debugfs directory [ 726.645957][T11634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.132009][T11634] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.305828][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.313426][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.359268][T11676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.445470][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.453068][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.767200][T11676] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.776788][T11775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 727.813459][T11775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 727.859498][T11775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 727.894689][T11775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 727.964233][T11775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 727.999224][T11775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 728.023541][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.031082][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.049207][T11775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 728.076292][T11775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 728.178642][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.186227][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.962978][T11801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 729.011869][T11801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 729.032843][T11801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 729.073795][T11801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 729.182953][T11801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 729.210843][T11801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 729.263139][T11801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 729.293337][T11801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 729.891301][T11775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.233021][T11775] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.385022][ T7840] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.392709][ T7840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.533794][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.541344][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.904470][T11634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.103494][T11801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.473335][T11801] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.617994][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.625530][ T6172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.684158][T11925] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1553'. [ 731.766577][ T7840] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.774152][ T7840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.815492][T11676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.596568][T11634] veth0_vlan: entered promiscuous mode [ 733.750978][T11634] veth1_vlan: entered promiscuous mode [ 734.293408][T11634] veth0_macvtap: entered promiscuous mode [ 734.388129][T11634] veth1_macvtap: entered promiscuous mode [ 734.696584][T11634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.858637][T11634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.972711][T11775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.005126][ T34] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.017863][ T34] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.073253][ T34] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.084706][ T34] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.716006][T11676] veth0_vlan: entered promiscuous mode [ 736.018250][T11676] veth1_vlan: entered promiscuous mode [ 736.084193][T11775] veth0_vlan: entered promiscuous mode [ 736.194917][T11801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.327859][T11775] veth1_vlan: entered promiscuous mode [ 736.765606][T11676] veth0_macvtap: entered promiscuous mode [ 736.886663][T11676] veth1_macvtap: entered promiscuous mode [ 737.176263][T11801] veth0_vlan: entered promiscuous mode [ 737.218609][T11775] veth0_macvtap: entered promiscuous mode [ 737.291295][T11775] veth1_macvtap: entered promiscuous mode [ 737.356191][T11676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.416790][T11996] netlink: 'syz.4.1556': attribute type 16 has an invalid length. [ 737.486685][T11996] netlink: 'syz.4.1556': attribute type 17 has an invalid length. [ 737.497736][T11801] veth1_vlan: entered promiscuous mode [ 737.591968][T11676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.788506][T11775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.898276][ T7840] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.924910][ T7840] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.953027][ T7840] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.001446][T11775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.018133][ T7840] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.207986][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.242273][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.281624][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.320500][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.578865][T11801] veth0_macvtap: entered promiscuous mode [ 738.747911][T11801] veth1_macvtap: entered promiscuous mode [ 739.131148][T11801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.334495][T11801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.480985][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.533293][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.583193][ T34] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.629254][ T34] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.672954][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.706313][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.007216][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.044259][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.306352][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.346880][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.533712][ T8222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.573758][ T8222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.008507][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.045434][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.148267][T12096] loop8: detected capacity change from 0 to 512 [ 745.225040][T12096] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 745.271207][T12096] EXT4-fs (loop8): ea_inode feature is not supported for Hurd [ 745.405073][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.451450][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.588384][T12096] loop8: detected capacity change from 0 to 1024 [ 745.674661][T12096] journal_path: Non-blockdev passed as './file0' [ 745.754578][T12096] EXT4-fs: error: could not find journal device path [ 746.317279][ T8222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.374425][ T8222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.777228][ T8162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.794482][ T6172] Bluetooth: hci0: Frame reassembly failed (-84) [ 746.824388][ T8162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.394135][T12136] syzkaller0: entered promiscuous mode [ 748.417647][T12136] syzkaller0: entered allmulticast mode [ 748.819821][ T5581] Bluetooth: hci0: command 0x1003 tx timeout [ 748.820115][ T48] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 748.983294][T12148] 9p: Bad value for 'wfdno' [ 749.047590][T12150] loop0: detected capacity change from 0 to 512 [ 749.108539][T12150] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 749.168090][T12150] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 751.397510][T12180] loop0: detected capacity change from 0 to 512 [ 751.448819][T12180] EXT4-fs: Ignoring removed nomblk_io_submit option [ 751.487536][T12180] EXT4-fs: Ignoring removed nomblk_io_submit option [ 751.654679][T12180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.762457][T12180] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 751.897041][ T29] audit: type=1800 audit(1779357115.349:3): pid=12180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1581" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 752.322608][T12177] syz.2.1580 (12177) used greatest stack depth: 1560 bytes left [ 752.748147][T11801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.216720][T12204] loop2: detected capacity change from 0 to 512 [ 753.286706][T12204] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 753.336724][T12204] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 753.641666][T12204] loop2: detected capacity change from 0 to 1024 [ 753.714703][T12204] journal_path: Non-blockdev passed as './file0' [ 753.759442][T12204] EXT4-fs: error: could not find journal device path [ 754.030626][T12207] syzkaller0: entered promiscuous mode [ 754.077388][T12207] syzkaller0: entered allmulticast mode [ 756.652229][T12251] loop6: detected capacity change from 0 to 512 [ 756.702025][T12251] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 756.814606][T12251] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.917383][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.933406][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 756.984533][T12251] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 757.143351][T12251] EXT4-fs error (device loop6): ext4_lookup:1785: inode #15: comm syz.6.1597: invalid fast symlink length 10 [ 757.235985][T12251] EXT4-fs (loop6): Remounting filesystem read-only [ 757.651699][T11676] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.330901][T12276] input: syz0 as /devices/virtual/input/input5 [ 758.432464][T12277] tipc: Started in network mode [ 758.473505][T12277] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 758.522933][T12277] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 758.574379][T12277] tipc: Enabled bearer , priority 10 [ 759.682668][ T24] tipc: Node number set to 1 [ 760.138682][T12299] loop6: detected capacity change from 0 to 512 [ 760.184663][T12299] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 760.249763][T12299] EXT4-fs (loop6): ea_inode feature is not supported for Hurd [ 760.347539][ T29] audit: type=1326 audit(1779357123.789:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12301 comm="syz.4.1614" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x7ffc0000 [ 760.467125][ T29] audit: type=1326 audit(1779357123.789:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12301 comm="syz.4.1614" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x7ffc0000 [ 760.557699][T12299] loop6: detected capacity change from 0 to 1024 [ 760.574852][ T29] audit: type=1326 audit(1779357123.809:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12301 comm="syz.4.1614" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=330 compat=1 ip=0xf70af01c code=0x7ffc0000 [ 760.624499][T12299] journal_path: Non-blockdev passed as './file0' [ 760.661955][T12299] EXT4-fs: error: could not find journal device path [ 760.683226][ T29] audit: type=1326 audit(1779357123.819:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12301 comm="syz.4.1614" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x7ffc0000 [ 760.851408][ T29] audit: type=1326 audit(1779357123.819:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12301 comm="syz.4.1614" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x7ffc0000 [ 760.982873][ T29] audit: type=1326 audit(1779357123.829:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12301 comm="syz.4.1614" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70af01c code=0x7ffc0000 [ 761.098994][ T29] audit: type=1326 audit(1779357123.829:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12301 comm="syz.4.1614" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x7ffc0000 [ 761.212005][ T29] audit: type=1326 audit(1779357123.839:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12301 comm="syz.4.1614" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70af01c code=0x7ffc0000 [ 761.364723][ T29] audit: type=1326 audit(1779357123.839:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12301 comm="syz.4.1614" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x7ffc0000 [ 761.514722][ T29] audit: type=1326 audit(1779357123.839:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12301 comm="syz.4.1614" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x7ffc0000 [ 762.488880][T12329] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1621'. [ 763.150940][T12331] syzkaller0: entered promiscuous mode [ 763.181348][T12331] syzkaller0: entered allmulticast mode [ 764.562064][T12347] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1626'. [ 766.523238][T12372] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1634'. [ 767.460425][T12386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1639'. [ 768.380969][T12403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 769.287504][T12415] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1649'. [ 769.402215][T12414] gtp0: entered allmulticast mode [ 770.136966][T12432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1653'. [ 770.200651][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1654'. [ 770.944838][T12442] loop2: detected capacity change from 0 to 2048 [ 771.123086][T12442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 771.692892][ T5686] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 771.920486][ T5686] usb 3-1: Using ep0 maxpacket: 8 [ 772.008615][ T5686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 772.043071][ T5686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 772.085844][ T5686] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 772.149797][ T5686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 772.212418][ T5686] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 772.268991][ T5686] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 772.324319][ T5686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.380887][ T5686] usb 3-1: config 0 descriptor?? [ 772.434824][T12458] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 773.656816][ T48] Bluetooth: hci0: Opcode 0x0c03 failed: -71 [ 773.666343][ T24] usb 3-1: USB disconnect, device number 2 [ 773.845447][T12481] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1668'. [ 775.534976][T11775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.862512][T12501] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 775.930083][T12501] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 775.954859][T12501] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 776.128632][T12510] ===================================================== [ 776.136093][T12510] BUG: KMSAN: uninit-value in eth_type_trans+0x840/0xae0 [ 776.143619][T12510] eth_type_trans+0x840/0xae0 [ 776.148516][T12510] bpf_prog_run_generic_xdp+0x1313/0x20d0 [ 776.154577][T12510] do_xdp_generic+0xe07/0x17b0 [ 776.159709][T12510] tun_get_user+0x52df/0x6fe0 [ 776.164568][T12510] tun_chr_write_iter+0x3e9/0x5c0 [ 776.169963][T12510] vfs_write+0xbe1/0x15c0 [ 776.174467][T12510] ksys_write+0x1d9/0x470 [ 776.178970][T12510] __ia32_sys_write+0x9a/0xf0 [ 776.184039][T12510] ia32_sys_call+0x37a7/0x4360 [ 776.189098][T12510] do_int80_emulation+0x15a/0x360 [ 776.194532][T12510] asm_int80_emulation+0x1f/0x30 [ 776.199715][T12510] [ 776.202105][T12510] Uninit was stored to memory at: [ 776.207389][T12510] pskb_expand_head+0x497/0x1a40 [ 776.212704][T12510] do_xdp_generic+0xb30/0x17b0 [ 776.217635][T12510] tun_get_user+0x52df/0x6fe0 [ 776.222678][T12510] tun_chr_write_iter+0x3e9/0x5c0 [ 776.227874][T12510] vfs_write+0xbe1/0x15c0 [ 776.232492][T12510] ksys_write+0x1d9/0x470 [ 776.237521][T12510] __ia32_sys_write+0x9a/0xf0 [ 776.242576][T12510] ia32_sys_call+0x37a7/0x4360 [ 776.247522][T12510] do_int80_emulation+0x15a/0x360 [ 776.252862][T12510] asm_int80_emulation+0x1f/0x30 [ 776.257951][T12510] [ 776.260561][T12510] Uninit was created at: [ 776.265040][T12510] __kmalloc_node_track_caller_noprof+0x4f6/0x1750 [ 776.271888][T12510] __alloc_skb+0x90d/0x1190 [ 776.276549][T12510] alloc_skb_with_frags+0xc5/0x990 [ 776.282015][T12510] sock_alloc_send_pskb+0xacb/0xc60 [ 776.287396][T12510] tun_get_user+0xefa/0x6fe0 [ 776.292352][T12510] tun_chr_write_iter+0x3e9/0x5c0 [ 776.297522][T12510] vfs_write+0xbe1/0x15c0 [ 776.302221][T12510] ksys_write+0x1d9/0x470 [ 776.306731][T12510] __ia32_sys_write+0x9a/0xf0 [ 776.311785][T12510] ia32_sys_call+0x37a7/0x4360 [ 776.316735][T12510] do_int80_emulation+0x15a/0x360 [ 776.322211][T12510] asm_int80_emulation+0x1f/0x30 [ 776.327301][T12510] [ 776.329946][T12510] CPU: 1 UID: 0 PID: 12510 Comm: syz.2.1673 Not tainted syzkaller #0 PREEMPT(full) [ 776.339472][T12510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 776.349930][T12510] ===================================================== [ 776.356964][T12510] Disabling lock debugging due to kernel taint [ 776.363415][T12510] Kernel panic - not syncing: kmsan.panic set ... [ 776.369944][T12510] CPU: 1 UID: 0 PID: 12510 Comm: syz.2.1673 Tainted: G B syzkaller #0 PREEMPT(full) [ 776.381040][T12510] Tainted: [B]=BAD_PAGE [ 776.385258][T12510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 776.395402][T12510] Call Trace: [ 776.398754][T12510] [ 776.401760][T12510] __dump_stack+0x26/0x30 [ 776.406232][T12510] dump_stack_lvl+0x50/0x1c0 [ 776.411070][T12510] ? dump_stack+0x12/0x25 [ 776.415536][T12510] dump_stack+0x1e/0x25 [ 776.419820][T12510] vpanic+0x7b4/0x1430 [ 776.424063][T12510] panic+0x15d/0x160 [ 776.428142][T12510] kmsan_report+0x31a/0x320 [ 776.432807][T12510] ? __pskb_pull_tail+0x109f/0x2880 [ 776.438164][T12510] ? __msan_warning+0x1b/0x30 [ 776.442989][T12510] ? eth_type_trans+0x840/0xae0 [ 776.447996][T12510] ? bpf_prog_run_generic_xdp+0x1313/0x20d0 [ 776.454051][T12510] ? do_xdp_generic+0xe07/0x17b0 [ 776.459131][T12510] ? tun_get_user+0x52df/0x6fe0 [ 776.464116][T12510] ? tun_chr_write_iter+0x3e9/0x5c0 [ 776.469450][T12510] ? vfs_write+0xbe1/0x15c0 [ 776.474095][T12510] ? ksys_write+0x1d9/0x470 [ 776.478744][T12510] ? __ia32_sys_write+0x9a/0xf0 [ 776.483737][T12510] ? ia32_sys_call+0x37a7/0x4360 [ 776.488839][T12510] ? do_int80_emulation+0x15a/0x360 [ 776.494198][T12510] ? asm_int80_emulation+0x1f/0x30 [ 776.499448][T12510] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 776.505456][T12510] ? bpf_xdp_adjust_head+0x2e2/0x390 [ 776.510914][T12510] ? kmsan_get_metadata+0xf1/0x160 [ 776.516226][T12510] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 776.522214][T12510] ? ___bpf_prog_run+0xe95c/0xea90 [ 776.527509][T12510] ? kmsan_get_metadata+0xf1/0x160 [ 776.532787][T12510] __msan_warning+0x1b/0x30 [ 776.537427][T12510] eth_type_trans+0x840/0xae0 [ 776.542302][T12510] bpf_prog_run_generic_xdp+0x1313/0x20d0 [ 776.548244][T12510] do_xdp_generic+0xe07/0x17b0 [ 776.553167][T12510] ? filter_irq_stacks+0x49/0x190 [ 776.558360][T12510] ? tun_get_user+0x525e/0x6fe0 [ 776.563350][T12510] tun_get_user+0x52df/0x6fe0 [ 776.568174][T12510] ? stack_depot_save_flags+0x35/0x790 [ 776.573808][T12510] ? kmsan_get_metadata+0xf1/0x160 [ 776.579092][T12510] ? kmsan_get_metadata+0xf1/0x160 [ 776.584380][T12510] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 776.590645][T12510] ? kmsan_get_metadata+0xf1/0x160 [ 776.595932][T12510] tun_chr_write_iter+0x3e9/0x5c0 [ 776.601124][T12510] vfs_write+0xbe1/0x15c0 [ 776.605643][T12510] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 776.611340][T12510] ksys_write+0x1d9/0x470 [ 776.615835][T12510] __ia32_sys_write+0x9a/0xf0 [ 776.620676][T12510] ia32_sys_call+0x37a7/0x4360 [ 776.625619][T12510] do_int80_emulation+0x15a/0x360 [ 776.630810][T12510] ? clear_bhb_loop+0x50/0xa0 [ 776.635617][T12510] ? clear_bhb_loop+0x50/0xa0 [ 776.640430][T12510] asm_int80_emulation+0x1f/0x30 [ 776.645517][T12510] RIP: 0023:0xf71961ab [ 776.649683][T12510] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 776.669519][T12510] RSP: 002b:00000000f545644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 776.678101][T12510] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000300 [ 776.686197][T12510] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 776.694274][T12510] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 776.702339][T12510] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 776.710426][T12510] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 776.718540][T12510] [ 776.722006][T12510] Kernel Offset: disabled [ 776.726381][T12510] Rebooting in 86400 seconds..