Warning: Permanently added '[localhost]:58530' (ED25519) to the list of known hosts. 2024/03/14 03:12:31 fuzzer started 2024/03/14 03:12:32 dialing manager at localhost:30001 [ 51.786202][ T5188] cgroup: Unknown subsys name 'net' [ 51.945735][ T5188] cgroup: Unknown subsys name 'rlimit' [ 52.933876][ T5188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/03/14 03:12:33 syscalls: 3883 2024/03/14 03:12:33 code coverage: enabled 2024/03/14 03:12:33 comparison tracing: enabled 2024/03/14 03:12:33 extra coverage: enabled 2024/03/14 03:12:33 delay kcov mmap: enabled 2024/03/14 03:12:33 setuid sandbox: enabled 2024/03/14 03:12:33 namespace sandbox: enabled 2024/03/14 03:12:33 Android sandbox: /sys/fs/selinux/policy does not exist 2024/03/14 03:12:33 fault injection: enabled 2024/03/14 03:12:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/03/14 03:12:33 net packet injection: enabled 2024/03/14 03:12:33 net device setup: enabled 2024/03/14 03:12:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/03/14 03:12:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/03/14 03:12:33 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/03/14 03:12:33 USB emulation: enabled 2024/03/14 03:12:33 hci packet injection: enabled 2024/03/14 03:12:33 wifi device emulation: enabled 2024/03/14 03:12:33 802.15.4 emulation: enabled 2024/03/14 03:12:33 swap file: enabled 2024/03/14 03:12:35 fetching corpus: 0, signal 0/2000 (executing program) 2024/03/14 03:12:36 fetching corpus: 50, signal 20641/24504 (executing program) 2024/03/14 03:12:36 fetching corpus: 100, signal 32629/38307 (executing program) 2024/03/14 03:12:36 fetching corpus: 150, signal 44852/52260 (executing program) 2024/03/14 03:12:36 fetching corpus: 200, signal 52313/61460 (executing program) 2024/03/14 03:12:36 fetching corpus: 250, signal 56328/67225 (executing program) 2024/03/14 03:12:36 fetching corpus: 300, signal 63064/75617 (executing program) 2024/03/14 03:12:36 fetching corpus: 350, signal 66721/80945 (executing program) 2024/03/14 03:12:36 fetching corpus: 400, signal 75480/91187 (executing program) 2024/03/14 03:12:36 fetching corpus: 450, signal 81035/98319 (executing program) 2024/03/14 03:12:36 fetching corpus: 500, signal 87030/105862 (executing program) 2024/03/14 03:12:36 fetching corpus: 550, signal 93646/113880 (executing program) 2024/03/14 03:12:36 fetching corpus: 600, signal 98014/119760 (executing program) 2024/03/14 03:12:36 fetching corpus: 650, signal 101070/124322 (executing program) 2024/03/14 03:12:37 fetching corpus: 700, signal 104442/129165 (executing program) 2024/03/14 03:12:37 fetching corpus: 750, signal 107784/133991 (executing program) 2024/03/14 03:12:37 fetching corpus: 800, signal 110497/138157 (executing program) 2024/03/14 03:12:37 fetching corpus: 850, signal 114277/143326 (executing program) 2024/03/14 03:12:37 fetching corpus: 900, signal 120190/150537 (executing program) 2024/03/14 03:12:37 fetching corpus: 950, signal 123921/155583 (executing program) 2024/03/14 03:12:37 fetching corpus: 1000, signal 126410/159461 (executing program) 2024/03/14 03:12:37 fetching corpus: 1050, signal 128683/163116 (executing program) 2024/03/14 03:12:37 fetching corpus: 1100, signal 130478/166303 (executing program) 2024/03/14 03:12:37 fetching corpus: 1150, signal 134251/171320 (executing program) 2024/03/14 03:12:37 fetching corpus: 1200, signal 137030/175408 (executing program) 2024/03/14 03:12:37 fetching corpus: 1250, signal 138908/178664 (executing program) 2024/03/14 03:12:38 fetching corpus: 1300, signal 141965/182977 (executing program) 2024/03/14 03:12:38 fetching corpus: 1350, signal 143992/186334 (executing program) 2024/03/14 03:12:38 fetching corpus: 1400, signal 147552/191119 (executing program) 2024/03/14 03:12:38 fetching corpus: 1450, signal 150085/194878 (executing program) 2024/03/14 03:12:38 fetching corpus: 1500, signal 153023/198979 (executing program) 2024/03/14 03:12:38 fetching corpus: 1550, signal 155538/202700 (executing program) 2024/03/14 03:12:38 fetching corpus: 1600, signal 157872/206263 (executing program) 2024/03/14 03:12:38 fetching corpus: 1650, signal 160031/209657 (executing program) 2024/03/14 03:12:38 fetching corpus: 1700, signal 161723/212654 (executing program) 2024/03/14 03:12:38 fetching corpus: 1750, signal 163243/215470 (executing program) 2024/03/14 03:12:38 fetching corpus: 1800, signal 164716/218195 (executing program) 2024/03/14 03:12:38 fetching corpus: 1850, signal 167169/221761 (executing program) 2024/03/14 03:12:39 fetching corpus: 1900, signal 169791/225491 (executing program) 2024/03/14 03:12:39 fetching corpus: 1950, signal 171606/228515 (executing program) 2024/03/14 03:12:39 fetching corpus: 2000, signal 173318/231379 (executing program) 2024/03/14 03:12:39 fetching corpus: 2050, signal 174499/233821 (executing program) 2024/03/14 03:12:39 fetching corpus: 2100, signal 176758/237179 (executing program) 2024/03/14 03:12:39 fetching corpus: 2150, signal 178553/240091 (executing program) 2024/03/14 03:12:39 fetching corpus: 2200, signal 180656/243254 (executing program) 2024/03/14 03:12:39 fetching corpus: 2250, signal 183059/246662 (executing program) 2024/03/14 03:12:39 fetching corpus: 2300, signal 184313/249119 (executing program) 2024/03/14 03:12:39 fetching corpus: 2350, signal 185980/251894 (executing program) 2024/03/14 03:12:39 fetching corpus: 2400, signal 187897/254875 (executing program) 2024/03/14 03:12:39 fetching corpus: 2450, signal 190578/258474 (executing program) 2024/03/14 03:12:39 fetching corpus: 2500, signal 191872/260877 (executing program) 2024/03/14 03:12:39 fetching corpus: 2550, signal 192895/263090 (executing program) 2024/03/14 03:12:39 fetching corpus: 2600, signal 194830/266009 (executing program) 2024/03/14 03:12:39 fetching corpus: 2650, signal 196014/268335 (executing program) 2024/03/14 03:12:40 fetching corpus: 2700, signal 198869/271983 (executing program) 2024/03/14 03:12:40 fetching corpus: 2750, signal 200602/274650 (executing program) 2024/03/14 03:12:40 fetching corpus: 2800, signal 201378/276618 (executing program) 2024/03/14 03:12:40 fetching corpus: 2850, signal 202636/278971 (executing program) 2024/03/14 03:12:40 fetching corpus: 2900, signal 204170/281542 (executing program) 2024/03/14 03:12:40 fetching corpus: 2950, signal 205916/284246 (executing program) 2024/03/14 03:12:40 fetching corpus: 3000, signal 207348/286707 (executing program) 2024/03/14 03:12:40 fetching corpus: 3050, signal 208746/289125 (executing program) 2024/03/14 03:12:40 fetching corpus: 3100, signal 210501/291779 (executing program) 2024/03/14 03:12:40 fetching corpus: 3150, signal 212092/294326 (executing program) 2024/03/14 03:12:40 fetching corpus: 3200, signal 213971/297094 (executing program) 2024/03/14 03:12:40 fetching corpus: 3250, signal 215643/299701 (executing program) 2024/03/14 03:12:40 fetching corpus: 3300, signal 217035/302100 (executing program) 2024/03/14 03:12:40 fetching corpus: 3350, signal 218212/304300 (executing program) 2024/03/14 03:12:40 fetching corpus: 3400, signal 221561/308117 (executing program) 2024/03/14 03:12:41 fetching corpus: 3450, signal 225259/312203 (executing program) 2024/03/14 03:12:41 fetching corpus: 3500, signal 227965/315497 (executing program) 2024/03/14 03:12:41 fetching corpus: 3550, signal 229345/317798 (executing program) 2024/03/14 03:12:41 fetching corpus: 3600, signal 230769/320116 (executing program) 2024/03/14 03:12:41 fetching corpus: 3650, signal 231873/322177 (executing program) 2024/03/14 03:12:41 fetching corpus: 3700, signal 233147/324354 (executing program) 2024/03/14 03:12:41 fetching corpus: 3750, signal 234427/326532 (executing program) 2024/03/14 03:12:41 fetching corpus: 3800, signal 235538/328593 (executing program) 2024/03/14 03:12:41 fetching corpus: 3850, signal 237656/331374 (executing program) 2024/03/14 03:12:41 fetching corpus: 3900, signal 238692/333258 (executing program) 2024/03/14 03:12:41 fetching corpus: 3950, signal 239704/335190 (executing program) 2024/03/14 03:12:41 fetching corpus: 4000, signal 240792/337169 (executing program) 2024/03/14 03:12:41 fetching corpus: 4050, signal 242215/339446 (executing program) 2024/03/14 03:12:41 fetching corpus: 4100, signal 243168/341311 (executing program) 2024/03/14 03:12:41 fetching corpus: 4150, signal 244345/343305 (executing program) 2024/03/14 03:12:41 fetching corpus: 4200, signal 246030/345714 (executing program) 2024/03/14 03:12:42 fetching corpus: 4250, signal 247221/347734 (executing program) 2024/03/14 03:12:42 fetching corpus: 4300, signal 248987/350156 (executing program) 2024/03/14 03:12:42 fetching corpus: 4350, signal 249852/351982 (executing program) 2024/03/14 03:12:42 fetching corpus: 4400, signal 250622/353710 (executing program) 2024/03/14 03:12:42 fetching corpus: 4450, signal 251323/355337 (executing program) 2024/03/14 03:12:42 fetching corpus: 4500, signal 251977/356998 (executing program) 2024/03/14 03:12:42 fetching corpus: 4550, signal 253243/359001 (executing program) 2024/03/14 03:12:42 fetching corpus: 4600, signal 254544/361096 (executing program) 2024/03/14 03:12:42 fetching corpus: 4650, signal 255649/363001 (executing program) 2024/03/14 03:12:42 fetching corpus: 4700, signal 256652/364855 (executing program) 2024/03/14 03:12:42 fetching corpus: 4750, signal 257715/366728 (executing program) 2024/03/14 03:12:42 fetching corpus: 4800, signal 258477/368380 (executing program) 2024/03/14 03:12:42 fetching corpus: 4850, signal 259579/370243 (executing program) 2024/03/14 03:12:42 fetching corpus: 4900, signal 260197/371785 (executing program) 2024/03/14 03:12:42 fetching corpus: 4950, signal 260915/373351 (executing program) 2024/03/14 03:12:43 fetching corpus: 5000, signal 261652/374965 (executing program) 2024/03/14 03:12:43 fetching corpus: 5050, signal 262304/376562 (executing program) 2024/03/14 03:12:43 fetching corpus: 5100, signal 262888/378078 (executing program) 2024/03/14 03:12:43 fetching corpus: 5150, signal 263566/379651 (executing program) 2024/03/14 03:12:43 fetching corpus: 5200, signal 264387/381274 (executing program) 2024/03/14 03:12:43 fetching corpus: 5250, signal 264988/382754 (executing program) 2024/03/14 03:12:43 fetching corpus: 5300, signal 265986/384483 (executing program) 2024/03/14 03:12:43 fetching corpus: 5350, signal 266954/386224 (executing program) 2024/03/14 03:12:43 fetching corpus: 5400, signal 267775/387825 (executing program) 2024/03/14 03:12:43 fetching corpus: 5450, signal 268819/389577 (executing program) 2024/03/14 03:12:43 fetching corpus: 5500, signal 270074/391473 (executing program) 2024/03/14 03:12:43 fetching corpus: 5550, signal 270609/392962 (executing program) 2024/03/14 03:12:43 fetching corpus: 5600, signal 271274/394451 (executing program) 2024/03/14 03:12:43 fetching corpus: 5650, signal 271942/395955 (executing program) 2024/03/14 03:12:43 fetching corpus: 5700, signal 272861/397623 (executing program) 2024/03/14 03:12:43 fetching corpus: 5750, signal 274023/399442 (executing program) 2024/03/14 03:12:44 fetching corpus: 5800, signal 274613/400865 (executing program) 2024/03/14 03:12:44 fetching corpus: 5850, signal 275421/402397 (executing program) 2024/03/14 03:12:44 fetching corpus: 5900, signal 276333/404010 (executing program) 2024/03/14 03:12:44 fetching corpus: 5950, signal 276903/405408 (executing program) 2024/03/14 03:12:44 fetching corpus: 6000, signal 277501/406835 (executing program) 2024/03/14 03:12:44 fetching corpus: 6050, signal 278338/408390 (executing program) 2024/03/14 03:12:44 fetching corpus: 6100, signal 278792/409733 (executing program) 2024/03/14 03:12:44 fetching corpus: 6150, signal 279515/411183 (executing program) 2024/03/14 03:12:44 fetching corpus: 6200, signal 280256/412677 (executing program) 2024/03/14 03:12:44 fetching corpus: 6250, signal 281270/414367 (executing program) 2024/03/14 03:12:45 fetching corpus: 6300, signal 282240/416002 (executing program) 2024/03/14 03:12:45 fetching corpus: 6350, signal 283182/417609 (executing program) 2024/03/14 03:12:45 fetching corpus: 6400, signal 284610/419506 (executing program) 2024/03/14 03:12:45 fetching corpus: 6450, signal 285875/421213 (executing program) 2024/03/14 03:12:45 fetching corpus: 6500, signal 286644/422683 (executing program) 2024/03/14 03:12:45 fetching corpus: 6550, signal 287434/424153 (executing program) 2024/03/14 03:12:45 fetching corpus: 6600, signal 288040/425536 (executing program) 2024/03/14 03:12:45 fetching corpus: 6650, signal 288795/426985 (executing program) 2024/03/14 03:12:45 fetching corpus: 6700, signal 289341/428308 (executing program) 2024/03/14 03:12:46 fetching corpus: 6750, signal 290281/429825 (executing program) 2024/03/14 03:12:46 fetching corpus: 6800, signal 290752/431106 (executing program) 2024/03/14 03:12:46 fetching corpus: 6850, signal 292051/432810 (executing program) 2024/03/14 03:12:46 fetching corpus: 6900, signal 293121/434388 (executing program) 2024/03/14 03:12:46 fetching corpus: 6950, signal 293774/435759 (executing program) 2024/03/14 03:12:46 fetching corpus: 7000, signal 294827/437389 (executing program) 2024/03/14 03:12:46 fetching corpus: 7050, signal 295460/438744 (executing program) 2024/03/14 03:12:46 fetching corpus: 7100, signal 296468/440257 (executing program) 2024/03/14 03:12:46 fetching corpus: 7150, signal 297040/441556 (executing program) 2024/03/14 03:12:46 fetching corpus: 7200, signal 298017/443059 (executing program) 2024/03/14 03:12:46 fetching corpus: 7250, signal 298920/444500 (executing program) 2024/03/14 03:12:46 fetching corpus: 7300, signal 299563/445799 (executing program) 2024/03/14 03:12:47 fetching corpus: 7350, signal 300645/447312 (executing program) 2024/03/14 03:12:47 fetching corpus: 7400, signal 301153/448531 (executing program) 2024/03/14 03:12:47 fetching corpus: 7450, signal 301892/449909 (executing program) 2024/03/14 03:12:47 fetching corpus: 7500, signal 302410/451129 (executing program) 2024/03/14 03:12:47 fetching corpus: 7550, signal 303012/452368 (executing program) 2024/03/14 03:12:47 fetching corpus: 7600, signal 303561/453629 (executing program) 2024/03/14 03:12:47 fetching corpus: 7650, signal 304022/454849 (executing program) 2024/03/14 03:12:47 fetching corpus: 7700, signal 304691/456175 (executing program) 2024/03/14 03:12:47 fetching corpus: 7750, signal 305150/457354 (executing program) 2024/03/14 03:12:47 fetching corpus: 7800, signal 305802/458643 (executing program) 2024/03/14 03:12:47 fetching corpus: 7850, signal 306313/459855 (executing program) 2024/03/14 03:12:47 fetching corpus: 7900, signal 306730/461014 (executing program) 2024/03/14 03:12:47 fetching corpus: 7950, signal 307323/462294 (executing program) 2024/03/14 03:12:47 fetching corpus: 8000, signal 308388/463786 (executing program) 2024/03/14 03:12:48 fetching corpus: 8050, signal 308942/465022 (executing program) 2024/03/14 03:12:48 fetching corpus: 8100, signal 309364/466165 (executing program) 2024/03/14 03:12:48 fetching corpus: 8150, signal 310179/467517 (executing program) 2024/03/14 03:12:48 fetching corpus: 8200, signal 310513/468613 (executing program) 2024/03/14 03:12:48 fetching corpus: 8250, signal 311148/469855 (executing program) 2024/03/14 03:12:48 fetching corpus: 8300, signal 311776/471060 (executing program) 2024/03/14 03:12:48 fetching corpus: 8350, signal 312388/472290 (executing program) 2024/03/14 03:12:48 fetching corpus: 8400, signal 313099/473581 (executing program) 2024/03/14 03:12:48 fetching corpus: 8450, signal 313629/474765 (executing program) 2024/03/14 03:12:48 fetching corpus: 8500, signal 314142/475919 (executing program) 2024/03/14 03:12:48 fetching corpus: 8550, signal 314569/477058 (executing program) 2024/03/14 03:12:48 fetching corpus: 8600, signal 315295/478285 (executing program) 2024/03/14 03:12:48 fetching corpus: 8650, signal 315962/479498 (executing program) 2024/03/14 03:12:48 fetching corpus: 8700, signal 316606/480679 (executing program) 2024/03/14 03:12:48 fetching corpus: 8750, signal 317144/481860 (executing program) 2024/03/14 03:12:48 fetching corpus: 8800, signal 317797/483077 (executing program) 2024/03/14 03:12:49 fetching corpus: 8850, signal 318177/484179 (executing program) 2024/03/14 03:12:49 fetching corpus: 8900, signal 318676/485308 (executing program) 2024/03/14 03:12:49 fetching corpus: 8950, signal 319331/486482 (executing program) 2024/03/14 03:12:49 fetching corpus: 9000, signal 319864/487568 (executing program) 2024/03/14 03:12:49 fetching corpus: 9050, signal 320644/488795 (executing program) 2024/03/14 03:12:49 fetching corpus: 9100, signal 321347/489960 (executing program) 2024/03/14 03:12:49 fetching corpus: 9150, signal 321947/491114 (executing program) 2024/03/14 03:12:49 fetching corpus: 9200, signal 322426/492212 (executing program) 2024/03/14 03:12:49 fetching corpus: 9250, signal 322879/493343 (executing program) 2024/03/14 03:12:49 fetching corpus: 9300, signal 323509/494515 (executing program) 2024/03/14 03:12:49 fetching corpus: 9350, signal 323856/495573 (executing program) 2024/03/14 03:12:49 fetching corpus: 9400, signal 324744/496795 (executing program) 2024/03/14 03:12:49 fetching corpus: 9450, signal 325724/498078 (executing program) 2024/03/14 03:12:50 fetching corpus: 9500, signal 326967/499440 (executing program) 2024/03/14 03:12:50 fetching corpus: 9550, signal 327513/500507 (executing program) 2024/03/14 03:12:50 fetching corpus: 9600, signal 328035/501556 (executing program) 2024/03/14 03:12:50 fetching corpus: 9650, signal 328565/502601 (executing program) 2024/03/14 03:12:50 fetching corpus: 9700, signal 329035/503687 (executing program) 2024/03/14 03:12:50 fetching corpus: 9750, signal 329497/504735 (executing program) 2024/03/14 03:12:50 fetching corpus: 9800, signal 330295/505900 (executing program) 2024/03/14 03:12:50 fetching corpus: 9850, signal 331004/507020 (executing program) 2024/03/14 03:12:50 fetching corpus: 9900, signal 331539/508121 (executing program) 2024/03/14 03:12:50 fetching corpus: 9950, signal 332019/509134 (executing program) 2024/03/14 03:12:50 fetching corpus: 10000, signal 332629/510183 (executing program) 2024/03/14 03:12:51 fetching corpus: 10050, signal 333156/511275 (executing program) 2024/03/14 03:12:51 fetching corpus: 10100, signal 333684/512336 (executing program) 2024/03/14 03:12:51 fetching corpus: 10150, signal 334847/513586 (executing program) 2024/03/14 03:12:51 fetching corpus: 10200, signal 336003/514846 (executing program) 2024/03/14 03:12:51 fetching corpus: 10250, signal 336776/515929 (executing program) 2024/03/14 03:12:51 fetching corpus: 10300, signal 337109/516847 (executing program) 2024/03/14 03:12:51 fetching corpus: 10350, signal 337532/517828 (executing program) 2024/03/14 03:12:51 fetching corpus: 10400, signal 337820/518794 (executing program) 2024/03/14 03:12:51 fetching corpus: 10450, signal 338672/519915 (executing program) 2024/03/14 03:12:52 fetching corpus: 10500, signal 339666/521050 (executing program) 2024/03/14 03:12:52 fetching corpus: 10550, signal 340133/522052 (executing program) [ 71.436838][ T1347] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.439506][ T1347] ieee802154 phy1 wpan1: encryption failed: -22 2024/03/14 03:12:52 fetching corpus: 10600, signal 341114/523200 (executing program) 2024/03/14 03:12:52 fetching corpus: 10650, signal 341644/524177 (executing program) 2024/03/14 03:12:52 fetching corpus: 10700, signal 342101/525177 (executing program) 2024/03/14 03:12:52 fetching corpus: 10750, signal 342633/526202 (executing program) 2024/03/14 03:12:52 fetching corpus: 10800, signal 343162/527157 (executing program) 2024/03/14 03:12:52 fetching corpus: 10850, signal 343625/528180 (executing program) 2024/03/14 03:12:52 fetching corpus: 10900, signal 343988/529121 (executing program) 2024/03/14 03:12:52 fetching corpus: 10950, signal 344372/530101 (executing program) 2024/03/14 03:12:52 fetching corpus: 11000, signal 344680/531024 (executing program) 2024/03/14 03:12:52 fetching corpus: 11050, signal 345350/532051 (executing program) 2024/03/14 03:12:52 fetching corpus: 11100, signal 345913/533068 (executing program) 2024/03/14 03:12:52 fetching corpus: 11150, signal 346379/534021 (executing program) 2024/03/14 03:12:52 fetching corpus: 11200, signal 346831/534967 (executing program) 2024/03/14 03:12:53 fetching corpus: 11250, signal 347230/535871 (executing program) 2024/03/14 03:12:53 fetching corpus: 11300, signal 347616/536749 (executing program) 2024/03/14 03:12:53 fetching corpus: 11350, signal 348108/537737 (executing program) 2024/03/14 03:12:53 fetching corpus: 11400, signal 348706/538720 (executing program) 2024/03/14 03:12:53 fetching corpus: 11450, signal 349941/539842 (executing program) 2024/03/14 03:12:53 fetching corpus: 11500, signal 350375/540708 (executing program) 2024/03/14 03:12:53 fetching corpus: 11550, signal 350926/541685 (executing program) 2024/03/14 03:12:53 fetching corpus: 11600, signal 351269/542621 (executing program) 2024/03/14 03:12:53 fetching corpus: 11650, signal 351694/543519 (executing program) 2024/03/14 03:12:53 fetching corpus: 11700, signal 352197/544472 (executing program) 2024/03/14 03:12:53 fetching corpus: 11750, signal 352815/545406 (executing program) 2024/03/14 03:12:53 fetching corpus: 11800, signal 353167/546294 (executing program) 2024/03/14 03:12:54 fetching corpus: 11850, signal 353757/547172 (executing program) 2024/03/14 03:12:54 fetching corpus: 11900, signal 354674/548120 (executing program) 2024/03/14 03:12:54 fetching corpus: 11950, signal 355124/548972 (executing program) 2024/03/14 03:12:54 fetching corpus: 12000, signal 355475/549853 (executing program) 2024/03/14 03:12:54 fetching corpus: 12050, signal 355859/550725 (executing program) 2024/03/14 03:12:54 fetching corpus: 12100, signal 356277/551618 (executing program) 2024/03/14 03:12:54 fetching corpus: 12150, signal 356799/552530 (executing program) 2024/03/14 03:12:54 fetching corpus: 12200, signal 357236/553414 (executing program) 2024/03/14 03:12:54 fetching corpus: 12250, signal 358668/554426 (executing program) 2024/03/14 03:12:54 fetching corpus: 12300, signal 358998/555227 (executing program) 2024/03/14 03:12:54 fetching corpus: 12350, signal 359364/556058 (executing program) 2024/03/14 03:12:55 fetching corpus: 12400, signal 360064/556968 (executing program) 2024/03/14 03:12:55 fetching corpus: 12450, signal 360965/557918 (executing program) 2024/03/14 03:12:55 fetching corpus: 12500, signal 361564/558825 (executing program) 2024/03/14 03:12:55 fetching corpus: 12550, signal 362147/559711 (executing program) 2024/03/14 03:12:55 fetching corpus: 12600, signal 362621/560557 (executing program) 2024/03/14 03:12:55 fetching corpus: 12650, signal 363002/561428 (executing program) 2024/03/14 03:12:55 fetching corpus: 12700, signal 363937/562359 (executing program) 2024/03/14 03:12:55 fetching corpus: 12750, signal 364448/563209 (executing program) 2024/03/14 03:12:55 fetching corpus: 12800, signal 364918/564021 (executing program) 2024/03/14 03:12:55 fetching corpus: 12850, signal 365404/564910 (executing program) 2024/03/14 03:12:55 fetching corpus: 12900, signal 365780/565769 (executing program) 2024/03/14 03:12:55 fetching corpus: 12950, signal 366423/566605 (executing program) 2024/03/14 03:12:55 fetching corpus: 13000, signal 366842/567432 (executing program) 2024/03/14 03:12:55 fetching corpus: 13050, signal 367304/568256 (executing program) 2024/03/14 03:12:56 fetching corpus: 13100, signal 368041/569120 (executing program) 2024/03/14 03:12:56 fetching corpus: 13150, signal 368425/569945 (executing program) 2024/03/14 03:12:56 fetching corpus: 13200, signal 368744/570729 (executing program) 2024/03/14 03:12:56 fetching corpus: 13250, signal 369121/571565 (executing program) 2024/03/14 03:12:56 fetching corpus: 13300, signal 369462/572367 (executing program) 2024/03/14 03:12:56 fetching corpus: 13350, signal 369745/573124 (executing program) 2024/03/14 03:12:56 fetching corpus: 13400, signal 370252/573947 (executing program) 2024/03/14 03:12:56 fetching corpus: 13450, signal 370764/574746 (executing program) 2024/03/14 03:12:56 fetching corpus: 13500, signal 371142/575555 (executing program) 2024/03/14 03:12:56 fetching corpus: 13550, signal 371677/576375 (executing program) 2024/03/14 03:12:56 fetching corpus: 13600, signal 372071/577148 (executing program) 2024/03/14 03:12:56 fetching corpus: 13650, signal 372890/577969 (executing program) 2024/03/14 03:12:56 fetching corpus: 13700, signal 373827/578786 (executing program) 2024/03/14 03:12:56 fetching corpus: 13750, signal 374337/579542 (executing program) 2024/03/14 03:12:56 fetching corpus: 13800, signal 374582/580312 (executing program) 2024/03/14 03:12:56 fetching corpus: 13850, signal 374942/581110 (executing program) 2024/03/14 03:12:57 fetching corpus: 13900, signal 375291/581854 (executing program) 2024/03/14 03:12:57 fetching corpus: 13950, signal 375729/582586 (executing program) 2024/03/14 03:12:57 fetching corpus: 14000, signal 376056/583348 (executing program) 2024/03/14 03:12:57 fetching corpus: 14050, signal 376462/584090 (executing program) 2024/03/14 03:12:57 fetching corpus: 14100, signal 376753/584840 (executing program) 2024/03/14 03:12:57 fetching corpus: 14150, signal 377278/585624 (executing program) 2024/03/14 03:12:57 fetching corpus: 14200, signal 377684/586332 (executing program) 2024/03/14 03:12:57 fetching corpus: 14250, signal 378290/587110 (executing program) 2024/03/14 03:12:57 fetching corpus: 14300, signal 379464/587871 (executing program) 2024/03/14 03:12:57 fetching corpus: 14350, signal 379932/588635 (executing program) 2024/03/14 03:12:57 fetching corpus: 14400, signal 380286/589393 (executing program) 2024/03/14 03:12:57 fetching corpus: 14450, signal 380731/590130 (executing program) 2024/03/14 03:12:57 fetching corpus: 14500, signal 381299/590911 (executing program) 2024/03/14 03:12:57 fetching corpus: 14550, signal 381744/591671 (executing program) 2024/03/14 03:12:57 fetching corpus: 14600, signal 382183/592378 (executing program) 2024/03/14 03:12:57 fetching corpus: 14650, signal 382595/593117 (executing program) 2024/03/14 03:12:57 fetching corpus: 14700, signal 382892/593786 (executing program) 2024/03/14 03:12:58 fetching corpus: 14750, signal 383424/594505 (executing program) 2024/03/14 03:12:58 fetching corpus: 14800, signal 383852/595208 (executing program) 2024/03/14 03:12:58 fetching corpus: 14850, signal 384199/595874 (executing program) 2024/03/14 03:12:58 fetching corpus: 14900, signal 384499/595874 (executing program) 2024/03/14 03:12:58 fetching corpus: 14950, signal 384807/595874 (executing program) 2024/03/14 03:12:58 fetching corpus: 15000, signal 385291/595875 (executing program) 2024/03/14 03:12:58 fetching corpus: 15050, signal 385769/595875 (executing program) 2024/03/14 03:12:58 fetching corpus: 15100, signal 386140/595875 (executing program) 2024/03/14 03:12:58 fetching corpus: 15150, signal 386478/595875 (executing program) 2024/03/14 03:12:58 fetching corpus: 15200, signal 386827/595875 (executing program) 2024/03/14 03:12:58 fetching corpus: 15250, signal 387158/595875 (executing program) 2024/03/14 03:12:58 fetching corpus: 15300, signal 387425/595875 (executing program) 2024/03/14 03:12:58 fetching corpus: 15350, signal 387708/595875 (executing program) 2024/03/14 03:12:58 fetching corpus: 15400, signal 388259/595875 (executing program) 2024/03/14 03:12:58 fetching corpus: 15450, signal 388550/595875 (executing program) 2024/03/14 03:12:58 fetching corpus: 15500, signal 388966/595875 (executing program) 2024/03/14 03:12:59 fetching corpus: 15550, signal 389942/595875 (executing program) 2024/03/14 03:12:59 fetching corpus: 15600, signal 390324/595875 (executing program) 2024/03/14 03:12:59 fetching corpus: 15650, signal 391045/595875 (executing program) 2024/03/14 03:12:59 fetching corpus: 15700, signal 391609/595875 (executing program) 2024/03/14 03:12:59 fetching corpus: 15750, signal 392160/595875 (executing program) 2024/03/14 03:12:59 fetching corpus: 15800, signal 392487/595875 (executing program) 2024/03/14 03:12:59 fetching corpus: 15850, signal 392762/595875 (executing program) 2024/03/14 03:12:59 fetching corpus: 15900, signal 393155/595875 (executing program) 2024/03/14 03:12:59 fetching corpus: 15950, signal 393633/595875 (executing program) 2024/03/14 03:12:59 fetching corpus: 16000, signal 393941/595875 (executing program) 2024/03/14 03:12:59 fetching corpus: 16050, signal 394372/595875 (executing program) 2024/03/14 03:12:59 fetching corpus: 16100, signal 394804/595875 (executing program) 2024/03/14 03:12:59 fetching corpus: 16150, signal 395108/595875 (executing program) 2024/03/14 03:12:59 fetching corpus: 16200, signal 395477/595875 (executing program) 2024/03/14 03:12:59 fetching corpus: 16250, signal 395699/595875 (executing program) 2024/03/14 03:13:00 fetching corpus: 16300, signal 395960/595875 (executing program) 2024/03/14 03:13:00 fetching corpus: 16350, signal 396465/595875 (executing program) 2024/03/14 03:13:00 fetching corpus: 16400, signal 396711/595875 (executing program) 2024/03/14 03:13:00 fetching corpus: 16450, signal 397055/595875 (executing program) 2024/03/14 03:13:00 fetching corpus: 16500, signal 397297/595875 (executing program) 2024/03/14 03:13:00 fetching corpus: 16550, signal 397594/595875 (executing program) 2024/03/14 03:13:00 fetching corpus: 16600, signal 397965/595875 (executing program) 2024/03/14 03:13:00 fetching corpus: 16650, signal 398239/595875 (executing program) 2024/03/14 03:13:00 fetching corpus: 16700, signal 398554/595875 (executing program) 2024/03/14 03:13:00 fetching corpus: 16750, signal 398884/595875 (executing program) 2024/03/14 03:13:00 fetching corpus: 16800, signal 399296/595875 (executing program) 2024/03/14 03:13:00 fetching corpus: 16850, signal 399539/595875 (executing program) 2024/03/14 03:13:00 fetching corpus: 16900, signal 399792/595875 (executing program) 2024/03/14 03:13:00 fetching corpus: 16950, signal 400236/595875 (executing program) 2024/03/14 03:13:00 fetching corpus: 17000, signal 400528/595875 (executing program) 2024/03/14 03:13:00 fetching corpus: 17050, signal 400941/595875 (executing program) 2024/03/14 03:13:00 fetching corpus: 17100, signal 401355/595875 (executing program) 2024/03/14 03:13:01 fetching corpus: 17150, signal 401638/595875 (executing program) 2024/03/14 03:13:01 fetching corpus: 17200, signal 402040/595875 (executing program) 2024/03/14 03:13:01 fetching corpus: 17250, signal 402348/595875 (executing program) 2024/03/14 03:13:01 fetching corpus: 17300, signal 402994/595875 (executing program) 2024/03/14 03:13:01 fetching corpus: 17350, signal 403333/595875 (executing program) 2024/03/14 03:13:01 fetching corpus: 17400, signal 403858/595875 (executing program) 2024/03/14 03:13:01 fetching corpus: 17450, signal 404158/595875 (executing program) 2024/03/14 03:13:01 fetching corpus: 17500, signal 404590/595875 (executing program) 2024/03/14 03:13:01 fetching corpus: 17550, signal 405449/595875 (executing program) 2024/03/14 03:13:01 fetching corpus: 17600, signal 405658/595875 (executing program) 2024/03/14 03:13:01 fetching corpus: 17650, signal 405951/595875 (executing program) 2024/03/14 03:13:01 fetching corpus: 17700, signal 406303/595875 (executing program) 2024/03/14 03:13:01 fetching corpus: 17750, signal 406573/595875 (executing program) 2024/03/14 03:13:01 fetching corpus: 17800, signal 406797/595875 (executing program) 2024/03/14 03:13:01 fetching corpus: 17850, signal 407037/595875 (executing program) 2024/03/14 03:13:02 fetching corpus: 17900, signal 407325/595875 (executing program) 2024/03/14 03:13:02 fetching corpus: 17950, signal 407782/595875 (executing program) 2024/03/14 03:13:02 fetching corpus: 18000, signal 408261/595875 (executing program) 2024/03/14 03:13:02 fetching corpus: 18050, signal 408548/595875 (executing program) [ 81.675906][ T9] cfg80211: failed to load regulatory.db 2024/03/14 03:13:02 fetching corpus: 18100, signal 408760/595875 (executing program) 2024/03/14 03:13:02 fetching corpus: 18150, signal 409034/595875 (executing program) 2024/03/14 03:13:02 fetching corpus: 18200, signal 409487/595875 (executing program) 2024/03/14 03:13:02 fetching corpus: 18250, signal 409862/595875 (executing program) 2024/03/14 03:13:02 fetching corpus: 18300, signal 410799/595875 (executing program) 2024/03/14 03:13:02 fetching corpus: 18350, signal 410979/595875 (executing program) 2024/03/14 03:13:02 fetching corpus: 18400, signal 411268/595875 (executing program) 2024/03/14 03:13:02 fetching corpus: 18450, signal 411868/595875 (executing program) 2024/03/14 03:13:02 fetching corpus: 18500, signal 412163/595875 (executing program) 2024/03/14 03:13:03 fetching corpus: 18550, signal 412378/595875 (executing program) 2024/03/14 03:13:03 fetching corpus: 18600, signal 412647/595875 (executing program) 2024/03/14 03:13:03 fetching corpus: 18650, signal 412889/595875 (executing program) 2024/03/14 03:13:03 fetching corpus: 18700, signal 413090/595875 (executing program) 2024/03/14 03:13:03 fetching corpus: 18750, signal 413364/595875 (executing program) 2024/03/14 03:13:03 fetching corpus: 18800, signal 413660/595875 (executing program) 2024/03/14 03:13:03 fetching corpus: 18850, signal 413937/595875 (executing program) 2024/03/14 03:13:03 fetching corpus: 18900, signal 414308/595875 (executing program) 2024/03/14 03:13:03 fetching corpus: 18950, signal 414676/595875 (executing program) 2024/03/14 03:13:03 fetching corpus: 19000, signal 414924/595875 (executing program) 2024/03/14 03:13:03 fetching corpus: 19050, signal 415388/595875 (executing program) 2024/03/14 03:13:03 fetching corpus: 19100, signal 415647/595875 (executing program) 2024/03/14 03:13:03 fetching corpus: 19150, signal 415877/595875 (executing program) 2024/03/14 03:13:03 fetching corpus: 19200, signal 416321/595875 (executing program) 2024/03/14 03:13:04 fetching corpus: 19250, signal 416646/595875 (executing program) 2024/03/14 03:13:04 fetching corpus: 19300, signal 417206/595875 (executing program) 2024/03/14 03:13:04 fetching corpus: 19350, signal 417545/595875 (executing program) 2024/03/14 03:13:04 fetching corpus: 19400, signal 417809/595875 (executing program) 2024/03/14 03:13:04 fetching corpus: 19450, signal 418103/595875 (executing program) 2024/03/14 03:13:04 fetching corpus: 19500, signal 418384/595875 (executing program) 2024/03/14 03:13:04 fetching corpus: 19550, signal 418720/595875 (executing program) 2024/03/14 03:13:04 fetching corpus: 19600, signal 419009/595875 (executing program) 2024/03/14 03:13:04 fetching corpus: 19650, signal 419216/595875 (executing program) 2024/03/14 03:13:04 fetching corpus: 19700, signal 419357/595875 (executing program) 2024/03/14 03:13:04 fetching corpus: 19750, signal 419767/595875 (executing program) 2024/03/14 03:13:04 fetching corpus: 19800, signal 420163/595875 (executing program) 2024/03/14 03:13:04 fetching corpus: 19850, signal 420421/595875 (executing program) 2024/03/14 03:13:04 fetching corpus: 19900, signal 420716/595875 (executing program) 2024/03/14 03:13:05 fetching corpus: 19950, signal 421018/595875 (executing program) 2024/03/14 03:13:05 fetching corpus: 20000, signal 421326/595875 (executing program) 2024/03/14 03:13:05 fetching corpus: 20050, signal 421589/595875 (executing program) 2024/03/14 03:13:05 fetching corpus: 20100, signal 421812/595875 (executing program) 2024/03/14 03:13:06 fetching corpus: 20150, signal 422119/595875 (executing program) 2024/03/14 03:13:06 fetching corpus: 20200, signal 422351/595875 (executing program) 2024/03/14 03:13:06 fetching corpus: 20250, signal 422687/595875 (executing program) 2024/03/14 03:13:06 fetching corpus: 20300, signal 423461/595875 (executing program) 2024/03/14 03:13:06 fetching corpus: 20350, signal 423777/595875 (executing program) 2024/03/14 03:13:06 fetching corpus: 20400, signal 424119/595875 (executing program) 2024/03/14 03:13:06 fetching corpus: 20450, signal 424446/595875 (executing program) 2024/03/14 03:13:06 fetching corpus: 20500, signal 424680/595875 (executing program) 2024/03/14 03:13:06 fetching corpus: 20550, signal 424886/595875 (executing program) 2024/03/14 03:13:06 fetching corpus: 20600, signal 425232/595875 (executing program) 2024/03/14 03:13:06 fetching corpus: 20650, signal 425518/595875 (executing program) 2024/03/14 03:13:06 fetching corpus: 20700, signal 425794/595875 (executing program) 2024/03/14 03:13:06 fetching corpus: 20750, signal 426105/595875 (executing program) 2024/03/14 03:13:06 fetching corpus: 20800, signal 426287/595875 (executing program) 2024/03/14 03:13:06 fetching corpus: 20850, signal 426548/595875 (executing program) 2024/03/14 03:13:06 fetching corpus: 20900, signal 426893/595875 (executing program) 2024/03/14 03:13:07 fetching corpus: 20950, signal 427204/595875 (executing program) 2024/03/14 03:13:07 fetching corpus: 21000, signal 427486/595875 (executing program) 2024/03/14 03:13:07 fetching corpus: 21050, signal 427770/595875 (executing program) 2024/03/14 03:13:07 fetching corpus: 21100, signal 428107/595875 (executing program) 2024/03/14 03:13:07 fetching corpus: 21150, signal 428570/595875 (executing program) 2024/03/14 03:13:07 fetching corpus: 21200, signal 428869/595875 (executing program) 2024/03/14 03:13:07 fetching corpus: 21250, signal 429167/595875 (executing program) 2024/03/14 03:13:07 fetching corpus: 21300, signal 429435/595875 (executing program) 2024/03/14 03:13:07 fetching corpus: 21350, signal 429639/595875 (executing program) 2024/03/14 03:13:07 fetching corpus: 21400, signal 429948/595875 (executing program) 2024/03/14 03:13:07 fetching corpus: 21450, signal 430210/595875 (executing program) 2024/03/14 03:13:07 fetching corpus: 21500, signal 430455/595875 (executing program) 2024/03/14 03:13:07 fetching corpus: 21550, signal 430698/595875 (executing program) 2024/03/14 03:13:07 fetching corpus: 21600, signal 430886/595875 (executing program) 2024/03/14 03:13:08 fetching corpus: 21650, signal 431160/595875 (executing program) 2024/03/14 03:13:08 fetching corpus: 21700, signal 431560/595875 (executing program) 2024/03/14 03:13:08 fetching corpus: 21750, signal 432292/595875 (executing program) 2024/03/14 03:13:08 fetching corpus: 21800, signal 432607/595875 (executing program) 2024/03/14 03:13:08 fetching corpus: 21850, signal 433170/595875 (executing program) 2024/03/14 03:13:08 fetching corpus: 21900, signal 433481/595875 (executing program) 2024/03/14 03:13:08 fetching corpus: 21950, signal 433915/595875 (executing program) 2024/03/14 03:13:08 fetching corpus: 22000, signal 434156/595875 (executing program) 2024/03/14 03:13:08 fetching corpus: 22050, signal 434428/595875 (executing program) 2024/03/14 03:13:08 fetching corpus: 22100, signal 434661/595875 (executing program) 2024/03/14 03:13:08 fetching corpus: 22150, signal 434853/595875 (executing program) 2024/03/14 03:13:08 fetching corpus: 22200, signal 435158/595875 (executing program) 2024/03/14 03:13:08 fetching corpus: 22250, signal 435581/595875 (executing program) 2024/03/14 03:13:08 fetching corpus: 22300, signal 435901/595875 (executing program) 2024/03/14 03:13:09 fetching corpus: 22350, signal 436232/595875 (executing program) 2024/03/14 03:13:09 fetching corpus: 22400, signal 436483/595875 (executing program) 2024/03/14 03:13:09 fetching corpus: 22450, signal 436739/595875 (executing program) 2024/03/14 03:13:09 fetching corpus: 22500, signal 437005/595875 (executing program) 2024/03/14 03:13:09 fetching corpus: 22550, signal 437264/595875 (executing program) 2024/03/14 03:13:09 fetching corpus: 22600, signal 437573/595875 (executing program) 2024/03/14 03:13:09 fetching corpus: 22650, signal 437823/595875 (executing program) 2024/03/14 03:13:09 fetching corpus: 22700, signal 438124/595875 (executing program) 2024/03/14 03:13:09 fetching corpus: 22750, signal 438374/595875 (executing program) 2024/03/14 03:13:09 fetching corpus: 22800, signal 438708/595875 (executing program) 2024/03/14 03:13:09 fetching corpus: 22850, signal 438911/595875 (executing program) 2024/03/14 03:13:09 fetching corpus: 22900, signal 439287/595875 (executing program) 2024/03/14 03:13:10 fetching corpus: 22950, signal 439495/595875 (executing program) 2024/03/14 03:13:10 fetching corpus: 23000, signal 439782/595875 (executing program) 2024/03/14 03:13:10 fetching corpus: 23050, signal 440212/595875 (executing program) 2024/03/14 03:13:10 fetching corpus: 23100, signal 440621/595875 (executing program) 2024/03/14 03:13:10 fetching corpus: 23150, signal 440811/595875 (executing program) 2024/03/14 03:13:10 fetching corpus: 23200, signal 441231/595875 (executing program) 2024/03/14 03:13:10 fetching corpus: 23250, signal 441487/595875 (executing program) 2024/03/14 03:13:10 fetching corpus: 23300, signal 441725/595875 (executing program) 2024/03/14 03:13:10 fetching corpus: 23350, signal 442055/595875 (executing program) 2024/03/14 03:13:10 fetching corpus: 23400, signal 442453/595875 (executing program) 2024/03/14 03:13:10 fetching corpus: 23450, signal 442717/595875 (executing program) 2024/03/14 03:13:10 fetching corpus: 23500, signal 443011/595875 (executing program) 2024/03/14 03:13:11 fetching corpus: 23550, signal 443300/595875 (executing program) 2024/03/14 03:13:11 fetching corpus: 23600, signal 443556/595875 (executing program) 2024/03/14 03:13:11 fetching corpus: 23650, signal 443762/595875 (executing program) 2024/03/14 03:13:11 fetching corpus: 23700, signal 443967/595875 (executing program) 2024/03/14 03:13:11 fetching corpus: 23750, signal 444238/595875 (executing program) 2024/03/14 03:13:11 fetching corpus: 23800, signal 444525/595875 (executing program) 2024/03/14 03:13:11 fetching corpus: 23850, signal 444698/595875 (executing program) 2024/03/14 03:13:11 fetching corpus: 23900, signal 444990/595875 (executing program) 2024/03/14 03:13:11 fetching corpus: 23950, signal 445231/595880 (executing program) 2024/03/14 03:13:11 fetching corpus: 24000, signal 445443/595880 (executing program) 2024/03/14 03:13:11 fetching corpus: 24050, signal 445761/595880 (executing program) 2024/03/14 03:13:11 fetching corpus: 24100, signal 445917/595880 (executing program) 2024/03/14 03:13:12 fetching corpus: 24150, signal 446462/595880 (executing program) 2024/03/14 03:13:12 fetching corpus: 24200, signal 446636/595880 (executing program) 2024/03/14 03:13:12 fetching corpus: 24250, signal 447103/595880 (executing program) 2024/03/14 03:13:12 fetching corpus: 24300, signal 447357/595880 (executing program) 2024/03/14 03:13:12 fetching corpus: 24350, signal 447547/595880 (executing program) 2024/03/14 03:13:12 fetching corpus: 24400, signal 447933/595880 (executing program) 2024/03/14 03:13:12 fetching corpus: 24450, signal 448187/595880 (executing program) 2024/03/14 03:13:12 fetching corpus: 24500, signal 448477/595880 (executing program) 2024/03/14 03:13:12 fetching corpus: 24550, signal 448685/595880 (executing program) 2024/03/14 03:13:12 fetching corpus: 24600, signal 449012/595880 (executing program) 2024/03/14 03:13:12 fetching corpus: 24650, signal 449386/595880 (executing program) 2024/03/14 03:13:13 fetching corpus: 24700, signal 449588/595892 (executing program) 2024/03/14 03:13:13 fetching corpus: 24750, signal 449814/595892 (executing program) 2024/03/14 03:13:13 fetching corpus: 24800, signal 450141/595892 (executing program) 2024/03/14 03:13:13 fetching corpus: 24850, signal 450653/595892 (executing program) 2024/03/14 03:13:13 fetching corpus: 24900, signal 451155/595892 (executing program) 2024/03/14 03:13:13 fetching corpus: 24950, signal 451360/595892 (executing program) 2024/03/14 03:13:13 fetching corpus: 25000, signal 451550/595892 (executing program) 2024/03/14 03:13:13 fetching corpus: 25050, signal 451686/595892 (executing program) 2024/03/14 03:13:13 fetching corpus: 25100, signal 452022/595892 (executing program) 2024/03/14 03:13:13 fetching corpus: 25150, signal 452392/595892 (executing program) 2024/03/14 03:13:13 fetching corpus: 25200, signal 452747/595892 (executing program) 2024/03/14 03:13:13 fetching corpus: 25250, signal 452931/595892 (executing program) 2024/03/14 03:13:14 fetching corpus: 25300, signal 453237/595892 (executing program) 2024/03/14 03:13:14 fetching corpus: 25350, signal 453560/595892 (executing program) 2024/03/14 03:13:14 fetching corpus: 25400, signal 453828/595892 (executing program) 2024/03/14 03:13:14 fetching corpus: 25450, signal 454061/595892 (executing program) 2024/03/14 03:13:14 fetching corpus: 25500, signal 454258/595892 (executing program) 2024/03/14 03:13:14 fetching corpus: 25550, signal 454481/595892 (executing program) 2024/03/14 03:13:14 fetching corpus: 25600, signal 454712/595892 (executing program) 2024/03/14 03:13:14 fetching corpus: 25650, signal 454953/595892 (executing program) 2024/03/14 03:13:14 fetching corpus: 25700, signal 455201/595892 (executing program) 2024/03/14 03:13:14 fetching corpus: 25750, signal 455618/595892 (executing program) 2024/03/14 03:13:14 fetching corpus: 25800, signal 455823/595892 (executing program) 2024/03/14 03:13:14 fetching corpus: 25850, signal 456030/595892 (executing program) 2024/03/14 03:13:14 fetching corpus: 25900, signal 456343/595892 (executing program) 2024/03/14 03:13:15 fetching corpus: 25950, signal 456700/595892 (executing program) 2024/03/14 03:13:15 fetching corpus: 26000, signal 456917/595892 (executing program) 2024/03/14 03:13:15 fetching corpus: 26050, signal 457208/595892 (executing program) 2024/03/14 03:13:15 fetching corpus: 26100, signal 457347/595892 (executing program) 2024/03/14 03:13:15 fetching corpus: 26150, signal 457635/595892 (executing program) 2024/03/14 03:13:15 fetching corpus: 26200, signal 457793/595892 (executing program) 2024/03/14 03:13:15 fetching corpus: 26250, signal 458011/595892 (executing program) 2024/03/14 03:13:15 fetching corpus: 26300, signal 458222/595892 (executing program) 2024/03/14 03:13:15 fetching corpus: 26350, signal 458500/595892 (executing program) 2024/03/14 03:13:15 fetching corpus: 26400, signal 458624/595892 (executing program) 2024/03/14 03:13:15 fetching corpus: 26450, signal 458871/595892 (executing program) 2024/03/14 03:13:15 fetching corpus: 26500, signal 459168/595892 (executing program) 2024/03/14 03:13:15 fetching corpus: 26550, signal 459358/595892 (executing program) 2024/03/14 03:13:15 fetching corpus: 26600, signal 459525/595892 (executing program) 2024/03/14 03:13:16 fetching corpus: 26650, signal 459705/595892 (executing program) 2024/03/14 03:13:16 fetching corpus: 26700, signal 459892/595892 (executing program) 2024/03/14 03:13:16 fetching corpus: 26750, signal 460188/595892 (executing program) 2024/03/14 03:13:16 fetching corpus: 26800, signal 460701/595892 (executing program) 2024/03/14 03:13:16 fetching corpus: 26850, signal 461122/595892 (executing program) 2024/03/14 03:13:16 fetching corpus: 26900, signal 461549/595892 (executing program) 2024/03/14 03:13:16 fetching corpus: 26950, signal 461830/595892 (executing program) 2024/03/14 03:13:16 fetching corpus: 27000, signal 461998/595892 (executing program) 2024/03/14 03:13:16 fetching corpus: 27050, signal 462164/595897 (executing program) 2024/03/14 03:13:16 fetching corpus: 27100, signal 462387/595897 (executing program) 2024/03/14 03:13:16 fetching corpus: 27150, signal 462706/595897 (executing program) 2024/03/14 03:13:16 fetching corpus: 27200, signal 462865/595897 (executing program) 2024/03/14 03:13:16 fetching corpus: 27250, signal 463392/595897 (executing program) 2024/03/14 03:13:16 fetching corpus: 27300, signal 463739/595897 (executing program) 2024/03/14 03:13:16 fetching corpus: 27350, signal 463914/595897 (executing program) 2024/03/14 03:13:17 fetching corpus: 27400, signal 464174/595897 (executing program) 2024/03/14 03:13:17 fetching corpus: 27450, signal 464412/595897 (executing program) 2024/03/14 03:13:17 fetching corpus: 27500, signal 464704/595897 (executing program) 2024/03/14 03:13:17 fetching corpus: 27550, signal 464841/595897 (executing program) 2024/03/14 03:13:17 fetching corpus: 27600, signal 465074/595897 (executing program) 2024/03/14 03:13:17 fetching corpus: 27650, signal 465237/595897 (executing program) 2024/03/14 03:13:17 fetching corpus: 27700, signal 465652/595897 (executing program) 2024/03/14 03:13:17 fetching corpus: 27750, signal 465777/595897 (executing program) 2024/03/14 03:13:17 fetching corpus: 27800, signal 465996/595897 (executing program) 2024/03/14 03:13:17 fetching corpus: 27850, signal 466238/595897 (executing program) 2024/03/14 03:13:17 fetching corpus: 27900, signal 466408/595897 (executing program) 2024/03/14 03:13:17 fetching corpus: 27950, signal 466570/595897 (executing program) 2024/03/14 03:13:17 fetching corpus: 28000, signal 466779/595897 (executing program) 2024/03/14 03:13:17 fetching corpus: 28050, signal 466958/595897 (executing program) 2024/03/14 03:13:17 fetching corpus: 28100, signal 467187/595897 (executing program) 2024/03/14 03:13:18 fetching corpus: 28150, signal 467356/595897 (executing program) 2024/03/14 03:13:18 fetching corpus: 28200, signal 467542/595897 (executing program) 2024/03/14 03:13:18 fetching corpus: 28250, signal 467685/595897 (executing program) 2024/03/14 03:13:18 fetching corpus: 28300, signal 467960/595897 (executing program) 2024/03/14 03:13:18 fetching corpus: 28350, signal 468154/595897 (executing program) 2024/03/14 03:13:18 fetching corpus: 28400, signal 468418/595897 (executing program) 2024/03/14 03:13:18 fetching corpus: 28450, signal 468893/595897 (executing program) 2024/03/14 03:13:18 fetching corpus: 28500, signal 469031/595897 (executing program) 2024/03/14 03:13:18 fetching corpus: 28550, signal 469196/595897 (executing program) 2024/03/14 03:13:18 fetching corpus: 28600, signal 469420/595897 (executing program) 2024/03/14 03:13:18 fetching corpus: 28650, signal 469688/595897 (executing program) 2024/03/14 03:13:18 fetching corpus: 28700, signal 469931/595897 (executing program) 2024/03/14 03:13:18 fetching corpus: 28750, signal 470219/595897 (executing program) 2024/03/14 03:13:19 fetching corpus: 28800, signal 470434/595897 (executing program) 2024/03/14 03:13:19 fetching corpus: 28850, signal 470642/595897 (executing program) 2024/03/14 03:13:19 fetching corpus: 28900, signal 470863/595897 (executing program) 2024/03/14 03:13:19 fetching corpus: 28950, signal 471090/595897 (executing program) 2024/03/14 03:13:19 fetching corpus: 29000, signal 471269/595897 (executing program) 2024/03/14 03:13:19 fetching corpus: 29050, signal 471492/595897 (executing program) 2024/03/14 03:13:19 fetching corpus: 29100, signal 471775/595897 (executing program) 2024/03/14 03:13:19 fetching corpus: 29150, signal 471985/595897 (executing program) 2024/03/14 03:13:19 fetching corpus: 29200, signal 472180/595897 (executing program) 2024/03/14 03:13:19 fetching corpus: 29250, signal 472443/595897 (executing program) 2024/03/14 03:13:19 fetching corpus: 29300, signal 472606/595897 (executing program) 2024/03/14 03:13:19 fetching corpus: 29350, signal 472787/595897 (executing program) 2024/03/14 03:13:19 fetching corpus: 29400, signal 473188/595897 (executing program) 2024/03/14 03:13:19 fetching corpus: 29450, signal 473518/595897 (executing program) 2024/03/14 03:13:20 fetching corpus: 29500, signal 473810/595897 (executing program) 2024/03/14 03:13:20 fetching corpus: 29550, signal 474670/595897 (executing program) 2024/03/14 03:13:20 fetching corpus: 29600, signal 475094/595897 (executing program) 2024/03/14 03:13:20 fetching corpus: 29650, signal 475265/595897 (executing program) 2024/03/14 03:13:20 fetching corpus: 29700, signal 475400/595897 (executing program) 2024/03/14 03:13:20 fetching corpus: 29717, signal 475511/595897 (executing program) 2024/03/14 03:13:20 fetching corpus: 29717, signal 475511/595897 (executing program) 2024/03/14 03:13:20 starting 4 fuzzer processes [ 100.199116][ T5213] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.223710][ T5213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.233637][ T5213] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.238259][ T5213] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.242015][ T5213] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 100.246178][ T5213] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.334703][ T5213] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.340456][ T5213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.347928][ T5213] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.352255][ T5213] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.367796][ T5213] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 100.372031][ T5213] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.424049][ T5213] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.428591][ T5213] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.432829][ T5213] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.446165][ T5213] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.450342][ T5213] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 100.454893][ T5213] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.564160][ T5213] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.569292][ T5213] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.573559][ T5213] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.579357][ T5213] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.593585][ T5213] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 100.603694][ T5213] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.911837][ T5215] chnl_net:caif_netlink_parms(): no params data found [ 100.964507][ T5212] chnl_net:caif_netlink_parms(): no params data found [ 101.006105][ T5219] chnl_net:caif_netlink_parms(): no params data found [ 101.225388][ T5221] chnl_net:caif_netlink_parms(): no params data found [ 101.321790][ T5215] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.325409][ T5215] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.328153][ T5215] bridge_slave_0: entered allmulticast mode [ 101.331533][ T5215] bridge_slave_0: entered promiscuous mode [ 101.359710][ T5212] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.362359][ T5212] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.365418][ T5212] bridge_slave_0: entered allmulticast mode [ 101.369492][ T5212] bridge_slave_0: entered promiscuous mode [ 101.375150][ T5212] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.378615][ T5212] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.381957][ T5212] bridge_slave_1: entered allmulticast mode [ 101.386718][ T5212] bridge_slave_1: entered promiscuous mode [ 101.440958][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.450525][ T5215] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.454500][ T5215] bridge_slave_1: entered allmulticast mode [ 101.459024][ T5215] bridge_slave_1: entered promiscuous mode [ 101.590445][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.594826][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.599299][ T5219] bridge_slave_0: entered allmulticast mode [ 101.606488][ T5219] bridge_slave_0: entered promiscuous mode [ 101.766748][ T5215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.772476][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.776113][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.779612][ T5219] bridge_slave_1: entered allmulticast mode [ 101.784019][ T5219] bridge_slave_1: entered promiscuous mode [ 101.790666][ T5212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.799051][ T5212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.835700][ T5215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.970988][ T5219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.976949][ T5212] team0: Port device team_slave_0 added [ 101.981611][ T5219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.091005][ T5215] team0: Port device team_slave_0 added [ 102.096580][ T5212] team0: Port device team_slave_1 added [ 102.136886][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.139938][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.142635][ T5221] bridge_slave_0: entered allmulticast mode [ 102.146052][ T5221] bridge_slave_0: entered promiscuous mode [ 102.150398][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.153600][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.157054][ T5221] bridge_slave_1: entered allmulticast mode [ 102.161501][ T5221] bridge_slave_1: entered promiscuous mode [ 102.171668][ T5215] team0: Port device team_slave_1 added [ 102.254407][ T5219] team0: Port device team_slave_0 added [ 102.331394][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.336946][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.349082][ T5212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.355940][ T5212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.358633][ T5212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.372739][ T5212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.382384][ T5219] team0: Port device team_slave_1 added [ 102.387655][ T4617] Bluetooth: hci1: command tx timeout [ 102.387680][ T5213] Bluetooth: hci0: command tx timeout [ 102.409132][ T5221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.414368][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.417556][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.430173][ T5215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.508675][ T5221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.514006][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.517205][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.529278][ T5215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.543468][ T5213] Bluetooth: hci2: command tx timeout [ 102.576889][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.580108][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.592399][ T5219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.624209][ T5213] Bluetooth: hci3: command tx timeout [ 102.686078][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.689229][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.701000][ T5219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.775692][ T5212] hsr_slave_0: entered promiscuous mode [ 102.780142][ T5212] hsr_slave_1: entered promiscuous mode [ 102.788093][ T5221] team0: Port device team_slave_0 added [ 102.796074][ T5221] team0: Port device team_slave_1 added [ 102.835450][ T5215] hsr_slave_0: entered promiscuous mode [ 102.839261][ T5215] hsr_slave_1: entered promiscuous mode [ 102.844271][ T5215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.848373][ T5215] Cannot create hsr debugfs directory [ 102.980417][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.983841][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.995771][ T5221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.006029][ T5219] hsr_slave_0: entered promiscuous mode [ 103.009725][ T5219] hsr_slave_1: entered promiscuous mode [ 103.013142][ T5219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.016893][ T5219] Cannot create hsr debugfs directory [ 103.072822][ T5221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.075853][ T5221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.085494][ T5221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.297751][ T5221] hsr_slave_0: entered promiscuous mode [ 103.302052][ T5221] hsr_slave_1: entered promiscuous mode [ 103.305728][ T5221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.310529][ T5221] Cannot create hsr debugfs directory [ 103.707739][ T5212] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.729393][ T5212] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.739399][ T5212] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.753035][ T5212] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.769942][ T5215] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.781002][ T5215] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.786788][ T5215] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.798646][ T5215] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.855414][ T5221] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.875658][ T5221] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.881959][ T5221] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.918191][ T5221] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.976888][ T5219] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.006491][ T5219] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.016538][ T5219] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.023746][ T5219] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.050008][ T5212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.115049][ T5212] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.131509][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.134969][ T5248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.148505][ T5215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.167271][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.170404][ T5248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.222115][ T5215] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.258966][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.262281][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.289189][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.293135][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.332966][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.395887][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.426459][ T5219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.430836][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.434557][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.456830][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.460114][ T5249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.464058][ T5213] Bluetooth: hci0: command tx timeout [ 104.467908][ T5213] Bluetooth: hci1: command tx timeout [ 104.484000][ T5219] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.507302][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.511308][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.540499][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.543429][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.611363][ T5215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.623889][ T5213] Bluetooth: hci2: command tx timeout [ 104.632905][ T5212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.704373][ T5213] Bluetooth: hci3: command tx timeout [ 104.711327][ T5215] veth0_vlan: entered promiscuous mode [ 104.725913][ T5212] veth0_vlan: entered promiscuous mode [ 104.735336][ T5215] veth1_vlan: entered promiscuous mode [ 104.750511][ T5221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.766932][ T5212] veth1_vlan: entered promiscuous mode [ 104.786969][ T5215] veth0_macvtap: entered promiscuous mode [ 104.798259][ T5215] veth1_macvtap: entered promiscuous mode [ 104.833162][ T5221] veth0_vlan: entered promiscuous mode [ 104.847418][ T5212] veth0_macvtap: entered promiscuous mode [ 104.854454][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.863059][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.871681][ T5212] veth1_macvtap: entered promiscuous mode [ 104.878614][ T5221] veth1_vlan: entered promiscuous mode [ 104.890072][ T5215] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.895182][ T5215] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.898516][ T5215] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.901696][ T5215] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.922573][ T5219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.928375][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.933229][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.939652][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.962445][ T5212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.968524][ T5212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.974779][ T5212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.982889][ T5212] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.987188][ T5212] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.991157][ T5212] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.995308][ T5212] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.015803][ T5221] veth0_macvtap: entered promiscuous mode [ 105.035717][ T5221] veth1_macvtap: entered promiscuous mode [ 105.074507][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.078842][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.109449][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.116344][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.120771][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.126495][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.132785][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.143912][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.148861][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.154243][ T5221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.159150][ T5221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.165649][ T5221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.187991][ T5219] veth0_vlan: entered promiscuous mode [ 105.192790][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.196658][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.214605][ T5221] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.218234][ T5221] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.222899][ T5221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.227502][ T5221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.234527][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.237837][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.282173][ T5250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.289490][ T5219] veth1_vlan: entered promiscuous mode [ 105.293420][ T5250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.328082][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.337735][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.386302][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.393255][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.408753][ T5219] veth0_macvtap: entered promiscuous mode 03:13:26 executing program 2: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0x2, r0, 0x0, 0x0) [ 105.428013][ T5219] veth1_macvtap: entered promiscuous mode 03:13:26 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000005000a00000800040023002000", 0x24) [ 105.457988][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.467367][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 03:13:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) chdir(&(0x7f0000000280)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)) [ 105.471517][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.480033][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.484995][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.489767][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.498373][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.515073][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.519562][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.528966][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.529979][ T5277] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 105.533837][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.546914][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.551726][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.558018][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.577317][ T5219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.581333][ T5219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.586909][ T5219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.590678][ T5219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.698433][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.702415][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.742400][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.746241][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 03:13:26 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000005000a00000800040023002000", 0x24) 03:13:26 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/153, 0x99, 0x8001) 03:13:26 executing program 2: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0x2, r0, 0x0, 0x0) 03:13:26 executing program 2: quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@sr0, 0x0, 0x0) 03:13:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x8, 0x1, [{}]}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x30}}, 0x0) 03:13:26 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 03:13:26 executing program 1: shmctl$SHM_INFO(0x0, 0xe, 0x0) 03:13:26 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) 03:13:26 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003440)=@bridge_dellink={0x34, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x7, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 03:13:26 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$sock_timeval(r0, 0x1, 0x2e, 0x0, &(0x7f0000012900)) 03:13:26 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x2, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x4}]}}]}, 0x40}}, 0x0) 03:13:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x603, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0xca, @media='eth\x00'}}}}, 0x68}}, 0x0) [ 106.012265][ T5296] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.030711][ T5301] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 03:13:26 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) 03:13:26 executing program 1: r0 = openat$capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f00000000c0)) 03:13:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="05030400d3fc02000000ab5d71acedd7c9560385dcb1894f84d7dc049806892f05ce811c88f7", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 03:13:26 executing program 0: r0 = syz_open_dev$hidraw(&(0x7f0000000180), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r0, 0x90044802, &(0x7f0000000100)={0x0, "f461f633a0a7b29439c144bc2c386d3b90be03efc6961c51b5db045897a1cd359a363e57fa5f8a68454876214f8d06722e6a8fb182a8e45dd15f956b9d66b1f8"}) 03:13:26 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000180)=0x4) 03:13:26 executing program 3: r0 = openat$capi20(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f00000000c0)) 03:13:26 executing program 1: futex_waitv(0x0, 0x3a, 0x0, 0x0, 0x0) 03:13:26 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000180)=0x4) 03:13:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x20000908, 0xe8, 0x378, 0x1a8, 0xe8, 0x0, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x6, 0x0, {[{{@ip={@multicast2, @loopback, 0x0, 0x0, 'ip_vti0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 03:13:26 executing program 0: openat$ndctl0(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000), 0x8) 03:13:27 executing program 3: r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 03:13:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000c00)=ANY=[], 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000900)={&(0x7f0000000000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) 03:13:27 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000f80)={0x10}, 0x5}, {&(0x7f00000021c0)={0x10}, 0x10}], 0x2}, 0x0) 03:13:27 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, @empty, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20003}) [ 106.463426][ T5329] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 03:13:27 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000005c0)={0x0, 0x1, &(0x7f0000000040)=[r2], &(0x7f0000000180)=[0xfffffff8], &(0x7f0000000540), 0x0}) [ 106.553553][ T5213] Bluetooth: hci1: command tx timeout [ 106.556148][ T5213] Bluetooth: hci0: command tx timeout 03:13:27 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) 03:13:27 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x85, 0x0, 0x0, 0xc7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 03:13:27 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000f80)={0x10}, 0x5}, {&(0x7f00000021c0)={0x10}, 0x10}], 0x2}, 0x0) 03:13:27 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)={0x18, 0x2b, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) 03:13:27 executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x4, 0x2, 0x0, r0}, {0x6, 0x0, 0xb, 0x9}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@u, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 03:13:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@fat=@tz_utc}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@uni_xlate}, {@fat=@showexec}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@utf8no}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}, 0x1, 0x229, &(0x7f0000000b80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 03:13:27 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000037c0)={'team0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', r1}, 0x48) [ 106.713427][ T4617] Bluetooth: hci2: command tx timeout [ 106.740508][ T5345] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:13:27 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0x4112, 0x0) 03:13:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0xb, @rand_addr=0x4000300}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 03:13:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0xe4340000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}]}, 0x58}}, 0x0) [ 106.793569][ T4617] Bluetooth: hci3: command tx timeout [ 106.799381][ T5350] loop2: detected capacity change from 0 to 256 03:13:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x894b, &(0x7f0000000700)) 03:13:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) ioctl$KDGKBMETA(r1, 0x4b66, &(0x7f0000000080)) 03:13:27 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000001c0)={'mangle\x00', 0x2, [{}, {}]}, 0x44) 03:13:27 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000100)=0x80, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendto$packet(r0, &(0x7f0000000700)="93a745710b71619b9a2be11a88a8", 0x36, 0x0, 0x0, 0x0) 03:13:27 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0x3, 0x0, 0x0) [ 106.965849][ T5363] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 03:13:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@fat=@tz_utc}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@uni_xlate}, {@fat=@showexec}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@utf8no}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}]}, 0x1, 0x229, &(0x7f0000000b80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 03:13:27 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000200), 0x1ff, 0x2) write$9p(r0, &(0x7f0000000240)="6cc476f6df", 0x5) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0x2020) 03:13:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) ioctl$KDGKBMETA(r1, 0x4b66, &(0x7f0000000080)) 03:13:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) ioctl$KDGKBMETA(r1, 0x4b66, &(0x7f0000000080)) [ 107.009112][ T5278] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 107.057239][ T5367] loop1: detected capacity change from 0 to 256 03:13:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) ioctl$KDGKBMETA(r1, 0x4b66, &(0x7f0000000080)) 03:13:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x1}, 0x1c}}, 0x0) 03:13:27 executing program 0: openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) 03:13:27 executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2fc, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x234, 0xffffffff, 0xffffffff, 0x234, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'pimreg\x00', 'vlan0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@quota={{0x38}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x358) 03:13:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_GROUP={0x4}]}, 0x1c}}, 0x0) 03:13:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) ioctl$KDGKBMETA(r1, 0x4b66, &(0x7f0000000080)) 03:13:27 executing program 2: r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x1}}) 03:13:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 03:13:28 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={r2, @rand_addr, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) 03:13:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x277}]}) [ 107.332773][ T5388] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING 03:13:28 executing program 3: r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x1}}) 03:13:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x10000]}]}]}, 0x30}}, 0x0) 03:13:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0xb}]}], {0x14}}, 0x5c}, 0x1, 0x6c00000000000000}, 0x0) 03:13:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 03:13:28 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) timer_create(0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 107.492269][ T5401] netlink: 'syz-executor.0': attribute type 11 has an invalid length. 03:13:28 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "a5bfcb2a66ef507540a2a54fcaf1860b5a61f8e207db0000009f1bb9930200000000000000cf61f3164a3790887d279d4afc7cfd1762729912aabe49225f8d79", "c943e1db06869da66fb3d998ba914272ca193f8dd5ecfdc81f22af8042677e0b2543667e306c360ce82f41f7d0431065868f4a367fb9ec6ec8cbf57917653a8a", "f7a78adde4baffaed544f59b58ae3151b9dd0fe9ca443e8ae600"}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 03:13:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0xb}]}], {0x14}}, 0x5c}, 0x1, 0x6c00000000000000}, 0x0) [ 107.548348][ T5409] netlink: 'syz-executor.1': attribute type 11 has an invalid length. 03:13:28 executing program 1: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8b0d, &(0x7f00000007c0)={'wlan0\x00'}) 03:13:28 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0xc, 0x0, 0x0) [ 107.601973][ T5412] warning: `syz-executor.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 03:13:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x277}]}) 03:13:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "a5bfcb2a66ef507540a2a54fcaf1860b5a61f8e207db0000009f1bb9930200000000000000cf61f3164a3790887d279d4afc7cfd1762729912aabe49225f8d79", "c943e1db06869da66fb3d998ba914272ca193f8dd5ecfdc81f22af8042677e0b2543667e306c360ce82f41f7d0431065868f4a367fb9ec6ec8cbf57917653a8a", "f7a78adde4baffaed544f59b58ae3151b9dd0fe9ca443e8ae600"}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 03:13:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "a5bfcb2a66ef507540a2a54fcaf1860b5a61f8e207db0000009f1bb9930200000000000000cf61f3164a3790887d279d4afc7cfd1762729912aabe49225f8d79", "c943e1db06869da66fb3d998ba914272ca193f8dd5ecfdc81f22af8042677e0b2543667e306c360ce82f41f7d0431065868f4a367fb9ec6ec8cbf57917653a8a", "f7a78adde4baffaed544f59b58ae3151b9dd0fe9ca443e8ae600"}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 03:13:28 executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x3, 'syzkaller0\x00', {0x5958}, 0x7fff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001b40)={{r0, 0xffffffffffffffff}, &(0x7f0000001ac0), &(0x7f0000001b00)='%ps \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0x9, 0x13, &(0x7f0000001540)=@raw=[@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3bdb}, @ringbuf_query, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3f}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x92}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @generic={0x81, 0x8, 0x0, 0x7e}], &(0x7f0000001480)='syzkaller\x00', 0x9, 0xee, &(0x7f0000001940)=""/238, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001600)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001640)={0x4, 0x4, 0xffffff01}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1], &(0x7f0000001bc0)=[{0x0, 0x5, 0x9, 0x7}, {0x5, 0x2, 0x2, 0x4}, {0x1, 0x5, 0x8, 0x5}, {0x5, 0x5, 0x8, 0x9}], 0x10, 0xc0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'syztnl2\x00', &(0x7f0000000d00)={'syztnl0\x00', 0x0, 0x2f, 0x7b, 0x1f, 0xffffffff, 0x14, @dev={0xfe, 0x80, '\x00', 0x43}, @dev={0xfe, 0x80, '\x00', 0x25}, 0x700, 0x700, 0x27f, 0x101}}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x18, r4, 0x309, 0x0, 0x0, {0x21}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0xf000000}, 0xc000) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x80, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f00000013c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001380)={&(0x7f0000001680)={0x19a, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x72, 0x3, "4d8cd49b5bedcd07090206b6e6ecf688abce23ba1f2ebc31f432416adf77e7776089bb3189deb226f2bdeb456866edf30da7f03854dcca50bed243be5c379bda13d3c83b4197cb756cf9ac72541e6c1a7ceb4c47c91cb7df2725155ac5cea648af02f74066ccdd2f763638e83164"}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x58}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x35}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x831}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x800}, 0x40085) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 03:13:28 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x0) listen(r0, 0x0) 03:13:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x277}]}) 03:13:28 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "a5bfcb2a66ef507540a2a54fcaf1860b5a61f8e207db0000009f1bb9930200000000000000cf61f3164a3790887d279d4afc7cfd1762729912aabe49225f8d79", "c943e1db06869da66fb3d998ba914272ca193f8dd5ecfdc81f22af8042677e0b2543667e306c360ce82f41f7d0431065868f4a367fb9ec6ec8cbf57917653a8a", "f7a78adde4baffaed544f59b58ae3151b9dd0fe9ca443e8ae600"}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 03:13:28 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 03:13:28 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000200)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "a5bfcb2a66ef507540a2a54fcaf1860b5a61f8e207db0000009f1bb9930200000000000000cf61f3164a3790887d279d4afc7cfd1762729912aabe49225f8d79", "c943e1db06869da66fb3d998ba914272ca193f8dd5ecfdc81f22af8042677e0b2543667e306c360ce82f41f7d0431065868f4a367fb9ec6ec8cbf57917653a8a", "f7a78adde4baffaed544f59b58ae3151b9dd0fe9ca443e8ae600"}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 03:13:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x277}]}) 03:13:28 executing program 1: r0 = syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x14, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x0, 0xc04, &(0x7f0000000f00)="$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") mknodat(r0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)=ANY=[], 0x0, 0x0) [ 108.138899][ T5440] loop1: detected capacity change from 0 to 2048 [ 108.147983][ T5440] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! 03:13:28 executing program 0: r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = io_uring_setup(0x78c, &(0x7f0000000180)) close(r1) r2 = fcntl$dupfd(r0, 0x0, r0) readv(r2, &(0x7f00000017c0)=[{&(0x7f0000001400)=""/32, 0x20}], 0x1) [ 108.181754][ T5440] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 03:13:28 executing program 1: r0 = syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x14, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x0, 0xc04, &(0x7f0000000f00)="$eJzs3U9sHNd5APDvDUmRlItk61iykxrB2gUcVWlUkootGwwQq2aJplFs1hSTtu7BK5FSt6KWC5JyZCNN3JMPLVA2BXppChQoXBg9BOwhh/aUAgV6JYrcigJqmrouigJ7iJFLYRYz+1ZcUZRFmKIoWb8fIH6zM9/bfX/GM7PzduAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACJ+9ddOj42ng64FAHA3vTj78tiE8z8APFDO+v4PAAAAAAAAAAAAAAD3uhRFvBcpvvl4J71ave4aOdNsXbk6NzW9c7HRVJUcqPLLfyPjEye/+PQzp57txQ8vf6d9Ol6aPXu6/sLS5fbywsrKwnx9rtU8vzS/sOt32Gv57Y5XHVC/fOnK/IULK/WJEydv2Hy19u7wQ0drk6fGXznSzR0d3v4Wg0Mf+dNvcqsnPA5FERcixaV33kuNiChi731xm31nv41WjTheNWJuarpqyGKz0VotN870OqKIqPUVer7XR3nc5qamp2f7tt/JsdiTesSbZfXLCh8vmzfbbiw3zi0u1Gcay6vN1eZSayZ1a5uq9CKeTRHtiOjctIdFDEUR344Ub32vk85FxECvHz5fPRh8+/oU+9DGXRiMiNpQxEZxH4zZPWw4ivh+pPjud8bifO7XqtueivhaGY9GXCnjtYi1Mn42IpU7yCMR7++wP3F/GYwi/ihS/HSyk+Z7Y18dV858vf6V1oWlvtzeceW+Pz/cTff4sWkkimhUR/xO+ugXOwAAAAAA3HuK+NNI8cSPjqV29M8pNlsX62cb5xa7d4V79/7rudTm5uZmLXXjWI4zObZzXMtxPceNHDs51opcPseZHNs5ruW4nuNGjp0cawO5fI4zObZzXMtxPceNHDs51gZz+RxnBqumvdnOr9dyXM9xI8fO4IENFgAAAAAAAADsaDSK+EakeOpXXqueK47qufRPTp56+cRv9D8z/tht3qfMPRER68Xunsk9lB8dnkkzKR3QM8R0n//7g/z83x8edGUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIADVUQRT0aK137QSZEioh7xanTjteGDrh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAnjKQi3o8Uf/7Vker1RhHxOxHxweYHmxFx7YPNO+2gWwwAAAAAAAAAH0OpiNcjxZMvd1ItIq7W3h1+6Ght8tT4K0cGYiBSmdKf/9Ls2dP1F5Yut5cXVlYW5utzreb5pfmF3X7cyJlm68rVuanpfWnMbY3uc/1HR15Yar++3Lz4e6s7bj88cvrcyupy4/zOm2M0ioh6/5rjVYXnpqarSi82G62q6EzabY0BAAAAAAAAeBAMpSI+iBRv/c071+edB7tz/oPbc9/+UkSRl6fy/PP1aejqdwOfqH430F3+5OSp35z4TP/yjlPWx6sJ9frc1PT0bN/qwaGbU0fy547trcn0Kcd/NVL88V/W0xN53Y3jP3A99+1vbY33m9vf6BZjvtfx//m+deVnplTE30WKX/itx+KJqp6H46bfTOS8r0aK315/POfFoTLvybz94ervyIXm4sJYmXs1UvzjlRtzn8q5n9rK/fKuO/Y+UY7/k5Hif353/Xrf5PHPI7A1am8Pb5X7zPa9Y5/G/+G+dbX8ub94B9pN18rrb1xqLC4uLFuwsLuFzXujGhb2d+Ggj0zcDeX5/xuR4h/+7F+vX+/k8//PdV9tXf/97NtbVwOT299on87/n+pbN5mvRoYGI0ZWL7eHHo0YWXn9jS80LzcuLlxcaJ089dwzE2PPjY+dHDrUu7jbWtr+yTd9v3kQleP/+5Hi+z/+2/hcXnfj9d/O1/+Ht7/RPo3/I33rDt9wvbLnppPH//8ixT9P/TCO5XW3vP7/1tb3/2P5Ivz69fk+jf+RvnXVd7xPRPxS37pjRyLG99QDAAAA8PGXUhE/zPOpY7eZT/2nSPHGf/9yzktHy7zn8/Za9XfkxaXWF04vLi6db6w2zi0u1GfbjfMLZdmfRIrOXz+eyxbV/Gpvvrk7x7s1F/svkeK5X+/ldudie/emHtnKHS9zT0SKP3nxxtzefYwjW7kTZe6/RYrxV3bOPbqVe7LM/a9I8bO/qPdyD5e5X8q5j27lnji/tDi/D8MCAAAAAAB7MpSKeCZS/P3JwdS7v72b33/edNN7n37/92jfuvm79LzKnjsVAO5x5fn/WHlW//JfXZ/Lv/H8v/WcTP/5f7v+/2/ArZY/yvm/dmeaCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDASVHEUqT45uOddG24fN01cqbZunJ1bmp652KjqSo5UOWX/0bGJ05+8elnTj3bix9e/k77dLw0e/Z0/YWly+3lhZWVhfn6XKt5fml+YdfvsNfy2x2vOqB++dKV+QsXVuoTJ07esPlq7d3hh47WJk+Nv3Kklzs3NT0925czOPSRP/0m6RbrD0UR/xspLr3zXvr34Ygi9t4Xt9l39tto1YjjVSPmpqarhiw2G63VcuNMryOKiFpfoed7fXQXxmJP6hFvltUvK3y8bN5su7HcOLe4UJ9pLK82V5tLrZnUrW2q0ot4NkW0I6IzfPPbDUURQ5Hire910o+HIwZ6/fD5F2dfHpu4fX2KfWjjLgxGRG0oYqO4D8bsHjYcRTwdKb77nbH4j+Fuv1bd9lTE18p4NOJKGa9FrJXxsxGp3EEeiXh/h/2J+8tgFPFwpPjpZCf9ZDiPfXVcOfP1+ldaF5b6cnvHlfv+/HA33ePHppEo4r3qiN9J/+m/ZwAAAACAj5EiHosUT/zoWKrmB6/PKTZbF+tnG+cWu7f1e/f+67nU5ubmZi1141iOMzm2c1zLcT3HjRw7OdaKXD7HmRzbOa7luJ7jRo6dHGsDuXyOMzm2c1zLcT3HjRw7OdYGc/kcZ3Js57iW43qOGzl2Bg9yvAAAAAAAAAB2VkQRn4sUr/2gkzaHuxO8r0Y3XvM80Mfe/wcAAP//D3xWLQ==") mknodat(r0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)=ANY=[], 0x0, 0x0) [ 108.344590][ T5444] loop1: detected capacity change from 0 to 2048 [ 108.352017][ T5444] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 108.353384][ T38] audit: type=1326 audit(1710386009.041:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5404 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7263579 code=0x7fc00000 [ 108.357806][ T5444] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 03:13:29 executing program 3: r0 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x2dabeace3a8aad92, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 03:13:29 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200030007"], 0xd) 03:13:29 executing program 1: r0 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x2dabeace3a8aad92, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 03:13:29 executing program 3: r0 = syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x14, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x0, 0xc04, &(0x7f0000000f00)="$eJzs3U9sHNd5APDvDUmRlItk61iykxrB2gUcVWlUkootGwwQq2aJplFs1hSTtu7BK5FSt6KWC5JyZCNN3JMPLVA2BXppChQoXBg9BOwhh/aUAgV6JYrcigJqmrouigJ7iJFLYRYz+1ZcUZRFmKIoWb8fIH6zM9/bfX/GM7PzduAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACJ+9ddOj42ng64FAHA3vTj78tiE8z8APFDO+v4PAAAAAAAAAAAAAAD3uhRFvBcpvvl4J71ave4aOdNsXbk6NzW9c7HRVJUcqPLLfyPjEye/+PQzp57txQ8vf6d9Ol6aPXu6/sLS5fbywsrKwnx9rtU8vzS/sOt32Gv57Y5XHVC/fOnK/IULK/WJEydv2Hy19u7wQ0drk6fGXznSzR0d3v4Wg0Mf+dNvcqsnPA5FERcixaV33kuNiChi731xm31nv41WjTheNWJuarpqyGKz0VotN870OqKIqPUVer7XR3nc5qamp2f7tt/JsdiTesSbZfXLCh8vmzfbbiw3zi0u1Gcay6vN1eZSayZ1a5uq9CKeTRHtiOjctIdFDEUR344Ub32vk85FxECvHz5fPRh8+/oU+9DGXRiMiNpQxEZxH4zZPWw4ivh+pPjud8bifO7XqtueivhaGY9GXCnjtYi1Mn42IpU7yCMR7++wP3F/GYwi/ihS/HSyk+Z7Y18dV858vf6V1oWlvtzeceW+Pz/cTff4sWkkimhUR/xO+ugXOwAAAAAA3HuK+NNI8cSPjqV29M8pNlsX62cb5xa7d4V79/7rudTm5uZmLXXjWI4zObZzXMtxPceNHDs51opcPseZHNs5ruW4nuNGjp0cawO5fI4zObZzXMtxPceNHDs51gZz+RxnBqumvdnOr9dyXM9xI8fO4IENFgAAAAAAAADsaDSK+EakeOpXXqueK47qufRPTp56+cRv9D8z/tht3qfMPRER68Xunsk9lB8dnkkzKR3QM8R0n//7g/z83x8edGUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIADVUQRT0aK137QSZEioh7xanTjteGDrh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAnjKQi3o8Uf/7Vker1RhHxOxHxweYHmxFx7YPNO+2gWwwAAAAAAAAAH0OpiNcjxZMvd1ItIq7W3h1+6Ght8tT4K0cGYiBSmdKf/9Ls2dP1F5Yut5cXVlYW5utzreb5pfmF3X7cyJlm68rVuanpfWnMbY3uc/1HR15Yar++3Lz4e6s7bj88cvrcyupy4/zOm2M0ioh6/5rjVYXnpqarSi82G62q6EzabY0BAAAAAAAAeBAMpSI+iBRv/c071+edB7tz/oPbc9/+UkSRl6fy/PP1aejqdwOfqH430F3+5OSp35z4TP/yjlPWx6sJ9frc1PT0bN/qwaGbU0fy547trcn0Kcd/NVL88V/W0xN53Y3jP3A99+1vbY33m9vf6BZjvtfx//m+deVnplTE30WKX/itx+KJqp6H46bfTOS8r0aK315/POfFoTLvybz94ervyIXm4sJYmXs1UvzjlRtzn8q5n9rK/fKuO/Y+UY7/k5Hif353/Xrf5PHPI7A1am8Pb5X7zPa9Y5/G/+G+dbX8ub94B9pN18rrb1xqLC4uLFuwsLuFzXujGhb2d+Ggj0zcDeX5/xuR4h/+7F+vX+/k8//PdV9tXf/97NtbVwOT299on87/n+pbN5mvRoYGI0ZWL7eHHo0YWXn9jS80LzcuLlxcaJ089dwzE2PPjY+dHDrUu7jbWtr+yTd9v3kQleP/+5Hi+z/+2/hcXnfj9d/O1/+Ht7/RPo3/I33rDt9wvbLnppPH//8ixT9P/TCO5XW3vP7/1tb3/2P5Ivz69fk+jf+RvnXVd7xPRPxS37pjRyLG99QDAAAA8PGXUhE/zPOpY7eZT/2nSPHGf/9yzktHy7zn8/Za9XfkxaXWF04vLi6db6w2zi0u1GfbjfMLZdmfRIrOXz+eyxbV/Gpvvrk7x7s1F/svkeK5X+/ldudie/emHtnKHS9zT0SKP3nxxtzefYwjW7kTZe6/RYrxV3bOPbqVe7LM/a9I8bO/qPdyD5e5X8q5j27lnji/tDi/D8MCAAAAAAB7MpSKeCZS/P3JwdS7v72b33/edNN7n37/92jfuvm79LzKnjsVAO5x5fn/WHlW//JfXZ/Lv/H8v/WcTP/5f7v+/2/ArZY/yvm/dmeaCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDASVHEUqT45uOddG24fN01cqbZunJ1bmp652KjqSo5UOWX/0bGJ05+8elnTj3bix9e/k77dLw0e/Z0/YWly+3lhZWVhfn6XKt5fml+YdfvsNfy2x2vOqB++dKV+QsXVuoTJ07esPlq7d3hh47WJk+Nv3Kklzs3NT0925czOPSRP/0m6RbrD0UR/xspLr3zXvr34Ygi9t4Xt9l39tto1YjjVSPmpqarhiw2G63VcuNMryOKiFpfoed7fXQXxmJP6hFvltUvK3y8bN5su7HcOLe4UJ9pLK82V5tLrZnUrW2q0ot4NkW0I6IzfPPbDUURQ5Hire910o+HIwZ6/fD5F2dfHpu4fX2KfWjjLgxGRG0oYqO4D8bsHjYcRTwdKb77nbH4j+Fuv1bd9lTE18p4NOJKGa9FrJXxsxGp3EEeiXh/h/2J+8tgFPFwpPjpZCf9ZDiPfXVcOfP1+ldaF5b6cnvHlfv+/HA33ePHppEo4r3qiN9J/+m/ZwAAAACAj5EiHosUT/zoWKrmB6/PKTZbF+tnG+cWu7f1e/f+67nU5ubmZi1141iOMzm2c1zLcT3HjRw7OdaKXD7HmRzbOa7luJ7jRo6dHGsDuXyOMzm2c1zLcT3HjRw7OdYGc/kcZ3Js57iW43qOGzl2Bg9yvAAAAAAAAAB2VkQRn4sUr/2gkzaHuxO8r0Y3XvM80Mfe/wcAAP//D3xWLQ==") mknodat(r0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)=ANY=[], 0x0, 0x0) [ 108.510789][ T5450] loop3: detected capacity change from 0 to 2048 [ 108.528151][ T5450] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 108.540489][ T5450] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 03:13:29 executing program 1: r0 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x2dabeace3a8aad92, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 03:13:29 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@link_local, @local, @val, {@generic={0x88f5, "4bf2"}}}}, 0x1c) 03:13:29 executing program 1: r0 = syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x14, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x0, 0xc04, &(0x7f0000000f00)="$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") mknodat(r0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)=ANY=[], 0x0, 0x0) [ 108.623638][ T4617] Bluetooth: hci0: command tx timeout [ 108.623695][ T5213] Bluetooth: hci1: command tx timeout 03:13:29 executing program 2: r0 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x2dabeace3a8aad92, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) [ 108.647950][ T5456] loop1: detected capacity change from 0 to 2048 03:13:29 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0}) [ 108.665459][ T5456] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 108.687282][ T5456] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 03:13:29 executing program 2: r0 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x2dabeace3a8aad92, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) [ 108.733004][ T5462] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) 03:13:29 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, 0x0, 0x0) 03:13:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000009700)={0x0, 0x0, &(0x7f00000096c0)={&(0x7f0000009680)=@mpls_getnetconf={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000001000000000000040", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="7400000024000705000400"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100716671"], 0x74}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xb) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) [ 108.786636][ T5213] Bluetooth: hci2: command tx timeout [ 108.789450][ T5466] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.795352][ T5466] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. 03:13:29 executing program 2: mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000080)=0x1f, 0x9, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8001, &(0x7f0000000000)=0x2000007fff, 0x8, 0x0) [ 108.863633][ T5213] Bluetooth: hci3: command tx timeout 03:13:29 executing program 2: openat$proc_mixer(0xffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x3, 0x0) 03:13:29 executing program 3: mbind(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000080)=0x1f, 0x9, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8001, &(0x7f0000000000)=0x2000007fff, 0x8, 0x0) 03:13:29 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) getpeername$tipc(r0, 0x0, 0x0) 03:13:29 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='ecryptfs\x00', 0x0, &(0x7f0000000040)=',l,io%bfq.io_serviced_recu\xd4\x0f\xe8rsi\x18\xc6\x8b\x8f\x1e\xa1}\xcd\x0f\xb8\xca\xbc(\xa9zm\xd4bE\x7f1\xf4\xc6\xac\b\xd0qd1\v\x98K') 03:13:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001280)=@migrate={0xa8, 0x21, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2}}, [@XFRMA_IF_ID={0x8}, @migrate={0x50, 0x11, [{@in=@loopback, @in=@empty, @in=@local, @in6=@loopback}]}]}, 0xa8}}, 0x0) 03:13:29 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x541b, 0x0) 03:13:29 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) [ 108.984707][ T5478] ecryptfs_parse_options: eCryptfs: unrecognized option [l] [ 108.987685][ T5478] ecryptfs_parse_options: eCryptfs: unrecognized option [io%bfq.io_serviced_recuÔèrsiÆ‹¡}͸ʼ(©zmÔbE1ôƬÐqd1 ˜K] [ 108.992761][ T5478] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 109.007122][ T5484] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:13:29 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000140)) [ 109.018742][ T5478] Error parsing options; rc = [-22] 03:13:29 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]}) 03:13:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 03:13:29 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x3, 0x0, &(0x7f0000000000)=0xfffffe65) [ 109.082288][ T5488] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 109.109691][ T38] audit: type=1326 audit(1710386009.801:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5489 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7260579 code=0x0 03:13:29 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000140)) 03:13:29 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 03:13:29 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept4$ax25(r0, 0x0, 0x0, 0x0) 03:13:29 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1e, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x338, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'bond_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}, {{@uncond, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30}}, {{@ipv6={@local, @dev, [], [], 'erspan0\x00', 'pimreg\x00'}, 0x0, 0xa4, 0xd4}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x394) [ 109.209273][ T5499] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 03:13:29 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000140)) 03:13:29 executing program 2: r0 = openat$autofs(0xffffff9c, &(0x7f0000000a40), 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 03:13:29 executing program 1: sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:13:30 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 03:13:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@multicast1}, {@in=@multicast2, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x1c, {0x0, 0x0, 0x600, @in=@multicast1}}]}, 0x154}}, 0x0) [ 109.355620][ T5509] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 03:13:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000140)) [ 109.381382][ T4617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.387370][ T4617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.392553][ T4617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.397926][ T4617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.401906][ T4617] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 109.406554][ T4617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.429521][ T5515] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:13:30 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) syz_usbip_server_init(0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) [ 109.499660][ T5520] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 03:13:30 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002ac0)=@raw={'raw\x00', 0x4001, 0x3, 0x330, 0x0, 0x0, 0x148, 0x180, 0x148, 0x29c, 0x240, 0x240, 0x29c, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xb4, 0x11c, 0x0, {}, [@common=@ttl={{0x24}}, @common=@socket0={{0x20}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x38c) open(0x0, 0x0, 0x0) [ 109.550399][ T5525] No such timeout policy "syz0" 03:13:30 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v1={0x2, @adiantum, 0x10, @auto="0b319a38ac61c2d8"}) 03:13:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="f30f1efa650f009b0d910f79afce01a0a7352e0f78fb66b9800000c00f326635000100000f300f01c3670f01d166b8ff7f00000f23d00f21f86635200000080f23f866b8030000000f23c80f21f86635000010000f23f8", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="3c05843052d8") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x0, 0x0, 0x3cc, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 109.609771][ T5528] fscrypt (sda1, inode 1940): Sub-block data units not yet supported with IV_INO_LBLK_32 03:13:30 executing program 0: r0 = syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x14, &(0x7f0000000300)=ANY=[], 0x1, 0xbf4, &(0x7f0000000c40)="$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") r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r1, 0x7fff) dup3(r0, r1, 0x0) [ 109.628595][ T5511] chnl_net:caif_netlink_parms(): no params data found [ 109.686545][ T5533] loop0: detected capacity change from 0 to 2048 [ 109.698115][ T5533] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 03:13:30 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="00000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8}]}}]}, 0x3c}}, 0x0) 03:13:30 executing program 1: madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/260, 0x104}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) [ 109.767875][ T5511] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.771226][ T5511] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.777795][ T5511] bridge_slave_0: entered allmulticast mode [ 109.782063][ T5511] bridge_slave_0: entered promiscuous mode [ 109.788048][ T5511] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.791337][ T5511] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.795011][ T5511] bridge_slave_1: entered allmulticast mode [ 109.799017][ T5511] bridge_slave_1: entered promiscuous mode 03:13:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="f30f1efa650f009b0d910f79afce01a0a7352e0f78fb66b9800000c00f326635000100000f300f01c3670f01d166b8ff7f00000f23d00f21f86635200000080f23f866b8030000000f23c80f21f86635000010000f23f8", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040)="3c05843052d8") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)={[0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)={0x0, 0x0, 0x3cc, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 109.868741][ T5511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.872913][ T5540] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 109.886198][ T5511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.957184][ T5511] team0: Port device team_slave_0 added [ 109.961797][ T5511] team0: Port device team_slave_1 added 03:13:30 executing program 0: madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/260, 0x104}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 03:13:30 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}}], 0x1, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 03:13:30 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) syz_usbip_server_init(0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 03:13:30 executing program 1: r0 = socket(0x18, 0x0, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) [ 110.076842][ T5552] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 110.077110][ T5511] batman_adv: batadv0: Adding interface: batadv_slave_0 03:13:30 executing program 1: r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) 03:13:30 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101201) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000040)={0x1}) [ 110.093553][ T5511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.118904][ T5511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.125004][ T5511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.128028][ T5511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.140260][ T5511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 03:13:30 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x2, @long}, 0x14) 03:13:30 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180300000000b2ff0000000000000000850000000700000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)="a17abd7c18cf849b288a9ccf2f6cd01576a60e6a75d6095b906da81195ee210632ff5cdbe4df675c43a84cd27a40c1d374c2dd354d30bcd60c2a2b860f008238d717d6cf0b4e0ac29adfbbbc393abeb74c65354f62d57392aa528e867c9db4d77bb7f63d2527382860a9ec32c53b2899227748bff0ecff1146f532d959", &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x24, r1}, 0x38) 03:13:30 executing program 1: r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="000000000000000001000000860000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000002c0)={@broadcast}, &(0x7f0000000300)=0xc) fcntl$dupfd(r2, 0x0, r2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00'}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x86}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1}, &(0x7f0000000480), &(0x7f00000004c0)='%-010d \x00'}, 0x20) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x63, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0xbe}, [@NDA_LLADDR={0xa, 0x2, @random="63ccc7696324"}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d"], 0x28}}, 0x0) [ 110.261983][ T5511] hsr_slave_0: entered promiscuous mode [ 110.266626][ T5511] hsr_slave_1: entered promiscuous mode [ 110.270266][ T5511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.274062][ T5511] Cannot create hsr debugfs directory [ 110.276889][ T5563] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:13:31 executing program 1: r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0xfffffffffffffab0, 0x0}) io_uring_enter(r0, 0x4866, 0x0, 0x0, 0x0, 0x0) 03:13:31 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180300000000b2ff0000000000000000850000000700000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)="a17abd7c18cf849b288a9ccf2f6cd01576a60e6a75d6095b906da81195ee210632ff5cdbe4df675c43a84cd27a40c1d374c2dd354d30bcd60c2a2b860f008238d717d6cf0b4e0ac29adfbbbc393abeb74c65354f62d57392aa528e867c9db4d77bb7f63d2527382860a9ec32c53b2899227748bff0ecff1146f532d959", &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x24, r1}, 0x38) 03:13:31 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180300000000b2ff0000000000000000850000000700000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x85, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)="a17abd7c18cf849b288a9ccf2f6cd01576a60e6a75d6095b906da81195ee210632ff5cdbe4df675c43a84cd27a40c1d374c2dd354d30bcd60c2a2b860f008238d717d6cf0b4e0ac29adfbbbc393abeb74c65354f62d57392aa528e867c9db4d77bb7f63d2527382860a9ec32c53b2899227748bff0ecff1146f532d959", &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x24, r1}, 0x38) [ 110.531720][ T1088] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 03:13:31 executing program 2: r0 = openat$vnet(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x541b, 0x0) 03:13:31 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001403) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x20002eab) [ 110.620313][ T1088] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 03:13:31 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x11, &(0x7f0000001000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x7}]}, &(0x7f00000010c0)='GPL\x00', 0x6}, 0x90) 03:13:31 executing program 2: iopl(0x76) r0 = getegid() syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRESOCT, @ANYBLOB="ca42ad87b11bb3b2507e03129a435e7c99104f0cd507000000046f9445631055f28a4e6777e97047e5807db4996b10208d04454ea654888bf754956945961677b348d33478b3d8f70eac439f50117ff92bea81070bba59ccec17e7d182ea9fdfde2b94e826d24492fd7f8983925947dc2b357943622c9feaa43512f4afed56e4010e2543166dfc76e5eaaa01a65f105a20fdcdb5c20c2245eecbd4c9b02c2dc995c2a8f49e54093b00df3ae49cbb07db669e4a3674c0a6397ca594873755027deb72b094a29553f674e5a44c597f0473f49684719c9445839a59a09e1c1361d72b8a1dd163eecd03bd218ba880482b1733ef3f91cbd42796bdeb13d63c3eadecb3dfe83f1d88b8b7fb053eed7e742bfff269a5c16070d4de1d198d2fdcfa404fc9e6df202578e962544794e77c2425f73fcd3d0cd1d4ffbc4ec0754e946adff5e9e83ffc586126de12ee3a2b1e347cbf598c20648bf702a38687575cb8460968949003bd44b8511dd953cfd9eef7b0cf149f77741abff47103a50ac1efb39eba528a63cca0329ef5c2247efc16857ad98255693a11149dde8fed62623d07d357b0c1251f9c4f7492c9e500", @ANYRES64], 0x1, 0x4f6, &(0x7f00000007c0)="$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") r1 = socket$netlink(0x10, 0x3, 0x0) pwritev2(r1, &(0x7f00000000c0)=[{}, {0x0}], 0x2, 0x3, 0x0, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2) r5 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01100000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x3}}]}, 0x78}}, 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8b}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000480)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x2c, '\x00', r9, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x0, 0x7, 0x9a, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000540)=[r4, r5], &(0x7f0000000580)=[{0x3, 0x4, 0xd}, {0x3, 0x5, 0x5, 0x7}, {0x5, 0x2, 0x0, 0x5}, {0x0, 0x4, 0x11, 0x1}, {0x1, 0x3, 0xa, 0x5}, {0x5, 0x1, 0x4, 0x9}], 0x10, 0x3ff}, 0x90) [ 110.682390][ T5578] loop2: detected capacity change from 0 to 512 [ 110.688229][ T5578] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! 03:13:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x2000, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0xa, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0xc63b9e35) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x26d7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r4, &(0x7f0000000040)="240000001a005f0014f9f507000909000a000000000000000000000008001e0000000000", 0x24) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x1, 0x6, 0x103, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x800) [ 110.731970][ T5578] EXT4-fs error (device loop2): ext4_do_update_inode:5082: inode #3: comm syz-executor.2: corrupted inode contents [ 110.741463][ T5578] EXT4-fs error (device loop2): ext4_dirty_inode:5942: inode #3: comm syz-executor.2: mark_inode_dirty error [ 110.750425][ T5578] EXT4-fs error (device loop2): ext4_do_update_inode:5082: inode #3: comm syz-executor.2: corrupted inode contents [ 110.757161][ T5578] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz-executor.2: mark_inode_dirty error [ 110.758511][ T1088] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.768986][ T5578] Quota error (device loop2): write_blk: dquota write failed [ 110.773132][ T5578] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 110.787475][ T5578] EXT4-fs (loop2): 1 orphan inode deleted [ 110.790183][ T5578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.798080][ T5578] ext4 filesystem being mounted at /syzkaller-testdir3278957394/syzkaller.B615Oh/37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.806920][ T1084] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 110.890628][ T1088] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 03:13:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0xd}]}}, @AF_INET={0xfffffed4, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x50}}, 0x0) 03:13:31 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001403) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x20002eab) [ 111.052436][ T1088] bridge_slave_1: left allmulticast mode [ 111.057666][ T1088] bridge_slave_1: left promiscuous mode [ 111.061115][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.119854][ T1088] bridge_slave_0: left allmulticast mode [ 111.122341][ T1088] bridge_slave_0: left promiscuous mode [ 111.143931][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state 03:13:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0xb, 0x801, 0x0, 0x0, {}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0xc, 0x1, '*[(\\#\'{\x00'}]}, 0x30}}, 0x0) [ 111.341401][ T5598] nft_compat: unsupported protocol 0 03:13:32 executing program 1: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) [ 111.408570][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.420782][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface 03:13:32 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000001900)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x100020, &(0x7f0000000540)={[{@mpol={'mpol', 0x3d, {'local'}}}]}) [ 111.436051][ T1088] bond0 (unregistering): Released all slaves [ 111.460984][ T5602] tmpfs: Bad value for 'mpol' [ 111.472559][ T5593] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:13:32 executing program 1: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) [ 111.478737][ T5594] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.506383][ T5213] Bluetooth: hci0: command tx timeout 03:13:32 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)={0x40, 0x0, 0x1}, 0x18) 03:13:32 executing program 1: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) 03:13:32 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)={0x40, 0x0, 0x1}, 0x18) 03:13:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x2000, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0xa, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0xc63b9e35) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x26d7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r4, &(0x7f0000000040)="240000001a005f0014f9f507000909000a000000000000000000000008001e0000000000", 0x24) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x1, 0x6, 0x103, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x800) [ 111.636081][ T5215] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. 03:13:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x2000, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0xa, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0xc63b9e35) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x26d7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r4, &(0x7f0000000040)="240000001a005f0014f9f507000909000a000000000000000000000008001e0000000000", 0x24) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x1, 0x6, 0x103, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x800) 03:13:32 executing program 2: r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) 03:13:32 executing program 2: recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/65, 0x41, 0x3, &(0x7f00000001c0)={0xa, 0x4e23, 0x7, @local, 0x8}, 0x1c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f00000008c0)=""/145}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="8c0800003000ffff00000000000000000000000078080100740801000b000100706f6c696365000048080280040402000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000fdffffff000000000000000000000000000000000404030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009f6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c00010000000000000000000000000000000000000000000600000000000000080000000400000000000000d311fa01000000000000000000000000040006000c00070000000000000000000c0008000000000000000000"], 0x88c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)=@newtaction={0x44, 0x32, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x3}}}]}]}, 0x44}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000a00)={0x5, 0x5, 0x4, 0x6}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000009c0), 0x10) sendmsg$nl_route(r2, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="78000000110000042abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1810c9000000000000000d001f00000034002b8008000100", @ANYRES32=r0, @ANYBLOB="080003000200000008000800", @ANYRES32=r0, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r0, @ANYBLOB="8700ca831735a4cbc66ea00800", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="080029003f7e020014001280090001007663616e0000000004000280"], 0x78}, 0x1, 0x0, 0x0, 0x4000001}, 0x40041) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x20000, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', 0x6000, 0x8, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYRESOCT, @ANYRES32, @ANYRES16=r7, @ANYRESHEX=r6, @ANYRESOCT, @ANYRES8, @ANYRESDEC], 0x2, 0x1d4, &(0x7f0000000640)="$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") r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000e40)={'vxcan0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)=@ipv6_delrule={0x74, 0x21, 0x2, 0x70bd2c, 0x25dfdbff, {0xa, 0x80, 0x20, 0x3f, 0xe4, 0x0, 0x0, 0x1, 0x8}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r5, r7}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e21}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x8b}, @FRA_DST={0x14, 0x1, @remote}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x8400) r10 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='itimer_state\x00', r0}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x64, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="85b20ae142e9895427b32ca44b7f7118869f881f3977098ccf445456890803d28aed3811391f7c14026a25693b466dfc1cb146977a0257f57df9a2053cb2392c099a0391d1fe89bd75"]}]}, 0x64}}, 0x0) close(r11) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r12, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x67, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1c}}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) [ 111.862243][ T5626] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 111.869889][ T5626] loop2: detected capacity change from 0 to 16 [ 111.889375][ T5626] erofs: (device loop2): mounted with root inode @ nid 36. [ 111.926847][ T1088] hsr_slave_0: left promiscuous mode [ 111.929746][ T1088] hsr_slave_1: left promiscuous mode [ 111.932628][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.935642][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.940108][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.942914][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.949375][ T1088] veth1_macvtap: left promiscuous mode [ 111.951778][ T1088] veth0_macvtap: left promiscuous mode [ 111.955575][ T1088] veth1_vlan: left promiscuous mode [ 111.958873][ T1088] veth0_vlan: left promiscuous mode [ 112.131630][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 112.149153][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 112.265358][ T5628] IPv6: syztnl2: Disabled Multicast RS 03:13:33 executing program 2: recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/65, 0x41, 0x3, &(0x7f00000001c0)={0xa, 0x4e23, 0x7, @local, 0x8}, 0x1c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f00000008c0)=""/145}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="8c0800003000ffff00000000000000000000000078080100740801000b000100706f6c696365000048080280040402000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000fdffffff000000000000000000000000000000000404030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009f6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c00010000000000000000000000000000000000000000000600000000000000080000000400000000000000d311fa01000000000000000000000000040006000c00070000000000000000000c0008000000000000000000"], 0x88c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)=@newtaction={0x44, 0x32, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x3}}}]}]}, 0x44}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000a00)={0x5, 0x5, 0x4, 0x6}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000009c0), 0x10) sendmsg$nl_route(r2, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="78000000110000042abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1810c9000000000000000d001f00000034002b8008000100", @ANYRES32=r0, @ANYBLOB="080003000200000008000800", @ANYRES32=r0, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r0, @ANYBLOB="8700ca831735a4cbc66ea00800", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="080029003f7e020014001280090001007663616e0000000004000280"], 0x78}, 0x1, 0x0, 0x0, 0x4000001}, 0x40041) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x20000, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', 0x6000, 0x8, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYRESOCT, @ANYRES32, @ANYRES16=r7, @ANYRESHEX=r6, @ANYRESOCT, @ANYRES8, @ANYRESDEC], 0x2, 0x1d4, &(0x7f0000000640)="$eJzsmb/L00AYx793yZv39UUEFwcXBwtWtGmSqnTpUMFREFpRx2JjqaattBHagkNxcXF0EFz9BxwcOjm4ubnqoILgYEc34SSXMznTH7S6BN7nA7187+65uydP6TfQgCCII8vXLz8/P7tabV4EcBwF7Kvx70Yaw7X4Ty8eXXheu/by9cdX7/onHs+z+zEAQmx/vgXgbd1AqPpC/L26oK5N8ETfBMd5pW+BwY7lLyHS1T4Y7qiY+5oeHFMi8O27g6B9rxv4TtS4UeNFTUU/3wSwmDG0ARyo/Jg2P5pMH7SCwB9mxZ74c87S1K5iU/1kfnWOmla/6Pu6/fTJLOqr2sDR6ueCw1W6AoaG0lXsw7bttCTa/Z820/2Nbe4/D+JkKRdpkMiXYNmR6AedjJxazN8vr/qWl+T/QUjjArA09eEwCK7/x86WMoGVMak/MRM4p/mTCTPxj3LYe1geTaalbq/V8Tt+3/MqV5xLjnPZK0sjitsN/ncg/elQ239vTazFLIxbYTh0x0A4dJO+F7ea4zbeDH7INVz6H0fxbLwHU8+s5EGZgakPl9dIFY21yRMEQRAEQRAEQRAEQRAEQezEGTDEb8IEU3+IrsK7IaN/BwAA///fvG96") r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000e40)={'vxcan0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)=@ipv6_delrule={0x74, 0x21, 0x2, 0x70bd2c, 0x25dfdbff, {0xa, 0x80, 0x20, 0x3f, 0xe4, 0x0, 0x0, 0x1, 0x8}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r5, r7}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e21}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x8b}, @FRA_DST={0x14, 0x1, @remote}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x8400) r10 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='itimer_state\x00', r0}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x64, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="85b20ae142e9895427b32ca44b7f7118869f881f3977098ccf445456890803d28aed3811391f7c14026a25693b466dfc1cb146977a0257f57df9a2053cb2392c099a0391d1fe89bd75"]}]}, 0x64}}, 0x0) close(r11) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r12, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x67, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1c}}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) [ 112.354664][ T5631] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 112.360913][ T5511] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.387325][ T5511] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 112.394612][ T5511] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 112.405898][ T5511] netdevsim netdevsim3 netdevsim3: renamed from eth3 03:13:33 executing program 2: recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/65, 0x41, 0x3, &(0x7f00000001c0)={0xa, 0x4e23, 0x7, @local, 0x8}, 0x1c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f00000008c0)=""/145}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="8c0800003000ffff00000000000000000000000078080100740801000b000100706f6c696365000048080280040402000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000fdffffff000000000000000000000000000000000404030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009f6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c00010000000000000000000000000000000000000000000600000000000000080000000400000000000000d311fa01000000000000000000000000040006000c00070000000000000000000c0008000000000000000000"], 0x88c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)=@newtaction={0x44, 0x32, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x3}}}]}]}, 0x44}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000a00)={0x5, 0x5, 0x4, 0x6}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000009c0), 0x10) sendmsg$nl_route(r2, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="78000000110000042abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1810c9000000000000000d001f00000034002b8008000100", @ANYRES32=r0, @ANYBLOB="080003000200000008000800", @ANYRES32=r0, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r0, @ANYBLOB="8700ca831735a4cbc66ea00800", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="080029003f7e020014001280090001007663616e0000000004000280"], 0x78}, 0x1, 0x0, 0x0, 0x4000001}, 0x40041) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x20000, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', 0x6000, 0x8, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYRESOCT, @ANYRES32, @ANYRES16=r7, @ANYRESHEX=r6, @ANYRESOCT, @ANYRES8, @ANYRESDEC], 0x2, 0x1d4, &(0x7f0000000640)="$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") r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000e40)={'vxcan0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)=@ipv6_delrule={0x74, 0x21, 0x2, 0x70bd2c, 0x25dfdbff, {0xa, 0x80, 0x20, 0x3f, 0xe4, 0x0, 0x0, 0x1, 0x8}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r5, r7}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e21}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x8b}, @FRA_DST={0x14, 0x1, @remote}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x8400) r10 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='itimer_state\x00', r0}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x64, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="85b20ae142e9895427b32ca44b7f7118869f881f3977098ccf445456890803d28aed3811391f7c14026a25693b466dfc1cb146977a0257f57df9a2053cb2392c099a0391d1fe89bd75"]}]}, 0x64}}, 0x0) close(r11) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r12, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x67, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1c}}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) [ 112.517358][ T5511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.522532][ T5637] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 112.543656][ T5511] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.555934][ T5258] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.559569][ T5258] bridge0: port 1(bridge_slave_0) entered forwarding state 03:13:33 executing program 0: recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000100)=""/65, 0x41, 0x3, &(0x7f00000001c0)={0xa, 0x4e23, 0x7, @local, 0x8}, 0x1c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f00000008c0)=""/145}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="8c0800003000ffff00000000000000000000000078080100740801000b000100706f6c696365000048080280040402000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000fdffffff000000000000000000000000000000000404030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009f6d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c00010000000000000000000000000000000000000000000600000000000000080000000400000000000000d311fa01000000000000000000000000040006000c00070000000000000000000c0008000000000000000000"], 0x88c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)=@newtaction={0x44, 0x32, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x3}}}]}]}, 0x44}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000a00)={0x5, 0x5, 0x4, 0x6}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000009c0), 0x10) sendmsg$nl_route(r2, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="78000000110000042abd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1810c9000000000000000d001f00000034002b8008000100", @ANYRES32=r0, @ANYBLOB="080003000200000008000800", @ANYRES32=r0, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r0, @ANYBLOB="8700ca831735a4cbc66ea00800", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="080029003f7e020014001280090001007663616e0000000004000280"], 0x78}, 0x1, 0x0, 0x0, 0x4000001}, 0x40041) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a40), 0x20000, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000c00)='./file0\x00', 0x6000, 0x8, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYRESOCT, @ANYRES32, @ANYRES16=r7, @ANYRESHEX=r6, @ANYRESOCT, @ANYRES8, @ANYRESDEC], 0x2, 0x1d4, &(0x7f0000000640)="$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") r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000e40)={'vxcan0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)=@ipv6_delrule={0x74, 0x21, 0x2, 0x70bd2c, 0x25dfdbff, {0xa, 0x80, 0x20, 0x3f, 0xe4, 0x0, 0x0, 0x1, 0x8}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r5, r7}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e21}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x8b}, @FRA_DST={0x14, 0x1, @remote}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x8400) r10 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='itimer_state\x00', r0}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x64, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="85b20ae142e9895427b32ca44b7f7118869f881f3977098ccf445456890803d28aed3811391f7c14026a25693b466dfc1cb146977a0257f57df9a2053cb2392c099a0391d1fe89bd75"]}]}, 0x64}}, 0x0) close(r11) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@empty, @local, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={'syztnl2\x00', r12, 0x700, 0x40, 0x2, 0x5, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x67, 0x0, 0x3f, 0x4, 0x0, @remote, @loopback, {[@ssrr={0x89, 0x13, 0xe2, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x5, "058716"}, @lsrr={0x83, 0x1f, 0xa9, [@rand_addr=0x64010101, @broadcast, @remote, @multicast2, @broadcast, @private=0xa010102, @empty]}, @timestamp_addr={0x44, 0x3c, 0x6d, 0x1, 0xa, [{@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1c}}, {@local, 0xfffffffd}, {@local, 0x80000000}, {@broadcast, 0x7fff}, {@broadcast, 0x7ff}, {@multicast1, 0x1}]}, @timestamp={0x44, 0xc, 0x34, 0x0, 0x0, [0x5, 0x2]}, @generic={0x83, 0xf, "1ce281af4e35b1745d312aa54b"}, @ssrr={0x89, 0x27, 0x88, [@remote, @multicast1, @empty, @multicast1, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x7, 0x3, '/'}]}}}}}) 03:13:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x2000, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0xa, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0xc63b9e35) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x26d7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r4, &(0x7f0000000040)="240000001a005f0014f9f507000909000a000000000000000000000008001e0000000000", 0x24) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x1, 0x6, 0x103, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x800) [ 112.591108][ T4639] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.594376][ T4639] bridge0: port 2(bridge_slave_1) entered forwarding state 03:13:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x2000, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0xa, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0xc63b9e35) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x26d7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r4, &(0x7f0000000040)="240000001a005f0014f9f507000909000a000000000000000000000008001e0000000000", 0x24) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x1, 0x6, 0x103, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x800) [ 112.621229][ T5639] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 112.630072][ T5639] loop0: detected capacity change from 0 to 16 [ 112.641131][ T5639] erofs: (device loop0): mounted with root inode @ nid 36. [ 112.675799][ T5639] IPv6: syztnl2: Disabled Multicast RS 03:13:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffff00000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="880000002c00270d00"/20, @ANYRES32=r4, @ANYBLOB="00000000000000000e0000000b000100666c6f77657200005800020054000300500001000b0001006d697272656400002400028020000200000000000000000000000000000000000000000001000000", @ANYRES32=r4], 0x88}}, 0x0) [ 112.767322][ T5651] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.809342][ T5651] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.814494][ T5651] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.825628][ T5511] 8021q: adding VLAN 0 to HW filter on device batadv0 03:13:33 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x40000000, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x29, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_FLAGS, @NFTA_CHAIN_HANDLE={0xc}]}], {0x14, 0x10}}, 0x74}}, 0x0) r0 = syz_io_uring_setup(0x24fa, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB=')'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) [ 112.860328][ T5511] veth0_vlan: entered promiscuous mode 03:13:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close(r0) [ 112.876126][ T5511] veth1_vlan: entered promiscuous mode [ 112.904762][ T5511] veth0_macvtap: entered promiscuous mode 03:13:33 executing program 0: r0 = openat$sr(0xffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) [ 112.911852][ T5511] veth1_macvtap: entered promiscuous mode [ 112.929464][ T5511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.935147][ T5511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.938894][ T5511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.943955][ T5511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.948422][ T5511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 03:13:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close(r0) [ 112.952766][ T5511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.960486][ T5511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.966221][ T5511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.971007][ T5511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.976225][ T5511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.981015][ T5511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.986931][ T5511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.992838][ T5511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.000940][ T5511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.014912][ T5511] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 03:13:33 executing program 0: arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x0) [ 113.019014][ T5511] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.023869][ T5511] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.027847][ T5511] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 03:13:33 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9}) 03:13:33 executing program 0: r0 = socket$inet(0x2, 0x3, 0x5f) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000200)={0x6, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast1}}}, 0x104) [ 113.091269][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.096135][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.134421][ T5252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.138240][ T5252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 03:13:33 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x75, 0x2) ioctl$USBDEVFS_RESET(r0, 0x5514) 03:13:33 executing program 3: r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000100)={'exec ', ':\x00z\x11\x04\xe9\x1bO\x9ev.\x13]v\xb4\x15i\xb09\x7f\xd4\x8e\x95\x9f\xebK\xa8\xb9%\xdf\xaa:}\xcd+\xe6\v\xa0\xc9\xde*\\\b\x1e\xbf\x8bl\x0f\xca\xb4\xe5\xab$E\x7f\xb1\r\x84\x84\xd1\xd6^E\xdcEw\x1f\x0e\x80\a\x8cC\xd6rHU\xb5k\xdd\xa2LS\x04\x00]\xa37\xae\x8cZY\xbf.Gv\xd85u\xfe\xa9\xda\"/\x86p\xd9\xdf{\x1c\x18qK'}, 0x75) 03:13:33 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0xb01}, 0x14}}, 0x0) 03:13:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x28}}, 0x0) 03:13:33 executing program 0: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 03:13:33 executing program 3: setrlimit(0x7, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x12}, 0x48) 03:13:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x28}}, 0x0) 03:13:34 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000040)=""/100, 0x64}], 0x1) write$sndseq(r1, &(0x7f0000000600)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x38) 03:13:34 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000}, [@generic={0x67, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0xd2, &(0x7f0000000080)=""/210}, 0x80) 03:13:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x4}]}, 0x24}}, 0x0) 03:13:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x6, 0x6, 0x8001, 0x0, 0x1}, 0x48) r0 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x0) r1 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r2 = socket(0x10, 0x6, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4e21, 0x7fff, @private2, 0x80000000}, 0x1c) ioctl$int_in(r3, 0x5452, &(0x7f00000002c0)=0x1) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = creat(&(0x7f0000000900)='./file0\x00', 0x80) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x6, [@struct={0x4, 0x2, 0x0, 0x4, 0x1, 0x8fb, [{0x10, 0x3, 0x64}, {0x5, 0x5, 0x4}]}, @ptr={0xc}, @volatile={0xe, 0x0, 0x0, 0x9, 0x2}, @volatile={0xe, 0x0, 0x0, 0x9, 0x3}, @ptr={0xa, 0x0, 0x0, 0x2, 0x5}, @func={0x4, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x0, 0x61, 0x5f]}}, &(0x7f00000009c0)=""/201, 0x7e, 0xc9, 0x0, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x2, '\x00', 0x0, r6, 0x1, 0x3, 0x4}, 0x48) connect$inet6(r4, &(0x7f0000000540)={0xa, 0x4e21, 0x10001, @local, 0x6}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/wireless\x00') preadv(r7, &(0x7f0000002540)=[{0x0}], 0x1, 0x2, 0x0) shutdown(r7, 0x1) shutdown(r3, 0x1) recvmsg(r3, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/48, 0x1b}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/124, 0x79}, {&(0x7f0000000400)=""/168, 0xb7}], 0x6, 0x0, 0x0, 0xb7}, 0x40000110) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)=[{&(0x7f0000000280)={0x10, 0x36, 0x400, 0x70bd28}, 0x10}, {&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\b\x00H\x00', @ANYRES32, @ANYBLOB="14004500fc00000000000000000000000000000141a86662b5cb89a5d37722ee951e6490fa5032ba8076fa012c18898df7e7a2c37bb9936918693451294b62d81073968446fd3ae57962f4dd8d73a6c2024b098e2ed51d3f453073ef4187eeaa57c9303a6615e84d8a81cc6c35eb88b91e3ec55481fd09acb3000000"], 0xb0}], 0x2, &(0x7f0000001180)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32, @ANYBLOB="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"], 0x28, 0x4040000}, 0x4801) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getroute={0x14, 0x1a, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x340040d0}, 0x800) pwritev(r0, &(0x7f0000000580)=[{&(0x7f00000002c0)="91", 0x1}], 0x1, 0xacae, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000007}) lseek(r0, 0x0, 0x3) 03:13:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8}]}, 0x34}}, 0x0) 03:13:34 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendfile(r1, r0, 0x0, 0x7) 03:13:34 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f0000000100)=[{r0}], 0x1, &(0x7f0000000140), 0x0, 0x0) 03:13:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x2000, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0xa, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0xc63b9e35) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x26d7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r4, &(0x7f0000000040)="240000001a005f0014f9f507000909000a000000000000000000000008001e0000000000", 0x24) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x1, 0x6, 0x103, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x800) 03:13:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x2000, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0xa, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r3], 0xc63b9e35) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc4, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x26d7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) write(r4, &(0x7f0000000040)="240000001a005f0014f9f507000909000a000000000000000000000008001e0000000000", 0x24) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x1, 0x6, 0x103, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x800) [ 113.593742][ T5213] Bluetooth: hci0: command tx timeout 03:13:34 executing program 1: ioperm(0x0, 0x7f, 0x5) syz_socket_connect_nvme_tcp() 03:13:34 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) getdents(r0, &(0x7f0000000040)=""/93, 0x5d) 03:13:34 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) 03:13:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x63, 0x0, &(0x7f0000000280)=0x1e) 03:13:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x81}]}}}]}, 0x3c}}, 0x0) 03:13:34 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000900)='/proc/vmstat\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 03:13:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x2a, 0x9, 0x0, 0x0, {0xb, 0x0, 0x2c00}}, 0x14}}, 0x0) 03:13:34 executing program 1: r0 = openat$procfs(0xffffff9c, &(0x7f0000000900)='/proc/vmstat\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 03:13:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@ipv6_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfd}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}]}, 0x28}}, 0x0) 03:13:34 executing program 1: r0 = openat$capi20(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000040)) 03:13:34 executing program 0: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000080)=""/157, 0x26, 0x9d, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x8, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) 03:13:34 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0x24, 0x0, 0x0) 03:13:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}]}]}]}, 0x38}}, 0x0) 03:13:34 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xf, {0xf, 0x0, "3d144d614ecc909b3487c1dd90"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000000c0)={0x2, 0x200}) 03:13:34 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/sync_on_suspend', 0x201, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000000)={0x30}, 0x30) 03:13:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14}]}]}]}, 0x38}}, 0x0) 03:13:34 executing program 0: capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) setpriority(0x2, 0x0, 0x0) [ 114.041586][ T5742] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure 03:13:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x38}}, 0x0) 03:13:34 executing program 0: capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) setpriority(0x2, 0x0, 0x0) 03:13:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000003c0)={0x1, 0x0, [{0x80000021}]}) [ 114.224771][ T1256] usb 6-1: new high-speed USB device number 2 using dummy_hcd 03:13:34 executing program 0: syz_emit_ethernet(0x38, &(0x7f0000000140)={@local, @link_local, @val, {@generic={0x88f7, "76ae6699c58a76689b3800c3ab776f89d529fcff31ef7bf4500eb62d441f96a9d5d3"}}}, 0x0) 03:13:34 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x90) 03:13:35 executing program 0: r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000180)='./file0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=','], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 03:13:35 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@cgroup=r0, 0x2f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 03:13:35 executing program 0: socket(0x21, 0x0, 0x0) 03:13:35 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/21, 0x15, 0x1) 03:13:35 executing program 0: syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x22004010, &(0x7f0000000180)={[{@data_err_abort}, {@nouid32}, {@test_dummy_encryption}, {@nodiscard}, {@abort}, {@grpjquota, 0x22}, {@usrjquota}], [], 0x2c}, 0x84, 0x48e, &(0x7f0000000600)="$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") 03:13:35 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 03:13:35 executing program 0: prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r2, 0x3, 0x6}, 0xc) 03:13:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @random="d743cc869aa5"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 03:13:35 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}}, 0x0) 03:13:35 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) 03:13:35 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup2(r0, r0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx2\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r4, 0x8979) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendfile(r1, r4, 0x0, 0xcf) 03:13:35 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}}, 0x0) 03:13:35 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000300)={0x2}, 0x4, 0x0) 03:13:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = dup2(r0, r0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx2\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r4, 0x8979) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendfile(r1, r4, 0x0, 0xcf) [ 114.604228][ T1256] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.610159][ T1256] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.617889][ T1256] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 03:13:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) [ 114.621980][ T1256] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.629934][ T1256] usb 6-1: config 0 descriptor?? 03:13:35 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}}, 0x0) 03:13:35 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000001800ff0f00000000000d0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) fchmod(r0, 0x0) 03:13:35 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc38}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000040000000000000071123a0000000000950000000000000001919017dd870c91eba4fd667cf792ddf83b11811c174295c67badac39366ac50f65090f552a78c30275"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) 03:13:35 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}}, 0x0) 03:13:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x14}, 0x14}}, 0x0) 03:13:35 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 03:13:35 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) pwritev(r0, &(0x7f0000001b80)=[{&(0x7f00000000c0)="be", 0x1}], 0x1, 0x0, 0x0) 03:13:35 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_elf64(r0, 0x0, 0xa7c) getsockopt$inet_buf(r0, 0x0, 0x34, &(0x7f0000000000)=""/3, &(0x7f0000000040)=0x3) [ 114.769986][ T5796] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.127889][ T1256] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x6 [ 115.132226][ T1256] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 115.143937][ T1256] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 115.399399][ T5254] usb 6-1: USB disconnect, device number 2 [ 115.663506][ T5213] Bluetooth: hci0: command tx timeout 03:13:36 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000200), 0x1ff, 0x2) write$9p(r0, &(0x7f0000000240)='l=\x00\x00\x00', 0x5) write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1) 03:13:36 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x2) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x80000001) creat(&(0x7f0000000000)='./bus\x00', 0x0) 03:13:36 executing program 2: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001640)={0xe, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x48) 03:13:36 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000000000008000001800000001000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='%'], 0x10) syz_emit_ethernet(0xe, &(0x7f0000000100)={@random="9ee0605606cd", @empty, @void}, 0x0) 03:13:36 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xf, {0xf, 0x0, "3d144d614ecc909b3487c1dd90"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000000c0)={0x2, 0x200}) 03:13:36 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="1400000035000b63d25a80648c2594f90424fc60", 0x14}], 0x1}, 0x0) 03:13:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, 0xffffffffffffffff}}]}, 0x28}}, 0x0) 03:13:36 executing program 0: syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x3000002, &(0x7f00000000c0)={[{@file_umask={'file_umask', 0x3d, 0x738}}, {@file_umask}, {@codepage={'codepage', 0x3d, 'iso8859-5'}}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@creator={'creator', 0x3d, "4131dbde"}}, {@type={'type', 0x3d, "f2ff0f17"}}, {@dir_umask={'dir_umask', 0x3d, 0x5}}, {@creator={'creator', 0x3d, "d147cb1f"}}]}, 0x1, 0x2e9, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 03:13:36 executing program 1: r0 = syz_clone(0x0, &(0x7f0000000000)="bf", 0x1, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/133, 0x85}], 0x1, &(0x7f0000000380)=[{&(0x7f0000000200)=""/159, 0x9f}], 0x1, 0x0) 03:13:36 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "ced22667e65386027b051fdaf84e912696931ea1520564cadd6a7d30da0604c9bf8d35db2b658454b7c7fc1c7eb471e4cb04855f9ed4da24d10ef66359c19038"}, 0x48}}, 0x40) 03:13:36 executing program 1: mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000480)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) creat(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') chdir(&(0x7f0000000700)='./file0/file0\x00') rmdir(&(0x7f0000000340)='./file0\x00') chdir(&(0x7f0000000180)='./file0\x00') 03:13:36 executing program 3: clock_settime(0xfffffffffffffffd, &(0x7f0000000000)) 03:13:36 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x2) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x80000001) creat(&(0x7f0000000000)='./bus\x00', 0x0) 03:13:36 executing program 3: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x7d, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)=0xfa) 03:13:36 executing program 1: r0 = io_uring_setup(0x118e, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000600)={0x1, 0x1, 0x0, &(0x7f00000002c0)=[{0x0}], 0x0}, 0x20) 03:13:36 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000140)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 03:13:36 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000e40), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) [ 116.274049][ T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd 03:13:36 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000140)='leases_conflict\x00', r0}, 0x10) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) unlink(&(0x7f0000000340)='./file0\x00') 03:13:37 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r0, &(0x7f0000006700)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="a6", 0x1}, {0x0, 0x2}], 0x2}}], 0x1, 0x0) 03:13:37 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 03:13:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x294, 0x0, 0x2b8, 0x182, 0xe8, 0x0, 0x1cc, 0x3a8, 0x3a8, 0x1cc, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xe8, 0x0, {0x0, 0xe0ffff00000000}, [@common=@unspec=@connlabel={{0x24}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f0) 03:13:37 executing program 1: setitimer(0x0, &(0x7f00000000c0)={{}, {0x0, 0x80000000}}, 0x0) 03:13:37 executing program 3: setpgid(0x0, 0x0) 03:13:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x7}]}}}]}, 0x3c}}, 0x0) 03:13:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDENABIO(r0, 0x4b36) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 03:13:37 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@cpuset_v2_mode}, {@none}, {}, {@subsystem='net_prio'}, {@subsystem='cpu'}, {@name={'name', 0x3d, '9p\x00'}}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@appraise_type}]}) [ 116.546284][ T5860] cgroup: subsys name conflicts with all 03:13:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000e80)={'veth0_vlan\x00', &(0x7f0000000dc0)=@ethtool_eeprom={0x26, 0x80}}) 03:13:37 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000006500014000000000000042a12a"], 0x24}}, 0x0) 03:13:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000e80)={'veth0_vlan\x00', &(0x7f0000000dc0)=@ethtool_eeprom={0x26, 0x80}}) 03:13:37 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x2, @short}, 0x9) [ 116.663665][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.668789][ T7] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.690150][ T7] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.703343][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.730763][ T4617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.736354][ T7] usb 7-1: config 0 descriptor?? [ 116.739227][ T4617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.743385][ T4617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.748168][ T4617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.763889][ T4617] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 116.766773][ T4617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 03:13:37 executing program 1: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000080)={[{@space_cache_v2}, {@subvolid}, {@acl}, {@notreelog}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@notreelog}]}, 0x1, 0x5102, &(0x7f000000a2c0)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.log\x00', 0x22a42, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) 03:13:37 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)={0x14, r2, 0x301, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) 03:13:37 executing program 3: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001900)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)='\\', 0x1}], 0x1}}], 0x2, 0x0) 03:13:37 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, 0x14, 0x601, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "9d828e73027c7872bd"}]}, 0x24}}, 0x0) 03:13:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x2, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x4}}]}, 0x20}}, 0x0) 03:13:37 executing program 3: r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x10d, 0x83, 0x0, 0x0) [ 117.176969][ T5873] loop1: detected capacity change from 0 to 32768 [ 117.186699][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 117.194110][ T5873] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (5873) [ 117.257114][ T7] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x6 [ 117.261678][ T7] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 117.266456][ T5873] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.273752][ T5873] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 117.277868][ T5873] BTRFS info (device loop1): using free-space-tree [ 117.286790][ T7] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 117.456484][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.460711][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.464582][ T5866] bridge_slave_0: entered allmulticast mode [ 117.469051][ T5866] bridge_slave_0: entered promiscuous mode [ 117.479231][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.485159][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.487452][ T5219] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.488565][ T5866] bridge_slave_1: entered allmulticast mode [ 117.506534][ T5866] bridge_slave_1: entered promiscuous mode [ 117.609327][ T5254] usb 7-1: USB disconnect, device number 2 [ 117.731532][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.743428][ T5213] Bluetooth: hci0: command tx timeout [ 117.745066][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.757854][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.824967][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.849145][ T5866] team0: Port device team_slave_0 added [ 117.855190][ T5866] team0: Port device team_slave_1 added [ 117.918200][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.921261][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.931967][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.939458][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.942682][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.954908][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.965165][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.019134][ T5866] hsr_slave_0: entered promiscuous mode [ 118.022315][ T5866] hsr_slave_1: entered promiscuous mode [ 118.053081][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 03:13:38 executing program 1: set_mempolicy(0x0, &(0x7f0000000040)=0x8000000000000001, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000040), 0x1d4, r0) 03:13:38 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000080)={[{@space_cache_v2}, {@subvolid}, {@acl}, {@notreelog}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@notreelog}]}, 0x1, 0x5102, &(0x7f000000a2c0)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.log\x00', 0x22a42, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) 03:13:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x30}}, 0x0) 03:13:38 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0xf, {0xf, 0x0, "3d144d614ecc909b3487c1dd90"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000000c0)={0x2, 0x200}) 03:13:38 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x16) waitid(0x0, 0x0, 0x0, 0x41000002, 0x0) [ 118.310039][ T52] bridge_slave_1: left allmulticast mode [ 118.312394][ T52] bridge_slave_1: left promiscuous mode [ 118.316439][ T52] bridge0: port 2(bridge_slave_1) entered disabled state 03:13:39 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) socket$inet_udplite(0xa, 0x2, 0x88) [ 118.331047][ T52] bridge_slave_0: left allmulticast mode [ 118.337003][ T52] bridge_slave_0: left promiscuous mode [ 118.339748][ T52] bridge0: port 1(bridge_slave_0) entered disabled state 03:13:39 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) socket$inet_udplite(0xa, 0x2, 0x88) 03:13:39 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect(r0, &(0x7f0000000300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80) 03:13:39 executing program 3: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=./file0,upperdir=./file1']) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000080)='./bus\x00') r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x2000000) [ 118.585293][ T5254] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 118.614148][ T5924] evm: overlay not supported [ 118.626931][ T110] ------------[ cut here ]------------ [ 118.629685][ T110] WARNING: CPU: 1 PID: 110 at fs/ext4/inode.c:5156 ext4_write_inode+0x474/0x540 [ 118.633173][ T110] Modules linked in: 03:13:39 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/153, 0x99, 0x4f) [ 118.635594][ T110] CPU: 1 PID: 110 Comm: kswapd0 Not tainted 6.8.0-syzkaller-06619-ge5e038b7ae9d #0 [ 118.641340][ T110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 118.646943][ T110] RIP: 0010:ext4_write_inode+0x474/0x540 [ 118.649647][ T110] Code: 71 48 ff 4c 8b 64 24 20 4d 85 e4 74 0d e8 54 71 48 ff 4c 89 e7 e8 cc da c5 ff e8 47 71 48 ff e9 ef fd ff ff e8 3d 71 48 ff 90 <0f> 0b 90 e9 df fd ff ff e8 ff 09 a4 ff e9 17 fc ff ff e8 f5 09 a4 [ 118.659487][ T110] RSP: 0018:ffffc90000ed7150 EFLAGS: 00010293 [ 118.662244][ T110] RAX: 0000000000000000 RBX: 1ffff920001dae2a RCX: ffffffff82451b7f [ 118.666021][ T110] RDX: ffff88801ab18000 RSI: ffffffff82451f43 RDI: 0000000000000005 03:13:39 executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) [ 118.669767][ T110] RBP: 0000000000000800 R08: 0000000000000005 R09: 0000000000000000 [ 118.677469][ T110] R10: 0000000000000800 R11: 0000000000000002 R12: ffff8880287770b0 [ 118.680711][ T110] R13: ffffc90000ed7320 R14: dffffc0000000000 R15: 000000000003d40c [ 118.684994][ T110] FS: 0000000000000000(0000) GS:ffff88802c300000(0000) knlGS:0000000000000000 [ 118.688654][ T110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.691351][ T110] CR2: 0000000032f2b000 CR3: 0000000020382000 CR4: 0000000000350ef0 [ 118.694705][ T110] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 118.698036][ T110] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 118.701248][ T110] Call Trace: [ 118.702645][ T110] [ 118.703964][ T110] ? show_regs+0x8c/0xa0 [ 118.705699][ T110] ? __warn+0xe5/0x390 [ 118.707446][ T110] ? ext4_write_inode+0x474/0x540 [ 118.709376][ T110] ? report_bug+0x3c0/0x580 [ 118.711154][ T110] ? handle_bug+0x3d/0x70 [ 118.712786][ T110] ? exc_invalid_op+0x17/0x50 [ 118.714724][ T110] ? asm_exc_invalid_op+0x1a/0x20 [ 118.717032][ T110] ? ext4_write_inode+0xaf/0x540 [ 118.719330][ T110] ? ext4_write_inode+0x473/0x540 [ 118.721636][ T110] ? ext4_write_inode+0x474/0x540 [ 118.724106][ T110] ? __pfx_ext4_write_inode+0x10/0x10 [ 118.726233][ T110] ? do_raw_spin_lock+0x12d/0x2c0 03:13:39 executing program 2: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000080)={[{@space_cache_v2}, {@subvolid}, {@acl}, {@notreelog}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@notreelog}]}, 0x1, 0x5102, &(0x7f000000a2c0)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000001c0)='.log\x00', 0x22a42, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) [ 118.729079][ T110] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 118.731651][ T110] ? wbc_attach_and_unlock_inode+0x561/0x910 [ 118.734888][ T110] __writeback_single_inode+0xa9a/0xe90 [ 118.737455][ T110] ? __pfx___writeback_single_inode+0x10/0x10 [ 118.740272][ T110] ? _raw_spin_unlock+0x28/0x50 [ 118.742540][ T110] ? wbc_attach_and_unlock_inode+0x561/0x910 [ 118.745375][ T110] writeback_single_inode+0x2b5/0x5a0 [ 118.747821][ T110] write_inode_now+0x16e/0x1e0 [ 118.750080][ T110] ? __pfx_write_inode_now+0x10/0x10 [ 118.752490][ T110] ? do_raw_spin_unlock+0x172/0x230 [ 118.755043][ T110] iput.part.0+0x46f/0x7c0 [ 118.757141][ T110] ? __pfx_ext4_drop_inode+0x10/0x10 [ 118.759609][ T110] iput+0x5c/0x80 [ 118.761321][ T110] dentry_unlink_inode+0x295/0x440 [ 118.763767][ T110] __dentry_kill+0x1d0/0x600 [ 118.765879][ T110] dput.part.0+0x4b1/0x9b0 [ 118.767982][ T110] ? __pfx_ovl_destroy_inode+0x10/0x10 [ 118.770516][ T110] dput+0x1f/0x30 [ 118.772188][ T110] ovl_destroy_inode+0x3e/0x190 [ 118.774470][ T110] ? __pfx_ovl_destroy_inode+0x10/0x10 [ 118.776948][ T110] destroy_inode+0xc4/0x1b0 [ 118.779069][ T110] iput.part.0+0x573/0x7c0 [ 118.781154][ T110] ? __pfx_generic_delete_inode+0x10/0x10 [ 118.786913][ T110] iput+0x5c/0x80 [ 118.788873][ T110] dentry_unlink_inode+0x295/0x440 [ 118.791438][ T110] __dentry_kill+0x1d0/0x600 [ 118.795043][ T110] ? shrink_dentry_list+0x11a/0x5d0 [ 118.797481][ T110] shrink_dentry_list+0x140/0x5d0 [ 118.799847][ T110] prune_dcache_sb+0xeb/0x150 [ 118.802067][ T110] ? __pfx_prune_dcache_sb+0x10/0x10 [ 118.804712][ T110] super_cache_scan+0x32a/0x550 [ 118.807031][ T110] do_shrink_slab+0x44f/0x1160 [ 118.809323][ T110] shrink_slab+0xa87/0x1310 [ 118.811465][ T110] ? shrink_slab+0x86a/0x1310 [ 118.813785][ T110] ? __pfx_shrink_slab+0x10/0x10 [ 118.816021][ T110] ? find_held_lock+0x2d/0x110 [ 118.818256][ T110] ? mem_cgroup_calculate_protection+0x45/0x500 [ 118.821162][ T110] shrink_one+0x493/0x7b0 [ 118.823182][ T110] ? shrink_node+0x217c/0x3770 [ 118.825513][ T110] shrink_node+0x2191/0x3770 [ 118.828164][ T110] ? shrink_node+0x1f10/0x3770 [ 118.830383][ T110] ? __pfx_shrink_node+0x10/0x10 [ 118.832713][ T110] ? pgdat_balanced+0x1b2/0x210 [ 118.835452][ T110] balance_pgdat+0x9d0/0x1a90 [ 118.837601][ T110] ? __pfx_balance_pgdat+0x10/0x10 [ 118.840016][ T110] ? __pfx___lock_acquire+0x10/0x10 [ 118.842431][ T110] ? lock_acquire+0x1b1/0x540 [ 118.844719][ T110] ? __pfx___might_resched+0x10/0x10 [ 118.847072][ T110] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 118.849758][ T110] kswapd+0x5c1/0xc10 [ 118.851661][ T110] ? __pfx_kswapd+0x10/0x10 [ 118.853977][ T110] ? __pfx_autoremove_wake_function+0x10/0x10 [ 118.856471][ T110] ? lockdep_hardirqs_on+0x7c/0x110 [ 118.858894][ T110] ? __kthread_parkme+0x148/0x220 [ 118.861260][ T110] ? __pfx_kswapd+0x10/0x10 [ 118.863498][ T110] kthread+0x2c1/0x3a0 [ 118.863522][ T5213] Bluetooth: hci3: command tx timeout [ 118.865483][ T110] ? _raw_spin_unlock_irq+0x23/0x50 [ 118.865820][ T110] ? __pfx_kthread+0x10/0x10 [ 118.865852][ T110] ret_from_fork+0x45/0x80 [ 118.865878][ T110] ? __pfx_kthread+0x10/0x10 [ 118.865905][ T110] ret_from_fork_asm+0x1a/0x30 [ 118.865943][ T110] [ 118.881483][ T110] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 118.884829][ T110] CPU: 1 PID: 110 Comm: kswapd0 Not tainted 6.8.0-syzkaller-06619-ge5e038b7ae9d #0 [ 118.889043][ T110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 [ 118.893667][ T110] Call Trace: [ 118.895234][ T110] [ 118.896603][ T110] dump_stack_lvl+0x3d/0x1f0 [ 118.898775][ T110] panic+0x6f5/0x7a0 [ 118.900625][ T110] ? __pfx_panic+0x10/0x10 [ 118.902695][ T110] ? show_trace_log_lvl+0x363/0x500 [ 118.905122][ T110] ? check_panic_on_warn+0x1f/0xb0 [ 118.907475][ T110] ? ext4_write_inode+0x474/0x540 [ 118.909794][ T110] check_panic_on_warn+0xab/0xb0 [ 118.912110][ T110] __warn+0xf1/0x390 [ 118.913841][ T110] ? ext4_write_inode+0x474/0x540 [ 118.916029][ T110] report_bug+0x3c0/0x580 [ 118.918042][ T110] handle_bug+0x3d/0x70 [ 118.919972][ T110] exc_invalid_op+0x17/0x50 [ 118.922082][ T110] asm_exc_invalid_op+0x1a/0x20 [ 118.924355][ T110] RIP: 0010:ext4_write_inode+0x474/0x540 [ 118.926927][ T110] Code: 71 48 ff 4c 8b 64 24 20 4d 85 e4 74 0d e8 54 71 48 ff 4c 89 e7 e8 cc da c5 ff e8 47 71 48 ff e9 ef fd ff ff e8 3d 71 48 ff 90 <0f> 0b 90 e9 df fd ff ff e8 ff 09 a4 ff e9 17 fc ff ff e8 f5 09 a4 [ 118.935650][ T110] RSP: 0018:ffffc90000ed7150 EFLAGS: 00010293 [ 118.938461][ T110] RAX: 0000000000000000 RBX: 1ffff920001dae2a RCX: ffffffff82451b7f [ 118.942221][ T110] RDX: ffff88801ab18000 RSI: ffffffff82451f43 RDI: 0000000000000005 [ 118.945816][ T110] RBP: 0000000000000800 R08: 0000000000000005 R09: 0000000000000000 [ 118.949367][ T110] R10: 0000000000000800 R11: 0000000000000002 R12: ffff8880287770b0 [ 118.952997][ T110] R13: ffffc90000ed7320 R14: dffffc0000000000 R15: 000000000003d40c [ 118.956537][ T110] ? ext4_write_inode+0xaf/0x540 [ 118.958824][ T110] ? ext4_write_inode+0x473/0x540 [ 118.961123][ T110] ? __pfx_ext4_write_inode+0x10/0x10 [ 118.963636][ T110] ? do_raw_spin_lock+0x12d/0x2c0 [ 118.965921][ T110] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 118.968389][ T110] ? wbc_attach_and_unlock_inode+0x561/0x910 [ 118.971129][ T110] __writeback_single_inode+0xa9a/0xe90 [ 118.973600][ T110] ? __pfx___writeback_single_inode+0x10/0x10 [ 118.976311][ T110] ? _raw_spin_unlock+0x28/0x50 [ 118.978472][ T110] ? wbc_attach_and_unlock_inode+0x561/0x910 [ 118.981037][ T110] writeback_single_inode+0x2b5/0x5a0 [ 118.983542][ T110] write_inode_now+0x16e/0x1e0 [ 118.985757][ T110] ? __pfx_write_inode_now+0x10/0x10 [ 118.988211][ T110] ? do_raw_spin_unlock+0x172/0x230 [ 118.990570][ T110] iput.part.0+0x46f/0x7c0 [ 118.992636][ T110] ? __pfx_ext4_drop_inode+0x10/0x10 [ 118.995020][ T110] iput+0x5c/0x80 [ 118.996728][ T110] dentry_unlink_inode+0x295/0x440 [ 118.999101][ T110] __dentry_kill+0x1d0/0x600 [ 119.001229][ T110] dput.part.0+0x4b1/0x9b0 [ 119.003314][ T110] ? __pfx_ovl_destroy_inode+0x10/0x10 [ 119.006006][ T110] dput+0x1f/0x30 [ 119.007795][ T110] ovl_destroy_inode+0x3e/0x190 [ 119.010013][ T110] ? __pfx_ovl_destroy_inode+0x10/0x10 [ 119.012495][ T110] destroy_inode+0xc4/0x1b0 [ 119.014699][ T110] iput.part.0+0x573/0x7c0 [ 119.016826][ T110] ? __pfx_generic_delete_inode+0x10/0x10 [ 119.019466][ T110] iput+0x5c/0x80 [ 119.021140][ T110] dentry_unlink_inode+0x295/0x440 [ 119.023533][ T110] __dentry_kill+0x1d0/0x600 [ 119.025868][ T110] ? shrink_dentry_list+0x11a/0x5d0 [ 119.028324][ T110] shrink_dentry_list+0x140/0x5d0 [ 119.030639][ T110] prune_dcache_sb+0xeb/0x150 [ 119.032875][ T110] ? __pfx_prune_dcache_sb+0x10/0x10 [ 119.035265][ T110] super_cache_scan+0x32a/0x550 [ 119.037540][ T110] do_shrink_slab+0x44f/0x1160 [ 119.039785][ T110] shrink_slab+0xa87/0x1310 [ 119.041908][ T110] ? shrink_slab+0x86a/0x1310 03:13:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000180)={0x5}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f0000000140)={0xf3, 0x1, 0xffffffffffff29dd}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 119.044123][ T110] ? __pfx_shrink_slab+0x10/0x10 [ 119.046591][ T110] ? find_held_lock+0x2d/0x110 [ 119.048803][ T110] ? mem_cgroup_calculate_protection+0x45/0x500 [ 119.051647][ T110] shrink_one+0x493/0x7b0 [ 119.053684][ T110] ? shrink_node+0x217c/0x3770 [ 119.055887][ T110] shrink_node+0x2191/0x3770 [ 119.058011][ T110] ? shrink_node+0x1f10/0x3770 [ 119.060235][ T110] ? __pfx_shrink_node+0x10/0x10 [ 119.062418][ T110] ? pgdat_balanced+0x1b2/0x210 [ 119.064582][ T110] balance_pgdat+0x9d0/0x1a90 [ 119.066657][ T110] ? __pfx_balance_pgdat+0x10/0x10 [ 119.068751][ T110] ? __pfx___lock_acquire+0x10/0x10 [ 119.071147][ T110] ? lock_acquire+0x1b1/0x540 [ 119.073322][ T110] ? __pfx___might_resched+0x10/0x10 [ 119.075698][ T110] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 119.078380][ T110] kswapd+0x5c1/0xc10 [ 119.080257][ T110] ? __pfx_kswapd+0x10/0x10 [ 119.082330][ T110] ? __pfx_autoremove_wake_function+0x10/0x10 [ 119.085024][ T110] ? lockdep_hardirqs_on+0x7c/0x110 [ 119.087353][ T110] ? __kthread_parkme+0x148/0x220 [ 119.089687][ T110] ? __pfx_kswapd+0x10/0x10 [ 119.091811][ T110] kthread+0x2c1/0x3a0 [ 119.093738][ T110] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.096171][ T110] ? __pfx_kthread+0x10/0x10 [ 119.098138][ T110] ret_from_fork+0x45/0x80 [ 119.099985][ T110] ? __pfx_kthread+0x10/0x10 [ 119.101887][ T110] ret_from_fork_asm+0x1a/0x30 [ 119.103874][ T110] [ 119.105966][ T110] Kernel Offset: disabled [ 119.108152][ T110] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:13:39 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=0000000000000762 RCX=ffffffff816b30ce RDX=fffffbfff27a4c4e RSI=0000000000000008 RDI=ffffffff93d26268 RBP=ffffc90007037910 RSP=ffffc900070377c0 R8 =0000000000000000 R9 =fffffbfff27a4c4d R10=ffffffff93d2626f R11=0000000000000002 R12=ffff888014f84880 R13=0000000000000004 R14=0000000000000002 R15=1ffff92000e06f00 RIP=ffffffff816b30d8 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032f2c000 CR3=000000001d674000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 41581eb200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 32322035312e322e 302e303120343537 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000bc0396 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000244fc70 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000bc039b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000244fc6e ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000000000bc2ea6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000244fc6b ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000bbce89 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000244fc6c ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000006 0000000000bc2d32 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000244fc6a ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000000bbe29d ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84eff2d5 RDI=ffffffff9488a3c0 RBP=ffffffff9488a380 RSP=ffffc90000ed6b40 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000005 R12=0000000000000000 R13=000000000000006b R14=ffffffff84eff270 R15=0000000000000000 RIP=ffffffff84eff2ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032f2b000 CR3=0000000020382000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000400000 Opmask02=0000000006000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeff9a5ac0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6463685f796d6d75 6420676e69737520 33207265626d756e 2065636976656400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6463625573676775 6420676463737520 3320726562677564 2065636376656400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e20203a29696574 00002e6d65000021 64612063616d2070 206469206f612064 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6500003a29000020 00002e6265000020 6461202020642065 20206120203a2020 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f7c6b66790a0024 676f666865787a2a 6f627e2a6f7c6665 792a6e667f657d2a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7e2a6f7f7b63647f 2a796f79796f786e 6e6b2a696b672a7a 6f6f612a657e2a6e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffffff8d802140 RCX=0000000000000001 RDX=1ffffffff1b00451 RSI=ffffffff8b0cc420 RDI=ffffffff8d802288 RBP=000000000007531c RSP=ffffc90000530cc0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000007 R12=0000000000000002 R13=ffffffff8d800900 R14=ffff88802c43f118 R15=000000000007531c RIP=ffffffff816a3bcd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff3d2c96d00 ffffffff 00c00000 GS =0000 ffff88802c400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000c005660000 CR3=000000001cbd0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=055985a66a8b309d 9569421f281ee90f 055985a66a8b309d 9569421f281ee90f 055985a66a8b309d 9569421f281ee90f 055985a66a8b309d 9569421f281ee90f ZMM18=0620b4fc1ec200d4 11caf45f35ab873c 0620b4fc1ec200d4 11caf45f35ab873c 0620b4fc1ec200d4 11caf45f35ab873c 0620b4fc1ec200d4 11caf45f35ab873c ZMM19=730c000000000000 0000000000000004 730c000000000000 0000000000000003 730c000000000000 0000000000000002 730c000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=9569421f9569421f 9569421f9569421f 9569421f9569421f 9569421f9569421f 9569421f9569421f 9569421f9569421f 9569421f9569421f 9569421f9569421f ZMM22=6a8b309d6a8b309d 6a8b309d6a8b309d 6a8b309d6a8b309d 6a8b309d6a8b309d 6a8b309d6a8b309d 6a8b309d6a8b309d 6a8b309d6a8b309d 6a8b309d6a8b309d ZMM23=055985a6055985a6 055985a6055985a6 055985a6055985a6 055985a6055985a6 055985a6055985a6 055985a6055985a6 055985a6055985a6 055985a6055985a6 ZMM24=35ab873c35ab873c 35ab873c35ab873c 35ab873c35ab873c 35ab873c35ab873c 35ab873c35ab873c 35ab873c35ab873c 35ab873c35ab873c 35ab873c35ab873c ZMM25=11caf45f11caf45f 11caf45f11caf45f 11caf45f11caf45f 11caf45f11caf45f 11caf45f11caf45f 11caf45f11caf45f 11caf45f11caf45f 11caf45f11caf45f ZMM26=1ec200d41ec200d4 1ec200d41ec200d4 1ec200d41ec200d4 1ec200d41ec200d4 1ec200d41ec200d4 1ec200d41ec200d4 1ec200d41ec200d4 1ec200d41ec200d4 ZMM27=0620b4fc0620b4fc 0620b4fc0620b4fc 0620b4fc0620b4fc 0620b4fc0620b4fc 0620b4fc0620b4fc 0620b4fc0620b4fc 0620b4fc0620b4fc 0620b4fc0620b4fc ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6f0c00006f0c0000 6f0c00006f0c0000 6f0c00006f0c0000 6f0c00006f0c0000 6f0c00006f0c0000 6f0c00006f0c0000 6f0c00006f0c0000 6f0c00006f0c0000 info registers vcpu 3 CPU#3 EAX=81d41abf EBX=ffffffff ECX=ffffffff EDX=81d46519 ESI=ffffffff EDI=ffffffff EBP=f6d3cce0 ESP=ffeb0210 EIP=f7281ab8 EFL=00000297 [--S-APC] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 569dd400 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000031622000 CR3=000000004f390000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000012000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000